{"report_id":"0e9a99b2-eb27-4614-9990-65e45f8fd061","version":0,"status":"done","tags":[],"date":"2026-09-19T22:42:43Z","url":{"schema":"http","addr":"zynnex.pro/","fqdn":"zynnex.pro","domain":"zynnex.pro","tld":"pro"},"ip":{"addr":"104.21.38.172","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"zynnex.pro/","fqdn":"zynnex.pro","domain":"zynnex.pro","tld":"pro"},"title":"Solid Wood Toy Storage Rack","dom":{"size":664041,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (19491)","md5":"395e177a6a717aa6a66272067140e5d6","sha1":"8e2e2e57ea3f3936af0471a1fcdab84ef4004ed6","sha256":"13d68a929133b2c369cf4a9d6e984be41b0feb816e7593a963f5940ca124d4c2","sha512":"ef668f0597bca733fefce0497e603d8c626a0a49c103f69ab46842316249eb47e6570349372dda7014cb500356e602f79b267d10643f0044e35fb1c74916251d","ssdeep":"6144:Gec4lFL7c3V3rbXNK9XXSFO3AL2n9LNKLcp:Gec4jnc3V3/XNqSFAAi9r","tlshash":"2ae442b9509606b74f60e35cdaa27d43e2ec04075b96554ce6ecbfa0328fe50326d8f6","dom_hash":"domhash980048e784981ac4ee5ab69fd8e2910e","first_seen":"2026-09-19T22:43:13.599783Z","last_seen":"2026-09-19T22:43:13.599783Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"zynnex.pro/","fqdn":"zynnex.pro","domain":"zynnex.pro","tld":"pro"},"ip":{"addr":"104.21.38.172","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-24T22:42:43Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"zynnex.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zynnex.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zynnex.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zynnex.pro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zynnex.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.loot.co.za","ip":{"addr":"54.73.16.8","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"2002-03-09","domain_rank":945014,"first_seen":"2017-02-04T08:58:01Z","last_seen":"2026-09-19T11:17:43.417956Z","alert_count":0,"request_count":36,"received_data":3187998,"sent_data":18597,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"X-Clacks-Overhead","description":"X-Clacks-Overhead is a non-standard HTTP header used to transmit tribute messages within server responses.","website":"https://xclacksoverhead.org/home/about","common_platform_enumeration":"","icon":"XClacksOverhead.svg","categories":["Miscellaneous"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]}]},{"fqdn":"dtm-dre.platform.hicloud.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2008-03-22","domain_rank":501939,"first_seen":"2020-12-11T08:29:14Z","last_seen":"2026-09-19T11:17:44.709541Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":513,"comment":"","tags":null,"fingerprints":null},{"fqdn":"app.termly.io","ip":{"addr":"104.18.15.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-07-26","domain_rank":65677,"first_seen":"2017-12-19T09:24:56Z","last_seen":"2026-09-19T10:16:34.685099Z","alert_count":0,"request_count":10,"received_data":527911,"sent_data":5321,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdnv3.loot.co.za","ip":{"addr":"104.20.43.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2002-03-09","domain_rank":0,"first_seen":"2022-09-24T02:31:13Z","last_seen":"2026-09-19T11:17:45.213552Z","alert_count":0,"request_count":8,"received_data":21112,"sent_data":4612,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"X-Clacks-Overhead","description":"X-Clacks-Overhead is a non-standard HTTP header used to transmit tribute messages within server responses.","website":"https://xclacksoverhead.org/home/about","common_platform_enumeration":"","icon":"XClacksOverhead.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-09-13T22:44:45.310895Z","alert_count":0,"request_count":6,"received_data":2887574,"sent_data":2892,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"s.cartbooster.io","ip":{"addr":"104.21.24.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-12-08","domain_rank":1846862,"first_seen":"2024-02-13T09:44:39Z","last_seen":"2026-09-19T22:05:10.844517Z","alert_count":0,"request_count":2,"received_data":3530,"sent_data":918,"comment":"","tags":null,"fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.251.153.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-09-13T23:01:27.934223Z","alert_count":0,"request_count":3,"received_data":1617,"sent_data":2928,"comment":"","tags":null,"fingerprints":null},{"fqdn":"zynnex.pro","ip":{"addr":"172.67.137.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-09-19T22:05:09.965005Z","last_seen":"2026-09-19T22:05:09.965005Z","alert_count":10,"request_count":2,"received_data":612094,"sent_data":1186,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]}]},{"fqdn":"s.retargeted.co","ip":{"addr":"172.67.206.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-01-24","domain_rank":543992,"first_seen":"2019-05-22T13:57:13Z","last_seen":"2026-09-17T10:49:07.482688Z","alert_count":0,"request_count":2,"received_data":90852,"sent_data":904,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.google.no","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2001-02-26","domain_rank":92680,"first_seen":"2012-06-26T23:22:08Z","last_seen":"2026-09-14T00:01:55.00998Z","alert_count":0,"request_count":1,"received_data":578,"sent_data":841,"comment":"","tags":null,"fingerprints":null},{"fqdn":"umami.sentientgenesis.com","ip":{"addr":"102.213.7.82","port":443,"asn":329206,"as":"RL5-AS","country":"South Africa","country_code":"ZA"},"domain_registered":"2025-02-03","domain_rank":7209779,"first_seen":"2025-05-31T06:26:42.158995Z","last_seen":"2026-09-19T11:17:43.500277Z","alert_count":0,"request_count":1,"received_data":166,"sent_data":460,"comment":"","tags":null,"fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.loot.co.za/_next/static/chunks/webpack-f10e8f26ac3a7a445782.js","fqdn":"www.loot.co.za","domain":"loot.co.za","tld":"co.za"},"ip":{"addr":"54.73.16.8","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ef1de9a165e5fbba964e22f5d82c484","sha1":"21b660b06605f44c33d2b611f3f55dfc0741a25a","sha256":"2a3a35edf71feb10af423a9450aef3b42df4e012403befb2fa643e91dbfcbf6a","sha512":"30344749ac7dff5070a24c661e78bc4aff7ce3aae15ca7d378633332cc6f6185f93814cf70ae0c41ae4af468a9f8bd82cad946b11a210ef5ec34c79291fb7228","ssdeep":"","tlshash":"3b513cae36e1f4e11a5374a4043f840af37b09b6106de5a0e701d6e23c7558e8563fe9","size":2904,"data":"","first_seen":"2026-09-19T11:17:52.933128Z","last_seen":"2026-09-19T22:43:13.612765Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.loot.co.za/_next/static/chunks/5c0b189e-f4b9b4403fd7fc12b368.js","fqdn":"www.loot.co.za","domain":"loot.co.za","tld":"co.za"},"ip":{"addr":"54.73.16.8","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"9621f8a642673a988ae82b4b7afda1e1","sha1":"978392a264f9f24cb31c780d4a4d3e705ed990f7","sha256":"844bde6df9a3036ff591b2e089cd18a7904bffae2ae769ee4fbd457aec8d109d","sha512":"bfaf445e7c0e8153757c080147acc6e11d9f4221eedce872a3b2d134548a396c0113d87e05048604bc185ecf1299195e2007a45abfd0da6bf82172a524282b11","ssdeep":"","tlshash":"b151854ae041e188db3d19f7409b427fa92f35373416c076a62d6c8c54f5f93a2825fb","size":2892,"data":"","first_seen":"2026-09-19T11:17:52.927754Z","last_seen":"2026-09-19T22:43:13.618447Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.loot.co.za/_next/static/chunks/75fc9c18-6b29b358a165a33ed030.js","fqdn":"www.loot.co.za","domain":"loot.co.za","tld":"co.za"},"ip":{"addr":"54.73.16.8","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"274a6f574877d8a0fa195d4dec51a220","sha1":"776296e5daabf0b193be48239cd79744d0497211","sha256":"8f5446ee508f6e520402f12606eca788240fcc377f7ccb6c15cd92e44086aaa3","sha512":"f8f569992ce4ddecd075674d92aac182da27e91b271d83c0f10169537ed9e6dd2dcfb99429a5ff0db2c655a55fe4eb4c318148c7d57b320234a2a3f8d42beb54","ssdeep":"768:S/2ET54zzeeaD9zzOAUhYju4gNOsfIKMKs0YIkQ19S9rIuq0XGHnT:6d4zuz6AUkuDOsolT9rz2z","tlshash":"4a5394ca3686b522577202f508bf050bf33d6d55a84e4d0cf518e9ed7828c7e527bab8","size":61209,"data":"","first_seen":"2026-09-19T11:17:52.918033Z","last_seen":"2026-09-19T22:43:13.607702Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-17544505040","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f23f1bb3cc49c68cb357c42c51a4ffb5","sha1":"e23161cfe8f42a7fb80941ab53da7464c8464b1b","sha256":"5fd94615327fab0c1bbfbeb3562e23dfc2ed33a863a6ca7c8158ab715a528fcc","sha512":"8ce20680f248529d4ca2dd86c054a40430d22af8aa8dbe9496f329b5405c8dd262b07befe3b422219aadd8a39488f37e63e4dc610f533a8e99bb74772cc94d65","ssdeep":"6144:aI1rBlPP1gbcjM7X+3Kbcc6MbBEAF33GR3LrcKQTTf:Jf2btoD3EKQ3","tlshash":"29a419cd73d674229392f574903f01cba67a29a2b45cc899f289dce42e3468a5173f7c","size":483164,"data":"","first_seen":"2026-09-19T22:05:18.460744Z","last_seen":"2026-09-19T22:43:13.62534Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.loot.co.za/_next/static/chunks/210-be369397ed7686f13ff8.js","fqdn":"www.loot.co.za","domain":"loot.co.za","tld":"co.za"},"ip":{"addr":"54.73.16.8","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"b45715cd600ae541cec53f3cf3001834","sha1":"aedc3e13de114db2336353cd6380d76dc9e69cf3","sha256":"b825ce7c7ec955ae22d08666c9890a5e5b24e0b6a654ef55a6109256bcf03d48","sha512":"214cd00f48b1f618b3848c330a5f7c1d5cbb416bb052654a535166be4ec28b4751d7dd1e11e671b11b28edf4f9abe9d8663db4a6b2c8170888895e8968b46063","ssdeep":"384:+XI72ufrVAPIrX0PyACvO2RPe5t9gRP8wXFCz9ky7OpX/MNsIN:+XI72ufhuIr0P7CvO5UXo","tlshash":"a9b21a89b4f6b78d06df9a2154bfb016f13e5a06743ddc02f824c1916b0528ec677b6b","size":23643,"data":"","first_seen":"2026-09-19T11:17:52.874377Z","last_seen":"2026-09-19T22:43:13.634006Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zynnex.pro/","fqdn":"zynnex.pro","domain":"zynnex.pro","tld":"pro"},"ip":{"addr":"172.67.137.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"3b74f07b74e4df6341ea20198aed4f9e","sha1":"1750c57f775f8f1266a5c88cdf4ffbffce074833","sha256":"11c74f1251fe3a9fd9bdc9abf4e17dec47ea05d659287b88727113aa381409ea","sha512":"2cdac3a43e1cd3f0da961fb3dbb9c537a4c0f419c3a88ceb04c3600424008267ab2397e43f6d391b22bd5475bf0ed3a6d9a65eacffef7978e7985f1e62ae5751","ssdeep":"","tlshash":"14c08075b3bb537d475f3e47d54dc45360ed4e4fc50dd5444563c4721e991902048d45","size":178,"data":"","first_seen":"2026-09-19T11:17:52.943741Z","last_seen":"2026-09-19T22:43:13.653302Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-MHB68DH","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5ee50be89f192d8eb71385b91be00269","sha1":"78ff7214626e018126b717b77223f1283d2aafa0","sha256":"b8c9cb5d797810ec6fb2030c3d76511694cfb569561dab5bcc2329c844637188","sha512":"d8f9fd362023e2c4af22c5f9228a8c17c21b21f9f7b13e09ea0f02952abfa8a434693d5a9133db31931b0675982a4d0b818deddf8a86f290c4edf13a3cea9846","ssdeep":"6144:vI1rB/Pc1gqW2+0bcc6MbBEAF33GVcdLdf:ctxqWcdd","tlshash":"ff741acdb7d6b42283a2b574903f014bb23a79a2f84cc894f286e9d42d7465a5137f7c","size":358489,"data":"","first_seen":"2026-09-19T22:05:18.518648Z","last_seen":"2026-09-19T22:43:13.646174Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zynnex.pro/","fqdn":"zynnex.pro","domain":"zynnex.pro","tld":"pro"},"ip":{"addr":"172.67.137.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1c4a39862b28e0822ce12f8f46d06994","sha1":"9f3fb345fbc896f66a8e1a38b6ecba02bed1ea3f","sha256":"2d1377f96c977b69c6a66e58a6adcc1dcca2edbd5f6af2ed021e57ce9c217b57","sha512":"877f47113e3154c561e9e9d0f6319046bfdc0f065301258e59c71d669888caf3724ffd1256ccef04555de13582bcc1121e8bf7baf54782caa696b3146037de37","ssdeep":"","tlshash":"5ce0a3191c1ef42127f41968e737891534d5120135422665c797c4543d70cc558c5a4c","size":423,"data":"","first_seen":"2026-09-19T11:17:52.93783Z","last_seen":"2026-09-19T22:43:13.654464Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-17544505040\u0026cx=c\u0026gtm=4e69g1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a590442a70932d6de262822950a86bec","sha1":"2d5d4e8a316fddab48f3d6e2448be2c9b75f608d","sha256":"a9d9aed602e078b3e6fd4b9dd0668cbd164ded8d356222d44141e8d2134520d0","sha512":"77db5a7596bfbf3bdfe063e8ebd6183ad09338e27fd0b3d3c031b3ba79f9263529dfe62c30887b746b396ad30fe1ac9037235e4fb994f6841c09f75029596e62","ssdeep":"6144:jI1rBlPP1gbcjM7X+3Kbcc6MbBEAF33GR3LrcKQTTf:wf2btoD3EKQ3","tlshash":"4aa419cd73d674229392f574903f01cba67a29a2b45cc899f289dce42e3468a5173f7c","size":483175,"data":"","first_seen":"2026-09-19T22:05:18.486583Z","last_seen":"2026-09-19T22:43:13.639775Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.termly.io/resource-blocker/8ed3761d-3408-4c7b-b314-a3c290746ec4","fqdn":"app.termly.io","domain":"termly.io","tld":"io"},"ip":{"addr":"104.18.15.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e483aa3e9087a259aa55431f859ffc2d","sha1":"8d352465fd60e1ac97c89e8f7f69b7587b56d7c1","sha256":"9a215faf31ded39ec9cbe925247883cc00dadce850b8a704cbd9a69df9dfa2c8","sha512":"fa544357057f9957e6da2bc204fb55679c0a7c9b4adf741b698f2e10ff6f0fd1fad388b17ce75ee95e523a206feec0f0ad35d420062a53efa40cb3a98d6d0023","ssdeep":"6144:fhHdhrGjfO0z1QaLF6IlSJhoLLycvJUbSi5khQUYTQh/2uKWRniuhHT1lj:ZHwO0zTch2nwuOZQh/dKMniuhHTvj","tlshash":"2aa44aad7080b871579300e5993f1547b63c572d390cc4e0f2ad98ea28e698f9377f6a","size":465930,"data":"","first_seen":"2026-09-19T22:43:13.642597Z","last_seen":"2026-09-19T22:43:13.642597Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.loot.co.za/_next/static/chunks/786-af8d0c1a326f79ed246b.js","fqdn":"www.loot.co.za","domain":"loot.co.za","tld":"co.za"},"ip":{"addr":"54.73.16.8","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"1b723ebea41769f6565063d7f0f37ed2","sha1":"5eacd8770d25e39b3282bee30ecd40f20e005515","sha256":"0aed61338470dbfaf57ec2e262ea5661922440ed8f7ffe628f1760f149d6daff","sha512":"4efa33f3dc5d5527a2060c2fe6d9fb55fbbf94cd0cc190a899da3ee5fddb35bcbbca793a117d76817ffd0d39fd9efabaa58fb6f8e04a515da66877fe7b72a440","ssdeep":"384:YCdiNW82KgMaCuPVo7cnIhyewXnQq1i0NqapVlKUm4FKQ88K0lWnYPbY9e2B:nOz2KgXCW1LCEmQLzlWnYPbY9L","tlshash":"3ad2c988b0eab4951be210fa807f511bb2f7752d984ed414e562ecd468ea5cf1233f6c","size":29574,"data":"","first_seen":"2026-09-19T11:17:52.881946Z","last_seen":"2026-09-19T22:43:13.647841Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zynnex.pro/","fqdn":"zynnex.pro","domain":"zynnex.pro","tld":"pro"},"ip":{"addr":"172.67.137.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e78dc973f97efd77eb373f487b606e15","sha1":"669619407d7eb3900346fda01120e402a239c921","sha256":"888303617990b42b17327513c7647fec7db73db80d24beb0c11ae5b53242c85f","sha512":"c6ec510f63623afd2230e8bf700318683b5dfed7797b0675c923a344571a20ddc0bc09a9b45e5ea39e123368f9bd4b32d64081c3c5b400d663e83492b9374681","ssdeep":"","tlshash":"c6e0e62bb3dd117745fbb8073034d25051871bdf1980130c67f11ee48e1b2c65515be4","size":326,"data":"","first_seen":"2026-09-19T22:43:13.655208Z","last_seen":"2026-09-19T22:43:13.655208Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.retargeted.co/2/xe9aDx.js","fqdn":"s.retargeted.co","domain":"retargeted.co","tld":"co"},"ip":{"addr":"172.67.206.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cae496a650f5b41496c0b80ef7809e75","sha1":"d31645738c2e763b0f50298c6b2917591f4b742b","sha256":"9343568fec693560d705ccdfed7c915d732917c952053753b1ff390ea322b5c0","sha512":"7aa1b3e7e41637a3e2611a7e7d787449017d0f46f9157c4372229ea361a9db69a630ec261d59ebe73edb23b240bd7bb428b63e830d7fb83a3700c5a838d535b2","ssdeep":"1536:2Z+JqtHlCBF/266y66quSinzF9rJVY5B90NDAehocZhvGzv:2AMxl9P6qzizFFY5G9m","tlshash":"a183a7857ac2600823a6a77b713bb0c5e57e1ceca9440d8bf111f891f4e4727d6e7ab1","size":88538,"data":"","first_seen":"2026-09-19T11:17:52.92449Z","last_seen":"2026-09-19T22:43:13.624662Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/destination?id=DC-5922924\u0026cx=c\u0026gtm=4e69g1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"074030835ef098f6d8e7e3f90a529630","sha1":"13f85077dd802cb387c974a65672a5d8c6d07570","sha256":"4d1a939783514aba7e412703cf64b9181ba71514911170aeafed3d879d423026","sha512":"9e66cd409c613e2e62fed76e67b768236511d45bcce904f61b4d8119830e23605e66442ab99a96c59c7c3ad90178c84ac559274bf0300d2f68e0e529a129a4e0","ssdeep":"6144:VI1rBbPP1gbcn76+4bcc6MbBEAF33GRBLrcbknUsf:m92bqhBEbknj","tlshash":"93842acd73d6746283a3b674903f018bb27a79a2b84cc894f28ad8d42d3465a5177f7c","size":406928,"data":"","first_seen":"2026-09-19T22:05:18.507678Z","last_seen":"2026-09-19T22:43:13.648523Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.loot.co.za/_next/static/chunks/169-79940b462964ce74a7c5.js","fqdn":"www.loot.co.za","domain":"loot.co.za","tld":"co.za"},"ip":{"addr":"54.73.16.8","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"a93d42dd9b8add42a386ba6e9fc7447b","sha1":"dcd6a89222c8df80e90a0d4023b1cfe0cc5997a5","sha256":"67b6689ee93f5f6bf49369cbd0155838a0fc76cba9d2d3a1d1480493e81bbf37","sha512":"4f25284478a97f859a1592a1ed95cb468bffc457c7c44352bf66cf01651f659dffb2164146548d688c6d2aa6d9295f6118ffdd7115b55e8c206e8695d835445a","ssdeep":"192:xiKmhN6scFuB7U8PHGq2X7jv8CER5D+eA:xAN1xNQX7LSSb","tlshash":"83d1a9c8b496f0dd56e714e5406f110a21bf2d1c640c9514f676e8e46bbe71f9223f1e","size":6436,"data":"","first_seen":"2026-09-19T11:17:52.902472Z","last_seen":"2026-09-19T22:43:13.640529Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zynnex.pro/","fqdn":"zynnex.pro","domain":"zynnex.pro","tld":"pro"},"ip":{"addr":"172.67.137.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bf1d16f14da7a2988382389488a91aca","sha1":"076e0d55cb3ed7b409c2bdf067563aaf3f919ee0","sha256":"f978192a5e5b546a9df57feb32aacd137a45891a6a3ba67ae2a210029294fcbd","sha512":"a95140f4832260688a0339e53cdbc3fb4d7a1047990ce38310e8234d446df32e51ebe6929a4811aa771edcd4bce35de6b33337b54bb0e1eb9429418f00a0beba","ssdeep":"","tlshash":"0bc02bfc39035c7005ff4f420b3f27843041332041800920084272842530e371080c60","size":132,"data":"","first_seen":"2026-09-19T11:17:52.942338Z","last_seen":"2026-09-19T22:43:13.656351Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zynnex.pro/","fqdn":"zynnex.pro","domain":"zynnex.pro","tld":"pro"},"ip":{"addr":"172.67.137.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f14bc05d13da04675d9855bec7310157","sha1":"4a9599a0d4cdddcdc05c0c9e5ee112361755f049","sha256":"f5013c4a10f98e68c10ff156167101bb98a0cb45cc178ebffe5f45fca651b33e","sha512":"b929e9c1f9145d6cd2944d48f8adb5b7ac1c94168a489e5c2fcdf7913eb8e8f746a8a9b4d8e73e6f476fecbb4a79a9cd01af7a642424ab896ca4ac06d1c0c1b1","ssdeep":"","tlshash":"2bd0a72ef3a84417962ba0152594c145e0e3cb8edcd0213836f195d84b1ff85559bbc4","size":229,"data":"","first_seen":"2026-09-19T22:43:13.657156Z","last_seen":"2026-09-19T22:43:13.657156Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.loot.co.za/_next/static/chunks/06f6b0c0-ea6c7d208018659bfb25.js","fqdn":"www.loot.co.za","domain":"loot.co.za","tld":"co.za"},"ip":{"addr":"54.73.16.8","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"22b8d17c8b39336c9e8d9f526076688b","sha1":"354e8fdd79858cb28d227f4db36a34e45c06761f","sha256":"f0423651d55455f3f56beb7fe4656af99c723eedef8fe8b07f4f5406bc6ae698","sha512":"2d8501c036aef5e418fb59d3f7a1f0463c90501964e204bcfec4733a30350ff2ee95bd43a52707068ce08c9c7b61b5f3a24f60fe50d952039e0a826407e4f21a","ssdeep":"12288:0E9KVZ+13qxMZJjTwFuXN4BSWquq2iGuFDeBD1qWaH+LLIIHB:P9xTwT","tlshash":"bec493dae63c933662c5737498deb38e1a5c7957c848867d7ac3a88f2379dd03068e05","size":580795,"data":"","first_seen":"2026-09-19T11:17:52.89328Z","last_seen":"2026-09-19T22:43:13.632625Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zynnex.pro/","fqdn":"zynnex.pro","domain":"zynnex.pro","tld":"pro"},"ip":{"addr":"172.67.137.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"7722c38439cfeb702e40bcf26fe3595a","sha1":"647791fd8e19348767210abd58e153a559e480c3","sha256":"1073ee029d61715904fe111da676e1ab8c09df04894622bf787e23fff4794064","sha512":"a0f1f9e919a7f51b53fa20a06d2c70441b27c30371b726eae7871f219a97e119b318cdfedfe35ed972f61e2dd130e81b86462e051f0867ab8062bee4815b1579","ssdeep":"","tlshash":"1dc0027bb35d1177156778173935c291245707df0448520897f68dd84e1e1c5351dda8","size":180,"data":"","first_seen":"2026-09-19T11:17:52.950237Z","last_seen":"2026-09-19T22:43:13.658286Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.loot.co.za/_next/static/chunks/777cf710-68a4d5fd26c83bc4a470.js","fqdn":"www.loot.co.za","domain":"loot.co.za","tld":"co.za"},"ip":{"addr":"54.73.16.8","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"9275bd3d03348ddd24232c97b4253c26","sha1":"ceff399808e16dd4d5d9140cd1c2df3c8bde9e33","sha256":"e1f34dfe4319cd48a508b3d42b1dd6125142f4dd4dfd242a9ade64708409a4d6","sha512":"a9d11ca7b4734b86e0ba8d264cd155b755ea148e3bdd0ec19fcfe86dd544fa5e0acadb083364392e6abf9fc6c7138b79ec6cd858431eb5d13eaa0be99ddfa3d2","ssdeep":"1536:denhr6tCGmJVYK0H1df91gEAM6r+9UB+R1Qhc592FXqp:rQJV41g86rxc32Fe","tlshash":"227328cd72cab135634220ec18af4586f13b1588250e499ef169c4e37c7989a61bff7b","size":77862,"data":"","first_seen":"2026-09-19T11:17:52.898184Z","last_seen":"2026-09-19T22:43:13.65116Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.loot.co.za/_next/static/chunks/983-2c251dc4f6b7b7ac29bb.js","fqdn":"www.loot.co.za","domain":"loot.co.za","tld":"co.za"},"ip":{"addr":"54.73.16.8","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"d46c7259fd6e9629d3611636e28d1931","sha1":"71d714679f16256af2fb0e90b27addfa4eef408d","sha256":"65209a00ef88a88b78cfa0a346278e5a606e9f8528261e48de4b5da13bf3b4cb","sha512":"94c6211379fe89ea8616e9f59ab4d6c2351dbf45ff4e6147c95f0d47ec58cfc78524b0cd33855c30b414ed50b64ef45ccb1101094bc148b0b7d594e0ca1efa72","ssdeep":"768:epZxjBJ9KsSpCMVsRZKlS2togi699L+95sj2i/hjYsGbLn044SKIHTCq9uQVdhrO:WaCMRdtoF6hrGbLn04LWMZ0HAI/Dr","tlshash":"1a93a388f5d1f0b557a361e4402f140bf23b6a79745c84e0e2a5d8e2acf898f8577f68","size":97651,"data":"","first_seen":"2026-09-19T11:17:52.907335Z","last_seen":"2026-09-19T22:43:13.647016Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.loot.co.za/_next/static/chunks/813-e0109f404f6fe71ce263.js","fqdn":"www.loot.co.za","domain":"loot.co.za","tld":"co.za"},"ip":{"addr":"54.73.16.8","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"729b0c6a001850e30f0940821e68af08","sha1":"3464b0e9f939d75554aafd1beb5ee7b210a49689","sha256":"c9d76ad29cd6db2e410599629821b3e2ec87df8c446856f9f4c910dffd712fdd","sha512":"4226b0d33421df5d2ed9ab1b8b18afc39b42d3be26a8a86cfc77e7901e0121bcad68c0ad851c406fa39c7488c6d4aa3525a244f9610cd5277d12e8b2ead02957","ssdeep":"12288:dcZzNf5AhVuhKyGm7/13TSZWkcSO2dpPDzb2VrvWIkWEpWFaGqDKT+wpNhAhVuh/:yxf5AhVuhKyGAt3TSZWkcSO2dpPDzb2Z","tlshash":"fbd418ce73e6b5ae07552062c83f5c0c756e0e50a068c634ffb591c7e92ca5c8276f6a","size":643945,"data":"","first_seen":"2026-09-19T11:17:52.87133Z","last_seen":"2026-09-19T22:43:13.626947Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.loot.co.za/_next/static/chunks/734-94223ca04e88eca7dc96.js","fqdn":"www.loot.co.za","domain":"loot.co.za","tld":"co.za"},"ip":{"addr":"54.73.16.8","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"8ad5c720a17748a87aa7fdfea455fbe9","sha1":"2f2c3162cf2966b07d05e3712fd027837939bd48","sha256":"eadb586966ab228fa32c7e0dcf2b5093e7fa1f7ee8db054d137d6e76153fc958","sha512":"3068c78b69c2df45fbef7f3cca1ac0da8755926f4dad8d24139a04af6d6275e8312adfdd12594e2b2abc71d04db0584db8d709c9560fb953042c0c4a43ee5afe","ssdeep":"3072:RMdv1pzu2v9OgxFsYYhXFY2zgFK7ozlrUW+c:6dv1pzu2v93FsYYhA","tlshash":"1b1407c8f5f6f92d86bb1070941f3484f62d1e4dd68d8d00f2b9e8883998659773ab6c","size":199488,"data":"","first_seen":"2026-09-19T11:17:52.915401Z","last_seen":"2026-09-19T22:43:13.651882Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zynnex.pro/","fqdn":"zynnex.pro","domain":"zynnex.pro","tld":"pro"},"ip":{"addr":"172.67.137.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"2b6009ebe1664e0f44ddccfdbf93bf54","sha1":"f8a0a689ea3d58ddb3cedadfccdefbfff2bb3a5d","sha256":"91b758a88609595a71d659fe0fc410f45a9f0800d908ef0ed51a600034048472","sha512":"3e5abc838e52555ac413ebbbbc277231beb61d61f402c0c495ac82013fc21b440aa434a3f50a29154afde82c31f9fd9ca15ef286c561491df0bcdcd6eb38e989","ssdeep":"","tlshash":"e3d0a72eb3744417962fb0152594c145e0e3d74accd0213826f699d84b1ff85159abc4","size":227,"data":"","first_seen":"2026-09-19T22:43:13.659478Z","last_seen":"2026-09-19T22:43:13.659478Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zynnex.pro/","fqdn":"zynnex.pro","domain":"zynnex.pro","tld":"pro"},"ip":{"addr":"172.67.137.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f9d74dd5104108b0497e51f32cae68b0","sha1":"17f403d2046a4680e3ad6e1867af795665abb08f","sha256":"fe25f4220a66ee026ec278e285fae5eb2b199f8124543c957ffef31c6439c0fe","sha512":"65c1df71f8a856b326a5a024a5dab9efb68853bbf37dd1377b1c65b6c587d1d8eef84ff0b3143e446e96a9af6c98cf0d24e250928e887fcd90f4247ce491c0ba","ssdeep":"","tlshash":"cae0027bb79c603b19bbb46a3034c2a144870bcf598056186bf64ed85e0a2ca7119af9","size":319,"data":"","first_seen":"2026-09-19T11:17:52.945299Z","last_seen":"2026-09-19T22:43:13.660679Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zynnex.pro/","fqdn":"zynnex.pro","domain":"zynnex.pro","tld":"pro"},"ip":{"addr":"172.67.137.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"6726372fc132ff87e76c031e5bfe4ca1","sha1":"b1d06f368c81edcf3c0bb7249b0790d0752836fe","sha256":"e42937c26c2ec7443fab1e8560431de89713385ce519f85cc6ca58f5bd20adbc","sha512":"b75c7da2a122db96d1924e3fe1d6e97ffe61e2a7893be2869a774525ef3135b0ed667563393242c06221c89aa22f9215acf95fd1e9cbbdfd75fcfc4da8cd6a28","ssdeep":"","tlshash":"39e09b2bb3bc1067057765663130c15004430acf28865a585afa0ed85d0a5c6e00adfb","size":392,"data":"","first_seen":"2026-09-19T11:17:52.95647Z","last_seen":"2026-09-19T22:43:13.661875Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zynnex.pro/","fqdn":"zynnex.pro","domain":"zynnex.pro","tld":"pro"},"ip":{"addr":"172.67.137.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"0ad6b414af01db58b75ba59df788d20d","sha1":"faab0130364e2de9f86f204ad07d67038195e7bf","sha256":"d5028d72de91c7863f9c8dc5eff1dcb4f5041d8ee1b1799e17bb26466eccc966","sha512":"ceb8d8879befe75e8c197fef84b19045ed8660efa5e0d3b1f0e4776674998bb8f6b3f0a34d76ae69dacc84e7ac74213cce0ba939086a7447e34b8ae9eacf2054","ssdeep":"","tlshash":"0611ce647a467442882af0b02dbbeb3ab26ad8c5e8ac5e042a1cfbd47f7411d43b0d54","size":1005,"data":"","first_seen":"2026-09-19T11:17:52.953053Z","last_seen":"2026-09-19T22:43:13.66327Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.loot.co.za/_next/static/chunks/pages/_app-03b8d6f485afeb7eecb0.js","fqdn":"www.loot.co.za","domain":"loot.co.za","tld":"co.za"},"ip":{"addr":"54.73.16.8","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"21739e9d82becb986784ea60ab0fcab3","sha1":"02b8f04c7f8972cbac1dc9b0aa7cbb1a82d7e4a6","sha256":"4155bf8537cdbd04b2f074a2d327ae38774aea09e05255ae890a9f7e9dd5fa88","sha512":"39585faedf0c8841860c89a4998d6b3b32622df62cd60ef5d75287c459e96f5da83990e806d138f53fb37e37689e962995744a10dc7514e7311b8fa0d9b32b50","ssdeep":"","tlshash":"da111f0dbce174390393707949bf36182abb1b9928ddb04063f0a1d09ef764c9013e9e","size":1091,"data":"","first_seen":"2026-09-19T11:17:52.864064Z","last_seen":"2026-09-19T22:43:13.630077Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.loot.co.za/_next/static/chunks/main-092d9fc583c0a3e10227.js","fqdn":"www.loot.co.za","domain":"loot.co.za","tld":"co.za"},"ip":{"addr":"54.73.16.8","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"0ba19e2c690029971ee799490b999aac","sha1":"ab4eb403d60c9339ea128180bf0bbfe4de508f09","sha256":"f8f09a3a45964048abc900c3a3b90cff85397b7eb2203764878a08897c81dd3d","sha512":"9f4a397cb71cb36ac7b2d1b62004ee44a17e586e80b7f3ef87ce3634132e4c229cee9d4f99cb349fe1eed4f81111cf0fe45042de27a5d4f8490dcc67065da909","ssdeep":"768:lfSIC2imiJz/+43VB0UC/dvZEKJwSoid6d2kd4MuHHQEqKl8TEvCbx+vErL+gH:RZC25ysv+wcAauHjnl8TtLx","tlshash":"a053b4dd75d6f06207d36278803f210ab2ba2d68644d8451e36addd27c7894fa233fb9","size":60819,"data":"","first_seen":"2025-10-25T04:06:19.273784Z","last_seen":"2026-09-19T22:43:13.644385Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.loot.co.za/_next/static/u-10JDC4hD8uNx7e7o5DU/_ssgManifest.js","fqdn":"www.loot.co.za","domain":"loot.co.za","tld":"co.za"},"ip":{"addr":"54.73.16.8","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"b6652df95db52feb4daf4eca35380933","sha1":"65451d110137761b318c82d9071c042db80c4036","sha256":"6f5b4aa00d2f8d6aed9935b471806bf7acef464d0c1d390260e5fe27f800c67e","sha512":"3390c5663ef9081885df8cdbc719f6c2f1597a4e25168529598097e9472608a4a62ec7f7e0bc400d22aac81bf6ea926532886e4dc6e4e272d3b588490a090473","ssdeep":"","tlshash":"98a001e0943cdc60aa63dd1c136413128fa05122651d28938afd3044c0301510300d90","size":77,"data":"","first_seen":"2023-03-07T01:03:02Z","last_seen":"2026-09-20T04:50:34.087481Z","times_seen":261415,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.loot.co.za/_next/static/chunks/501-88fcee456080e224a9b9.js","fqdn":"www.loot.co.za","domain":"loot.co.za","tld":"co.za"},"ip":{"addr":"54.73.16.8","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"ae92d513b7070166dd2ee00768fe8303","sha1":"d77d8fd0a62bd638da78dd3b7a79cd1363beff68","sha256":"7eda98ca7e7b0f78064b943016a798ac28bd5879600ebe7561deb3ee447e2d5d","sha512":"3032f750a3351037bd7eb1556810dd0026032a7ef4579a9c815f6a56c35a6fa465c1dd9df63bcd9a12f1095d0aea64eb2de07c9282d49b7c9b77f3cc419cb336","ssdeep":"384:YeuFXbibYwDZFnURh1vHNkmXn4qnD5T6j:nweYR15XntD8","tlshash":"80e240ccb6dbf25267936438103f6046f36e1d91305e5912f739d9a6782880ac633bf5","size":31761,"data":"","first_seen":"2026-09-19T11:17:52.934086Z","last_seen":"2026-09-19T22:43:13.622602Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zynnex.pro/","fqdn":"zynnex.pro","domain":"zynnex.pro","tld":"pro"},"ip":{"addr":"172.67.137.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1add322a7e210abda1127f1a21b84196","sha1":"c5ffcc187054e4e5e8133cf8578af2ddbd175155","sha256":"9ab287853ec01891296f1f79470feca802d6a7560020d6bcfd01310a0583fafd","sha512":"c4cca7dcfae3681756110f272b7849cd75d5d5b82bbdbfe43d038c5fa04d75ca4ef2cc63c5c9a8dea5595b174a82f09b15f4bce56e61492821e6a23dbc7e430d","ssdeep":"","tlshash":"efb0925bb2cc203604b77c2b2422c2500147178f0980120826ba0ad44d2b2819008a98","size":108,"data":"","first_seen":"2026-09-19T22:43:13.663962Z","last_seen":"2026-09-19T22:43:13.663962Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.retargeted.co/1/xe9aDx.js","fqdn":"s.retargeted.co","domain":"retargeted.co","tld":"co"},"ip":{"addr":"172.67.206.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0750f7681981dc73f0fd8f5891b1feb4","sha1":"480c1d0ebe0b29666e5b15e76fe43539779edf20","sha256":"aa876ab7ae6e1399f621285487f522a68c5e3a51996820ea4fcd2fb044cd31a4","sha512":"f1f34b24b572688f3cbd946af597ef2fe5ac33f4a40178414d7a2d951fb2a49ee4c34d4517b4d6c8565cebfda988ff48fd68aa45538319003f9e865f4fbdbeea","ssdeep":"","tlshash":"3a017bf63191527c45b4a15b32aff740baf220e26c9f25488228cc10799cd8b80bbde9","size":688,"data":"","first_seen":"2026-09-19T11:17:52.910197Z","last_seen":"2026-09-19T22:43:13.641857Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.loot.co.za/_next/static/u-10JDC4hD8uNx7e7o5DU/_buildManifest.js","fqdn":"www.loot.co.za","domain":"loot.co.za","tld":"co.za"},"ip":{"addr":"54.73.16.8","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"8bf353cfdedcb2633fe0c18b19a8e1b0","sha1":"56eb22343158f3738e23e165e47653d86ce30a8e","sha256":"632c740440f0d472132dc78a702dad3318dc9d61db6d9f9029adbde09638aa9f","sha512":"5eb0aee2025d3a4a7bfb7c05476a0d2b446370c52de44cd9a7c8592041b591c43ae14827e582444fb47d17eaea9b7dd925ae794415a6b95641f19d89336b7b89","ssdeep":"","tlshash":"fe719b9b0121f8264ef1dc8d791f23a3d9c1ed33617504e2dbec4e2d91959bacb5e422","size":3478,"data":"","first_seen":"2026-09-19T11:17:52.876862Z","last_seen":"2026-09-19T22:43:13.628361Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.loot.co.za/_next/static/chunks/framework-a43d87e2054bbafa5ab9.js","fqdn":"www.loot.co.za","domain":"loot.co.za","tld":"co.za"},"ip":{"addr":"54.73.16.8","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"1493d1b5d43a56bad82a7d773ecd12ce","sha1":"db6b0cbc44e94e28f2458e1b829e6206c0086647","sha256":"32b6e5617f40e464511d8fa073e352575fafdfca501f254b76f9fdc976b90335","sha512":"0cfd45e3cdfed24dd9d4df630efdc827841a4b5a291a0c33c4acf37d16bae9dc8171cde9e9725592806aef2d7538a948fd20f41e7870dca019fd7d5d0d813b80","ssdeep":"1536:5v3hOGLK4QPDB1vSPEySuS5xvfza6U7VPYweHPYn/y4:5fhOGAxfY7VdeHPYn//","tlshash":"11d307d93992f5216bf311b710af1807733d1a1b280c4960a212eddeb5fd45ea12bf9e","size":130558,"data":"","first_seen":"2026-09-19T11:17:52.906042Z","last_seen":"2026-09-19T22:43:13.634744Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zynnex.pro/","fqdn":"zynnex.pro","domain":"zynnex.pro","tld":"pro"},"ip":{"addr":"172.67.137.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"da990ce82f0ef5b8d5d65d2a8b4cf3ef","sha1":"9abc5044d79d7dbd1bf989e340996e7530148d28","sha256":"37f2549148727b23667638f3a4a968d01af83438f11d0a6d32781fd2daf65361","sha512":"122f98b61250cc4563411195ba680483a9a6dc7962c56ca87f7d007b58f549b499d96bd3e498a8ee325a39a68c432d4af95e37dc5f8fbc6772bf134e60482c70","ssdeep":"","tlshash":"3be0a3192c1eb42117f419a8f337891534d5120235422665cbc7c4543970cc554c5a4c","size":423,"data":"","first_seen":"2026-09-19T11:17:52.939055Z","last_seen":"2026-09-19T22:43:13.665374Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.loot.co.za/_next/static/chunks/4a3ea9cd-3a74e7e4e4f286e595fd.js","fqdn":"www.loot.co.za","domain":"loot.co.za","tld":"co.za"},"ip":{"addr":"54.73.16.8","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"f57f24992357ad36865bcdc32c137daf","sha1":"376fe7792b7037f21548eb023ab2869aeccb7629","sha256":"aacb28e9bd85ac28b21ce00f0d1811e65fd4dea34a2f5953b6ca325eb8560ac5","sha512":"e41874b45fc41da44288ae82d81ebfac0508c8b105f5605f331d9fe46afcc49f3edbb77b9e3c811bd9325a5877a5062ecd142dbfc2e0abf8cadde67dcc331925","ssdeep":"1536:tEzIIVv/QU81bXXx3w62MS5e5z7ulIqIERKIFVqOInWy53UVrOv+TCGqPl8LfZjM:G0IHyR8OFU8OcxDI5eIn3+y4RbX","tlshash":"610418c873c1712686a721a4502f150ee23b79542a0b8694f376d4d6ac7ca8f71bfe3d","size":174090,"data":"","first_seen":"2026-09-19T11:17:52.914191Z","last_seen":"2026-09-19T22:43:13.635487Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.loot.co.za/_next/static/chunks/423-bac1f81fcf0ed112a800.js","fqdn":"www.loot.co.za","domain":"loot.co.za","tld":"co.za"},"ip":{"addr":"54.73.16.8","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"03e696ffdd3fcad083ec38fa81e4f984","sha1":"a20eb7ea77dfd8920347d7d295a5c7828cb1ebde","sha256":"52e0ff07d8cacc1c4d7caf80aa3c575d6603678e43ac58a1eb7f0691dfac296c","sha512":"1652fa3ec54965ad66a6a0f01d998b3e7bc53155824ee1eb3f657142cd744b05a2898db123f023d160dcdd252c2650809cd8eb335a81cdf1a5317a259f47ae21","ssdeep":"192:gLF547xnE0wtkw7lOyypvgCm00y7DGy6u1jw6/UjI+4iqmZAHbcQ:gLj47xnEPdlOp6P0Fey6i88niqmZAHn","tlshash":"d872aadc76dff32262e3642a502fb046fb9d5d81305e1a03f639e462b518c09d5b6af8","size":16718,"data":"","first_seen":"2026-09-19T11:17:52.872785Z","last_seen":"2026-09-19T22:43:13.633338Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google-analytics.com/analytics.js","fqdn":"www.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"d39a8679ed70005ee063ea62886141a2","sha1":"52b556cb7bdbe59b9b1ab9415ff905b561b8399e","sha256":"b33ed8fd08f8cf0138f219167d4bb5817f1b09c1d9ac7431e833899ecfff40f1","sha512":"c65e2fe579412ea8ef38d29185f47dec1f4fb871ec28767c104821f1c3368793c4ff577ed58971d27a9bbac97fee734093766954f7e9d2fc0ff1cb687a0ab977","ssdeep":"96:A1VdZYqhPnjpsx4/eTe8qSMbqaQd6VL2Jyt9LdJoyayCVPVD5wdBf2PfCHiUr3:AXdZYqNjpm4yPqSMbqaQGL2QfdDayCZa","tlshash":"3ca1ca9929fb50210233b1bd1bafa918b63895236208dd61bd8c9264af94437d7f1bc9","size":4693,"data":"","first_seen":"2026-05-25T14:46:35.360433Z","last_seen":"2026-09-20T04:46:12.455119Z","times_seen":101033,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zynnex.pro/","fqdn":"zynnex.pro","domain":"zynnex.pro","tld":"pro"},"ip":{"addr":"172.67.137.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e4c13036fc5b112d78aa65a9ba9ecd22","sha1":"4b208464d604989bb6eae4642638f34d30ee6691","sha256":"145f2053d6c10ed797e80257ac606a1e337aceb3f1232d9d980b295be97596db","sha512":"ee86b94e2e4a6fa060fe97418847baa14dba29b5fb9f24c6b95e2559922c5761b10a014856a8b9d17f1f400816fb029c294ebc5232edf1bb0fed902a50333c0f","ssdeep":"","tlshash":"aed0973e0f251b3219101ac52038ff8c2be020a4c812a4d0048de808f01ce400c70800","size":225,"data":"","first_seen":"2026-09-19T11:17:52.947215Z","last_seen":"2026-09-19T22:43:13.666711Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.loot.co.za/_next/static/chunks/pages/product-3df29120e7739939ab66.js","fqdn":"www.loot.co.za","domain":"loot.co.za","tld":"co.za"},"ip":{"addr":"54.73.16.8","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"604de8af673f16e309e24799abd1f80e","sha1":"aa14a5866396847f0a33ca0036c6bababdf48f40","sha256":"ecec9039269f5a9f23741b3db297129168e3fba711fec2e5e1d141ab5b8a5b58","sha512":"6573cbc96461f715fe26ec827abc4ebe2d710dbc5c61c2a3cd6694ee364d77b1bf7eff2218ba0b732b51d5f4fe2d6d1f880ebc1aca8821853df5694072880eb3","ssdeep":"96:pXRlOZ551AwnySCp5i+wQC4ZjMBYeTFFS5M7gI5aiMTvbwB1myogAR/SEt:Ry551blCp5i+uSyY0FS5ogIYBwWyoNq6","tlshash":"29b1a6dcf0f2f43aa7a6143480af4445f2aa6e1df19c9581d26ad8a57cb410d4677f8c","size":5188,"data":"","first_seen":"2026-09-19T11:17:52.875647Z","last_seen":"2026-09-19T22:43:13.615461Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.termly.io/resource-blocker/support/536-f4a2d4666db6b6524935.min.js","fqdn":"app.termly.io","domain":"termly.io","tld":"io"},"ip":{"addr":"104.18.15.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"af8b996b6f6a90c620eb85facd205b13","sha1":"e3576ff8c1df854a78db084a57f9835452005246","sha256":"bbab9730c0183f34a1d0469a7fc3c4f99ca7bbac37210e00e98bbc7d4378b7b5","sha512":"9d0ec91bb554fe76d31fda092cd5e735bcae8443d4ee39ec26d8d1e79f8003700476f58336264ec34e48e669018d3feb68f0fda98389d75dbcae1e4b53e9ea71","ssdeep":"","tlshash":"d30110aaf9762a5c212a05de37728e12ed44006cf5b8903af0a4de1418f3e165520abd","size":721,"data":"","first_seen":"2026-09-14T23:26:13.276124Z","last_seen":"2026-09-20T04:20:38.073123Z","times_seen":58,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.termly.io/resource-blocker/support/524-41d73f143a6c498233e9.min.js","fqdn":"app.termly.io","domain":"termly.io","tld":"io"},"ip":{"addr":"104.18.15.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ad0b0428a71c52b1c1f4c833af3120a6","sha1":"13615dcf0ce5a07a9471bf676090e92f550edf57","sha256":"5eefdb8933b3188ba5e46d809c88c4d1ee06e7d8fbe46d4b2a1aba96ee054cf8","sha512":"478f08713e011d52f8297ebbef13f83ee2d8001b7047931fcf2fc94418d1ed381ce08ad2fd50570a1b78703af2f034476239a15455bdbc873e3446aefc3e421d","ssdeep":"192:NiR/V5n/7s7dOo/g7yH0/J7yh/D7xh/Mn7o/f7G/m3AzQ7WzOW3EMdrNirEv:NiNEMdrNiIv","tlshash":"74e15259f4cab60d131d0134726397fef206926772b8940ed469761c13dcbaf866bb83","size":7232,"data":"","first_seen":"2026-09-15T00:00:26.024434Z","last_seen":"2026-09-20T04:20:38.07529Z","times_seen":56,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-TMSBJK","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3415a15efca9076458e18a3e12a15c2f","sha1":"697e97a90589a75db82292e14014d728adaffde3","sha256":"9cf4fb05cf5a650ad7ec927e288468683730c1f5446939ac0363474f910ef5b4","sha512":"d64751cff8d87d3e9101db249eb241231976dbf62ecced195daa1e8ff7ca4e39b9e838fdea27efaa991fa1bd8a3d495594ccd270674eceb58c4c4123f171645a","ssdeep":"6144:MR045KI1rBoPD1gbcjM7X+3KbIc6MbBEAF33GRGYrcaLZz/iA0YHf:MRl76ybtojGzaLZ+Y/","tlshash":"5ac429ceb3c674368392f164943f018b6a7e28e2b44cd895f299dce42e3455a2163f7d","size":595264,"data":"","first_seen":"2026-09-19T22:05:18.51312Z","last_seen":"2026-09-19T22:43:13.619874Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zynnex.pro/","fqdn":"zynnex.pro","domain":"zynnex.pro","tld":"pro"},"ip":{"addr":"172.67.137.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"3cc36c247c891a9fc9f8ad1838ee7ac1","sha1":"b959162c511a1473d37587b2b829a390ccffc620","sha256":"3c2a3b056c9194b59ecb329aed3602f721e0258b438452a459981d94c7a5c982","sha512":"b86e00cdd7c274993482316fc35a63dea83bbcfc81cd320c68eaa857bddc0e1c36b069c167de510916ac8cc2f1b988c27ee32593cecbb43eb41425104af29bb3","ssdeep":"","tlshash":"ffe0923bb3bc007706b7a9263530c15004930acf28825a585af90ed85e0a586e10aefb","size":392,"data":"","first_seen":"2026-09-19T11:17:52.952086Z","last_seen":"2026-09-19T22:43:13.667608Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.cartbooster.io/preload","fqdn":"s.cartbooster.io","domain":"cartbooster.io","tld":"io"},"ip":{"addr":"104.21.24.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bd2a53286f2eb094d351e6c80d4eb0f4","sha1":"813a8a7907d91b81a1a4445c4160b819480fbcce","sha256":"bfe5e8554f1bdd385d25ea0fc3bf79704fd3997a1e28e6bcc1c4a20027b20428","sha512":"95fd1a019df48a5932bb4dac87dd001365807e5e9af1a519382c6ab9f48cb4e32d08c03e94f6f235377f324b63b3a6840e8f8ad0aba38b4daef2f15630412a24","ssdeep":"","tlshash":"1d4133a47bd1b2f291f2519618ff7240e833a1f9591590e2e510a9423c3dd8783b7f8e","size":1963,"data":"","first_seen":"2026-08-26T18:03:31.246149Z","last_seen":"2026-09-19T22:43:13.641278Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.termly.io/resource-blocker/support/715-8c02a53c2ac0a2735849.min.js","fqdn":"app.termly.io","domain":"termly.io","tld":"io"},"ip":{"addr":"104.18.15.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"df23462502bd859ee1eea9652f5f08cb","sha1":"a472ae814535cb0a63e045788dbd93efca634b7f","sha256":"101ecfcd6d3685e8d4b5c2c8d184bfdc8a4a8ab38c780a9415fe766aadb99ceb","sha512":"6d0325660b96e6c680dc8e3fbe24f588711112f8dc24651b49235e9b1c04e3ed7336476c48d79c6af70e4fda29ef3770ed5026f1eca24eb478252a4b2054f961","ssdeep":"192:pHV64UtVDmVCjvfs40S4/chAF5I4xIrY2MSK:pHV64U3Dm0qQAF5I4xIrY2MSK","tlshash":"8e026127e8ee8a29872b5ddbfbcf7192fd253800673a745025500539318bf7e616066f","size":8277,"data":"","first_seen":"2026-09-14T23:26:13.264503Z","last_seen":"2026-09-20T04:20:38.06365Z","times_seen":55,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.loot.co.za/_next/static/chunks/cb1608f2-6fee0bba94e5432b481b.js","fqdn":"www.loot.co.za","domain":"loot.co.za","tld":"co.za"},"ip":{"addr":"54.73.16.8","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"d496f0f8e88c304d0edb1a0ecd90185b","sha1":"e7e1baeae2205eaf89ee3e8dd8390e1bbb9f5458","sha256":"2351284a0202292c47b2cd6b84c7cc29fa7607e273713aa4a393a9034497ec95","sha512":"435f15511932746ee5a2d1105a31064ae5293657091b264d136bafcb4f7644b059cfb6723ec0b1822c48520bedda290568161f2a3d4bc3bc21d1af62ad32e51f","ssdeep":"768:HCPivqQZSxd7BlV2ZtwAkr0es656pSefIIdqsfgop4L8/IX/kZn:iPivqz7BlItzkHs656sefIW5j/IX/kZn","tlshash":"a9239768e7a4f2bc2bc6979187211034e64e96ae36f84734d72dc6d472272ecc5d6cc8","size":47799,"data":"","first_seen":"2026-09-19T11:17:52.870088Z","last_seen":"2026-09-19T22:43:13.631926Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.loot.co.za/_next/static/chunks/a9a7754c-7309e1ce04a2efca89d0.js","fqdn":"www.loot.co.za","domain":"loot.co.za","tld":"co.za"},"ip":{"addr":"54.73.16.8","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"2548726a930de3ea7d1e25b5e64656df","sha1":"ca264b3fc0cdcdbc020dbe535ac697e9c63f7341","sha256":"b3da40e6d7ff201e100545050984f840dc608b05b981875aadda6c23c6fa358c","sha512":"ef108e59a5db523f65beadf68e7e4caee1275e8375a8d7f2ade8006529e88934cfad0f941a245149cf23feab8e64627ab1dcf03ebf168c692ac14ac496b7c037","ssdeep":"","tlshash":"1d5141bcb7d192bc3ed463eaca258070b846996eb9348215cf1941f2393258d9274dcf","size":2669,"data":"","first_seen":"2026-09-19T11:17:52.88071Z","last_seen":"2026-09-19T22:43:13.613465Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zynnex.pro/","fqdn":"zynnex.pro","domain":"zynnex.pro","tld":"pro"},"ip":{"addr":"172.67.137.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ac37055bdf61272f90964a3fb98cb279","sha1":"324d7ffb9b318c796213891de642134ef799a2e1","sha256":"6039a9c820e7565d43051abac3065c894d62ec15b8cfc8936b690f5d265d4f9d","sha512":"0fc57ed6f168cd1be5097ec9a085ec4f57d3f51d914a313cecf7637cc18977e55ca5e950f27c0b07a8b0a18e5634b3cafde0e84eb911f6772d5a88bff19fa9ba","ssdeep":"","tlshash":"76c0c070b3bb033c072b3e02a50d801320ad0e0fc409c1440113c8710d880802048d41","size":178,"data":"","first_seen":"2026-09-19T11:17:52.957788Z","last_seen":"2026-09-19T22:43:13.668756Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zynnex.pro/","fqdn":"zynnex.pro","domain":"zynnex.pro","tld":"pro"},"ip":{"addr":"172.67.137.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"038c1ebbb7ae9db8cd65f63f6bda4527","sha1":"9c8b563bd184f1c16ecd39bcf3df6f245dc0d69b","sha256":"638d6f1347894bfe4748d7e4444756fa315e4fcfed68e0090b9082812aeae1cc","sha512":"1264926de52cbd7ba28fcac54c7e441fba2fff5c8ac72bf8353f6f29b63f3ce1173005b0a4d78ea164baf4d61e36c20c2abb2128fface5a30d9209a27b157260","ssdeep":"","tlshash":"2ae0201f6524467d325c1fa9d3b7d61876610641090cf74191568ed07538ff28015259","size":335,"data":"","first_seen":"2023-03-07T12:55:09Z","last_seen":"2026-09-19T22:43:13.669907Z","times_seen":567,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.termly.io/resource-blocker/support/285-3017a7816f8576e5e4ab.min.js","fqdn":"app.termly.io","domain":"termly.io","tld":"io"},"ip":{"addr":"104.18.15.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a542dcb674193322c72d0c5bdd24714c","sha1":"de84680e46a39c0024c82e0b83175704a72362b1","sha256":"b087184e53a8a376478b7df79c0cc00790939db8f6fa1eb6b1e7b30e916aec3f","sha512":"686370da601a9d996bdb2e1b2e2911275e71525acd54f8b7445189e9ee88796778fa10fd2c4254eae61eb8c00ced2c873933fcf243f975fba21ea7238561f42b","ssdeep":"384:9P1CWXb+AfH98fHsKqN+7QyviQR9L6xrEWw5u4QAF5I4xIrY2pGO2K:Z1Xb+A/98fHsK+Svi+xu4Y72K","tlshash":"5872f813b886563d4b6b0dffe2df1284fe20364463362180d2a48879b1d6f7d62647ee","size":16990,"data":"","first_seen":"2026-09-18T17:56:02.369546Z","last_seen":"2026-09-20T04:20:38.083112Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.loot.co.za/_next/static/chunks/905-ef722af6a28c53ba7cf7.js","fqdn":"www.loot.co.za","domain":"loot.co.za","tld":"co.za"},"ip":{"addr":"54.73.16.8","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"02438936cbbfe6d8a97c42aba8f4bf0b","sha1":"e97a2a808cb155e3a57c43deda5935bf6d7c1758","sha256":"f0f9d48948753ce512df0012b17f119498e0aa755068a86980049695e0872a0e","sha512":"3ed47e3e0a4e69261b0f30deb74560f0116812e81441163a6d30b4fffb6772a8cd19079efac2aacb71ff897139e9fbdb83319917ded05fd6dce26208ada639c7","ssdeep":"1536:YJJW7gKKXLbgXNiKR3zhglYGkzO3xcpoEMgZSXT+ddsxuDRhDknjjoxlUczoLrFt:KYEYd5Nl9BfV0H","tlshash":"d0f3f8c8f9e6f97886f32038909f2845f23d1e49955d8c00f17adcd839a885eb776b19","size":164715,"data":"","first_seen":"2026-09-19T11:17:52.935341Z","last_seen":"2026-09-19T22:43:13.614774Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zynnex.pro/","fqdn":"zynnex.pro","domain":"zynnex.pro","tld":"pro"},"ip":{"addr":"172.67.137.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f50bc9a708bf4c3af0a6ff5dc0c1c304","sha1":"c10437faf9614725006db8797f9725b485f9ac9b","sha256":"653c167ea6af505d3f13f427d87ce194e56c9e6c5bc5958a036e813a711c3f39","sha512":"34274faa10e4cc2bb563e497cf91bca474adb1d43f28798b6c4f0e294f8721eaef45633c5b282f3bb630d359270c86a73512f824bac481dfe35d80177470e09d","ssdeep":"","tlshash":"6311dc6d29e76818d20e9afa72af978d21b6b4165a80cd90c14ac4a8a559e8900d1b7c","size":887,"data":"","first_seen":"2026-09-19T11:17:52.951059Z","last_seen":"2026-09-19T22:43:13.670524Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.loot.co.za/_next/static/chunks/826-cf8059a4b579f96ac4ea.js","fqdn":"www.loot.co.za","domain":"loot.co.za","tld":"co.za"},"ip":{"addr":"54.73.16.8","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"1cd6ffdb67a93da1914b43732aadc0b6","sha1":"c3dc63c8b6780061463481b1d2eb8de390e6f526","sha256":"5dac4e02f705611c28d07d938bba15436925da685eb9841d288890d2b8dd01d2","sha512":"dc1d8e317c3b7f398596d4065337286ca47f50e1e9fce6cd4ba81830070872cbe90a37c02c9c71bd4c775d87ede91bc8a332530322d07a3a1498628960705737","ssdeep":"1536:zvDoJGAzFrpJbyXG8dE3+7YT2BqmmeDM8+VAxbZS3s2Ip1RZ5rYKeR2a9Cmw7nJA:zkJGAzSP++7h+VeedRTAm4y5","tlshash":"c0d33a8d73d0f0b556e761ac806f1409b33a2d9db449a084e36adce0fd7644ea227f5e","size":141548,"data":"","first_seen":"2026-09-19T11:17:52.903538Z","last_seen":"2026-09-19T22:43:13.619169Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.loot.co.za/_next/static/chunks/691-f266239af584ec2775ee.js","fqdn":"www.loot.co.za","domain":"loot.co.za","tld":"co.za"},"ip":{"addr":"54.73.16.8","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"89b1278735a866ed47b56bcadf4e6d04","sha1":"32ba9aa0813ad3749f46847d3c3ec8758a7edc93","sha256":"31c6ee0c7c641681fb769fad4533cb236758eb5f5629afae997723c07b140053","sha512":"05eb97c8649d63cf708aa38b1d342f44b6a723274434d46372d8b3560d4da0aa9f6cc876f8662d0bc60cc2aa046cc0697597d8dda8cf010a0bd44ade9e255871","ssdeep":"1536:Bh+OnsvlPYxteMP2xGkFnLm1eYX7jKi+UgphL0L1Ofh7X3HxINuWdvVcpg2aAv7Y:HKlmxP2xhFnLavWhLdfNhMepg2aQY","tlshash":"abc3ea88b1e0b07502d36065c06f5d0af37ead2c9409d4887372d8d6adf958e53abf7a","size":126437,"data":"","first_seen":"2026-09-19T11:17:52.92894Z","last_seen":"2026-09-19T22:43:13.627602Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-0M2QNPX1Y6\u0026cx=c\u0026gtm=4e69g1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"055ca99902746023ef1d213f2af262cc","sha1":"4bf487e8cf2882e2cd7427271c4b595c8246a503","sha256":"3fc4607cd483ddfcc9bfa6003adc3c704f65e45779c83813b1bbed7878cd9aba","sha512":"42ac00a1c6dfd1645e4a8ded02611000986084bf1ec8deba10102e9cbd0506a8ffe673f90983290b90c23e41ac246f72df36731e193423cd9f160103546c2241","ssdeep":"6144:3/I1rBQ5PN1gbcjM7X+3Kbcc6MbBEAF33GBUmrcFPg45w1wf:c29AbtozUxFPbr","tlshash":"f2c419de73c674229396f578903f01cb697b28a2b49cc89af189dce02d3455a5263f7c","size":556533,"data":"","first_seen":"2026-09-19T22:05:18.490475Z","last_seen":"2026-09-19T22:43:13.611963Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"warn","text":"Google Analytics and Tag Manager is being shimmed by Firefox. See https://bugzilla.mozilla.org/show_bug.cgi?id=1713687 for details.","filename":"sandbox eval code","line_number":1,"column_number":9},{"level":"debug","text":"[Termly] Using standard GCM opt-in defaults","filename":"https://app.termly.io/resource-blocker/8ed3761d-3408-4c7b-b314-a3c290746ec4","line_number":8,"column_number":319196},{"level":"debug","text":"[Termly] Region eu has consent_mode set to opt_in","filename":"https://app.termly.io/resource-blocker/8ed3761d-3408-4c7b-b314-a3c290746ec4","line_number":178,"column_number":13984},{"level":"debug","text":"[Termly] No GVL found for this website. TCFProvider is providing noop functions.","filename":"https://app.termly.io/resource-blocker/8ed3761d-3408-4c7b-b314-a3c290746ec4","line_number":8,"column_number":238776},{"level":"error","text":"The operation is insecure.","filename":"","line_number":0,"column_number":0}]},"http":[{"url":{"schema":"https","addr":"www.loot.co.za/resources/public/images/loot/Circular_Vector_Tiktok_Icon.svg","fqdn":"www.loot.co.za","domain":"loot.co.za","tld":"co.za"},"ip":{"addr":"54.73.16.8","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zynnex.pro/","date":"2026-09-19T22:41:57.274Z","timestamp":1789857717274,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.loot.co.za","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 16 Nov 2025 00:00:00 GMT","end":"Tue, 15 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"FE:94:51:35:6C:A7:62:18:98:51:39:2F:AC:EC:C5:38:45:81:14:A6","sha256":"25:B8:6A:84:92:E7:21:D6:E5:33:EC:81:A2:76:38:E2:F9:4E:92:B2:A5:79:AB:71:9A:8B:4E:3E:41:33:CF:C3"}}},"request":{"raw":"GET /resources/public/images/loot/Circular_Vector_Tiktok_Icon.svg HTTP/1.1\r\nHost: www.loot.co.za\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zynnex.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 19 Sep 2026 22:41:57 GMT\r\ncontent-type: image/svg+xml\r\nserver: nginx\r\nx-powered-by: Coffee and Cigarettes\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=3600; includeSubDomains; preload\r\nexpect-ct: max-age=86400; enforce\r\norigin-trial: AqnXg+/USXZytK2zRhY3Cmc/5uE1unO3Cg5W0X6/7VMRV42z9QjD5RWfLwDX96Ohjfw2Tkr9n9NVFjKpMoJtjQMAAACHeyJvcmlnaW4iOiJodHRwczovL3d3dy5sb290LmNvLnphOjQ0MyIsImZlYXR1cmUiOiJQcml2YXRlTmV0d29ya0FjY2Vzc05vblNlY3VyZUNvbnRleHRzQWxsb3dlZCIsImV4cGlyeSI6MTcwNzI2Mzk5OSwiaXNTdWJkb21haW4iOnRydWV9\r\nx-clacks-overhead: GNU Terry Pratchett\r\nvary: Origin, Accept-Encoding\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nlast-modified: Fri, 21 Nov 2025 06:57:48 GMT\r\netag: W/\"6a3-19aa5346de0\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"X-Clacks-Overhead","description":"X-Clacks-Overhead is a non-standard HTTP header used to transmit tribute messages within server responses.","website":"https://xclacksoverhead.org/home/about","common_platform_enumeration":"","icon":"XClacksOverhead.svg","categories":["Miscellaneous"]}],"data":{"size":1699,"size_decoded":1731,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d1f415ab39acc4e3be7aa7c7812f5c47","sha1":"5976c2a15c633dc7afa5fab3932d7e1f56dee32f","sha256":"d87719c4255c4167f9700f1163c184d0d16d93179fbf1be5fa106fbca3843b0b","sha512":"b19e9d4e2ce0e1c9d8a368f4f606e2ecb93558e477acf1e4aff443154c9a46c9d81ad41e3cd043cc2186639e1eea8aa40ef934f987d8e0f9c4d958caef5b899a","ssdeep":"","tlshash":"d33134b2d3864978e844836cf1e4a4a6704e24ff72b593acdb93a3532d10af74110ea3","first_seen":"2026-09-19T11:17:52.887174Z","last_seen":"2026-09-19T22:43:13.604288Z","times_seen":4,"resource_available":false,"data":null}},"time_used":275,"timings":{"blocked":100,"dns":0,"connect":0,"send":0,"wait":175,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.loot.co.za/resources/public/images/loot/threads.png","fqdn":"www.loot.co.za","domain":"loot.co.za","tld":"co.za"},"ip":{"addr":"54.73.16.8","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zynnex.pro/","date":"2026-09-19T22:41:57.274Z","timestamp":1789857717274,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.loot.co.za","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 16 Nov 2025 00:00:00 GMT","end":"Tue, 15 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"FE:94:51:35:6C:A7:62:18:98:51:39:2F:AC:EC:C5:38:45:81:14:A6","sha256":"25:B8:6A:84:92:E7:21:D6:E5:33:EC:81:A2:76:38:E2:F9:4E:92:B2:A5:79:AB:71:9A:8B:4E:3E:41:33:CF:C3"}}},"request":{"raw":"GET /resources/public/images/loot/threads.png HTTP/1.1\r\nHost: www.loot.co.za\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zynnex.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 19 Sep 2026 22:41:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 64321\r\nserver: nginx\r\nx-powered-by: Coffee and Cigarettes\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=3600; includeSubDomains; preload\r\nexpect-ct: max-age=86400; enforce\r\norigin-trial: AqnXg+/USXZytK2zRhY3Cmc/5uE1unO3Cg5W0X6/7VMRV42z9QjD5RWfLwDX96Ohjfw2Tkr9n9NVFjKpMoJtjQMAAACHeyJvcmlnaW4iOiJodHRwczovL3d3dy5sb290LmNvLnphOjQ0MyIsImZlYXR1cmUiOiJQcml2YXRlTmV0d29ya0FjY2Vzc05vblNlY3VyZUNvbnRleHRzQWxsb3dlZCIsImV4cGlyeSI6MTcwNzI2Mzk5OSwiaXNTdWJkb21haW4iOnRydWV9\r\nx-clacks-overhead: GNU Terry Pratchett\r\nvary: Origin\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nlast-modified: Fri, 21 Nov 2025 06:57:48 GMT\r\netag: W/\"fb41-19aa5346de0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"X-Clacks-Overhead","description":"X-Clacks-Overhead is a non-standard HTTP header used to transmit tribute messages within server responses.","website":"https://xclacksoverhead.org/home/about","common_platform_enumeration":"","icon":"XClacksOverhead.svg","categories":["Miscellaneous"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":64321,"size_decoded":65165,"mime_type":"image/png","magic":"PNG image data, 1999 x 2000, 8-bit colormap, non-interlaced","md5":"573d252465a58bfed5a8869aa3d58f32","sha1":"a534336a98f801b0a1bb90494802e259689e3ea6","sha256":"624ac7ef6d5038d58b0a6f3b7406be1c230286e596e9ebca51a14ef9af6a1f9f","sha512":"6812cf07f9e92d9a37b3e4c3976f2b4b6eb117cf9e3ccc9ed799216d3ba2c741c64f4ea710ed06c88bd98bcca2626cfa256abc88f2a79c3544fbb685fa19d28d","ssdeep":"1536:W/Rm8AOnxeFf/RgtoK5x1XyPvvpBcNxj0Mat:YVqR1W1i3hBcPjk","tlshash":"9d5302e4ccb5f9886d072a4d3cd7ce9d74c94db318c38ade28268d52decfa8405a6d52","first_seen":"2026-09-19T11:17:52.908856Z","last_seen":"2026-09-19T22:43:13.605704Z","times_seen":4,"resource_available":false,"data":null}},"time_used":320,"timings":{"blocked":100,"dns":0,"connect":0,"send":0,"wait":174,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.loot.co.za/_next/static/media/slick.295183786cd8a138986521d9f388a286.woff","fqdn":"www.loot.co.za","domain":"loot.co.za","tld":"co.za"},"ip":{"addr":"54.73.16.8","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zynnex.pro/","date":"2026-09-19T22:41:57.800Z","timestamp":1789857717800,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.loot.co.za","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 16 Nov 2025 00:00:00 GMT","end":"Tue, 15 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"FE:94:51:35:6C:A7:62:18:98:51:39:2F:AC:EC:C5:38:45:81:14:A6","sha256":"25:B8:6A:84:92:E7:21:D6:E5:33:EC:81:A2:76:38:E2:F9:4E:92:B2:A5:79:AB:71:9A:8B:4E:3E:41:33:CF:C3"}}},"request":{"raw":"GET /_next/static/media/slick.295183786cd8a138986521d9f388a286.woff HTTP/1.1\r\nHost: www.loot.co.za\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://zynnex.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.loot.co.za/_next/static/css/abdd56bf5a0a07b92ece.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 500 \r\ndate: Sat, 19 Sep 2026 22:41:57 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 148\r\nserver: nginx\r\nx-powered-by: Coffee and Cigarettes\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=3600; includeSubDomains; preload\r\nexpect-ct: max-age=86400; enforce\r\norigin-trial: AqnXg+/USXZytK2zRhY3Cmc/5uE1unO3Cg5W0X6/7VMRV42z9QjD5RWfLwDX96Ohjfw2Tkr9n9NVFjKpMoJtjQMAAACHeyJvcmlnaW4iOiJodHRwczovL3d3dy5sb290LmNvLnphOjQ0MyIsImZlYXR1cmUiOiJQcml2YXRlTmV0d29ya0FjY2Vzc05vblNlY3VyZUNvbnRleHRzQWxsb3dlZCIsImV4cGlyeSI6MTcwNzI2Mzk5OSwiaXNTdWJkb21haW4iOnRydWV9\r\nx-clacks-overhead: GNU Terry Pratchett\r\ncontent-security-policy: default-src 'none'\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"500","status_text":"Internal Server Error","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"X-Clacks-Overhead","description":"X-Clacks-Overhead is a non-standard HTTP header used to transmit tribute messages within server responses.","website":"https://xclacksoverhead.org/home/about","common_platform_enumeration":"","icon":"XClacksOverhead.svg","categories":["Miscellaneous"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":148,"size_decoded":922,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"621d03f9a2af5a8c01ade38bbf0aafa3","sha1":"44d8be6b1878bb923971cd83ba7160a5632fb19c","sha256":"1404ba7a79ae75df672508b3c289f71e83a0ce141b6430911f3462d06503ceec","sha512":"cfd156bee51377caac94c807c37985fca81cf95e733ca9e7efafb2da4c3d4d476fe5fc8261d08d011372450e23066f0518e4c2e28b1fc17a771d72b659492ff8","ssdeep":"","tlshash":"aac02b6710110202053096044fc122983e873f8f34f3d400ab86e017f8da70adf4728c","first_seen":"2023-04-07T05:55:30Z","last_seen":"2026-09-19T22:43:13.607025Z","times_seen":101,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.loot.co.za/_next/static/chunks/75fc9c18-6b29b358a165a33ed030.js","fqdn":"www.loot.co.za","domain":"loot.co.za","tld":"co.za"},"ip":{"addr":"54.73.16.8","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zynnex.pro/","date":"2026-09-19T22:41:57.228Z","timestamp":1789857717228,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.loot.co.za","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 16 Nov 2025 00:00:00 GMT","end":"Tue, 15 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"FE:94:51:35:6C:A7:62:18:98:51:39:2F:AC:EC:C5:38:45:81:14:A6","sha256":"25:B8:6A:84:92:E7:21:D6:E5:33:EC:81:A2:76:38:E2:F9:4E:92:B2:A5:79:AB:71:9A:8B:4E:3E:41:33:CF:C3"}}},"request":{"raw":"GET /_next/static/chunks/75fc9c18-6b29b358a165a33ed030.js HTTP/1.1\r\nHost: www.loot.co.za\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zynnex.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 19 Sep 2026 22:41:57 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: nginx\r\nx-powered-by: Coffee and Cigarettes\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=3600; includeSubDomains; preload\r\nexpect-ct: max-age=86400; enforce\r\norigin-trial: AqnXg+/USXZytK2zRhY3Cmc/5uE1unO3Cg5W0X6/7VMRV42z9QjD5RWfLwDX96Ohjfw2Tkr9n9NVFjKpMoJtjQMAAACHeyJvcmlnaW4iOiJodHRwczovL3d3dy5sb290LmNvLnphOjQ0MyIsImZlYXR1cmUiOiJQcml2YXRlTmV0d29ya0FjY2Vzc05vblNlY3VyZUNvbnRleHRzQWxsb3dlZCIsImV4cGlyeSI6MTcwNzI2Mzk5OSwiaXNTdWJkb21haW4iOnRydWV9\r\nx-clacks-overhead: GNU Terry Pratchett\r\nvary: Origin, Accept-Encoding\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 16 Sep 2026 13:04:26 GMT\r\netag: W/\"ef19-1a0aa518b90\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"X-Clacks-Overhead","description":"X-Clacks-Overhead is a non-standard HTTP header used to transmit tribute messages within server responses.","website":"https://xclacksoverhead.org/home/about","common_platform_enumeration":"","icon":"XClacksOverhead.svg","categories":["Miscellaneous"]}],"data":{"size":61209,"size_decoded":20376,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (61209), with no line terminators","md5":"274a6f574877d8a0fa195d4dec51a220","sha1":"776296e5daabf0b193be48239cd79744d0497211","sha256":"8f5446ee508f6e520402f12606eca788240fcc377f7ccb6c15cd92e44086aaa3","sha512":"f8f569992ce4ddecd075674d92aac182da27e91b271d83c0f10169537ed9e6dd2dcfb99429a5ff0db2c655a55fe4eb4c318148c7d57b320234a2a3f8d42beb54","ssdeep":"768:S/2ET54zzeeaD9zzOAUhYju4gNOsfIKMKs0YIkQ19S9rIuq0XGHnT:6d4zuz6AUkuDOsolT9rz2z","tlshash":"4a5394ca3686b522577202f508bf050bf33d6d55a84e4d0cf518e9ed7828c7e527bab8","first_seen":"2026-09-19T11:17:52.918033Z","last_seen":"2026-09-19T22:43:13.607702Z","times_seen":4,"resource_available":true,"data":null}},"time_used":191,"timings":{"blocked":116,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dtm-dre.platform.hicloud.com/download/web/dtm.js?id=DTM-ac1262027c6e10a2817cc06442e74a12","fqdn":"dtm-dre.platform.hicloud.com","domain":"hicloud.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zynnex.pro/","date":"2026-09-19T22:41:57.846Z","timestamp":1789857717846,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /download/web/dtm.js?id=DTM-ac1262027c6e10a2817cc06442e74a12 HTTP/1.1\r\nHost: dtm-dre.platform.hicloud.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zynnex.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T04:41:53.897053Z","times_seen":18561715,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?rcb=6\u0026frm=0\u0026apvc=0\u0026auid=1834574617.1789857718\u0026dt=Solid%20Wood%20Toy%20Storage%20Rack\u0026tid=AW-17544505040\u0026en=page_view\u0026dl=https%3A%2F%2Fzynnex.pro%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=1321621857.1789857718\u0026navt=n\u0026npa=1\u0026did=dNzg2MD\u0026gdid=dNzg2MD\u0026_tu=CA\u0026gtm=45be69g1v9229426201z871221090za20gzb71221090zd71221090xecxf1\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115938465~115938469~118012009~118897920~118897930~120213116~120385422~120469145~120469153~120847433\u0026tft=1789857717955\u0026tfd=3878\u0026tids=AW-17544505040\u0026fmt=8","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.153.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zynnex.pro/","date":"2026-09-19T22:41:57.957Z","timestamp":1789857717957,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:04:41 GMT","end":"Fri, 27 Nov 2026 08:04:40 GMT"},"fingerprint":{"sha1":"95:51:3A:74:B2:D6:48:05:37:67:B4:98:88:41:81:F2:F0:9E:EC:4E","sha256":"27:A0:25:F5:B2:3F:C8:25:B7:BF:72:41:6C:48:6A:75:BC:C8:0D:C3:44:11:27:96:CE:FB:61:3D:59:34:73:06"}}},"request":{"raw":"POST /ccm/collect?rcb=6\u0026frm=0\u0026apvc=0\u0026auid=1834574617.1789857718\u0026dt=Solid%20Wood%20Toy%20Storage%20Rack\u0026tid=AW-17544505040\u0026en=page_view\u0026dl=https%3A%2F%2Fzynnex.pro%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=1321621857.1789857718\u0026navt=n\u0026npa=1\u0026did=dNzg2MD\u0026gdid=dNzg2MD\u0026_tu=CA\u0026gtm=45be69g1v9229426201z871221090za20gzb71221090zd71221090xecxf1\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115938465~115938469~118012009~118897920~118897930~120213116~120385422~120469145~120469153~120847433\u0026tft=1789857717955\u0026tfd=3878\u0026tids=AW-17544505040\u0026fmt=8 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zynnex.pro/\r\nOrigin: https://zynnex.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ndate: Sat, 19 Sep 2026 22:41:58 GMT\r\ncontent-type: text/plain\r\ncache-control: no-cache, no-store, must-revalidate\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://zynnex.pro\r\naccess-control-expose-headers: date,vary,vary,vary,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":539,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T04:41:53.897053Z","times_seen":18561715,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.termly.io/api/v1/snippets/websites/8ed3761d-3408-4c7b-b314-a3c290746ec4/statistics","fqdn":"app.termly.io","domain":"termly.io","tld":"io"},"ip":{"addr":"104.18.15.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://zynnex.pro/","date":"2026-09-19T22:41:58.190Z","timestamp":1789857718190,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.termly.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Jul 2026 04:46:10 GMT","end":"Thu, 29 Oct 2026 05:46:07 GMT"},"fingerprint":{"sha1":"38:EC:31:8B:D8:EE:37:34:7B:0B:1E:95:A0:86:36:93:6B:6D:55:85","sha256":"B2:FB:73:47:14:E6:67:23:1A:D3:32:49:A3:09:4A:96:9F:41:8B:9E:62:64:F2:75:F2:6B:01:57:79:2B:31:80"}}},"request":{"raw":"POST /api/v1/snippets/websites/8ed3761d-3408-4c7b-b314-a3c290746ec4/statistics HTTP/1.1\r\nHost: app.termly.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 127\r\nOrigin: https://zynnex.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zynnex.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":127,"data":"{\"event_types\":[\"unique_user_view\",\"page_view\"],\"website_uuid\":\"8ed3761d-3408-4c7b-b314-a3c290746ec4\",\"impression_limit\":false}"}},"response":{"raw":"HTTP/3 201 \r\ndate: Sat, 19 Sep 2026 22:41:58 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 3\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST\r\naccess-control-expose-headers: \r\naccess-control-max-age: 600\r\netag: W/\"43974ed74066b207c30ffd0fed514676\"\r\ncache-control: max-age=0, private, must-revalidate\r\nx-request-id: f4bdf9e3-35fa-4417-a8dd-242223ffef49\r\nx-runtime: 0.011242\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nvary: Origin\r\nx-rack-cors: hit\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'unsafe-eval' 'unsafe-inline' https:; img-src 'self' data: https:; font-src data: https:; style-src 'self' blob: 'unsafe-inline' https:; connect-src 'unsafe-eval' 'unsafe-inline' https: wss://sockets.dixa.io wss://api.appcues.net  wss://*.firebaseio.com; frame-src 'self' https:\r\nx-xss-protection: 1; mode=block\r\nx-ratelimit-limit: 4294967295\r\nx-ratelimit-remaining: 4294967295\r\nx-ratelimit-reset: 0\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\ncf-ray: a3dc19d41ca87127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"201","status_text":"Created","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3,"size_decoded":1138,"mime_type":"application/json; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"757b505cfd34c64c85ca5b5690ee5293","sha1":"7f03f3f2febc46f3fa832d98251b0c98f64bc19b","sha256":"43974ed74066b207c30ffd0fed5146762e6c60745ac977004bc14507c7c42b50","sha512":"0878a61b503dd5a9fe9ea3545d6d3bd41c3b50a47f3594cb8bbab3e47558d68fc8fcc409cd0831e91afc4e609ef9da84e0696c50354ad86b25f2609efef6a834","ssdeep":"","tlshash":"c720000000300000000000000003000000000000000000000000000000000000000c00","first_seen":"2023-03-10T13:24:07Z","last_seen":"2026-09-20T04:20:38.072632Z","times_seen":13921,"resource_available":true,"data":null}},"time_used":217,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.termly.io/api/v1/snippets/websites/8ed3761d-3408-4c7b-b314-a3c290746ec4/cookies?lang=en","fqdn":"app.termly.io","domain":"termly.io","tld":"io"},"ip":{"addr":"104.18.15.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://zynnex.pro/","date":"2026-09-19T22:41:58.193Z","timestamp":1789857718193,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.termly.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Jul 2026 04:46:10 GMT","end":"Thu, 29 Oct 2026 05:46:07 GMT"},"fingerprint":{"sha1":"38:EC:31:8B:D8:EE:37:34:7B:0B:1E:95:A0:86:36:93:6B:6D:55:85","sha256":"B2:FB:73:47:14:E6:67:23:1A:D3:32:49:A3:09:4A:96:9F:41:8B:9E:62:64:F2:75:F2:6B:01:57:79:2B:31:80"}}},"request":{"raw":"GET /api/v1/snippets/websites/8ed3761d-3408-4c7b-b314-a3c290746ec4/cookies?lang=en HTTP/1.1\r\nHost: app.termly.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://zynnex.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zynnex.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 22:41:58 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-expose-headers: \r\naccess-control-max-age: 600\r\ncache-control: public, max-age=14400\r\netag: W/\"f872fdd5dd7695c595c91b50d8c09b20\"\r\nx-request-id: a34899ad-acc0-41c9-a6f9-94b6c15634cb\r\nx-runtime: 0.020785\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nx-rack-cors: hit\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'unsafe-eval' 'unsafe-inline' https:; img-src 'self' data: https:; font-src data: https:; style-src 'self' blob: 'unsafe-inline' https:; connect-src 'unsafe-eval' 'unsafe-inline' https: wss://sockets.dixa.io wss://api.appcues.net  wss://*.firebaseio.com; frame-src 'self' https:\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\nx-ratelimit-limit: 4294967295\r\nx-ratelimit-remaining: 4294967295\r\nx-ratelimit-reset: 0\r\npriority: u=3,i=?0\r\nexpires: Sun, 20 Sep 2026 02:41:58 GMT\r\ncf-cache-status: REVALIDATED\r\ncf-ray: a3dc19d2cbc47127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7365,"size_decoded":2325,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"0bd48a6963e408affa05004caf30882f","sha1":"63e0a21cb7f40bb6358c71e31b09c44bf5ddd5bc","sha256":"f872fdd5dd7695c595c91b50d8c09b2066dc555248f0bb1b616bb8f56870b990","sha512":"47c9b9e4ad5affb41cd91cd0cb073dc8725526364174f74812cff517013105d21335edf3bfcae959d9821bd86b28b1319b887c9eeab2ad0f12bfea48c9cd7892","ssdeep":"96:nR/0FRDqRLR2ygRg2goOFR4YJsYaz1uAHsRS43YI6YI9YIlYI/Y533vYKkxYKkjS:CSA4lBFNww9G1phdY6wCSBFTgPR","tlshash":"d2e19d0f99eddc750a7013acb8d61a4cd47c243219dcbeecc6e36c1a02ea69f1554aed","first_seen":"2026-09-19T11:17:52.925832Z","last_seen":"2026-09-19T22:43:13.610008Z","times_seen":4,"resource_available":true,"data":null}},"time_used":212,"timings":{"blocked":8,"dns":0,"connect":0,"send":0,"wait":204,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.termly.io/resource-blocker/i18n/en.json?v=b6c4656","fqdn":"app.termly.io","domain":"termly.io","tld":"io"},"ip":{"addr":"104.18.15.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://zynnex.pro/","date":"2026-09-19T22:41:58.243Z","timestamp":1789857718243,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.termly.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Jul 2026 04:46:10 GMT","end":"Thu, 29 Oct 2026 05:46:07 GMT"},"fingerprint":{"sha1":"38:EC:31:8B:D8:EE:37:34:7B:0B:1E:95:A0:86:36:93:6B:6D:55:85","sha256":"B2:FB:73:47:14:E6:67:23:1A:D3:32:49:A3:09:4A:96:9F:41:8B:9E:62:64:F2:75:F2:6B:01:57:79:2B:31:80"}}},"request":{"raw":"OPTIONS /resource-blocker/i18n/en.json?v=b6c4656 HTTP/1.1\r\nHost: app.termly.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: csrf-token\r\nReferer: https://zynnex.pro/\r\nOrigin: https://zynnex.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\ndate: Sat, 19 Sep 2026 22:41:58 GMT\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,OPTIONS\r\naccess-control-allow-headers: *\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\ncf-ray: a3dc19d30be97127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":311,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T04:41:53.897053Z","times_seen":18561715,"resource_available":true,"data":null}},"time_used":184,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":184,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.loot.co.za/_next/static/css/abdd56bf5a0a07b92ece.css","fqdn":"www.loot.co.za","domain":"loot.co.za","tld":"co.za"},"ip":{"addr":"54.73.16.8","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zynnex.pro/","date":"2026-09-19T22:41:57.216Z","timestamp":1789857717216,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.loot.co.za","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 16 Nov 2025 00:00:00 GMT","end":"Tue, 15 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"FE:94:51:35:6C:A7:62:18:98:51:39:2F:AC:EC:C5:38:45:81:14:A6","sha256":"25:B8:6A:84:92:E7:21:D6:E5:33:EC:81:A2:76:38:E2:F9:4E:92:B2:A5:79:AB:71:9A:8B:4E:3E:41:33:CF:C3"}}},"request":{"raw":"GET /_next/static/css/abdd56bf5a0a07b92ece.css HTTP/1.1\r\nHost: www.loot.co.za\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zynnex.pro/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 19 Sep 2026 22:41:57 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: nginx\r\nx-powered-by: Coffee and Cigarettes\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=3600; includeSubDomains; preload\r\nexpect-ct: max-age=86400; enforce\r\norigin-trial: AqnXg+/USXZytK2zRhY3Cmc/5uE1unO3Cg5W0X6/7VMRV42z9QjD5RWfLwDX96Ohjfw2Tkr9n9NVFjKpMoJtjQMAAACHeyJvcmlnaW4iOiJodHRwczovL3d3dy5sb290LmNvLnphOjQ0MyIsImZlYXR1cmUiOiJQcml2YXRlTmV0d29ya0FjY2Vzc05vblNlY3VyZUNvbnRleHRzQWxsb3dlZCIsImV4cGlyeSI6MTcwNzI2Mzk5OSwiaXNTdWJkb21haW4iOnRydWV9\r\nx-clacks-overhead: GNU Terry Pratchett\r\nvary: Origin, Accept-Encoding\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 16 Sep 2026 13:04:26 GMT\r\netag: W/\"43b2b-1a0aa518b90\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"X-Clacks-Overhead","description":"X-Clacks-Overhead is a non-standard HTTP header used to transmit tribute messages within server responses.","website":"https://xclacksoverhead.org/home/about","common_platform_enumeration":"","icon":"XClacksOverhead.svg","categories":["Miscellaneous"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":277291,"size_decoded":47176,"mime_type":"text/css; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (65533), with no line terminators","md5":"955cae9a6cf8b5165e96e7a98ac5e4c4","sha1":"eff1dfdf8f2a94f5aabe3af510510749ca3f82c7","sha256":"ed73d2ec14f9b1862294856c287fc5f4c81c2c257654d16e77b29f70de00e9e4","sha512":"522b51f32a3dbb03f6380b35df1d2330f868b5200de06abc04914a2476147ae3ae5ced19807632c0a0eedf6925078b8599670015b5c5613462f90f97b432616e","ssdeep":"1536:KsXIO1+sU2VRxgxDEBi8UGc3JETAzMSWPO1TzdC/LltScf8pCNhHLHqY/EOelQJS:KsVIWtScf8pCNhHLXdPzyttI5K","tlshash":"4244fb6de170317d793bc569a1d0ead921079182ea364ff7f81f2a10c9c96d62e33a4c","first_seen":"2026-09-19T11:17:52.904774Z","last_seen":"2026-09-19T22:43:13.610735Z","times_seen":4,"resource_available":true,"data":null}},"time_used":447,"timings":{"blocked":-1,"dns":15,"connect":36,"send":0,"wait":40,"receive":0,"ssl":352},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnv3.loot.co.za/resources/public/images/loot/DeliveryTruck_Blue.svg","fqdn":"cdnv3.loot.co.za","domain":"loot.co.za","tld":"co.za"},"ip":{"addr":"104.20.43.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zynnex.pro/","date":"2026-09-19T22:41:57.266Z","timestamp":1789857717266,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.loot.co.za","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 22 Sep 2025 00:00:00 GMT","end":"Fri, 23 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:91:A2:AD:5F:1C:9F:21:5D:96:64:04:CA:DC:0B:13:A7:51:93:A7","sha256":"E8:27:D2:D2:51:67:94:A1:FA:F8:24:18:0E:57:21:D1:68:C8:5B:A7:54:25:B3:2A:7E:B3:3F:D7:08:94:82:A8"}}},"request":{"raw":"GET /resources/public/images/loot/DeliveryTruck_Blue.svg HTTP/1.1\r\nHost: cdnv3.loot.co.za\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zynnex.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 19 Sep 2026 22:41:57 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nx-powered-by: Coffee and Cigarettes\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=3600; includeSubDomains; preload\r\nexpect-ct: max-age=86400; enforce\r\norigin-trial: AqnXg+/USXZytK2zRhY3Cmc/5uE1unO3Cg5W0X6/7VMRV42z9QjD5RWfLwDX96Ohjfw2Tkr9n9NVFjKpMoJtjQMAAACHeyJvcmlnaW4iOiJodHRwczovL3d3dy5sb290LmNvLnphOjQ0MyIsImZlYXR1cmUiOiJQcml2YXRlTmV0d29ya0FjY2Vzc05vblNlY3VyZUNvbnRleHRzQWxsb3dlZCIsImV4cGlyeSI6MTcwNzI2Mzk5OSwiaXNTdWJkb21haW4iOnRydWV9\r\nx-clacks-overhead: GNU Terry Pratchett\r\nvary: Origin, Accept-Encoding\r\ncache-control: public, max-age=31536000\r\nlast-modified: Fri, 20 Oct 2023 09:55:28 GMT\r\netag: W/\"3c6-18b4c82e280\"\r\nage: 1687680\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: a3dc19d09b665693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"X-Clacks-Overhead","description":"X-Clacks-Overhead is a non-standard HTTP header used to transmit tribute messages within server responses.","website":"https://xclacksoverhead.org/home/about","common_platform_enumeration":"","icon":"XClacksOverhead.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":966,"size_decoded":1468,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7ca115040e724d63425641524832af11","sha1":"cc89427bbbca415a5d17f588ca9a64e4682a9874","sha256":"beea22c1715a83b62b756dbc582412d51814d42cfa9850ab8013847d278d777c","sha512":"071a788c59789b4453394a811f7978788b915697a09c55bf181b842bb22beade34b4a0c687eebed66c2c260a22110ab0b234fae0fa90f632bb5582182e290163","ssdeep":"","tlshash":"be1102398308afbedc64812cdbe0518023eb258ae510855c79da2d3bea4d8d0810daed","first_seen":"2026-09-19T11:17:52.936798Z","last_seen":"2026-09-19T22:43:13.611434Z","times_seen":4,"resource_available":false,"data":null}},"time_used":612,"timings":{"blocked":347,"dns":0,"connect":2,"send":0,"wait":32,"receive":0,"ssl":225},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-0M2QNPX1Y6\u0026cx=c\u0026gtm=4e69g1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zynnex.pro/","date":"2026-09-19T22:41:57.707Z","timestamp":1789857717707,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:04:47 GMT","end":"Fri, 27 Nov 2026 08:04:46 GMT"},"fingerprint":{"sha1":"A8:7D:85:D0:70:29:F0:BA:D0:9E:95:03:C3:BE:58:8B:F1:10:A9:7C","sha256":"21:1D:48:CD:78:8D:E2:B1:1E:91:43:B5:47:5F:37:F6:D1:54:A6:B1:41:15:4E:3F:FD:5C:28:86:5F:0C:F8:43"}}},"request":{"raw":"GET /gtag/js?id=G-0M2QNPX1Y6\u0026cx=c\u0026gtm=4e69g1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zynnex.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Sat, 19 Sep 2026 22:41:57 GMT\r\nexpires: Sat, 19 Sep 2026 22:41:57 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 183978\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":556533,"size_decoded":184562,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6033)","md5":"055ca99902746023ef1d213f2af262cc","sha1":"4bf487e8cf2882e2cd7427271c4b595c8246a503","sha256":"3fc4607cd483ddfcc9bfa6003adc3c704f65e45779c83813b1bbed7878cd9aba","sha512":"42ac00a1c6dfd1645e4a8ded02611000986084bf1ec8deba10102e9cbd0506a8ffe673f90983290b90c23e41ac246f72df36731e193423cd9f160103546c2241","ssdeep":"6144:3/I1rBQ5PN1gbcjM7X+3Kbcc6MbBEAF33GBUmrcFPg45w1wf:c29AbtozUxFPbr","tlshash":"f2c419de73c674229396f578903f01cb697b28a2b49cc89af189dce02d3455a5263f7c","first_seen":"2026-09-19T22:05:18.490475Z","last_seen":"2026-09-19T22:43:13.611963Z","times_seen":2,"resource_available":true,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":68,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.loot.co.za/_next/static/chunks/webpack-f10e8f26ac3a7a445782.js","fqdn":"www.loot.co.za","domain":"loot.co.za","tld":"co.za"},"ip":{"addr":"54.73.16.8","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zynnex.pro/","date":"2026-09-19T22:41:57.222Z","timestamp":1789857717222,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.loot.co.za","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 16 Nov 2025 00:00:00 GMT","end":"Tue, 15 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"FE:94:51:35:6C:A7:62:18:98:51:39:2F:AC:EC:C5:38:45:81:14:A6","sha256":"25:B8:6A:84:92:E7:21:D6:E5:33:EC:81:A2:76:38:E2:F9:4E:92:B2:A5:79:AB:71:9A:8B:4E:3E:41:33:CF:C3"}}},"request":{"raw":"GET /_next/static/chunks/webpack-f10e8f26ac3a7a445782.js HTTP/1.1\r\nHost: www.loot.co.za\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zynnex.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 19 Sep 2026 22:41:59 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: nginx\r\nx-powered-by: Coffee and Cigarettes\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=3600; includeSubDomains; preload\r\nexpect-ct: max-age=86400; enforce\r\norigin-trial: AqnXg+/USXZytK2zRhY3Cmc/5uE1unO3Cg5W0X6/7VMRV42z9QjD5RWfLwDX96Ohjfw2Tkr9n9NVFjKpMoJtjQMAAACHeyJvcmlnaW4iOiJodHRwczovL3d3dy5sb290LmNvLnphOjQ0MyIsImZlYXR1cmUiOiJQcml2YXRlTmV0d29ya0FjY2Vzc05vblNlY3VyZUNvbnRleHRzQWxsb3dlZCIsImV4cGlyeSI6MTcwNzI2Mzk5OSwiaXNTdWJkb21haW4iOnRydWV9\r\nx-clacks-overhead: GNU Terry Pratchett\r\nvary: Origin, Accept-Encoding\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 16 Sep 2026 13:04:26 GMT\r\netag: W/\"b58-1a0aa518b90\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"X-Clacks-Overhead","description":"X-Clacks-Overhead is a non-standard HTTP header used to transmit tribute messages within server responses.","website":"https://xclacksoverhead.org/home/about","common_platform_enumeration":"","icon":"XClacksOverhead.svg","categories":["Miscellaneous"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2904,"size_decoded":2260,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2904), with no line terminators","md5":"9ef1de9a165e5fbba964e22f5d82c484","sha1":"21b660b06605f44c33d2b611f3f55dfc0741a25a","sha256":"2a3a35edf71feb10af423a9450aef3b42df4e012403befb2fa643e91dbfcbf6a","sha512":"30344749ac7dff5070a24c661e78bc4aff7ce3aae15ca7d378633332cc6f6185f93814cf70ae0c41ae4af468a9f8bd82cad946b11a210ef5ec34c79291fb7228","ssdeep":"","tlshash":"3b513cae36e1f4e11a5374a4043f840af37b09b6106de5a0e701d6e23c7558e8563fe9","first_seen":"2026-09-19T11:17:52.933128Z","last_seen":"2026-09-19T22:43:13.612765Z","times_seen":4,"resource_available":true,"data":null}},"time_used":2787,"timings":{"blocked":-1,"dns":9,"connect":36,"send":0,"wait":2390,"receive":0,"ssl":351},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.loot.co.za/_next/static/chunks/a9a7754c-7309e1ce04a2efca89d0.js","fqdn":"www.loot.co.za","domain":"loot.co.za","tld":"co.za"},"ip":{"addr":"54.73.16.8","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zynnex.pro/","date":"2026-09-19T22:41:57.229Z","timestamp":1789857717229,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.loot.co.za","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 16 Nov 2025 00:00:00 GMT","end":"Tue, 15 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"FE:94:51:35:6C:A7:62:18:98:51:39:2F:AC:EC:C5:38:45:81:14:A6","sha256":"25:B8:6A:84:92:E7:21:D6:E5:33:EC:81:A2:76:38:E2:F9:4E:92:B2:A5:79:AB:71:9A:8B:4E:3E:41:33:CF:C3"}}},"request":{"raw":"GET /_next/static/chunks/a9a7754c-7309e1ce04a2efca89d0.js HTTP/1.1\r\nHost: www.loot.co.za\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zynnex.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 19 Sep 2026 22:41:57 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: nginx\r\nx-powered-by: Coffee and Cigarettes\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=3600; includeSubDomains; preload\r\nexpect-ct: max-age=86400; enforce\r\norigin-trial: AqnXg+/USXZytK2zRhY3Cmc/5uE1unO3Cg5W0X6/7VMRV42z9QjD5RWfLwDX96Ohjfw2Tkr9n9NVFjKpMoJtjQMAAACHeyJvcmlnaW4iOiJodHRwczovL3d3dy5sb290LmNvLnphOjQ0MyIsImZlYXR1cmUiOiJQcml2YXRlTmV0d29ya0FjY2Vzc05vblNlY3VyZUNvbnRleHRzQWxsb3dlZCIsImV4cGlyeSI6MTcwNzI2Mzk5OSwiaXNTdWJkb21haW4iOnRydWV9\r\nx-clacks-overhead: GNU Terry Pratchett\r\nvary: Origin, Accept-Encoding\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 16 Sep 2026 13:04:26 GMT\r\netag: W/\"a6d-1a0aa518b90\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"X-Clacks-Overhead","description":"X-Clacks-Overhead is a non-standard HTTP header used to transmit tribute messages within server responses.","website":"https://xclacksoverhead.org/home/about","common_platform_enumeration":"","icon":"XClacksOverhead.svg","categories":["Miscellaneous"]}],"data":{"size":2669,"size_decoded":2223,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2669), with no line terminators","md5":"2548726a930de3ea7d1e25b5e64656df","sha1":"ca264b3fc0cdcdbc020dbe535ac697e9c63f7341","sha256":"b3da40e6d7ff201e100545050984f840dc608b05b981875aadda6c23c6fa358c","sha512":"ef108e59a5db523f65beadf68e7e4caee1275e8375a8d7f2ade8006529e88934cfad0f941a245149cf23feab8e64627ab1dcf03ebf168c692ac14ac496b7c037","ssdeep":"","tlshash":"1d5141bcb7d192bc3ed463eaca258070b846996eb9348215cf1941f2393258d9274dcf","first_seen":"2026-09-19T11:17:52.88071Z","last_seen":"2026-09-19T22:43:13.613465Z","times_seen":4,"resource_available":true,"data":null}},"time_used":155,"timings":{"blocked":116,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.termly.io/resource-blocker/i18n/en.json?v=b6c4656","fqdn":"app.termly.io","domain":"termly.io","tld":"io"},"ip":{"addr":"104.18.15.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://zynnex.pro/","date":"2026-09-19T22:41:58.242Z","timestamp":1789857718242,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.termly.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Jul 2026 04:46:10 GMT","end":"Thu, 29 Oct 2026 05:46:07 GMT"},"fingerprint":{"sha1":"38:EC:31:8B:D8:EE:37:34:7B:0B:1E:95:A0:86:36:93:6B:6D:55:85","sha256":"B2:FB:73:47:14:E6:67:23:1A:D3:32:49:A3:09:4A:96:9F:41:8B:9E:62:64:F2:75:F2:6B:01:57:79:2B:31:80"}}},"request":{"raw":"GET /resource-blocker/i18n/en.json?v=b6c4656 HTTP/1.1\r\nHost: app.termly.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nCsrf-Token: 8f3dee3f-a3d5-4d34-908c-511692377d6b\r\nOrigin: https://zynnex.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zynnex.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 22:41:58 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Fri, 18 Sep 2026 21:37:04 GMT\r\netag: W/\"6aadaf00-354a\"\r\naccess-control-allow-headers: *\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,OPTIONS\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\nage: 2344\r\nexpires: Sun, 20 Sep 2026 02:41:58 GMT\r\ncache-control: public, max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3dc19d42cb67127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13642,"size_decoded":3778,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"31f96cbe603840a6244237d6c76005ba","sha1":"deae72c1e11d59c667d47e25870955e477a3d874","sha256":"691c8fa2f7033759acabd41bd53a90d88e45d7796cae9bd4dcc72f9d066b1a6f","sha512":"e81ccaa7539a169e1475d2518d50540533262e18723c15824569220ee08617efa6083b18531ab0a51b9d95c302b5019cb44cf8168846dfae2e6a5661081255d5","ssdeep":"192:sfT1kUtXWL3XOs25+uT02azFIHSAwKaEJeoXsE/V+F/7s+yX/g+G/J+p/D+3/pZa:sfTyjPWHSACutXsl+EP38h","tlshash":"e9527329f289622f03e40131b643dba77305635753f9945e0976662c03cca6b89bbbcf","first_seen":"2026-09-10T19:12:46.407073Z","last_seen":"2026-09-20T04:20:38.073631Z","times_seen":118,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.loot.co.za/_next/static/chunks/905-ef722af6a28c53ba7cf7.js","fqdn":"www.loot.co.za","domain":"loot.co.za","tld":"co.za"},"ip":{"addr":"54.73.16.8","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zynnex.pro/","date":"2026-09-19T22:41:57.245Z","timestamp":1789857717245,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.loot.co.za","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 16 Nov 2025 00:00:00 GMT","end":"Tue, 15 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"FE:94:51:35:6C:A7:62:18:98:51:39:2F:AC:EC:C5:38:45:81:14:A6","sha256":"25:B8:6A:84:92:E7:21:D6:E5:33:EC:81:A2:76:38:E2:F9:4E:92:B2:A5:79:AB:71:9A:8B:4E:3E:41:33:CF:C3"}}},"request":{"raw":"GET /_next/static/chunks/905-ef722af6a28c53ba7cf7.js HTTP/1.1\r\nHost: www.loot.co.za\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zynnex.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 19 Sep 2026 22:41:57 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: nginx\r\nx-powered-by: Coffee and Cigarettes\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=3600; includeSubDomains; preload\r\nexpect-ct: max-age=86400; enforce\r\norigin-trial: AqnXg+/USXZytK2zRhY3Cmc/5uE1unO3Cg5W0X6/7VMRV42z9QjD5RWfLwDX96Ohjfw2Tkr9n9NVFjKpMoJtjQMAAACHeyJvcmlnaW4iOiJodHRwczovL3d3dy5sb290LmNvLnphOjQ0MyIsImZlYXR1cmUiOiJQcml2YXRlTmV0d29ya0FjY2Vzc05vblNlY3VyZUNvbnRleHRzQWxsb3dlZCIsImV4cGlyeSI6MTcwNzI2Mzk5OSwiaXNTdWJkb21haW4iOnRydWV9\r\nx-clacks-overhead: GNU Terry Pratchett\r\nvary: Origin, Accept-Encoding\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 16 Sep 2026 13:04:26 GMT\r\netag: W/\"2836b-1a0aa518b90\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"X-Clacks-Overhead","description":"X-Clacks-Overhead is a non-standard HTTP header used to transmit tribute messages within server responses.","website":"https://xclacksoverhead.org/home/about","common_platform_enumeration":"","icon":"XClacksOverhead.svg","categories":["Miscellaneous"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":164715,"size_decoded":38726,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"02438936cbbfe6d8a97c42aba8f4bf0b","sha1":"e97a2a808cb155e3a57c43deda5935bf6d7c1758","sha256":"f0f9d48948753ce512df0012b17f119498e0aa755068a86980049695e0872a0e","sha512":"3ed47e3e0a4e69261b0f30deb74560f0116812e81441163a6d30b4fffb6772a8cd19079efac2aacb71ff897139e9fbdb83319917ded05fd6dce26208ada639c7","ssdeep":"1536:YJJW7gKKXLbgXNiKR3zhglYGkzO3xcpoEMgZSXT+ddsxuDRhDknjjoxlUczoLrFt:KYEYd5Nl9BfV0H","tlshash":"d0f3f8c8f9e6f97886f32038909f2845f23d1e49955d8c00f17adcd839a885eb776b19","first_seen":"2026-09-19T11:17:52.935341Z","last_seen":"2026-09-19T22:43:13.614774Z","times_seen":4,"resource_available":true,"data":null}},"time_used":290,"timings":{"blocked":114,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.loot.co.za/_next/static/chunks/pages/product-3df29120e7739939ab66.js","fqdn":"www.loot.co.za","domain":"loot.co.za","tld":"co.za"},"ip":{"addr":"54.73.16.8","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zynnex.pro/","date":"2026-09-19T22:41:57.247Z","timestamp":1789857717247,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.loot.co.za","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 16 Nov 2025 00:00:00 GMT","end":"Tue, 15 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"FE:94:51:35:6C:A7:62:18:98:51:39:2F:AC:EC:C5:38:45:81:14:A6","sha256":"25:B8:6A:84:92:E7:21:D6:E5:33:EC:81:A2:76:38:E2:F9:4E:92:B2:A5:79:AB:71:9A:8B:4E:3E:41:33:CF:C3"}}},"request":{"raw":"GET /_next/static/chunks/pages/product-3df29120e7739939ab66.js HTTP/1.1\r\nHost: www.loot.co.za\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zynnex.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 19 Sep 2026 22:41:57 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: nginx\r\nx-powered-by: Coffee and Cigarettes\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=3600; includeSubDomains; preload\r\nexpect-ct: max-age=86400; enforce\r\norigin-trial: AqnXg+/USXZytK2zRhY3Cmc/5uE1unO3Cg5W0X6/7VMRV42z9QjD5RWfLwDX96Ohjfw2Tkr9n9NVFjKpMoJtjQMAAACHeyJvcmlnaW4iOiJodHRwczovL3d3dy5sb290LmNvLnphOjQ0MyIsImZlYXR1cmUiOiJQcml2YXRlTmV0d29ya0FjY2Vzc05vblNlY3VyZUNvbnRleHRzQWxsb3dlZCIsImV4cGlyeSI6MTcwNzI2Mzk5OSwiaXNTdWJkb21haW4iOnRydWV9\r\nx-clacks-overhead: GNU Terry Pratchett\r\nvary: Origin, Accept-Encoding\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 16 Sep 2026 13:04:26 GMT\r\netag: W/\"1444-1a0aa518b90\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"X-Clacks-Overhead","description":"X-Clacks-Overhead is a non-standard HTTP header used to transmit tribute messages within server responses.","website":"https://xclacksoverhead.org/home/about","common_platform_enumeration":"","icon":"XClacksOverhead.svg","categories":["Miscellaneous"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5188,"size_decoded":3287,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5188), with no line terminators","md5":"604de8af673f16e309e24799abd1f80e","sha1":"aa14a5866396847f0a33ca0036c6bababdf48f40","sha256":"ecec9039269f5a9f23741b3db297129168e3fba711fec2e5e1d141ab5b8a5b58","sha512":"6573cbc96461f715fe26ec827abc4ebe2d710dbc5c61c2a3cd6694ee364d77b1bf7eff2218ba0b732b51d5f4fe2d6d1f880ebc1aca8821853df5694072880eb3","ssdeep":"96:pXRlOZ551AwnySCp5i+wQC4ZjMBYeTFFS5M7gI5aiMTvbwB1myogAR/SEt:Ry551blCp5i+uSyY0FS5ogIYBwWyoNq6","tlshash":"29b1a6dcf0f2f43aa7a6143480af4445f2aa6e1df19c9581d26ad8a57cb410d4677f8c","first_seen":"2026-09-19T11:17:52.875647Z","last_seen":"2026-09-19T22:43:13.615461Z","times_seen":4,"resource_available":true,"data":null}},"time_used":293,"timings":{"blocked":112,"dns":0,"connect":0,"send":0,"wait":181,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.loot.co.za/resources/public/images/loot/AppleStore.png","fqdn":"www.loot.co.za","domain":"loot.co.za","tld":"co.za"},"ip":{"addr":"54.73.16.8","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zynnex.pro/","date":"2026-09-19T22:41:57.268Z","timestamp":1789857717268,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.loot.co.za","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 16 Nov 2025 00:00:00 GMT","end":"Tue, 15 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"FE:94:51:35:6C:A7:62:18:98:51:39:2F:AC:EC:C5:38:45:81:14:A6","sha256":"25:B8:6A:84:92:E7:21:D6:E5:33:EC:81:A2:76:38:E2:F9:4E:92:B2:A5:79:AB:71:9A:8B:4E:3E:41:33:CF:C3"}}},"request":{"raw":"GET /resources/public/images/loot/AppleStore.png HTTP/1.1\r\nHost: www.loot.co.za\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zynnex.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 19 Sep 2026 22:41:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 61034\r\nserver: nginx\r\nx-powered-by: Coffee and Cigarettes\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=3600; includeSubDomains; preload\r\nexpect-ct: max-age=86400; enforce\r\norigin-trial: AqnXg+/USXZytK2zRhY3Cmc/5uE1unO3Cg5W0X6/7VMRV42z9QjD5RWfLwDX96Ohjfw2Tkr9n9NVFjKpMoJtjQMAAACHeyJvcmlnaW4iOiJodHRwczovL3d3dy5sb290LmNvLnphOjQ0MyIsImZlYXR1cmUiOiJQcml2YXRlTmV0d29ya0FjY2Vzc05vblNlY3VyZUNvbnRleHRzQWxsb3dlZCIsImV4cGlyeSI6MTcwNzI2Mzk5OSwiaXNTdWJkb21haW4iOnRydWV9\r\nx-clacks-overhead: GNU Terry Pratchett\r\nvary: Origin\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nlast-modified: Fri, 21 Nov 2025 06:57:48 GMT\r\netag: W/\"ee6a-19aa5346de0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"X-Clacks-Overhead","description":"X-Clacks-Overhead is a non-standard HTTP header used to transmit tribute messages within server responses.","website":"https://xclacksoverhead.org/home/about","common_platform_enumeration":"","icon":"XClacksOverhead.svg","categories":["Miscellaneous"]}],"data":{"size":61034,"size_decoded":61878,"mime_type":"image/png","magic":"PNG image data, 1084 x 325, 8-bit/color RGBA, non-interlaced","md5":"8eeeaadda0389a2ab3bb0e3a58000cd1","sha1":"f773d5c019d2adf236685049cde1fd8e489e04a4","sha256":"b72414b2dc1d264e47add0f304ef4f2c9e5bc2bd2404947ead4462de4e1ddf46","sha512":"0295b9646e2b1d96ad5584cddd5b0c06608ccfb3efdc2a85fbb8248764ccdd28a7507a6dac42b3cd4151acdc47a0b94a06ab062f6f34e063c7aa72882dc7ebd4","ssdeep":"1536:jYQF+LXB2Drr+GSd1OirX2EPvj7PVnwvFe0NxArWwC6:sQF+LXBVGSZmuXPVGIwxeL","tlshash":"3b53e19238489c8ce1ce7571bcf9cdd708629269cdc86889f54ed6d04e94f3cb659f48","first_seen":"2026-09-19T11:17:52.865415Z","last_seen":"2026-09-19T22:43:13.616445Z","times_seen":4,"resource_available":false,"data":null}},"time_used":345,"timings":{"blocked":100,"dns":0,"connect":0,"send":0,"wait":174,"receive":71,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.termly.io/resource-blocker/support/285-3017a7816f8576e5e4ab.min.js","fqdn":"app.termly.io","domain":"termly.io","tld":"io"},"ip":{"addr":"104.18.15.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zynnex.pro/","date":"2026-09-19T22:41:58.280Z","timestamp":1789857718280,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.termly.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Jul 2026 04:46:10 GMT","end":"Thu, 29 Oct 2026 05:46:07 GMT"},"fingerprint":{"sha1":"38:EC:31:8B:D8:EE:37:34:7B:0B:1E:95:A0:86:36:93:6B:6D:55:85","sha256":"B2:FB:73:47:14:E6:67:23:1A:D3:32:49:A3:09:4A:96:9F:41:8B:9E:62:64:F2:75:F2:6B:01:57:79:2B:31:80"}}},"request":{"raw":"GET /resource-blocker/support/285-3017a7816f8576e5e4ab.min.js HTTP/1.1\r\nHost: app.termly.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zynnex.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 22:41:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Fri, 18 Sep 2026 21:37:04 GMT\r\netag: W/\"6aadaf00-425e\"\r\ncontent-security-policy: default-src * 'unsafe-inline' 'unsafe-eval';child-src 'self' blob: ;worker-src 'self' blob:;script-src * 'unsafe-inline' 'unsafe-eval'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src *; style-src * 'unsafe-inline'; font-src 'self' https://fonts.googleapis.com https://fonts.gstatic.com data:\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\nage: 544\r\nexpires: Sun, 20 Sep 2026 02:41:58 GMT\r\ncache-control: public, max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3dc19d349978deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16990,"size_decoded":7216,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (16886)","md5":"a542dcb674193322c72d0c5bdd24714c","sha1":"de84680e46a39c0024c82e0b83175704a72362b1","sha256":"b087184e53a8a376478b7df79c0cc00790939db8f6fa1eb6b1e7b30e916aec3f","sha512":"686370da601a9d996bdb2e1b2e2911275e71525acd54f8b7445189e9ee88796778fa10fd2c4254eae61eb8c00ced2c873933fcf243f975fba21ea7238561f42b","ssdeep":"384:9P1CWXb+AfH98fHsKqN+7QyviQR9L6xrEWw5u4QAF5I4xIrY2pGO2K:Z1Xb+A/98fHsK+Svi+xu4Y72K","tlshash":"5872f813b886563d4b6b0dffe2df1284fe20364463362180d2a48879b1d6f7d62647ee","first_seen":"2026-09-18T17:56:02.369546Z","last_seen":"2026-09-20T04:20:38.083112Z","times_seen":28,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.termly.io/resource-blocker/support/715-8c02a53c2ac0a2735849.min.js","fqdn":"app.termly.io","domain":"termly.io","tld":"io"},"ip":{"addr":"104.18.15.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zynnex.pro/","date":"2026-09-19T22:41:58.281Z","timestamp":1789857718281,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.termly.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Jul 2026 04:46:10 GMT","end":"Thu, 29 Oct 2026 05:46:07 GMT"},"fingerprint":{"sha1":"38:EC:31:8B:D8:EE:37:34:7B:0B:1E:95:A0:86:36:93:6B:6D:55:85","sha256":"B2:FB:73:47:14:E6:67:23:1A:D3:32:49:A3:09:4A:96:9F:41:8B:9E:62:64:F2:75:F2:6B:01:57:79:2B:31:80"}}},"request":{"raw":"GET /resource-blocker/support/715-8c02a53c2ac0a2735849.min.js HTTP/1.1\r\nHost: app.termly.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zynnex.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 22:41:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Fri, 18 Sep 2026 21:37:04 GMT\r\netag: W/\"6aadaf00-2055\"\r\ncontent-security-policy: default-src * 'unsafe-inline' 'unsafe-eval';child-src 'self' blob: ;worker-src 'self' blob:;script-src * 'unsafe-inline' 'unsafe-eval'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src *; style-src * 'unsafe-inline'; font-src 'self' https://fonts.googleapis.com https://fonts.gstatic.com data:\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\nage: 544\r\nexpires: Sun, 20 Sep 2026 02:41:58 GMT\r\ncache-control: public, max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3dc19d3499b8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8277,"size_decoded":3589,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (8173)","md5":"df23462502bd859ee1eea9652f5f08cb","sha1":"a472ae814535cb0a63e045788dbd93efca634b7f","sha256":"101ecfcd6d3685e8d4b5c2c8d184bfdc8a4a8ab38c780a9415fe766aadb99ceb","sha512":"6d0325660b96e6c680dc8e3fbe24f588711112f8dc24651b49235e9b1c04e3ed7336476c48d79c6af70e4fda29ef3770ed5026f1eca24eb478252a4b2054f961","ssdeep":"192:pHV64UtVDmVCjvfs40S4/chAF5I4xIrY2MSK:pHV64U3Dm0qQAF5I4xIrY2MSK","tlshash":"8e026127e8ee8a29872b5ddbfbcf7192fd253800673a745025500539318bf7e616066f","first_seen":"2026-09-14T23:26:13.264503Z","last_seen":"2026-09-20T04:20:38.06365Z","times_seen":55,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.loot.co.za/_next/static/chunks/5c0b189e-f4b9b4403fd7fc12b368.js","fqdn":"www.loot.co.za","domain":"loot.co.za","tld":"co.za"},"ip":{"addr":"54.73.16.8","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zynnex.pro/","date":"2026-09-19T22:41:57.233Z","timestamp":1789857717233,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.loot.co.za","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 16 Nov 2025 00:00:00 GMT","end":"Tue, 15 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"FE:94:51:35:6C:A7:62:18:98:51:39:2F:AC:EC:C5:38:45:81:14:A6","sha256":"25:B8:6A:84:92:E7:21:D6:E5:33:EC:81:A2:76:38:E2:F9:4E:92:B2:A5:79:AB:71:9A:8B:4E:3E:41:33:CF:C3"}}},"request":{"raw":"GET /_next/static/chunks/5c0b189e-f4b9b4403fd7fc12b368.js HTTP/1.1\r\nHost: www.loot.co.za\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zynnex.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 19 Sep 2026 22:41:57 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: nginx\r\nx-powered-by: Coffee and Cigarettes\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=3600; includeSubDomains; preload\r\nexpect-ct: max-age=86400; enforce\r\norigin-trial: AqnXg+/USXZytK2zRhY3Cmc/5uE1unO3Cg5W0X6/7VMRV42z9QjD5RWfLwDX96Ohjfw2Tkr9n9NVFjKpMoJtjQMAAACHeyJvcmlnaW4iOiJodHRwczovL3d3dy5sb290LmNvLnphOjQ0MyIsImZlYXR1cmUiOiJQcml2YXRlTmV0d29ya0FjY2Vzc05vblNlY3VyZUNvbnRleHRzQWxsb3dlZCIsImV4cGlyeSI6MTcwNzI2Mzk5OSwiaXNTdWJkb21haW4iOnRydWV9\r\nx-clacks-overhead: GNU Terry Pratchett\r\nvary: Origin, Accept-Encoding\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 16 Sep 2026 13:04:26 GMT\r\netag: W/\"b4c-1a0aa518b90\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"X-Clacks-Overhead","description":"X-Clacks-Overhead is a non-standard HTTP header used to transmit tribute messages within server responses.","website":"https://xclacksoverhead.org/home/about","common_platform_enumeration":"","icon":"XClacksOverhead.svg","categories":["Miscellaneous"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2892,"size_decoded":2178,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2892), with no line terminators","md5":"9621f8a642673a988ae82b4b7afda1e1","sha1":"978392a264f9f24cb31c780d4a4d3e705ed990f7","sha256":"844bde6df9a3036ff591b2e089cd18a7904bffae2ae769ee4fbd457aec8d109d","sha512":"bfaf445e7c0e8153757c080147acc6e11d9f4221eedce872a3b2d134548a396c0113d87e05048604bc185ecf1299195e2007a45abfd0da6bf82172a524282b11","ssdeep":"","tlshash":"b151854ae041e188db3d19f7409b427fa92f35373416c076a62d6c8c54f5f93a2825fb","first_seen":"2026-09-19T11:17:52.927754Z","last_seen":"2026-09-19T22:43:13.618447Z","times_seen":4,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":114,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.loot.co.za/_next/static/chunks/826-cf8059a4b579f96ac4ea.js","fqdn":"www.loot.co.za","domain":"loot.co.za","tld":"co.za"},"ip":{"addr":"54.73.16.8","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zynnex.pro/","date":"2026-09-19T22:41:57.241Z","timestamp":1789857717241,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.loot.co.za","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 16 Nov 2025 00:00:00 GMT","end":"Tue, 15 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"FE:94:51:35:6C:A7:62:18:98:51:39:2F:AC:EC:C5:38:45:81:14:A6","sha256":"25:B8:6A:84:92:E7:21:D6:E5:33:EC:81:A2:76:38:E2:F9:4E:92:B2:A5:79:AB:71:9A:8B:4E:3E:41:33:CF:C3"}}},"request":{"raw":"GET /_next/static/chunks/826-cf8059a4b579f96ac4ea.js HTTP/1.1\r\nHost: www.loot.co.za\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zynnex.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 19 Sep 2026 22:41:59 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: nginx\r\nx-powered-by: Coffee and Cigarettes\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=3600; includeSubDomains; preload\r\nexpect-ct: max-age=86400; enforce\r\norigin-trial: AqnXg+/USXZytK2zRhY3Cmc/5uE1unO3Cg5W0X6/7VMRV42z9QjD5RWfLwDX96Ohjfw2Tkr9n9NVFjKpMoJtjQMAAACHeyJvcmlnaW4iOiJodHRwczovL3d3dy5sb290LmNvLnphOjQ0MyIsImZlYXR1cmUiOiJQcml2YXRlTmV0d29ya0FjY2Vzc05vblNlY3VyZUNvbnRleHRzQWxsb3dlZCIsImV4cGlyeSI6MTcwNzI2Mzk5OSwiaXNTdWJkb21haW4iOnRydWV9\r\nx-clacks-overhead: GNU Terry Pratchett\r\nvary: Origin, Accept-Encoding\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 16 Sep 2026 13:04:26 GMT\r\netag: W/\"228ec-1a0aa518b90\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"X-Clacks-Overhead","description":"X-Clacks-Overhead is a non-standard HTTP header used to transmit tribute messages within server responses.","website":"https://xclacksoverhead.org/home/about","common_platform_enumeration":"","icon":"XClacksOverhead.svg","categories":["Miscellaneous"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":141548,"size_decoded":48239,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"1cd6ffdb67a93da1914b43732aadc0b6","sha1":"c3dc63c8b6780061463481b1d2eb8de390e6f526","sha256":"5dac4e02f705611c28d07d938bba15436925da685eb9841d288890d2b8dd01d2","sha512":"dc1d8e317c3b7f398596d4065337286ca47f50e1e9fce6cd4ba81830070872cbe90a37c02c9c71bd4c775d87ede91bc8a332530322d07a3a1498628960705737","ssdeep":"1536:zvDoJGAzFrpJbyXG8dE3+7YT2BqmmeDM8+VAxbZS3s2Ip1RZ5rYKeR2a9Cmw7nJA:zkJGAzSP++7h+VeedRTAm4y5","tlshash":"c0d33a8d73d0f0b556e761ac806f1409b33a2d9db449a084e36adce0fd7644ea227f5e","first_seen":"2026-09-19T11:17:52.903538Z","last_seen":"2026-09-19T22:43:13.619169Z","times_seen":4,"resource_available":true,"data":null}},"time_used":2747,"timings":{"blocked":114,"dns":0,"connect":0,"send":0,"wait":2633,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-TMSBJK","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zynnex.pro/","date":"2026-09-19T22:41:57.281Z","timestamp":1789857717281,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:04:47 GMT","end":"Fri, 27 Nov 2026 08:04:46 GMT"},"fingerprint":{"sha1":"A8:7D:85:D0:70:29:F0:BA:D0:9E:95:03:C3:BE:58:8B:F1:10:A9:7C","sha256":"21:1D:48:CD:78:8D:E2:B1:1E:91:43:B5:47:5F:37:F6:D1:54:A6:B1:41:15:4E:3F:FD:5C:28:86:5F:0C:F8:43"}}},"request":{"raw":"GET /gtm.js?id=GTM-TMSBJK HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zynnex.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Sat, 19 Sep 2026 22:41:57 GMT\r\nexpires: Sat, 19 Sep 2026 22:41:57 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sat, 19 Sep 2026 21:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 188012\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":595264,"size_decoded":188662,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (41189)","md5":"3415a15efca9076458e18a3e12a15c2f","sha1":"697e97a90589a75db82292e14014d728adaffde3","sha256":"9cf4fb05cf5a650ad7ec927e288468683730c1f5446939ac0363474f910ef5b4","sha512":"d64751cff8d87d3e9101db249eb241231976dbf62ecced195daa1e8ff7ca4e39b9e838fdea27efaa991fa1bd8a3d495594ccd270674eceb58c4c4123f171645a","ssdeep":"6144:MR045KI1rBoPD1gbcjM7X+3KbIc6MbBEAF33GRGYrcaLZz/iA0YHf:MRl76ybtojGzaLZ+Y/","tlshash":"5ac429ceb3c674368392f164943f018b6a7e28e2b44cd895f299dce42e3455a2163f7d","first_seen":"2026-09-19T22:05:18.51312Z","last_seen":"2026-09-19T22:43:13.619874Z","times_seen":2,"resource_available":true,"data":null}},"time_used":160,"timings":{"blocked":0,"dns":2,"connect":15,"send":0,"wait":41,"receive":70,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zynnex.pro/","fqdn":"zynnex.pro","domain":"zynnex.pro","tld":"pro"},"ip":{"addr":"172.67.137.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-19T22:41:54.101Z","timestamp":1789857714101,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zynnex.pro","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Aug 2026 15:11:53 GMT","end":"Sat, 07 Nov 2026 15:11:52 GMT"},"fingerprint":{"sha1":"D4:90:76:10:89:82:C6:0C:64:52:22:0E:FD:D8:27:4E:08:D9:B6:F1","sha256":"2C:CA:B1:D7:2C:F4:E7:23:DF:48:6B:16:61:F5:4F:FE:CB:A3:A9:C6:D7:8A:ED:6D:12:2F:2D:54:FE:C4:33:C9"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: zynnex.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:41:56 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, no-store, must-revalidate\r\nexpires: Sat, 19 Sep 2026 22:41:54 GMT\r\nset-cookie: e3b0c4_670=8acshrri7ncr; expires=Sun, 20 Sep 2026 11:16:48 GMT; path=/; domain=zynnex.pro; secure; httponly; samesite=none\r\nx-content-type-options: nosniff\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xMqkkBF73HzdSICEeQzbMQS9vAlKFmOHq3nmFSNO%2FVL9dAweN%2BHmU%2Be0LebHXJwRB5yx7dK5PxyIzw10oqRImMkLMbymkQIendySDIreSIbBfXDUpeu0JEse0ehM\"}]}\r\ncontent-encoding: zstd\r\nvary: accept-encoding\r\ncf-ray: a3dc19b95e6a56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"e3b0c4_670","value":"8acshrri7ncr","quoted":false,"path":"/","domain":"zynnex.pro","expires":"2026-09-20T11:16:48Z","raw_expires":"Sun, 20 Sep 2026 11:16:48 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"e3b0c4_670=8acshrri7ncr; expires=Sun, 20 Sep 2026 11:16:48 GMT; path=/; domain=zynnex.pro; secure; httponly; samesite=none"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]}],"data":{"size":610528,"size_decoded":54055,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (64465)","md5":"a7d013b4b8a97de53a84c86799b24b17","sha1":"eac41beda48670cc2ba62540e4a556f4411045b7","sha256":"eaddb8683479807de216025096568c1887b2973edfb36319650fcb4a21bc1c37","sha512":"a2b2c241dd49cf1965787307e5b614ca5e07a3ea07ebbb14f8ff49a9c88cd10d232aa2d3963b1f1c4b13c5768318bc61a2c2ceb436bd21862b87a4970de89a79","ssdeep":"3072:dCsZ3V3m1WbXNK9XXSFO3AL2nYC39jjsge2LNqwcE2/E+8:x3V3rbXNK9XXSFO3AL2n9LNKLct","tlshash":"16d401b9509606b74f60e35cdaa27d43e6ec04079b86554ce6ecbfa0328fe50316d8f6","first_seen":"2026-09-19T22:43:13.621014Z","last_seen":"2026-09-19T22:43:13.621014Z","times_seen":1,"resource_available":true,"data":null}},"time_used":2832,"timings":{"blocked":-1,"dns":4,"connect":26,"send":0,"wait":2728,"receive":74,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"zynnex.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zynnex.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zynnex.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zynnex.pro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zynnex.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.loot.co.za/_next/static/chunks/501-88fcee456080e224a9b9.js","fqdn":"www.loot.co.za","domain":"loot.co.za","tld":"co.za"},"ip":{"addr":"54.73.16.8","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zynnex.pro/","date":"2026-09-19T22:41:57.242Z","timestamp":1789857717242,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.loot.co.za","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 16 Nov 2025 00:00:00 GMT","end":"Tue, 15 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"FE:94:51:35:6C:A7:62:18:98:51:39:2F:AC:EC:C5:38:45:81:14:A6","sha256":"25:B8:6A:84:92:E7:21:D6:E5:33:EC:81:A2:76:38:E2:F9:4E:92:B2:A5:79:AB:71:9A:8B:4E:3E:41:33:CF:C3"}}},"request":{"raw":"GET /_next/static/chunks/501-88fcee456080e224a9b9.js HTTP/1.1\r\nHost: www.loot.co.za\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zynnex.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 19 Sep 2026 22:41:57 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: nginx\r\nx-powered-by: Coffee and Cigarettes\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=3600; includeSubDomains; preload\r\nexpect-ct: max-age=86400; enforce\r\norigin-trial: AqnXg+/USXZytK2zRhY3Cmc/5uE1unO3Cg5W0X6/7VMRV42z9QjD5RWfLwDX96Ohjfw2Tkr9n9NVFjKpMoJtjQMAAACHeyJvcmlnaW4iOiJodHRwczovL3d3dy5sb290LmNvLnphOjQ0MyIsImZlYXR1cmUiOiJQcml2YXRlTmV0d29ya0FjY2Vzc05vblNlY3VyZUNvbnRleHRzQWxsb3dlZCIsImV4cGlyeSI6MTcwNzI2Mzk5OSwiaXNTdWJkb21haW4iOnRydWV9\r\nx-clacks-overhead: GNU Terry Pratchett\r\nvary: Origin, Accept-Encoding\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 16 Sep 2026 13:04:26 GMT\r\netag: W/\"7c11-1a0aa518b90\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"X-Clacks-Overhead","description":"X-Clacks-Overhead is a non-standard HTTP header used to transmit tribute messages within server responses.","website":"https://xclacksoverhead.org/home/about","common_platform_enumeration":"","icon":"XClacksOverhead.svg","categories":["Miscellaneous"]}],"data":{"size":31761,"size_decoded":7795,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (31761), with no line terminators","md5":"ae92d513b7070166dd2ee00768fe8303","sha1":"d77d8fd0a62bd638da78dd3b7a79cd1363beff68","sha256":"7eda98ca7e7b0f78064b943016a798ac28bd5879600ebe7561deb3ee447e2d5d","sha512":"3032f750a3351037bd7eb1556810dd0026032a7ef4579a9c815f6a56c35a6fa465c1dd9df63bcd9a12f1095d0aea64eb2de07c9282d49b7c9b77f3cc419cb336","ssdeep":"384:YeuFXbibYwDZFnURh1vHNkmXn4qnD5T6j:nweYR15XntD8","tlshash":"80e240ccb6dbf25267936438103f6046f36e1d91305e5912f739d9a6782880ac633bf5","first_seen":"2026-09-19T11:17:52.934086Z","last_seen":"2026-09-19T22:43:13.622602Z","times_seen":4,"resource_available":true,"data":null}},"time_used":291,"timings":{"blocked":114,"dns":0,"connect":0,"send":0,"wait":177,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.loot.co.za/_next/static/u-10JDC4hD8uNx7e7o5DU/_ssgManifest.js","fqdn":"www.loot.co.za","domain":"loot.co.za","tld":"co.za"},"ip":{"addr":"54.73.16.8","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zynnex.pro/","date":"2026-09-19T22:41:57.253Z","timestamp":1789857717253,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.loot.co.za","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 16 Nov 2025 00:00:00 GMT","end":"Tue, 15 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"FE:94:51:35:6C:A7:62:18:98:51:39:2F:AC:EC:C5:38:45:81:14:A6","sha256":"25:B8:6A:84:92:E7:21:D6:E5:33:EC:81:A2:76:38:E2:F9:4E:92:B2:A5:79:AB:71:9A:8B:4E:3E:41:33:CF:C3"}}},"request":{"raw":"GET /_next/static/u-10JDC4hD8uNx7e7o5DU/_ssgManifest.js HTTP/1.1\r\nHost: www.loot.co.za\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zynnex.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 19 Sep 2026 22:41:57 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 77\r\nserver: nginx\r\nx-powered-by: Coffee and Cigarettes\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=3600; includeSubDomains; preload\r\nexpect-ct: max-age=86400; enforce\r\norigin-trial: AqnXg+/USXZytK2zRhY3Cmc/5uE1unO3Cg5W0X6/7VMRV42z9QjD5RWfLwDX96Ohjfw2Tkr9n9NVFjKpMoJtjQMAAACHeyJvcmlnaW4iOiJodHRwczovL3d3dy5sb290LmNvLnphOjQ0MyIsImZlYXR1cmUiOiJQcml2YXRlTmV0d29ya0FjY2Vzc05vblNlY3VyZUNvbnRleHRzQWxsb3dlZCIsImV4cGlyeSI6MTcwNzI2Mzk5OSwiaXNTdWJkb21haW4iOnRydWV9\r\nx-clacks-overhead: GNU Terry Pratchett\r\nvary: Origin, Accept-Encoding\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 16 Sep 2026 13:04:26 GMT\r\netag: W/\"4d-1a0aa518b90\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"X-Clacks-Overhead","description":"X-Clacks-Overhead is a non-standard HTTP header used to transmit tribute messages within server responses.","website":"https://xclacksoverhead.org/home/about","common_platform_enumeration":"","icon":"XClacksOverhead.svg","categories":["Miscellaneous"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":77,"size_decoded":972,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"b6652df95db52feb4daf4eca35380933","sha1":"65451d110137761b318c82d9071c042db80c4036","sha256":"6f5b4aa00d2f8d6aed9935b471806bf7acef464d0c1d390260e5fe27f800c67e","sha512":"3390c5663ef9081885df8cdbc719f6c2f1597a4e25168529598097e9472608a4a62ec7f7e0bc400d22aac81bf6ea926532886e4dc6e4e272d3b588490a090473","ssdeep":"","tlshash":"98a001e0943cdc60aa63dd1c136413128fa05122651d28938afd3044c0301510300d90","first_seen":"2023-03-07T01:03:02Z","last_seen":"2026-09-20T04:50:34.087481Z","times_seen":261415,"resource_available":true,"data":null}},"time_used":316,"timings":{"blocked":102,"dns":0,"connect":0,"send":0,"wait":176,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnv3.loot.co.za/resources/public/images/loot/x-social-media-white-round-icon.svg","fqdn":"cdnv3.loot.co.za","domain":"loot.co.za","tld":"co.za"},"ip":{"addr":"104.20.43.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zynnex.pro/","date":"2026-09-19T22:41:57.271Z","timestamp":1789857717271,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.loot.co.za","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 22 Sep 2025 00:00:00 GMT","end":"Fri, 23 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:91:A2:AD:5F:1C:9F:21:5D:96:64:04:CA:DC:0B:13:A7:51:93:A7","sha256":"E8:27:D2:D2:51:67:94:A1:FA:F8:24:18:0E:57:21:D1:68:C8:5B:A7:54:25:B3:2A:7E:B3:3F:D7:08:94:82:A8"}}},"request":{"raw":"GET /resources/public/images/loot/x-social-media-white-round-icon.svg HTTP/1.1\r\nHost: cdnv3.loot.co.za\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zynnex.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 19 Sep 2026 22:41:57 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nx-powered-by: Coffee and Cigarettes\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=3600; includeSubDomains; preload\r\nexpect-ct: max-age=86400; enforce\r\norigin-trial: AqnXg+/USXZytK2zRhY3Cmc/5uE1unO3Cg5W0X6/7VMRV42z9QjD5RWfLwDX96Ohjfw2Tkr9n9NVFjKpMoJtjQMAAACHeyJvcmlnaW4iOiJodHRwczovL3d3dy5sb290LmNvLnphOjQ0MyIsImZlYXR1cmUiOiJQcml2YXRlTmV0d29ya0FjY2Vzc05vblNlY3VyZUNvbnRleHRzQWxsb3dlZCIsImV4cGlyeSI6MTcwNzI2Mzk5OSwiaXNTdWJkb21haW4iOnRydWV9\r\nx-clacks-overhead: GNU Terry Pratchett\r\nvary: Origin, Accept-Encoding\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 04 Sep 2024 12:24:48 GMT\r\netag: W/\"23c-191bcfe9a80\"\r\nage: 1687680\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: a3dc19cf4a8a5693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"X-Clacks-Overhead","description":"X-Clacks-Overhead is a non-standard HTTP header used to transmit tribute messages within server responses.","website":"https://xclacksoverhead.org/home/about","common_platform_enumeration":"","icon":"XClacksOverhead.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":572,"size_decoded":1271,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"211df6069a0a56423fb8b912814a977a","sha1":"cce29ecf7bb6bf773168027c0ca3488313116bb7","sha256":"de84aea6e70706c1a83ca6a40f2cd1a6f5845756634ecea15b79d84db111d850","sha512":"52fdd65fe2cc0ce7ef61430dfa67ef62d2a4f53c4cb9d098d496949fd8a07be7b709a3421a0387c743639ca0b409e23efbe47facf65e576c22011dca174e8499","ssdeep":"","tlshash":"6af020b8caf09448ca0d4bf0ffbd04de7563748f240d08a4e2825a55b802bb7020cb6e","first_seen":"2026-09-19T11:17:52.901523Z","last_seen":"2026-09-19T22:43:13.623948Z","times_seen":4,"resource_available":false,"data":null}},"time_used":400,"timings":{"blocked":346,"dns":0,"connect":1,"send":0,"wait":38,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.retargeted.co/2/xe9aDx.js","fqdn":"s.retargeted.co","domain":"retargeted.co","tld":"co"},"ip":{"addr":"172.67.206.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zynnex.pro/","date":"2026-09-19T22:41:57.822Z","timestamp":1789857717822,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"retargeted.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 07:42:34 GMT","end":"Tue, 01 Dec 2026 08:40:53 GMT"},"fingerprint":{"sha1":"13:65:F4:3F:12:B9:A4:7C:95:80:71:72:12:F3:21:B5:F6:2D:31:35","sha256":"DB:45:DA:95:DE:F9:73:3D:83:FA:72:C9:16:4C:39:BB:A0:05:13:30:EF:19:71:48:43:EF:AD:5D:DA:DB:2C:13"}}},"request":{"raw":"GET /2/xe9aDx.js HTTP/1.1\r\nHost: s.retargeted.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zynnex.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nsurrogate-control: no-store\r\ncache-control: no-store, no-cache, must-revalidate, proxy-revalidate\r\nexpires: 0\r\naccess-control-allow-origin: *\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-disposition: inline\r\ncontent-encoding: zstd\r\netag: W/\"159da-0xZFc4wudjsPUCmMaykXWR9LdCs\"\r\ndate: Sat, 19 Sep 2026 22:41:57 GMT\r\npriority: u=3,i=?0\r\ncf-cache-status: BYPASS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5SBx4E%2Fy3PQABpReVyWxhlZEnp0DcxRjl9QKH7ZL%2BxuJl1LPCr5uL%2BKHAXTZSLC2F3lB1nW4aqjZIA7JY9vrLrccDty%2FFnGTEuy9PFSU2tI%2F8iQY%2BKx6wxPB6RylKZUvgB0%3D\"}]}\r\ncf-ray: a3dc19d069f149c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":88538,"size_decoded":33417,"mime_type":"text/plain; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"cae496a650f5b41496c0b80ef7809e75","sha1":"d31645738c2e763b0f50298c6b2917591f4b742b","sha256":"9343568fec693560d705ccdfed7c915d732917c952053753b1ff390ea322b5c0","sha512":"7aa1b3e7e41637a3e2611a7e7d787449017d0f46f9157c4372229ea361a9db69a630ec261d59ebe73edb23b240bd7bb428b63e830d7fb83a3700c5a838d535b2","ssdeep":"1536:2Z+JqtHlCBF/266y66quSinzF9rJVY5B90NDAehocZhvGzv:2AMxl9P6qzizFFY5G9m","tlshash":"a183a7857ac2600823a6a77b713bb0c5e57e1ceca9440d8bf111f891f4e4727d6e7ab1","first_seen":"2026-09-19T11:17:52.92449Z","last_seen":"2026-09-19T22:43:13.624662Z","times_seen":4,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":51,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-17544505040","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zynnex.pro/","date":"2026-09-19T22:41:57.850Z","timestamp":1789857717850,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:04:47 GMT","end":"Fri, 27 Nov 2026 08:04:46 GMT"},"fingerprint":{"sha1":"A8:7D:85:D0:70:29:F0:BA:D0:9E:95:03:C3:BE:58:8B:F1:10:A9:7C","sha256":"21:1D:48:CD:78:8D:E2:B1:1E:91:43:B5:47:5F:37:F6:D1:54:A6:B1:41:15:4E:3F:FD:5C:28:86:5F:0C:F8:43"}}},"request":{"raw":"GET /gtag/js?id=AW-17544505040 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zynnex.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Sat, 19 Sep 2026 22:41:57 GMT\r\nexpires: Sat, 19 Sep 2026 22:41:57 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 164505\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":483164,"size_decoded":165089,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7912)","md5":"f23f1bb3cc49c68cb357c42c51a4ffb5","sha1":"e23161cfe8f42a7fb80941ab53da7464c8464b1b","sha256":"5fd94615327fab0c1bbfbeb3562e23dfc2ed33a863a6ca7c8158ab715a528fcc","sha512":"8ce20680f248529d4ca2dd86c054a40430d22af8aa8dbe9496f329b5405c8dd262b07befe3b422219aadd8a39488f37e63e4dc610f533a8e99bb74772cc94d65","ssdeep":"6144:aI1rBlPP1gbcjM7X+3Kbcc6MbBEAF33GR3LrcKQTTf:Jf2btoD3EKQ3","tlshash":"29a419cd73d674229392f574903f01cba67a29a2b45cc899f289dce42e3468a5173f7c","first_seen":"2026-09-19T22:05:18.460744Z","last_seen":"2026-09-19T22:43:13.62534Z","times_seen":2,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":41,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-0M2QNPX1Y6\u0026cid=701318931.1789857718\u0026gtm=45je69g1v890495869z871221090za20gzb71221090zd71221090xf1\u0026rcb=9\u0026aip=1\u0026dma=1\u0026dma_cps=a\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=115616985~115938465~115938468~118897920~118897930~119793973~120213116~120385423~120469145~120469153\u0026z=633480244","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zynnex.pro/","date":"2026-09-19T22:41:58.085Z","timestamp":1789857718085,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:07:53 GMT","end":"Fri, 27 Nov 2026 08:07:52 GMT"},"fingerprint":{"sha1":"97:2F:A9:50:A0:A8:2C:4F:6E:C0:9D:21:4D:02:79:64:C0:F0:62:D4","sha256":"C8:54:87:97:69:D0:A5:F0:5F:98:26:CA:B6:C9:20:2A:B1:47:90:D7:D6:A1:A0:78:D4:F4:33:1C:E5:12:10:3C"}}},"request":{"raw":"GET /ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-0M2QNPX1Y6\u0026cid=701318931.1789857718\u0026gtm=45je69g1v890495869z871221090za20gzb71221090zd71221090xf1\u0026rcb=9\u0026aip=1\u0026dma=1\u0026dma_cps=a\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=115616985~115938465~115938468~118897920~118897930~119793973~120213116~120385423~120469145~120469153\u0026z=633480244 HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zynnex.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sat, 19 Sep 2026 22:41:59 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":578,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-09-20T04:42:36.749548Z","times_seen":1071056,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":2,"connect":17,"send":0,"wait":38,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.loot.co.za/_next/static/chunks/813-e0109f404f6fe71ce263.js","fqdn":"www.loot.co.za","domain":"loot.co.za","tld":"co.za"},"ip":{"addr":"54.73.16.8","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zynnex.pro/","date":"2026-09-19T22:41:57.239Z","timestamp":1789857717239,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.loot.co.za","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 16 Nov 2025 00:00:00 GMT","end":"Tue, 15 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"FE:94:51:35:6C:A7:62:18:98:51:39:2F:AC:EC:C5:38:45:81:14:A6","sha256":"25:B8:6A:84:92:E7:21:D6:E5:33:EC:81:A2:76:38:E2:F9:4E:92:B2:A5:79:AB:71:9A:8B:4E:3E:41:33:CF:C3"}}},"request":{"raw":"GET /_next/static/chunks/813-e0109f404f6fe71ce263.js HTTP/1.1\r\nHost: www.loot.co.za\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zynnex.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 19 Sep 2026 22:41:57 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: nginx\r\nx-powered-by: Coffee and Cigarettes\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=3600; includeSubDomains; preload\r\nexpect-ct: max-age=86400; enforce\r\norigin-trial: AqnXg+/USXZytK2zRhY3Cmc/5uE1unO3Cg5W0X6/7VMRV42z9QjD5RWfLwDX96Ohjfw2Tkr9n9NVFjKpMoJtjQMAAACHeyJvcmlnaW4iOiJodHRwczovL3d3dy5sb290LmNvLnphOjQ0MyIsImZlYXR1cmUiOiJQcml2YXRlTmV0d29ya0FjY2Vzc05vblNlY3VyZUNvbnRleHRzQWxsb3dlZCIsImV4cGlyeSI6MTcwNzI2Mzk5OSwiaXNTdWJkb21haW4iOnRydWV9\r\nx-clacks-overhead: GNU Terry Pratchett\r\nvary: Origin, Accept-Encoding\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 16 Sep 2026 13:04:26 GMT\r\netag: W/\"9d369-1a0aa518b90\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"X-Clacks-Overhead","description":"X-Clacks-Overhead is a non-standard HTTP header used to transmit tribute messages within server responses.","website":"https://xclacksoverhead.org/home/about","common_platform_enumeration":"","icon":"XClacksOverhead.svg","categories":["Miscellaneous"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":643945,"size_decoded":159989,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"729b0c6a001850e30f0940821e68af08","sha1":"3464b0e9f939d75554aafd1beb5ee7b210a49689","sha256":"c9d76ad29cd6db2e410599629821b3e2ec87df8c446856f9f4c910dffd712fdd","sha512":"4226b0d33421df5d2ed9ab1b8b18afc39b42d3be26a8a86cfc77e7901e0121bcad68c0ad851c406fa39c7488c6d4aa3525a244f9610cd5277d12e8b2ead02957","ssdeep":"12288:dcZzNf5AhVuhKyGm7/13TSZWkcSO2dpPDzb2VrvWIkWEpWFaGqDKT+wpNhAhVuh/:yxf5AhVuhKyGAt3TSZWkcSO2dpPDzb2Z","tlshash":"fbd418ce73e6b5ae07552062c83f5c0c756e0e50a068c634ffb591c7e92ca5c8276f6a","first_seen":"2026-09-19T11:17:52.87133Z","last_seen":"2026-09-19T22:43:13.626947Z","times_seen":4,"resource_available":true,"data":null}},"time_used":295,"timings":{"blocked":114,"dns":0,"connect":0,"send":0,"wait":181,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.loot.co.za/_next/static/chunks/691-f266239af584ec2775ee.js","fqdn":"www.loot.co.za","domain":"loot.co.za","tld":"co.za"},"ip":{"addr":"54.73.16.8","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zynnex.pro/","date":"2026-09-19T22:41:57.240Z","timestamp":1789857717240,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.loot.co.za","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 16 Nov 2025 00:00:00 GMT","end":"Tue, 15 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"FE:94:51:35:6C:A7:62:18:98:51:39:2F:AC:EC:C5:38:45:81:14:A6","sha256":"25:B8:6A:84:92:E7:21:D6:E5:33:EC:81:A2:76:38:E2:F9:4E:92:B2:A5:79:AB:71:9A:8B:4E:3E:41:33:CF:C3"}}},"request":{"raw":"GET /_next/static/chunks/691-f266239af584ec2775ee.js HTTP/1.1\r\nHost: www.loot.co.za\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zynnex.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 19 Sep 2026 22:41:57 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: nginx\r\nx-powered-by: Coffee and Cigarettes\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=3600; includeSubDomains; preload\r\nexpect-ct: max-age=86400; enforce\r\norigin-trial: AqnXg+/USXZytK2zRhY3Cmc/5uE1unO3Cg5W0X6/7VMRV42z9QjD5RWfLwDX96Ohjfw2Tkr9n9NVFjKpMoJtjQMAAACHeyJvcmlnaW4iOiJodHRwczovL3d3dy5sb290LmNvLnphOjQ0MyIsImZlYXR1cmUiOiJQcml2YXRlTmV0d29ya0FjY2Vzc05vblNlY3VyZUNvbnRleHRzQWxsb3dlZCIsImV4cGlyeSI6MTcwNzI2Mzk5OSwiaXNTdWJkb21haW4iOnRydWV9\r\nx-clacks-overhead: GNU Terry Pratchett\r\nvary: Origin, Accept-Encoding\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 16 Sep 2026 13:04:26 GMT\r\netag: W/\"1ede5-1a0aa518b90\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"X-Clacks-Overhead","description":"X-Clacks-Overhead is a non-standard HTTP header used to transmit tribute messages within server responses.","website":"https://xclacksoverhead.org/home/about","common_platform_enumeration":"","icon":"XClacksOverhead.svg","categories":["Miscellaneous"]}],"data":{"size":126437,"size_decoded":30991,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"89b1278735a866ed47b56bcadf4e6d04","sha1":"32ba9aa0813ad3749f46847d3c3ec8758a7edc93","sha256":"31c6ee0c7c641681fb769fad4533cb236758eb5f5629afae997723c07b140053","sha512":"05eb97c8649d63cf708aa38b1d342f44b6a723274434d46372d8b3560d4da0aa9f6cc876f8662d0bc60cc2aa046cc0697597d8dda8cf010a0bd44ade9e255871","ssdeep":"1536:Bh+OnsvlPYxteMP2xGkFnLm1eYX7jKi+UgphL0L1Ofh7X3HxINuWdvVcpg2aAv7Y:HKlmxP2xhFnLavWhLdfNhMepg2aQY","tlshash":"abc3ea88b1e0b07502d36065c06f5d0af37ead2c9409d4887372d8d6adf958e53abf7a","first_seen":"2026-09-19T11:17:52.92894Z","last_seen":"2026-09-19T22:43:13.627602Z","times_seen":4,"resource_available":true,"data":null}},"time_used":258,"timings":{"blocked":114,"dns":0,"connect":0,"send":0,"wait":144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.loot.co.za/_next/static/u-10JDC4hD8uNx7e7o5DU/_buildManifest.js","fqdn":"www.loot.co.za","domain":"loot.co.za","tld":"co.za"},"ip":{"addr":"54.73.16.8","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zynnex.pro/","date":"2026-09-19T22:41:57.252Z","timestamp":1789857717252,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.loot.co.za","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 16 Nov 2025 00:00:00 GMT","end":"Tue, 15 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"FE:94:51:35:6C:A7:62:18:98:51:39:2F:AC:EC:C5:38:45:81:14:A6","sha256":"25:B8:6A:84:92:E7:21:D6:E5:33:EC:81:A2:76:38:E2:F9:4E:92:B2:A5:79:AB:71:9A:8B:4E:3E:41:33:CF:C3"}}},"request":{"raw":"GET /_next/static/u-10JDC4hD8uNx7e7o5DU/_buildManifest.js HTTP/1.1\r\nHost: www.loot.co.za\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zynnex.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 19 Sep 2026 22:41:59 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: nginx\r\nx-powered-by: Coffee and Cigarettes\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=3600; includeSubDomains; preload\r\nexpect-ct: max-age=86400; enforce\r\norigin-trial: AqnXg+/USXZytK2zRhY3Cmc/5uE1unO3Cg5W0X6/7VMRV42z9QjD5RWfLwDX96Ohjfw2Tkr9n9NVFjKpMoJtjQMAAACHeyJvcmlnaW4iOiJodHRwczovL3d3dy5sb290LmNvLnphOjQ0MyIsImZlYXR1cmUiOiJQcml2YXRlTmV0d29ya0FjY2Vzc05vblNlY3VyZUNvbnRleHRzQWxsb3dlZCIsImV4cGlyeSI6MTcwNzI2Mzk5OSwiaXNTdWJkb21haW4iOnRydWV9\r\nx-clacks-overhead: GNU Terry Pratchett\r\nvary: Origin, Accept-Encoding\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 16 Sep 2026 13:04:26 GMT\r\netag: W/\"d96-1a0aa518b90\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"X-Clacks-Overhead","description":"X-Clacks-Overhead is a non-standard HTTP header used to transmit tribute messages within server responses.","website":"https://xclacksoverhead.org/home/about","common_platform_enumeration":"","icon":"XClacksOverhead.svg","categories":["Miscellaneous"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3478,"size_decoded":2253,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (3478), with no line terminators","md5":"8bf353cfdedcb2633fe0c18b19a8e1b0","sha1":"56eb22343158f3738e23e165e47653d86ce30a8e","sha256":"632c740440f0d472132dc78a702dad3318dc9d61db6d9f9029adbde09638aa9f","sha512":"5eb0aee2025d3a4a7bfb7c05476a0d2b446370c52de44cd9a7c8592041b591c43ae14827e582444fb47d17eaea9b7dd925ae794415a6b95641f19d89336b7b89","ssdeep":"","tlshash":"fe719b9b0121f8264ef1dc8d791f23a3d9c1ed33617504e2dbec4e2d91959bacb5e422","first_seen":"2026-09-19T11:17:52.876862Z","last_seen":"2026-09-19T22:43:13.628361Z","times_seen":4,"resource_available":true,"data":null}},"time_used":2734,"timings":{"blocked":102,"dns":0,"connect":0,"send":0,"wait":2632,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.loot.co.za/resources/public/images/loot/GooglePlay.png","fqdn":"www.loot.co.za","domain":"loot.co.za","tld":"co.za"},"ip":{"addr":"54.73.16.8","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zynnex.pro/","date":"2026-09-19T22:41:57.269Z","timestamp":1789857717269,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.loot.co.za","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 16 Nov 2025 00:00:00 GMT","end":"Tue, 15 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"FE:94:51:35:6C:A7:62:18:98:51:39:2F:AC:EC:C5:38:45:81:14:A6","sha256":"25:B8:6A:84:92:E7:21:D6:E5:33:EC:81:A2:76:38:E2:F9:4E:92:B2:A5:79:AB:71:9A:8B:4E:3E:41:33:CF:C3"}}},"request":{"raw":"GET /resources/public/images/loot/GooglePlay.png HTTP/1.1\r\nHost: www.loot.co.za\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zynnex.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 19 Sep 2026 22:41:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 66846\r\nserver: nginx\r\nx-powered-by: Coffee and Cigarettes\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=3600; includeSubDomains; preload\r\nexpect-ct: max-age=86400; enforce\r\norigin-trial: AqnXg+/USXZytK2zRhY3Cmc/5uE1unO3Cg5W0X6/7VMRV42z9QjD5RWfLwDX96Ohjfw2Tkr9n9NVFjKpMoJtjQMAAACHeyJvcmlnaW4iOiJodHRwczovL3d3dy5sb290LmNvLnphOjQ0MyIsImZlYXR1cmUiOiJQcml2YXRlTmV0d29ya0FjY2Vzc05vblNlY3VyZUNvbnRleHRzQWxsb3dlZCIsImV4cGlyeSI6MTcwNzI2Mzk5OSwiaXNTdWJkb21haW4iOnRydWV9\r\nx-clacks-overhead: GNU Terry Pratchett\r\nvary: Origin\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nlast-modified: Fri, 21 Nov 2025 06:57:48 GMT\r\netag: W/\"1051e-19aa5346de0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"X-Clacks-Overhead","description":"X-Clacks-Overhead is a non-standard HTTP header used to transmit tribute messages within server responses.","website":"https://xclacksoverhead.org/home/about","common_platform_enumeration":"","icon":"XClacksOverhead.svg","categories":["Miscellaneous"]}],"data":{"size":66846,"size_decoded":67691,"mime_type":"image/png","magic":"PNG image data, 1084 x 324, 8-bit/color RGBA, non-interlaced","md5":"36e7990fd90cba1b96c250cdde786273","sha1":"9c2884af4bdc2b90a56d3733474f19283ccfc7ab","sha256":"db96ccace28e561265b17d0a955d234ddbb0ef00fdf991a0ea343868fa7b1b5c","sha512":"3e2a29bf820581980d3fbeaf401cce59df5d7f671c09279d1df9dcb36f98c11bb5118abb77e79855d9a31aa709cecd506d11bcee23a3203fc7433a8fc3778433","ssdeep":"1536:5bIh6UhPWqAYvuuntJ8zUmeqYsxF7cnZnMU1:4TPnAYv7posZnp1","tlshash":"1b63f12feaf810361dd024b312a340322f72a9a715a9848de9cd79cd2d9357e8b5437f","first_seen":"2026-09-19T11:17:52.919379Z","last_seen":"2026-09-19T22:43:13.62933Z","times_seen":4,"resource_available":false,"data":null}},"time_used":314,"timings":{"blocked":100,"dns":0,"connect":0,"send":0,"wait":143,"receive":71,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?rcb=6\u0026frm=0\u0026apvc=0\u0026ae=g\u0026auid=1834574617.1789857718\u0026dt=Solid%20Wood%20Toy%20Storage%20Rack\u0026tid=AW-17544505040\u0026dl=https%3A%2F%2Fzynnex.pro%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=1321621857.1789857718\u0026navt=n\u0026npa=1\u0026ep.ecomm_pagetype=other\u0026epn.ecomm_totalvalue=0\u0026did=dNzg2MD\u0026gdid=dNzg2MD\u0026_tu=CA\u0026gtm=45be69g1v9229426201z871221090za20gzb71221090zd71221090xeaxf1\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115938465~115938469~118012009~118897920~118897930~120213116~120385422~120469145~120469153~120847433\u0026tft=1789857717956\u0026tfd=3879\u0026tids=AW-17544505040\u0026fmt=8","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.153.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zynnex.pro/","date":"2026-09-19T22:41:57.959Z","timestamp":1789857717959,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:04:41 GMT","end":"Fri, 27 Nov 2026 08:04:40 GMT"},"fingerprint":{"sha1":"95:51:3A:74:B2:D6:48:05:37:67:B4:98:88:41:81:F2:F0:9E:EC:4E","sha256":"27:A0:25:F5:B2:3F:C8:25:B7:BF:72:41:6C:48:6A:75:BC:C8:0D:C3:44:11:27:96:CE:FB:61:3D:59:34:73:06"}}},"request":{"raw":"POST /ccm/collect?rcb=6\u0026frm=0\u0026apvc=0\u0026ae=g\u0026auid=1834574617.1789857718\u0026dt=Solid%20Wood%20Toy%20Storage%20Rack\u0026tid=AW-17544505040\u0026dl=https%3A%2F%2Fzynnex.pro%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=1321621857.1789857718\u0026navt=n\u0026npa=1\u0026ep.ecomm_pagetype=other\u0026epn.ecomm_totalvalue=0\u0026did=dNzg2MD\u0026gdid=dNzg2MD\u0026_tu=CA\u0026gtm=45be69g1v9229426201z871221090za20gzb71221090zd71221090xeaxf1\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115938465~115938469~118012009~118897920~118897930~120213116~120385422~120469145~120469153~120847433\u0026tft=1789857717956\u0026tfd=3879\u0026tids=AW-17544505040\u0026fmt=8 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zynnex.pro/\r\nOrigin: https://zynnex.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/plain\r\ncache-control: no-cache, no-store, must-revalidate\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\npragma: no-cache\r\ndate: Sat, 19 Sep 2026 22:41:58 GMT\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://zynnex.pro\r\naccess-control-expose-headers: date,vary,vary,vary,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":539,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T04:41:53.897053Z","times_seen":18561715,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.loot.co.za/_next/static/chunks/pages/_app-03b8d6f485afeb7eecb0.js","fqdn":"www.loot.co.za","domain":"loot.co.za","tld":"co.za"},"ip":{"addr":"54.73.16.8","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zynnex.pro/","date":"2026-09-19T22:41:57.225Z","timestamp":1789857717225,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.loot.co.za","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 16 Nov 2025 00:00:00 GMT","end":"Tue, 15 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"FE:94:51:35:6C:A7:62:18:98:51:39:2F:AC:EC:C5:38:45:81:14:A6","sha256":"25:B8:6A:84:92:E7:21:D6:E5:33:EC:81:A2:76:38:E2:F9:4E:92:B2:A5:79:AB:71:9A:8B:4E:3E:41:33:CF:C3"}}},"request":{"raw":"GET /_next/static/chunks/pages/_app-03b8d6f485afeb7eecb0.js HTTP/1.1\r\nHost: www.loot.co.za\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zynnex.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 19 Sep 2026 22:41:57 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: nginx\r\nx-powered-by: Coffee and Cigarettes\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=3600; includeSubDomains; preload\r\nexpect-ct: max-age=86400; enforce\r\norigin-trial: AqnXg+/USXZytK2zRhY3Cmc/5uE1unO3Cg5W0X6/7VMRV42z9QjD5RWfLwDX96Ohjfw2Tkr9n9NVFjKpMoJtjQMAAACHeyJvcmlnaW4iOiJodHRwczovL3d3dy5sb290LmNvLnphOjQ0MyIsImZlYXR1cmUiOiJQcml2YXRlTmV0d29ya0FjY2Vzc05vblNlY3VyZUNvbnRleHRzQWxsb3dlZCIsImV4cGlyeSI6MTcwNzI2Mzk5OSwiaXNTdWJkb21haW4iOnRydWV9\r\nx-clacks-overhead: GNU Terry Pratchett\r\nvary: Origin, Accept-Encoding\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 16 Sep 2026 13:04:26 GMT\r\netag: W/\"443-1a0aa518b90\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"X-Clacks-Overhead","description":"X-Clacks-Overhead is a non-standard HTTP header used to transmit tribute messages within server responses.","website":"https://xclacksoverhead.org/home/about","common_platform_enumeration":"","icon":"XClacksOverhead.svg","categories":["Miscellaneous"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1091,"size_decoded":1470,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1091), with no line terminators","md5":"21739e9d82becb986784ea60ab0fcab3","sha1":"02b8f04c7f8972cbac1dc9b0aa7cbb1a82d7e4a6","sha256":"4155bf8537cdbd04b2f074a2d327ae38774aea09e05255ae890a9f7e9dd5fa88","sha512":"39585faedf0c8841860c89a4998d6b3b32622df62cd60ef5d75287c459e96f5da83990e806d138f53fb37e37689e962995744a10dc7514e7311b8fa0d9b32b50","ssdeep":"","tlshash":"da111f0dbce174390393707949bf36182abb1b9928ddb04063f0a1d09ef764c9013e9e","first_seen":"2026-09-19T11:17:52.864064Z","last_seen":"2026-09-19T22:43:13.630077Z","times_seen":4,"resource_available":true,"data":null}},"time_used":155,"timings":{"blocked":116,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.termly.io/api/v1/snippets/websites/8ed3761d-3408-4c7b-b314-a3c290746ec4/statistics","fqdn":"app.termly.io","domain":"termly.io","tld":"io"},"ip":{"addr":"104.18.15.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://zynnex.pro/","date":"2026-09-19T22:41:58.192Z","timestamp":1789857718192,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.termly.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Jul 2026 04:46:10 GMT","end":"Thu, 29 Oct 2026 05:46:07 GMT"},"fingerprint":{"sha1":"38:EC:31:8B:D8:EE:37:34:7B:0B:1E:95:A0:86:36:93:6B:6D:55:85","sha256":"B2:FB:73:47:14:E6:67:23:1A:D3:32:49:A3:09:4A:96:9F:41:8B:9E:62:64:F2:75:F2:6B:01:57:79:2B:31:80"}}},"request":{"raw":"OPTIONS /api/v1/snippets/websites/8ed3761d-3408-4c7b-b314-a3c290746ec4/statistics HTTP/1.1\r\nHost: app.termly.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://zynnex.pro/\r\nOrigin: https://zynnex.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 22:41:58 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST\r\naccess-control-expose-headers: \r\naccess-control-max-age: 600\r\naccess-control-allow-headers: content-type\r\nstrict-transport-security: max-age=15768000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'unsafe-eval' 'unsafe-inline' https:; img-src 'self' data: https:; font-src data: https:; style-src 'self' blob: 'unsafe-inline' https:; connect-src 'unsafe-eval' 'unsafe-inline' https: wss://sockets.dixa.io wss://api.appcues.net  wss://*.firebaseio.com; frame-src 'self' https:\r\nx-xss-protection: 1; mode=block\r\nx-ratelimit-limit: 4294967295\r\nx-ratelimit-remaining: 4294967295\r\nx-ratelimit-reset: 0\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\ncf-ray: a3dc19d2cbc37127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":940,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T04:41:53.897053Z","times_seen":18561715,"resource_available":true,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":9,"send":0,"wait":210,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.termly.io/resource-blocker/support/536-f4a2d4666db6b6524935.min.js","fqdn":"app.termly.io","domain":"termly.io","tld":"io"},"ip":{"addr":"104.18.15.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zynnex.pro/","date":"2026-09-19T22:41:58.240Z","timestamp":1789857718240,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.termly.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Jul 2026 04:46:10 GMT","end":"Thu, 29 Oct 2026 05:46:07 GMT"},"fingerprint":{"sha1":"38:EC:31:8B:D8:EE:37:34:7B:0B:1E:95:A0:86:36:93:6B:6D:55:85","sha256":"B2:FB:73:47:14:E6:67:23:1A:D3:32:49:A3:09:4A:96:9F:41:8B:9E:62:64:F2:75:F2:6B:01:57:79:2B:31:80"}}},"request":{"raw":"GET /resource-blocker/support/536-f4a2d4666db6b6524935.min.js HTTP/1.1\r\nHost: app.termly.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zynnex.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 22:41:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Fri, 18 Sep 2026 21:37:04 GMT\r\netag: W/\"6aadaf00-2d1\"\r\ncontent-security-policy: default-src * 'unsafe-inline' 'unsafe-eval';child-src 'self' blob: ;worker-src 'self' blob:;script-src * 'unsafe-inline' 'unsafe-eval'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src *; style-src * 'unsafe-inline'; font-src 'self' https://fonts.googleapis.com https://fonts.gstatic.com data:\r\npriority: u=3,i=?0\r\nage: 544\r\nexpires: Sun, 20 Sep 2026 02:41:58 GMT\r\ncache-control: public, max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: zstd\r\ncf-ray: a3dc19d3091c8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":721,"size_decoded":1271,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (617)","md5":"af8b996b6f6a90c620eb85facd205b13","sha1":"e3576ff8c1df854a78db084a57f9835452005246","sha256":"bbab9730c0183f34a1d0469a7fc3c4f99ca7bbac37210e00e98bbc7d4378b7b5","sha512":"9d0ec91bb554fe76d31fda092cd5e735bcae8443d4ee39ec26d8d1e79f8003700476f58336264ec34e48e669018d3feb68f0fda98389d75dbcae1e4b53e9ea71","ssdeep":"","tlshash":"d30110aaf9762a5c212a05de37728e12ed44006cf5b8903af0a4de1418f3e165520abd","first_seen":"2026-09-14T23:26:13.276124Z","last_seen":"2026-09-20T04:20:38.073123Z","times_seen":58,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.loot.co.za/_next/static/css/dfe1bbb781b4584dde7e.css","fqdn":"www.loot.co.za","domain":"loot.co.za","tld":"co.za"},"ip":{"addr":"54.73.16.8","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zynnex.pro/","date":"2026-09-19T22:41:57.220Z","timestamp":1789857717220,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.loot.co.za","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 16 Nov 2025 00:00:00 GMT","end":"Tue, 15 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"FE:94:51:35:6C:A7:62:18:98:51:39:2F:AC:EC:C5:38:45:81:14:A6","sha256":"25:B8:6A:84:92:E7:21:D6:E5:33:EC:81:A2:76:38:E2:F9:4E:92:B2:A5:79:AB:71:9A:8B:4E:3E:41:33:CF:C3"}}},"request":{"raw":"GET /_next/static/css/dfe1bbb781b4584dde7e.css HTTP/1.1\r\nHost: www.loot.co.za\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zynnex.pro/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 19 Sep 2026 22:41:57 GMT\r\ncontent-type: text/css; charset=UTF-8\r\ncontent-length: 765\r\nserver: nginx\r\nx-powered-by: Coffee and Cigarettes\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=3600; includeSubDomains; preload\r\nexpect-ct: max-age=86400; enforce\r\norigin-trial: AqnXg+/USXZytK2zRhY3Cmc/5uE1unO3Cg5W0X6/7VMRV42z9QjD5RWfLwDX96Ohjfw2Tkr9n9NVFjKpMoJtjQMAAACHeyJvcmlnaW4iOiJodHRwczovL3d3dy5sb290LmNvLnphOjQ0MyIsImZlYXR1cmUiOiJQcml2YXRlTmV0d29ya0FjY2Vzc05vblNlY3VyZUNvbnRleHRzQWxsb3dlZCIsImV4cGlyeSI6MTcwNzI2Mzk5OSwiaXNTdWJkb21haW4iOnRydWV9\r\nx-clacks-overhead: GNU Terry Pratchett\r\nvary: Origin, Accept-Encoding\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 16 Sep 2026 13:04:26 GMT\r\netag: W/\"2fd-1a0aa518b90\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"X-Clacks-Overhead","description":"X-Clacks-Overhead is a non-standard HTTP header used to transmit tribute messages within server responses.","website":"https://xclacksoverhead.org/home/about","common_platform_enumeration":"","icon":"XClacksOverhead.svg","categories":["Miscellaneous"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":765,"size_decoded":1648,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (765), with no line terminators","md5":"606b303c984a9b7fce9a95dbe0985c15","sha1":"4e5f5412c498e6d9d7fcb859c086603a66085816","sha256":"054a71afee386e6bf17c4bc1933dc01c1ba505ad001ac83df08214d81d22e9e1","sha512":"e663cb72c372e2fa455e9e57f55c71ca31ba559b70217c14941bf95a542aa75ccac1ca4d5942415852a7cb3bf4aa0fc214c6d02a76e0f3553c35fa28588f3569","ssdeep":"","tlshash":"c7016b749bd47813d112d0396163b964688f474b21a6cfb2a1603cfd0bc1492d8fb78e","first_seen":"2026-09-19T11:17:52.923236Z","last_seen":"2026-09-19T22:43:13.631387Z","times_seen":4,"resource_available":true,"data":null}},"time_used":438,"timings":{"blocked":-1,"dns":11,"connect":36,"send":0,"wait":38,"receive":0,"ssl":352},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.loot.co.za/_next/static/chunks/cb1608f2-6fee0bba94e5432b481b.js","fqdn":"www.loot.co.za","domain":"loot.co.za","tld":"co.za"},"ip":{"addr":"54.73.16.8","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zynnex.pro/","date":"2026-09-19T22:41:57.226Z","timestamp":1789857717226,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.loot.co.za","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 16 Nov 2025 00:00:00 GMT","end":"Tue, 15 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"FE:94:51:35:6C:A7:62:18:98:51:39:2F:AC:EC:C5:38:45:81:14:A6","sha256":"25:B8:6A:84:92:E7:21:D6:E5:33:EC:81:A2:76:38:E2:F9:4E:92:B2:A5:79:AB:71:9A:8B:4E:3E:41:33:CF:C3"}}},"request":{"raw":"GET /_next/static/chunks/cb1608f2-6fee0bba94e5432b481b.js HTTP/1.1\r\nHost: www.loot.co.za\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zynnex.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 19 Sep 2026 22:41:57 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: nginx\r\nx-powered-by: Coffee and Cigarettes\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=3600; includeSubDomains; preload\r\nexpect-ct: max-age=86400; enforce\r\norigin-trial: AqnXg+/USXZytK2zRhY3Cmc/5uE1unO3Cg5W0X6/7VMRV42z9QjD5RWfLwDX96Ohjfw2Tkr9n9NVFjKpMoJtjQMAAACHeyJvcmlnaW4iOiJodHRwczovL3d3dy5sb290LmNvLnphOjQ0MyIsImZlYXR1cmUiOiJQcml2YXRlTmV0d29ya0FjY2Vzc05vblNlY3VyZUNvbnRleHRzQWxsb3dlZCIsImV4cGlyeSI6MTcwNzI2Mzk5OSwiaXNTdWJkb21haW4iOnRydWV9\r\nx-clacks-overhead: GNU Terry Pratchett\r\nvary: Origin, Accept-Encoding\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 16 Sep 2026 13:04:26 GMT\r\netag: W/\"bab7-1a0aa518b90\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"X-Clacks-Overhead","description":"X-Clacks-Overhead is a non-standard HTTP header used to transmit tribute messages within server responses.","website":"https://xclacksoverhead.org/home/about","common_platform_enumeration":"","icon":"XClacksOverhead.svg","categories":["Miscellaneous"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":47799,"size_decoded":16239,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (47799), with no line terminators","md5":"d496f0f8e88c304d0edb1a0ecd90185b","sha1":"e7e1baeae2205eaf89ee3e8dd8390e1bbb9f5458","sha256":"2351284a0202292c47b2cd6b84c7cc29fa7607e273713aa4a393a9034497ec95","sha512":"435f15511932746ee5a2d1105a31064ae5293657091b264d136bafcb4f7644b059cfb6723ec0b1822c48520bedda290568161f2a3d4bc3bc21d1af62ad32e51f","ssdeep":"768:HCPivqQZSxd7BlV2ZtwAkr0es656pSefIIdqsfgop4L8/IX/kZn:iPivqz7BlItzkHs656sefIW5j/IX/kZn","tlshash":"a9239768e7a4f2bc2bc6979187211034e64e96ae36f84734d72dc6d472272ecc5d6cc8","first_seen":"2026-09-19T11:17:52.870088Z","last_seen":"2026-09-19T22:43:13.631926Z","times_seen":4,"resource_available":true,"data":null}},"time_used":293,"timings":{"blocked":116,"dns":0,"connect":0,"send":0,"wait":177,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.loot.co.za/_next/static/chunks/06f6b0c0-ea6c7d208018659bfb25.js","fqdn":"www.loot.co.za","domain":"loot.co.za","tld":"co.za"},"ip":{"addr":"54.73.16.8","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zynnex.pro/","date":"2026-09-19T22:41:57.235Z","timestamp":1789857717235,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.loot.co.za","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 16 Nov 2025 00:00:00 GMT","end":"Tue, 15 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"FE:94:51:35:6C:A7:62:18:98:51:39:2F:AC:EC:C5:38:45:81:14:A6","sha256":"25:B8:6A:84:92:E7:21:D6:E5:33:EC:81:A2:76:38:E2:F9:4E:92:B2:A5:79:AB:71:9A:8B:4E:3E:41:33:CF:C3"}}},"request":{"raw":"GET /_next/static/chunks/06f6b0c0-ea6c7d208018659bfb25.js HTTP/1.1\r\nHost: www.loot.co.za\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zynnex.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 19 Sep 2026 22:41:57 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: nginx\r\nx-powered-by: Coffee and Cigarettes\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=3600; includeSubDomains; preload\r\nexpect-ct: max-age=86400; enforce\r\norigin-trial: AqnXg+/USXZytK2zRhY3Cmc/5uE1unO3Cg5W0X6/7VMRV42z9QjD5RWfLwDX96Ohjfw2Tkr9n9NVFjKpMoJtjQMAAACHeyJvcmlnaW4iOiJodHRwczovL3d3dy5sb290LmNvLnphOjQ0MyIsImZlYXR1cmUiOiJQcml2YXRlTmV0d29ya0FjY2Vzc05vblNlY3VyZUNvbnRleHRzQWxsb3dlZCIsImV4cGlyeSI6MTcwNzI2Mzk5OSwiaXNTdWJkb21haW4iOnRydWV9\r\nx-clacks-overhead: GNU Terry Pratchett\r\nvary: Origin, Accept-Encoding\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 16 Sep 2026 13:04:26 GMT\r\netag: W/\"8dcbb-1a0aa518b90\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"X-Clacks-Overhead","description":"X-Clacks-Overhead is a non-standard HTTP header used to transmit tribute messages within server responses.","website":"https://xclacksoverhead.org/home/about","common_platform_enumeration":"","icon":"XClacksOverhead.svg","categories":["Miscellaneous"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":580795,"size_decoded":118743,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"22b8d17c8b39336c9e8d9f526076688b","sha1":"354e8fdd79858cb28d227f4db36a34e45c06761f","sha256":"f0423651d55455f3f56beb7fe4656af99c723eedef8fe8b07f4f5406bc6ae698","sha512":"2d8501c036aef5e418fb59d3f7a1f0463c90501964e204bcfec4733a30350ff2ee95bd43a52707068ce08c9c7b61b5f3a24f60fe50d952039e0a826407e4f21a","ssdeep":"12288:0E9KVZ+13qxMZJjTwFuXN4BSWquq2iGuFDeBD1qWaH+LLIIHB:P9xTwT","tlshash":"bec493dae63c933662c5737498deb38e1a5c7957c848867d7ac3a88f2379dd03068e05","first_seen":"2026-09-19T11:17:52.89328Z","last_seen":"2026-09-19T22:43:13.632625Z","times_seen":4,"resource_available":true,"data":null}},"time_used":259,"timings":{"blocked":114,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.loot.co.za/_next/static/chunks/423-bac1f81fcf0ed112a800.js","fqdn":"www.loot.co.za","domain":"loot.co.za","tld":"co.za"},"ip":{"addr":"54.73.16.8","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zynnex.pro/","date":"2026-09-19T22:41:57.242Z","timestamp":1789857717242,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.loot.co.za","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 16 Nov 2025 00:00:00 GMT","end":"Tue, 15 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"FE:94:51:35:6C:A7:62:18:98:51:39:2F:AC:EC:C5:38:45:81:14:A6","sha256":"25:B8:6A:84:92:E7:21:D6:E5:33:EC:81:A2:76:38:E2:F9:4E:92:B2:A5:79:AB:71:9A:8B:4E:3E:41:33:CF:C3"}}},"request":{"raw":"GET /_next/static/chunks/423-bac1f81fcf0ed112a800.js HTTP/1.1\r\nHost: www.loot.co.za\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zynnex.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 19 Sep 2026 22:41:57 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: nginx\r\nx-powered-by: Coffee and Cigarettes\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=3600; includeSubDomains; preload\r\nexpect-ct: max-age=86400; enforce\r\norigin-trial: AqnXg+/USXZytK2zRhY3Cmc/5uE1unO3Cg5W0X6/7VMRV42z9QjD5RWfLwDX96Ohjfw2Tkr9n9NVFjKpMoJtjQMAAACHeyJvcmlnaW4iOiJodHRwczovL3d3dy5sb290LmNvLnphOjQ0MyIsImZlYXR1cmUiOiJQcml2YXRlTmV0d29ya0FjY2Vzc05vblNlY3VyZUNvbnRleHRzQWxsb3dlZCIsImV4cGlyeSI6MTcwNzI2Mzk5OSwiaXNTdWJkb21haW4iOnRydWV9\r\nx-clacks-overhead: GNU Terry Pratchett\r\nvary: Origin, Accept-Encoding\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 16 Sep 2026 13:04:26 GMT\r\netag: W/\"414e-1a0aa518b90\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"X-Clacks-Overhead","description":"X-Clacks-Overhead is a non-standard HTTP header used to transmit tribute messages within server responses.","website":"https://xclacksoverhead.org/home/about","common_platform_enumeration":"","icon":"XClacksOverhead.svg","categories":["Miscellaneous"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16718,"size_decoded":3051,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (16718), with no line terminators","md5":"03e696ffdd3fcad083ec38fa81e4f984","sha1":"a20eb7ea77dfd8920347d7d295a5c7828cb1ebde","sha256":"52e0ff07d8cacc1c4d7caf80aa3c575d6603678e43ac58a1eb7f0691dfac296c","sha512":"1652fa3ec54965ad66a6a0f01d998b3e7bc53155824ee1eb3f657142cd744b05a2898db123f023d160dcdd252c2650809cd8eb335a81cdf1a5317a259f47ae21","ssdeep":"192:gLF547xnE0wtkw7lOyypvgCm00y7DGy6u1jw6/UjI+4iqmZAHbcQ:gLj47xnEPdlOp6P0Fey6i88niqmZAHn","tlshash":"d872aadc76dff32262e3642a502fb046fb9d5d81305e1a03f639e462b518c09d5b6af8","first_seen":"2026-09-19T11:17:52.872785Z","last_seen":"2026-09-19T22:43:13.633338Z","times_seen":4,"resource_available":true,"data":null}},"time_used":290,"timings":{"blocked":114,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.loot.co.za/_next/static/chunks/210-be369397ed7686f13ff8.js","fqdn":"www.loot.co.za","domain":"loot.co.za","tld":"co.za"},"ip":{"addr":"54.73.16.8","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zynnex.pro/","date":"2026-09-19T22:41:57.244Z","timestamp":1789857717244,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.loot.co.za","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 16 Nov 2025 00:00:00 GMT","end":"Tue, 15 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"FE:94:51:35:6C:A7:62:18:98:51:39:2F:AC:EC:C5:38:45:81:14:A6","sha256":"25:B8:6A:84:92:E7:21:D6:E5:33:EC:81:A2:76:38:E2:F9:4E:92:B2:A5:79:AB:71:9A:8B:4E:3E:41:33:CF:C3"}}},"request":{"raw":"GET /_next/static/chunks/210-be369397ed7686f13ff8.js HTTP/1.1\r\nHost: www.loot.co.za\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zynnex.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 19 Sep 2026 22:41:57 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: nginx\r\nx-powered-by: Coffee and Cigarettes\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=3600; includeSubDomains; preload\r\nexpect-ct: max-age=86400; enforce\r\norigin-trial: AqnXg+/USXZytK2zRhY3Cmc/5uE1unO3Cg5W0X6/7VMRV42z9QjD5RWfLwDX96Ohjfw2Tkr9n9NVFjKpMoJtjQMAAACHeyJvcmlnaW4iOiJodHRwczovL3d3dy5sb290LmNvLnphOjQ0MyIsImZlYXR1cmUiOiJQcml2YXRlTmV0d29ya0FjY2Vzc05vblNlY3VyZUNvbnRleHRzQWxsb3dlZCIsImV4cGlyeSI6MTcwNzI2Mzk5OSwiaXNTdWJkb21haW4iOnRydWV9\r\nx-clacks-overhead: GNU Terry Pratchett\r\nvary: Origin, Accept-Encoding\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 16 Sep 2026 13:04:26 GMT\r\netag: W/\"5c5b-1a0aa518b90\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"X-Clacks-Overhead","description":"X-Clacks-Overhead is a non-standard HTTP header used to transmit tribute messages within server responses.","website":"https://xclacksoverhead.org/home/about","common_platform_enumeration":"","icon":"XClacksOverhead.svg","categories":["Miscellaneous"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23643,"size_decoded":9431,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (23643), with no line terminators","md5":"b45715cd600ae541cec53f3cf3001834","sha1":"aedc3e13de114db2336353cd6380d76dc9e69cf3","sha256":"b825ce7c7ec955ae22d08666c9890a5e5b24e0b6a654ef55a6109256bcf03d48","sha512":"214cd00f48b1f618b3848c330a5f7c1d5cbb416bb052654a535166be4ec28b4751d7dd1e11e671b11b28edf4f9abe9d8663db4a6b2c8170888895e8968b46063","ssdeep":"384:+XI72ufrVAPIrX0PyACvO2RPe5t9gRP8wXFCz9ky7OpX/MNsIN:+XI72ufhuIr0P7CvO5UXo","tlshash":"a9b21a89b4f6b78d06df9a2154bfb016f13e5a06743ddc02f824c1916b0528ec677b6b","first_seen":"2026-09-19T11:17:52.874377Z","last_seen":"2026-09-19T22:43:13.634006Z","times_seen":4,"resource_available":true,"data":null}},"time_used":258,"timings":{"blocked":114,"dns":0,"connect":0,"send":0,"wait":144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.loot.co.za/_next/static/chunks/framework-a43d87e2054bbafa5ab9.js","fqdn":"www.loot.co.za","domain":"loot.co.za","tld":"co.za"},"ip":{"addr":"54.73.16.8","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zynnex.pro/","date":"2026-09-19T22:41:57.223Z","timestamp":1789857717223,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.loot.co.za","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 16 Nov 2025 00:00:00 GMT","end":"Tue, 15 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"FE:94:51:35:6C:A7:62:18:98:51:39:2F:AC:EC:C5:38:45:81:14:A6","sha256":"25:B8:6A:84:92:E7:21:D6:E5:33:EC:81:A2:76:38:E2:F9:4E:92:B2:A5:79:AB:71:9A:8B:4E:3E:41:33:CF:C3"}}},"request":{"raw":"GET /_next/static/chunks/framework-a43d87e2054bbafa5ab9.js HTTP/1.1\r\nHost: www.loot.co.za\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zynnex.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 19 Sep 2026 22:41:57 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: nginx\r\nx-powered-by: Coffee and Cigarettes\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=3600; includeSubDomains; preload\r\nexpect-ct: max-age=86400; enforce\r\norigin-trial: AqnXg+/USXZytK2zRhY3Cmc/5uE1unO3Cg5W0X6/7VMRV42z9QjD5RWfLwDX96Ohjfw2Tkr9n9NVFjKpMoJtjQMAAACHeyJvcmlnaW4iOiJodHRwczovL3d3dy5sb290LmNvLnphOjQ0MyIsImZlYXR1cmUiOiJQcml2YXRlTmV0d29ya0FjY2Vzc05vblNlY3VyZUNvbnRleHRzQWxsb3dlZCIsImV4cGlyeSI6MTcwNzI2Mzk5OSwiaXNTdWJkb21haW4iOnRydWV9\r\nx-clacks-overhead: GNU Terry Pratchett\r\nvary: Origin, Accept-Encoding\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 16 Sep 2026 13:04:26 GMT\r\netag: W/\"1fdfe-1a0aa518b90\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"X-Clacks-Overhead","description":"X-Clacks-Overhead is a non-standard HTTP header used to transmit tribute messages within server responses.","website":"https://xclacksoverhead.org/home/about","common_platform_enumeration":"","icon":"XClacksOverhead.svg","categories":["Miscellaneous"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":130558,"size_decoded":41917,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"1493d1b5d43a56bad82a7d773ecd12ce","sha1":"db6b0cbc44e94e28f2458e1b829e6206c0086647","sha256":"32b6e5617f40e464511d8fa073e352575fafdfca501f254b76f9fdc976b90335","sha512":"0cfd45e3cdfed24dd9d4df630efdc827841a4b5a291a0c33c4acf37d16bae9dc8171cde9e9725592806aef2d7538a948fd20f41e7870dca019fd7d5d0d813b80","ssdeep":"1536:5v3hOGLK4QPDB1vSPEySuS5xvfza6U7VPYweHPYn/y4:5fhOGAxfY7VdeHPYn//","tlshash":"11d307d93992f5216bf311b710af1807733d1a1b280c4960a212eddeb5fd45ea12bf9e","first_seen":"2026-09-19T11:17:52.906042Z","last_seen":"2026-09-19T22:43:13.634744Z","times_seen":4,"resource_available":true,"data":null}},"time_used":334,"timings":{"blocked":-1,"dns":8,"connect":36,"send":0,"wait":180,"receive":0,"ssl":110},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.loot.co.za/_next/static/chunks/4a3ea9cd-3a74e7e4e4f286e595fd.js","fqdn":"www.loot.co.za","domain":"loot.co.za","tld":"co.za"},"ip":{"addr":"54.73.16.8","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zynnex.pro/","date":"2026-09-19T22:41:57.231Z","timestamp":1789857717231,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.loot.co.za","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 16 Nov 2025 00:00:00 GMT","end":"Tue, 15 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"FE:94:51:35:6C:A7:62:18:98:51:39:2F:AC:EC:C5:38:45:81:14:A6","sha256":"25:B8:6A:84:92:E7:21:D6:E5:33:EC:81:A2:76:38:E2:F9:4E:92:B2:A5:79:AB:71:9A:8B:4E:3E:41:33:CF:C3"}}},"request":{"raw":"GET /_next/static/chunks/4a3ea9cd-3a74e7e4e4f286e595fd.js HTTP/1.1\r\nHost: www.loot.co.za\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zynnex.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 19 Sep 2026 22:41:57 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: nginx\r\nx-powered-by: Coffee and Cigarettes\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=3600; includeSubDomains; preload\r\nexpect-ct: max-age=86400; enforce\r\norigin-trial: AqnXg+/USXZytK2zRhY3Cmc/5uE1unO3Cg5W0X6/7VMRV42z9QjD5RWfLwDX96Ohjfw2Tkr9n9NVFjKpMoJtjQMAAACHeyJvcmlnaW4iOiJodHRwczovL3d3dy5sb290LmNvLnphOjQ0MyIsImZlYXR1cmUiOiJQcml2YXRlTmV0d29ya0FjY2Vzc05vblNlY3VyZUNvbnRleHRzQWxsb3dlZCIsImV4cGlyeSI6MTcwNzI2Mzk5OSwiaXNTdWJkb21haW4iOnRydWV9\r\nx-clacks-overhead: GNU Terry Pratchett\r\nvary: Origin, Accept-Encoding\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 16 Sep 2026 13:04:26 GMT\r\netag: W/\"2a80a-1a0aa518b90\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"X-Clacks-Overhead","description":"X-Clacks-Overhead is a non-standard HTTP header used to transmit tribute messages within server responses.","website":"https://xclacksoverhead.org/home/about","common_platform_enumeration":"","icon":"XClacksOverhead.svg","categories":["Miscellaneous"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":174090,"size_decoded":54034,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"f57f24992357ad36865bcdc32c137daf","sha1":"376fe7792b7037f21548eb023ab2869aeccb7629","sha256":"aacb28e9bd85ac28b21ce00f0d1811e65fd4dea34a2f5953b6ca325eb8560ac5","sha512":"e41874b45fc41da44288ae82d81ebfac0508c8b105f5605f331d9fe46afcc49f3edbb77b9e3c811bd9325a5877a5062ecd142dbfc2e0abf8cadde67dcc331925","ssdeep":"1536:tEzIIVv/QU81bXXx3w62MS5e5z7ulIqIERKIFVqOInWy53UVrOv+TCGqPl8LfZjM:G0IHyR8OFU8OcxDI5eIn3+y4RbX","tlshash":"610418c873c1712686a721a4502f150ee23b79542a0b8694f376d4d6ac7ca8f71bfe3d","first_seen":"2026-09-19T11:17:52.914191Z","last_seen":"2026-09-19T22:43:13.635487Z","times_seen":4,"resource_available":true,"data":null}},"time_used":188,"timings":{"blocked":114,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnv3.loot.co.za/resources/public/images/loot/PlainArrow_Right.svg","fqdn":"cdnv3.loot.co.za","domain":"loot.co.za","tld":"co.za"},"ip":{"addr":"104.20.43.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zynnex.pro/","date":"2026-09-19T22:41:57.265Z","timestamp":1789857717265,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.loot.co.za","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 22 Sep 2025 00:00:00 GMT","end":"Fri, 23 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:91:A2:AD:5F:1C:9F:21:5D:96:64:04:CA:DC:0B:13:A7:51:93:A7","sha256":"E8:27:D2:D2:51:67:94:A1:FA:F8:24:18:0E:57:21:D1:68:C8:5B:A7:54:25:B3:2A:7E:B3:3F:D7:08:94:82:A8"}}},"request":{"raw":"GET /resources/public/images/loot/PlainArrow_Right.svg HTTP/1.1\r\nHost: cdnv3.loot.co.za\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zynnex.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 19 Sep 2026 22:42:04 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nx-powered-by: Coffee and Cigarettes\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=3600; includeSubDomains; preload\r\nexpect-ct: max-age=86400; enforce\r\norigin-trial: AqnXg+/USXZytK2zRhY3Cmc/5uE1unO3Cg5W0X6/7VMRV42z9QjD5RWfLwDX96Ohjfw2Tkr9n9NVFjKpMoJtjQMAAACHeyJvcmlnaW4iOiJodHRwczovL3d3dy5sb290LmNvLnphOjQ0MyIsImZlYXR1cmUiOiJQcml2YXRlTmV0d29ya0FjY2Vzc05vblNlY3VyZUNvbnRleHRzQWxsb3dlZCIsImV4cGlyeSI6MTcwNzI2Mzk5OSwiaXNTdWJkb21haW4iOnRydWV9\r\nx-clacks-overhead: GNU Terry Pratchett\r\nvary: Origin, Accept-Encoding\r\ncache-control: public, max-age=31536000\r\nlast-modified: Fri, 20 Oct 2023 09:55:28 GMT\r\netag: W/\"23e-18b4c82e280\"\r\nage: 702576\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: a3dc19f899905693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"X-Clacks-Overhead","description":"X-Clacks-Overhead is a non-standard HTTP header used to transmit tribute messages within server responses.","website":"https://xclacksoverhead.org/home/about","common_platform_enumeration":"","icon":"XClacksOverhead.svg","categories":["Miscellaneous"]}],"data":{"size":574,"size_decoded":1285,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bb55dcab1c6d476b0ac63c05ff448e0d","sha1":"2bc254577e45fbce9fd9115eb8bfd91a82c8bcf0","sha256":"a349f9ca388ae09f46ff435895ca50fe502650a476e00a127155af72264efd07","sha512":"0657279b3d140ccc9f809b413345fc90c2e6294f45b2ee41eae6de02fd9e0493ab3c6c3960fd4ac65ba9a10b0b3769c9292743da05b7ab88ab22ed23658ff75b","ssdeep":"","tlshash":"86f0267441555c7d7c11452197d4e2c21376349ff6602d187d952efdbf4946003d26ef","first_seen":"2026-09-19T11:17:52.900487Z","last_seen":"2026-09-19T22:43:13.636517Z","times_seen":4,"resource_available":false,"data":null}},"time_used":7006,"timings":{"blocked":347,"dns":0,"connect":2,"send":0,"wait":33,"receive":0,"ssl":6621},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnv3.loot.co.za/resources/public/images/loot/HeartLine.svg","fqdn":"cdnv3.loot.co.za","domain":"loot.co.za","tld":"co.za"},"ip":{"addr":"104.20.43.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zynnex.pro/","date":"2026-09-19T22:41:57.267Z","timestamp":1789857717267,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.loot.co.za","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 22 Sep 2025 00:00:00 GMT","end":"Fri, 23 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:91:A2:AD:5F:1C:9F:21:5D:96:64:04:CA:DC:0B:13:A7:51:93:A7","sha256":"E8:27:D2:D2:51:67:94:A1:FA:F8:24:18:0E:57:21:D1:68:C8:5B:A7:54:25:B3:2A:7E:B3:3F:D7:08:94:82:A8"}}},"request":{"raw":"GET /resources/public/images/loot/HeartLine.svg HTTP/1.1\r\nHost: cdnv3.loot.co.za\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zynnex.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 19 Sep 2026 22:41:57 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nx-powered-by: Coffee and Cigarettes\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=3600; includeSubDomains; preload\r\nexpect-ct: max-age=86400; enforce\r\norigin-trial: AqnXg+/USXZytK2zRhY3Cmc/5uE1unO3Cg5W0X6/7VMRV42z9QjD5RWfLwDX96Ohjfw2Tkr9n9NVFjKpMoJtjQMAAACHeyJvcmlnaW4iOiJodHRwczovL3d3dy5sb290LmNvLnphOjQ0MyIsImZlYXR1cmUiOiJQcml2YXRlTmV0d29ya0FjY2Vzc05vblNlY3VyZUNvbnRleHRzQWxsb3dlZCIsImV4cGlyeSI6MTcwNzI2Mzk5OSwiaXNTdWJkb21haW4iOnRydWV9\r\nx-clacks-overhead: GNU Terry Pratchett\r\nvary: Origin, Accept-Encoding\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Oct 2023 09:55:28 GMT\r\netag: W/\"4b9-18b4c82e280\"\r\ncontent-encoding: gzip\r\nage: 1687680\r\ncf-cache-status: HIT\r\ncf-ray: a3dc19d09b655693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"X-Clacks-Overhead","description":"X-Clacks-Overhead is a non-standard HTTP header used to transmit tribute messages within server responses.","website":"https://xclacksoverhead.org/home/about","common_platform_enumeration":"","icon":"XClacksOverhead.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1209,"size_decoded":1676,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e1a7c38804fb22f5606e6246955c640c","sha1":"a4059b77d0736963d0fec0ef327ba9b89e4568ca","sha256":"0ec3395599ab3ba3b8ffb981dc73d725fe7e7d15281ac2fd0272ff028e71138b","sha512":"9ab91842d8ba881310d94b22885b452b9f89a88acd474169eeb13dc7807288727044a6ae15515549065c01f8f995006be436e0fc0c54f14eb0f170db423a2393","ssdeep":"","tlshash":"1c21214683e446be9f14462d8270ba8a73d5ed67f530e58c7faf0c67e58d8c402487e9","first_seen":"2026-09-19T11:17:52.885987Z","last_seen":"2026-09-19T22:43:13.637235Z","times_seen":4,"resource_available":false,"data":null}},"time_used":613,"timings":{"blocked":347,"dns":0,"connect":2,"send":0,"wait":35,"receive":0,"ssl":227},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnv3.loot.co.za/resources/public/images/loot/facebook-svgrepo-com.svg","fqdn":"cdnv3.loot.co.za","domain":"loot.co.za","tld":"co.za"},"ip":{"addr":"104.20.43.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zynnex.pro/","date":"2026-09-19T22:41:57.272Z","timestamp":1789857717272,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.loot.co.za","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 22 Sep 2025 00:00:00 GMT","end":"Fri, 23 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:91:A2:AD:5F:1C:9F:21:5D:96:64:04:CA:DC:0B:13:A7:51:93:A7","sha256":"E8:27:D2:D2:51:67:94:A1:FA:F8:24:18:0E:57:21:D1:68:C8:5B:A7:54:25:B3:2A:7E:B3:3F:D7:08:94:82:A8"}}},"request":{"raw":"GET /resources/public/images/loot/facebook-svgrepo-com.svg HTTP/1.1\r\nHost: cdnv3.loot.co.za\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zynnex.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 19 Sep 2026 22:41:57 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nx-powered-by: Coffee and Cigarettes\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=3600; includeSubDomains; preload\r\nexpect-ct: max-age=86400; enforce\r\norigin-trial: AqnXg+/USXZytK2zRhY3Cmc/5uE1unO3Cg5W0X6/7VMRV42z9QjD5RWfLwDX96Ohjfw2Tkr9n9NVFjKpMoJtjQMAAACHeyJvcmlnaW4iOiJodHRwczovL3d3dy5sb290LmNvLnphOjQ0MyIsImZlYXR1cmUiOiJQcml2YXRlTmV0d29ya0FjY2Vzc05vblNlY3VyZUNvbnRleHRzQWxsb3dlZCIsImV4cGlyeSI6MTcwNzI2Mzk5OSwiaXNTdWJkb21haW4iOnRydWV9\r\nx-clacks-overhead: GNU Terry Pratchett\r\nvary: Origin, Accept-Encoding\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Oct 2023 09:55:28 GMT\r\netag: W/\"404-18b4c82e280\"\r\ncontent-encoding: gzip\r\nage: 359369\r\ncf-cache-status: HIT\r\ncf-ray: a3dc19cf4a8b5693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"X-Clacks-Overhead","description":"X-Clacks-Overhead is a non-standard HTTP header used to transmit tribute messages within server responses.","website":"https://xclacksoverhead.org/home/about","common_platform_enumeration":"","icon":"XClacksOverhead.svg","categories":["Miscellaneous"]}],"data":{"size":1028,"size_decoded":1452,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"27512103901e7e7157a846643c64bb29","sha1":"22d0566ea43486bf24361a6918ba131702b8aa75","sha256":"e739e786476ca560cb5c37742866c8b21250d2f5211a8669e1a3db7a2c2a4323","sha512":"07c523c672bda64734f86a75a6c2ff36f1b0df65719fb5d7c27facdb554f57175e666431e7138f149aa28ebe1769d7fdaab1aaa5e4eb65a8667c3cfc2e9426dc","ssdeep":"","tlshash":"021156c586ff847728f96a3297f2e1830a3023f698050a79b615d9667f061904d2b9f4","first_seen":"2026-09-19T11:17:52.931334Z","last_seen":"2026-09-19T22:43:13.638284Z","times_seen":4,"resource_available":false,"data":null}},"time_used":395,"timings":{"blocked":363,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnv3.loot.co.za/resources/public/images/loot/instagram_round_icon_social_media_icon.svg","fqdn":"cdnv3.loot.co.za","domain":"loot.co.za","tld":"co.za"},"ip":{"addr":"104.20.43.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zynnex.pro/","date":"2026-09-19T22:41:57.273Z","timestamp":1789857717273,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.loot.co.za","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 22 Sep 2025 00:00:00 GMT","end":"Fri, 23 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:91:A2:AD:5F:1C:9F:21:5D:96:64:04:CA:DC:0B:13:A7:51:93:A7","sha256":"E8:27:D2:D2:51:67:94:A1:FA:F8:24:18:0E:57:21:D1:68:C8:5B:A7:54:25:B3:2A:7E:B3:3F:D7:08:94:82:A8"}}},"request":{"raw":"GET /resources/public/images/loot/instagram_round_icon_social_media_icon.svg HTTP/1.1\r\nHost: cdnv3.loot.co.za\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zynnex.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 19 Sep 2026 22:41:57 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nx-powered-by: Coffee and Cigarettes\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=3600; includeSubDomains; preload\r\nexpect-ct: max-age=86400; enforce\r\norigin-trial: AqnXg+/USXZytK2zRhY3Cmc/5uE1unO3Cg5W0X6/7VMRV42z9QjD5RWfLwDX96Ohjfw2Tkr9n9NVFjKpMoJtjQMAAACHeyJvcmlnaW4iOiJodHRwczovL3d3dy5sb290LmNvLnphOjQ0MyIsImZlYXR1cmUiOiJQcml2YXRlTmV0d29ya0FjY2Vzc05vblNlY3VyZUNvbnRleHRzQWxsb3dlZCIsImV4cGlyeSI6MTcwNzI2Mzk5OSwiaXNTdWJkb21haW4iOnRydWV9\r\nx-clacks-overhead: GNU Terry Pratchett\r\nvary: Origin, Accept-Encoding\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Oct 2023 09:55:28 GMT\r\netag: W/\"ac2-18b4c82e280\"\r\ncontent-encoding: gzip\r\nage: 1687680\r\ncf-cache-status: HIT\r\ncf-ray: a3dc19cf4a8c5693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"X-Clacks-Overhead","description":"X-Clacks-Overhead is a non-standard HTTP header used to transmit tribute messages within server responses.","website":"https://xclacksoverhead.org/home/about","common_platform_enumeration":"","icon":"XClacksOverhead.svg","categories":["Miscellaneous"]}],"data":{"size":2754,"size_decoded":2231,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"461ff84517d1424c8edbde5287eb4e3c","sha1":"71866cf2795a83ef6f90798a68a7d140055c32ce","sha256":"55230c03201e75ddbb902fc3fe4b49eecea26fafd337c018406314b7f99f8c6c","sha512":"9b574733db46ca17b363241f61662007818ec35202c391cf7738f604dd9e92d02d4cc3a41103170b5037314e0f96c1b21e6b40e0377140d5f2a1633eaa0c7b1f","ssdeep":"","tlshash":"e951854ac319d27bfd85412c44f924863016df8aa470d38cfdaf561ae71d8d1128cbee","first_seen":"2026-09-19T11:17:52.894407Z","last_seen":"2026-09-19T22:43:13.639035Z","times_seen":4,"resource_available":false,"data":null}},"time_used":393,"timings":{"blocked":363,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-17544505040\u0026cx=c\u0026gtm=4e69g1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zynnex.pro/","date":"2026-09-19T22:41:57.704Z","timestamp":1789857717704,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:04:47 GMT","end":"Fri, 27 Nov 2026 08:04:46 GMT"},"fingerprint":{"sha1":"A8:7D:85:D0:70:29:F0:BA:D0:9E:95:03:C3:BE:58:8B:F1:10:A9:7C","sha256":"21:1D:48:CD:78:8D:E2:B1:1E:91:43:B5:47:5F:37:F6:D1:54:A6:B1:41:15:4E:3F:FD:5C:28:86:5F:0C:F8:43"}}},"request":{"raw":"GET /gtag/js?id=AW-17544505040\u0026cx=c\u0026gtm=4e69g1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zynnex.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Sat, 19 Sep 2026 22:41:57 GMT\r\nexpires: Sat, 19 Sep 2026 22:41:57 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 164501\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":483175,"size_decoded":165085,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7912)","md5":"a590442a70932d6de262822950a86bec","sha1":"2d5d4e8a316fddab48f3d6e2448be2c9b75f608d","sha256":"a9d9aed602e078b3e6fd4b9dd0668cbd164ded8d356222d44141e8d2134520d0","sha512":"77db5a7596bfbf3bdfe063e8ebd6183ad09338e27fd0b3d3c031b3ba79f9263529dfe62c30887b746b396ad30fe1ac9037235e4fb994f6841c09f75029596e62","ssdeep":"6144:jI1rBlPP1gbcjM7X+3Kbcc6MbBEAF33GR3LrcKQTTf:wf2btoD3EKQ3","tlshash":"4aa419cd73d674229392f574903f01cba67a29a2b45cc899f289dce42e3468a5173f7c","first_seen":"2026-09-19T22:05:18.486583Z","last_seen":"2026-09-19T22:43:13.639775Z","times_seen":2,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.loot.co.za/_next/static/chunks/169-79940b462964ce74a7c5.js","fqdn":"www.loot.co.za","domain":"loot.co.za","tld":"co.za"},"ip":{"addr":"54.73.16.8","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zynnex.pro/","date":"2026-09-19T22:41:57.236Z","timestamp":1789857717236,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.loot.co.za","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 16 Nov 2025 00:00:00 GMT","end":"Tue, 15 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"FE:94:51:35:6C:A7:62:18:98:51:39:2F:AC:EC:C5:38:45:81:14:A6","sha256":"25:B8:6A:84:92:E7:21:D6:E5:33:EC:81:A2:76:38:E2:F9:4E:92:B2:A5:79:AB:71:9A:8B:4E:3E:41:33:CF:C3"}}},"request":{"raw":"GET /_next/static/chunks/169-79940b462964ce74a7c5.js HTTP/1.1\r\nHost: www.loot.co.za\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zynnex.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 19 Sep 2026 22:41:57 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: nginx\r\nx-powered-by: Coffee and Cigarettes\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=3600; includeSubDomains; preload\r\nexpect-ct: max-age=86400; enforce\r\norigin-trial: AqnXg+/USXZytK2zRhY3Cmc/5uE1unO3Cg5W0X6/7VMRV42z9QjD5RWfLwDX96Ohjfw2Tkr9n9NVFjKpMoJtjQMAAACHeyJvcmlnaW4iOiJodHRwczovL3d3dy5sb290LmNvLnphOjQ0MyIsImZlYXR1cmUiOiJQcml2YXRlTmV0d29ya0FjY2Vzc05vblNlY3VyZUNvbnRleHRzQWxsb3dlZCIsImV4cGlyeSI6MTcwNzI2Mzk5OSwiaXNTdWJkb21haW4iOnRydWV9\r\nx-clacks-overhead: GNU Terry Pratchett\r\nvary: Origin, Accept-Encoding\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 16 Sep 2026 13:04:26 GMT\r\netag: W/\"1924-1a0aa518b90\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"X-Clacks-Overhead","description":"X-Clacks-Overhead is a non-standard HTTP header used to transmit tribute messages within server responses.","website":"https://xclacksoverhead.org/home/about","common_platform_enumeration":"","icon":"XClacksOverhead.svg","categories":["Miscellaneous"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6436,"size_decoded":3686,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6436), with no line terminators","md5":"a93d42dd9b8add42a386ba6e9fc7447b","sha1":"dcd6a89222c8df80e90a0d4023b1cfe0cc5997a5","sha256":"67b6689ee93f5f6bf49369cbd0155838a0fc76cba9d2d3a1d1480493e81bbf37","sha512":"4f25284478a97f859a1592a1ed95cb468bffc457c7c44352bf66cf01651f659dffb2164146548d688c6d2aa6d9295f6118ffdd7115b55e8c206e8695d835445a","ssdeep":"192:xiKmhN6scFuB7U8PHGq2X7jv8CER5D+eA:xAN1xNQX7LSSb","tlshash":"83d1a9c8b496f0dd56e714e5406f110a21bf2d1c640c9514f676e8e46bbe71f9223f1e","first_seen":"2026-09-19T11:17:52.902472Z","last_seen":"2026-09-19T22:43:13.640529Z","times_seen":4,"resource_available":true,"data":null}},"time_used":290,"timings":{"blocked":114,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.loot.co.za/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"www.loot.co.za","domain":"loot.co.za","tld":"co.za"},"ip":{"addr":"54.73.16.8","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zynnex.pro/","date":"2026-09-19T22:41:57.250Z","timestamp":1789857717250,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.loot.co.za","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 16 Nov 2025 00:00:00 GMT","end":"Tue, 15 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"FE:94:51:35:6C:A7:62:18:98:51:39:2F:AC:EC:C5:38:45:81:14:A6","sha256":"25:B8:6A:84:92:E7:21:D6:E5:33:EC:81:A2:76:38:E2:F9:4E:92:B2:A5:79:AB:71:9A:8B:4E:3E:41:33:CF:C3"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: www.loot.co.za\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zynnex.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ndate: Sat, 19 Sep 2026 22:41:57 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: nginx\r\nx-powered-by: Next.js\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=3600; includeSubDomains; preload\r\nexpect-ct: max-age=86400; enforce\r\norigin-trial: AqnXg+/USXZytK2zRhY3Cmc/5uE1unO3Cg5W0X6/7VMRV42z9QjD5RWfLwDX96Ohjfw2Tkr9n9NVFjKpMoJtjQMAAACHeyJvcmlnaW4iOiJodHRwczovL3d3dy5sb290LmNvLnphOjQ0MyIsImZlYXR1cmUiOiJQcml2YXRlTmV0d29ya0FjY2Vzc05vblNlY3VyZUNvbnRleHRzQWxsb3dlZCIsImV4cGlyeSI6MTcwNzI2Mzk5OSwiaXNTdWJkb21haW4iOnRydWV9\r\nx-clacks-overhead: GNU Terry Pratchett\r\nvary: Origin, Accept-Encoding\r\netag: \"baf-JAgcPN/0p0Mog1yfkuFMgRiEPdA\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"X-Clacks-Overhead","description":"X-Clacks-Overhead is a non-standard HTTP header used to transmit tribute messages within server responses.","website":"https://xclacksoverhead.org/home/about","common_platform_enumeration":"","icon":"XClacksOverhead.svg","categories":["Miscellaneous"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T04:41:53.897053Z","times_seen":18561715,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.cartbooster.io/preload","fqdn":"s.cartbooster.io","domain":"cartbooster.io","tld":"io"},"ip":{"addr":"104.21.24.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zynnex.pro/","date":"2026-09-19T22:41:57.718Z","timestamp":1789857717718,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cartbooster.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 20:38:22 GMT","end":"Thu, 03 Dec 2026 21:36:44 GMT"},"fingerprint":{"sha1":"93:A0:0A:C3:44:27:9A:4E:63:80:F2:CE:34:96:BC:38:7D:0D:ED:08","sha256":"CB:7B:09:F6:66:6C:78:4C:F8:E3:10:B0:AD:D0:3A:50:65:FF:0D:BD:E1:32:EE:E3:EE:BC:FF:96:09:AE:69:6D"}}},"request":{"raw":"GET /preload HTTP/1.1\r\nHost: s.cartbooster.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zynnex.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:41:57 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nsurrogate-control: no-store\r\ncache-control: no-store, no-cache, must-revalidate, proxy-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\netag: W/\"7ab-gTqKeQfZG4GhpERcQWC4GUgPvM4\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GVlHfXuDtSh1rOVS8JvfqeAkbDBxO04NNwR6roLD2JcBBYYxHXDwdhGxexB2dyjKU%2BiUPcbwTi7962RRQoNnqWm6JQT6pVPq88OCqExH73sZE94hcjICo4eBdem63nHj79Zy\"}]}\r\ncf-ray: a3dc19cfda304e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":1963,"size_decoded":1881,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1963), with no line terminators","md5":"bd2a53286f2eb094d351e6c80d4eb0f4","sha1":"813a8a7907d91b81a1a4445c4160b819480fbcce","sha256":"bfe5e8554f1bdd385d25ea0fc3bf79704fd3997a1e28e6bcc1c4a20027b20428","sha512":"95fd1a019df48a5932bb4dac87dd001365807e5e9af1a519382c6ab9f48cb4e32d08c03e94f6f235377f324b63b3a6840e8f8ad0aba38b4daef2f15630412a24","ssdeep":"","tlshash":"1d4133a47bd1b2f291f2519618ff7240e833a1f9591590e2e510a9423c3dd8783b7f8e","first_seen":"2026-08-26T18:03:31.246149Z","last_seen":"2026-09-19T22:43:13.641278Z","times_seen":13,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":6,"connect":14,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.retargeted.co/1/xe9aDx.js","fqdn":"s.retargeted.co","domain":"retargeted.co","tld":"co"},"ip":{"addr":"172.67.206.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zynnex.pro/","date":"2026-09-19T22:41:57.721Z","timestamp":1789857717721,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"retargeted.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 07:42:34 GMT","end":"Tue, 01 Dec 2026 08:40:53 GMT"},"fingerprint":{"sha1":"13:65:F4:3F:12:B9:A4:7C:95:80:71:72:12:F3:21:B5:F6:2D:31:35","sha256":"DB:45:DA:95:DE:F9:73:3D:83:FA:72:C9:16:4C:39:BB:A0:05:13:30:EF:19:71:48:43:EF:AD:5D:DA:DB:2C:13"}}},"request":{"raw":"GET /1/xe9aDx.js HTTP/1.1\r\nHost: s.retargeted.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zynnex.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nsurrogate-control: no-store\r\ncache-control: no-store, no-cache, must-revalidate, proxy-revalidate\r\nexpires: 0\r\naccess-control-allow-origin: *\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-disposition: inline\r\ncontent-encoding: zstd\r\netag: W/\"2b0-SAwdDr4LKWZuWxXnb+Q1OXee3yA\"\r\ndate: Sat, 19 Sep 2026 22:41:57 GMT\r\npriority: u=3,i=?0\r\ncf-cache-status: BYPASS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AgMaq0ulxhx%2F6S61h2KO87j3FFii6%2F0%2F0lGk8UIon7AYckcNXc4Fuu1buS1l4csKk7O5nyVr0%2F%2F5QXlPln%2Frqeyt3%2B2lQaVyVnXKxdg02o5dRzd7AuvYyQfgkDBW18zcFSM%3D\"}]}\r\ncf-ray: a3dc19cfe9e249c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":688,"size_decoded":1233,"mime_type":"text/plain; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (687)","md5":"0750f7681981dc73f0fd8f5891b1feb4","sha1":"480c1d0ebe0b29666e5b15e76fe43539779edf20","sha256":"aa876ab7ae6e1399f621285487f522a68c5e3a51996820ea4fcd2fb044cd31a4","sha512":"f1f34b24b572688f3cbd946af597ef2fe5ac33f4a40178414d7a2d951fb2a49ee4c34d4517b4d6c8565cebfda988ff48fd68aa45538319003f9e865f4fbdbeea","ssdeep":"","tlshash":"3a017bf63191527c45b4a15b32aff740baf220e26c9f25488228cc10799cd8b80bbde9","first_seen":"2026-09-19T11:17:52.910197Z","last_seen":"2026-09-19T22:43:13.641857Z","times_seen":4,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":3,"connect":16,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.cartbooster.io/init?h=rayhozI4YaOloj==\u0026d=d","fqdn":"s.cartbooster.io","domain":"cartbooster.io","tld":"io"},"ip":{"addr":"104.21.24.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zynnex.pro/","date":"2026-09-19T22:41:57.820Z","timestamp":1789857717820,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cartbooster.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 20:38:22 GMT","end":"Thu, 03 Dec 2026 21:36:44 GMT"},"fingerprint":{"sha1":"93:A0:0A:C3:44:27:9A:4E:63:80:F2:CE:34:96:BC:38:7D:0D:ED:08","sha256":"CB:7B:09:F6:66:6C:78:4C:F8:E3:10:B0:AD:D0:3A:50:65:FF:0D:BD:E1:32:EE:E3:EE:BC:FF:96:09:AE:69:6D"}}},"request":{"raw":"GET /init?h=rayhozI4YaOloj==\u0026d=d HTTP/1.1\r\nHost: s.cartbooster.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zynnex.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:41:57 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Lszi8zwsZVEGCzmJ%2BJY4qHNHdIewnlqM8YvQNanx2tcDhXZ8aZo%2Br7221hXtWlIEQFh2K1KeZ5SWba6Gg4juIO5OK9lm%2Fdaz811RlCisUIkICzjVplT5fdw%2B0RMrQ3stlVHN\"}]}\r\nx-powered-by: Express\r\nsurrogate-control: no-store\r\ncache-control: no-store, no-cache, must-revalidate, proxy-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\npriority: u=3,i=?0\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dc19d06a634e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":0,"size_decoded":750,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T04:41:53.897053Z","times_seen":18561715,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.termly.io/resource-blocker/8ed3761d-3408-4c7b-b314-a3c290746ec4","fqdn":"app.termly.io","domain":"termly.io","tld":"io"},"ip":{"addr":"104.18.15.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zynnex.pro/","date":"2026-09-19T22:41:57.837Z","timestamp":1789857717837,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.termly.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Jul 2026 04:46:10 GMT","end":"Thu, 29 Oct 2026 05:46:07 GMT"},"fingerprint":{"sha1":"38:EC:31:8B:D8:EE:37:34:7B:0B:1E:95:A0:86:36:93:6B:6D:55:85","sha256":"B2:FB:73:47:14:E6:67:23:1A:D3:32:49:A3:09:4A:96:9F:41:8B:9E:62:64:F2:75:F2:6B:01:57:79:2B:31:80"}}},"request":{"raw":"GET /resource-blocker/8ed3761d-3408-4c7b-b314-a3c290746ec4 HTTP/1.1\r\nHost: app.termly.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zynnex.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 22:41:58 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\ncache-control: max-age=14400, public\r\netag: W/\"details::18a1e0f674f7726fa1ccea6f0f9ed6ea||embed::6aadaf00-69894\"\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nserver: cloudflare\r\ncf-ray: a3dc19d09c238deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":465930,"size_decoded":148518,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (33537)","md5":"e483aa3e9087a259aa55431f859ffc2d","sha1":"8d352465fd60e1ac97c89e8f7f69b7587b56d7c1","sha256":"9a215faf31ded39ec9cbe925247883cc00dadce850b8a704cbd9a69df9dfa2c8","sha512":"fa544357057f9957e6da2bc204fb55679c0a7c9b4adf741b698f2e10ff6f0fd1fad388b17ce75ee95e523a206feec0f0ad35d420062a53efa40cb3a98d6d0023","ssdeep":"6144:fhHdhrGjfO0z1QaLF6IlSJhoLLycvJUbSi5khQUYTQh/2uKWRniuhHT1lj:ZHwO0zTch2nwuOZQh/dKMniuhHTvj","tlshash":"2aa44aad7080b871579300e5993f1547b63c572d390cc4e0f2ad98ea28e698f9377f6a","first_seen":"2026-09-19T22:43:13.642597Z","last_seen":"2026-09-19T22:43:13.642597Z","times_seen":1,"resource_available":true,"data":null}},"time_used":232,"timings":{"blocked":0,"dns":4,"connect":16,"send":0,"wait":208,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zynnex.pro/favicon.ico","fqdn":"zynnex.pro","domain":"zynnex.pro","tld":"pro"},"ip":{"addr":"172.67.137.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zynnex.pro/","date":"2026-09-19T22:41:59.235Z","timestamp":1789857719235,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zynnex.pro","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Aug 2026 15:11:53 GMT","end":"Sat, 07 Nov 2026 15:11:52 GMT"},"fingerprint":{"sha1":"D4:90:76:10:89:82:C6:0C:64:52:22:0E:FD:D8:27:4E:08:D9:B6:F1","sha256":"2C:CA:B1:D7:2C:F4:E7:23:DF:48:6B:16:61:F5:4F:FE:CB:A3:A9:C6:D7:8A:ED:6D:12:2F:2D:54:FE:C4:33:C9"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: zynnex.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zynnex.pro/\r\nCookie: e3b0c4_670=8acshrri7ncr; _gcl_au=1.1.1834574617.1789857718; _ga_0M2QNPX1Y6=GS2.1.s1789857718$o1$g0$t1789857718$j60$l0$h0; _ga=GA1.1.701318931.1789857718; csrf_token=8f3dee3f-a3d5-4d34-908c-511692377d6b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:41:59 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, no-store, must-revalidate\r\nexpires: Sat, 19 Sep 2026 22:41:59 GMT\r\npriority: u=6,i=?0\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DMYAqa%2BMSpYbPaVEvQ4Opd%2Falr9JQRlHLTw2Ih1G3QWvyQd5vbIOJRyEhZGGwRS1wFmZgLU%2BeWAtuQBFmnSMzpQt2nzi5dYds7hLxTKhEunr8EXsLicr%2FESwXyG9\"}]}\r\ncontent-encoding: zstd\r\nvary: accept-encoding\r\ncf-ray: a3dc19d9392556be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9,"size_decoded":714,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"9d1ead73e678fa2f51a70a933b0bf017","sha1":"d205cbd6783332a212c5ae92d73c77178c2d2f28","sha256":"0019dfc4b32d63c1392aa264aed2253c1e0c2fb09216f8e2cc269bbfb8bb49b5","sha512":"935b3d516e996f6d25948ba8a54c1b7f70f7f0e3f517e36481fdf0196c2c5cfc2841f86e891f3df9517746b7fb605db47cdded1b8ff78d9482ddaa621db43a34","ssdeep":"","tlshash":"a250000c0003c3cc0000003030c0000000000300300000300000c000000000000c000c","first_seen":"2023-03-08T03:03:03Z","last_seen":"2026-09-20T05:11:21.375354Z","times_seen":91542,"resource_available":true,"data":null}},"time_used":152,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zynnex.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"zynnex.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zynnex.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zynnex.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zynnex.pro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.loot.co.za/_next/static/media/slick.c94f7671dcc99dce43e22a89f486f7c2.ttf","fqdn":"www.loot.co.za","domain":"loot.co.za","tld":"co.za"},"ip":{"addr":"54.73.16.8","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zynnex.pro/","date":"2026-09-19T22:41:57.857Z","timestamp":1789857717857,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.loot.co.za","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 16 Nov 2025 00:00:00 GMT","end":"Tue, 15 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"FE:94:51:35:6C:A7:62:18:98:51:39:2F:AC:EC:C5:38:45:81:14:A6","sha256":"25:B8:6A:84:92:E7:21:D6:E5:33:EC:81:A2:76:38:E2:F9:4E:92:B2:A5:79:AB:71:9A:8B:4E:3E:41:33:CF:C3"}}},"request":{"raw":"GET /_next/static/media/slick.c94f7671dcc99dce43e22a89f486f7c2.ttf HTTP/1.1\r\nHost: www.loot.co.za\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://zynnex.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.loot.co.za/_next/static/css/abdd56bf5a0a07b92ece.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 500 \r\ndate: Sat, 19 Sep 2026 22:41:57 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 148\r\nserver: nginx\r\nx-powered-by: Coffee and Cigarettes\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=3600; includeSubDomains; preload\r\nexpect-ct: max-age=86400; enforce\r\norigin-trial: AqnXg+/USXZytK2zRhY3Cmc/5uE1unO3Cg5W0X6/7VMRV42z9QjD5RWfLwDX96Ohjfw2Tkr9n9NVFjKpMoJtjQMAAACHeyJvcmlnaW4iOiJodHRwczovL3d3dy5sb290LmNvLnphOjQ0MyIsImZlYXR1cmUiOiJQcml2YXRlTmV0d29ya0FjY2Vzc05vblNlY3VyZUNvbnRleHRzQWxsb3dlZCIsImV4cGlyeSI6MTcwNzI2Mzk5OSwiaXNTdWJkb21haW4iOnRydWV9\r\nx-clacks-overhead: GNU Terry Pratchett\r\ncontent-security-policy: default-src 'none'\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"500","status_text":"Internal Server Error","fingerprints":[{"name":"X-Clacks-Overhead","description":"X-Clacks-Overhead is a non-standard HTTP header used to transmit tribute messages within server responses.","website":"https://xclacksoverhead.org/home/about","common_platform_enumeration":"","icon":"XClacksOverhead.svg","categories":["Miscellaneous"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":148,"size_decoded":922,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"621d03f9a2af5a8c01ade38bbf0aafa3","sha1":"44d8be6b1878bb923971cd83ba7160a5632fb19c","sha256":"1404ba7a79ae75df672508b3c289f71e83a0ce141b6430911f3462d06503ceec","sha512":"cfd156bee51377caac94c807c37985fca81cf95e733ca9e7efafb2da4c3d4d476fe5fc8261d08d011372450e23066f0518e4c2e28b1fc17a771d72b659492ff8","ssdeep":"","tlshash":"aac02b6710110202053096044fc122983e873f8f34f3d400ab86e017f8da70adf4728c","first_seen":"2023-04-07T05:55:30Z","last_seen":"2026-09-19T22:43:13.607025Z","times_seen":101,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.loot.co.za/_next/static/chunks/main-092d9fc583c0a3e10227.js","fqdn":"www.loot.co.za","domain":"loot.co.za","tld":"co.za"},"ip":{"addr":"54.73.16.8","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zynnex.pro/","date":"2026-09-19T22:41:57.224Z","timestamp":1789857717224,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.loot.co.za","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 16 Nov 2025 00:00:00 GMT","end":"Tue, 15 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"FE:94:51:35:6C:A7:62:18:98:51:39:2F:AC:EC:C5:38:45:81:14:A6","sha256":"25:B8:6A:84:92:E7:21:D6:E5:33:EC:81:A2:76:38:E2:F9:4E:92:B2:A5:79:AB:71:9A:8B:4E:3E:41:33:CF:C3"}}},"request":{"raw":"GET /_next/static/chunks/main-092d9fc583c0a3e10227.js HTTP/1.1\r\nHost: www.loot.co.za\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zynnex.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 19 Sep 2026 22:41:57 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: nginx\r\nx-powered-by: Coffee and Cigarettes\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=3600; includeSubDomains; preload\r\nexpect-ct: max-age=86400; enforce\r\norigin-trial: AqnXg+/USXZytK2zRhY3Cmc/5uE1unO3Cg5W0X6/7VMRV42z9QjD5RWfLwDX96Ohjfw2Tkr9n9NVFjKpMoJtjQMAAACHeyJvcmlnaW4iOiJodHRwczovL3d3dy5sb290LmNvLnphOjQ0MyIsImZlYXR1cmUiOiJQcml2YXRlTmV0d29ya0FjY2Vzc05vblNlY3VyZUNvbnRleHRzQWxsb3dlZCIsImV4cGlyeSI6MTcwNzI2Mzk5OSwiaXNTdWJkb21haW4iOnRydWV9\r\nx-clacks-overhead: GNU Terry Pratchett\r\nvary: Origin, Accept-Encoding\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 16 Sep 2026 13:04:26 GMT\r\netag: W/\"ed93-1a0aa518b90\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"X-Clacks-Overhead","description":"X-Clacks-Overhead is a non-standard HTTP header used to transmit tribute messages within server responses.","website":"https://xclacksoverhead.org/home/about","common_platform_enumeration":"","icon":"XClacksOverhead.svg","categories":["Miscellaneous"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":60819,"size_decoded":20568,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (60819), with no line terminators","md5":"0ba19e2c690029971ee799490b999aac","sha1":"ab4eb403d60c9339ea128180bf0bbfe4de508f09","sha256":"f8f09a3a45964048abc900c3a3b90cff85397b7eb2203764878a08897c81dd3d","sha512":"9f4a397cb71cb36ac7b2d1b62004ee44a17e586e80b7f3ef87ce3634132e4c229cee9d4f99cb349fe1eed4f81111cf0fe45042de27a5d4f8490dcc67065da909","ssdeep":"768:lfSIC2imiJz/+43VB0UC/dvZEKJwSoid6d2kd4MuHHQEqKl8TEvCbx+vErL+gH:RZC25ysv+wcAauHjnl8TtLx","tlshash":"a053b4dd75d6f06207d36278803f210ab2ba2d68644d8451e36addd27c7894fa233fb9","first_seen":"2025-10-25T04:06:19.273784Z","last_seen":"2026-09-19T22:43:13.644385Z","times_seen":5,"resource_available":true,"data":null}},"time_used":226,"timings":{"blocked":116,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnv3.loot.co.za/resources/images/loot_logo.svg","fqdn":"cdnv3.loot.co.za","domain":"loot.co.za","tld":"co.za"},"ip":{"addr":"104.20.43.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zynnex.pro/","date":"2026-09-19T22:41:57.263Z","timestamp":1789857717263,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.loot.co.za","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 22 Sep 2025 00:00:00 GMT","end":"Fri, 23 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:91:A2:AD:5F:1C:9F:21:5D:96:64:04:CA:DC:0B:13:A7:51:93:A7","sha256":"E8:27:D2:D2:51:67:94:A1:FA:F8:24:18:0E:57:21:D1:68:C8:5B:A7:54:25:B3:2A:7E:B3:3F:D7:08:94:82:A8"}}},"request":{"raw":"GET /resources/images/loot_logo.svg HTTP/1.1\r\nHost: cdnv3.loot.co.za\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zynnex.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 19 Sep 2026 22:41:57 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nx-powered-by: Coffee and Cigarettes\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=3600; includeSubDomains; preload\r\nexpect-ct: max-age=86400; enforce\r\norigin-trial: AqnXg+/USXZytK2zRhY3Cmc/5uE1unO3Cg5W0X6/7VMRV42z9QjD5RWfLwDX96Ohjfw2Tkr9n9NVFjKpMoJtjQMAAACHeyJvcmlnaW4iOiJodHRwczovL3d3dy5sb290LmNvLnphOjQ0MyIsImZlYXR1cmUiOiJQcml2YXRlTmV0d29ya0FjY2Vzc05vblNlY3VyZUNvbnRleHRzQWxsb3dlZCIsImV4cGlyeSI6MTcwNzI2Mzk5OSwiaXNTdWJkb21haW4iOnRydWV9\r\nx-clacks-overhead: GNU Terry Pratchett\r\nvary: Origin, Accept-Encoding\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Oct 2023 09:55:28 GMT\r\netag: W/\"14cf-18b4c82e280\"\r\ncontent-encoding: gzip\r\nage: 1687680\r\ncf-cache-status: HIT\r\ncf-ray: a3dc19d09b695693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"X-Clacks-Overhead","description":"X-Clacks-Overhead is a non-standard HTTP header used to transmit tribute messages within server responses.","website":"https://xclacksoverhead.org/home/about","common_platform_enumeration":"","icon":"XClacksOverhead.svg","categories":["Miscellaneous"]}],"data":{"size":5327,"size_decoded":3094,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a951ec539a7de99d1a504d1878b3b63c","sha1":"c990c55bd7e846152a9102807803d0ee03f452eb","sha256":"5ace3c5581024acda34c99bb1cb6d6894eb0e83bf3b74cd1cb757af06541cfff","sha512":"0be52e4a2f36b09dec3f82e8cd160dd7f0c8b38bd71414572394fd968ba673d72e25ae06d802129ed085a04f98b73835232cd8ca3d869930b863ed4bfe8b0ab8","ssdeep":"96:SvfgHyVOJaPhiLbiLpMqcPpwgb90ALXKpWtNsPe2W6cgx9a4Q3fIJMNi:KgHJJgIKxcPvZ0ALEVHWpga4Q3AJMNi","tlshash":"7cb1df4b4312d7fbbea8052ce9582489b2d0ddabe474d1c47baf1413e58c8e0a58c7ed","first_seen":"2026-09-19T11:17:52.89953Z","last_seen":"2026-09-19T22:43:13.645345Z","times_seen":4,"resource_available":false,"data":null}},"time_used":613,"timings":{"blocked":347,"dns":0,"connect":3,"send":0,"wait":32,"receive":0,"ssl":226},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-MHB68DH","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zynnex.pro/","date":"2026-09-19T22:41:57.282Z","timestamp":1789857717282,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:04:47 GMT","end":"Fri, 27 Nov 2026 08:04:46 GMT"},"fingerprint":{"sha1":"A8:7D:85:D0:70:29:F0:BA:D0:9E:95:03:C3:BE:58:8B:F1:10:A9:7C","sha256":"21:1D:48:CD:78:8D:E2:B1:1E:91:43:B5:47:5F:37:F6:D1:54:A6:B1:41:15:4E:3F:FD:5C:28:86:5F:0C:F8:43"}}},"request":{"raw":"GET /gtm.js?id=GTM-MHB68DH HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zynnex.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Sat, 19 Sep 2026 22:41:57 GMT\r\nexpires: Sat, 19 Sep 2026 22:41:57 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sat, 19 Sep 2026 21:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 124650\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":358489,"size_decoded":125280,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5044)","md5":"5ee50be89f192d8eb71385b91be00269","sha1":"78ff7214626e018126b717b77223f1283d2aafa0","sha256":"b8c9cb5d797810ec6fb2030c3d76511694cfb569561dab5bcc2329c844637188","sha512":"d8f9fd362023e2c4af22c5f9228a8c17c21b21f9f7b13e09ea0f02952abfa8a434693d5a9133db31931b0675982a4d0b818deddf8a86f290c4edf13a3cea9846","ssdeep":"6144:vI1rB/Pc1gqW2+0bcc6MbBEAF33GVcdLdf:ctxqWcdd","tlshash":"ff741acdb7d6b42283a2b574903f014bb23a79a2f84cc894f286e9d42d7465a5137f7c","first_seen":"2026-09-19T22:05:18.518648Z","last_seen":"2026-09-19T22:43:13.646174Z","times_seen":2,"resource_available":true,"data":null}},"time_used":383,"timings":{"blocked":0,"dns":2,"connect":16,"send":0,"wait":41,"receive":59,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?rcb=2\u0026frm=0\u0026apvc=1\u0026ae=g\u0026auid=1834574617.1789857718\u0026dt=Solid%20Wood%20Toy%20Storage%20Rack\u0026en=page_view\u0026dl=https%3A%2F%2Fzynnex.pro%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=1321621857.1789857718\u0026navt=n\u0026npa=1\u0026ep.ads_data_redaction=0\u0026gtm=45He69g1v71221090za200zd71221090xeaxf1\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115938465~115938468~118897920~118897930~120385423~120469145~120469153~120847433\u0026tft=1789857717710\u0026tfd=3634\u0026fmt=8","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.153.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zynnex.pro/","date":"2026-09-19T22:41:57.720Z","timestamp":1789857717720,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:04:41 GMT","end":"Fri, 27 Nov 2026 08:04:40 GMT"},"fingerprint":{"sha1":"95:51:3A:74:B2:D6:48:05:37:67:B4:98:88:41:81:F2:F0:9E:EC:4E","sha256":"27:A0:25:F5:B2:3F:C8:25:B7:BF:72:41:6C:48:6A:75:BC:C8:0D:C3:44:11:27:96:CE:FB:61:3D:59:34:73:06"}}},"request":{"raw":"POST /ccm/collect?rcb=2\u0026frm=0\u0026apvc=1\u0026ae=g\u0026auid=1834574617.1789857718\u0026dt=Solid%20Wood%20Toy%20Storage%20Rack\u0026en=page_view\u0026dl=https%3A%2F%2Fzynnex.pro%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=1321621857.1789857718\u0026navt=n\u0026npa=1\u0026ep.ads_data_redaction=0\u0026gtm=45He69g1v71221090za200zd71221090xeaxf1\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115938465~115938468~118897920~118897930~120385423~120469145~120469153~120847433\u0026tft=1789857717710\u0026tfd=3634\u0026fmt=8 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zynnex.pro/\r\nOrigin: https://zynnex.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 22:41:58 GMT\r\npragma: no-cache\r\ncontent-type: text/plain\r\ncache-control: no-cache, no-store, must-revalidate\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://zynnex.pro\r\naccess-control-expose-headers: date,vary,vary,vary,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":539,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T04:41:53.897053Z","times_seen":18561715,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":0,"dns":3,"connect":24,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"umami.sentientgenesis.com/script.js","fqdn":"umami.sentientgenesis.com","domain":"sentientgenesis.com","tld":"com"},"ip":{"addr":"102.213.7.82","port":443,"asn":329206,"as":"RL5-AS","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zynnex.pro/","date":"2026-09-19T22:41:57.849Z","timestamp":1789857717849,"http_version":"HTTP/1.1","security_state":"","security_info":null,"request":{"raw":"GET /script.js HTTP/1.1\r\nHost: umami.sentientgenesis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zynnex.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 502 Bad Gateway\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Sat, 19 Sep 2026 22:41:58 GMT\r\nContent-Type: text/html\r\nContent-Length: 166\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T04:41:53.897053Z","times_seen":18561715,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.loot.co.za/_next/static/chunks/983-2c251dc4f6b7b7ac29bb.js","fqdn":"www.loot.co.za","domain":"loot.co.za","tld":"co.za"},"ip":{"addr":"54.73.16.8","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zynnex.pro/","date":"2026-09-19T22:41:57.235Z","timestamp":1789857717235,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.loot.co.za","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 16 Nov 2025 00:00:00 GMT","end":"Tue, 15 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"FE:94:51:35:6C:A7:62:18:98:51:39:2F:AC:EC:C5:38:45:81:14:A6","sha256":"25:B8:6A:84:92:E7:21:D6:E5:33:EC:81:A2:76:38:E2:F9:4E:92:B2:A5:79:AB:71:9A:8B:4E:3E:41:33:CF:C3"}}},"request":{"raw":"GET /_next/static/chunks/983-2c251dc4f6b7b7ac29bb.js HTTP/1.1\r\nHost: www.loot.co.za\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zynnex.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 19 Sep 2026 22:41:57 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: nginx\r\nx-powered-by: Coffee and Cigarettes\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=3600; includeSubDomains; preload\r\nexpect-ct: max-age=86400; enforce\r\norigin-trial: AqnXg+/USXZytK2zRhY3Cmc/5uE1unO3Cg5W0X6/7VMRV42z9QjD5RWfLwDX96Ohjfw2Tkr9n9NVFjKpMoJtjQMAAACHeyJvcmlnaW4iOiJodHRwczovL3d3dy5sb290LmNvLnphOjQ0MyIsImZlYXR1cmUiOiJQcml2YXRlTmV0d29ya0FjY2Vzc05vblNlY3VyZUNvbnRleHRzQWxsb3dlZCIsImV4cGlyeSI6MTcwNzI2Mzk5OSwiaXNTdWJkb21haW4iOnRydWV9\r\nx-clacks-overhead: GNU Terry Pratchett\r\nvary: Origin, Accept-Encoding\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 16 Sep 2026 13:04:26 GMT\r\netag: W/\"17d73-1a0aa518b90\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"X-Clacks-Overhead","description":"X-Clacks-Overhead is a non-standard HTTP header used to transmit tribute messages within server responses.","website":"https://xclacksoverhead.org/home/about","common_platform_enumeration":"","icon":"XClacksOverhead.svg","categories":["Miscellaneous"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":97651,"size_decoded":30450,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d46c7259fd6e9629d3611636e28d1931","sha1":"71d714679f16256af2fb0e90b27addfa4eef408d","sha256":"65209a00ef88a88b78cfa0a346278e5a606e9f8528261e48de4b5da13bf3b4cb","sha512":"94c6211379fe89ea8616e9f59ab4d6c2351dbf45ff4e6147c95f0d47ec58cfc78524b0cd33855c30b414ed50b64ef45ccb1101094bc148b0b7d594e0ca1efa72","ssdeep":"768:epZxjBJ9KsSpCMVsRZKlS2togi699L+95sj2i/hjYsGbLn044SKIHTCq9uQVdhrO:WaCMRdtoF6hrGbLn04LWMZ0HAI/Dr","tlshash":"1a93a388f5d1f0b557a361e4402f140bf23b6a79745c84e0e2a5d8e2acf898f8577f68","first_seen":"2026-09-19T11:17:52.907335Z","last_seen":"2026-09-19T22:43:13.647016Z","times_seen":4,"resource_available":true,"data":null}},"time_used":290,"timings":{"blocked":114,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.loot.co.za/_next/static/chunks/786-af8d0c1a326f79ed246b.js","fqdn":"www.loot.co.za","domain":"loot.co.za","tld":"co.za"},"ip":{"addr":"54.73.16.8","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zynnex.pro/","date":"2026-09-19T22:41:57.238Z","timestamp":1789857717238,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.loot.co.za","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 16 Nov 2025 00:00:00 GMT","end":"Tue, 15 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"FE:94:51:35:6C:A7:62:18:98:51:39:2F:AC:EC:C5:38:45:81:14:A6","sha256":"25:B8:6A:84:92:E7:21:D6:E5:33:EC:81:A2:76:38:E2:F9:4E:92:B2:A5:79:AB:71:9A:8B:4E:3E:41:33:CF:C3"}}},"request":{"raw":"GET /_next/static/chunks/786-af8d0c1a326f79ed246b.js HTTP/1.1\r\nHost: www.loot.co.za\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zynnex.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 19 Sep 2026 22:41:57 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: nginx\r\nx-powered-by: Coffee and Cigarettes\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=3600; includeSubDomains; preload\r\nexpect-ct: max-age=86400; enforce\r\norigin-trial: AqnXg+/USXZytK2zRhY3Cmc/5uE1unO3Cg5W0X6/7VMRV42z9QjD5RWfLwDX96Ohjfw2Tkr9n9NVFjKpMoJtjQMAAACHeyJvcmlnaW4iOiJodHRwczovL3d3dy5sb290LmNvLnphOjQ0MyIsImZlYXR1cmUiOiJQcml2YXRlTmV0d29ya0FjY2Vzc05vblNlY3VyZUNvbnRleHRzQWxsb3dlZCIsImV4cGlyeSI6MTcwNzI2Mzk5OSwiaXNTdWJkb21haW4iOnRydWV9\r\nx-clacks-overhead: GNU Terry Pratchett\r\nvary: Origin, Accept-Encoding\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 16 Sep 2026 13:04:26 GMT\r\netag: W/\"7386-1a0aa518b90\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"X-Clacks-Overhead","description":"X-Clacks-Overhead is a non-standard HTTP header used to transmit tribute messages within server responses.","website":"https://xclacksoverhead.org/home/about","common_platform_enumeration":"","icon":"XClacksOverhead.svg","categories":["Miscellaneous"]}],"data":{"size":29574,"size_decoded":10110,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (29574), with no line terminators","md5":"1b723ebea41769f6565063d7f0f37ed2","sha1":"5eacd8770d25e39b3282bee30ecd40f20e005515","sha256":"0aed61338470dbfaf57ec2e262ea5661922440ed8f7ffe628f1760f149d6daff","sha512":"4efa33f3dc5d5527a2060c2fe6d9fb55fbbf94cd0cc190a899da3ee5fddb35bcbbca793a117d76817ffd0d39fd9efabaa58fb6f8e04a515da66877fe7b72a440","ssdeep":"384:YCdiNW82KgMaCuPVo7cnIhyewXnQq1i0NqapVlKUm4FKQ88K0lWnYPbY9e2B:nOz2KgXCW1LCEmQLzlWnYPbY9L","tlshash":"3ad2c988b0eab4951be210fa807f511bb2f7752d984ed414e562ecd468ea5cf1233f6c","first_seen":"2026-09-19T11:17:52.881946Z","last_seen":"2026-09-19T22:43:13.647841Z","times_seen":4,"resource_available":true,"data":null}},"time_used":290,"timings":{"blocked":114,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/destination?id=DC-5922924\u0026cx=c\u0026gtm=4e69g1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zynnex.pro/","date":"2026-09-19T22:41:58.048Z","timestamp":1789857718048,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:04:47 GMT","end":"Fri, 27 Nov 2026 08:04:46 GMT"},"fingerprint":{"sha1":"A8:7D:85:D0:70:29:F0:BA:D0:9E:95:03:C3:BE:58:8B:F1:10:A9:7C","sha256":"21:1D:48:CD:78:8D:E2:B1:1E:91:43:B5:47:5F:37:F6:D1:54:A6:B1:41:15:4E:3F:FD:5C:28:86:5F:0C:F8:43"}}},"request":{"raw":"GET /gtag/destination?id=DC-5922924\u0026cx=c\u0026gtm=4e69g1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zynnex.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Sat, 19 Sep 2026 22:41:58 GMT\r\nexpires: Sat, 19 Sep 2026 22:41:58 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgsrsghrgc:71:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgsrsghrgc:71:0\r\nreport-to: {\"group\":\"ascgsrsghrgc:71:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgsrsghrgc:71:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 142445\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":406928,"size_decoded":143434,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5031)","md5":"074030835ef098f6d8e7e3f90a529630","sha1":"13f85077dd802cb387c974a65672a5d8c6d07570","sha256":"4d1a939783514aba7e412703cf64b9181ba71514911170aeafed3d879d423026","sha512":"9e66cd409c613e2e62fed76e67b768236511d45bcce904f61b4d8119830e23605e66442ab99a96c59c7c3ad90178c84ac559274bf0300d2f68e0e529a129a4e0","ssdeep":"6144:VI1rBbPP1gbcn76+4bcc6MbBEAF33GRBLrcbknUsf:m92bqhBEbknj","tlshash":"93842acd73d6746283a3b674903f018bb27a79a2b84cc894f28ad8d42d3465a5177f7c","first_seen":"2026-09-19T22:05:18.507678Z","last_seen":"2026-09-19T22:43:13.648523Z","times_seen":2,"resource_available":true,"data":null}},"time_used":131,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":40,"receive":91,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.termly.io/resource-blocker/support/524-41d73f143a6c498233e9.min.js","fqdn":"app.termly.io","domain":"termly.io","tld":"io"},"ip":{"addr":"104.18.15.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zynnex.pro/","date":"2026-09-19T22:41:58.300Z","timestamp":1789857718300,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.termly.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Jul 2026 04:46:10 GMT","end":"Thu, 29 Oct 2026 05:46:07 GMT"},"fingerprint":{"sha1":"38:EC:31:8B:D8:EE:37:34:7B:0B:1E:95:A0:86:36:93:6B:6D:55:85","sha256":"B2:FB:73:47:14:E6:67:23:1A:D3:32:49:A3:09:4A:96:9F:41:8B:9E:62:64:F2:75:F2:6B:01:57:79:2B:31:80"}}},"request":{"raw":"GET /resource-blocker/support/524-41d73f143a6c498233e9.min.js HTTP/1.1\r\nHost: app.termly.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zynnex.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 22:41:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Fri, 18 Sep 2026 21:37:04 GMT\r\netag: W/\"6aadaf00-1c40\"\r\ncontent-security-policy: default-src * 'unsafe-inline' 'unsafe-eval';child-src 'self' blob: ;worker-src 'self' blob:;script-src * 'unsafe-inline' 'unsafe-eval'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src *; style-src * 'unsafe-inline'; font-src 'self' https://fonts.googleapis.com https://fonts.gstatic.com data:\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\nage: 544\r\nexpires: Sun, 20 Sep 2026 02:41:58 GMT\r\ncache-control: public, max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3dc19d369da8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7232,"size_decoded":2501,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (7063)","md5":"ad0b0428a71c52b1c1f4c833af3120a6","sha1":"13615dcf0ce5a07a9471bf676090e92f550edf57","sha256":"5eefdb8933b3188ba5e46d809c88c4d1ee06e7d8fbe46d4b2a1aba96ee054cf8","sha512":"478f08713e011d52f8297ebbef13f83ee2d8001b7047931fcf2fc94418d1ed381ce08ad2fd50570a1b78703af2f034476239a15455bdbc873e3446aefc3e421d","ssdeep":"192:NiR/V5n/7s7dOo/g7yH0/J7yh/D7xh/Mn7o/f7G/m3AzQ7WzOW3EMdrNirEv:NiNEMdrNiIv","tlshash":"74e15259f4cab60d131d0134726397fef206926772b8940ed469761c13dcbaf866bb83","first_seen":"2026-09-15T00:00:26.024434Z","last_seen":"2026-09-20T04:20:38.07529Z","times_seen":56,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.loot.co.za/_next/static/css/6ac8109a94886fa915c2.css","fqdn":"www.loot.co.za","domain":"loot.co.za","tld":"co.za"},"ip":{"addr":"54.73.16.8","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zynnex.pro/","date":"2026-09-19T22:41:57.218Z","timestamp":1789857717218,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.loot.co.za","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 16 Nov 2025 00:00:00 GMT","end":"Tue, 15 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"FE:94:51:35:6C:A7:62:18:98:51:39:2F:AC:EC:C5:38:45:81:14:A6","sha256":"25:B8:6A:84:92:E7:21:D6:E5:33:EC:81:A2:76:38:E2:F9:4E:92:B2:A5:79:AB:71:9A:8B:4E:3E:41:33:CF:C3"}}},"request":{"raw":"GET /_next/static/css/6ac8109a94886fa915c2.css HTTP/1.1\r\nHost: www.loot.co.za\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zynnex.pro/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 19 Sep 2026 22:41:57 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: nginx\r\nx-powered-by: Coffee and Cigarettes\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=3600; includeSubDomains; preload\r\nexpect-ct: max-age=86400; enforce\r\norigin-trial: AqnXg+/USXZytK2zRhY3Cmc/5uE1unO3Cg5W0X6/7VMRV42z9QjD5RWfLwDX96Ohjfw2Tkr9n9NVFjKpMoJtjQMAAACHeyJvcmlnaW4iOiJodHRwczovL3d3dy5sb290LmNvLnphOjQ0MyIsImZlYXR1cmUiOiJQcml2YXRlTmV0d29ya0FjY2Vzc05vblNlY3VyZUNvbnRleHRzQWxsb3dlZCIsImV4cGlyeSI6MTcwNzI2Mzk5OSwiaXNTdWJkb21haW4iOnRydWV9\r\nx-clacks-overhead: GNU Terry Pratchett\r\nvary: Origin, Accept-Encoding\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 16 Sep 2026 13:04:26 GMT\r\netag: W/\"6892-1a0aa518b90\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"X-Clacks-Overhead","description":"X-Clacks-Overhead is a non-standard HTTP header used to transmit tribute messages within server responses.","website":"https://xclacksoverhead.org/home/about","common_platform_enumeration":"","icon":"XClacksOverhead.svg","categories":["Miscellaneous"]}],"data":{"size":26770,"size_decoded":6425,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (26770), with no line terminators","md5":"6e934f412da42f0469a9616e51dc11a4","sha1":"53025b6654fdabbd5d8806b9f64e670c860432f7","sha256":"f66438583a53287f63c9442d97fa91d996fdfd67c6b0b7356ed8002ded201d1f","sha512":"fad6ab19a770e9e5741f2992c40f74487e12100a5107f5e1a4fed65435ca3008e48d3747ce9a53ebb12d899c548ca0b3c0b8268d58ab48931508889159ca91a2","ssdeep":"768:ltGrHUH35pcFiqm8RCLiqdjkGNtavug+4BbIGLvd1LIBSrH/W4lyyMOF4HyynoJk:ltEHUH35pcFiqm8RCLiqdApvc4BbIGLO","tlshash":"3ec23393e995202cf1af5835a1d19af97c3881c3a5eb4e64e113b63ac3e31d3b757608","first_seen":"2026-09-19T11:17:52.86892Z","last_seen":"2026-09-19T22:43:13.649914Z","times_seen":4,"resource_available":true,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":13,"connect":35,"send":0,"wait":70,"receive":0,"ssl":108},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.loot.co.za/_next/static/css/edad1b1385ccbc4e1280.css","fqdn":"www.loot.co.za","domain":"loot.co.za","tld":"co.za"},"ip":{"addr":"54.73.16.8","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zynnex.pro/","date":"2026-09-19T22:41:57.219Z","timestamp":1789857717219,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.loot.co.za","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 16 Nov 2025 00:00:00 GMT","end":"Tue, 15 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"FE:94:51:35:6C:A7:62:18:98:51:39:2F:AC:EC:C5:38:45:81:14:A6","sha256":"25:B8:6A:84:92:E7:21:D6:E5:33:EC:81:A2:76:38:E2:F9:4E:92:B2:A5:79:AB:71:9A:8B:4E:3E:41:33:CF:C3"}}},"request":{"raw":"GET /_next/static/css/edad1b1385ccbc4e1280.css HTTP/1.1\r\nHost: www.loot.co.za\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zynnex.pro/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 19 Sep 2026 22:41:57 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: nginx\r\nx-powered-by: Coffee and Cigarettes\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=3600; includeSubDomains; preload\r\nexpect-ct: max-age=86400; enforce\r\norigin-trial: AqnXg+/USXZytK2zRhY3Cmc/5uE1unO3Cg5W0X6/7VMRV42z9QjD5RWfLwDX96Ohjfw2Tkr9n9NVFjKpMoJtjQMAAACHeyJvcmlnaW4iOiJodHRwczovL3d3dy5sb290LmNvLnphOjQ0MyIsImZlYXR1cmUiOiJQcml2YXRlTmV0d29ya0FjY2Vzc05vblNlY3VyZUNvbnRleHRzQWxsb3dlZCIsImV4cGlyeSI6MTcwNzI2Mzk5OSwiaXNTdWJkb21haW4iOnRydWV9\r\nx-clacks-overhead: GNU Terry Pratchett\r\nvary: Origin, Accept-Encoding\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 16 Sep 2026 13:04:26 GMT\r\netag: W/\"5d27-1a0aa518b90\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"X-Clacks-Overhead","description":"X-Clacks-Overhead is a non-standard HTTP header used to transmit tribute messages within server responses.","website":"https://xclacksoverhead.org/home/about","common_platform_enumeration":"","icon":"XClacksOverhead.svg","categories":["Miscellaneous"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23847,"size_decoded":6682,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (17280)","md5":"339ad1ca8fbcea3a26aabe138093c560","sha1":"746232d143c0c0b44a430453129c9a50c66672f1","sha256":"741eefa85b3dd511c453d120c9364d9e0cf924f618ad14e1583e5ac08eb258f4","sha512":"d83b0bd0b53b60ca58fbb12408adb7379ad6410dc28534fa146b993216ae6d9c616c733ce7b1a36bc409137720d722364356132e4ca7ccea4eaa57c6c786216f","ssdeep":"384:iIUioacP3+ZWi9/YCk3M9paWQgXwBKaCIviU9owB+a5zrS:eViBYCk3M9paWQgX2CIviWB+0/S","tlshash":"f4b28572e155242df03b8436e6d39adcb6184946ea678bb5e915762bc2c22973b3330c","first_seen":"2026-09-19T11:17:52.92189Z","last_seen":"2026-09-19T22:43:13.650637Z","times_seen":4,"resource_available":true,"data":null}},"time_used":437,"timings":{"blocked":-1,"dns":12,"connect":36,"send":0,"wait":38,"receive":0,"ssl":349},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.loot.co.za/_next/static/chunks/777cf710-68a4d5fd26c83bc4a470.js","fqdn":"www.loot.co.za","domain":"loot.co.za","tld":"co.za"},"ip":{"addr":"54.73.16.8","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zynnex.pro/","date":"2026-09-19T22:41:57.232Z","timestamp":1789857717232,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.loot.co.za","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 16 Nov 2025 00:00:00 GMT","end":"Tue, 15 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"FE:94:51:35:6C:A7:62:18:98:51:39:2F:AC:EC:C5:38:45:81:14:A6","sha256":"25:B8:6A:84:92:E7:21:D6:E5:33:EC:81:A2:76:38:E2:F9:4E:92:B2:A5:79:AB:71:9A:8B:4E:3E:41:33:CF:C3"}}},"request":{"raw":"GET /_next/static/chunks/777cf710-68a4d5fd26c83bc4a470.js HTTP/1.1\r\nHost: www.loot.co.za\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zynnex.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 19 Sep 2026 22:41:59 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: nginx\r\nx-powered-by: Coffee and Cigarettes\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=3600; includeSubDomains; preload\r\nexpect-ct: max-age=86400; enforce\r\norigin-trial: AqnXg+/USXZytK2zRhY3Cmc/5uE1unO3Cg5W0X6/7VMRV42z9QjD5RWfLwDX96Ohjfw2Tkr9n9NVFjKpMoJtjQMAAACHeyJvcmlnaW4iOiJodHRwczovL3d3dy5sb290LmNvLnphOjQ0MyIsImZlYXR1cmUiOiJQcml2YXRlTmV0d29ya0FjY2Vzc05vblNlY3VyZUNvbnRleHRzQWxsb3dlZCIsImV4cGlyeSI6MTcwNzI2Mzk5OSwiaXNTdWJkb21haW4iOnRydWV9\r\nx-clacks-overhead: GNU Terry Pratchett\r\nvary: Origin, Accept-Encoding\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 16 Sep 2026 13:04:26 GMT\r\netag: W/\"13026-1a0aa518b90\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"X-Clacks-Overhead","description":"X-Clacks-Overhead is a non-standard HTTP header used to transmit tribute messages within server responses.","website":"https://xclacksoverhead.org/home/about","common_platform_enumeration":"","icon":"XClacksOverhead.svg","categories":["Miscellaneous"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":77862,"size_decoded":28057,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"9275bd3d03348ddd24232c97b4253c26","sha1":"ceff399808e16dd4d5d9140cd1c2df3c8bde9e33","sha256":"e1f34dfe4319cd48a508b3d42b1dd6125142f4dd4dfd242a9ade64708409a4d6","sha512":"a9d11ca7b4734b86e0ba8d264cd155b755ea148e3bdd0ec19fcfe86dd544fa5e0acadb083364392e6abf9fc6c7138b79ec6cd858431eb5d13eaa0be99ddfa3d2","ssdeep":"1536:denhr6tCGmJVYK0H1df91gEAM6r+9UB+R1Qhc592FXqp:rQJV41g86rxc32Fe","tlshash":"227328cd72cab135634220ec18af4586f13b1588250e499ef169c4e37c7989a61bff7b","first_seen":"2026-09-19T11:17:52.898184Z","last_seen":"2026-09-19T22:43:13.65116Z","times_seen":4,"resource_available":true,"data":null}},"time_used":2749,"timings":{"blocked":114,"dns":0,"connect":0,"send":0,"wait":2635,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.loot.co.za/_next/static/chunks/734-94223ca04e88eca7dc96.js","fqdn":"www.loot.co.za","domain":"loot.co.za","tld":"co.za"},"ip":{"addr":"54.73.16.8","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zynnex.pro/","date":"2026-09-19T22:41:57.246Z","timestamp":1789857717246,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.loot.co.za","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 16 Nov 2025 00:00:00 GMT","end":"Tue, 15 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"FE:94:51:35:6C:A7:62:18:98:51:39:2F:AC:EC:C5:38:45:81:14:A6","sha256":"25:B8:6A:84:92:E7:21:D6:E5:33:EC:81:A2:76:38:E2:F9:4E:92:B2:A5:79:AB:71:9A:8B:4E:3E:41:33:CF:C3"}}},"request":{"raw":"GET /_next/static/chunks/734-94223ca04e88eca7dc96.js HTTP/1.1\r\nHost: www.loot.co.za\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zynnex.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 19 Sep 2026 22:41:57 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: nginx\r\nx-powered-by: Coffee and Cigarettes\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=3600; includeSubDomains; preload\r\nexpect-ct: max-age=86400; enforce\r\norigin-trial: AqnXg+/USXZytK2zRhY3Cmc/5uE1unO3Cg5W0X6/7VMRV42z9QjD5RWfLwDX96Ohjfw2Tkr9n9NVFjKpMoJtjQMAAACHeyJvcmlnaW4iOiJodHRwczovL3d3dy5sb290LmNvLnphOjQ0MyIsImZlYXR1cmUiOiJQcml2YXRlTmV0d29ya0FjY2Vzc05vblNlY3VyZUNvbnRleHRzQWxsb3dlZCIsImV4cGlyeSI6MTcwNzI2Mzk5OSwiaXNTdWJkb21haW4iOnRydWV9\r\nx-clacks-overhead: GNU Terry Pratchett\r\nvary: Origin, Accept-Encoding\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 16 Sep 2026 13:04:26 GMT\r\netag: W/\"30b40-1a0aa518b90\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"X-Clacks-Overhead","description":"X-Clacks-Overhead is a non-standard HTTP header used to transmit tribute messages within server responses.","website":"https://xclacksoverhead.org/home/about","common_platform_enumeration":"","icon":"XClacksOverhead.svg","categories":["Miscellaneous"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":199488,"size_decoded":50660,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"8ad5c720a17748a87aa7fdfea455fbe9","sha1":"2f2c3162cf2966b07d05e3712fd027837939bd48","sha256":"eadb586966ab228fa32c7e0dcf2b5093e7fa1f7ee8db054d137d6e76153fc958","sha512":"3068c78b69c2df45fbef7f3cca1ac0da8755926f4dad8d24139a04af6d6275e8312adfdd12594e2b2abc71d04db0584db8d709c9560fb953042c0c4a43ee5afe","ssdeep":"3072:RMdv1pzu2v9OgxFsYYhXFY2zgFK7ozlrUW+c:6dv1pzu2v93FsYYhA","tlshash":"1b1407c8f5f6f92d86bb1070941f3484f62d1e4dd68d8d00f2b9e8883998659773ab6c","first_seen":"2026-09-19T11:17:52.915401Z","last_seen":"2026-09-19T22:43:13.651882Z","times_seen":4,"resource_available":true,"data":null}},"time_used":290,"timings":{"blocked":114,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnv3.loot.co.za/resources/public/images/loot/youtube-svgrepo-com.svg","fqdn":"cdnv3.loot.co.za","domain":"loot.co.za","tld":"co.za"},"ip":{"addr":"104.20.43.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zynnex.pro/","date":"2026-09-19T22:41:57.270Z","timestamp":1789857717270,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.loot.co.za","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 22 Sep 2025 00:00:00 GMT","end":"Fri, 23 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:91:A2:AD:5F:1C:9F:21:5D:96:64:04:CA:DC:0B:13:A7:51:93:A7","sha256":"E8:27:D2:D2:51:67:94:A1:FA:F8:24:18:0E:57:21:D1:68:C8:5B:A7:54:25:B3:2A:7E:B3:3F:D7:08:94:82:A8"}}},"request":{"raw":"GET /resources/public/images/loot/youtube-svgrepo-com.svg HTTP/1.1\r\nHost: cdnv3.loot.co.za\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zynnex.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 19 Sep 2026 22:41:57 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nx-powered-by: Coffee and Cigarettes\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=3600; includeSubDomains; preload\r\nexpect-ct: max-age=86400; enforce\r\norigin-trial: AqnXg+/USXZytK2zRhY3Cmc/5uE1unO3Cg5W0X6/7VMRV42z9QjD5RWfLwDX96Ohjfw2Tkr9n9NVFjKpMoJtjQMAAACHeyJvcmlnaW4iOiJodHRwczovL3d3dy5sb290LmNvLnphOjQ0MyIsImZlYXR1cmUiOiJQcml2YXRlTmV0d29ya0FjY2Vzc05vblNlY3VyZUNvbnRleHRzQWxsb3dlZCIsImV4cGlyeSI6MTcwNzI2Mzk5OSwiaXNTdWJkb21haW4iOnRydWV9\r\nx-clacks-overhead: GNU Terry Pratchett\r\nvary: Origin, Accept-Encoding\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Oct 2023 09:55:28 GMT\r\netag: W/\"4f3-18b4c82e280\"\r\ncontent-encoding: gzip\r\nage: 1687680\r\ncf-cache-status: HIT\r\ncf-ray: a3dc19d09b6a5693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"X-Clacks-Overhead","description":"X-Clacks-Overhead is a non-standard HTTP header used to transmit tribute messages within server responses.","website":"https://xclacksoverhead.org/home/about","common_platform_enumeration":"","icon":"XClacksOverhead.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1267,"size_decoded":1539,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fc4dbca4431c04a966a0c13e9abdffa0","sha1":"3fe90acd33d3c7071aff5a4a61e97c8a57af9ffe","sha256":"71ed708e04113de069c702d3861f312a4a1f6a471e0780050b658611b08aa8a0","sha512":"e236679c3e9a4932149c0e445c8584de84cdc62b601baea7bab8bfd7698de356142dd3daa228e7751a181c8dacfd7496d1d7c3e1d5d80c1bd326d0eb3d8dc6db","ssdeep":"","tlshash":"a221c0e0c5ef485741ed6f3a5a77b5413e7242f765100638f504caa13f098604d4fae5","first_seen":"2026-09-19T11:17:52.911373Z","last_seen":"2026-09-19T22:43:13.652537Z","times_seen":4,"resource_available":false,"data":null}},"time_used":608,"timings":{"blocked":346,"dns":0,"connect":3,"send":0,"wait":27,"receive":0,"ssl":226},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}