{"report_id":"0f4da9b9-cdf2-4ebe-83a6-2e5468996d1a","version":6,"status":"done","tags":[],"date":"2026-03-08T14:09:59Z","url":{"schema":"http","addr":"brookhaven-outfit-codes-matching-bestie.pages.dev/","fqdn":"brookhaven-outfit-codes-matching-bestie.pages.dev","domain":"brookhaven-outfit-codes-matching-bestie.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.152","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"brookhaven-outfit-codes-matching-bestie.pages.dev/","fqdn":"brookhaven-outfit-codes-matching-bestie.pages.dev","domain":"brookhaven-outfit-codes-matching-bestie.pages.dev","tld":"pages.dev"},"title":"(1) New Message!","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"brookhaven-outfit-codes-matching-bestie.pages.dev/","fqdn":"brookhaven-outfit-codes-matching-bestie.pages.dev","domain":"brookhaven-outfit-codes-matching-bestie.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.152","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-12T14:09:59Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":16}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"immigrationacre.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"preferencenail.com","ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-07-01","domain_rank":20606,"first_seen":"2025-07-08T12:55:47.271261Z","last_seen":"2026-03-05T05:39:39.84716Z","alert_count":6,"request_count":3,"received_data":257868,"sent_data":1341,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"wayfarerorthodox.com","ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2024-09-03","domain_rank":0,"first_seen":"2025-08-08T11:06:50.216151Z","last_seen":"2026-03-06T03:00:46.141735Z","alert_count":15,"request_count":5,"received_data":208252,"sent_data":7058,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"protrafficinspector.com","ip":{"addr":"35.156.44.82","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2025-06-18","domain_rank":614186,"first_seen":"2025-07-25T22:45:21.95813Z","last_seen":"2026-03-04T19:14:31.601791Z","alert_count":0,"request_count":2,"received_data":916,"sent_data":1028,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.show-sb.com","ip":{"addr":"104.21.95.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-08-20","domain_rank":187612,"first_seen":"2024-08-31T03:46:04Z","last_seen":"2026-03-04T22:33:52.150044Z","alert_count":2,"request_count":1,"received_data":2868,"sent_data":538,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.2.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"cdn.show-creative1.com","ip":{"addr":"172.67.208.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-08-20","domain_rank":392451,"first_seen":"2024-08-27T12:23:01Z","last_seen":"2026-03-05T02:18:44.290305Z","alert_count":0,"request_count":1,"received_data":3452,"sent_data":568,"comment":"","tags":null,"fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"adxpy.pages.dev","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-02","domain_rank":0,"first_seen":"2025-12-08T23:25:40.439519Z","last_seen":"2026-03-02T13:47:42.66935Z","alert_count":0,"request_count":4,"received_data":13607,"sent_data":1881,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"creative-sb1.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-07-01","domain_rank":22211,"first_seen":"2025-08-08T09:32:32.509707Z","last_seen":"2026-03-04T20:42:46.323974Z","alert_count":52,"request_count":26,"received_data":6697184,"sent_data":12535,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"realizationnewestfangs.com","ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2024-09-03","domain_rank":0,"first_seen":"2025-10-02T06:26:57.543488Z","last_seen":"2026-03-06T07:49:48.12996Z","alert_count":4,"request_count":4,"received_data":20888,"sent_data":6375,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"brookhaven-outfit-codes-matching-bestie.pages.dev","ip":{"addr":"172.66.44.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":4,"received_data":61007,"sent_data":2108,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.storageimagedisplay.com","ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2024-09-13","domain_rank":170153,"first_seen":"2024-09-13T12:56:32Z","last_seen":"2026-03-05T13:49:40.5075Z","alert_count":0,"request_count":2,"received_data":93407,"sent_data":924,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"immigrationacre.com","ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2026-01-21","domain_rank":0,"first_seen":"2026-01-30T08:57:45.831225Z","last_seen":"2026-03-01T19:29:15.170296Z","alert_count":4,"request_count":4,"received_data":291236,"sent_data":1940,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"tse1.mm.bing.net","ip":{"addr":"150.171.28.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"domain_registered":"1997-09-03","domain_rank":17960,"first_seen":"2014-03-13T14:42:52Z","last_seen":"2026-03-01T14:51:13.628508Z","alert_count":0,"request_count":1,"received_data":56012,"sent_data":537,"comment":"","tags":null,"fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}]},{"fqdn":"skinnycrawlinglax.com","ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2024-09-01","domain_rank":38609,"first_seen":"2025-07-09T22:28:05.771371Z","last_seen":"2026-03-05T02:27:56.029988Z","alert_count":45,"request_count":15,"received_data":21499,"sent_data":14611,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"172.217.21.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-01T22:18:12.522658Z","alert_count":0,"request_count":2,"received_data":34862,"sent_data":860,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-01T22:15:00.771016Z","alert_count":0,"request_count":2,"received_data":87940,"sent_data":1168,"comment":"","tags":null,"fingerprints":null},{"fqdn":"mtevor.com","ip":{"addr":"172.67.199.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-10-31","domain_rank":3995008,"first_seen":"2019-11-04T00:42:52Z","last_seen":"2026-03-02T13:47:42.433278Z","alert_count":0,"request_count":1,"received_data":7239,"sent_data":448,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"sourshaped.com","ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2024-09-03","domain_rank":0,"first_seen":"2025-10-06T14:35:38.581947Z","last_seen":"2026-03-08T04:04:14.072197Z","alert_count":2,"request_count":1,"received_data":513,"sent_data":528,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"brookhaven-outfit-codes-matching-bestie.pages.dev/","fqdn":"brookhaven-outfit-codes-matching-bestie.pages.dev","domain":"brookhaven-outfit-codes-matching-bestie.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b82b8779b85a62bd4891761c29cdd948","sha1":"4b10fbba8e5b1a0dd0398c6e262ab4e862072bc5","sha256":"8bd0f1de614fec81414363fdaaa072a13a9fd7bb03f61028e78d96333cddcd7b","sha512":"4ef2f80d7d432a24b17c35d1abcee686463717b78883dfb6471ecc53e9f8e35d639176186cbcc6bf6c6947abad0ee9186aa202bff186b4176a284b3434310290","ssdeep":"","tlshash":"c3c02b24b5c411a014f0c0a64240d0d014cff4618073503dcc4ef4411300029801c418","size":139,"data":"","first_seen":"2026-03-08T14:10:06.888313Z","last_seen":"2026-03-08T14:10:06.888313Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"brookhaven-outfit-codes-matching-bestie.pages.dev/","fqdn":"brookhaven-outfit-codes-matching-bestie.pages.dev","domain":"brookhaven-outfit-codes-matching-bestie.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bb27232549abd814635dde5a338cbc9e","sha1":"90b24ec16b789453aec40bcd9b3b620ac4721335","sha256":"2f136d970baa2f3c28b182172051502e723fd8ce872321a266be73da9cf97afa","sha512":"7575109e4beefb0aadde26992f1016198461e154e0a5b94d05dc718373963f73de511184d1e072acf5bbb6ccb4feef0184d2d26e61497c22f18e2abda1285bc4","ssdeep":"","tlshash":"cfc04cad5044b54830b2cdf42979c644e120cdd4354abc3526e2541155cc64e9c7677d","size":147,"data":"","first_seen":"2025-12-18T23:27:07.103769Z","last_seen":"2026-04-04T18:45:43.406309Z","times_seen":224,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"brookhaven-outfit-codes-matching-bestie.pages.dev/","fqdn":"brookhaven-outfit-codes-matching-bestie.pages.dev","domain":"brookhaven-outfit-codes-matching-bestie.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"81f04c41f8acbe1896a04adf683a5f50","sha1":"c43780b476488b7b723c6e463397263d268c0612","sha256":"d7c38975e1b16aa76895318026d67c2ca83a41ae43b9419041a898facd34720b","sha512":"f477f31fc8d52891075cc8889855386d8705476038e9d646ca0b6001cefab5bd0f438c72c4fd0d9654bf25092223c7a4dd7d25ff9419f97744adecec35990616","ssdeep":"","tlshash":"58d05b340d00021604721dec6c959fb47e367c41b3742160f9bcd91591d1947c162feb","size":258,"data":"","first_seen":"2023-03-09T05:07:28Z","last_seen":"2026-04-04T19:54:36.146741Z","times_seen":1310,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"immigrationacre.com/52f212bca95373aed7ead32398143db7/invoke.js","fqdn":"immigrationacre.com","domain":"immigrationacre.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"315c1ac8d39f668fe8e5e544e64a62be","sha1":"d1f75fa066b118d4c659f624608eec92900720bc","sha256":"b8a4ed7178828d7519aa2432a44107c328df744531a595993465d271dfaa8997","sha512":"3e16347bc5e8ebcb9097d8513cc9a8db75c3bbfd8882a0665baabfa47eecffe56b08720422cfb304aece62a6477f6e5d7e945242531b678ab4b482d3049aa70e","ssdeep":"768:nSpQA3a9rXsUWADXZ4npNvC/FxujuoM/TvEUd:nUQxRSADpYpNKdxujuf/LEUd","tlshash":"8833c7983bd1f0d8024270f7232fa41bf5174c26d98ce494e917b59eaebc719da36b06","size":50935,"data":"","first_seen":"2026-03-03T01:59:00.119555Z","last_seen":"2026-03-10T23:35:48.070529Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"6ff9c56fcaadc4b7fd02df1d2e9d6f34","sha1":"6ed85e104e27b3196eff5b9ec194de4cb6cfec18","sha256":"617a9751ef0907eb1e8f9aedb8676865653b46ae82d66d6a36a57f1f23040a5d","sha512":"366fddddd834d29716bf044c83c93475edfc1eb3d3cdf14c4a9b304c46c5e4b562a0022b2b99bb41cfea94964037eddb9ce10911da20216fcb4e0efbe25427bd","ssdeep":"","tlshash":"a421d6380c2afaefb391cdb68893d85e6d79169ef8138798c0f05ecc79d119003441b6","size":1402,"data":"","first_seen":"2026-03-08T14:10:06.890201Z","last_seen":"2026-03-08T14:10:06.890201Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"8fcf84320db79b7d4432411f9a82ce39","sha1":"7a1e7fd422a7a703f59f18c5e29b1751f8183df5","sha256":"c874678791e82af8db29b60ecc0085f45547c0abbab3f7681781636da4187acc","sha512":"3e2c507abe47b655fc645f676c52618678a5d35ff7dbcedf8f3842b4aa19b41ff440b00984ae2ac7e2b7160c4cd81d0aac395c50f91c22fb26beaada5ed5076b","ssdeep":"","tlshash":"f4210bd2eae0a30d3e99449cd9191704fae80ba8378f4989c4f5642e2f5355323cc550","size":1388,"data":"","first_seen":"2026-03-08T14:10:06.891241Z","last_seen":"2026-03-08T14:10:06.891241Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","size":85379,"data":"","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-04-04T22:35:18.707466Z","times_seen":13232,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/interstitial/games/lg/1/js/jquery-3.2.1.min.js","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e59a2e92b4756cc61e2e4f3082ee1360","sha1":"c96d002f642bd85adf1e5326bcc0679f9c3ee001","sha256":"42173a3ca70c715370ce99071f892ad61d3fee33dbf15426fa7eee549a4afca2","sha512":"94ab9f4e87fa268a76679ac3484952b84332bb01efb3bda37ec883310eea2536c7b5b50370553571d57beed05179749ba0bef6d53306896f2018ebd037c682a7","ssdeep":"1536:hLkR/QpfICJ5vJBQT6bTGw9S5HY6wm482+a02Yo+eKcGbp7E0bJy+jhklK4dy8Nj:hLkRNV48Ba02YowbCuyMSxtZxc9MuCx","tlshash":"8ac3518976e621319207f07a8d6fcc09b275544f1a8ded057d4c82a5af1883c97bafec","size":129575,"data":"","first_seen":"2023-03-08T15:21:31Z","last_seen":"2026-04-04T01:42:36.078218Z","times_seen":2054,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"realizationnewestfangs.com/1b/50/e5/1b50e57a5911fd0a5b46962ab48ca22b.js","fqdn":"realizationnewestfangs.com","domain":"realizationnewestfangs.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6da75851d7f8415205c256fed50a6416","sha1":"843b017397ff1e4101029a0c2610cfdda819acca","sha256":"f9cc7670e67285102774201d602e2a32a449a22c5518df4627d26d5532c8bb81","sha512":"ff4efdb17db80ea6c97180a4cbcd7b10d0a8869a0c58d06b65865911393b7213424d6e9cb047411d23eb8920dca31522fa3b539aa471b9b2659da7e814190dd9","ssdeep":"96:ep37NIIPOSxMUE7m4k009fNSIEPf1DiBL+RtZm2cu2Hpp9wmb:e5IIP9xh4vEfOnBM4O","tlshash":"d0b1868e7281bcd04b9334776b2f660af5ea4d60145fd440f025f9c43e3462ad976ab6","size":5153,"data":"","first_seen":"2026-02-18T13:17:41.242469Z","last_seen":"2026-03-12T06:03:11.94003Z","times_seen":1663,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"7308c7eaa4b46d6841879f598775a3ab","sha1":"e0994019ff293c6bd8488ea4dc3dd51ab92e1cf2","sha256":"a4c5e9969e8962403a33b54bf54cf7c5c2d7e013e284f24a2f1040df9bc1ec7c","sha512":"15cc7e39a5785afb54c27b59f881113d111f93059999d304c3a82b783d3ea7caea9fc6d9ad9bf92eb327be315490c1b379578ffc873cc8fa47467aded3bb883f","ssdeep":"","tlshash":"c831fa35224e3528975ee0f1136f7ea9bd79d8ca0e0075ac00a2c501ac658fd275ec4d","size":1662,"data":"","first_seen":"2026-03-08T14:10:06.892144Z","last_seen":"2026-03-08T14:10:06.892144Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"d41d0e2171607fd3a27f73ebd33a22c3","sha1":"495d2641ff74bd4b6f37d589ca48ec74297cffe5","sha256":"3312ab963a652dd957ccb4bed96cb88365a13afcc07240532ac19a9d3b6157e3","sha512":"90b3947a0c220c294303af7353da9b96910b051c9d2056eb97acf0f915f97afb323fd40d3ccf226ba1af8cd7229988d76b715b7b0977ba507b36447742ec5512","ssdeep":"96:LC9sw2gozIxHBC+L0yPmnWd23OCk/mL0yPmnWd211jDSV3VCfMEDaH:LC9gpzChfnPPcFkAnPPcvvSV3VCkCaH","tlshash":"cea14b745c59e97b7195a57a0467e48d3c38a14ba802cf84f4ecda88af706d006a89dd","size":4815,"data":"","first_seen":"2026-03-08T14:10:06.893051Z","last_seen":"2026-03-08T14:10:06.893051Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"brookhaven-outfit-codes-matching-bestie.pages.dev/","fqdn":"brookhaven-outfit-codes-matching-bestie.pages.dev","domain":"brookhaven-outfit-codes-matching-bestie.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b73f73772a980d0b71c8097aeb93ba73","sha1":"dbd8ebdebe2e0f452407bb38a76deec742b80027","sha256":"496ed8b94f856087f1a4384dc7fa33b769c1c9439932825b506455b5bf4930b7","sha512":"a00b2f097b0624952e4c5ca29ba1c6fddd0187080cadb301185692695abe516a7d3c38d3a4d2d8f1357c0f6ffd80fb61519dbe59f028ee25fba80f30d19720c9","ssdeep":"","tlshash":"b9019eff24004c7448de19eeb2a8778ae8b6005b7d19142424194c7576a4b7603d2fb6","size":668,"data":"","first_seen":"2023-03-09T05:07:28Z","last_seen":"2026-04-04T19:54:36.158406Z","times_seen":1289,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"brookhaven-outfit-codes-matching-bestie.pages.dev/","fqdn":"brookhaven-outfit-codes-matching-bestie.pages.dev","domain":"brookhaven-outfit-codes-matching-bestie.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3043924babea44e8e94b0aa19f11d89d","sha1":"c6ccf78fba768952994a37ad33a8309fe9454b5f","sha256":"5f96af838dd14f1b76712ba6f84df12026e8c0431a381c5e062361d390970d36","sha512":"9c78e351a02bfcc7181420b6ec071906e24734f3421c5d1b8e4a92a9973fd5125242fb6b22d6cfa53dea13a2aa99685055b52bcc8cc4a2fe88c8e0742621b6c5","ssdeep":"","tlshash":"7dd02bb1d12c0332029da14a7423c394713434daf3423080a01f87f950c4f96d41fcbd","size":273,"data":"","first_seen":"2023-03-09T05:07:28Z","last_seen":"2026-04-04T19:54:36.15898Z","times_seen":1314,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"brookhaven-outfit-codes-matching-bestie.pages.dev/","fqdn":"brookhaven-outfit-codes-matching-bestie.pages.dev","domain":"brookhaven-outfit-codes-matching-bestie.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"a73d26dd421e931fcd8e269f07769d64","sha1":"1a82dcc6914fcd0bde9ad067afe327f864f417ef","sha256":"dbec47c6cca1b7f4d56e8ceb1d4cfa69d78067c7480a8c04bd9b96afe74e0af9","sha512":"f02e979135efca3b320a922788bfa4647013506e61a50d0e000b576eb984bca5f399213ee9ea56ba4a33825ab8c3aaf4c212ab233d340107df27759b16a5347e","ssdeep":"","tlshash":"107000080a0ae0a8080a0a023822c00c02800082000ae0a200000a0020000088820220","size":18,"data":"","first_seen":"2025-01-05T08:04:41.550371Z","last_seen":"2026-04-04T18:45:43.365749Z","times_seen":262,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"brookhaven-outfit-codes-matching-bestie.pages.dev/","fqdn":"brookhaven-outfit-codes-matching-bestie.pages.dev","domain":"brookhaven-outfit-codes-matching-bestie.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"a73d26dd421e931fcd8e269f07769d64","sha1":"1a82dcc6914fcd0bde9ad067afe327f864f417ef","sha256":"dbec47c6cca1b7f4d56e8ceb1d4cfa69d78067c7480a8c04bd9b96afe74e0af9","sha512":"f02e979135efca3b320a922788bfa4647013506e61a50d0e000b576eb984bca5f399213ee9ea56ba4a33825ab8c3aaf4c212ab233d340107df27759b16a5347e","ssdeep":"","tlshash":"107000080a0ae0a8080a0a023822c00c02800082000ae0a200000a0020000088820220","size":18,"data":"","first_seen":"2025-01-05T08:04:41.550371Z","last_seen":"2026-04-04T18:45:43.365749Z","times_seen":262,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"a529894d3286d527219ac471e1cd5a47","sha1":"4ac04d024d5e097b20a2ec99493a5b40a07def7f","sha256":"de7f25c63f8aee85b80dc11ecb1878e4487e52e537205d76023746f9786aea27","sha512":"c0ac07fabc2441e29f9db33a992c001edce654c4d7341f71a75ea85824d38231a304d8463bca7c03cfaf9341c0e3104e9d73c634267a94ba30ce855ef9a6b9a2","ssdeep":"","tlshash":"e0c08ca4eb04087071ac3ebd330aa3e2e8e876123030088296948090e2b92330420c80","size":145,"data":"","first_seen":"2025-12-16T03:50:13.718611Z","last_seen":"2026-04-04T18:45:43.389983Z","times_seen":213,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mtevor.com/hg/pages-dev.js","fqdn":"mtevor.com","domain":"mtevor.com","tld":"com"},"ip":{"addr":"172.67.199.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ef23e0c1c0703894aa8f9569dc89a351","sha1":"059e6af97c0f3dd53aef3c3a748b759766908bc1","sha256":"cfa90ffce265f3299945c2063078d2c7f044e6edd0ea0f1c38918f2a51f2efe3","sha512":"9e84b34461a74f002f0a6e53a15746b68c32832a09ae96528577bda0f5e6c64d3d613a46f2b6f45725f88a83a87924891d0732a713e7ee7a6d11340174a80601","ssdeep":"192:c4Mpsto0LV8YteZbDVj/poiPqpyj4ZrIVpsQkhv:/++j8YteZfJ/ptPqcj4eVpsQu","tlshash":"17d1c7a9bc8f8d394bf2f36896368519fd7cd0231603505ab0c8515b8a69f1e471fed8","size":6622,"data":"","first_seen":"2026-01-30T09:04:57.189496Z","last_seen":"2026-03-09T08:26:16.704326Z","times_seen":133,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","size":85379,"data":"","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-04-04T22:35:18.707466Z","times_seen":13232,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"immigrationacre.com/6dd5e3d7ac37d33b5abc87810f6ac7f3/invoke.js","fqdn":"immigrationacre.com","domain":"immigrationacre.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"22e8abb1ffbb7f9154ddc395d20fb040","sha1":"0fd9e2d5a622521efca298ce4071b38730adc5b4","sha256":"edf452410932830577f6753d24dc7e4a118fb401a9092a1b08af9fc24e1666d3","sha512":"74b70e08bc077f8e19a12fa6546526eedd490bbf99d578f78e11b4e703bba837ef6d717f9c6c2c09a2c6c0ddb25143f66268bcd96b29053b6e92287e6d4c4782","ssdeep":"768:nWwQO3aWrXsUWADXZ4npNvC/FeujuoM/TvEUd:nTQj0SADpYpNKdeujuf/LEUd","tlshash":"d033c7983bd1f0d8024270f7232fa41bf5174c26d98ce494e917b59eaebc719da36b06","size":50980,"data":"","first_seen":"2026-02-22T19:26:54.330637Z","last_seen":"2026-03-12T06:03:11.951845Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wayfarerorthodox.com/af/25/da/af25da8381e0bd0494ba4018c76898a2.js","fqdn":"wayfarerorthodox.com","domain":"wayfarerorthodox.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c5bbacaf46363ce7ea9c6c02eb00657a","sha1":"b35671edbb1886f48807e1b177718a17eea2743a","sha256":"509af4a5196d472bd50b7e3a22e447e972ebd2d5ebef36eb4f644a8a826871f8","sha512":"2c3bf70bc3e3fbe804b19fe268e6706e51a3a69ad3cbd7cc0d45d8d8c96d0c7c52567db98acac9c2cc319e180f578f574c9cd4d36d87fed52ab1599a8bb4a920","ssdeep":"1536:9fjS9i1KqAGQDSAiLoHL0cTIgV2BOPsuUd7s/KiR1uwurV4aYLuvGgIo5+phrtXj:9T1KTGQDSAiLoHQcTIgV2BGsuUd7s/KU","tlshash":"0593d84c3f82b0d41397707b762f902bf23b5c955868e88de243adac5da9719a337e05","size":92184,"data":"","first_seen":"2026-03-02T13:47:58.96291Z","last_seen":"2026-03-08T14:10:06.866113Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"fb604476e7868ddf371d1b475b18f72e","sha1":"f38abd422dfd02b3692dddaf9d4941c976341d42","sha256":"3e69671d4b79081fd6d0f7eaa23cbaa55e1299547c740436456bcf64c7990300","sha512":"cd25311aece2883c36c08726b820c77cb4e8ff37bbd87002e80f496c9f85b7f388e075c330558b1087fb68b8d18b81b233346c3e9fe8b6323edc98805cec0314","ssdeep":"96:fN1+ozVj4Di9+CGUAGw9Oa6dsk/iIdhyoV07EKRw1jDUCfMEDaH:vzyrCoG8Nk6Idcc07EKRovUCkCaH","tlshash":"19913ad45ed5a238386790fc273f6a08bd74808f1a04ed49b8ddd5065f607e12b9cd98","size":4446,"data":"","first_seen":"2026-03-08T14:10:06.89566Z","last_seen":"2026-03-08T14:10:06.89566Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/notifications/utility/tiktok/multi/image-row/4/js/jquery.min.js","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6326c600df01e3bfb9b40e1aa08176f8","sha1":"6b4fb754d29b297b539bf62ba9b4eaf0f33f314a","sha256":"df34524351c5fabc921a89183b5da5667aebd7b9e9a1c52255c76ff722935ea3","sha512":"641aaeecb9b89bcc319cabfef18f76faa9b1ba79f9de30c6d07f22d385fc78ac3f11a718fe9ec96f8a13d82e3dff4ca34944ccb449a4ef8e378ad65dfad581c0","ssdeep":"1536:oP10iSi65U/dXXeyhzeBuG+HYE0mdDuJO1z6Oy4sh3J1x72BjmN7TwpDKba98Hri:f+41hJiz6fhdlTqya98Hri","tlshash":"eb83d6d9b2c67062977734b851bf510bb17a98dab40c8c60f0a4d8e47eb4a8d517bf2c","size":84384,"data":"","first_seen":"2023-03-07T01:10:11Z","last_seen":"2026-04-04T22:35:18.745275Z","times_seen":10403,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"39956c58c074881a0622b89891ee1c8d","sha1":"bd5bf952eec70fc77ec3deef84876f44c9c4b108","sha256":"7f1651486088fab77ac41b45f2ac9d5b5b9aa8487b8158c2b706df9e81834413","sha512":"06d378ccf23c93d5a4971b9ffd308dfa4118e6d5d6c11b36cf45a4ced9fdb96f0c7e929863cfc09bcadc66649ea891b9f6c194e6a634db4cd2bd920054c91402","ssdeep":"384:YiXi1RayHypywy/3iDBzzuApe2SaxDGLw:1S1Ra2YDQyDSxU","tlshash":"3c42120693567ad6e5278a6f3f3b4241e237151bdc5c9fc836d983d1f82e00793362a6","size":12764,"data":"","first_seen":"2026-03-08T14:06:44.72149Z","last_seen":"2026-03-20T17:02:52.069623Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adxpy.pages.dev/magic.js","fqdn":"adxpy.pages.dev","domain":"adxpy.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9bcbb02a6bf94ae8762ddcda5d1c80d3","sha1":"fade830681bb5b7b138db5482e7a495c1c9b296a","sha256":"b26277e44f2fe29283a55a632166f8a45dd1407a0970c13e08287406f94a0772","sha512":"54914b0f4d7625f4e40e13b11bb2bfd47c87dc6a14714c427c48c75e955980826d6605abbac7b3ca6c043356f1b91618b6f16abaf6be339be38d8ffa825e71e5","ssdeep":"","tlshash":"c101fe6e229200a84d7a509803a3fa0cfda832577160c0e1bacedb602f35f20419e4d8","size":671,"data":"","first_seen":"2025-12-08T23:25:47.209165Z","last_seen":"2026-04-04T18:45:43.317503Z","times_seen":265,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adxpy.pages.dev/ads.js","fqdn":"adxpy.pages.dev","domain":"adxpy.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"28a8ee5b231d6993efeaeb288506fba6","sha1":"185e282511210752916a8d4fcc28642f02e4dc5e","sha256":"81496c62f33c7090e09cd8ea1d016980fc4432fb6ca00450ccea59b926daa7e1","sha512":"b1cf24abc589692314ada61a5a266b280ce2ad1297f5be58b94ececb90e2d718021795ca3998cb142e5937cff260d4aaeaffe5759bb8e67dff20e76bec939658","ssdeep":"","tlshash":"cb81011920a100651eb7236a7be3625dfba43053b81281a4bdccdb185fb9d1091f7fed","size":4034,"data":"","first_seen":"2025-10-25T03:17:17.993778Z","last_seen":"2026-04-04T18:45:43.281845Z","times_seen":285,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"immigrationacre.com/c2/07/ec/c207ec84c2456af201cc563cadc36c46.js","fqdn":"immigrationacre.com","domain":"immigrationacre.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"eb65beda9c71bb4124b5f75c3fe5f3b3","sha1":"09ec3c3f4115aaefc29a89f8d2a5123e74eca661","sha256":"aca60c39eb88e5406662ae00635dc84ae9f9516d93da499bae8b82a07f8459ab","sha512":"63451349ed20f9fc9dfca416debf4f257a063ac558877f08ce4f4ab4cb93a9529b5b6a9ace93a6a9c12cf362c8aba09575733a154b8e61771633252bb042e087","ssdeep":"1536:EEB9ni1KqAGQDSAiLoHL0cTIgV2BOPsuUd7s/KwR1UwurV4aYLuvGgIo5+phrtXj:Et1KTGQDSAiLoHQcTIgV2BGsuUd7s/Kw","tlshash":"9093d84c3f82b0d41397707b762f902bf23b5c955868e88de243adac5da9719a337e05","size":92195,"data":"","first_seen":"2026-03-08T07:10:56.828966Z","last_seen":"2026-03-08T14:11:24.281214Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","size":85379,"data":"","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-04-04T22:35:18.707466Z","times_seen":13232,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"immigrationacre.com/c6/4a/a1/c64aa11db612c16c65959b87a44dac81.js","fqdn":"immigrationacre.com","domain":"immigrationacre.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"708ebb544919b8311f2129ab0421e76a","sha1":"9dc9584ecf6b084251e8459a1df0e35414365c71","sha256":"57aa640d8866311dc52177ab667562939c5d4498d237462e34bf19a6de344a49","sha512":"54a1f01af29f9e996c8cdb7c3ec7daddf83b9c9cd904614d2011846bf08de7778c5839bc1054a54a5cbec80f777f80bf8581aac82c94aa22829a9b1a24ca5a3b","ssdeep":"1536:xgjPlj5yQtLbViYwqiyp0f5CCK+LTWUI+AIRWK6DoZQgCkMGNgVZ/QABgPy6skWO:ePtnpjhpMKVD/sK6sk8wayC8","tlshash":"3e93b5cc7b51b1ed46bb3837112f591bf43ddd421098e8a8e253b0ec6e69b1de832694","size":93746,"data":"","first_seen":"2026-03-07T22:25:51.683428Z","last_seen":"2026-03-12T06:03:11.933927Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"d6c61116072a3aed150693303749f3a3","sha1":"5ffb5b5427225efd2d592d1bf4bf3613027e69e8","sha256":"7f098ee0db613906e057c8814237ba1a33c352d04c1fd2b72ab5235d24082287","sha512":"f3498eb18f02a60e53e802581e42658f2d0b280610791645ebcd50374bc951aeab13f30e244c6167f3bfd1c1c38eb3aa52ec2f0aba865742abeadf817bffc8d8","ssdeep":"","tlshash":"0dc09b8c9f00185575327cdd7b261384fcd542dbb836dd555297c04265cd36bf04157c","size":145,"data":"","first_seen":"2025-12-18T23:27:07.113909Z","last_seen":"2026-04-04T18:45:43.372864Z","times_seen":206,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wayfarerorthodox.com/d0/89/ea/d089ea049f0f7b1eacfa2b5bb99d3bdc.js","fqdn":"wayfarerorthodox.com","domain":"wayfarerorthodox.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"522813a8756824954ad8502dfde4a30e","sha1":"d58dd16811a4cb9f163bfa2c1247768f93c7abbc","sha256":"0a2238d9b8a686130ed121bdf4625184c219d7477287de490e6effed1d41c86c","sha512":"cc2396f0c47485921b18fdfbdd886e191ec791732d8d38589770f3bf7eda5e77b83cf007021ecdbaef8ef28c9049cdddd8994b3526a385764948653f968e1c9f","ssdeep":"1536:StQGjdoPZ9rA6lAaWFw9s93vVzSRihUOjEtsd7C2Dg:JguYvx1vVzVUyg","tlshash":"dda3a59c7f2da4ae136a2073222fa41ff25a5c86508cd498da03fced6d6d70bf936544","size":100139,"data":"","first_seen":"2026-03-08T14:06:27.043041Z","last_seen":"2026-03-08T14:10:06.878735Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"brookhaven-outfit-codes-matching-bestie.pages.dev/","fqdn":"brookhaven-outfit-codes-matching-bestie.pages.dev","domain":"brookhaven-outfit-codes-matching-bestie.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fb73c9c1f5ecb08f9a0205a14e2841e0","sha1":"dd5807b9d4c32d9dff08f8f14c726804f49bfd5e","sha256":"63578fe671a2d9eeff56bb7df57695eb7728b49bfb50db91bf2cf74430df93c9","sha512":"b18875be5353ae7972e16617a0eadc0adbe806c68cd098cd54f462b4308c7dff48e7ce73da68968f66d9dcc00ac1cc891e8d1b1312298a75990eeecdbc8187ca","ssdeep":"","tlshash":"7fc08cf68004b21820e7caf02028c0c0a324ec20300a383166e0081082ac50d0cb2bb8","size":146,"data":"","first_seen":"2025-12-16T03:50:13.724775Z","last_seen":"2026-04-04T18:45:43.376587Z","times_seen":217,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"4dcac340ec817645eadfc0c29eff8d67","sha1":"b5049839b5a00b650d17598992ada93b44be3b9a","sha256":"74bc8f0066b59ae3e5cac97949fbf27175d0845aa0701df6fb1bb6012e798085","sha512":"1aa9ab1329e7b2f49bd00dbcb3eb7596c393a7f7f356bb2bfa372700f6f0baece438664de5bd03c0433a1f6624cb7a38d2a7905931888cff47669339c74d2ce1","ssdeep":"96:EX7YLz04c401eV1fmKBQSEzHb0gTO2HBQktfGshH1f2FxHtOygA3bwXFOXjn09xo:EX046QMREz7jLHhtOsSxNOygA3k8T09m","tlshash":"acc1424d27f32273a92b212b3b4b978f716055077484e98d3d4cd2821fa2676abf07d9","size":5726,"data":"","first_seen":"2026-01-30T09:04:57.326972Z","last_seen":"2026-03-22T23:35:01.842643Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"d6c06267185e76a113ebb354dead3a5e","sha1":"acc4ec006f0f7fd7adf070205bbf4f716089dc34","sha256":"ee248723f4a2543169d52acedc669c6c3dc59497e297ee0712188315aa04d1ca","sha512":"351ba2c54bcdcda57ef87be94f8a6d9f3d41b308d78b635bf4deaacac50ff1e8c3f71c104578b07ea5ae89b74d7199b2261af21243b63f56759d793f1d92d75e","ssdeep":"","tlshash":"49310a395c2d7a77ebe9eab20447f85e7d3c9a87a80247c4d0704fcc39604c0036988a","size":1672,"data":"","first_seen":"2026-03-08T14:10:06.898556Z","last_seen":"2026-03-08T14:10:06.898556Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"brookhaven-outfit-codes-matching-bestie.pages.dev/","fqdn":"brookhaven-outfit-codes-matching-bestie.pages.dev","domain":"brookhaven-outfit-codes-matching-bestie.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"349edacf65d0ff272bf6fd11233c1ead","sha1":"34b1fdbc95156d9d6b499a739a7ce1f8b57926b4","sha256":"82eb474cb30703539541a5d27d13890cc5d5af5633f642fb4d24666b4ff98848","sha512":"c474a12003f50e2206febb6e7d8fd2ca37e5dfee3b949c9fdbf5288207c1932bcfb5b78ed46706ea8675c34ed493dca4c05e3886a5685a6826f82307630581a3","ssdeep":"","tlshash":"2ed0c23a1d110b7104c619ea38d8a6987a3d384577293450e47ed900a0a4a898063ff7","size":276,"data":"","first_seen":"2023-03-09T05:07:28Z","last_seen":"2026-04-04T19:54:36.189918Z","times_seen":1281,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"brookhaven-outfit-codes-matching-bestie.pages.dev/","fqdn":"brookhaven-outfit-codes-matching-bestie.pages.dev","domain":"brookhaven-outfit-codes-matching-bestie.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"558c3779ce5aac4481c86687cd8f15c3","sha1":"474fa56198ee722ebad4041dce2dcfc716fd923d","sha256":"7b2515a2c400be25e6daa78e4c6f35f43d67d244acb76818f1599f815b1995a8","sha512":"280f5da312b232e8638235a1b6094abc4abf38d94b8c327c668a848d830d0fe94d2b2830fb53be53076a724286b3c5b3f290f0e240267a71a57bddf00c8cd6e2","ssdeep":"","tlshash":"e1019c3d326407bb22ee0e3b23779e5476732844b40210b05e2d9da86410df112afabe","size":797,"data":"","first_seen":"2023-10-28T10:41:14Z","last_seen":"2026-04-03T04:08:47.575042Z","times_seen":297,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"adxpy.pages.dev/adx-mainstream.json","fqdn":"adxpy.pages.dev","domain":"adxpy.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://brookhaven-outfit-codes-matching-bestie.pages.dev/","date":"2026-03-08T14:09:36.622Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adxpy.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 23:59:16 GMT","end":"Wed, 06 May 2026 00:57:55 GMT"},"fingerprint":{"sha1":"43:02:20:65:8A:13:63:9C:3E:A6:CF:BC:13:A1:4D:89:B4:AE:4D:E8","sha256":"93:76:A5:FC:14:19:A2:25:5A:48:98:9A:34:CB:E8:16:20:FB:5B:8D:F3:80:B0:E6:4D:13:B4:88:C8:E3:14:6E"}}},"request":{"raw":"GET /adx-mainstream.json HTTP/1.1\r\nHost: adxpy.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://brookhaven-outfit-codes-matching-bestie.pages.dev/\r\nOrigin: https://brookhaven-outfit-codes-matching-bestie.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 08 Mar 2026 14:09:36 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pRDY3pis%2F9l%2Bw%2FSBWTgTcnUWK9r1T89YyQGmLpvu77M%2BZAPCFvqj2foW8Zmm0xAJIN4kECK3LxMrFaI%2FFDH3YNj90eubQfJ6AsH664vzuA%3D%3D\"}]}\r\netag: W/\"7b49849f40013f93e7f062a5ea9f812c\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d926b2c1e633017-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1453,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"6ffbb69834723feb9c7113271b1c2ea2","sha1":"8bfa604b64d94fad6bbeaf5c580175e4001d4dc5","sha256":"46498f749be8fd2b102eb3563d490c7890b94ed1d0b5b133e2cc3c444ed048c2","sha512":"7b15f328c00533c83fa7c65fff45e5fff27b012955d49affd579a7c7eb14a66839822b50b7947d609d53e08419128bef2773fcb5bc6f95b77731662acf7cb001","ssdeep":"","tlshash":"f9319e999f1cf29410b24ad23c33e0bef598be063908dc9551dc9c6ac2a43e04d57666","first_seen":"2026-01-30T08:57:52.033645Z","last_seen":"2026-04-04T18:45:43.321527Z","times_seen":169,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":37,"dns":1,"connect":8,"send":0,"wait":23,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/ren.gif?sid=H4sIAAAAAAAC_1RSv28cRRidNRYFFIiA6IhWgASR8Hn2p29JF_GjAGxEgiJBNTuz63zc3M5mZ_fucpWDUQqqpECiQdp7Z8dNiED8A-iMRIGE5OuuiBsqaqRIdOjskwxTfD_mjUbve--7N2lOWQeNWHzysRmT1mIz6nD3rZtUKDO07vYN1-MdftW9SUUcXnVHy1AN3vGCsMOvuB9ksmc2fe5x7nHPfZ-qLDejzTMUVD5KvE7CO6Hf8aIQo-r_vW0cWOFADU7ZJZCav_Bn_gVIzlD0f3w3s73alG-_12-0qE2FgTr6rOgVZligf1HmlYO8OFq9hrFzxr5bgymOVhPADA6WEyClOVt75QnS4mhFE-ng8JxpqpEVSNXzGA5myPQMJGaQZh-kThggFbZ3UPQfbptqKO6co2KJztn6079Bwzlbf_Iyiv7ja5pG7nWjm5pMYTHKW9BoBtqdoWyOUY8d0PAYsv4KpP5gm08_QtE_2LHagNTijdQLROJHfMOTQbwRZjLZSOIw2kikz2U3Ul4URmcSUT6DsGtorIOGHDS5g6Z00FcLN-TdUHoiiPNEyS0eijBUWcqTrs-5SOQWGnkXpO5DVnsoqz306MHJZQ57q4VVDmzNMFDtodLWt-1DpW2Teqvsr3LQTk29OxGHpt7NCgZR3Uel2gMqb9t9yPqZ6Ti3amqWQaR1OxWpaqek6jVUt9tJecpeXMrnfPv9b-hlC1f6fCuT3VD6YRSL3OeelFEcSKFkEMswhqUWZNcgrIMxzdmH-RWUNGeX7_2FVBzD6mNIciCaVyGGLcStFuPiUU6FGpDMOtL0oUyLsl5HfceZ6FP20vTTG9d-OXPx8ze_QSZ_Z6sDWbUoqxZf0q8Mu_ruTztlTX0ai6Wt12tRZ89C0MnrPiTN2aXHP5_tl__Pc5DlHmx58ZM1DGnpQBODzi7uRdrC_qdPL-qJ_Rq7lYNUO9NUV85Bqiv94JykpYUb-WkQd7txlscqD1TgByqJeJaEIonDJIxQ2zn9sP_avwEAAP__kSjV2d0DAAA=","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://brookhaven-outfit-codes-matching-bestie.pages.dev/","date":"2026-03-08T14:09:38.319Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 22:53:11 GMT","end":"Sun, 24 May 2026 22:53:10 GMT"},"fingerprint":{"sha1":"ED:51:C6:32:50:BE:DC:21:A3:AD:D6:A1:DB:98:F0:08:AD:BF:E7:A2","sha256":"56:84:BB:23:CE:A6:AD:BA:2E:8A:D0:F9:92:4F:17:BF:64:9A:7D:1C:AC:77:10:4A:32:94:E4:15:91:57:B1:A8"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_1RSv28cRRidNRYFFIiA6IhWgASR8Hn2p29JF_GjAGxEgiJBNTuz63zc3M5mZ_fucpWDUQqqpECiQdp7Z8dNiED8A-iMRIGE5OuuiBsqaqRIdOjskwxTfD_mjUbve--7N2lOWQeNWHzysRmT1mIz6nD3rZtUKDO07vYN1-MdftW9SUUcXnVHy1AN3vGCsMOvuB9ksmc2fe5x7nHPfZ-qLDejzTMUVD5KvE7CO6Hf8aIQo-r_vW0cWOFADU7ZJZCav_Bn_gVIzlD0f3w3s73alG-_12-0qE2FgTr6rOgVZligf1HmlYO8OFq9hrFzxr5bgymOVhPADA6WEyClOVt75QnS4mhFE-ng8JxpqpEVSNXzGA5myPQMJGaQZh-kThggFbZ3UPQfbptqKO6co2KJztn6079Bwzlbf_Iyiv7ja5pG7nWjm5pMYTHKW9BoBtqdoWyOUY8d0PAYsv4KpP5gm08_QtE_2LHagNTijdQLROJHfMOTQbwRZjLZSOIw2kikz2U3Ul4URmcSUT6DsGtorIOGHDS5g6Z00FcLN-TdUHoiiPNEyS0eijBUWcqTrs-5SOQWGnkXpO5DVnsoqz306MHJZQ57q4VVDmzNMFDtodLWt-1DpW2Teqvsr3LQTk29OxGHpt7NCgZR3Uel2gMqb9t9yPqZ6Ti3amqWQaR1OxWpaqek6jVUt9tJecpeXMrnfPv9b-hlC1f6fCuT3VD6YRSL3OeelFEcSKFkEMswhqUWZNcgrIMxzdmH-RWUNGeX7_2FVBzD6mNIciCaVyGGLcStFuPiUU6FGpDMOtL0oUyLsl5HfceZ6FP20vTTG9d-OXPx8ze_QSZ_Z6sDWbUoqxZf0q8Mu_ruTztlTX0ai6Wt12tRZ89C0MnrPiTN2aXHP5_tl__Pc5DlHmx58ZM1DGnpQBODzi7uRdrC_qdPL-qJ_Rq7lYNUO9NUV85Bqiv94JykpYUb-WkQd7txlscqD1TgByqJeJaEIonDJIxQ2zn9sP_avwEAAP__kSjV2d0DAAA= HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://brookhaven-outfit-codes-matching-bestie.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=b13a9250-1c36-4ec9-9645-9c20c85d1545:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl26582471=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sun, 08 Mar 2026 14:09:38 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 2\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 8b5db8475f0b1c9d1fec7bd0371fdef4\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T22:47:04.158538Z","times_seen":13349726,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:300,400,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.21.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://brookhaven-outfit-codes-matching-bestie.pages.dev/","date":"2026-03-08T14:09:38.649Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css?family=Roboto:300,400,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 08 Mar 2026 14:09:38 GMT\r\ndate: Sun, 08 Mar 2026 14:09:38 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16755,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"1936a90eef3ebd4c6b40eb59d72e164d","sha1":"4c698f8dc97e2e6186d46215e209aca1b1194a5d","sha256":"412d98c2f4410a048131a7d9362fb38456ce2ff67cd4731ea411708a7996a021","sha512":"07ad2431175e5566ae435738d94d4da3e96e4856a1fe1d5917c52474cab28808cd940fec0e8f75eb2f3d573e6fe8497fc12636ef4738d1b67e9144725192b580","ssdeep":"384:p9f59g9P9r9yU9/qY4+949Y9p9fM919W969yh9/qY4X9N9t949fd9k9D939yQ9/O:pDS99YURRuWDyjooYhREHPWP2ZZYQRVs","tlshash":"48721091041704009b834ce223cebf35fe1f52117142d0b5abfd9b6b9ddbca6526939d","first_seen":"2026-02-19T22:28:01.752187Z","last_seen":"2026-04-04T22:35:18.737702Z","times_seen":3055,"resource_available":false,"data":null}},"time_used":309,"timings":{"blocked":145,"dns":0,"connect":8,"send":0,"wait":19,"receive":0,"ssl":134},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fnotifications%2Futility%2Ftiktok%2Fmulti%2Fimage-row%2F4%2Fcss%2Fanimate.css\u0026l=78705\u0026fd=539","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://brookhaven-outfit-codes-matching-bestie.pages.dev/","date":"2026-03-08T14:09:39.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 22:53:11 GMT","end":"Sun, 24 May 2026 22:53:10 GMT"},"fingerprint":{"sha1":"ED:51:C6:32:50:BE:DC:21:A3:AD:D6:A1:DB:98:F0:08:AD:BF:E7:A2","sha256":"56:84:BB:23:CE:A6:AD:BA:2E:8A:D0:F9:92:4F:17:BF:64:9A:7D:1C:AC:77:10:4A:32:94:E4:15:91:57:B1:A8"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fnotifications%2Futility%2Ftiktok%2Fmulti%2Fimage-row%2F4%2Fcss%2Fanimate.css\u0026l=78705\u0026fd=539 HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://brookhaven-outfit-codes-matching-bestie.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=b13a9250-1c36-4ec9-9645-9c20c85d1545:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl26582471=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sun, 08 Mar 2026 14:09:39 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T22:47:04.158538Z","times_seen":13349726,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/interstitial/games/lg/1/img/1_name.png","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://brookhaven-outfit-codes-matching-bestie.pages.dev/","date":"2026-03-08T14:09:41.112Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Feb 2026 22:50:15 GMT","end":"Sat, 23 May 2026 23:48:46 GMT"},"fingerprint":{"sha1":"E0:64:EB:B0:39:B0:1B:31:05:CE:A0:93:C8:74:E7:A4:DE:D1:B3:77","sha256":"6D:BC:A3:C7:8F:67:2C:FE:E1:7A:88:EA:6C:8E:07:D4:1D:1F:CA:FD:54:30:02:80:22:B2:74:B5:95:C4:99:75"}}},"request":{"raw":"GET /sb/interstitial/games/lg/1/img/1_name.png HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 08 Mar 2026 14:09:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 4734\r\nserver: cloudflare\r\nlast-modified: Tue, 26 Aug 2025 11:03:45 GMT\r\npriority: u=4,i=?0\r\netag: \"68ad9491-127e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\naccept-ranges: bytes\r\nage: 3441889\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lgjQ6zmJ%2ByAa1XaHBMGm43E1GfRob4s6jvQi6Yo8ujuue8GjQ0nAvoBrdmeZtlMBreMRZjiiezan7LlgXF4aOD2dcqo5rioycGNr8QJzz%2B0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d926b47ea31349b-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4734,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 319 x 47, 8-bit colormap, non-interlaced","md5":"532210aca91d03451e98d45b3331c6d0","sha1":"565b8febf6924a99752f8ada2927a1825403be17","sha256":"f7b3a6bad3564c05ec03f364cbacb3239f3116c6905a8a49795a1785fd2ea277","sha512":"ccc52d06202158f241688ec578bb9ae0e5bfc5cfbcea183c1c86c43f40e9aad27d9bd9b5687b0eeedec199fe48cd9c743fa9e1430c77cbecca9b264de1f901d6","ssdeep":"96:qR0O3ETRY4GTobA3lydoKI/rFSslaa+vnDOB4CW7O7EPU5Q:q0O3me4G4A3lwcFSslabfDiG7O7EM5Q","tlshash":"2ca17dd9b116396aa2ce032dba5b004afd53261a6c5971d56983c7270a3b7c24b8e273","first_seen":"2025-10-06T08:00:25.578131Z","last_seen":"2026-03-23T08:56:50.639224Z","times_seen":625,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"realizationnewestfangs.com/watch.964089451546.js?key=52f212bca95373aed7ead32398143db7\u0026kw=%5B%22cool%22%2C%22brookhaven%22%2C%22outfit%22%2C%22codes%22%2C%22matching%22%2C%22bestie%22%2C%22looks%22%5D\u0026refer=https%3A%2F%2Fbrookhaven-outfit-codes-matching-bestie.pages.dev%2F\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=3d608506-2ad8-4ea7-8ac4-e0ee5c9c08e0%3A3%3A1","fqdn":"realizationnewestfangs.com","domain":"realizationnewestfangs.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://brookhaven-outfit-codes-matching-bestie.pages.dev/","date":"2026-03-08T14:09:41.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"realizationnewestfangs.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 23:39:43 GMT","end":"Wed, 27 May 2026 23:39:42 GMT"},"fingerprint":{"sha1":"2F:D0:7E:69:4A:D0:06:61:89:AF:78:09:0A:5A:F1:7B:F9:4A:B7:96","sha256":"24:55:49:F2:2C:E7:D7:3D:E6:6E:54:6C:64:30:D7:3C:F6:39:2F:A0:A7:A2:AA:25:93:8D:6B:C2:15:40:66:C2"}}},"request":{"raw":"GET /watch.964089451546.js?key=52f212bca95373aed7ead32398143db7\u0026kw=%5B%22cool%22%2C%22brookhaven%22%2C%22outfit%22%2C%22codes%22%2C%22matching%22%2C%22bestie%22%2C%22looks%22%5D\u0026refer=https%3A%2F%2Fbrookhaven-outfit-codes-matching-bestie.pages.dev%2F\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=3d608506-2ad8-4ea7-8ac4-e0ee5c9c08e0%3A3%3A1 HTTP/1.1\r\nHost: realizationnewestfangs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://brookhaven-outfit-codes-matching-bestie.pages.dev/\r\nOrigin: https://brookhaven-outfit-codes-matching-bestie.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 307 Temporary Redirect\r\nServer: nginx/1.21.6\r\nDate: Sun, 08 Mar 2026 14:09:42 GMT\r\nContent-Type: text/html\r\nContent-Length: 0\r\nConnection: keep-alive\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\naccess-control-allow-origin: https://brookhaven-outfit-codes-matching-bestie.pages.dev\r\naccess-control-allow-credentials: true\r\nlocation: https://realizationnewestfangs.com/watch.964089451546.js?key=52f212bca95373aed7ead32398143db7\u0026kw=%5B%22cool%22%2C%22brookhaven%22%2C%22outfit%22%2C%22codes%22%2C%22matching%22%2C%22bestie%22%2C%22looks%22%5D\u0026refer=https%3A%2F%2Fbrookhaven-outfit-codes-matching-bestie.pages.dev%2F\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=3d608506-2ad8-4ea7-8ac4-e0ee5c9c08e0%3A3%3A1\u0026shu=c61553399583693847519b39fd77bd39234ae851e9f3448bf078e3262436141831a18c62286ea01abc523ca061bda6635d0f864f9081a30d3f4cad426efb4a05f2e1c7c206e0976230d00e648432050dc91b3368acd1c54fb11c7b\u0026pst=1772979042\u0026rmtc=t\u0026st1=bf1f078db5a71c0b536f47e557fdd6f8\u0026ps1=1772978982\u0026rid=019ccdc8-4dd4-7279-8109-7d3084dc44c5\r\nset-cookie: uid_id2=3d608506-2ad8-4ea7-8ac4-e0ee5c9c08e0:3:1; expires=Sun, 15 Mar 2026 14:09:42 GMT; path=/; secure; SameSite=None\nain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJwIjp7ImlkIjoyNjU4MjQzNiwiayI6IjUyZjIxMmJjYTk1MzczYWVkN2VhZDMyMzk4MTQzZGI3Iiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjo0OTQxMzUzLCJwaWQiOjIwMDA2MTcsImFuIjp0cnVlLCJsYW4iOnRydWUsImNpZCI6MSwiYWlkIjozMiwicHQiOjQsInBrIjoienZlNHhhcmlwciIsInQiOjF9LCJ1Ijp7InUiOjEsImF1IjoxLCJkIjp7ImlkIjoyNjY1NjExMTUsImlkcyI6IiIsImljIjpmYWxzZSwibiI6IkRlc2t0b3AsRW11bGF0b3IiLCJ2IjoiVW5rbm93biIsIm0iOiJVbmtub3duIiwiZiI6MSwiZm4iOiJEZXNrdG9wIiwib2lkIjozODkxNCwib24iOiJXaW5kb3dzIiwib3YiOiIxMC4wIiwiYmlkIjoxMzY5MjUsImJuIjoiRmlyZWZveCIsImJ2IjoiMTM0LjAiLCJ3diI6ZmFsc2UsImUiOnRydWUsImFiIjpmYWxzZX0sImMiOnsiaWQiOjE2MiwiYyI6Ik5PIiwibiI6Ik5vcndheSJ9LCJjdCI6eyJpZCI6MzE0MzI0NCwibiI6Ik9zbG8ifSwicmciOnsiaWQiOjE4NDQsIm4iOiJPc2xvIENvdW50eSJ9LCJhIjpmYWxzZSwiY3IiOnsibiI6IkJsaXggU29sdXRpb25zIn0sInhmIjoiIiwiaXhmIjpmYWxzZSwiaWd4ZiI6ZmFsc2UsIml3ZiI6dHJ1ZSwidXAiOnRydWUsInIiOiJodHRwczovL2Jyb29raGF2ZW4tb3V0Zml0LWNvZGVzLW1hdGNoaW5nLWJlc3RpZS5wYWdlcy5kZXYvIiwidHoiOjEsImlkdCI6MiwiYXIiOltdfX0.qSoDFdRftJaJU22yZofr0UAxfZTjfY68qUUbiv0Qh8A; expires=Sun, 08 Mar 2026 14:10:42 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 2\r\nHost: realizationnewestfangs.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 82e32eaa667b4ed9cc467cdc613aac83\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":4847,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T22:47:04.158538Z","times_seen":13349726,"resource_available":true,"data":null}},"time_used":741,"timings":{"blocked":317,"dns":20,"connect":96,"send":0,"wait":101,"receive":6,"ssl":198},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://brookhaven-outfit-codes-matching-bestie.pages.dev/","date":"2026-03-08T14:09:37.438Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"preferencenail.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 01:24:35 GMT","end":"Thu, 28 May 2026 01:24:34 GMT"},"fingerprint":{"sha1":"66:45:2B:BB:A2:6D:D3:A2:B6:16:36:65:94:BA:4A:C6:5E:05:66:09","sha256":"A4:2E:A7:56:DB:44:FF:55:9A:FA:4D:EC:2A:78:CB:C5:02:CD:CF:B2:FB:A7:A7:75:77:EC:01:DB:19:71:C0:77"}}},"request":{"raw":"GET /sfp.js HTTP/1.1\r\nHost: preferencenail.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://brookhaven-outfit-codes-matching-bestie.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sun, 08 Mar 2026 14:09:37 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nContent-Length: 32181\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nVary: Accept-Encoding\r\nHost: preferencenail.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 86a0a65660edae9c5c6594c061551861\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":85379,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-04-04T22:35:18.707466Z","times_seen":13232,"resource_available":true,"data":null}},"time_used":183,"timings":{"blocked":69,"dns":8,"connect":17,"send":0,"wait":21,"receive":19,"ssl":41},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/notifications/utility/tiktok/multi/image-row/4/js/jquery.min.js","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://brookhaven-outfit-codes-matching-bestie.pages.dev/","date":"2026-03-08T14:09:38.733Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Feb 2026 22:50:15 GMT","end":"Sat, 23 May 2026 23:48:46 GMT"},"fingerprint":{"sha1":"E0:64:EB:B0:39:B0:1B:31:05:CE:A0:93:C8:74:E7:A4:DE:D1:B3:77","sha256":"6D:BC:A3:C7:8F:67:2C:FE:E1:7A:88:EA:6C:8E:07:D4:1D:1F:CA:FD:54:30:02:80:22:B2:74:B5:95:C4:99:75"}}},"request":{"raw":"GET /sb/notifications/utility/tiktok/multi/image-row/4/js/jquery.min.js HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 08 Mar 2026 14:09:42 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 27 Jun 2025 13:37:33 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nage: 1507978\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GMXqfiAp7QW6Feg0hmvR4EVzHIOasU1do20mR16vaL7eTB7iI01escxO6rCN4aenfzXrN%2FiQR5ods%2FVXIWx5EfNQ28jcYTCVzxFZyIVkxQM%3D\"}]}\r\netag: W/\"685e9e9d-149a0\"\r\ncontent-encoding: br\r\ncf-ray: 9d926b391b50349b-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84384,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32025), with CRLF line terminators","md5":"6326c600df01e3bfb9b40e1aa08176f8","sha1":"6b4fb754d29b297b539bf62ba9b4eaf0f33f314a","sha256":"df34524351c5fabc921a89183b5da5667aebd7b9e9a1c52255c76ff722935ea3","sha512":"641aaeecb9b89bcc319cabfef18f76faa9b1ba79f9de30c6d07f22d385fc78ac3f11a718fe9ec96f8a13d82e3dff4ca34944ccb449a4ef8e378ad65dfad581c0","ssdeep":"1536:oP10iSi65U/dXXeyhzeBuG+HYE0mdDuJO1z6Oy4sh3J1x72BjmN7TwpDKba98Hri:f+41hJiz6fhdlTqya98Hri","tlshash":"eb83d6d9b2c67062977734b851bf510bb17a98dab40c8c60f0a4d8e47eb4a8d517bf2c","first_seen":"2023-03-07T01:10:11Z","last_seen":"2026-04-04T22:35:18.745275Z","times_seen":10403,"resource_available":true,"data":null}},"time_used":3361,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":3314,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/sbar.json?key=af25da8381e0bd0494ba4018c76898a2\u0026uuid=3d608506-2ad8-4ea7-8ac4-e0ee5c9c08e0%3A3%3A1","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://brookhaven-outfit-codes-matching-bestie.pages.dev/","date":"2026-03-08T14:09:40.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 22:53:11 GMT","end":"Sun, 24 May 2026 22:53:10 GMT"},"fingerprint":{"sha1":"ED:51:C6:32:50:BE:DC:21:A3:AD:D6:A1:DB:98:F0:08:AD:BF:E7:A2","sha256":"56:84:BB:23:CE:A6:AD:BA:2E:8A:D0:F9:92:4F:17:BF:64:9A:7D:1C:AC:77:10:4A:32:94:E4:15:91:57:B1:A8"}}},"request":{"raw":"GET /sbar.json?key=af25da8381e0bd0494ba4018c76898a2\u0026uuid=3d608506-2ad8-4ea7-8ac4-e0ee5c9c08e0%3A3%3A1 HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://brookhaven-outfit-codes-matching-bestie.pages.dev/\r\nOrigin: https://brookhaven-outfit-codes-matching-bestie.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=b13a9250-1c36-4ec9-9645-9c20c85d1545:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl26582471=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sun, 08 Mar 2026 14:09:40 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 3238\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\naccess-control-allow-origin: https://brookhaven-outfit-codes-matching-bestie.pages.dev\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\nset-cookie: uid_id2=b13a9250-1c36-4ec9-9645-9c20c85d1545:2:1; expires=Sun, 15 Mar 2026 14:09:40 GMT; path=/; secure; SameSite=None\nuncs=2; expires=Mon, 09 Mar 2026 14:09:40 GMT; path=/; secure; SameSite=None\nuncs29=2; expires=Mon, 09 Mar 2026 14:09:40 GMT; path=/; secure; SameSite=None\nu_pl28216845=1; expires=Mon, 09 Mar 2026 14:09:40 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 215\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 4496453aaeb895caae1642d7ca4f3424\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":5463,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"JSON text data","md5":"b480c0feb162b993b763cfe9eea3beb3","sha1":"a207abede98c55502d7eff61f60fb3a8a16db5d7","sha256":"782fa3fa01dfde072138c4a83151b992a8eab33edf55f0c33326cf57030f7a4c","sha512":"c2c30b547540d9f31ac387d4bdbfe78cd8b477dc25c58c5fb5088e378ed727738a3f1519869ad4ee5b24984de4329f0140888fadc1ce39946322902a9ff6e0f0","ssdeep":"96:9zpsYjVQ6bWMj0xG+Ra+W5q5WN69dm3EDotaf3G+Ra+W5q/MUbdTyIr:9z15Q6C20wAW4WgnmUaa2AWqVbpyIr","tlshash":"15b14dbd900b0005dcb7bcdb8c7215f28de848aede015a48369767af9d3a905ef4470c","first_seen":"2026-03-08T14:10:06.860965Z","last_seen":"2026-03-08T14:10:06.860965Z","times_seen":1,"resource_available":false,"data":null}},"time_used":315,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":314,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"adxpy.pages.dev/arrow-up.gif","fqdn":"adxpy.pages.dev","domain":"adxpy.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://brookhaven-outfit-codes-matching-bestie.pages.dev/","date":"2026-03-08T14:09:36.761Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adxpy.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 23:59:16 GMT","end":"Wed, 06 May 2026 00:57:55 GMT"},"fingerprint":{"sha1":"43:02:20:65:8A:13:63:9C:3E:A6:CF:BC:13:A1:4D:89:B4:AE:4D:E8","sha256":"93:76:A5:FC:14:19:A2:25:5A:48:98:9A:34:CB:E8:16:20:FB:5B:8D:F3:80:B0:E6:4D:13:B4:88:C8:E3:14:6E"}}},"request":{"raw":"GET /arrow-up.gif HTTP/1.1\r\nHost: adxpy.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://brookhaven-outfit-codes-matching-bestie.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 08 Mar 2026 14:09:36 GMT\r\ncontent-type: image/gif\r\ncontent-length: 4491\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"abc38753b71c3201854a4e8b3ffdce52\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aoy13or33R3A9gtnwEcCmqgYUh2i3%2Bs9E8nmeu2l86TCN7TrlxF5A7bwDJ0jdeOpIGyj1wPWQDleHBjRPplbBjtaAz11eztxmnmFGiRepw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9d926b2cbd212382-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4491,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 28 x 150","md5":"8b78a541eaa521c8bd946b84a46feb92","sha1":"31a6411c7051332a4aff0d338cf721f513bd1f8b","sha256":"8794063dced5ec3d5035d4fd6e7cce885671224284469fe85e7b392a0fabf0a8","sha512":"ca4f07b46c061bcc141b763e32da638e835f207106f8d5ea90dfab473487114081fbd3e12768cfe3d374c0eecba53e2a085fd0af4cb068f4efed559fbd9fa26d","ssdeep":"96:kRXW9wwXp9lM6jb7xLD3hFG2G/3dtGSQp60NfzpAMK:kVW9Jp9JjbBDRFG2G/3mjrpAMK","tlshash":"c791e7121a798d4cf0335934c9a8ac5f332a5da2811183db29d4329ee93c4bd596e67c","first_seen":"2025-05-30T17:14:42.053302Z","last_seen":"2026-04-04T18:45:43.361928Z","times_seen":373,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Finterstitial%2Fgames%2Flg%2F1%2Fjs%2Fmain.js\u0026l=4916\u0026fd=137","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://brookhaven-outfit-codes-matching-bestie.pages.dev/","date":"2026-03-08T14:09:40.914Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 22:53:11 GMT","end":"Sun, 24 May 2026 22:53:10 GMT"},"fingerprint":{"sha1":"ED:51:C6:32:50:BE:DC:21:A3:AD:D6:A1:DB:98:F0:08:AD:BF:E7:A2","sha256":"56:84:BB:23:CE:A6:AD:BA:2E:8A:D0:F9:92:4F:17:BF:64:9A:7D:1C:AC:77:10:4A:32:94:E4:15:91:57:B1:A8"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Finterstitial%2Fgames%2Flg%2F1%2Fjs%2Fmain.js\u0026l=4916\u0026fd=137 HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://brookhaven-outfit-codes-matching-bestie.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=b13a9250-1c36-4ec9-9645-9c20c85d1545:2:1; pdhtkv=true; uncs=2; pdhtkv29=true; uncs29=2; u_pl26582471=1; u_pl28216845=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sun, 08 Mar 2026 14:09:40 GMT\r\nContent-Length: 0\r\nConnection: close\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T22:47:04.158538Z","times_seen":13349726,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":100,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/impr.gif?sid=H4sIAAAAAAAC_1RSv28cRRidNRYFFIiA6IhWgASR8Hn2p29JF_GjAGxEgiJBNTuz63zc3M5mZ_fucpWDUQqqpECiQdp7Z8dNiED8A-iMRIGE5OuuiBsqaqRIdOjskwxTfD_mjUbve--7N2lOWQeNWHzysRmT1mIz6nD3rZtUKDO07vYN1-MdftW9SUUcXnVHy1AN3vGCsMOvuB9ksmc2fe5x7nHPfZ-qLDejzTMUVD5KvE7CO6Hf8aIQo-r_vW0cWOFADU7ZJZCav_Bn_gVIzlD0f3w3s73alG-_12-0qE2FgTr6rOgVZligf1HmlYO8OFq9hrFzxr5bgymOVhPADA6WEyClOVt75QnS4mhFE-ng8JxpqpEVSNXzGA5myPQMJGaQZh-kThggFbZ3UPQfbptqKO6co2KJztn6079Bwzlbf_Iyiv7ja5pG7nWjm5pMYTHKW9BoBtqdoWyOUY8d0PAYsv4KpP5gm08_QtE_2LHagNTijdQLROJHfMOTQbwRZjLZSOIw2kikz2U3Ul4URmcSUT6DsGtorIOGHDS5g6Z00FcLN-TdUHoiiPNEyS0eijBUWcqTrs-5SOQWGnkXpO5DVnsoqz306MHJZQ57q4VVDmzNMFDtodLWt-1DpW2Teqvsr3LQTk29OxGHpt7NCgZR3Uel2gMqb9t9yPqZ6Ti3amqWQaR1OxWpaqek6jVUt9tJecpeXMrnfPv9b-hlC1f6fCuT3VD6YRSL3OeelFEcSKFkEMswhqUWZNcgrIMxzdmH-RWUNGeX7_2FVBzD6mNIciCaVyGGLcStFuPiUU6FGpDMOtL0oUyLsl5HfceZ6FP20vTTG9d-OXPx8ze_QSZ_Z6sDWbUoqxZf0q8Mu_ruTztlTX0ai6Wt12tRZ89C0MnrPiTN2aXHP5_tl__Pc5DlHmx58ZM1DGnpQBODzi7uRdrC_qdPL-qJ_Rq7lYNUO9NUV85Bqiv94JykpYWbB5kvOe9uxV7QzTMvCJXMo26YqFjwIMhQ2zn9sP_avwEAAP__bUBFB90DAAA=","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.127.243","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://brookhaven-outfit-codes-matching-bestie.pages.dev/","date":"2026-03-08T14:09:43.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 22:53:11 GMT","end":"Sun, 24 May 2026 22:53:10 GMT"},"fingerprint":{"sha1":"ED:51:C6:32:50:BE:DC:21:A3:AD:D6:A1:DB:98:F0:08:AD:BF:E7:A2","sha256":"56:84:BB:23:CE:A6:AD:BA:2E:8A:D0:F9:92:4F:17:BF:64:9A:7D:1C:AC:77:10:4A:32:94:E4:15:91:57:B1:A8"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1RSv28cRRidNRYFFIiA6IhWgASR8Hn2p29JF_GjAGxEgiJBNTuz63zc3M5mZ_fucpWDUQqqpECiQdp7Z8dNiED8A-iMRIGE5OuuiBsqaqRIdOjskwxTfD_mjUbve--7N2lOWQeNWHzysRmT1mIz6nD3rZtUKDO07vYN1-MdftW9SUUcXnVHy1AN3vGCsMOvuB9ksmc2fe5x7nHPfZ-qLDejzTMUVD5KvE7CO6Hf8aIQo-r_vW0cWOFADU7ZJZCav_Bn_gVIzlD0f3w3s73alG-_12-0qE2FgTr6rOgVZligf1HmlYO8OFq9hrFzxr5bgymOVhPADA6WEyClOVt75QnS4mhFE-ng8JxpqpEVSNXzGA5myPQMJGaQZh-kThggFbZ3UPQfbptqKO6co2KJztn6079Bwzlbf_Iyiv7ja5pG7nWjm5pMYTHKW9BoBtqdoWyOUY8d0PAYsv4KpP5gm08_QtE_2LHagNTijdQLROJHfMOTQbwRZjLZSOIw2kikz2U3Ul4URmcSUT6DsGtorIOGHDS5g6Z00FcLN-TdUHoiiPNEyS0eijBUWcqTrs-5SOQWGnkXpO5DVnsoqz306MHJZQ57q4VVDmzNMFDtodLWt-1DpW2Teqvsr3LQTk29OxGHpt7NCgZR3Uel2gMqb9t9yPqZ6Ti3amqWQaR1OxWpaqek6jVUt9tJecpeXMrnfPv9b-hlC1f6fCuT3VD6YRSL3OeelFEcSKFkEMswhqUWZNcgrIMxzdmH-RWUNGeX7_2FVBzD6mNIciCaVyGGLcStFuPiUU6FGpDMOtL0oUyLsl5HfceZ6FP20vTTG9d-OXPx8ze_QSZ_Z6sDWbUoqxZf0q8Mu_ruTztlTX0ai6Wt12tRZ89C0MnrPiTN2aXHP5_tl__Pc5DlHmx58ZM1DGnpQBODzi7uRdrC_qdPL-qJ_Rq7lYNUO9NUV85Bqiv94JykpYWbB5kvOe9uxV7QzTMvCJXMo26YqFjwIMhQ2zn9sP_avwEAAP__bUBFB90DAAA= HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://brookhaven-outfit-codes-matching-bestie.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=b13a9250-1c36-4ec9-9645-9c20c85d1545:2:1; pdhtkv=true; uncs=2; pdhtkv29=true; uncs29=2; u_pl26582471=1; u_pl28216845=1; iprc_l+a6ad9579d24c975cc6f619d849db19fd=6429110; iprc_l:6429110=3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sun, 08 Mar 2026 14:09:43 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 3\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 8f236b24f0f0f0d04d8332ca261f3e11\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T22:47:04.158538Z","times_seen":13349726,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"brookhaven-outfit-codes-matching-bestie.pages.dev/","fqdn":"brookhaven-outfit-codes-matching-bestie.pages.dev","domain":"brookhaven-outfit-codes-matching-bestie.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-08T14:09:35.114Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brookhaven-outfit-codes-matching-bestie.pages.dev","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 23:58:01 GMT","end":"Sun, 24 May 2026 23:58:00 GMT"},"fingerprint":{"sha1":"00:56:F0:B1:41:10:7A:02:49:FD:35:8F:47:CC:1A:09:17:F2:EB:57","sha256":"F7:E0:6C:BC:03:E6:A8:5E:F2:3D:8A:6C:DB:C0:FE:22:75:56:C0:D4:94:B4:2C:0E:4B:BB:77:18:EE:57:A8:B1"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: brookhaven-outfit-codes-matching-bestie.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 08 Mar 2026 14:09:35 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D8FzMZNs%2BKTurLTUs6XsznWq0AQNt376ZQz4%2F5eu4xKfUyMCcu2rA8uI19uF%2FwwPYEDFjw582YOBNsHy4lsWfHuXPha3iDbV%2B9YXwel0EvtJLwVBcYt3czGS2MO40doYZ%2Fv1vtPUn8UTzrVbe0VfhxE%3D\"}]}\r\netag: W/\"bbd166dcbeacc59bafd01926f2bb16eb\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d926b22cfe3481e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35753,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (18909)","md5":"704acb2e93ab34ab1a59a788072936ee","sha1":"6ca0cf116c52d7bf1bbe979bc10d2e21f9f5d457","sha256":"b0890337f5b016fdc99dff38ae777bba65b58755e225dc1b2a0af3d703a8589e","sha512":"4a497894d7457f5f5048f2b8e8f32f0b99d1773cebd24a3674844e828265a615f3935d1a2ec428d7bb9ea0eb197d01e91408e0169229daf1463b246e0a7c0c67","ssdeep":"768:/1OKJvyiPaPrTf+oHDtMs7rMiyl+RPzdz3JN/QyI:UiPu5DtMKDPpXQ7","tlshash":"0cf22abfe748037511f001a4531eb7e9bb0b64ae93b3503dec4fe56a2551a3e813a4e9","first_seen":"2026-03-08T14:10:06.862406Z","last_seen":"2026-03-08T14:10:06.862406Z","times_seen":1,"resource_available":true,"data":null}},"time_used":259,"timings":{"blocked":56,"dns":17,"connect":8,"send":0,"wait":147,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mtevor.com/hg/pages-dev.js","fqdn":"mtevor.com","domain":"mtevor.com","tld":"com"},"ip":{"addr":"172.67.199.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://brookhaven-outfit-codes-matching-bestie.pages.dev/","date":"2026-03-08T14:09:35.513Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mtevor.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 11:32:12 GMT","end":"Mon, 27 Apr 2026 12:30:06 GMT"},"fingerprint":{"sha1":"D8:03:9D:26:EC:C1:04:F7:55:BC:97:44:3A:24:A0:B3:FC:B0:D6:0A","sha256":"54:D5:7F:60:75:7F:70:4F:CB:98:B8:4E:80:48:B7:BB:62:49:06:71:63:00:08:A5:3A:C6:70:65:23:ED:F3:F3"}}},"request":{"raw":"GET /hg/pages-dev.js HTTP/1.1\r\nHost: mtevor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://brookhaven-outfit-codes-matching-bestie.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 08 Mar 2026 14:09:35 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 24 Feb 2026 06:36:35 GMT\r\nage: 1063980\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fEYbseElO4pN99hZ4mE3MN%2F3Lx95wo%2FpmqP5syfLX0%2BLdao0C8onijEbNwubDt7Q6qFmy3DhylTRkZCIlrMhMKdzOQIEYPqF4WQ%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9d926b252b7fdbb0-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6622,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"ef23e0c1c0703894aa8f9569dc89a351","sha1":"059e6af97c0f3dd53aef3c3a748b759766908bc1","sha256":"cfa90ffce265f3299945c2063078d2c7f044e6edd0ea0f1c38918f2a51f2efe3","sha512":"9e84b34461a74f002f0a6e53a15746b68c32832a09ae96528577bda0f5e6c64d3d613a46f2b6f45725f88a83a87924891d0732a713e7ee7a6d11340174a80601","ssdeep":"192:c4Mpsto0LV8YteZbDVj/poiPqpyj4ZrIVpsQkhv:/++j8YteZfJ/ptPqcj4eVpsQu","tlshash":"17d1c7a9bc8f8d394bf2f36896368519fd7cd0231603505ab0c8515b8a69f1e471fed8","first_seen":"2026-01-30T09:04:57.189496Z","last_seen":"2026-03-09T08:26:16.704326Z","times_seen":133,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":37,"dns":1,"connect":11,"send":0,"wait":15,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sourshaped.com/pixel/purst?dl=0\u0026th=0\u0026sc=0\u0026rs=2245\u0026rd=2245\u0026fd=495\u0026bv=26.3.7753\u0026tmpl=70","fqdn":"sourshaped.com","domain":"sourshaped.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://brookhaven-outfit-codes-matching-bestie.pages.dev/","date":"2026-03-08T14:09:37.436Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sourshaped.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 00:01:03 GMT","end":"Thu, 28 May 2026 00:01:02 GMT"},"fingerprint":{"sha1":"F1:AF:5D:36:35:F4:F3:93:55:9A:8D:70:8F:C7:F5:6B:E2:26:FB:8E","sha256":"D3:58:1D:7D:AD:70:61:0C:FF:96:A1:79:6D:1D:A0:CF:58:59:D3:71:56:63:92:64:9D:FF:B5:46:E7:65:17:11"}}},"request":{"raw":"GET /pixel/purst?dl=0\u0026th=0\u0026sc=0\u0026rs=2245\u0026rd=2245\u0026fd=495\u0026bv=26.3.7753\u0026tmpl=70 HTTP/1.1\r\nHost: sourshaped.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://brookhaven-outfit-codes-matching-bestie.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sun, 08 Mar 2026 14:09:37 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: sourshaped.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T22:47:04.158538Z","times_seen":13349726,"resource_available":true,"data":null}},"time_used":685,"timings":{"blocked":293,"dns":2,"connect":96,"send":0,"wait":97,"receive":1,"ssl":193},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wayfarerorthodox.com/watch.12711250007.js?key=6dd5e3d7ac37d33b5abc87810f6ac7f3\u0026kw=%5B%22cool%22%2C%22brookhaven%22%2C%22outfit%22%2C%22codes%22%2C%22matching%22%2C%22bestie%22%2C%22looks%22%5D\u0026refer=https%3A%2F%2Fbrookhaven-outfit-codes-matching-bestie.pages.dev%2F\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=3d608506-2ad8-4ea7-8ac4-e0ee5c9c08e0%3A3%3A1\u0026shu=d45c8a969e724ace8b2a13f601d04a01a74b7c338afbecb12252afb1201c91b493fa9819a0f56c734083d7c4c5b55e9a68c076a43104f58bf3195f3333c7365932acf015bb17331cd233219983322b7ea0a4320b4cfe5618b370bc\u0026pst=1772979039\u0026rmtc=t\u0026st1=d34183512f3b5263c84b3c3c364cd950\u0026ps1=1772978979\u0026rid=019ccdc8-421c-73b2-bea7-665ffe8a0f06","fqdn":"wayfarerorthodox.com","domain":"wayfarerorthodox.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://brookhaven-outfit-codes-matching-bestie.pages.dev/","date":"2026-03-08T14:09:39.461Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"wayfarerorthodox.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 00:35:17 GMT","end":"Thu, 28 May 2026 00:35:16 GMT"},"fingerprint":{"sha1":"17:4A:E8:7A:8D:4C:22:69:70:30:C3:3D:6A:72:7A:68:E9:D2:3C:83","sha256":"0D:06:FA:1C:4D:9B:7A:47:4C:58:29:3B:40:85:C2:D1:F6:2B:AE:C5:66:2E:53:32:27:48:B1:F2:5C:2C:A7:A1"}}},"request":{"raw":"GET /watch.12711250007.js?key=6dd5e3d7ac37d33b5abc87810f6ac7f3\u0026kw=%5B%22cool%22%2C%22brookhaven%22%2C%22outfit%22%2C%22codes%22%2C%22matching%22%2C%22bestie%22%2C%22looks%22%5D\u0026refer=https%3A%2F%2Fbrookhaven-outfit-codes-matching-bestie.pages.dev%2F\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=3d608506-2ad8-4ea7-8ac4-e0ee5c9c08e0%3A3%3A1\u0026shu=d45c8a969e724ace8b2a13f601d04a01a74b7c338afbecb12252afb1201c91b493fa9819a0f56c734083d7c4c5b55e9a68c076a43104f58bf3195f3333c7365932acf015bb17331cd233219983322b7ea0a4320b4cfe5618b370bc\u0026pst=1772979039\u0026rmtc=t\u0026st1=d34183512f3b5263c84b3c3c364cd950\u0026ps1=1772978979\u0026rid=019ccdc8-421c-73b2-bea7-665ffe8a0f06 HTTP/1.1\r\nHost: wayfarerorthodox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://brookhaven-outfit-codes-matching-bestie.pages.dev\r\nReferer: https://brookhaven-outfit-codes-matching-bestie.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=3d608506-2ad8-4ea7-8ac4-e0ee5c9c08e0:3:1; ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.Rowj8BAyac_WvyJPqkHMgKsWBzJEsqsuIbwoq1KhNyQ\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sun, 08 Mar 2026 14:09:39 GMT\r\nContent-Type: text/html\r\nContent-Length: 3214\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\naccess-control-allow-origin: https://brookhaven-outfit-codes-matching-bestie.pages.dev\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\nset-cookie: uid_id2=3d608506-2ad8-4ea7-8ac4-e0ee5c9c08e0:3:1; expires=Sun, 15 Mar 2026 14:09:39 GMT; path=/; secure; SameSite=None\npdhtkv=true; expires=Mon, 09 Mar 2026 14:09:39 GMT; path=/; secure; SameSite=None\nuncs=1; expires=Mon, 09 Mar 2026 14:09:39 GMT; path=/; secure; SameSite=None\npdhtkv5=true; expires=Mon, 09 Mar 2026 14:09:39 GMT; path=/; secure; SameSite=None\nuncs5=1; expires=Mon, 09 Mar 2026 14:09:39 GMT; path=/; secure; SameSite=None\nu_pl26582443=1; expires=Mon, 09 Mar 2026 14:09:39 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 9\r\nHost: wayfarerorthodox.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 2c9f8285e6def4999ddd8ef83dfa6968\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4479,"size_decoded":0,"mime_type":"text/html","magic":"JavaScript source, ASCII text, with very long lines (3603)","md5":"ec58eea13f6c33a7e7f0c21f7b75cc81","sha1":"1bc7eef90f6f8cc8d1849b1d3472a8be89d917a1","sha256":"d734f29501788c2f582a12051957d0740532b31771c8fef1b6b1138f371f16d9","sha512":"95a279a57c19bdffc982fd7b19e394f2e8210150ce99fe90abc3b8416bda53a90d2e45c758e6ecaf757c28a9b4e11f461300cd35ef27d87cdc701bc42605ba9d","ssdeep":"96:6N1+ozVj4Di9+CGUAGw9Oa6dsk/iIdhyoV07EKRw1ZDUCfMEDaH:+zyrCoG8Nk6Idcc07EKRoVUCkCaH","tlshash":"e8914ad45ed1a238386790fc263f2a08bc34808f1a04ec49b8ddd5165f607e12b9cd9c","first_seen":"2026-03-08T14:10:06.863918Z","last_seen":"2026-03-08T14:10:06.863918Z","times_seen":1,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/sbar.json?key=c207ec84c2456af201cc563cadc36c46\u0026uuid=b13a9250-1c36-4ec9-9645-9c20c85d1545%3A2%3A1","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://brookhaven-outfit-codes-matching-bestie.pages.dev/","date":"2026-03-08T14:09:37.874Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 22:53:11 GMT","end":"Sun, 24 May 2026 22:53:10 GMT"},"fingerprint":{"sha1":"ED:51:C6:32:50:BE:DC:21:A3:AD:D6:A1:DB:98:F0:08:AD:BF:E7:A2","sha256":"56:84:BB:23:CE:A6:AD:BA:2E:8A:D0:F9:92:4F:17:BF:64:9A:7D:1C:AC:77:10:4A:32:94:E4:15:91:57:B1:A8"}}},"request":{"raw":"GET /sbar.json?key=c207ec84c2456af201cc563cadc36c46\u0026uuid=b13a9250-1c36-4ec9-9645-9c20c85d1545%3A2%3A1 HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://brookhaven-outfit-codes-matching-bestie.pages.dev/\r\nOrigin: https://brookhaven-outfit-codes-matching-bestie.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sun, 08 Mar 2026 14:09:38 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 2935\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\naccess-control-allow-origin: https://brookhaven-outfit-codes-matching-bestie.pages.dev\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\nset-cookie: uid_id2=b13a9250-1c36-4ec9-9645-9c20c85d1545:2:1; expires=Sun, 15 Mar 2026 14:09:38 GMT; path=/; secure; SameSite=None\npdhtkv=true; expires=Mon, 09 Mar 2026 14:09:38 GMT; path=/; secure; SameSite=None\nuncs=1; expires=Mon, 09 Mar 2026 14:09:38 GMT; path=/; secure; SameSite=None\npdhtkv29=true; expires=Mon, 09 Mar 2026 14:09:38 GMT; path=/; secure; SameSite=None\nuncs29=1; expires=Mon, 09 Mar 2026 14:09:38 GMT; path=/; secure; SameSite=None\nu_pl26582471=1; expires=Mon, 09 Mar 2026 14:09:38 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 10\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 430a49a1c421dd2e7b789af270e4d79d\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4852,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"JSON text data","md5":"8c6933d3ea52acd1ef70b2f4e421c853","sha1":"000105c8169543ce2ad81857dbbdf5ce0ba215cb","sha256":"b551821641bcfd7c09513f2e4b8831ba2a935a35d898cc29452f6bccb17354d0","sha512":"e9d63d6b7c185b7c1bf0dd3527b25e5ac89c82c734d11dfeb9fba7e65d89f321dae5c82e49f51d461b0cf376cbf08e8ba3fa171f16c566317b5e0a8bac63114b","ssdeep":"96:9yY12WquGqbviEfI189D12WquGZY2AeBUPtYbE:954uGIvpfnD4uGZZhUPz","tlshash":"e3a16df6264c4ba5c7f23a96c15a18f90f94e33fa6badc007463d7dea807418404166c","first_seen":"2026-03-08T14:10:06.864766Z","last_seen":"2026-03-08T14:10:06.864766Z","times_seen":1,"resource_available":false,"data":null}},"time_used":701,"timings":{"blocked":294,"dns":1,"connect":95,"send":0,"wait":112,"receive":0,"ssl":195},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/notifications/utility/tiktok/multi/image-row/4/img/3.mp4","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://brookhaven-outfit-codes-matching-bestie.pages.dev/","date":"2026-03-08T14:09:38.736Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Feb 2026 22:50:15 GMT","end":"Sat, 23 May 2026 23:48:46 GMT"},"fingerprint":{"sha1":"E0:64:EB:B0:39:B0:1B:31:05:CE:A0:93:C8:74:E7:A4:DE:D1:B3:77","sha256":"6D:BC:A3:C7:8F:67:2C:FE:E1:7A:88:EA:6C:8E:07:D4:1D:1F:CA:FD:54:30:02:80:22:B2:74:B5:95:C4:99:75"}}},"request":{"raw":"GET /sb/notifications/utility/tiktok/multi/image-row/4/img/3.mp4 HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Sun, 08 Mar 2026 14:09:38 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 463050\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:22:09 GMT\r\npriority: u=4,i=?0\r\netag: \"65aa8591-710ca\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nage: 1148808\r\ncontent-range: bytes 0-463049/463050\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YvWCL2DItKL%2Fb4%2FBVs7HXZmoe40WzX32Y1DcUjyTrgEjpgzYwzs7KauJXSYGJdgkSNGgGPevKWAdTov%2Bv1qxAaeMLEm8Hnnx5jXosXQaCGg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d926b391b58349b-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":463050,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"23e7e3cee0d07e2b75293299dbe57e18","sha1":"7b706c1687ceea569b220f4f67be6656c0d22a34","sha256":"185eda9381591c63cb641c2e9ac23a515235501fac7d3a465e29c916999cc1b0","sha512":"bbc0cadf85f1fd524209483c9710b08f36666c95f972d142e2fc86abda52b76249f4c0e713042fa534e002c0dfc3223e83a04912a52c00945a2e373b12571a2a","ssdeep":"12288:dQ1lqadHA5iBndq2XTLMTMfzomnNjR+JBY89Bqkiquuj:K1jdHAsBdq2XvMTozomIYwqkiqH","tlshash":"58a4e0e56af103b2e0345f3a95efa586198c353ad4b55f4d720c6e36c8a419c8e83dec","first_seen":"2024-12-19T15:18:06.244361Z","last_seen":"2026-04-03T18:56:21.87108Z","times_seen":120,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":42,"receive":202,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wayfarerorthodox.com/watch.12711250007.js?key=6dd5e3d7ac37d33b5abc87810f6ac7f3\u0026kw=%5B%22cool%22%2C%22brookhaven%22%2C%22outfit%22%2C%22codes%22%2C%22matching%22%2C%22bestie%22%2C%22looks%22%5D\u0026refer=https%3A%2F%2Fbrookhaven-outfit-codes-matching-bestie.pages.dev%2F\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=3d608506-2ad8-4ea7-8ac4-e0ee5c9c08e0%3A3%3A1","fqdn":"wayfarerorthodox.com","domain":"wayfarerorthodox.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://brookhaven-outfit-codes-matching-bestie.pages.dev/","date":"2026-03-08T14:09:39.023Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"wayfarerorthodox.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 00:35:17 GMT","end":"Thu, 28 May 2026 00:35:16 GMT"},"fingerprint":{"sha1":"17:4A:E8:7A:8D:4C:22:69:70:30:C3:3D:6A:72:7A:68:E9:D2:3C:83","sha256":"0D:06:FA:1C:4D:9B:7A:47:4C:58:29:3B:40:85:C2:D1:F6:2B:AE:C5:66:2E:53:32:27:48:B1:F2:5C:2C:A7:A1"}}},"request":{"raw":"GET /watch.12711250007.js?key=6dd5e3d7ac37d33b5abc87810f6ac7f3\u0026kw=%5B%22cool%22%2C%22brookhaven%22%2C%22outfit%22%2C%22codes%22%2C%22matching%22%2C%22bestie%22%2C%22looks%22%5D\u0026refer=https%3A%2F%2Fbrookhaven-outfit-codes-matching-bestie.pages.dev%2F\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=3d608506-2ad8-4ea7-8ac4-e0ee5c9c08e0%3A3%3A1 HTTP/1.1\r\nHost: wayfarerorthodox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://brookhaven-outfit-codes-matching-bestie.pages.dev/\r\nOrigin: https://brookhaven-outfit-codes-matching-bestie.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 307 Temporary Redirect\r\nServer: nginx/1.21.6\r\nDate: Sun, 08 Mar 2026 14:09:39 GMT\r\nContent-Type: text/html\r\nContent-Length: 0\r\nConnection: keep-alive\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\naccess-control-allow-origin: https://brookhaven-outfit-codes-matching-bestie.pages.dev\r\naccess-control-allow-credentials: true\r\nlocation: https://wayfarerorthodox.com/watch.12711250007.js?key=6dd5e3d7ac37d33b5abc87810f6ac7f3\u0026kw=%5B%22cool%22%2C%22brookhaven%22%2C%22outfit%22%2C%22codes%22%2C%22matching%22%2C%22bestie%22%2C%22looks%22%5D\u0026refer=https%3A%2F%2Fbrookhaven-outfit-codes-matching-bestie.pages.dev%2F\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=3d608506-2ad8-4ea7-8ac4-e0ee5c9c08e0%3A3%3A1\u0026shu=d45c8a969e724ace8b2a13f601d04a01a74b7c338afbecb12252afb1201c91b493fa9819a0f56c734083d7c4c5b55e9a68c076a43104f58bf3195f3333c7365932acf015bb17331cd233219983322b7ea0a4320b4cfe5618b370bc\u0026pst=1772979039\u0026rmtc=t\u0026st1=d34183512f3b5263c84b3c3c364cd950\u0026ps1=1772978979\u0026rid=019ccdc8-421c-73b2-bea7-665ffe8a0f06\r\nset-cookie: uid_id2=3d608506-2ad8-4ea7-8ac4-e0ee5c9c08e0:3:1; expires=Sun, 15 Mar 2026 14:09:39 GMT; path=/; secure; SameSite=None\nain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.Rowj8BAyac_WvyJPqkHMgKsWBzJEsqsuIbwoq1KhNyQ; expires=Sun, 08 Mar 2026 14:10:39 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 2\r\nHost: wayfarerorthodox.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: fcc28bc75c45fd3a6a3df924bb33874d\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4479,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T22:47:04.158538Z","times_seen":13349726,"resource_available":true,"data":null}},"time_used":686,"timings":{"blocked":291,"dns":0,"connect":96,"send":0,"wait":100,"receive":0,"ssl":197},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wayfarerorthodox.com/af/25/da/af25da8381e0bd0494ba4018c76898a2.js","fqdn":"wayfarerorthodox.com","domain":"wayfarerorthodox.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://brookhaven-outfit-codes-matching-bestie.pages.dev/","date":"2026-03-08T14:09:39.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"wayfarerorthodox.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 00:35:17 GMT","end":"Thu, 28 May 2026 00:35:16 GMT"},"fingerprint":{"sha1":"17:4A:E8:7A:8D:4C:22:69:70:30:C3:3D:6A:72:7A:68:E9:D2:3C:83","sha256":"0D:06:FA:1C:4D:9B:7A:47:4C:58:29:3B:40:85:C2:D1:F6:2B:AE:C5:66:2E:53:32:27:48:B1:F2:5C:2C:A7:A1"}}},"request":{"raw":"GET /af/25/da/af25da8381e0bd0494ba4018c76898a2.js HTTP/1.1\r\nHost: wayfarerorthodox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://brookhaven-outfit-codes-matching-bestie.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sun, 08 Mar 2026 14:09:39 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 34712\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 6\r\nHost: wayfarerorthodox.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 69d362ae3807b80da1f17c623f76c4e6\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":92184,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"c5bbacaf46363ce7ea9c6c02eb00657a","sha1":"b35671edbb1886f48807e1b177718a17eea2743a","sha256":"509af4a5196d472bd50b7e3a22e447e972ebd2d5ebef36eb4f644a8a826871f8","sha512":"2c3bf70bc3e3fbe804b19fe268e6706e51a3a69ad3cbd7cc0d45d8d8c96d0c7c52567db98acac9c2cc319e180f578f574c9cd4d36d87fed52ab1599a8bb4a920","ssdeep":"1536:9fjS9i1KqAGQDSAiLoHL0cTIgV2BOPsuUd7s/KiR1uwurV4aYLuvGgIo5+phrtXj:9T1KTGQDSAiLoHQcTIgV2BGsuUd7s/KU","tlshash":"0593d84c3f82b0d41397707b762f902bf23b5c955868e88de243adac5da9719a337e05","first_seen":"2026-03-02T13:47:58.96291Z","last_seen":"2026-03-08T14:10:06.866113Z","times_seen":5,"resource_available":true,"data":null}},"time_used":775,"timings":{"blocked":285,"dns":1,"connect":95,"send":0,"wait":105,"receive":95,"ssl":192},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/interstitial/games/lg/1/img/close.svg","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://brookhaven-outfit-codes-matching-bestie.pages.dev/","date":"2026-03-08T14:09:40.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Feb 2026 22:50:15 GMT","end":"Sat, 23 May 2026 23:48:46 GMT"},"fingerprint":{"sha1":"E0:64:EB:B0:39:B0:1B:31:05:CE:A0:93:C8:74:E7:A4:DE:D1:B3:77","sha256":"6D:BC:A3:C7:8F:67:2C:FE:E1:7A:88:EA:6C:8E:07:D4:1D:1F:CA:FD:54:30:02:80:22:B2:74:B5:95:C4:99:75"}}},"request":{"raw":"GET /sb/interstitial/games/lg/1/img/close.svg HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 08 Mar 2026 14:09:40 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 26 Aug 2025 11:03:45 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nage: 3441895\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rr9wVEBw0Foz9ag3UDElXUmosLUbLPK8tT6H7qKlmJdoHksEfMhAh%2F6V86rX44Z%2FjH54WFSGi6oe12A0fd4mIv2%2BxN9GPK84tvSD5BWkJ2I%3D\"}]}\r\netag: W/\"68ad9491-4ff\"\r\ncontent-encoding: br\r\ncf-ray: 9d926b453cc9349b-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1279,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"16a2070a6fcc16f7f9368aefa4283d24","sha1":"0f7e7157f8892efcedd19ddfd51c315dac365081","sha256":"d415af8e936114f30930ef6efec9c55917c5e5ef6c8348226ca55d65125124d0","sha512":"063323aa55da031193025fa27657d28303eb88235ca3bcfbd201a5db9407fb23749589b7786b6fc579a79bd01ad25d09e4ec90e9a2f7f46d5549711fb4c2cf58","ssdeep":"","tlshash":"b721dbcc458f213ef324ff618973156067a423f6bb18c5bc7199e8117e1cb910c48e14","first_seen":"2026-01-27T18:19:05.377016Z","last_seen":"2026-03-23T08:56:50.642189Z","times_seen":650,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/interstitial/games/lg/1/img/bg_decor.png","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://brookhaven-outfit-codes-matching-bestie.pages.dev/","date":"2026-03-08T14:09:41.109Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Feb 2026 22:50:15 GMT","end":"Sat, 23 May 2026 23:48:46 GMT"},"fingerprint":{"sha1":"E0:64:EB:B0:39:B0:1B:31:05:CE:A0:93:C8:74:E7:A4:DE:D1:B3:77","sha256":"6D:BC:A3:C7:8F:67:2C:FE:E1:7A:88:EA:6C:8E:07:D4:1D:1F:CA:FD:54:30:02:80:22:B2:74:B5:95:C4:99:75"}}},"request":{"raw":"GET /sb/interstitial/games/lg/1/img/bg_decor.png HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 08 Mar 2026 14:09:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 199949\r\nserver: cloudflare\r\nlast-modified: Tue, 26 Aug 2025 11:03:44 GMT\r\npriority: u=4,i=?0\r\netag: \"68ad9490-30d0d\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\naccept-ranges: bytes\r\nage: 197752\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=erkQZ7SbLiP0DVBAiDaFZWUCXF6532xeoac4McQn2jq%2BuEei1c6orwnsFOVXk71qgtri8%2FTPCrjZJgQ7Y1NEW34SVwdxs2gZy%2FbkNZtJNO4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d926b47da17349b-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":199949,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2166 x 1082, 8-bit colormap, non-interlaced","md5":"b6c034d11a8711e2a4d9aca547d99317","sha1":"132826b2470d3a3cbdab066452a561060b3902c9","sha256":"f7930bd48e35534fca5ec7ff7b803639b80304c489ef6094f4ca7bc0276ae34c","sha512":"7973f428edb34840f321aec11b7b99daf17af9a67774dfa94c4ecd801aba985c16352634bf8636d52dae50c1c9a320c96c7d9161c0b3fcc1673ac0d33b540cf1","ssdeep":"3072:mTK7f+g9PJFQRQ1JJWjG5xw/yZUIssbvEKM5+T9Ir9jC9acG+rmFOtyxxkCwxhXM:V9PPQ+13WjG5rwZ+ToSar44S6","tlshash":"80141218177ea7f1e14695936fdd88562fa2ced3a034b67dd0af71a0ec8303a144dc9a","first_seen":"2025-10-06T08:00:25.563795Z","last_seen":"2026-03-23T08:56:50.616151Z","times_seen":625,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/interstitial/games/lg/1/img/play.png","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://brookhaven-outfit-codes-matching-bestie.pages.dev/","date":"2026-03-08T14:09:41.121Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Feb 2026 22:50:15 GMT","end":"Sat, 23 May 2026 23:48:46 GMT"},"fingerprint":{"sha1":"E0:64:EB:B0:39:B0:1B:31:05:CE:A0:93:C8:74:E7:A4:DE:D1:B3:77","sha256":"6D:BC:A3:C7:8F:67:2C:FE:E1:7A:88:EA:6C:8E:07:D4:1D:1F:CA:FD:54:30:02:80:22:B2:74:B5:95:C4:99:75"}}},"request":{"raw":"GET /sb/interstitial/games/lg/1/img/play.png HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 08 Mar 2026 14:09:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 1902\r\nserver: cloudflare\r\nlast-modified: Tue, 26 Aug 2025 11:03:46 GMT\r\npriority: u=4,i=?0\r\netag: \"68ad9492-76e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\naccept-ranges: bytes\r\nage: 2266594\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pHLa1Iofubr%2Bzl7q5lT%2F0rGbYjLys3FgeQDx7cow%2BcVJFc6eb%2BByWxvI4omyd9kQofM946HgU%2FxDTU6Ue5nBWSwAmzl5yBYWR%2FsnrLwuC1g%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d926b47fa72349b-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1902,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit colormap, non-interlaced","md5":"4c76e110e710a7bfdd047152ba8c28f7","sha1":"73d7f6e543214a0117319fe3377b9459fabf0f06","sha256":"2bb8838e672166e15d8e9cc0b86decb95ea14b3bc40b8c3741d88a265ccb1d45","sha512":"3bd07d8afb10db44679150231081de859eb12576ce5bb8536c4d69ada59e1f4abc3d6ae3d1b8c58c11f19c7fdd519c6981cbaae0d25c9caab6cc283acfb57d00","ssdeep":"","tlshash":"cd41d7d0a346b98afb341d88c58c3525e84efef35615f0b3a0d5828d1d2b926c6b6376","first_seen":"2025-10-06T08:00:25.576843Z","last_seen":"2026-03-23T08:56:50.632964Z","times_seen":624,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/cti/fe/46/8e/fe468e7004f06d7c32fb2c337f7c0b66/1716370395.jpg","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://brookhaven-outfit-codes-matching-bestie.pages.dev/","date":"2026-03-08T14:09:42.713Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 02:33:25 GMT","end":"Fri, 05 Jun 2026 02:33:24 GMT"},"fingerprint":{"sha1":"4A:66:11:51:1F:1F:F3:84:B6:E4:4F:81:C1:03:83:9F:01:17:7E:82","sha256":"DA:55:E3:02:D5:3C:4E:3A:51:ED:21:0D:F4:32:52:C2:C5:31:87:50:DC:AB:13:D9:93:4A:15:0C:D9:8C:D6:4F"}}},"request":{"raw":"GET /cti/fe/46/8e/fe468e7004f06d7c32fb2c337f7c0b66/1716370395.jpg HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 08 Mar 2026 14:09:42 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 21702\r\nserver: nginx/1.21.6\r\nlast-modified: Wed, 22 May 2024 09:33:23 GMT\r\netag: \"664dbbe3-54c6\"\r\nexpires: Tue, 10 Mar 2026 14:09:42 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21702,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 320x50, components 3","md5":"3e3ce39ccaaa8a45266bf8473bbda43b","sha1":"57831af7ec18d7a1d95097e5990872e65dfe6312","sha256":"95cb7cc05cec6316c86c54ba92e8540f55430f2627cd94c1bbd408a18ea06de9","sha512":"7146e8b9b45d8aaa4189be117f22bc2899c89508073cad7e2f0acc182a9802488c174b1171c10b3d46f31b45937768fe93bf744b640c0babec5e06b2caead7de","ssdeep":"384:nuYmuFwhBJFZCHIgyZ0wGO437O0e29CuNbabYetQXwZyWZJx4nBSe:uOkBJKuvWq29HNbEeFWPsb","tlshash":"22a2d19b036ba10803c86706684a4b1ebb997b5fa8b34f7f38766959a927461810d1c3","first_seen":"2024-06-04T23:33:50Z","last_seen":"2026-04-03T00:33:38.772116Z","times_seen":76,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/notifications/utility/tiktok/multi/image-row/4/css/style.css","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://brookhaven-outfit-codes-matching-bestie.pages.dev/","date":"2026-03-08T14:09:38.547Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Feb 2026 22:50:15 GMT","end":"Sat, 23 May 2026 23:48:46 GMT"},"fingerprint":{"sha1":"E0:64:EB:B0:39:B0:1B:31:05:CE:A0:93:C8:74:E7:A4:DE:D1:B3:77","sha256":"6D:BC:A3:C7:8F:67:2C:FE:E1:7A:88:EA:6C:8E:07:D4:1D:1F:CA:FD:54:30:02:80:22:B2:74:B5:95:C4:99:75"}}},"request":{"raw":"GET /sb/notifications/utility/tiktok/multi/image-row/4/css/style.css HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://brookhaven-outfit-codes-matching-bestie.pages.dev/\r\nOrigin: https://brookhaven-outfit-codes-matching-bestie.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 08 Mar 2026 14:09:39 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Fri, 27 Jun 2025 13:37:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"685e9e9c-27d4\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=61gRnxgH6t3JmKN76jLHRPioaUAQrUvF2oSVTD7OlzpCirzJcay39uZ9meAKdM%2BAHuIIbFYskwOBzlZOcqGKs%2FEuy1eO%2F%2BPeNchkLnpFzFc%3D\"}]}\r\ncf-ray: 9d926b382937dd16-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10196,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"ca8368456a697ed22c7f001eb5fdd808","sha1":"e96f4c0966317be8ca11329454d05607e9047d64","sha256":"af441a4162af13f24831f117114e324b3b9dbf098d966af009f58d9d1c4252c5","sha512":"80b3ec3cdcc4072ba480dfdd60e0e00281fd15439732ad77d34aaafa01eefa5b64966baa76c349f13935e72e8390c3500c406f5fb3e5f4a125917e5c88e74f3c","ssdeep":"192:CBiyVGsJovaJxMX5RtW5HF5rMbU6wlzj2nt6zDIu+oWzwLBxe/1N6MHFIB8A0ieZ:CianMXABFNMbYlzTY5HFIB8oeFdN","tlshash":"ba2201c65d770808a94be1ab5fbb975616284083be1fcc657fcd215c8f811ec8593f8a","first_seen":"2025-06-30T16:39:55.039684Z","last_seen":"2026-04-03T18:56:21.919614Z","times_seen":61,"resource_available":false,"data":null}},"time_used":570,"timings":{"blocked":39,"dns":1,"connect":9,"send":0,"wait":492,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/notifications/utility/tiktok/multi/image-row/4/img/2.mp4","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://brookhaven-outfit-codes-matching-bestie.pages.dev/","date":"2026-03-08T14:09:38.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Feb 2026 22:50:15 GMT","end":"Sat, 23 May 2026 23:48:46 GMT"},"fingerprint":{"sha1":"E0:64:EB:B0:39:B0:1B:31:05:CE:A0:93:C8:74:E7:A4:DE:D1:B3:77","sha256":"6D:BC:A3:C7:8F:67:2C:FE:E1:7A:88:EA:6C:8E:07:D4:1D:1F:CA:FD:54:30:02:80:22:B2:74:B5:95:C4:99:75"}}},"request":{"raw":"GET /sb/notifications/utility/tiktok/multi/image-row/4/img/2.mp4 HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Sun, 08 Mar 2026 14:09:38 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 964920\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:22:09 GMT\r\npriority: u=4,i=?0\r\netag: \"65aa8591-eb938\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nage: 1235416\r\ncontent-range: bytes 0-964919/964920\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N4IabtR0HgIs2V7MAe2vHtAJFMLNliuDf46n7WGSGsRDZQlJdQCdc1FYqsDDCq9eh1W9fTE7YL4wJiPm2vv2JgZLKokJchXDyYcKs8Hox6o%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d926b391b54349b-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":964920,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"da4e8f4e8ab4a2bf7e1013cff941a4d6","sha1":"115e3bc25cca616302f7c3c89d88faf400639109","sha256":"42639a59343cb7d05fbdac63014e5fa5591a7f59c54ed5733d610f6ce037286c","sha512":"d03566d83b9619839d994a27fdc06c28c69824de75cf721b57f210e7798222252c73e5a3614ed91d3e3308e0b8885d5f728e27a1888e79cd941cd58afe7cf3e4","ssdeep":"24576:8tjd01e50rvOLA5/Uv8AbY6g0T23rLUEn0gLP413Wy:8tjdYrv84/TmY6g823Vn0gLi3j","tlshash":"3c2501e159f112b7e1311f7a40ebe087098c666de0b14f08760dae76cca55dc8ac79fa","first_seen":"2024-12-19T15:18:06.248038Z","last_seen":"2026-04-03T18:56:21.856864Z","times_seen":120,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":26,"receive":197,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/cti/2b/26/aa/2b26aad2504daf4581703aef33da93f4/1755792747.jpg","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://brookhaven-outfit-codes-matching-bestie.pages.dev/","date":"2026-03-08T14:09:39.614Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 02:33:25 GMT","end":"Fri, 05 Jun 2026 02:33:24 GMT"},"fingerprint":{"sha1":"4A:66:11:51:1F:1F:F3:84:B6:E4:4F:81:C1:03:83:9F:01:17:7E:82","sha256":"DA:55:E3:02:D5:3C:4E:3A:51:ED:21:0D:F4:32:52:C2:C5:31:87:50:DC:AB:13:D9:93:4A:15:0C:D9:8C:D6:4F"}}},"request":{"raw":"GET /cti/2b/26/aa/2b26aad2504daf4581703aef33da93f4/1755792747.jpg HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 08 Mar 2026 14:09:39 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 71004\r\nserver: nginx/1.21.6\r\nlast-modified: Thu, 21 Aug 2025 16:12:27 GMT\r\netag: \"68a7456b-1155c\"\r\nexpires: Tue, 10 Mar 2026 14:09:39 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":71004,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 24.5 (Windows), datetime=2024:10:08 12:50:38], progressive, precision 8, 300x250, components 3","md5":"7c4ef61da9a1b31964e978f85f0822c5","sha1":"74b0f0eeafb15241274671b1199c8eb4e21ab181","sha256":"99225a61cd24642b3467e77a6e23eda7cdd6273f898451e71e4bb9a9eebd262f","sha512":"cd0d387879d62c7aea3cb003267f4fb376e11822367ad4cf53084c13833a6f863ba11235fec44e99296f5ace2f51cd2a193829d57e2f6264e3f459efebd3f9ab","ssdeep":"1536:SvSXF00vSXF0pr5xQIHcSK/toSXJCKeg6CYxMEtjuJb:yS10AS10jxzcDpfuu3Jb","tlshash":"9363f119bf50dca6fdfc803ae062970b5a114ba419b77b283ccf61a5bf341e29d19187","first_seen":"2025-04-13T08:19:34.710818Z","last_seen":"2026-04-04T21:32:57.794878Z","times_seen":460,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":47,"dns":0,"connect":19,"send":0,"wait":40,"receive":29,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/interstitial/games/lg/1/css/style.css","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://brookhaven-outfit-codes-matching-bestie.pages.dev/","date":"2026-03-08T14:09:40.566Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Feb 2026 22:50:15 GMT","end":"Sat, 23 May 2026 23:48:46 GMT"},"fingerprint":{"sha1":"E0:64:EB:B0:39:B0:1B:31:05:CE:A0:93:C8:74:E7:A4:DE:D1:B3:77","sha256":"6D:BC:A3:C7:8F:67:2C:FE:E1:7A:88:EA:6C:8E:07:D4:1D:1F:CA:FD:54:30:02:80:22:B2:74:B5:95:C4:99:75"}}},"request":{"raw":"GET /sb/interstitial/games/lg/1/css/style.css HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://brookhaven-outfit-codes-matching-bestie.pages.dev/\r\nOrigin: https://brookhaven-outfit-codes-matching-bestie.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 08 Mar 2026 14:09:40 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 28 Aug 2025 12:56:43 GMT\r\npriority: u=3,i=?0\r\netag: W/\"68b0520b-24f4\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TZF7Uz%2BZeK5E65OJREO6pVZOY%2F%2FyVlwSmpI75G6nj4StOHgcFoGtMusYs%2FmOts70H3%2FOTkdHXBz6yI2E6L74pbIrO91uqcDLrVT8mAAOEb0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d926b448b28349b-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9460,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (409), with CRLF line terminators","md5":"8f3406eec2a2f900f1507321a99e2e97","sha1":"0b4074c3002e0164cd0da5c546f52d8a86380e23","sha256":"f78f8e8908f574f5952213da8043b9c5f64670f0069554e685abe9453d29c189","sha512":"438ff705a04fa461fa6f623d88dbbb3dbd037d04f22f2b1fbc260a73c0fd247e9df836c67f382e3b65d40b4ad8605ae487e8d7c11527a518aa7455bae1e30f6a","ssdeep":"192:nRvf81UjfE0G1urNnnhpxxR6DTZZsb+MSX71R2xX/c:hSZGY","tlshash":"25121f15550a1486a233e2ab3fb3062edb6cd443db460a6e36cd71918fb91d4c273f9b","first_seen":"2026-01-27T19:03:52.249956Z","last_seen":"2026-03-23T03:31:43.7918Z","times_seen":303,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/interstitial/games/lg/1/img/3.mp4","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://brookhaven-outfit-codes-matching-bestie.pages.dev/","date":"2026-03-08T14:09:40.697Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Feb 2026 22:50:15 GMT","end":"Sat, 23 May 2026 23:48:46 GMT"},"fingerprint":{"sha1":"E0:64:EB:B0:39:B0:1B:31:05:CE:A0:93:C8:74:E7:A4:DE:D1:B3:77","sha256":"6D:BC:A3:C7:8F:67:2C:FE:E1:7A:88:EA:6C:8E:07:D4:1D:1F:CA:FD:54:30:02:80:22:B2:74:B5:95:C4:99:75"}}},"request":{"raw":"GET /sb/interstitial/games/lg/1/img/3.mp4 HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Sun, 08 Mar 2026 14:09:40 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 413036\r\nserver: cloudflare\r\nlast-modified: Tue, 26 Aug 2025 11:03:44 GMT\r\npriority: u=4,i=?0\r\netag: \"68ad9490-64d6c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nage: 3441889\r\ncontent-range: bytes 0-413035/413036\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sHqdc2FtcYhTZGu8V658us5rtbYnGd1EyWknPQvdeg13CmUIYOsD3vRmmM%2BHfuVgmhOVQmmvNZKW6bXx0LWIyWZAsuKwY7PA6MBFSrv9UCU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d926b455d07349b-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":413036,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"75eef31aa8e018be7f0efe2dc6ded35f","sha1":"ad224fb5db9ad636625489866652e446cde0ca04","sha256":"bd86c1db66ebdb9b44bcea70a413bbc88aa2ec6a12083a7bf58af36cf79e77c1","sha512":"9c32876dad19d856adeac74a2c70e70aa8ba5f00fc1ecf68d632df2644117be0fd73afa28e080a331e54a01bf810c8e7224849b3b3baae56c6a35b16b76aa3d2","ssdeep":"6144:p1JdkJ06JvQJMYJGRJz9JpXJrpJkrJkaJHPJt0JKYJR8JkwJUeJaSJdkJj6JZQJR:Gh9IWeRToGxgQQ2+GlnLsxZ","tlshash":"35942716ed324d6ab19ef2a4e1aacfc1d6d3536790d92bd7b0ccb8280b18844970f57d","first_seen":"2025-10-06T08:00:25.58435Z","last_seen":"2026-03-23T08:56:50.607632Z","times_seen":642,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Finterstitial%2Fgames%2Flg%2F1%2Fcss%2Fstyle.css\u0026l=9460\u0026fd=139","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://brookhaven-outfit-codes-matching-bestie.pages.dev/","date":"2026-03-08T14:09:40.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 22:53:11 GMT","end":"Sun, 24 May 2026 22:53:10 GMT"},"fingerprint":{"sha1":"ED:51:C6:32:50:BE:DC:21:A3:AD:D6:A1:DB:98:F0:08:AD:BF:E7:A2","sha256":"56:84:BB:23:CE:A6:AD:BA:2E:8A:D0:F9:92:4F:17:BF:64:9A:7D:1C:AC:77:10:4A:32:94:E4:15:91:57:B1:A8"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Finterstitial%2Fgames%2Flg%2F1%2Fcss%2Fstyle.css\u0026l=9460\u0026fd=139 HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://brookhaven-outfit-codes-matching-bestie.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=b13a9250-1c36-4ec9-9645-9c20c85d1545:2:1; pdhtkv=true; uncs=2; pdhtkv29=true; uncs29=2; u_pl26582471=1; u_pl28216845=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sun, 08 Mar 2026 14:09:40 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T22:47:04.158538Z","times_seen":13349726,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":102,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"immigrationacre.com/52f212bca95373aed7ead32398143db7/invoke.js","fqdn":"immigrationacre.com","domain":"immigrationacre.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://brookhaven-outfit-codes-matching-bestie.pages.dev/","date":"2026-03-08T14:09:41.840Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"immigrationacre.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 21 Jan 2026 13:05:03 GMT","end":"Tue, 21 Apr 2026 13:05:02 GMT"},"fingerprint":{"sha1":"15:FA:AD:CC:E2:4C:49:AA:36:E4:D7:92:A2:58:1A:3B:88:4D:4C:A7","sha256":"D4:52:60:EF:97:91:FA:80:40:92:C6:44:5D:A4:08:35:F9:9C:82:F0:92:0E:FA:13:62:59:74:D4:C2:66:5D:3C"}}},"request":{"raw":"GET /52f212bca95373aed7ead32398143db7/invoke.js HTTP/1.1\r\nHost: immigrationacre.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://brookhaven-outfit-codes-matching-bestie.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sun, 08 Mar 2026 14:09:41 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 20231\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 3\r\nHost: immigrationacre.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 1b0746cd9f5fdc2a5efdbe0789bb6200\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":50935,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (50935), with no line terminators","md5":"315c1ac8d39f668fe8e5e544e64a62be","sha1":"d1f75fa066b118d4c659f624608eec92900720bc","sha256":"b8a4ed7178828d7519aa2432a44107c328df744531a595993465d271dfaa8997","sha512":"3e16347bc5e8ebcb9097d8513cc9a8db75c3bbfd8882a0665baabfa47eecffe56b08720422cfb304aece62a6477f6e5d7e945242531b678ab4b482d3049aa70e","ssdeep":"768:nSpQA3a9rXsUWADXZ4npNvC/FxujuoM/TvEUd:nUQxRSADpYpNKdxujuf/LEUd","tlshash":"8833c7983bd1f0d8024270f7232fa41bf5174c26d98ce494e917b59eaebc719da36b06","first_seen":"2026-03-03T01:59:00.119555Z","last_seen":"2026-03-10T23:35:48.070529Z","times_seen":16,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":98,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"immigrationacre.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"realizationnewestfangs.com/watch.964089451546.js?key=52f212bca95373aed7ead32398143db7\u0026kw=%5B%22cool%22%2C%22brookhaven%22%2C%22outfit%22%2C%22codes%22%2C%22matching%22%2C%22bestie%22%2C%22looks%22%5D\u0026refer=https%3A%2F%2Fbrookhaven-outfit-codes-matching-bestie.pages.dev%2F\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=3d608506-2ad8-4ea7-8ac4-e0ee5c9c08e0%3A3%3A1\u0026shu=c61553399583693847519b39fd77bd39234ae851e9f3448bf078e3262436141831a18c62286ea01abc523ca061bda6635d0f864f9081a30d3f4cad426efb4a05f2e1c7c206e0976230d00e648432050dc91b3368acd1c54fb11c7b\u0026pst=1772979042\u0026rmtc=t\u0026st1=bf1f078db5a71c0b536f47e557fdd6f8\u0026ps1=1772978982\u0026rid=019ccdc8-4dd4-7279-8109-7d3084dc44c5","fqdn":"realizationnewestfangs.com","domain":"realizationnewestfangs.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://brookhaven-outfit-codes-matching-bestie.pages.dev/","date":"2026-03-08T14:09:42.490Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"realizationnewestfangs.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 23:39:43 GMT","end":"Wed, 27 May 2026 23:39:42 GMT"},"fingerprint":{"sha1":"2F:D0:7E:69:4A:D0:06:61:89:AF:78:09:0A:5A:F1:7B:F9:4A:B7:96","sha256":"24:55:49:F2:2C:E7:D7:3D:E6:6E:54:6C:64:30:D7:3C:F6:39:2F:A0:A7:A2:AA:25:93:8D:6B:C2:15:40:66:C2"}}},"request":{"raw":"GET /watch.964089451546.js?key=52f212bca95373aed7ead32398143db7\u0026kw=%5B%22cool%22%2C%22brookhaven%22%2C%22outfit%22%2C%22codes%22%2C%22matching%22%2C%22bestie%22%2C%22looks%22%5D\u0026refer=https%3A%2F%2Fbrookhaven-outfit-codes-matching-bestie.pages.dev%2F\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=3d608506-2ad8-4ea7-8ac4-e0ee5c9c08e0%3A3%3A1\u0026shu=c61553399583693847519b39fd77bd39234ae851e9f3448bf078e3262436141831a18c62286ea01abc523ca061bda6635d0f864f9081a30d3f4cad426efb4a05f2e1c7c206e0976230d00e648432050dc91b3368acd1c54fb11c7b\u0026pst=1772979042\u0026rmtc=t\u0026st1=bf1f078db5a71c0b536f47e557fdd6f8\u0026ps1=1772978982\u0026rid=019ccdc8-4dd4-7279-8109-7d3084dc44c5 HTTP/1.1\r\nHost: realizationnewestfangs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://brookhaven-outfit-codes-matching-bestie.pages.dev\r\nReferer: https://brookhaven-outfit-codes-matching-bestie.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=3d608506-2ad8-4ea7-8ac4-e0ee5c9c08e0:3:1; ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.qSoDFdRftJaJU22yZofr0UAxfZTjfY68qUUbiv0Qh8A\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sun, 08 Mar 2026 14:09:42 GMT\r\nContent-Type: text/html\r\nContent-Length: 2532\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\naccess-control-allow-origin: https://brookhaven-outfit-codes-matching-bestie.pages.dev\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\nset-cookie: uid_id2=3d608506-2ad8-4ea7-8ac4-e0ee5c9c08e0:3:1; expires=Sun, 15 Mar 2026 14:09:42 GMT; path=/; secure; SameSite=None\npdhtkv=true; expires=Mon, 09 Mar 2026 14:09:42 GMT; path=/; secure; SameSite=None\nuncs=1; expires=Mon, 09 Mar 2026 14:09:42 GMT; path=/; secure; SameSite=None\npdhtkv32=true; expires=Mon, 09 Mar 2026 14:09:42 GMT; path=/; secure; SameSite=None\nuncs32=1; expires=Mon, 09 Mar 2026 14:09:42 GMT; path=/; secure; SameSite=None\nu_pl26582436=1; expires=Mon, 09 Mar 2026 14:09:42 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 9\r\nHost: realizationnewestfangs.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 83391dcafa3d0134eadf28de18000156\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":4847,"size_decoded":0,"mime_type":"text/html","magic":"JavaScript source, ASCII text, with very long lines (3971)","md5":"1eb78da94681e808dc2c4e6a0f03e014","sha1":"cb86c9f9359790fd0def46dbc7131f649d8bad4f","sha256":"8589b6be18e763d2bdbadcd8b741c1ce556547da24a92939f430027847c31bb0","sha512":"ea6e7c03dd4bb7f4e08985f073700151ee2c4eb1b77b5934412d7e734ad619d4c25a1f0680b9b31f3e7bd426f805ea0ff6512ff06de2cbf15a1c5680f6ded794","ssdeep":"96:QC9sw2gozIxHBC+L0yPmnWd23OCk/mL0yPmnWd211ZDSV3VCfMEDaH:QC9gpzChfnPPcFkAnPPcvVSV3VCkCaH","tlshash":"31a14b744c55e9bfb095657a1467e48d3c38a14bb802cf84f4ecda8caf30ad006a89dd","first_seen":"2026-03-08T14:10:06.871854Z","last_seen":"2026-03-08T14:10:06.871854Z","times_seen":1,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":105,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/interstitial/games/lg/1/img/bg.png","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://brookhaven-outfit-codes-matching-bestie.pages.dev/","date":"2026-03-08T14:09:41.110Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Feb 2026 22:50:15 GMT","end":"Sat, 23 May 2026 23:48:46 GMT"},"fingerprint":{"sha1":"E0:64:EB:B0:39:B0:1B:31:05:CE:A0:93:C8:74:E7:A4:DE:D1:B3:77","sha256":"6D:BC:A3:C7:8F:67:2C:FE:E1:7A:88:EA:6C:8E:07:D4:1D:1F:CA:FD:54:30:02:80:22:B2:74:B5:95:C4:99:75"}}},"request":{"raw":"GET /sb/interstitial/games/lg/1/img/bg.png HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 08 Mar 2026 14:09:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 76395\r\nserver: cloudflare\r\nlast-modified: Tue, 26 Aug 2025 11:03:46 GMT\r\npriority: u=4,i=?0\r\netag: \"68ad9492-12a6b\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\naccept-ranges: bytes\r\nage: 197752\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BNtMF4dSeSM5%2FK0p4tNbx3Gogc0kHD47FdhBRPBLL7EnTXkouaqx1xfCDp9%2FcxxVOBRpYY%2BEJwF1xAajwedKb3I%2F23rK%2FS2cEmCZ4uardrg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d926b47ea29349b-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":76395,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 960, 4-bit colormap, non-interlaced","md5":"2c03d20f64c1c47c7d98d425e769af16","sha1":"3f83e3b85e460b15fa8956f840bc8e66c3a5b36b","sha256":"4b2dc632b6bdeeaedbce9a243fa3093784e809b2105abd21652e99ed64fbe9ec","sha512":"78e22d18e08719415353088e60cbeefd5c48274042f3207705d47447a2467e981702f4a60d38287c15d61043de9600b5a9cf6186409d987fe50dd4fc3eada493","ssdeep":"1536:vPXJ1PWbMJ0HU+Ow23K1IT+848ZcqenAz+1D5BRBKhBkYRJzIY4nsjsP9BHqumzl:3XjON0+dzIT/cq/KbIFUY4HV6","tlshash":"84730231d209cd948bfbc36baad71d64f204479f958a5960c90dff3116ce82490be6af","first_seen":"2025-10-06T08:00:25.572796Z","last_seen":"2026-03-23T08:56:50.660251Z","times_seen":625,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/interstitial/games/lg/1/img/2_name.png","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://brookhaven-outfit-codes-matching-bestie.pages.dev/","date":"2026-03-08T14:09:41.114Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Feb 2026 22:50:15 GMT","end":"Sat, 23 May 2026 23:48:46 GMT"},"fingerprint":{"sha1":"E0:64:EB:B0:39:B0:1B:31:05:CE:A0:93:C8:74:E7:A4:DE:D1:B3:77","sha256":"6D:BC:A3:C7:8F:67:2C:FE:E1:7A:88:EA:6C:8E:07:D4:1D:1F:CA:FD:54:30:02:80:22:B2:74:B5:95:C4:99:75"}}},"request":{"raw":"GET /sb/interstitial/games/lg/1/img/2_name.png HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 08 Mar 2026 14:09:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 4786\r\nserver: cloudflare\r\nlast-modified: Tue, 26 Aug 2025 11:03:44 GMT\r\npriority: u=4,i=?0\r\netag: \"68ad9490-12b2\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\naccept-ranges: bytes\r\nage: 3441889\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QIK9JYUyFJWFAZS13yIwZK%2BzpSowIYuvx7HgMY9gAXbdOcBCsloN8CODLlLLoMQsQ5wqd7%2BmBvLBHgA6%2B1XnkqWv4RGaYPhEUOMyt3xKVIg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d926b47ea3e349b-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4786,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 336 x 44, 8-bit colormap, non-interlaced","md5":"fd0fc6ac98648953de787b47c567ab5c","sha1":"8496b96074d930e08989474f27237d3a2814fd9a","sha256":"a8091a3d585a3e2533d8ff2ba31aaf5b595a477f597839676ad199d41b64d6d6","sha512":"133539ab91ba515ecb63316e9655dc996c40662d74f97757fdebfefdca4a37dd8fedc6731a7970d5cf0f526147bc02e72dfd25c7f8dd5719f455b44b38a55944","ssdeep":"96:io7t1ZNavAE/i2tji7ShLtNAxWfo6X0XiZrl31YV9:iktl/Ecc5NAxT6UiNFi","tlshash":"03a18ebb2efea150d9541b728771178fa8c1c25e02ecfea7a82503715f5210b429c2d3","first_seen":"2025-10-06T08:00:25.579351Z","last_seen":"2026-03-23T08:56:50.630257Z","times_seen":625,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/notifications/utility/tiktok/multi/image-row/4/img/3.mp4","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://brookhaven-outfit-codes-matching-bestie.pages.dev/","date":"2026-03-08T14:09:42.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Feb 2026 22:50:15 GMT","end":"Sat, 23 May 2026 23:48:46 GMT"},"fingerprint":{"sha1":"E0:64:EB:B0:39:B0:1B:31:05:CE:A0:93:C8:74:E7:A4:DE:D1:B3:77","sha256":"6D:BC:A3:C7:8F:67:2C:FE:E1:7A:88:EA:6C:8E:07:D4:1D:1F:CA:FD:54:30:02:80:22:B2:74:B5:95:C4:99:75"}}},"request":{"raw":"GET /sb/notifications/utility/tiktok/multi/image-row/4/img/3.mp4 HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Sun, 08 Mar 2026 14:09:42 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 463050\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:22:09 GMT\r\npriority: u=4,i=?0\r\netag: \"65aa8591-710ca\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nage: 1148812\r\ncontent-range: bytes 0-463049/463050\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pRN51%2BQcWgc9nG5FRLOXr9%2Fz%2Bieb%2BQBop2KmuVQGjubcJFdvvwMqamFTbv93AQfkGOFvFQgWP9Vpvr8k6LcPdkwTrlAC2u80Ai65emdXg58%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d926b51be67349b-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":463050,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"23e7e3cee0d07e2b75293299dbe57e18","sha1":"7b706c1687ceea569b220f4f67be6656c0d22a34","sha256":"185eda9381591c63cb641c2e9ac23a515235501fac7d3a465e29c916999cc1b0","sha512":"bbc0cadf85f1fd524209483c9710b08f36666c95f972d142e2fc86abda52b76249f4c0e713042fa534e002c0dfc3223e83a04912a52c00945a2e373b12571a2a","ssdeep":"12288:dQ1lqadHA5iBndq2XTLMTMfzomnNjR+JBY89Bqkiquuj:K1jdHAsBdq2XvMTozomIYwqkiqH","tlshash":"58a4e0e56af103b2e0345f3a95efa586198c353ad4b55f4d720c6e36c8a419c8e83dec","first_seen":"2024-12-19T15:18:06.244361Z","last_seen":"2026-04-03T18:56:21.87108Z","times_seen":120,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":229,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"brookhaven-outfit-codes-matching-bestie.pages.dev/favicon.svg","fqdn":"brookhaven-outfit-codes-matching-bestie.pages.dev","domain":"brookhaven-outfit-codes-matching-bestie.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://brookhaven-outfit-codes-matching-bestie.pages.dev/","date":"2026-03-08T14:09:36.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brookhaven-outfit-codes-matching-bestie.pages.dev","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 23:58:01 GMT","end":"Sun, 24 May 2026 23:58:00 GMT"},"fingerprint":{"sha1":"00:56:F0:B1:41:10:7A:02:49:FD:35:8F:47:CC:1A:09:17:F2:EB:57","sha256":"F7:E0:6C:BC:03:E6:A8:5E:F2:3D:8A:6C:DB:C0:FE:22:75:56:C0:D4:94:B4:2C:0E:4B:BB:77:18:EE:57:A8:B1"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: brookhaven-outfit-codes-matching-bestie.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://brookhaven-outfit-codes-matching-bestie.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 08 Mar 2026 14:09:36 GMT\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=6,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XmZZ%2BOr4LH1BPDNcHzaPuGTC32ovUw4LzFu4ZdH2h1si9ThZIAjy2jvtGRzUA5b6ZzZ9GgRfave%2FGKtqEjZYyajhnWfAICRCcxOUE6StkcxZv4rF2YpNkHjQ87D8I2V6yyAT1tl05%2FDkdCWR5I4LMIQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"c32bf1839a02c28417636e2fbfe32b83\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d926b2c9abda0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1039,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3e5eb335b0265fa668f3b7a8bb83dd62","sha1":"3a7497bfe01d5f0dd7f93b25400ff8dd4410b033","sha256":"4183fc50d0ecbe4f28d32f897b93b712a6e90df092b0b5d921b51ce9da6931ee","sha512":"b3fb01f8dce34190449c733e25a5818ce09b3957fbe5088be6877f89d0f32ed35e793a245ae2d736cd17031d8183183d0e4188b2d93f7faaa286b5b88f8179e6","ssdeep":"","tlshash":"bf11ef5fc341983af23ed341eab4da49863568cb91f523d8fed06d29b43a5d61409788","first_seen":"2025-05-31T11:23:43.744066Z","last_seen":"2026-04-03T04:11:11.142259Z","times_seen":384,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/notifications/utility/tiktok/multi/image-row/4/css/animate.css","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://brookhaven-outfit-codes-matching-bestie.pages.dev/","date":"2026-03-08T14:09:38.551Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Feb 2026 22:50:15 GMT","end":"Sat, 23 May 2026 23:48:46 GMT"},"fingerprint":{"sha1":"E0:64:EB:B0:39:B0:1B:31:05:CE:A0:93:C8:74:E7:A4:DE:D1:B3:77","sha256":"6D:BC:A3:C7:8F:67:2C:FE:E1:7A:88:EA:6C:8E:07:D4:1D:1F:CA:FD:54:30:02:80:22:B2:74:B5:95:C4:99:75"}}},"request":{"raw":"GET /sb/notifications/utility/tiktok/multi/image-row/4/css/animate.css HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://brookhaven-outfit-codes-matching-bestie.pages.dev/\r\nOrigin: https://brookhaven-outfit-codes-matching-bestie.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 08 Mar 2026 14:09:39 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Fri, 27 Jun 2025 13:37:31 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"685e9e9b-13371\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fUDf6iw%2FHx%2FxB6usOpW%2BDVzf5XcRsp264ollGiagBzAhpnqltf6FaXImrgLi%2BHG00%2BjDGf%2FcJFpeX5Y5WGL636ZcBysX8psukbUvu4T%2BTE8%3D\"}]}\r\ncf-ray: 9d926b382931dd16-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78705,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"2e14c562830c4aff097b93ed91f0736a","sha1":"8668e9bac590f3b35ab5fc9736482c6c41dcd3a7","sha256":"d1df3f5c1d65334394cdce95c7d0bfd468189121e1911dfd425b322473df6446","sha512":"750592dae0d017dac99b23167050ecf9b5abf557e4af349f7d1ac4c2ab2c2aa3a1552de5fa9d546695ce8a33ba0649b7454991f23ebde7ec3e94009fa1ade7d3","ssdeep":"384:jvuAuF81dghu3uFlZlX/m/Gu7uNUtrL4VrbZJgBhLYEKwZiMUL6Vpaj7y:jvuAu21dghu3uhu7uEKwZiMUL6Vpaj7y","tlshash":"fe731bad399115845263861d83df9e68273ce5731826acef73c2488bcf8bf9867c9147","first_seen":"2024-12-19T15:18:06.31935Z","last_seen":"2026-04-03T18:56:22.062244Z","times_seen":63,"resource_available":false,"data":null}},"time_used":562,"timings":{"blocked":34,"dns":1,"connect":8,"send":0,"wait":488,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/impr.gif?sid=H4sIAAAAAAAC_1RSO4wbRRieda6LEOIpURBtkYJInG_2YXuXSCBFPArgDpGgFBRoHrt3g8c7m51d23GVcJAySjrK9WffHcURQUONfHSRkOICyUWuQRR0SEipkX2WjvzF__i-0ej7H_fG1SlpomKLzz41I6U122o1qfvWTZVJM7Du9g3Xo0161b2psnZ41R0uXdF_xwvCJr3ifpSIrtnyqUepRz33Q1UkqRlurVio_Dj2mjFthn7Ta4UYFs_XtmrAsgZk_5S8DCXnL_6ZfgklZsh6P72f2G5p8rc_6FWalaZAXx59kXUzM8jQO0_TwkGaHa1fw9g5Id83YLKjdQcw_emyA3A1J43Xn4JnR2uZ4P2DM6VcI8nA5UUM-jMkegbFZhBmH0o-IYCQ2N5B1jvcNsWA3T5j2ZKdk41n_0IN5mTj6avIeo-uaTV0rxtdlcpkFsO0hhrOoHZnyKsTlCMHanACUX4DJX8nW88-Qdab7lhtoOTiMvcCFvstuumJoL0ZJiLejNthazMWPhVRS3qtsLUakUpnYLaByjqolIMqdVDlDnpy4YY0CoXHgnYaS9GhIQtDmXAaRz6lLBYdVOIulHwAUXx3mMu9stuflkWVTKtM2LH3wxnkxyvwcAn68dg7rr7Ktd9uRX7Y8cYe8uIOuurhk0sUdq-GlQ5sSdCX9YHU1rf1odS24t46-usY1BNT7o7ZgSl3k4yAFQ9QyHqq8lt2H6K8MBmlVk7M0jFe1hPGZT1RsmyguFWP81Py0nLuzqP7L6CbLFyW-i3JoiDyEsolDeOQs5B6kei0ozhiPqyqoWwDzDoYqTn5OL2CXM3JpXt_g7MTWH0CoRyw6k2wQQ22V2OUHacqk30lkqYwPUhTIy83UN52xvqUvDL5_Ma1X1fr52_8gkQ8fu8fsjKIokZe1Pha_Uawq-_-vJOXqqdGbHkP10tWJhfA1JxcfFdCqDl5rfHX6jQ7f9yHyO_A5ud_WUPAcwdaEejkMVkbGK9h_1fz83xsv8Vu4YBrZ8J14Uy5LvTDM5lWLdw0SHxBadRpe0GUJl4QSpG2ojCWbUaDIEFp5-rH_cv_BQAA__8RVBykGAQAAA==","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.127.243","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://brookhaven-outfit-codes-matching-bestie.pages.dev/","date":"2026-03-08T14:09:41.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 22:53:11 GMT","end":"Sun, 24 May 2026 22:53:10 GMT"},"fingerprint":{"sha1":"ED:51:C6:32:50:BE:DC:21:A3:AD:D6:A1:DB:98:F0:08:AD:BF:E7:A2","sha256":"56:84:BB:23:CE:A6:AD:BA:2E:8A:D0:F9:92:4F:17:BF:64:9A:7D:1C:AC:77:10:4A:32:94:E4:15:91:57:B1:A8"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1RSO4wbRRieda6LEOIpURBtkYJInG_2YXuXSCBFPArgDpGgFBRoHrt3g8c7m51d23GVcJAySjrK9WffHcURQUONfHSRkOICyUWuQRR0SEipkX2WjvzF__i-0ej7H_fG1SlpomKLzz41I6U122o1qfvWTZVJM7Du9g3Xo0161b2psnZ41R0uXdF_xwvCJr3ifpSIrtnyqUepRz33Q1UkqRlurVio_Dj2mjFthn7Ta4UYFs_XtmrAsgZk_5S8DCXnL_6ZfgklZsh6P72f2G5p8rc_6FWalaZAXx59kXUzM8jQO0_TwkGaHa1fw9g5Id83YLKjdQcw_emyA3A1J43Xn4JnR2uZ4P2DM6VcI8nA5UUM-jMkegbFZhBmH0o-IYCQ2N5B1jvcNsWA3T5j2ZKdk41n_0IN5mTj6avIeo-uaTV0rxtdlcpkFsO0hhrOoHZnyKsTlCMHanACUX4DJX8nW88-Qdab7lhtoOTiMvcCFvstuumJoL0ZJiLejNthazMWPhVRS3qtsLUakUpnYLaByjqolIMqdVDlDnpy4YY0CoXHgnYaS9GhIQtDmXAaRz6lLBYdVOIulHwAUXx3mMu9stuflkWVTKtM2LH3wxnkxyvwcAn68dg7rr7Ktd9uRX7Y8cYe8uIOuurhk0sUdq-GlQ5sSdCX9YHU1rf1odS24t46-usY1BNT7o7ZgSl3k4yAFQ9QyHqq8lt2H6K8MBmlVk7M0jFe1hPGZT1RsmyguFWP81Py0nLuzqP7L6CbLFyW-i3JoiDyEsolDeOQs5B6kei0ozhiPqyqoWwDzDoYqTn5OL2CXM3JpXt_g7MTWH0CoRyw6k2wQQ22V2OUHacqk30lkqYwPUhTIy83UN52xvqUvDL5_Ma1X1fr52_8gkQ8fu8fsjKIokZe1Pha_Uawq-_-vJOXqqdGbHkP10tWJhfA1JxcfFdCqDl5rfHX6jQ7f9yHyO_A5ud_WUPAcwdaEejkMVkbGK9h_1fz83xsv8Vu4YBrZ8J14Uy5LvTDM5lWLdw0SHxBadRpe0GUJl4QSpG2ojCWbUaDIEFp5-rH_cv_BQAA__8RVBykGAQAAA== HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://brookhaven-outfit-codes-matching-bestie.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=b13a9250-1c36-4ec9-9645-9c20c85d1545:2:1; pdhtkv=true; uncs=2; pdhtkv29=true; uncs29=2; u_pl26582471=1; u_pl28216845=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sun, 08 Mar 2026 14:09:41 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nset-cookie: iprc_l+a6ad9579d24c975cc6f619d849db19fd=6429110; expires=Mon, 09 Mar 2026 14:09:41 GMT; path=/; secure; SameSite=None\niprc_l:6429110=3; expires=Mon, 09 Mar 2026 14:09:41 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 3\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 5d2ebf3d9c9229cb70e6b5fe68bdfedd\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T22:47:04.158538Z","times_seen":13349726,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/pixel/sbs?c=1","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.127.243","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://brookhaven-outfit-codes-matching-bestie.pages.dev/","date":"2026-03-08T14:09:41.073Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 22:53:11 GMT","end":"Sun, 24 May 2026 22:53:10 GMT"},"fingerprint":{"sha1":"ED:51:C6:32:50:BE:DC:21:A3:AD:D6:A1:DB:98:F0:08:AD:BF:E7:A2","sha256":"56:84:BB:23:CE:A6:AD:BA:2E:8A:D0:F9:92:4F:17:BF:64:9A:7D:1C:AC:77:10:4A:32:94:E4:15:91:57:B1:A8"}}},"request":{"raw":"GET /pixel/sbs?c=1 HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://brookhaven-outfit-codes-matching-bestie.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=b13a9250-1c36-4ec9-9645-9c20c85d1545:2:1; pdhtkv=true; uncs=2; pdhtkv29=true; uncs29=2; u_pl26582471=1; u_pl28216845=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sun, 08 Mar 2026 14:09:41 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T22:47:04.158538Z","times_seen":13349726,"resource_available":true,"data":null}},"time_used":673,"timings":{"blocked":288,"dns":1,"connect":93,"send":0,"wait":96,"receive":0,"ssl":191},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"adxpy.pages.dev/ads.js","fqdn":"adxpy.pages.dev","domain":"adxpy.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://brookhaven-outfit-codes-matching-bestie.pages.dev/","date":"2026-03-08T14:09:36.806Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adxpy.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 23:59:16 GMT","end":"Wed, 06 May 2026 00:57:55 GMT"},"fingerprint":{"sha1":"43:02:20:65:8A:13:63:9C:3E:A6:CF:BC:13:A1:4D:89:B4:AE:4D:E8","sha256":"93:76:A5:FC:14:19:A2:25:5A:48:98:9A:34:CB:E8:16:20:FB:5B:8D:F3:80:B0:E6:4D:13:B4:88:C8:E3:14:6E"}}},"request":{"raw":"GET /ads.js HTTP/1.1\r\nHost: adxpy.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://brookhaven-outfit-codes-matching-bestie.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 08 Mar 2026 14:09:36 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qjOehB4RRlYhvHki0120JRTWIdYDSxxjZUjnqvX%2B0WG6R8c3pbCYaPL07HVC4Yk%2FCwGqRSrkT%2FJh%2B31LrVOlQQwBWRtMNPV8EUBpTKLHsA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"1bc4a8b41519c6fae69917cf3ea9f576\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d926b2d0d962382-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4034,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"28a8ee5b231d6993efeaeb288506fba6","sha1":"185e282511210752916a8d4fcc28642f02e4dc5e","sha256":"81496c62f33c7090e09cd8ea1d016980fc4432fb6ca00450ccea59b926daa7e1","sha512":"b1cf24abc589692314ada61a5a266b280ce2ad1297f5be58b94ececb90e2d718021795ca3998cb142e5937cff260d4aaeaffe5759bb8e67dff20e76bec939658","ssdeep":"","tlshash":"cb81011920a100651eb7236a7be3625dfba43053b81281a4bdccdb185fb9d1091f7fed","first_seen":"2025-10-25T03:17:17.993778Z","last_seen":"2026-04-04T18:45:43.281845Z","times_seen":285,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fnotifications%2Futility%2Ftiktok%2Fmulti%2Fimage-row%2F4%2Fcss%2Fstyle.css\u0026l=10196\u0026fd=544","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://brookhaven-outfit-codes-matching-bestie.pages.dev/","date":"2026-03-08T14:09:39.093Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 22:53:11 GMT","end":"Sun, 24 May 2026 22:53:10 GMT"},"fingerprint":{"sha1":"ED:51:C6:32:50:BE:DC:21:A3:AD:D6:A1:DB:98:F0:08:AD:BF:E7:A2","sha256":"56:84:BB:23:CE:A6:AD:BA:2E:8A:D0:F9:92:4F:17:BF:64:9A:7D:1C:AC:77:10:4A:32:94:E4:15:91:57:B1:A8"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fnotifications%2Futility%2Ftiktok%2Fmulti%2Fimage-row%2F4%2Fcss%2Fstyle.css\u0026l=10196\u0026fd=544 HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://brookhaven-outfit-codes-matching-bestie.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=b13a9250-1c36-4ec9-9645-9c20c85d1545:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl26582471=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sun, 08 Mar 2026 14:09:39 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T22:47:04.158538Z","times_seen":13349726,"resource_available":true,"data":null}},"time_used":188,"timings":{"blocked":89,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/interstitial/games/lg/1/img/2.mp4","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://brookhaven-outfit-codes-matching-bestie.pages.dev/","date":"2026-03-08T14:09:40.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Feb 2026 22:50:15 GMT","end":"Sat, 23 May 2026 23:48:46 GMT"},"fingerprint":{"sha1":"E0:64:EB:B0:39:B0:1B:31:05:CE:A0:93:C8:74:E7:A4:DE:D1:B3:77","sha256":"6D:BC:A3:C7:8F:67:2C:FE:E1:7A:88:EA:6C:8E:07:D4:1D:1F:CA:FD:54:30:02:80:22:B2:74:B5:95:C4:99:75"}}},"request":{"raw":"GET /sb/interstitial/games/lg/1/img/2.mp4 HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Sun, 08 Mar 2026 14:09:40 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 373038\r\nserver: cloudflare\r\nlast-modified: Tue, 26 Aug 2025 11:03:43 GMT\r\npriority: u=4,i=?0\r\netag: \"68ad948f-5b12e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nage: 2623564\r\ncontent-range: bytes 0-373037/373038\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O83j8RqLWFa%2FU%2Br5BgttFP7ThrIhnBFydMVY9CKfRyMHzFuZhrzVhvSUUs7QuE920myUaBXg6dxdoLjrRPWAt3798Qg9c1NOJcTz2jQNo2Y%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d926b455d05349b-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":373038,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"514932b8e50e87cf189fc17165beae38","sha1":"57fc10ca7820d7f22fbccf368463626ff9f82455","sha256":"f754ca7ad586260f0ee643b7a9dfb37400f762165d620591be030dd6548ec61e","sha512":"d7599a5de18ec263010c5fbeedbf6d25bcd1775fab990921d5812c4569ff5c913701e65dc08b8e8b93d7a9a961924f58f132406717fddf356e10479eb57cea7f","ssdeep":"6144:UJdkJ06JvQJMYJGRJz9JpXJrpJkrJkaJHPJt0JKYJR8JkwJUeJaPJdkJ06JvQJ0p:JSj+ZFXCRtbn5kK9ANl0ie4y","tlshash":"dd846a16ed724c6ab59ef6b0e1aacbc2c6e3536750ca2bd7b0ccb4640b18840875f57d","first_seen":"2025-10-06T08:00:25.565379Z","last_seen":"2026-03-23T08:56:50.658248Z","times_seen":642,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://brookhaven-outfit-codes-matching-bestie.pages.dev/","date":"2026-03-08T14:09:41.118Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://brookhaven-outfit-codes-matching-bestie.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 08 Mar 2026 05:12:01 GMT\r\nexpires: Mon, 08 Mar 2027 05:12:01 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 32260\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-04-04T22:47:39.069867Z","times_seen":62927,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":115,"dns":1,"connect":44,"send":0,"wait":21,"receive":26,"ssl":72},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.show-creative1.com/sb/notifications/utility/tiktok/multi/image-row/4/index.html","fqdn":"cdn.show-creative1.com","domain":"show-creative1.com","tld":"com"},"ip":{"addr":"172.67.208.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://brookhaven-outfit-codes-matching-bestie.pages.dev/","date":"2026-03-08T14:09:38.321Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"show-creative1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 22:00:04 GMT","end":"Sun, 03 May 2026 22:58:27 GMT"},"fingerprint":{"sha1":"FA:63:AA:B4:65:DE:EB:50:F5:A0:F4:25:77:0E:E1:56:4B:9C:C5:1A","sha256":"00:CF:18:86:D3:98:19:21:01:C5:18:5F:25:57:AA:F6:D3:DA:44:53:A5:D9:94:57:ED:F3:B1:AA:3A:3D:38:9C"}}},"request":{"raw":"GET /sb/notifications/utility/tiktok/multi/image-row/4/index.html HTTP/1.1\r\nHost: cdn.show-creative1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://brookhaven-outfit-codes-matching-bestie.pages.dev/\r\nOrigin: https://brookhaven-outfit-codes-matching-bestie.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 08 Mar 2026 14:09:38 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Fri, 27 Jun 2025 13:37:31 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QrC%2B5ACy2xrljOTZ%2FWJXLZcCLEKuKwLUoo7cGtgpMfOlU6KMOcV%2Bd515TN2120GjYrk7gU8L18pckvKi1giMUJgzYRxJF5hCkpzX3xE5bdgVBJzzHv0%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9d926b36aa8e27f7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2698,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"a8105fdbc7ad8b0e672c146f2375196e","sha1":"051e8dee329b55e5b655f45b43a78dfb72d7a8b9","sha256":"b72af281e3b21a8ccfc7a2388b02d5f7c9c1d12400c6394224e5b4b3175e05d9","sha512":"ffe99b9e538386596ab98bbcb1abd3022535318111466cb92c539b3e3e91984765d1adeabdad87a0d5c0a4b84a5e84ced997ce6ba1b07eb66c12c6358ffad589","ssdeep":"","tlshash":"9151465629f989b322c280e63f379f8aee82d40b9d0e424177ec46908b89e95ce13507","first_seen":"2025-06-30T16:39:55.004892Z","last_seen":"2026-04-03T18:56:21.988398Z","times_seen":67,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":30,"dns":1,"connect":8,"send":0,"wait":154,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/notifications/utility/tiktok/multi/image-row/4/img/logo.png","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://brookhaven-outfit-codes-matching-bestie.pages.dev/","date":"2026-03-08T14:09:38.656Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Feb 2026 22:50:15 GMT","end":"Sat, 23 May 2026 23:48:46 GMT"},"fingerprint":{"sha1":"E0:64:EB:B0:39:B0:1B:31:05:CE:A0:93:C8:74:E7:A4:DE:D1:B3:77","sha256":"6D:BC:A3:C7:8F:67:2C:FE:E1:7A:88:EA:6C:8E:07:D4:1D:1F:CA:FD:54:30:02:80:22:B2:74:B5:95:C4:99:75"}}},"request":{"raw":"GET /sb/notifications/utility/tiktok/multi/image-row/4/img/logo.png HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 08 Mar 2026 14:09:38 GMT\r\ncontent-type: image/png\r\ncontent-length: 100221\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:22:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"65aa8591-1877d\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\naccept-ranges: bytes\r\nage: 1497578\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xhWLt%2Boz3DIgsfF%2FmJ9fxDnaUk0cKVrLgxtpfRSngwti4HHeRYLOyuMxQRSBI9vK5JCbyFLURtdVhRevHaNKTzt3Nh9ywNYy48V8M7cfnfs%3D\"}]}\r\ncf-ray: 9d926b389a52dd16-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":100221,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 860 x 900, 8-bit/color RGBA, non-interlaced","md5":"118901c27fd7df6eaa1d396fc0330c3a","sha1":"e9f1435acef3c2c671c5ff92bd604960a417bbe5","sha256":"bee9c96623053467fa41ff5a1de2b43ade087bf9f4a1825e95d5deeef47430c9","sha512":"60063e567f2f0b27ae7caeceda3fc2a95a821c5e60a08b5f208a4af489deb19e053fb7d220e51992b682c137e38ab90af4fb5caa04811405191cb3eab9e4e6bd","ssdeep":"3072:4twAGvQG21A3SFauHBThdWXG1EKZkuWgZTGfeclB:4tEvKABWPzFZkuW+TGfeOB","tlshash":"59a3014fe0f27888df5c08f917601ad9620bec4af0d2b8799661672549882fed252ddf","first_seen":"2024-12-19T15:18:06.242449Z","last_seen":"2026-04-03T18:56:22.039221Z","times_seen":116,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/notifications/utility/tiktok/multi/image-row/4/img/1.mp4","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://brookhaven-outfit-codes-matching-bestie.pages.dev/","date":"2026-03-08T14:09:42.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Feb 2026 22:50:15 GMT","end":"Sat, 23 May 2026 23:48:46 GMT"},"fingerprint":{"sha1":"E0:64:EB:B0:39:B0:1B:31:05:CE:A0:93:C8:74:E7:A4:DE:D1:B3:77","sha256":"6D:BC:A3:C7:8F:67:2C:FE:E1:7A:88:EA:6C:8E:07:D4:1D:1F:CA:FD:54:30:02:80:22:B2:74:B5:95:C4:99:75"}}},"request":{"raw":"GET /sb/notifications/utility/tiktok/multi/image-row/4/img/1.mp4 HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Sun, 08 Mar 2026 14:09:42 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 971049\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:22:09 GMT\r\npriority: u=4,i=?0\r\netag: \"65aa8591-ed129\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nage: 1579749\r\ncontent-range: bytes 0-971048/971049\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d6MscHqukcntdTcSKcAXf9%2B2Xn1EDs3aalipPk11c%2BG8l%2BXnOegBwbhZZHFPuyGGY1dUwavOuK9%2BMMvaFQU2mrt9AZTas%2F1%2FqJ8QyxIUuJg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d926b51be56349b-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":971049,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"1d2b3248fa1bbf096caff4e4aaeb91ea","sha1":"98f119ef8a4c8a1194392398cf00a3f29b113bd4","sha256":"f981bd703af969a70d515ad9986f0d82b2439b5cca238accd969fcd657927af2","sha512":"20b91fffabc5797ad45fd6268de9f2304d23aeb7b8dd80429499e4f98164c17fd5a08fe01e0a6d14502e2c0d6d365316225f5ba54c72480b007a4e46a5819a86","ssdeep":"24576:z66o0+dyofNW4N6ZsAWO4hjg5xYLE/fDWIVRQjjTQ1A+Gu7Hdgf:LA/ftisAWO4hjyx4EH6IPin6Y+Hm","tlshash":"0525330a9b46d0d8dc294af4c94122cb8da9d0c9178491d7b9ecad78653feb18f10b7f","first_seen":"2024-12-19T15:18:06.246062Z","last_seen":"2026-04-03T18:56:21.883489Z","times_seen":120,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":137,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"immigrationacre.com/c2/07/ec/c207ec84c2456af201cc563cadc36c46.js","fqdn":"immigrationacre.com","domain":"immigrationacre.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://brookhaven-outfit-codes-matching-bestie.pages.dev/","date":"2026-03-08T14:09:36.844Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"immigrationacre.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 21 Jan 2026 13:05:03 GMT","end":"Tue, 21 Apr 2026 13:05:02 GMT"},"fingerprint":{"sha1":"15:FA:AD:CC:E2:4C:49:AA:36:E4:D7:92:A2:58:1A:3B:88:4D:4C:A7","sha256":"D4:52:60:EF:97:91:FA:80:40:92:C6:44:5D:A4:08:35:F9:9C:82:F0:92:0E:FA:13:62:59:74:D4:C2:66:5D:3C"}}},"request":{"raw":"GET /c2/07/ec/c207ec84c2456af201cc563cadc36c46.js HTTP/1.1\r\nHost: immigrationacre.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://brookhaven-outfit-codes-matching-bestie.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sun, 08 Mar 2026 14:09:37 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 34682\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 3\r\nHost: immigrationacre.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 5f4729b176e939e9bc941e7d988fad54\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":92195,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"eb65beda9c71bb4124b5f75c3fe5f3b3","sha1":"09ec3c3f4115aaefc29a89f8d2a5123e74eca661","sha256":"aca60c39eb88e5406662ae00635dc84ae9f9516d93da499bae8b82a07f8459ab","sha512":"63451349ed20f9fc9dfca416debf4f257a063ac558877f08ce4f4ab4cb93a9529b5b6a9ace93a6a9c12cf362c8aba09575733a154b8e61771633252bb042e087","ssdeep":"1536:EEB9ni1KqAGQDSAiLoHL0cTIgV2BOPsuUd7s/KwR1UwurV4aYLuvGgIo5+phrtXj:Et1KTGQDSAiLoHQcTIgV2BGsuUd7s/Kw","tlshash":"9093d84c3f82b0d41397707b762f902bf23b5c955868e88de243adac5da9719a337e05","first_seen":"2026-03-08T07:10:56.828966Z","last_seen":"2026-03-08T14:11:24.281214Z","times_seen":20,"resource_available":true,"data":null}},"time_used":769,"timings":{"blocked":287,"dns":0,"connect":95,"send":0,"wait":98,"receive":95,"ssl":191},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"immigrationacre.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/notifications/utility/tiktok/multi/image-row/4/img/close.png","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://brookhaven-outfit-codes-matching-bestie.pages.dev/","date":"2026-03-08T14:09:38.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Feb 2026 22:50:15 GMT","end":"Sat, 23 May 2026 23:48:46 GMT"},"fingerprint":{"sha1":"E0:64:EB:B0:39:B0:1B:31:05:CE:A0:93:C8:74:E7:A4:DE:D1:B3:77","sha256":"6D:BC:A3:C7:8F:67:2C:FE:E1:7A:88:EA:6C:8E:07:D4:1D:1F:CA:FD:54:30:02:80:22:B2:74:B5:95:C4:99:75"}}},"request":{"raw":"GET /sb/notifications/utility/tiktok/multi/image-row/4/img/close.png HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 08 Mar 2026 14:09:38 GMT\r\ncontent-type: image/png\r\ncontent-length: 6120\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:22:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"65aa8591-17e8\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\naccept-ranges: bytes\r\nage: 1663584\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BeDhaOlzFhfTnm8HdIQxXfBuesMoWBfr2yuyi%2Bu5j1P4oWx75hlLwqNdq7EgfEo0AYjKUVoXxCdBc%2B7FIANr2J04Dd8yPGEQBs5luQdGVAE%3D\"}]}\r\ncf-ray: 9d926b389a58dd16-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6120,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 522 x 391, 8-bit/color RGBA, non-interlaced","md5":"e2c4f6bdee5491d4f5fe509ca353d35a","sha1":"fe4da028cbf8bee9d8a02c69b49b2eef0cb12465","sha256":"0db6ed8e5c44d4568a506fabc998a04a66ac265bfa8aaa4baf4aced622c8edd3","sha512":"bd34ca48ab4baf1701d22a23913510b0c99dcf02f4aa76b781a83562475a10239bfcfda9eba3f4e328da59476fccc3f89faf6b88556412b7381e4f29777cf74e","ssdeep":"96:FSJYkknmWIYDMP/up8zbHnsg+E+bgiQC3jqiQHeG9nb7gCxTDiT4WOyXFDoY1AM:FSykknkHd+jjQC3j/mdPiL/X1AM","tlshash":"ffc16c02fc40bca68a09ad4164c191adfef9ccc8764634996c0bdacfb6906fa6d1c1b4","first_seen":"2024-12-19T15:18:06.275534Z","last_seen":"2026-04-03T18:56:21.881189Z","times_seen":63,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wayfarerorthodox.com/d0/89/ea/d089ea049f0f7b1eacfa2b5bb99d3bdc.js","fqdn":"wayfarerorthodox.com","domain":"wayfarerorthodox.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://brookhaven-outfit-codes-matching-bestie.pages.dev/","date":"2026-03-08T14:09:39.025Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"wayfarerorthodox.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 00:35:17 GMT","end":"Thu, 28 May 2026 00:35:16 GMT"},"fingerprint":{"sha1":"17:4A:E8:7A:8D:4C:22:69:70:30:C3:3D:6A:72:7A:68:E9:D2:3C:83","sha256":"0D:06:FA:1C:4D:9B:7A:47:4C:58:29:3B:40:85:C2:D1:F6:2B:AE:C5:66:2E:53:32:27:48:B1:F2:5C:2C:A7:A1"}}},"request":{"raw":"GET /d0/89/ea/d089ea049f0f7b1eacfa2b5bb99d3bdc.js HTTP/1.1\r\nHost: wayfarerorthodox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://brookhaven-outfit-codes-matching-bestie.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sun, 08 Mar 2026 14:09:39 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 36370\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 3\r\nHost: wayfarerorthodox.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 82183425cefc6ae063d26e3d2386764e\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":100139,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"522813a8756824954ad8502dfde4a30e","sha1":"d58dd16811a4cb9f163bfa2c1247768f93c7abbc","sha256":"0a2238d9b8a686130ed121bdf4625184c219d7477287de490e6effed1d41c86c","sha512":"cc2396f0c47485921b18fdfbdd886e191ec791732d8d38589770f3bf7eda5e77b83cf007021ecdbaef8ef28c9049cdddd8994b3526a385764948653f968e1c9f","ssdeep":"1536:StQGjdoPZ9rA6lAaWFw9s93vVzSRihUOjEtsd7C2Dg:JguYvx1vVzVUyg","tlshash":"dda3a59c7f2da4ae136a2073222fa41ff25a5c86508cd498da03fced6d6d70bf936544","first_seen":"2026-03-08T14:06:27.043041Z","last_seen":"2026-03-08T14:10:06.878735Z","times_seen":7,"resource_available":true,"data":null}},"time_used":786,"timings":{"blocked":291,"dns":1,"connect":96,"send":0,"wait":106,"receive":96,"ssl":194},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"brookhaven-outfit-codes-matching-bestie.pages.dev/assets/css/stylesheet.a482bf00fa5c046040ef7973ad5fdf5657890cacb596c93f1382f664ca542074.css","fqdn":"brookhaven-outfit-codes-matching-bestie.pages.dev","domain":"brookhaven-outfit-codes-matching-bestie.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://brookhaven-outfit-codes-matching-bestie.pages.dev/","date":"2026-03-08T14:09:35.517Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brookhaven-outfit-codes-matching-bestie.pages.dev","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 23:58:01 GMT","end":"Sun, 24 May 2026 23:58:00 GMT"},"fingerprint":{"sha1":"00:56:F0:B1:41:10:7A:02:49:FD:35:8F:47:CC:1A:09:17:F2:EB:57","sha256":"F7:E0:6C:BC:03:E6:A8:5E:F2:3D:8A:6C:DB:C0:FE:22:75:56:C0:D4:94:B4:2C:0E:4B:BB:77:18:EE:57:A8:B1"}}},"request":{"raw":"GET /assets/css/stylesheet.a482bf00fa5c046040ef7973ad5fdf5657890cacb596c93f1382f664ca542074.css HTTP/1.1\r\nHost: brookhaven-outfit-codes-matching-bestie.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://brookhaven-outfit-codes-matching-bestie.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 08 Mar 2026 14:09:36 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p7Kvg5lx5sl4NRHkYgCdWm7KSyxkuPAwzRw3KdqYk94av9M218AwbrDNIQakqQiSiMllgXtL1mge%2FkARtNpleeJqCkgeBW1gmX68eAzbEEaAJ6NsL2QSZxRy%2BYOTC7M8F4ADGVK1uG%2Fa8QIp%2FQ09LFM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"53e05fd175c1632d3f6826cdf1c8006d\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d926b24ff39a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17668,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (17469), with CRLF line terminators","md5":"189fdafdfba1b07922505146944ac218","sha1":"e593713c0ec16032efdad79024e07b769cf999d7","sha256":"a482bf00fa5c046040ef7973ad5fdf5657890cacb596c93f1382f664ca542074","sha512":"78e5dfa85fe07a10600f8e1f0060db0b5aff6482bcd25850bdae13ff5579b248d15119e5fa200b836f5f0abc2fe0b9cb5bff43ee26bca7e40a9d96494bdf6a82","ssdeep":"192:pgLxsLb4X3I1fG2pmOTq7zSeyf5rTZFsGR57Vpvj82p7Y97F+QNBARfWiVWo6yyT:KyLb4eEbzSDBP9R5lKmRD723FRdZ","tlshash":"7e82757e9220263cfb33cc026689755d3614f963da5247f9fa99a3a885c2ff71171a0c","first_seen":"2025-10-29T04:02:15.901982Z","last_seen":"2026-04-03T04:11:11.125996Z","times_seen":297,"resource_available":false,"data":null}},"time_used":965,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":965,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.show-creative1.com%2Fsb%2Fnotifications%2Futility%2Ftiktok%2Fmulti%2Fimage-row%2F4%2Findex.html\u0026l=2695\u0026fd=195","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://brookhaven-outfit-codes-matching-bestie.pages.dev/","date":"2026-03-08T14:09:38.541Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 22:53:11 GMT","end":"Sun, 24 May 2026 22:53:10 GMT"},"fingerprint":{"sha1":"ED:51:C6:32:50:BE:DC:21:A3:AD:D6:A1:DB:98:F0:08:AD:BF:E7:A2","sha256":"56:84:BB:23:CE:A6:AD:BA:2E:8A:D0:F9:92:4F:17:BF:64:9A:7D:1C:AC:77:10:4A:32:94:E4:15:91:57:B1:A8"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.show-creative1.com%2Fsb%2Fnotifications%2Futility%2Ftiktok%2Fmulti%2Fimage-row%2F4%2Findex.html\u0026l=2695\u0026fd=195 HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://brookhaven-outfit-codes-matching-bestie.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=b13a9250-1c36-4ec9-9645-9c20c85d1545:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl26582471=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sun, 08 Mar 2026 14:09:38 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T22:47:04.158538Z","times_seen":13349726,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/notifications/utility/tiktok/multi/image-row/4/img/1.mp4","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://brookhaven-outfit-codes-matching-bestie.pages.dev/","date":"2026-03-08T14:09:38.734Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Feb 2026 22:50:15 GMT","end":"Sat, 23 May 2026 23:48:46 GMT"},"fingerprint":{"sha1":"E0:64:EB:B0:39:B0:1B:31:05:CE:A0:93:C8:74:E7:A4:DE:D1:B3:77","sha256":"6D:BC:A3:C7:8F:67:2C:FE:E1:7A:88:EA:6C:8E:07:D4:1D:1F:CA:FD:54:30:02:80:22:B2:74:B5:95:C4:99:75"}}},"request":{"raw":"GET /sb/notifications/utility/tiktok/multi/image-row/4/img/1.mp4 HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Sun, 08 Mar 2026 14:09:38 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 971049\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:22:09 GMT\r\npriority: u=4,i=?0\r\netag: \"65aa8591-ed129\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nage: 1579745\r\ncontent-range: bytes 0-971048/971049\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EdwMrOP9bcQrP5kt4xnvU%2Fj%2B8w8AlPQR%2FCoSwDGFbERsj2thTDJ0DfIvrQTgimG7aEIf7%2BJJhOoohZeqP5Rh4nqqCvHZeMLuCNFrfIH%2B6nw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d926b391b52349b-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":971049,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"1d2b3248fa1bbf096caff4e4aaeb91ea","sha1":"98f119ef8a4c8a1194392398cf00a3f29b113bd4","sha256":"f981bd703af969a70d515ad9986f0d82b2439b5cca238accd969fcd657927af2","sha512":"20b91fffabc5797ad45fd6268de9f2304d23aeb7b8dd80429499e4f98164c17fd5a08fe01e0a6d14502e2c0d6d365316225f5ba54c72480b007a4e46a5819a86","ssdeep":"24576:z66o0+dyofNW4N6ZsAWO4hjg5xYLE/fDWIVRQjjTQ1A+Gu7Hdgf:LA/ftisAWO4hjyx4EH6IPin6Y+Hm","tlshash":"0525330a9b46d0d8dc294af4c94122cb8da9d0c9178491d7b9ecad78653feb18f10b7f","first_seen":"2024-12-19T15:18:06.246062Z","last_seen":"2026-04-03T18:56:21.883489Z","times_seen":120,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":17,"receive":132,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"immigrationacre.com/6dd5e3d7ac37d33b5abc87810f6ac7f3/invoke.js","fqdn":"immigrationacre.com","domain":"immigrationacre.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://brookhaven-outfit-codes-matching-bestie.pages.dev/","date":"2026-03-08T14:09:38.874Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"immigrationacre.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 21 Jan 2026 13:05:03 GMT","end":"Tue, 21 Apr 2026 13:05:02 GMT"},"fingerprint":{"sha1":"15:FA:AD:CC:E2:4C:49:AA:36:E4:D7:92:A2:58:1A:3B:88:4D:4C:A7","sha256":"D4:52:60:EF:97:91:FA:80:40:92:C6:44:5D:A4:08:35:F9:9C:82:F0:92:0E:FA:13:62:59:74:D4:C2:66:5D:3C"}}},"request":{"raw":"GET /6dd5e3d7ac37d33b5abc87810f6ac7f3/invoke.js HTTP/1.1\r\nHost: immigrationacre.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://brookhaven-outfit-codes-matching-bestie.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sun, 08 Mar 2026 14:09:38 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 20336\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 3\r\nHost: immigrationacre.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 163fa07d416a0f74861d5642c805fa68\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":50980,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (50980), with no line terminators","md5":"22e8abb1ffbb7f9154ddc395d20fb040","sha1":"0fd9e2d5a622521efca298ce4071b38730adc5b4","sha256":"edf452410932830577f6753d24dc7e4a118fb401a9092a1b08af9fc24e1666d3","sha512":"74b70e08bc077f8e19a12fa6546526eedd490bbf99d578f78e11b4e703bba837ef6d717f9c6c2c09a2c6c0ddb25143f66268bcd96b29053b6e92287e6d4c4782","ssdeep":"768:nWwQO3aWrXsUWADXZ4npNvC/FeujuoM/TvEUd:nTQj0SADpYpNKdeujuf/LEUd","tlshash":"d033c7983bd1f0d8024270f7232fa41bf5174c26d98ce494e917b59eaebc719da36b06","first_seen":"2026-02-22T19:26:54.330637Z","last_seen":"2026-03-12T06:03:11.951845Z","times_seen":30,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":100,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"immigrationacre.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/ren.gif?sid=H4sIAAAAAAAC_1RSPWwcRRidvbiLEOJXoiDaIgWR8Hl2b_e8SySQIn4KwEYkKAUFmp9de7i5nc3O7t3lqgRDyijpKPfenW0KE0FDjc50kZCyBZKLuEEUdEhIqdGdTzL5iu9H72n0vm_evUl1Stqo2Mlnn5qx0ppthG3qvnVTZdIMrbt1w_Vom151b6qsG1x1R4tUDN7xOkGbXnE_SkTPbPjUo9SjnvuhKpLUjDaWKFR-FHvtmLYDv-2FAUbF87OtWrCsBTk4JS9DyebFP9MvocQcWf-n9xPbK03-9gf9SrPSFBjIwy-yXmaGGfrnbVo4SLPDFRvGNoR834LJDlcbwAxmiw3AVUNarz8Fzw5XMsEH-2dKuUaSgcuLGA7mSPQcis0hzB6UfEIAIbG1jax_sGWKIbt9hrIF2pC1Z_9CDRuy9vRVZP1H17QaudeNrkplMotRWkON5lA7c-TVMcqxAzU8hii_gZK_k41nnyDrz7atNlDy5DL3Oiz2Q7ruiU53PUhEvB53g3A9Fj4VUSi9MAiXJ1LpHMy2UFkHlXJQpQ6q3EFfnrgBjQLhsU43jaXYpAELAplwGkc-pSwWm6jEXSj5AKL47odc7pa9gR_PyqJKDqpMWD-eeEfVV7n2u2HkB5vexDs4Yy05swVn4iEv7qCnHj65RGF3a1jpwJYEA1nvS219Wx9IbSvuraq_qp16asqdCds35U6SEbDiAQpZz1R-y-5BlBem49TKqVkkxst6yrisp0qWLRS36kl-Sl5a3N15dP8F9JITl6V-KFnUibyEckmDOOAsoF4kNrtRHDEfVtVQtgVmHYxVQz5OryBXDbl0729wdgyrjyGUA1a9CTaswXZrjLOjVGVyoETSFqYPaWrk5RrK285En5JXpp_fuPbr8vv5G78gEY_f-4csA6KokRc1vla_Eezouz9v56XqqzFb-OF6ycrkAphqyMV3JYRqyGutv5bW3PzjPkR-BzY_f8saAp470IpAJ4_JKsB4Dfu_mZ_3E_stdgoHXDtTrgtnxnWhH57JtOrEDX3e6UZRN0m7Mu3Ijt-RcUiTOGBxN4iDEKVt1I97l_8LAAD__9ysXlkYBAAA","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://brookhaven-outfit-codes-matching-bestie.pages.dev/","date":"2026-03-08T14:09:40.368Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 22:53:11 GMT","end":"Sun, 24 May 2026 22:53:10 GMT"},"fingerprint":{"sha1":"ED:51:C6:32:50:BE:DC:21:A3:AD:D6:A1:DB:98:F0:08:AD:BF:E7:A2","sha256":"56:84:BB:23:CE:A6:AD:BA:2E:8A:D0:F9:92:4F:17:BF:64:9A:7D:1C:AC:77:10:4A:32:94:E4:15:91:57:B1:A8"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_1RSPWwcRRidvbiLEOJXoiDaIgWR8Hl2b_e8SySQIn4KwEYkKAUFmp9de7i5nc3O7t3lqgRDyijpKPfenW0KE0FDjc50kZCyBZKLuEEUdEhIqdGdTzL5iu9H72n0vm_evUl1Stqo2Mlnn5qx0ppthG3qvnVTZdIMrbt1w_Vom151b6qsG1x1R4tUDN7xOkGbXnE_SkTPbPjUo9SjnvuhKpLUjDaWKFR-FHvtmLYDv-2FAUbF87OtWrCsBTk4JS9DyebFP9MvocQcWf-n9xPbK03-9gf9SrPSFBjIwy-yXmaGGfrnbVo4SLPDFRvGNoR834LJDlcbwAxmiw3AVUNarz8Fzw5XMsEH-2dKuUaSgcuLGA7mSPQcis0hzB6UfEIAIbG1jax_sGWKIbt9hrIF2pC1Z_9CDRuy9vRVZP1H17QaudeNrkplMotRWkON5lA7c-TVMcqxAzU8hii_gZK_k41nnyDrz7atNlDy5DL3Oiz2Q7ruiU53PUhEvB53g3A9Fj4VUSi9MAiXJ1LpHMy2UFkHlXJQpQ6q3EFfnrgBjQLhsU43jaXYpAELAplwGkc-pSwWm6jEXSj5AKL47odc7pa9gR_PyqJKDqpMWD-eeEfVV7n2u2HkB5vexDs4Yy05swVn4iEv7qCnHj65RGF3a1jpwJYEA1nvS219Wx9IbSvuraq_qp16asqdCds35U6SEbDiAQpZz1R-y-5BlBem49TKqVkkxst6yrisp0qWLRS36kl-Sl5a3N15dP8F9JITl6V-KFnUibyEckmDOOAsoF4kNrtRHDEfVtVQtgVmHYxVQz5OryBXDbl0729wdgyrjyGUA1a9CTaswXZrjLOjVGVyoETSFqYPaWrk5RrK285En5JXpp_fuPbr8vv5G78gEY_f-4csA6KokRc1vla_Eezouz9v56XqqzFb-OF6ycrkAphqyMV3JYRqyGutv5bW3PzjPkR-BzY_f8saAp470IpAJ4_JKsB4Dfu_mZ_3E_stdgoHXDtTrgtnxnWhH57JtOrEDX3e6UZRN0m7Mu3Ijt-RcUiTOGBxN4iDEKVt1I97l_8LAAD__9ysXlkYBAAA HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://brookhaven-outfit-codes-matching-bestie.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=b13a9250-1c36-4ec9-9645-9c20c85d1545:2:1; pdhtkv=true; uncs=2; pdhtkv29=true; uncs29=2; u_pl26582471=1; u_pl28216845=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sun, 08 Mar 2026 14:09:40 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 1\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 5cb8b7d5f80027a8c9b421b70403924a\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T22:47:04.158538Z","times_seen":13349726,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:300,400,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.21.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://brookhaven-outfit-codes-matching-bestie.pages.dev/","date":"2026-03-08T14:09:40.673Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css?family=Roboto:300,400,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 08 Mar 2026 14:09:40 GMT\r\ndate: Sun, 08 Mar 2026 14:09:40 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16755,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"1936a90eef3ebd4c6b40eb59d72e164d","sha1":"4c698f8dc97e2e6186d46215e209aca1b1194a5d","sha256":"412d98c2f4410a048131a7d9362fb38456ce2ff67cd4731ea411708a7996a021","sha512":"07ad2431175e5566ae435738d94d4da3e96e4856a1fe1d5917c52474cab28808cd940fec0e8f75eb2f3d573e6fe8497fc12636ef4738d1b67e9144725192b580","ssdeep":"384:p9f59g9P9r9yU9/qY4+949Y9p9fM919W969yh9/qY4X9N9t949fd9k9D939yQ9/O:pDS99YURRuWDyjooYhREHPWP2ZZYQRVs","tlshash":"48721091041704009b834ce223cebf35fe1f52117142d0b5abfd9b6b9ddbca6526939d","first_seen":"2026-02-19T22:28:01.752187Z","last_seen":"2026-04-04T22:35:18.737702Z","times_seen":3055,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/interstitial/games/lg/1/js/main.js","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://brookhaven-outfit-codes-matching-bestie.pages.dev/","date":"2026-03-08T14:09:40.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Feb 2026 22:50:15 GMT","end":"Sat, 23 May 2026 23:48:46 GMT"},"fingerprint":{"sha1":"E0:64:EB:B0:39:B0:1B:31:05:CE:A0:93:C8:74:E7:A4:DE:D1:B3:77","sha256":"6D:BC:A3:C7:8F:67:2C:FE:E1:7A:88:EA:6C:8E:07:D4:1D:1F:CA:FD:54:30:02:80:22:B2:74:B5:95:C4:99:75"}}},"request":{"raw":"GET /sb/interstitial/games/lg/1/js/main.js HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://brookhaven-outfit-codes-matching-bestie.pages.dev/\r\nOrigin: https://brookhaven-outfit-codes-matching-bestie.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 08 Mar 2026 14:09:40 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 29 Aug 2025 11:32:39 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iM6zywD%2BtbPCYirTGMWhd%2Bp5XWminMSpZV%2FVk9xfhPM6%2BXXINBmwc%2Fmg7Bj7HYYZqBP4ZIWkWQIZN%2Bz%2BS6P%2FAwMqViFcHlXH%2Bw2IE3rxePA%3D\"}]}\r\netag: W/\"68b18fd7-1335\"\r\ncontent-encoding: br\r\ncf-ray: 9d926b45ddcc349b-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4917,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text","md5":"d84bd0ad5c27bc54e5478e47e039dc95","sha1":"5891d73716eb5ec3ffdfd465b181308e3556f7f6","sha256":"fbacc011f20a46da275afb956d7767dcc70b352c565929914653eac05fd843bf","sha512":"7ef45e6f694f2704f41fdafb1490dd78a8b57e1fab341eb088f0a6b4a91d63e39e796ed31f0194d73a10ad836883d4ca1ad3a0aadaeac3c45e45f08f68d90f68","ssdeep":"96:+rYLz04cj1eV1fmKBQSiHAgTOQQktfZH1f2FxHtOygA3bwXFOXjn09xKQxYChjt:+E43MRinttCxNOygA3k8T09xKQxYChjt","tlshash":"fba1310d65f310328427615b3b9baa4e7275810b9809ee897f4c57c12fd19b98bf07ee","first_seen":"2026-01-27T19:03:52.269149Z","last_seen":"2026-03-23T03:31:43.823273Z","times_seen":298,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":129,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/interstitial/games/lg/1/img/btn.png","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://brookhaven-outfit-codes-matching-bestie.pages.dev/","date":"2026-03-08T14:09:41.113Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Feb 2026 22:50:15 GMT","end":"Sat, 23 May 2026 23:48:46 GMT"},"fingerprint":{"sha1":"E0:64:EB:B0:39:B0:1B:31:05:CE:A0:93:C8:74:E7:A4:DE:D1:B3:77","sha256":"6D:BC:A3:C7:8F:67:2C:FE:E1:7A:88:EA:6C:8E:07:D4:1D:1F:CA:FD:54:30:02:80:22:B2:74:B5:95:C4:99:75"}}},"request":{"raw":"GET /sb/interstitial/games/lg/1/img/btn.png HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 08 Mar 2026 14:09:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 10898\r\nserver: cloudflare\r\nlast-modified: Tue, 26 Aug 2025 11:03:43 GMT\r\npriority: u=4,i=?0\r\netag: \"68ad948f-2a92\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\naccept-ranges: bytes\r\nage: 3441888\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8q5AQT4tqiXl7YiTZetDw9GqZ%2BmsyJFDVJ3D27MDFO7V7ebUBmgDv67%2BAzWfGandbebWz99xormcf2NEv8rXY2rs8TTLhmrnPfcJAcgqGpc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d926b47ea39349b-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10898,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 333 x 217, 8-bit colormap, non-interlaced","md5":"e3fabd76768944134e70b649ba20bae5","sha1":"7e80475a7ccd37359179e947342a72eb9134033b","sha256":"f94f23240c3d60040b86711df2e83d19c1ac71193fedf598851a0e7ef0845cee","sha512":"8b4d520152731267897e9492b75cd7b584f5893159afa7fb4609614e4a391ba04c0f4b3635241a917b546cc1dec6a15acc7e19cc1dfcd70eb0fa7e62f3861c9f","ssdeep":"192:D41qQB/Parw5/iQT2y6Mb9RC4mO6NHIKYSrYnwZa/E9uM9MAAkKFl:Ddw9AOb9RdzTTQO49DAku","tlshash":"8c22bf31eff0c40aed0514ac26ba148d66f01af66dc2946b38e46fc1e0d8b713a98ac0","first_seen":"2025-10-06T08:00:25.575013Z","last_seen":"2026-03-23T08:56:50.660913Z","times_seen":624,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"protrafficinspector.com/stats","fqdn":"protrafficinspector.com","domain":"protrafficinspector.com","tld":"com"},"ip":{"addr":"35.156.44.82","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://brookhaven-outfit-codes-matching-bestie.pages.dev/","date":"2026-03-08T14:09:37.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"statistics.it.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 18 Feb 2026 00:00:00 GMT","end":"Fri, 19 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"FF:73:E7:93:27:CB:4F:C3:84:85:D5:0E:06:52:E6:94:2D:2B:A5:C6","sha256":"09:27:72:13:57:CD:B4:25:3A:BE:58:AD:CC:13:D2:7D:D4:D4:F6:12:80:69:D9:B9:38:71:43:36:A9:56:FE:70"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: protrafficinspector.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://brookhaven-outfit-codes-matching-bestie.pages.dev/\r\nOrigin: https://brookhaven-outfit-codes-matching-bestie.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 08 Mar 2026 14:09:37 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\nserver: fasthttp\r\naccess-control-allow-origin: https://brookhaven-outfit-codes-matching-bestie.pages.dev\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nset-cookie: uid_id2=b13a9250-1c36-4ec9-9645-9c20c85d1545:2:1; expires=Wed, 05 Mar 2036 14:09:37 GMT; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"0e6481112cf923ce8288108736411427","sha1":"a6154d9d9df8bddfa95a4424ebe265ed3c16b4ac","sha256":"3bbb8ccdd7986fce5d1758fc3f775d8e56f57ef73c0e5492ee35ab3911dd925e","sha512":"f48305a7523a719b1cf3f4f49586611b8268886d0898df9a2e1dc991ee0e9587364cb2d229191531da6e1234f15bb965e800b4ed9f0cb09428d082aec771e971","ssdeep":"","tlshash":"6b9004015ff11d41031d4553045d155510100401c10c01040d37cf01d1d0f37fc53f50","first_seen":"2026-03-08T14:10:06.88115Z","last_seen":"2026-03-08T14:10:06.88115Z","times_seen":1,"resource_available":false,"data":null}},"time_used":284,"timings":{"blocked":132,"dns":2,"connect":21,"send":0,"wait":21,"receive":0,"ssl":103},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wayfarerorthodox.com/impr.gif?sid=H4sIAAAAAAAC_1RTPWwcRRvedfJ9DQWCIMropKRIJO48f_tHuoifAkgQCUqBKN75cwbv7W52du8uVzkYpaExBRIN0vo9Oy4ICBpqdKZDQvJ1V8QNFTVSCip0zkmGKd6feUaj55l53sf77WkwwBaWH35QTl2ew2Y0IL1r91yhy7Hv3brbo2RAbvTuuSIWN3qTVahHb1IuBuR6712jtstNRighlNDeO642tpxsnqHoqqcZHWRkINiARgIn9X9734boIUQ9Og1eRacXL_9hP0Gn5lgMf3zL-O2mrN54e9jm0JQ1jvTRx8V2UY4LHJ6Xtg7RFkfr01j6RRB8s4FlcbRWgOXoYKUApVsEG68_Q1kcrWmiHB2-YCpzNAVK_RKOR3M0-TE6mKMqd9HpkwBRabx1G4vhk1tlPYaHL1BYoYvg4vO_0I0XwcVnr2Ex_OFm7ia9O2XeNq4sPE5sh24yR7c1x6o9xmYaohsfo2o-R6d_Dzafv4_F8OC2z0t0enmV65ikEYn7DHTaFwaSfgpK9A0xJlKZIqkhZ0_k7BzBX8DWh9i6EFsbYluFONTLniCpUBR4bDOtEiJACG0kyVJGCGQqwVY9Qqf3UNU7WNU7uO2-OrlM0N9f_qxFpFLI4swkTIAyqWRAuY0J1UQAoZAImSjOU7DSKEkZixhYSRmhKqNSZNxCltIMiI1ilXBBUq4TJVQko8hkEKeKJDEITomwUSotp1lkOedcJTyOMs5AWUIjKWnCOVWacc5olqWcMyYTAwQEZ0QKZU0U01TyhEiFXofomwBHujvUuWe-e6Jz30q6zmydeTcrm619OCybLVMECPUe1ro7cNUDv4uquTCbWq9n5SqAbLoZSN3NnG42sH6wvEpoppRWaV8wqvoJl6wvV38Ux5G1JgViSbxfnQavrKwRfv3td7htlr1Y68hwnYDiieZcRiBVmqSU2BhUYjl616HzGwg-xKlbBO_Z61i5RXD58Z8o4Rh9fozKXUBo_4cwnnFCEO7PWERwWjy1rtAjp8xAlUPUZYdVcxGbh-F-fhpcmn109-YvZz799MtraNRvwXqhqjus6g4_c78GuJU_-ul21bihm8LKuHcaaMz_EdzJFYbKLYJLR7OzCRJ_X0JV7aCvzm_yZYCyCjB3AebmfB9kh_5fvTyv9_0XuFWHKPNwJvM6OJB5ne-hd8ue5YYpQtIkpjy1hnKhlY1SkekYCOcGG79w3-9e-ScAAP__c8T9YroEAAA=","fqdn":"wayfarerorthodox.com","domain":"wayfarerorthodox.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://brookhaven-outfit-codes-matching-bestie.pages.dev/","date":"2026-03-08T14:09:39.617Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"wayfarerorthodox.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 00:35:17 GMT","end":"Thu, 28 May 2026 00:35:16 GMT"},"fingerprint":{"sha1":"17:4A:E8:7A:8D:4C:22:69:70:30:C3:3D:6A:72:7A:68:E9:D2:3C:83","sha256":"0D:06:FA:1C:4D:9B:7A:47:4C:58:29:3B:40:85:C2:D1:F6:2B:AE:C5:66:2E:53:32:27:48:B1:F2:5C:2C:A7:A1"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1RTPWwcRRvedfJ9DQWCIMropKRIJO48f_tHuoifAkgQCUqBKN75cwbv7W52du8uVzkYpaExBRIN0vo9Oy4ICBpqdKZDQvJ1V8QNFTVSCip0zkmGKd6feUaj55l53sf77WkwwBaWH35QTl2ew2Y0IL1r91yhy7Hv3brbo2RAbvTuuSIWN3qTVahHb1IuBuR6712jtstNRighlNDeO642tpxsnqHoqqcZHWRkINiARgIn9X9734boIUQ9Og1eRacXL_9hP0Gn5lgMf3zL-O2mrN54e9jm0JQ1jvTRx8V2UY4LHJ6Xtg7RFkfr01j6RRB8s4FlcbRWgOXoYKUApVsEG68_Q1kcrWmiHB2-YCpzNAVK_RKOR3M0-TE6mKMqd9HpkwBRabx1G4vhk1tlPYaHL1BYoYvg4vO_0I0XwcVnr2Ex_OFm7ia9O2XeNq4sPE5sh24yR7c1x6o9xmYaohsfo2o-R6d_Dzafv4_F8OC2z0t0enmV65ikEYn7DHTaFwaSfgpK9A0xJlKZIqkhZ0_k7BzBX8DWh9i6EFsbYluFONTLniCpUBR4bDOtEiJACG0kyVJGCGQqwVY9Qqf3UNU7WNU7uO2-OrlM0N9f_qxFpFLI4swkTIAyqWRAuY0J1UQAoZAImSjOU7DSKEkZixhYSRmhKqNSZNxCltIMiI1ilXBBUq4TJVQko8hkEKeKJDEITomwUSotp1lkOedcJTyOMs5AWUIjKWnCOVWacc5olqWcMyYTAwQEZ0QKZU0U01TyhEiFXofomwBHujvUuWe-e6Jz30q6zmydeTcrm619OCybLVMECPUe1ro7cNUDv4uquTCbWq9n5SqAbLoZSN3NnG42sH6wvEpoppRWaV8wqvoJl6wvV38Ux5G1JgViSbxfnQavrKwRfv3td7htlr1Y68hwnYDiieZcRiBVmqSU2BhUYjl616HzGwg-xKlbBO_Z61i5RXD58Z8o4Rh9fozKXUBo_4cwnnFCEO7PWERwWjy1rtAjp8xAlUPUZYdVcxGbh-F-fhpcmn109-YvZz799MtraNRvwXqhqjus6g4_c78GuJU_-ul21bihm8LKuHcaaMz_EdzJFYbKLYJLR7OzCRJ_X0JV7aCvzm_yZYCyCjB3AebmfB9kh_5fvTyv9_0XuFWHKPNwJvM6OJB5ne-hd8ue5YYpQtIkpjy1hnKhlY1SkekYCOcGG79w3-9e-ScAAP__c8T9YroEAAA= HTTP/1.1\r\nHost: wayfarerorthodox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=3d608506-2ad8-4ea7-8ac4-e0ee5c9c08e0:3:1; ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.Rowj8BAyac_WvyJPqkHMgKsWBzJEsqsuIbwoq1KhNyQ; pdhtkv=true; uncs=1; pdhtkv5=true; uncs5=1; u_pl26582443=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sun, 08 Mar 2026 14:09:39 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\nvary: Origin\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 3\r\nHost: wayfarerorthodox.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 712b6e3b0af42f2cc4ae3078ece5cf1a\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T22:47:04.158538Z","times_seen":13349726,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/interstitial/games/lg/1/img/1.mp4","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://brookhaven-outfit-codes-matching-bestie.pages.dev/","date":"2026-03-08T14:09:40.694Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Feb 2026 22:50:15 GMT","end":"Sat, 23 May 2026 23:48:46 GMT"},"fingerprint":{"sha1":"E0:64:EB:B0:39:B0:1B:31:05:CE:A0:93:C8:74:E7:A4:DE:D1:B3:77","sha256":"6D:BC:A3:C7:8F:67:2C:FE:E1:7A:88:EA:6C:8E:07:D4:1D:1F:CA:FD:54:30:02:80:22:B2:74:B5:95:C4:99:75"}}},"request":{"raw":"GET /sb/interstitial/games/lg/1/img/1.mp4 HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Sun, 08 Mar 2026 14:09:40 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 353816\r\nserver: cloudflare\r\nlast-modified: Tue, 26 Aug 2025 11:03:42 GMT\r\npriority: u=4,i=?0\r\netag: \"68ad948e-56618\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nage: 3441889\r\ncontent-range: bytes 0-353815/353816\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F9NTZ3GJeTeGIx5ihZPmzruUPqD1gaI7uiwJB9GWAbqPrhV4ViidyJ2GH8xtTkLL%2F0%2FRhwnsbIYwvvCQH82v6JE%2FEckqysFw%2BD%2F%2Bj3ytD68%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d926b455d00349b-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":353816,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"d265e789885bd3cc767c19f4af267cd2","sha1":"f6ea6312fc94da46dd1b42ceb9733fedb2fab97f","sha256":"c0529b144aa2bc9c8e3f85898ae4fd5e73419182832aeb1a9ace48e6c91bad20","sha512":"b076a4e617091e7a8d07ef4d777272fa0cc4bef1894c86826ae41440d026660e71407fa93667f65d4bcc28fc55831dc539f0c317582cf6693375a76b4b3b07b0","ssdeep":"6144:yXJdkJ06JvQJ0YJGFJpXJipJDrJhaJHPJR0JKYJ/VJibJ09JM2JHQJAGJCjJREJe:MIJkF9WsGM6Uyw","tlshash":"9674ad46ed720c2af59ef2a0e5aacbc1c793176b90c52bc7b0ccb4a80b18954971f57d","first_seen":"2025-10-06T08:00:25.582366Z","last_seen":"2026-03-23T08:56:50.63208Z","times_seen":643,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fnotifications%2Futility%2Ftiktok%2Fmulti%2Fimage-row%2F4%2Fjs%2Fscript.js\u0026l=10050\u0026fd=490","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.127.243","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://brookhaven-outfit-codes-matching-bestie.pages.dev/","date":"2026-03-08T14:09:42.635Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 22:53:11 GMT","end":"Sun, 24 May 2026 22:53:10 GMT"},"fingerprint":{"sha1":"ED:51:C6:32:50:BE:DC:21:A3:AD:D6:A1:DB:98:F0:08:AD:BF:E7:A2","sha256":"56:84:BB:23:CE:A6:AD:BA:2E:8A:D0:F9:92:4F:17:BF:64:9A:7D:1C:AC:77:10:4A:32:94:E4:15:91:57:B1:A8"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fnotifications%2Futility%2Ftiktok%2Fmulti%2Fimage-row%2F4%2Fjs%2Fscript.js\u0026l=10050\u0026fd=490 HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://brookhaven-outfit-codes-matching-bestie.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=b13a9250-1c36-4ec9-9645-9c20c85d1545:2:1; pdhtkv=true; uncs=2; pdhtkv29=true; uncs29=2; u_pl26582471=1; u_pl28216845=1; iprc_l+a6ad9579d24c975cc6f619d849db19fd=6429110; iprc_l:6429110=3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sun, 08 Mar 2026 14:09:42 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T22:47:04.158538Z","times_seen":13349726,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":99,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/notifications/utility/tiktok/multi/image-row/4/img/2.mp4","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://brookhaven-outfit-codes-matching-bestie.pages.dev/","date":"2026-03-08T14:09:42.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Feb 2026 22:50:15 GMT","end":"Sat, 23 May 2026 23:48:46 GMT"},"fingerprint":{"sha1":"E0:64:EB:B0:39:B0:1B:31:05:CE:A0:93:C8:74:E7:A4:DE:D1:B3:77","sha256":"6D:BC:A3:C7:8F:67:2C:FE:E1:7A:88:EA:6C:8E:07:D4:1D:1F:CA:FD:54:30:02:80:22:B2:74:B5:95:C4:99:75"}}},"request":{"raw":"GET /sb/notifications/utility/tiktok/multi/image-row/4/img/2.mp4 HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Sun, 08 Mar 2026 14:09:42 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 964920\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:22:09 GMT\r\npriority: u=4,i=?0\r\netag: \"65aa8591-eb938\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nage: 1235420\r\ncontent-range: bytes 0-964919/964920\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RMec%2FURIhS%2F4dbwDoxJzXAMGo8RyYA4S0GCE8e%2Bfk2owcH5iHz2A7ChMT%2B7QPwPUopdmVOS%2FBd7fAPvlP0pZOF8DZVghbgLMkL8DUMabvrg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d926b51be61349b-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":964920,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"da4e8f4e8ab4a2bf7e1013cff941a4d6","sha1":"115e3bc25cca616302f7c3c89d88faf400639109","sha256":"42639a59343cb7d05fbdac63014e5fa5591a7f59c54ed5733d610f6ce037286c","sha512":"d03566d83b9619839d994a27fdc06c28c69824de75cf721b57f210e7798222252c73e5a3614ed91d3e3308e0b8885d5f728e27a1888e79cd941cd58afe7cf3e4","ssdeep":"24576:8tjd01e50rvOLA5/Uv8AbY6g0T23rLUEn0gLP413Wy:8tjdYrv84/TmY6g823Vn0gLi3j","tlshash":"3c2501e159f112b7e1311f7a40ebe087098c666de0b14f08760dae76cca55dc8ac79fa","first_seen":"2024-12-19T15:18:06.248038Z","last_seen":"2026-04-03T18:56:21.856864Z","times_seen":120,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":203,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/pixel/sbs?c=1","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.127.243","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://brookhaven-outfit-codes-matching-bestie.pages.dev/","date":"2026-03-08T14:09:43.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 22:53:11 GMT","end":"Sun, 24 May 2026 22:53:10 GMT"},"fingerprint":{"sha1":"ED:51:C6:32:50:BE:DC:21:A3:AD:D6:A1:DB:98:F0:08:AD:BF:E7:A2","sha256":"56:84:BB:23:CE:A6:AD:BA:2E:8A:D0:F9:92:4F:17:BF:64:9A:7D:1C:AC:77:10:4A:32:94:E4:15:91:57:B1:A8"}}},"request":{"raw":"GET /pixel/sbs?c=1 HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://brookhaven-outfit-codes-matching-bestie.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=b13a9250-1c36-4ec9-9645-9c20c85d1545:2:1; pdhtkv=true; uncs=2; pdhtkv29=true; uncs29=2; u_pl26582471=1; u_pl28216845=1; iprc_l+a6ad9579d24c975cc6f619d849db19fd=6429110; iprc_l:6429110=3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sun, 08 Mar 2026 14:09:43 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T22:47:04.158538Z","times_seen":13349726,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://brookhaven-outfit-codes-matching-bestie.pages.dev/","date":"2026-03-08T14:09:37.368Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"preferencenail.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 01:24:35 GMT","end":"Thu, 28 May 2026 01:24:34 GMT"},"fingerprint":{"sha1":"66:45:2B:BB:A2:6D:D3:A2:B6:16:36:65:94:BA:4A:C6:5E:05:66:09","sha256":"A4:2E:A7:56:DB:44:FF:55:9A:FA:4D:EC:2A:78:CB:C5:02:CD:CF:B2:FB:A7:A7:75:77:EC:01:DB:19:71:C0:77"}}},"request":{"raw":"GET /sfp.js HTTP/1.1\r\nHost: preferencenail.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://brookhaven-outfit-codes-matching-bestie.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sun, 08 Mar 2026 14:09:37 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nContent-Length: 32181\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nVary: Accept-Encoding\r\nHost: preferencenail.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 7d613eaafc7c85c793c5f0947fb9c037\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":85379,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-04-04T22:35:18.707466Z","times_seen":13232,"resource_available":true,"data":null}},"time_used":176,"timings":{"blocked":69,"dns":1,"connect":17,"send":0,"wait":20,"receive":18,"ssl":47},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/interstitial/games/lg/1/js/jquery-3.2.1.min.js","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://brookhaven-outfit-codes-matching-bestie.pages.dev/","date":"2026-03-08T14:09:40.687Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Feb 2026 22:50:15 GMT","end":"Sat, 23 May 2026 23:48:46 GMT"},"fingerprint":{"sha1":"E0:64:EB:B0:39:B0:1B:31:05:CE:A0:93:C8:74:E7:A4:DE:D1:B3:77","sha256":"6D:BC:A3:C7:8F:67:2C:FE:E1:7A:88:EA:6C:8E:07:D4:1D:1F:CA:FD:54:30:02:80:22:B2:74:B5:95:C4:99:75"}}},"request":{"raw":"GET /sb/interstitial/games/lg/1/js/jquery-3.2.1.min.js HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 08 Mar 2026 14:09:40 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 28 Aug 2025 12:56:52 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nage: 2721597\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VNh2rZkYCfbN2h5%2BfypFoNQUZS03Q572P%2F8yY4A0003UgYC5TgEhq7Bwi7AtkJkz5z%2BAd3XC1qmeTCqWwnnFJvYBQAhfF2HRGb845wcP9vs%3D\"}]}\r\netag: W/\"68b05214-1fa27\"\r\ncontent-encoding: br\r\ncf-ray: 9d926b454cf7349b-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":129575,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (745)","md5":"e59a2e92b4756cc61e2e4f3082ee1360","sha1":"c96d002f642bd85adf1e5326bcc0679f9c3ee001","sha256":"42173a3ca70c715370ce99071f892ad61d3fee33dbf15426fa7eee549a4afca2","sha512":"94ab9f4e87fa268a76679ac3484952b84332bb01efb3bda37ec883310eea2536c7b5b50370553571d57beed05179749ba0bef6d53306896f2018ebd037c682a7","ssdeep":"1536:hLkR/QpfICJ5vJBQT6bTGw9S5HY6wm482+a02Yo+eKcGbp7E0bJy+jhklK4dy8Nj:hLkRNV48Ba02YowbCuyMSxtZxc9MuCx","tlshash":"8ac3518976e621319207f07a8d6fcc09b275544f1a8ded057d4c82a5af1883c97bafec","first_seen":"2023-03-08T15:21:31Z","last_seen":"2026-04-04T01:42:36.078218Z","times_seen":2054,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":14,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/interstitial/games/lg/1/img/3_name.png","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://brookhaven-outfit-codes-matching-bestie.pages.dev/","date":"2026-03-08T14:09:41.116Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Feb 2026 22:50:15 GMT","end":"Sat, 23 May 2026 23:48:46 GMT"},"fingerprint":{"sha1":"E0:64:EB:B0:39:B0:1B:31:05:CE:A0:93:C8:74:E7:A4:DE:D1:B3:77","sha256":"6D:BC:A3:C7:8F:67:2C:FE:E1:7A:88:EA:6C:8E:07:D4:1D:1F:CA:FD:54:30:02:80:22:B2:74:B5:95:C4:99:75"}}},"request":{"raw":"GET /sb/interstitial/games/lg/1/img/3_name.png HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 08 Mar 2026 14:09:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 4350\r\nserver: cloudflare\r\nlast-modified: Tue, 26 Aug 2025 11:03:43 GMT\r\npriority: u=4,i=?0\r\netag: \"68ad948f-10fe\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\naccept-ranges: bytes\r\nage: 3441889\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F9O7h0GrwTAnSdFt2UEBHe9y5DfPEk1xOVbYOu5LjoocMUc4PI0XQERdDO1RUpz%2FLXZ%2BVLgns5HMAA5WwJm9eA6tGDhSm4x4lULtkuaEtGI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d926b47ea45349b-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4350,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 332 x 44, 8-bit colormap, non-interlaced","md5":"439c6076371749a5ac14affbb0eccd62","sha1":"d6d6641e7523fda82758865bf2e91ffc85805a98","sha256":"de2b2dee616014fb558a337e64e20655f83a66afcefc5b23f2b957a9ad04d3bc","sha512":"3d640a7a96dd1bfa6f129158e113c10efe4eac92dbb1bd2be005be71fc96894712d7c92f766f2297114a60b355bcca194bdf73802890930a7f3631e8cc202404","ssdeep":"96:7AxMKaOQf9TUsqzX3EV1ECbG/FQcN1/Y7ybfyUPP/STF5bm1oXBQ:yNaXl+bEHEwG/ucbhbfyUPIZmaXBQ","tlshash":"e7919fefccc9f8c099ca5c5723e907a9f33f8954e9003990d7d545279d8505218d8a1a","first_seen":"2025-10-06T08:00:25.587542Z","last_seen":"2026-03-23T08:56:50.633763Z","times_seen":625,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/notifications/utility/tiktok/multi/image-row/4/js/script.js","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://brookhaven-outfit-codes-matching-bestie.pages.dev/","date":"2026-03-08T14:09:42.128Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Feb 2026 22:50:15 GMT","end":"Sat, 23 May 2026 23:48:46 GMT"},"fingerprint":{"sha1":"E0:64:EB:B0:39:B0:1B:31:05:CE:A0:93:C8:74:E7:A4:DE:D1:B3:77","sha256":"6D:BC:A3:C7:8F:67:2C:FE:E1:7A:88:EA:6C:8E:07:D4:1D:1F:CA:FD:54:30:02:80:22:B2:74:B5:95:C4:99:75"}}},"request":{"raw":"GET /sb/notifications/utility/tiktok/multi/image-row/4/js/script.js HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://brookhaven-outfit-codes-matching-bestie.pages.dev/\r\nOrigin: https://brookhaven-outfit-codes-matching-bestie.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 08 Mar 2026 14:09:42 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 27 Jun 2025 13:37:33 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vStG70N1WogikqMjHqetANuuTAk%2Bt6FlPsScUJ98rPjPEwhE2UlZSeIP5NLo2c5a5x2A9iVH%2FGjWMl19Ml%2Brdwj9rZUjqpwF5l3GC1YT5wE%3D\"}]}\r\netag: W/\"685e9e9d-2880\"\r\ncontent-encoding: br\r\ncf-ray: 9d926b4e4ec2349b-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10368,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (481)","md5":"865a68e5e9811e9454863f775c6ee8eb","sha1":"ccb19b4070ea9c18c4fcf7dcd4996d0997401066","sha256":"376405828c939d03dc11dd0c513dafb00a8c865c4005214dac68dc666f6e0dc3","sha512":"367cecc2119df88dda0156821938a9f1f449f4b39cc383114c28a10a75c21791f922b8174ebedf8328923027bf8dbdf271b665eacf4b0551cb208b1860d6ab90","ssdeep":"192:kipi1589KHKpK2K/Li3crcYgJaGAGjRGbGJ4vGepGwVGeGwGGsRzGpToc:kipi15aKHKpK2K/LiD1rjwy5eow8R7GH","tlshash":"4022d00915be3992b687c1bf3e3b4682f237946b9c2c2bc077c98255594c526a73339f","first_seen":"2025-06-30T16:39:54.999092Z","last_seen":"2026-04-03T18:56:21.872215Z","times_seen":56,"resource_available":false,"data":null}},"time_used":484,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":484,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"adxpy.pages.dev/magic.js","fqdn":"adxpy.pages.dev","domain":"adxpy.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://brookhaven-outfit-codes-matching-bestie.pages.dev/","date":"2026-03-08T14:09:36.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adxpy.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 23:59:16 GMT","end":"Wed, 06 May 2026 00:57:55 GMT"},"fingerprint":{"sha1":"43:02:20:65:8A:13:63:9C:3E:A6:CF:BC:13:A1:4D:89:B4:AE:4D:E8","sha256":"93:76:A5:FC:14:19:A2:25:5A:48:98:9A:34:CB:E8:16:20:FB:5B:8D:F3:80:B0:E6:4D:13:B4:88:C8:E3:14:6E"}}},"request":{"raw":"GET /magic.js HTTP/1.1\r\nHost: adxpy.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://brookhaven-outfit-codes-matching-bestie.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 08 Mar 2026 14:09:36 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mdoO%2BjQ8h7lAXGjqNiQ4yliwImFMGXqMR5pgiSBsc8Fu%2Fyelb%2FzQ6kcJM8sMlGn827yCmR51%2FPzg3F0uzZmcSDZTEneolU1uMwXrXqkGjQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"c49d59185af245830cb91e4818c56238\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d926b2cbd222382-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":671,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"9bcbb02a6bf94ae8762ddcda5d1c80d3","sha1":"fade830681bb5b7b138db5482e7a495c1c9b296a","sha256":"b26277e44f2fe29283a55a632166f8a45dd1407a0970c13e08287406f94a0772","sha512":"54914b0f4d7625f4e40e13b11bb2bfd47c87dc6a14714c427c48c75e955980826d6605abbac7b3ca6c043356f1b91618b6f16abaf6be339be38d8ffa825e71e5","ssdeep":"","tlshash":"c101fe6e229200a84d7a509803a3fa0cfda832577160c0e1bacedb602f35f20419e4d8","first_seen":"2025-12-08T23:25:47.209165Z","last_seen":"2026-04-04T18:45:43.317503Z","times_seen":265,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"immigrationacre.com/c6/4a/a1/c64aa11db612c16c65959b87a44dac81.js","fqdn":"immigrationacre.com","domain":"immigrationacre.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://brookhaven-outfit-codes-matching-bestie.pages.dev/","date":"2026-03-08T14:09:36.842Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"immigrationacre.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 21 Jan 2026 13:05:03 GMT","end":"Tue, 21 Apr 2026 13:05:02 GMT"},"fingerprint":{"sha1":"15:FA:AD:CC:E2:4C:49:AA:36:E4:D7:92:A2:58:1A:3B:88:4D:4C:A7","sha256":"D4:52:60:EF:97:91:FA:80:40:92:C6:44:5D:A4:08:35:F9:9C:82:F0:92:0E:FA:13:62:59:74:D4:C2:66:5D:3C"}}},"request":{"raw":"GET /c6/4a/a1/c64aa11db612c16c65959b87a44dac81.js HTTP/1.1\r\nHost: immigrationacre.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://brookhaven-outfit-codes-matching-bestie.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sun, 08 Mar 2026 14:09:37 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 34139\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 2\r\nHost: immigrationacre.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: c672ae0c2acdde89c0eec04facc67a57\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":93746,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"708ebb544919b8311f2129ab0421e76a","sha1":"9dc9584ecf6b084251e8459a1df0e35414365c71","sha256":"57aa640d8866311dc52177ab667562939c5d4498d237462e34bf19a6de344a49","sha512":"54a1f01af29f9e996c8cdb7c3ec7daddf83b9c9cd904614d2011846bf08de7778c5839bc1054a54a5cbec80f777f80bf8581aac82c94aa22829a9b1a24ca5a3b","ssdeep":"1536:xgjPlj5yQtLbViYwqiyp0f5CCK+LTWUI+AIRWK6DoZQgCkMGNgVZ/QABgPy6skWO:ePtnpjhpMKVD/sK6sk8wayC8","tlshash":"3e93b5cc7b51b1ed46bb3837112f591bf43ddd421098e8a8e253b0ec6e69b1de832694","first_seen":"2026-03-07T22:25:51.683428Z","last_seen":"2026-03-12T06:03:11.933927Z","times_seen":25,"resource_available":true,"data":null}},"time_used":778,"timings":{"blocked":290,"dns":1,"connect":93,"send":0,"wait":97,"receive":98,"ssl":194},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"immigrationacre.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"protrafficinspector.com/stats","fqdn":"protrafficinspector.com","domain":"protrafficinspector.com","tld":"com"},"ip":{"addr":"35.156.44.82","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://brookhaven-outfit-codes-matching-bestie.pages.dev/","date":"2026-03-08T14:09:37.440Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"statistics.it.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 18 Feb 2026 00:00:00 GMT","end":"Fri, 19 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"FF:73:E7:93:27:CB:4F:C3:84:85:D5:0E:06:52:E6:94:2D:2B:A5:C6","sha256":"09:27:72:13:57:CD:B4:25:3A:BE:58:AD:CC:13:D2:7D:D4:D4:F6:12:80:69:D9:B9:38:71:43:36:A9:56:FE:70"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: protrafficinspector.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://brookhaven-outfit-codes-matching-bestie.pages.dev/\r\nOrigin: https://brookhaven-outfit-codes-matching-bestie.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 08 Mar 2026 14:09:37 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\nserver: fasthttp\r\naccess-control-allow-origin: https://brookhaven-outfit-codes-matching-bestie.pages.dev\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nset-cookie: uid_id2=3d608506-2ad8-4ea7-8ac4-e0ee5c9c08e0:3:1; expires=Wed, 05 Mar 2036 14:09:37 GMT; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"331ab673c6e1b01901fd2982a46538df","sha1":"15011ceb2d78f465d9b2622abc155835b9979bdb","sha256":"0e9ed298ce0f6d7d0e1baf198e84037b38100abc16a8bca60517e7dbe593144d","sha512":"6ed15a7abfa9c5c489bbc3d2c1442cab270e5a2d19bc907d95bf73fbb035a91240bb27253ecd77dd2ae90a86f02a8e85aa211ea6671cbb09e6f291fc2d68459b","ssdeep":"","tlshash":"70900417010307c0ddc3c5d50cc344511d7003554c3007410c035153754317d1150d05","first_seen":"2026-03-08T14:10:06.885039Z","last_seen":"2026-03-08T14:10:06.885039Z","times_seen":1,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":78,"dns":9,"connect":21,"send":0,"wait":21,"receive":0,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.show-sb.com%2Fsb%2Finterstitial%2Fgames%2Flg%2F1%2Findex.html\u0026l=2112\u0026fd=171","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://brookhaven-outfit-codes-matching-bestie.pages.dev/","date":"2026-03-08T14:09:40.561Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 22:53:11 GMT","end":"Sun, 24 May 2026 22:53:10 GMT"},"fingerprint":{"sha1":"ED:51:C6:32:50:BE:DC:21:A3:AD:D6:A1:DB:98:F0:08:AD:BF:E7:A2","sha256":"56:84:BB:23:CE:A6:AD:BA:2E:8A:D0:F9:92:4F:17:BF:64:9A:7D:1C:AC:77:10:4A:32:94:E4:15:91:57:B1:A8"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.show-sb.com%2Fsb%2Finterstitial%2Fgames%2Flg%2F1%2Findex.html\u0026l=2112\u0026fd=171 HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://brookhaven-outfit-codes-matching-bestie.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=b13a9250-1c36-4ec9-9645-9c20c85d1545:2:1; pdhtkv=true; uncs=2; pdhtkv29=true; uncs29=2; u_pl26582471=1; u_pl28216845=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sun, 08 Mar 2026 14:09:40 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T22:47:04.158538Z","times_seen":13349726,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"realizationnewestfangs.com/impr.gif?sid=H4sIAAAAAAAC_1RTP2wcxRvddaJf8ysi_ogy2iICIuXO8293Z0kXQSgAO5CgFFTz1xm8t7vZ2b27nITkYJQOyRRINEjr7-y4CQgaanSmAgnJR3UScUNFQ4OUGp1zkmGK7_vevNHovdGbR_vtadCHVixuvVdOXJ6L9biPotfvukKXIx9t3Ikw6qPr0V1XJOx6NF6WevgGpqyPrkZvG7VdrhOEEcIIRzddbWw5Xj9jwVVPMtzPUJ-RPo4ZjOv_Yt-G4EUIengavAhOzy_9YT8Cp2ZQDL570_jtpqyuvTVoc9GUNQz10YfFdlGOChicj7YOwRZHq9NQ-nkQfLUGZXG0cgDl8GDpAKSbB2uvPAVZHK1kghwePlcqczAFSP1_GA1nYPJjcGIGqtwFp08CAKVhYxOKweONsh6JB89ZsWTnwcVnf4MbzYOLT1-GYvDtjdyNo9tl3jauLDyMbQduPAO3NYOqPYZmEoIbHYNqPgWnfw3Wn70LxeBg0-clOL24QnWCeIySHhGa95gRaY8LxXoGGROrTCFu0NkTOTsD4S9A60NoXQitDaGtQhjoRcQQZwoLmthMqxQxwZg2EmWcICQylUKrHoLTe6DqHajqHdh2X5xcRuDvLX5QCY5jSrMs5jTJKGdpjDNJM6vTVGqaEcqE4TE2maWMcWlRyg0lCWE0wQxzigXmKiGEJ0YgLKSKCVUCJVhqkSQ01sjyhNkMcSwo0tQyJTQjibGSCRRbYrBKFUGJQVmaEIo0QiZhnFGCYqRVhiWlCRdKYxUzKzFWqQSv18A38yB8_xMY6u5Q55747rHOfSvxqpNVp920bLb2xWHZbJkiAFHvQa27A1fd97ugmgvTifV6Wi6LkE03FVJ3U6ebNajvL64gnCmlFe8xrVkvJWnW4xhlvVRTxJlWjKl4vzoNXljGI_zy6wPYNosoJpZgIpXIYppSYXRqhKaEZhwzqmUK3nXg_BoIH8LEzYN37FWo3Dy4_OhPkOIYfH4MyoUg2gjEaEoJAnEPYgST4ol1hR46ZfqqHIAuO6iai9A8CPfz0-Cl6Qd3bvx4FtVbN18Do34JVgtU3UFVd_Cx-ymArfzh95tV4wZuIpbZvd2IxvwPhDsxP4Ny8-DSX7-ffaJrv30OqtoBX53f5MsAZBVA7gLIzfm-kB34f2F5Pu_7z2CrDkHm4VTmdXAg8zrfA-8WkaWGKIR4mmDKrcGUaWVjzjKdCESpgcbP3Te7r_4TAAD__xJCUv29BAAA","fqdn":"realizationnewestfangs.com","domain":"realizationnewestfangs.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://brookhaven-outfit-codes-matching-bestie.pages.dev/","date":"2026-03-08T14:09:42.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"realizationnewestfangs.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 23:39:43 GMT","end":"Wed, 27 May 2026 23:39:42 GMT"},"fingerprint":{"sha1":"2F:D0:7E:69:4A:D0:06:61:89:AF:78:09:0A:5A:F1:7B:F9:4A:B7:96","sha256":"24:55:49:F2:2C:E7:D7:3D:E6:6E:54:6C:64:30:D7:3C:F6:39:2F:A0:A7:A2:AA:25:93:8D:6B:C2:15:40:66:C2"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1RTP2wcxRvddaJf8ysi_ogy2iICIuXO8293Z0kXQSgAO5CgFFTz1xm8t7vZ2b27nITkYJQOyRRINEjr7-y4CQgaanSmAgnJR3UScUNFQ4OUGp1zkmGK7_vevNHovdGbR_vtadCHVixuvVdOXJ6L9biPotfvukKXIx9t3Ikw6qPr0V1XJOx6NF6WevgGpqyPrkZvG7VdrhOEEcIIRzddbWw5Xj9jwVVPMtzPUJ-RPo4ZjOv_Yt-G4EUIengavAhOzy_9YT8Cp2ZQDL570_jtpqyuvTVoc9GUNQz10YfFdlGOChicj7YOwRZHq9NQ-nkQfLUGZXG0cgDl8GDpAKSbB2uvPAVZHK1kghwePlcqczAFSP1_GA1nYPJjcGIGqtwFp08CAKVhYxOKweONsh6JB89ZsWTnwcVnf4MbzYOLT1-GYvDtjdyNo9tl3jauLDyMbQduPAO3NYOqPYZmEoIbHYNqPgWnfw3Wn70LxeBg0-clOL24QnWCeIySHhGa95gRaY8LxXoGGROrTCFu0NkTOTsD4S9A60NoXQitDaGtQhjoRcQQZwoLmthMqxQxwZg2EmWcICQylUKrHoLTe6DqHajqHdh2X5xcRuDvLX5QCY5jSrMs5jTJKGdpjDNJM6vTVGqaEcqE4TE2maWMcWlRyg0lCWE0wQxzigXmKiGEJ0YgLKSKCVUCJVhqkSQ01sjyhNkMcSwo0tQyJTQjibGSCRRbYrBKFUGJQVmaEIo0QiZhnFGCYqRVhiWlCRdKYxUzKzFWqQSv18A38yB8_xMY6u5Q55747rHOfSvxqpNVp920bLb2xWHZbJkiAFHvQa27A1fd97ugmgvTifV6Wi6LkE03FVJ3U6ebNajvL64gnCmlFe8xrVkvJWnW4xhlvVRTxJlWjKl4vzoNXljGI_zy6wPYNosoJpZgIpXIYppSYXRqhKaEZhwzqmUK3nXg_BoIH8LEzYN37FWo3Dy4_OhPkOIYfH4MyoUg2gjEaEoJAnEPYgST4ol1hR46ZfqqHIAuO6iai9A8CPfz0-Cl6Qd3bvx4FtVbN18Do34JVgtU3UFVd_Cx-ymArfzh95tV4wZuIpbZvd2IxvwPhDsxP4Ny8-DSX7-ffaJrv30OqtoBX53f5MsAZBVA7gLIzfm-kB34f2F5Pu_7z2CrDkHm4VTmdXAg8zrfA-8WkaWGKIR4mmDKrcGUaWVjzjKdCESpgcbP3Te7r_4TAAD__xJCUv29BAAA HTTP/1.1\r\nHost: realizationnewestfangs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=3d608506-2ad8-4ea7-8ac4-e0ee5c9c08e0:3:1; ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.qSoDFdRftJaJU22yZofr0UAxfZTjfY68qUUbiv0Qh8A; pdhtkv=true; uncs=1; pdhtkv32=true; uncs32=1; u_pl26582436=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sun, 08 Mar 2026 14:09:42 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 7\r\nHost: realizationnewestfangs.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 9a85f76937b517da9e48b8b456d3c22c\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T22:47:04.158538Z","times_seen":13349726,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://brookhaven-outfit-codes-matching-bestie.pages.dev/","date":"2026-03-08T14:09:43.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://brookhaven-outfit-codes-matching-bestie.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 08 Mar 2026 05:12:01 GMT\r\nexpires: Mon, 08 Mar 2027 05:12:01 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 32262\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-04-04T22:47:39.069867Z","times_seen":62927,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":21,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tse1.mm.bing.net/th?q=brookhaven%20outfit%20codes%20matching%20bestie\u0026w=720\u0026h=405\u0026c=5\u0026rs=1\u0026p=0","fqdn":"tse1.mm.bing.net","domain":"bing.net","tld":"net"},"ip":{"addr":"150.171.28.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://brookhaven-outfit-codes-matching-bestie.pages.dev/","date":"2026-03-08T14:09:35.515Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mm.bing.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 08","organization":"Microsoft Corporation"},"validity":{"start":"Fri, 16 Jan 2026 20:53:59 GMT","end":"Wed, 15 Jul 2026 20:53:59 GMT"},"fingerprint":{"sha1":"43:D4:A4:95:21:DC:0D:A3:06:7E:03:A8:B5:A1:A3:CB:B6:7E:0E:E2","sha256":"D8:DF:DA:05:F7:F0:D9:76:56:FE:7F:5C:2C:B4:67:32:65:D8:35:54:65:58:31:A8:57:CF:6C:81:84:D2:C5:BF"}}},"request":{"raw":"GET /th?q=brookhaven%20outfit%20codes%20matching%20bestie\u0026w=720\u0026h=405\u0026c=5\u0026rs=1\u0026p=0 HTTP/1.1\r\nHost: tse1.mm.bing.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://brookhaven-outfit-codes-matching-bestie.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=5184000\r\ncontent-length: 55110\r\ncontent-type: image/jpeg\r\nx-cache: TCP_MISS\r\nhttpcacheability: 4\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ntiming-allow-origin: *\r\nreport-to: {\"group\":\"network-errors\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://aefd.nelreports.net/api/report?cat=bingth\u0026ndcParam=nadatio\"}]}\r\nnel: {\"report_to\":\"network-errors\",\"max_age\":604800,\"success_fraction\":0.001,\"failure_fraction\":1.0}\r\nx-powered-by: ASP.NET\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nx-msedge-ref: Ref A: D30247489B754113B9501431A75258AB Ref B: OSL231050214023 Ref C: 2026-03-08T14:09:35Z\r\ndate: Sun, 08 Mar 2026 14:09:35 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":55110,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 720x405, components 3","md5":"7aa9ad6876ccfe0f95fff3b8b3dd8179","sha1":"10ebfb34b38cba7b0bb6177afbc5c43133141d7e","sha256":"6444f22d2b9504dfb12bb3908cdfcf97b7ed2f896c24dd767f6f243a703a8153","sha512":"f4b96b47cd75a35890f6733dec67f3861983607356bb2220443c3338b5c6d70c064b52d54e64172ec840fbd539074482bed0978ba5055019f7c92222acf4a3b8","ssdeep":"1536:hPVI57vXKohEutkBYQTB+r/NaH2eFTByx/sI64:M57vXKqTkBY0kIWeAs+","tlshash":"c733029e7d608c8ff74919b0d7db6774992cf23236740d5c3e28311960a6a5bbc40ade","first_seen":"2026-03-08T14:10:06.885918Z","last_seen":"2026-03-08T14:10:06.885918Z","times_seen":1,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":27,"dns":1,"connect":2,"send":0,"wait":58,"receive":8,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"brookhaven-outfit-codes-matching-bestie.pages.dev/favicon-96x96.png","fqdn":"brookhaven-outfit-codes-matching-bestie.pages.dev","domain":"brookhaven-outfit-codes-matching-bestie.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://brookhaven-outfit-codes-matching-bestie.pages.dev/","date":"2026-03-08T14:09:36.747Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brookhaven-outfit-codes-matching-bestie.pages.dev","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 23:58:01 GMT","end":"Sun, 24 May 2026 23:58:00 GMT"},"fingerprint":{"sha1":"00:56:F0:B1:41:10:7A:02:49:FD:35:8F:47:CC:1A:09:17:F2:EB:57","sha256":"F7:E0:6C:BC:03:E6:A8:5E:F2:3D:8A:6C:DB:C0:FE:22:75:56:C0:D4:94:B4:2C:0E:4B:BB:77:18:EE:57:A8:B1"}}},"request":{"raw":"GET /favicon-96x96.png HTTP/1.1\r\nHost: brookhaven-outfit-codes-matching-bestie.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://brookhaven-outfit-codes-matching-bestie.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 08 Mar 2026 14:09:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 3415\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"207249c5b01c104202965011f95037dc\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q0ok6yRPB5z3u088V%2BfQgazi6l8AOxR6B0iO0KJy88isUEfP7ZMmIPfvLNVoud6c3nOgBJNsBPN4M9Vte0iNVCrp%2BkL626Dh%2B3CGBRMO7VQtT0wi0JkBRG8Lf%2B%2FwOPHsepURKMGBM0SjyQkuvuMqxKs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\ncf-ray: 9d926b2c9aaba0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3415,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"18432ea15c0c7b7ef50ee1b42b9b29e3","sha1":"2b656e7a76d7a8d11ff020bd8bac15c6780c39ec","sha256":"27a2d2727b2c93679c945f8107ce5bd270d8dfc426c7abca1e975e46ac0d78e9","sha512":"0d9dfdd5af753545acac4819105170d4358fa8a619ee99f9754eaec45b48cbc8875409744d35d10676843b635bf1b065c0129e1ffdac68d921a39bd7e4632f87","ssdeep":"","tlshash":"0d615be0818b9c3abc969201820ac603fb35a0ce0e5a1a7e54f717c87f133bbb52c157","first_seen":"2025-10-29T04:02:15.906591Z","last_seen":"2026-04-03T04:11:11.13866Z","times_seen":297,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://brookhaven-outfit-codes-matching-bestie.pages.dev/","date":"2026-03-08T14:09:39.539Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"preferencenail.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 01:24:35 GMT","end":"Thu, 28 May 2026 01:24:34 GMT"},"fingerprint":{"sha1":"66:45:2B:BB:A2:6D:D3:A2:B6:16:36:65:94:BA:4A:C6:5E:05:66:09","sha256":"A4:2E:A7:56:DB:44:FF:55:9A:FA:4D:EC:2A:78:CB:C5:02:CD:CF:B2:FB:A7:A7:75:77:EC:01:DB:19:71:C0:77"}}},"request":{"raw":"GET /sfp.js HTTP/1.1\r\nHost: preferencenail.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://brookhaven-outfit-codes-matching-bestie.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sun, 08 Mar 2026 14:09:39 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nContent-Length: 32181\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nVary: Accept-Encoding\r\nHost: preferencenail.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 8ed8bb24e219c4c245fdcb8bedb0faac\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":85379,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-04-04T22:35:18.707466Z","times_seen":13232,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.show-sb.com/sb/interstitial/games/lg/1/index.html","fqdn":"cdn.show-sb.com","domain":"show-sb.com","tld":"com"},"ip":{"addr":"104.21.95.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://brookhaven-outfit-codes-matching-bestie.pages.dev/","date":"2026-03-08T14:09:40.369Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"show-sb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 22:39:28 GMT","end":"Mon, 04 May 2026 23:38:03 GMT"},"fingerprint":{"sha1":"DE:44:B7:F9:65:9F:D2:6E:27:46:3E:12:7A:23:24:E9:D7:2B:16:7E","sha256":"E1:09:99:E2:19:59:48:E0:83:95:4C:4F:63:09:68:08:82:8E:16:17:8D:20:09:B6:93:1D:B5:84:B7:46:68:C1"}}},"request":{"raw":"GET /sb/interstitial/games/lg/1/index.html HTTP/1.1\r\nHost: cdn.show-sb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://brookhaven-outfit-codes-matching-bestie.pages.dev/\r\nOrigin: https://brookhaven-outfit-codes-matching-bestie.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 08 Mar 2026 14:09:40 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Thu, 28 Aug 2025 12:42:49 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dGN9lv6k%2BA9RIRtHb%2Bx9sq9F1%2FBN7KHifm5zenf%2Fjxua%2FN5DAXvO%2FnRKmn%2Bj6kUCjkoh8OVHkJYwSQMsnmO8KKDsaD7iSX7QyPHEMLuJbQ%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9d926b43793cea60-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.2.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":2112,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"14c7b0c73c695566ce7ee4ba6fbfd4f0","sha1":"73dcde985e6d1b552f40cba722c16724a753edc5","sha256":"75950a864361a31706373e4c78ae0ceff69daa0f4b3f58535abfa72e5d7c183c","sha512":"15d1d35f5dc7e0f7d1531f096271ce7839127411b3d0a3b8fafbdfb3da1b2354d6c1502be091cfe7b373a3c34ca7b9113065697047f839d829654b82e0c4d7e6","ssdeep":"","tlshash":"dd41f46228e88a3240c290c17eb16f6fae85e947c84b460133fd4ad09fd6dc4de6794b","first_seen":"2026-01-27T19:03:52.223521Z","last_seen":"2026-03-23T03:31:43.836032Z","times_seen":316,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":29,"dns":1,"connect":8,"send":0,"wait":132,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"realizationnewestfangs.com/1b/50/e5/1b50e57a5911fd0a5b46962ab48ca22b.js","fqdn":"realizationnewestfangs.com","domain":"realizationnewestfangs.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://brookhaven-outfit-codes-matching-bestie.pages.dev/","date":"2026-03-08T14:09:41.984Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"realizationnewestfangs.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 23:39:43 GMT","end":"Wed, 27 May 2026 23:39:42 GMT"},"fingerprint":{"sha1":"2F:D0:7E:69:4A:D0:06:61:89:AF:78:09:0A:5A:F1:7B:F9:4A:B7:96","sha256":"24:55:49:F2:2C:E7:D7:3D:E6:6E:54:6C:64:30:D7:3C:F6:39:2F:A0:A7:A2:AA:25:93:8D:6B:C2:15:40:66:C2"}}},"request":{"raw":"GET /1b/50/e5/1b50e57a5911fd0a5b46962ab48ca22b.js HTTP/1.1\r\nHost: realizationnewestfangs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://brookhaven-outfit-codes-matching-bestie.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sun, 08 Mar 2026 14:09:42 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 2636\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 2\r\nHost: realizationnewestfangs.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: aa54734acbfe556d48e4cbab5f3cf60b\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":5153,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5153), with no line terminators","md5":"6da75851d7f8415205c256fed50a6416","sha1":"843b017397ff1e4101029a0c2610cfdda819acca","sha256":"f9cc7670e67285102774201d602e2a32a449a22c5518df4627d26d5532c8bb81","sha512":"ff4efdb17db80ea6c97180a4cbcd7b10d0a8869a0c58d06b65865911393b7213424d6e9cb047411d23eb8920dca31522fa3b539aa471b9b2659da7e814190dd9","ssdeep":"96:ep37NIIPOSxMUE7m4k009fNSIEPf1DiBL+RtZm2cu2Hpp9wmb:e5IIP9xh4vEfOnBM4O","tlshash":"d0b1868e7281bcd04b9334776b2f660af5ea4d60145fd440f025f9c43e3462ad976ab6","first_seen":"2026-02-18T13:17:41.242469Z","last_seen":"2026-03-12T06:03:11.94003Z","times_seen":1663,"resource_available":true,"data":null}},"time_used":734,"timings":{"blocked":316,"dns":35,"connect":92,"send":0,"wait":100,"receive":0,"ssl":187},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}