{"report_id":"121f3cd6-f85b-4999-a758-ac97bd8ebbe1","version":6,"status":"done","tags":[],"date":"2025-08-23T18:37:54Z","url":{"schema":"http","addr":"genizymath.github.io/games/rooftop-snipers/","fqdn":"genizymath.github.io","domain":"genizymath.github.io","tld":"github.io"},"ip":{"addr":"185.199.109.153","port":0,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"genizymath.github.io/games/rooftop-snipers/","fqdn":"genizymath.github.io","domain":"genizymath.github.io","tld":"github.io"},"title":"Play Rooftop Snipers | GN-Math Unblocked Games"},"submit":{"url":{"schema":"http","addr":"genizymath.github.io/games/rooftop-snipers/","fqdn":"genizymath.github.io","domain":"genizymath.github.io","tld":"github.io"},"ip":{"addr":"185.199.109.153","port":0,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-09-27T18:37:54Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":8}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-23","alert":"Sinkholed","trigger":"usefulspeak.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-23","alert":"Sinkholed","trigger":"rashcolonizeexpand.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-23","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-23","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-23","alert":"Sinkholed","trigger":"torchfriendlypay.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-23","alert":"Sinkholed","trigger":"prefacebegbeginning.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-23","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-23","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"preferencenail.com","ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-07-01","domain_rank":20606,"first_seen":"2025-07-08T12:55:47.271261Z","last_seen":"2025-08-19T21:48:17.555582Z","alert_count":0,"request_count":5,"received_data":429815,"sent_data":2090,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"skinnycrawlinglax.com","ip":{"addr":"192.243.61.227","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"domain_registered":"2024-09-01","domain_rank":38609,"first_seen":"2025-07-09T22:28:05.771371Z","last_seen":"2025-08-21T00:42:16.068895Z","alert_count":5,"request_count":5,"received_data":194420,"sent_data":6634,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"kettledroopingcontinuation.com","ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2024-09-01","domain_rank":196057,"first_seen":"2025-07-30T15:18:19.355595Z","last_seen":"2025-08-20T18:21:46.753091Z","alert_count":14,"request_count":14,"received_data":216224,"sent_data":26408,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"flushpersist.com","ip":{"addr":"192.243.61.227","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"domain_registered":"2025-07-01","domain_rank":23810,"first_seen":"2025-07-08T10:43:12.76905Z","last_seen":"2025-08-19T21:48:17.550909Z","alert_count":0,"request_count":3,"received_data":1488,"sent_data":2316,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"weirdopt.com","ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-07-01","domain_rank":37519,"first_seen":"2025-07-08T12:55:47.272157Z","last_seen":"2025-08-20T04:32:20.993418Z","alert_count":1,"request_count":1,"received_data":377,"sent_data":423,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"usefulspeak.com","ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2025-03-20","domain_rank":0,"first_seen":"2025-04-10T10:24:58.783063Z","last_seen":"2025-08-23T15:42:11.282347Z","alert_count":4,"request_count":4,"received_data":136939,"sent_data":1804,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"config.uca.cloud.unity3d.com","ip":{"addr":"34.111.113.40","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2005-10-01","domain_rank":24188,"first_seen":"2025-03-18T16:12:36.874471Z","last_seen":"2025-08-19T21:43:57.277796Z","alert_count":0,"request_count":1,"received_data":571,"sent_data":473,"comment":"","tags":null,"fingerprints":[{"name":"Jetty:9.4","description":"","website":"https://www.eclipse.org/jetty","common_platform_enumeration":"","icon":"Jetty.png","categories":["Web servers"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"creative-sb1.com","ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-07-01","domain_rank":22211,"first_seen":"2025-08-08T09:32:32.509707Z","last_seen":"2025-08-22T09:38:58.27174Z","alert_count":0,"request_count":17,"received_data":635048,"sent_data":8516,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"prefacebegbeginning.com","ip":{"addr":"192.243.61.227","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"domain_registered":"2025-08-07","domain_rank":0,"first_seen":"2025-08-23T14:40:05.37387Z","last_seen":"2025-08-23T14:40:05.373871Z","alert_count":11,"request_count":11,"received_data":205555,"sent_data":15925,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-08-20T15:14:21.137874Z","alert_count":0,"request_count":4,"received_data":69704,"sent_data":1720,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"api.uca.cloud.unity3d.com","ip":{"addr":"34.107.172.168","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2005-10-01","domain_rank":915036,"first_seen":"2025-08-23T18:37:55.798238Z","last_seen":"2025-08-23T18:37:55.798238Z","alert_count":0,"request_count":2,"received_data":807,"sent_data":1288,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"professionaltrafficmonitor.com","ip":{"addr":"18.198.116.222","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2025-01-23","domain_rank":16376,"first_seen":"2025-01-25T08:56:07.448138Z","last_seen":"2025-08-22T14:31:34.988902Z","alert_count":0,"request_count":3,"received_data":1287,"sent_data":1389,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2025-08-20T15:27:05.815479Z","alert_count":0,"request_count":14,"received_data":8622364,"sent_data":7013,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.storageimagedisplay.com","ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2024-09-13","domain_rank":170153,"first_seen":"2024-09-13T12:56:32Z","last_seen":"2025-08-22T06:18:22.747826Z","alert_count":0,"request_count":7,"received_data":268073,"sent_data":3394,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.show-sb.com","ip":{"addr":"104.21.95.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-08-20","domain_rank":187612,"first_seen":"2024-08-31T03:46:04Z","last_seen":"2025-08-23T06:25:22.651006Z","alert_count":0,"request_count":4,"received_data":10580,"sent_data":2099,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"torchfriendlypay.com","ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2024-09-01","domain_rank":191479,"first_seen":"2025-07-30T13:31:49.539518Z","last_seen":"2025-08-20T16:09:43.322745Z","alert_count":4,"request_count":4,"received_data":10185,"sent_data":4895,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"rashcolonizeexpand.com","ip":{"addr":"192.243.61.227","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"domain_registered":"2024-09-01","domain_rank":31106,"first_seen":"2025-06-27T17:12:36.133274Z","last_seen":"2025-08-23T10:19:23.785243Z","alert_count":5,"request_count":5,"received_data":194446,"sent_data":6641,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.19.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"genizymath.github.io","ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2013-03-08","domain_rank":0,"first_seen":"2025-08-23T15:42:10.857091Z","last_seen":"2025-08-23T15:42:10.857091Z","alert_count":0,"request_count":7,"received_data":93591,"sent_data":3874,"comment":"","tags":null,"fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"wayfarerorthodox.com","ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2024-09-03","domain_rank":0,"first_seen":"2025-08-08T11:06:50.216151Z","last_seen":"2025-08-22T11:15:14.191355Z","alert_count":15,"request_count":15,"received_data":15617,"sent_data":12461,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-08-20T15:10:53.071671Z","alert_count":0,"request_count":8,"received_data":327624,"sent_data":4440,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"skinnycrawlinglax.com/b2/bf/b0/b2bfb06d346184e36a9350004a86fed4.js","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"192.243.61.227","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"introduction_type":"scriptElement","is_inline":false,"md5":"9782b4818b926e3a3dff64ae581c480e","sha1":"08a9fd6192c0f2ee3be406e6da290b4d1dfc8190","sha256":"d333df0f117809f385e17fc92d735bfca30a0708db590b77b58208fdbfc3f296","sha512":"f8a94b516ecde7bc917c8604f377384975ae71700795c6cb39982c64defd61d8fbd8db2ae00dc1e2fa0b68363fc3d443d8d6b14dab90153821c758c61b1cebb0","ssdeep":"1536:cmt7BMZUs9piv3i6In8noteGF1XF3xy/T6+h4:ckdv3i6C8notJZFhUM","tlshash":"89a3e9887f50f47d02da6036233f962ae1ee4e42154ee158d026fde53a68317e63ddb8","size":105710,"data":"","first_seen":"2025-08-23T18:38:03.360432Z","last_seen":"2025-08-26T15:34:52.137767Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"c205efa8a9da3452ef35eeb32da6c60a","sha1":"6994ce97658d81fb216c4a9d65fae8bc534e0bce","sha256":"dfb8c3b88d92df6b999b79d4fe4bd2f4f6190a95959d6c41ae7c3ef4452ffc1f","sha512":"1e219372ad7f1430f2a05d78412a522161ce197e5de390ec94108787ace92cccb9e7dc5fe6a99c0e4951e3eeb08390e1f8b167b7f8af508a6deed29486dcd8a2","ssdeep":"","tlshash":"edc04c48af501c96f7a5bceeab272fd5dce06a0774335d895284406468c902685c058a","size":145,"data":"","first_seen":"2025-08-23T15:42:19.304986Z","last_seen":"2025-09-11T23:25:21.326154Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"ec1ea36d7d03608d785cbc142d1ec00c","sha1":"89250eb6243ad385135c13fa5babcc66315312bf","sha256":"445efa99e06cfc596c5a14b16819ce342a5944c1898e641bd95d994e0043568c","sha512":"0c3e6fe9ee1d664ee6920359d5c1fa6f4e638cd94776d56af09f3ef3e8de6cbaaca110e1d645dc40aff043996a11c638e3bd0dfe7e23d5feaccd027d460ceb24","ssdeep":"","tlshash":"e741b76a380639624d3bf376019ebbae6cd4e4474f0cc2c4b06d1b082fb6c5b432b852","size":2055,"data":"","first_seen":"2025-08-23T18:38:03.4487Z","last_seen":"2025-08-23T18:38:03.4487Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/chat/mob/ssp/1/js/jquery.min.js","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"561acb3e541133bbdd2c0c19f8ee35a1","sha1":"ffd1353cf3f77d25f801c84d8208613eb0d3d548","sha256":"9fde6da568db31801e29243a903bf24f342256b41e3c01e7d018ff7c566ce7fc","sha512":"8a647ed6f56b4da93c7a034609060991cc8080350f057f4f2af2c369f18af066db3b4e77701fc017027fd774264a6d0f84927239d7d2f693edc6f7d6a0917be3","ssdeep":"1536:YjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h5cApwEjOPrBeU6QLiTFbc0QlQvakV:YYh8eip3hXuf6IidlrvakdtQ47GKl","tlshash":"f993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","size":89492,"data":"","first_seen":"2023-03-07T01:04:00Z","last_seen":"2026-04-03T18:56:22.048855Z","times_seen":6515,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"0b1e53cd4a5c366f13329ee05451438f","sha1":"4005fa3286d66ec131c6eef1dbaa854d259374dd","sha256":"573966d241f1ab69a33ec70509d2c0ffe4c899901e218f825f40d270831fe47b","sha512":"bb7935677f558a9fb3ecf6ff2e59a1bb0ff322da58b447263bc16be33c070f043aa8df2cc1dd01f9f51712c7f105c34fe5aa36d006886cab09e99fc623110030","ssdeep":"","tlshash":"2cf0c810b3590264c37bd1d566663a4575f11258a08e814f6c2c73870c6bf7ab5cda7f","size":564,"data":"","first_seen":"2025-08-23T18:38:03.450866Z","last_seen":"2025-08-23T18:38:03.450866Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"32090ea707fa494ff2c56af94290f1a8","sha1":"3a53dc67d59c876b0dec3f083b59844dedcf1c6f","sha256":"1c21036fa38c4d72ff7b6a62a8bbda646bb908367b8003938735d2339bdf8a22","sha512":"cf79986a80876458ab6435e538a6feb195fd473cba975981db3082271ec310fea0744d8d06e6c2e823505ea2b1a527ab0e2e7a723ebd9a5d9a42ee09aabf15ee","ssdeep":"","tlshash":"38f0f924730d026487b7e0d1657a3a452ab1138db0ced18f783c33870c6bf6ab48867e","size":601,"data":"","first_seen":"2025-08-23T18:38:03.452614Z","last_seen":"2025-08-23T18:38:03.452614Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"genizymath.github.io/games/rooftop-snipers/","fqdn":"genizymath.github.io","domain":"genizymath.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"19315613e56ea93d2be8892ba7759392","sha1":"1ac3cbd2781358bd5983e2940fda77f7121f8d7c","sha256":"5b68a86971dceb9d9dd7c2d11d8407f0d3d325f607f42de4220eadfe0aa89e46","sha512":"a18cc7dddd017d82240bdac001c020e26ab53434d7ff8dc15493ce47f91b295a9314e284ea5668365ce58a102a8c627ffa384d81f2b1db0fbe828d9a39ae84a9","ssdeep":"","tlshash":"7dd08c8c9703b34830a6ccab8e3df90081309c133c0148ba3bcc10193fc440188c17ba","size":203,"data":"","first_seen":"2025-08-23T15:42:19.312179Z","last_seen":"2025-10-24T22:42:38.45467Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"prefacebegbeginning.com/cc/26/99/cc2699d51b73e1eb5f9d2126b08c131a.js","fqdn":"prefacebegbeginning.com","domain":"prefacebegbeginning.com","tld":"com"},"ip":{"addr":"192.243.61.227","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"introduction_type":"scriptElement","is_inline":false,"md5":"475d855a392d241b8376e6f6bd75d413","sha1":"d4d61d466d8b810b76ce05f213e6e70c08ebc359","sha256":"7070cd8e916f9de8681c1e0072f10d3ddbb62b08942530362d2ffad20d20ba13","sha512":"fe63fd6de014d64228466a7f1a82e203be70094f24f941275f8d4b88622f6a3cd154d5b83b0d7b8e03cdc251b492028b0b2113fc9d74e4404be4ca42ae0fde42","ssdeep":"1536:cmt7BMZUs9piv3i6In8noteGF1XF3Uy2T6sh4:ckdv3i6C8notJZFETa","tlshash":"bba3e9887f50f47d02da6036233f962ae1ee8e42154ee158d026edd53a68317e63ddb8","size":105720,"data":"","first_seen":"2025-08-23T18:38:03.357979Z","last_seen":"2025-08-23T18:38:03.357979Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"46a6fef91632b94d14252fe324c1585f","sha1":"387cebbd261b8fe947fe9805875300f2ceeb5cfd","sha256":"36d0c771f8bf310d740cb4d0ca144354c45df284e72361660448708d72f175d5","sha512":"a3aaa1b5ab1113a12793bd1085332eb257416aaa9c4a690525838b91453a281580a979bfb856b3c429c2d4243c3ce02bd318a4b7048124eef96912179836d0fd","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRL:nPncLBSUBULGVTfGpucE5fox","tlshash":"528395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","size":85386,"data":"","first_seen":"2025-07-08T10:38:39.799377Z","last_seen":"2025-11-18T17:01:51.014373Z","times_seen":15230,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/f0/b5/11/f0b511a8c19914e652dfaaae77a5ac81.js","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"accf7ef88c2dd5a34e982001002c47ba","sha1":"d3147353c1f931f4eecc805a37a312d7ddfbda05","sha256":"05148a4d3900555e78d98ebfcc5516a8404a13454220d7f3cc739d0c5d8ded26","sha512":"b3bd7bfe5473c7ccc7866cb963521f23b5922386ad8d45547d23f9afad92b8de4db4e5372a1f68e18f192d34cc0e1797e9d0f8fd22b14f3f4ee61ee3005dd871","ssdeep":"768:Y2bnYsmrjBqw648+QhS8u+Jcj/XcdNjNimOdY08kUbTehzbcepw4f:Y2bneC4x5O+jvcsdY0U3fm","tlshash":"cd63c6483f51b27802e6b8fa712fa61af0265c1195d8e0d8f503f4deae6a719f035f25","size":72611,"data":"","first_seen":"2025-08-23T18:38:03.393033Z","last_seen":"2025-08-27T19:23:04.223018Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"643c111bd83b45831c109f1ebeb57dad","sha1":"93ea6a02d26dae35227028a09eee29ea7db1a5da","sha256":"ed6124ac2601a9b426c2dc906dbf86bd7ba6d4b5a0dc7e221f95f6ee4b1ea379","sha512":"6f356f0d8cc753eee5fa832b3a4b17d2e2672ccb723986ab106e8c801e89478612f858e959577a82ee4cdc3e594ba9dd377de71d01c1ec5369dc565c121d55a8","ssdeep":"","tlshash":"c8410a77dc9830d88493fab206a9fb840a344b490d00838a340f8d9517f905417ad88d","size":2068,"data":"","first_seen":"2025-08-23T18:38:03.456152Z","last_seen":"2025-08-23T18:38:03.456152Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"05493347060d754742267ab85585f36b","sha1":"746b956bbb902af3583490b258b5dadce007532e","sha256":"ff79e24c310cb683e9584c399fec78ca8edc2b81da72655afcba9641c31bd6fb","sha512":"0ca2e892a472b46d593743026dba763c7ad25413b6eebc8517d22a164654460268227996ae50ba743c987d35f930ef055fc0d20fcb9b2481ab98fab7860b6113","ssdeep":"","tlshash":"8b31c8e7a59156c863d18cf2c466321d95a0e86c274d4aca045d2cd06b2c6b8af6dbbc","size":1590,"data":"","first_seen":"2025-08-23T18:38:03.458003Z","last_seen":"2025-08-23T18:38:03.458003Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"genizymath.github.io/games/rooftop-snipers/","fqdn":"genizymath.github.io","domain":"genizymath.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"5153c222f741142c16826075a93fca4f","sha1":"0a69fd5be07186eaeea42692d0a839cfc48cd785","sha256":"56fb14bdabe76294795da5485adc2f90d75db39f7173c851ee67a74666346e8c","sha512":"199c3020a723ad0234438652cda164fb75b54988c12eb147f5b28bb7455f8f86c823aaedbeb0c6e3691be02e8408d2036e0467652254cc225d95c3e657c1d45b","ssdeep":"","tlshash":"acd08c8c9703b34830a6ccab8e3df90081309c133c0148ba3bcc10193fc440188c17ba","size":235,"data":"","first_seen":"2025-08-23T15:42:19.313049Z","last_seen":"2025-10-24T22:42:38.457172Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"genizymath.github.io/iframe/283.html","fqdn":"genizymath.github.io","domain":"genizymath.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e63994a67cf7d6b9a2dbec52cda778de","sha1":"c087f1cec7ac3c43007e032b9a588fc79fc59cb4","sha256":"074762e7cda0e3d061549ca26af7e984a0bee1c41a1587cb55f41e5782587111","sha512":"034af81bb570e7220d5a0e8fa674956761f3bd89503099d03e4651a66654ac76892080f430a726f95b35ad66e24adc231d0598ed7dafd1433d6af205825471b4","ssdeep":"","tlshash":"ebe05e6a0ba1586368ab25ab4a2f35533196444b5a5aad003f1e51448fa822e1ca9ace","size":361,"data":"","first_seen":"2025-08-23T18:38:03.46192Z","last_seen":"2025-08-23T18:38:03.46192Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"e8018c18a2800c7569ce38ab866f36ef","sha1":"7d383cdcf02af27b62d314d064ccdf9b0d64aa89","sha256":"de5627067f91f2d6982717506b7fe58e88b08d789ca792e3eb1985d2fd120b57","sha512":"d4c4d217d8911d85f15a2c3ef9138052d5d00797647ff516e7c133f5652bc5a7bb48e87ec2492dd0b2fb8bd9654a48350658a2e2a7ca34d74678dc2d8b36c634","ssdeep":"96:oozPGCoelymeDY3n1XHmX90lymeDY3n1XHm8c1/D2CfMEDaH:xzi0ymsYF2XgymsYF28Eb2CkCaH","tlshash":"8da11ae2ae82a131215598ea163e19492c61f07f2143ee4ebdadc7415f447b10af87dc","size":4830,"data":"","first_seen":"2025-08-23T18:38:03.465142Z","last_seen":"2025-08-23T18:38:03.465142Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"46f8c9357540a5d7aec0ef4a2b3a628c","sha1":"360877da4bd71efdbe04f7d73e4732985f273194","sha256":"fafa09c3565796a1424f1121d31ee33c541b65e9d38c418684a29f786c57df03","sha512":"816d92a54b6fba07e3261663873f9d842f27ad0ef5e3b1ad979691d33e01f19d5d620f1923233d600c83d83d358fc0921fabddff4bb1f4aaf8eb4a845452099e","ssdeep":"","tlshash":"bc31eaf34a43a12622548cc6152d199519a2e1bcb2e7f74a6efe4641914837256b83ac","size":1582,"data":"","first_seen":"2025-08-23T18:38:03.466762Z","last_seen":"2025-08-23T18:38:03.466762Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"c94cd5e826da27bfe9c1cd48aea09202","sha1":"79409830e866f69f4182cc680458339eb346a61e","sha256":"31cb6fcb87e9daa9edc8f6f52645f1362264853215be98b3441be0e25c903a7c","sha512":"9d54a53297aec3bce5f848700f1d3641c0e77ebe89c9c7936ce9fd341aabab561f7d85dccc84eec90c129e41eb1f078958e8ee95ff81c8738fb578f94e9fee0a","ssdeep":"","tlshash":"e4310a34ec3f6a3d4193996a449b4b26aa69732cf16fc5f0b48c8069c32e6219a44df0","size":1577,"data":"","first_seen":"2025-08-23T18:38:03.468446Z","last_seen":"2025-08-23T18:38:03.468446Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"46a6fef91632b94d14252fe324c1585f","sha1":"387cebbd261b8fe947fe9805875300f2ceeb5cfd","sha256":"36d0c771f8bf310d740cb4d0ca144354c45df284e72361660448708d72f175d5","sha512":"a3aaa1b5ab1113a12793bd1085332eb257416aaa9c4a690525838b91453a281580a979bfb856b3c429c2d4243c3ce02bd318a4b7048124eef96912179836d0fd","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRL:nPncLBSUBULGVTfGpucE5fox","tlshash":"528395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","size":85386,"data":"","first_seen":"2025-07-08T10:38:39.799377Z","last_seen":"2025-11-18T17:01:51.014373Z","times_seen":15230,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"e21575e247127abbc3163ac6617b14f9","sha1":"85ca1deba0178dac7363db927730431e2185f8fb","sha256":"7a76d993112cfdf7b89c1d54b8c3a2faa663d02ad8e149279bc5f2088890ca71","sha512":"008872a5c7edb2e88b2ceb641d4aa8f732a57a08f75fed630b5a4d2aba5192f54e361c3cb8e13cab6af23c55238860428498d59edf53f5b161e22e2557b52925","ssdeep":"96:oozJC9FkYB9l/nmEmVCk90+Esf9fOeMHxJRSb1/D2CfMEDaH:xzR6mYkP9fpMRwb2CkCaH","tlshash":"e6a12ca6edd150e861c3b8fa5177ba0c2570a50e2604cf8a748ddd510f786a41fadddc","size":4846,"data":"","first_seen":"2025-08-23T18:38:03.471839Z","last_seen":"2025-08-23T18:38:03.471839Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"genizymath.github.io/d0ee2518-3e2f-4fa9-ab0c-ee4ae324ae05","fqdn":"genizymath.github.io","domain":"genizymath.github.io","tld":"github.io"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e0b882fb7f5b6ddd0b5ab898adcf893","sha1":"5323cc7ccb530292804ccb5f8bbac5247b4f62f3","sha256":"f35824a7dcb45c19708576b242b3f240861462396019756e545f34bfd5eb3e95","sha512":"ba65b79399da3dd1c25521375f756d06f17d1d401486490f3bc777fa8c4bb84cbea5c14124363f2798e78a54e4bf543045b87801fb46a81275ed6687bfe0fa2f","ssdeep":"","tlshash":"3d1102d41c1a458f88972b0fc05f2acb106c2f93a14ff3b8de2ef9d54968b5255be904","size":1000,"data":"","first_seen":"2025-08-23T18:38:03.475224Z","last_seen":"2025-08-23T18:38:03.475224Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"32090ea707fa494ff2c56af94290f1a8","sha1":"3a53dc67d59c876b0dec3f083b59844dedcf1c6f","sha256":"1c21036fa38c4d72ff7b6a62a8bbda646bb908367b8003938735d2339bdf8a22","sha512":"cf79986a80876458ab6435e538a6feb195fd473cba975981db3082271ec310fea0744d8d06e6c2e823505ea2b1a527ab0e2e7a723ebd9a5d9a42ee09aabf15ee","ssdeep":"","tlshash":"38f0f924730d026487b7e0d1657a3a452ab1138db0ced18f783c33870c6bf6ab48867e","size":601,"data":"","first_seen":"2025-08-23T18:38:03.452614Z","last_seen":"2025-08-23T18:38:03.452614Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/genizy/assets@main/rooftop-snipers/TemplateData/UnityProgress.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5db1d705b9404972b1283bb5b3e26d74","sha1":"00a254d777a79d96c4875adc311bb23dbd36513b","sha256":"3c62cc93391b843b000ef6f94b6c4d253042c39894a82624c77d4b1784dc6d80","sha512":"703518302de164a652d243dae7d9440e69fcf260e8a614e7872193d06fb55dc7f2be0bb117b7125e14d2c0ae6946b8133a98205717ba9a932e6d9fcbe6b3673e","ssdeep":"","tlshash":"b50184589c370aaa824b4c4e617d8d65b7a00a2c963f1a100da9c81ef794f701f787dc","size":707,"data":"","first_seen":"2025-08-23T18:38:03.333585Z","last_seen":"2025-08-23T18:38:03.333585Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"46a6fef91632b94d14252fe324c1585f","sha1":"387cebbd261b8fe947fe9805875300f2ceeb5cfd","sha256":"36d0c771f8bf310d740cb4d0ca144354c45df284e72361660448708d72f175d5","sha512":"a3aaa1b5ab1113a12793bd1085332eb257416aaa9c4a690525838b91453a281580a979bfb856b3c429c2d4243c3ce02bd318a4b7048124eef96912179836d0fd","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRL:nPncLBSUBULGVTfGpucE5fox","tlshash":"528395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","size":85386,"data":"","first_seen":"2025-07-08T10:38:39.799377Z","last_seen":"2025-11-18T17:01:51.014373Z","times_seen":15230,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rashcolonizeexpand.com/f0/b5/11/f0b511a8c19914e652dfaaae77a5ac81.js","fqdn":"rashcolonizeexpand.com","domain":"rashcolonizeexpand.com","tld":"com"},"ip":{"addr":"192.243.61.227","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"introduction_type":"scriptElement","is_inline":false,"md5":"811f44dc0979b77c7047c40ffeb8e056","sha1":"2d9f710c0c2d061a4c35a34746aa270cef2c985e","sha256":"5ed561ac12f3d19d8fed3eac567d5d167bc55f9ac02bdd64f9c5580b11741e11","sha512":"bef339e6d9b17b3d921e3babd66b5b18d76359762ce8dbe9a0b9ae9f17b695f996d7370bfa7a90236b8a32ea6d8429bee7ef8048954bfdfbf03f7b649f02610b","ssdeep":"768:Y2bnYsmzjeqw648+QhS8u+Jcj/XcdNjNimOdY08kUbTehzbcepwOf:Y2bnWV4x5O+jvcsdY0U3f4","tlshash":"3063c7483f51b27802e6b8fa712fa61af0265c0195d8e4d8f503f4deae6a719f035f25","size":72633,"data":"","first_seen":"2025-08-23T18:38:03.316302Z","last_seen":"2025-08-30T00:29:25.243855Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"46a6fef91632b94d14252fe324c1585f","sha1":"387cebbd261b8fe947fe9805875300f2ceeb5cfd","sha256":"36d0c771f8bf310d740cb4d0ca144354c45df284e72361660448708d72f175d5","sha512":"a3aaa1b5ab1113a12793bd1085332eb257416aaa9c4a690525838b91453a281580a979bfb856b3c429c2d4243c3ce02bd318a4b7048124eef96912179836d0fd","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRL:nPncLBSUBULGVTfGpucE5fox","tlshash":"528395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","size":85386,"data":"","first_seen":"2025-07-08T10:38:39.799377Z","last_seen":"2025-11-18T17:01:51.014373Z","times_seen":15230,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"c205efa8a9da3452ef35eeb32da6c60a","sha1":"6994ce97658d81fb216c4a9d65fae8bc534e0bce","sha256":"dfb8c3b88d92df6b999b79d4fe4bd2f4f6190a95959d6c41ae7c3ef4452ffc1f","sha512":"1e219372ad7f1430f2a05d78412a522161ce197e5de390ec94108787ace92cccb9e7dc5fe6a99c0e4951e3eeb08390e1f8b167b7f8af508a6deed29486dcd8a2","ssdeep":"","tlshash":"edc04c48af501c96f7a5bceeab272fd5dce06a0774335d895284406468c902685c058a","size":145,"data":"","first_seen":"2025-08-23T15:42:19.304986Z","last_seen":"2025-09-11T23:25:21.326154Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b411441ea1e2b21f2c0758188e8e7d17","sha1":"4a13670271f2fcf9704c952cdacce25ee607c4db","sha256":"66db1b9e95118c9f557b69145e1fbeb03e7c35b4270ce53be9c63e80b76484ac","sha512":"e8032af3fa009bbd70a64d8800198b8f685735b1a0741bb9c9e299254cd614b44992b7c29df4706baf918413d0862b8296dfeb0c0d60b7fbdf4eaf23b8a82520","ssdeep":"","tlshash":"f3f0f468d419b36093f3a07051af2bad77a104cb856712c9f01c638a08f677d13a688a","size":601,"data":"","first_seen":"2025-08-23T18:38:03.47647Z","last_seen":"2025-09-06T20:24:56.272634Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"genizymath.github.io/21383064-0de0-4e25-a717-c140b6519fba","fqdn":"genizymath.github.io","domain":"genizymath.github.io","tld":"github.io"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"08e8dad5a5b5f842d63a66f971a16282","sha1":"18494c9a35a2403f3ff3b599a78e4ce009b80812","sha256":"196992b491456b02fc889aa622bd6a3187f7b32a9e3af536ddbd4d18c85ab589","sha512":"25d49763c566726dcd46351f8e547a354229f368bc98e5e9666881db2f5000ab4dd0778c0b7a25556adf796e352666b446c31b789c02a42a88f05841107d8de8","ssdeep":"6144:Y3pv94vWK3YTztm8aoJ9a9jJKGKVXsiK/NOVC64i38uV:YZv94vWK3ytm8vyJdyK/NOVyip","tlshash":"73944a9cba15e1a384d3777b642f1b8ea272ccd2691cd009898cd89409f0f69f46ff59","size":417849,"data":"","first_seen":"2025-08-23T18:38:03.479286Z","last_seen":"2025-08-23T18:38:03.479286Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"genizymath.github.io/iframe/283.html","fqdn":"genizymath.github.io","domain":"genizymath.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"102031e47630f5a89d2212188ca41990","sha1":"2fda281c41eb794ae4283a869b6955e870da5267","sha256":"f2781714ce75fa09bc101e6b55ec3d3864f3f7b6ffa46e9f8d0c47b0592383d1","sha512":"698f47da063932a57dd9aaf5bc914104355143e61ce3ff968abad67de11916b89f68f7658c28b7755edf77c54546d2fe42da2654cd129b9437fd6dd1fc950df9","ssdeep":"","tlshash":"48c04cb19d7295325fbe5115735a2c47511085670b734450331c2a196f651174a9de1d","size":141,"data":"","first_seen":"2025-08-23T18:38:03.483839Z","last_seen":"2025-08-23T18:38:03.483839Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usefulspeak.com/89f8ffc8bcb270fe3019ac82af49b01a/invoke.js","fqdn":"usefulspeak.com","domain":"usefulspeak.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ac85de708c3cf1e18db3470027f3d21a","sha1":"c2ec8310beb4d3781d1a8cd2a729f4321104465f","sha256":"8ecdef0a2fb6ac2c0ba6cd521dc71aa6a07299796f541a4379044665f2d31482","sha512":"6670dd10d1666fa3eda8d86688962ea29c177450907de361a78ea480a93ba5c4a234bc548f729c5112779dccd809f83739efe84cdaa9229be957b646aa265d23","ssdeep":"768:5d2JfLHRgAJk/57cz0GGTmrpJEOlhPmyd:4LHRwaoKnd","tlshash":"72e2d7eb7f10b37c129b9473263f440ae3391c02f5c8c75dd976d6952a9c30b896a6e8","size":31139,"data":"","first_seen":"2025-08-23T18:38:03.435233Z","last_seen":"2025-08-23T18:38:03.435233Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usefulspeak.com/33e6a4f2bd7346c557e8569983b9a966/invoke.js","fqdn":"usefulspeak.com","domain":"usefulspeak.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bd11dfa36f83fe43d49c5186fc9d6994","sha1":"c223ce0a36ac60c3b8c7e005d44ad8d3da7d9b33","sha256":"2e9e9e080803d1c632daacdd4535c994f412f683cfc7e42d894d55084d46d1b9","sha512":"0228c0f2f847cc12b0354c750a3aa38f047f7d196d2bc92a9d4c2ab7ee57204f0f4c3f95bec1ac057f8e61f79d5b8a51052c81d8059ed13d880ee8a9cfa6e809","ssdeep":"768:WBkqYtc5vIm+3UJ0UhwlnYRkKvE43kRRwlEK8cQsIBVOb:WiiIJEJDhwln/KH3kRylEK8ccq","tlshash":"d8e2e78c3f60b05813d6307f733f960de9960c0aa894c549c06bb5ecb97c767e5769a8","size":34168,"data":"","first_seen":"2025-08-23T18:38:03.420252Z","last_seen":"2025-08-28T16:18:44.079482Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"prefacebegbeginning.com/71/03/3c/71033c1d2ddd571b951e9de84dd54e0e.js","fqdn":"prefacebegbeginning.com","domain":"prefacebegbeginning.com","tld":"com"},"ip":{"addr":"192.243.61.227","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"introduction_type":"scriptElement","is_inline":false,"md5":"f1aa8052a69b6391796b8c689543352b","sha1":"c2d6368ba746a75c6bf604c40b17f61b5929f366","sha256":"7b785a0d6e8545d8df86176f4f30f39842fea88cf3d262946419725a318f9b0e","sha512":"f6c630ee7c995e05e9641c9a63b61d4007aafadcd7341c3149617de6bcb7aae89fdd6871b4eb656904e3cbe076365cda6d9b4e33e12909ce35429ce0bbf8efd9","ssdeep":"768:Y2bnYsmijAqw648+QhS8u+Jcj/XcdNjNimOdY08kUbTehzbcepwPf:Y2bnDL4x5O+jvcsdY0U3fX","tlshash":"f163c7483f51b27802e6b8fa712fa61af0265c1195d8e0d8f503f4deae66719f036f25","size":72604,"data":"","first_seen":"2025-08-23T18:38:03.413688Z","last_seen":"2025-08-23T18:38:03.413688Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"61d17152ffe15bbb86011753f3bf50ca","sha1":"31fd100414b805a246114fa073f719d9e9a78b33","sha256":"b4c46d05d1f4061b240e0afb2d179057db09ab270a58a169f73a0bbad8889b2b","sha512":"9db2a0c17ecfe779b970d6c0f25509e2acb59240df6c61b64f93e09d7a3c78fad6832365491c8346e71d42ee18d9128b36b492ddc09c35fbe6ce70102ffb3888","ssdeep":"","tlshash":"c841f9e27903313311aaade2161d26982ca1f1fd1297fb8e7dbd474017486b202f9b8c","size":2060,"data":"","first_seen":"2025-08-23T18:38:03.485994Z","last_seen":"2025-08-23T18:38:03.485994Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"c205efa8a9da3452ef35eeb32da6c60a","sha1":"6994ce97658d81fb216c4a9d65fae8bc534e0bce","sha256":"dfb8c3b88d92df6b999b79d4fe4bd2f4f6190a95959d6c41ae7c3ef4452ffc1f","sha512":"1e219372ad7f1430f2a05d78412a522161ce197e5de390ec94108787ace92cccb9e7dc5fe6a99c0e4951e3eeb08390e1f8b167b7f8af508a6deed29486dcd8a2","ssdeep":"","tlshash":"edc04c48af501c96f7a5bceeab272fd5dce06a0774335d895284406468c902685c058a","size":145,"data":"","first_seen":"2025-08-23T15:42:19.304986Z","last_seen":"2025-09-11T23:25:21.326154Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usefulspeak.com/33e6a4f2bd7346c557e8569983b9a966/invoke.js","fqdn":"usefulspeak.com","domain":"usefulspeak.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"afa140b808c7cf3fad51c323d9993499","sha1":"700078f81bfdb0c7ad49e7a0508aeca210278fa1","sha256":"9ed709e7568a04dfbae173a30fd3735eca09b94edee2a725b664ba461c788ea0","sha512":"6f9405e76cc0318a58a782c8e6a88a4de0ae771125e980e920e66cd59b95b97cc2d6ac9eb348c30cc054649bd9c8d05a7a97cc023f9ec0c01594b03199f17fb5","ssdeep":"768:WBkqYtc5vIm+3UJaUhwlnYRIKvE43kRRwlEK8cQsIBV43:WiiIJEJBhwlnJKH3kRylEK8cc6","tlshash":"a8e2e88c3f60b05817d6303f723f970de9960c0aa894c589c06bb5ecb97c767e5769a8","size":34132,"data":"","first_seen":"2025-08-23T15:42:19.222076Z","last_seen":"2025-08-30T00:29:25.168674Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/f0/b5/11/f0b511a8c19914e652dfaaae77a5ac81.js","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"192.243.61.227","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"introduction_type":"scriptElement","is_inline":false,"md5":"358b5dc944ea34ae675e221ea0989259","sha1":"03412ea5a1ad4a3c54ebe185f177ff28cdb298bf","sha256":"d5f3e5baeda5be962ea6d6bc124717a30a276e18f32e2411d1125b10576caf32","sha512":"59cc1b93caacce5904cba237af8d2b9d9f5bc86d9e233f0ba09d344b3d918dc8f998741ae5aa1e4eca95e20a0e9cdfa6f70b0a7ec34560a8e4cb7682cd377b02","ssdeep":"768:Y2bnYsmzjHqw648+QhS8u+Jcj/XcdNjNimOdY08kUbTehzbcepwOf:Y2bnWE4x5O+jvcsdY0U3f4","tlshash":"ad63c7483f51b27802e6b8fa712fa61af0265c1195d8e0d8f503f4ddae66719f035f25","size":72632,"data":"","first_seen":"2025-08-23T15:42:19.259785Z","last_seen":"2025-08-30T00:29:25.242899Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"46a6fef91632b94d14252fe324c1585f","sha1":"387cebbd261b8fe947fe9805875300f2ceeb5cfd","sha256":"36d0c771f8bf310d740cb4d0ca144354c45df284e72361660448708d72f175d5","sha512":"a3aaa1b5ab1113a12793bd1085332eb257416aaa9c4a690525838b91453a281580a979bfb856b3c429c2d4243c3ce02bd318a4b7048124eef96912179836d0fd","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRL:nPncLBSUBULGVTfGpucE5fox","tlshash":"528395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","size":85386,"data":"","first_seen":"2025-07-08T10:38:39.799377Z","last_seen":"2025-11-18T17:01:51.014373Z","times_seen":15230,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"e7ec8e65da38824483ef31147576ea1d","sha1":"a0376de6b31aac8d3b720fb653d159ee62acc338","sha256":"b5b7aac4b885719f865474bb74a269b7c847b936eb77d5c36c91e01a6117d1bb","sha512":"50e21a0f1429acd14d471030fd27e923d69f29664500b0a01773aad03087022972d1aa991e4615bd452df468c4e2c489d130d55e14148b1dc28b354ea10012ff","ssdeep":"96:oozXpCsMB86xnkWz6js4ipq9xyFUTPDuahbLg4cT1xFI71/D2CfMEDaH:xzbMBrkG6YVcTTTbs4cTQb2CkCaH","tlshash":"00a14a287c5639350823f1be01bbba1e3ce0f10fa60cce80f48cc5094f69a654b99ce5","size":4820,"data":"","first_seen":"2025-08-23T18:38:03.487402Z","last_seen":"2025-08-23T18:38:03.487402Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"genizymath.github.io/games/rooftop-snipers/","fqdn":"genizymath.github.io","domain":"genizymath.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"23f69e75d5dbf3b9c75fa819be344446","sha1":"401c181d3a7be4904ee7fed4df054b9cb0accd05","sha256":"436e3453dd9b2d23c1e1657042d66ba20cbed09bb29edb76b49adbc0e53e2f2d","sha512":"a8b4eedb041138fe5ca413c5e2bce8b6753c20f5acab1dbd9e125a25c264964dd40de0f14017a06acbc4f1d4f6fdae42fc1b6f1021e6e54697c575129c414322","ssdeep":"","tlshash":"a7e0617b2113843105eb15e532c7f3587a605447b900c1d63d5c9a418f12f4fc467bcd","size":426,"data":"","first_seen":"2025-08-23T18:38:03.489054Z","last_seen":"2025-08-23T18:38:03.489054Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usefulspeak.com/33e6a4f2bd7346c557e8569983b9a966/invoke.js","fqdn":"usefulspeak.com","domain":"usefulspeak.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"481b9461cf458e3223337de295c9e964","sha1":"4ca18dfd08e9ac6b55b0c1da1d2a80a71b4f4ae9","sha256":"9d63040f268698f06eced4420be8105ca57abf15d830b69fb311f6740a922c1c","sha512":"48bb76c5c4d3183f66fe23fa48e46ec80d130f5c8254d6af6f11535c4b45c1c897a9b516b6905152101a8c9e5b6664571f88934b132f1698ecbc820837f86053","ssdeep":"768:WBkqYtc5vIm+3UJVUhwlnYRpKvE43kRRwlEK8cQsIBVto:WiiIJEJihwlnKKH3kRylEK8ccE","tlshash":"5ce2e88c3f60b05813d6307f732f970de9960c0aa894c549c06bb5ecb97c767e5769a8","size":34136,"data":"","first_seen":"2025-08-23T18:38:03.311578Z","last_seen":"2025-08-30T00:29:25.108917Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"genizymath.github.io/games/rooftop-snipers/","fqdn":"genizymath.github.io","domain":"genizymath.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"19315613e56ea93d2be8892ba7759392","sha1":"1ac3cbd2781358bd5983e2940fda77f7121f8d7c","sha256":"5b68a86971dceb9d9dd7c2d11d8407f0d3d325f607f42de4220eadfe0aa89e46","sha512":"a18cc7dddd017d82240bdac001c020e26ab53434d7ff8dc15493ce47f91b295a9314e284ea5668365ce58a102a8c627ffa384d81f2b1db0fbe828d9a39ae84a9","ssdeep":"","tlshash":"7dd08c8c9703b34830a6ccab8e3df90081309c133c0148ba3bcc10193fc440188c17ba","size":203,"data":"","first_seen":"2025-08-23T15:42:19.312179Z","last_seen":"2025-10-24T22:42:38.45467Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/genizy/assets@main/rooftop-snipers/TemplateData/UnityLoader.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3565805838bac42f203529b57644569c","sha1":"4551c8023d36ee5058e0985d07eeef49881705a1","sha256":"9fa521f680f1d3414280b73b0fb257db116bada04b03cb6aa3558601d7f650af","sha512":"926272f2bbe7ae3cc547170c2cd0297a477ead5498c401ddd79e9ca7f6add1c69d501ca93bf5052b58eb9b5f5018f4877e6094a2806f4efbbdb7d9d0196ed23c","ssdeep":"3072:UsK60ds9+TT1R0VSMEhssnJUoTQS8aIiFoMQRwa:Usv0i+1RK5EhjnP8S83yRi","tlshash":"d4e3af31226412e603e30bd650cb258b21b59a1638096c79db31e9ccedf5dd7e237e7a","size":149756,"data":"","first_seen":"2025-08-23T18:38:03.381055Z","last_seen":"2025-08-23T18:38:03.381055Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rashcolonizeexpand.com/b2/bf/b0/b2bfb06d346184e36a9350004a86fed4.js","fqdn":"rashcolonizeexpand.com","domain":"rashcolonizeexpand.com","tld":"com"},"ip":{"addr":"192.243.61.227","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"introduction_type":"scriptElement","is_inline":false,"md5":"c2af57c165e66ca1bf358715f935144f","sha1":"5d99e2990e1002c097d384d0e350bc28f093ca8a","sha256":"156f51dbe16afd110639af14359f273030cd4659e7759e6d792b3f58fa0ef220","sha512":"05f7dd1957ad250897cb97ad014348978b21b28c4b747759b5c3d52767bd1e7be85228daebf64b6b9f18fc586ee9d633d2fed478c97a8358e0bc5ecf347c2bff","ssdeep":"1536:cmt7BMZUs9piv3i6In8noteGF1XF3xyiT67h4:ckdv3i6C8notJZFhpP","tlshash":"88a3e9887f50f47d02da6036233f962ae1ee4e42154ee158d026fde53a68317e63ddb8","size":105710,"data":"","first_seen":"2025-08-23T18:38:03.418156Z","last_seen":"2025-08-26T15:34:52.151813Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/b2/bf/b0/b2bfb06d346184e36a9350004a86fed4.js","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a059d133678c5de63e5a1bf67d2c1964","sha1":"e2c4fe671ee8e2db2c74c5790d8d29ff512713eb","sha256":"1db649091f3a4442fb233594304244d11c79ebb007d9236540abf30cfffcec49","sha512":"43a7083d24f7f646e3b686ebf7f83ac4b1bd3e8702d82845a22ce45ea52a81664f8ce49f5bf114e13517e6e79f8ac3bd06230cd0d9b1779e0db392d2bd8622cc","ssdeep":"1536:cmt7BMZUs9piv3i6In8noteGF1XF3xyvT6qh4:ckdv3i6C8notJZFhEO","tlshash":"48a3e9887f50f47d02da6036233f962ae1ee4e42154ee158d026edd53a68317e63ddb8","size":105717,"data":"","first_seen":"2025-08-23T18:38:03.422266Z","last_seen":"2025-08-23T18:38:03.422266Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"usefulspeak.com/33e6a4f2bd7346c557e8569983b9a966/invoke.js","fqdn":"usefulspeak.com","domain":"usefulspeak.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:31.470Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"usefulspeak.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Jul 2025 10:17:17 GMT","end":"Fri, 17 Oct 2025 10:17:16 GMT"},"fingerprint":{"sha1":"45:17:AD:B5:37:E3:46:A0:5F:98:AA:25:58:24:FF:14:28:9E:B8:27","sha256":"2D:E3:F0:06:D1:13:79:A6:88:54:6C:D5:A1:AF:C7:B4:03:72:F8:9C:01:4C:7B:FA:14:7C:59:78:43:59:46:3F"}}},"request":{"raw":"GET /33e6a4f2bd7346c557e8569983b9a966/invoke.js HTTP/1.1\r\nHost: usefulspeak.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 23 Aug 2025 18:37:31 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 13343\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 2\r\nHost: usefulspeak.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 5cd82f50123af77d3d0e04a7d4f8bc93\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":34136,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (34136), with no line terminators","md5":"481b9461cf458e3223337de295c9e964","sha1":"4ca18dfd08e9ac6b55b0c1da1d2a80a71b4f4ae9","sha256":"9d63040f268698f06eced4420be8105ca57abf15d830b69fb311f6740a922c1c","sha512":"48bb76c5c4d3183f66fe23fa48e46ec80d130f5c8254d6af6f11535c4b45c1c897a9b516b6905152101a8c9e5b6664571f88934b132f1698ecbc820837f86053","ssdeep":"768:WBkqYtc5vIm+3UJVUhwlnYRpKvE43kRRwlEK8cQsIBVto:WiiIJEJihwlnKKH3kRylEK8ccE","tlshash":"5ce2e88c3f60b05813d6307f732f970de9960c0aa894c549c06bb5ecb97c767e5769a8","first_seen":"2025-08-23T18:38:03.311578Z","last_seen":"2025-08-30T00:29:25.108917Z","times_seen":3,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-23","alert":"Sinkholed","trigger":"usefulspeak.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rashcolonizeexpand.com/f0/b5/11/f0b511a8c19914e652dfaaae77a5ac81.js","fqdn":"rashcolonizeexpand.com","domain":"rashcolonizeexpand.com","tld":"com"},"ip":{"addr":"192.243.61.227","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:31.596Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rashcolonizeexpand.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 22:10:41 GMT","end":"Fri, 26 Sep 2025 22:10:40 GMT"},"fingerprint":{"sha1":"C7:75:50:5C:D3:7C:BF:A1:34:3E:61:33:FC:D6:81:21:2E:31:1D:92","sha256":"CB:A9:18:8B:DD:56:71:B4:C1:61:A7:9F:5C:50:7F:22:BB:83:72:BC:0F:B3:14:19:C4:E9:F9:59:6A:0F:95:EC"}}},"request":{"raw":"GET /f0/b5/11/f0b511a8c19914e652dfaaae77a5ac81.js HTTP/1.1\r\nHost: rashcolonizeexpand.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 23 Aug 2025 18:37:31 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 25625\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nHost: rashcolonizeexpand.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 4c605cf4b59786946a582e7287c04e21\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":72633,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"811f44dc0979b77c7047c40ffeb8e056","sha1":"2d9f710c0c2d061a4c35a34746aa270cef2c985e","sha256":"5ed561ac12f3d19d8fed3eac567d5d167bc55f9ac02bdd64f9c5580b11741e11","sha512":"bef339e6d9b17b3d921e3babd66b5b18d76359762ce8dbe9a0b9ae9f17b695f996d7370bfa7a90236b8a32ea6d8429bee7ef8048954bfdfbf03f7b649f02610b","ssdeep":"768:Y2bnYsmzjeqw648+QhS8u+Jcj/XcdNjNimOdY08kUbTehzbcepwOf:Y2bnWV4x5O+jvcsdY0U3f4","tlshash":"3063c7483f51b27802e6b8fa712fa61af0265c0195d8e4d8f503f4deae6a719f035f25","first_seen":"2025-08-23T18:38:03.316302Z","last_seen":"2025-08-30T00:29:25.243855Z","times_seen":2,"resource_available":true,"data":null}},"time_used":835,"timings":{"blocked":317,"dns":28,"connect":92,"send":0,"wait":100,"receive":93,"ssl":187},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-23","alert":"Sinkholed","trigger":"rashcolonizeexpand.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:32.012Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"preferencenail.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 01 Jul 2025 15:11:38 GMT","end":"Mon, 29 Sep 2025 15:11:37 GMT"},"fingerprint":{"sha1":"F9:52:70:4B:81:A8:F8:39:E6:E7:96:8F:EA:FE:17:FD:96:C5:32:E3","sha256":"D8:C9:87:B5:89:5E:D4:F4:8D:FD:98:3C:31:39:42:67:D3:20:27:14:A9:AD:F2:AB:97:A4:48:0F:94:F0:FF:A2"}}},"request":{"raw":"GET /sfp.js HTTP/1.1\r\nHost: preferencenail.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 23 Aug 2025 18:37:32 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nContent-Length: 28254\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nVary: Accept-Encoding\r\nHost: preferencenail.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: ea68a6eeb2a303950638d392c25ba4ca\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":85386,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"46a6fef91632b94d14252fe324c1585f","sha1":"387cebbd261b8fe947fe9805875300f2ceeb5cfd","sha256":"36d0c771f8bf310d740cb4d0ca144354c45df284e72361660448708d72f175d5","sha512":"a3aaa1b5ab1113a12793bd1085332eb257416aaa9c4a690525838b91453a281580a979bfb856b3c429c2d4243c3ce02bd318a4b7048124eef96912179836d0fd","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRL:nPncLBSUBULGVTfGpucE5fox","tlshash":"528395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","first_seen":"2025-07-08T10:38:39.799377Z","last_seen":"2025-11-18T17:01:51.014373Z","times_seen":15230,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":49,"dns":1,"connect":19,"send":0,"wait":27,"receive":18,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/genizy/assets@main/rooftop-snipers/TemplateData/progressFull.Dark.png","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://genizymath.github.io/iframe/283.html","date":"2025-08-23T18:37:32.970Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /gh/genizy/assets@main/rooftop-snipers/TemplateData/progressFull.Dark.png HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/gh/genizy/assets@main/rooftop-snipers/TemplateData/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 93\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: image/png\r\nx-jsd-version: main\r\nx-jsd-version-type: branch\r\netag: W/\"5d-C40QVjADtNhqDHAnyXpnfkhK5t8\"\r\naccept-ranges: bytes\r\nage: 6055\r\ndate: Sat, 23 Aug 2025 18:37:33 GMT\r\nx-served-by: cache-fra-eddf8230086-FRA, cache-hel1410032-HEL\r\nx-cache: HIT, MISS\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":93,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 141 x 18, 8-bit grayscale, non-interlaced","md5":"e4c14a88953a38d764a33e929dd5e240","sha1":"0b8d10563003b4d86a0c7027c97a677e484ae6df","sha256":"56aa1c0791cd8e81f9ff48e924be41f3c8edd9a3106b301b1f29f79c500a7dff","sha512":"659c454808df5d9a835839158a124bc0d8c27f9891574c1daf068bd858e3b540270fa1e610123ac99fa249063ecf335d106f4d385cff4bc31188a4955fc409bd","ssdeep":"","tlshash":"8bb012f29240cc6cf69d037a428480229552815c590134a841078419acc020cd140342","first_seen":"2025-08-23T18:38:03.32348Z","last_seen":"2026-02-20T21:07:29.347717Z","times_seen":2,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":39,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.uca.cloud.unity3d.com/localproject.json","fqdn":"config.uca.cloud.unity3d.com","domain":"unity3d.com","tld":"com"},"ip":{"addr":"34.111.113.40","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://genizymath.github.io/iframe/283.html","date":"2025-08-23T18:37:40.036Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.services.api.unity.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Fri, 01 Aug 2025 21:39:48 GMT","end":"Thu, 30 Oct 2025 22:33:42 GMT"},"fingerprint":{"sha1":"1A:2E:23:5B:B9:72:61:63:C0:1C:30:98:A9:BB:DB:37:51:9C:84:21","sha256":"F2:19:D3:C9:4B:95:5E:72:99:63:D7:BD:25:1B:7D:9A:44:AD:46:9D:09:4B:B8:74:4F:B0:0F:9C:4A:64:45:32"}}},"request":{"raw":"GET /localproject.json HTTP/1.1\r\nHost: config.uca.cloud.unity3d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://genizymath.github.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 23 Aug 2025 18:37:40 GMT\r\ncontent-type: application/json;charset=utf-8\r\naccess-control-allow-origin: *\r\ncontent-length: 293\r\nserver: Jetty(9.4.z-SNAPSHOT)\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Jetty:9.4","description":"","website":"https://www.eclipse.org/jetty","common_platform_enumeration":"","icon":"Jetty.png","categories":["Web servers"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":293,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"8673a8ac0b06a9d056d08d62f857ba4b","sha1":"a351bea1932270bafbe468584058fef20dcfc31e","sha256":"83b3f90c4edf1f122c8faf9784ca0aee4dd017c65493ac181c1814211703db96","sha512":"edf28eb7fcef654f139285d308f817ee230d6f064a4c865109d6dfe6f73c11f8f35737c8159c8a302118237ab980899ba5773f547cc9da4028643a53b08e324f","ssdeep":"","tlshash":"cbe0c2eb680035b9d9f5c3d9e92c3a6343784e370397f8156b58182c85bb2780791d27","first_seen":"2024-06-02T06:59:46Z","last_seen":"2026-04-02T01:18:52.257098Z","times_seen":96,"resource_available":false,"data":null}},"time_used":375,"timings":{"blocked":106,"dns":6,"connect":25,"send":0,"wait":162,"receive":0,"ssl":73},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/genizy/assets@main/rooftop-snipers/TemplateData/UnityProgress.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://genizymath.github.io/iframe/283.html","date":"2025-08-23T18:37:31.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /gh/genizy/assets@main/rooftop-snipers/TemplateData/UnityProgress.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: main\r\nx-jsd-version-type: branch\r\netag: W/\"2c3-AKJU13ennZbEh1rcMRuyPb02UTs\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 6055\r\ndate: Sat, 23 Aug 2025 18:37:31 GMT\r\nx-served-by: cache-fra-eddf8230076-FRA, cache-hel1410025-HEL\r\nx-cache: HIT, MISS\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 223\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":707,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (706)","md5":"5db1d705b9404972b1283bb5b3e26d74","sha1":"00a254d777a79d96c4875adc311bb23dbd36513b","sha256":"3c62cc93391b843b000ef6f94b6c4d253042c39894a82624c77d4b1784dc6d80","sha512":"703518302de164a652d243dae7d9440e69fcf260e8a614e7872193d06fb55dc7f2be0bb117b7125e14d2c0ae6946b8133a98205717ba9a932e6d9fcbe6b3673e","ssdeep":"","tlshash":"b50184589c370aaa824b4c4e617d8d65b7a00a2c963f1a100da9c81ef794f701f787dc","first_seen":"2025-08-23T18:38:03.333585Z","last_seen":"2025-08-23T18:38:03.333585Z","times_seen":1,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"genizymath.github.io/javascript/script.js","fqdn":"genizymath.github.io","domain":"genizymath.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:31.814Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 07 Mar 2025 00:00:00 GMT","end":"Sat, 07 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8C:FF:59:E5:8E:C4:FA:76:FE:AF:2D:C5:C0:D4:13:6A:77:2D:F9:91","sha256":"7D:11:22:EA:96:98:52:34:1E:8D:D9:2B:CC:0C:7E:CC:00:96:30:D1:4D:A7:34:D7:CA:42:D5:B5:4A:2B:20:97"}}},"request":{"raw":"GET /javascript/script.js HTTP/1.1\r\nHost: genizymath.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/games/rooftop-snipers/\r\nCookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=c281c967-8a50-45a7-a119-265aa7206517%3A3%3A1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: GitHub.com\r\ncontent-type: text/html; charset=utf-8\r\nx-origin-cache: HIT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: W/\"64d39a40-24a3\"\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; img-src data:; connect-src 'self'\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: 91EA:4D8FF:3648F13:3682DEA:68AA0A6A\r\naccept-ranges: bytes\r\ndate: Sat, 23 Aug 2025 18:37:31 GMT\r\nvia: 1.1 varnish\r\nage: 1\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1755974252.820637,VS0,VE1\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 423decd5ccf68ea783f8c1c70bd1c0c276f4bea8\r\ncontent-length: 5254\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":9379,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (3909)","md5":"c1f9838a645648cb3b25359f7890a288","sha1":"0cf12d25140e329bcb4c304feefce63f8f0ba7b3","sha256":"b620507312c5e97566a3c6cfaf99144fefc18a0da7d941401dfa0f5f58fb0368","sha512":"385898ec5d1ce3d13e8169945128724f6717cc35cec01d642b90046f7e03dd28a688771ca84ea53b81c8ef8cec8c1e28012c37732b80d1278a233468514a13f3","ssdeep":"192:Iwnb1iC9OA9XXMa9bYnr7JMkrALQDUnulGVopLAGCALQD6vnglET31iCLL3d:rB8HN3DUulGmmv3D6vglETliCfN","tlshash":"5a125c7f19e93705d8028e1539f227993d65840f9a866f6eb9ad1312cf8ed10e1a37cc","first_seen":"2023-06-17T01:23:25Z","last_seen":"2026-04-04T05:05:26.854156Z","times_seen":14975,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/si/7e/c0/ce/7ec0cee9c9eddc0313c7224f4bb9c235dcceed35221c66d90032359ec2e4b6ab.png","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:33.354Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Jul 2025 02:33:11 GMT","end":"Wed, 08 Oct 2025 02:33:10 GMT"},"fingerprint":{"sha1":"06:D8:07:0F:AB:BF:D8:7F:C5:38:82:AC:A7:8A:20:4D:83:6C:EA:C9","sha256":"CF:05:58:46:C3:07:3F:B6:A6:8D:42:F2:3B:3D:91:36:93:10:CB:D5:89:47:A3:62:26:D2:F3:BA:AC:51:0E:B7"}}},"request":{"raw":"GET /si/7e/c0/ce/7ec0cee9c9eddc0313c7224f4bb9c235dcceed35221c66d90032359ec2e4b6ab.png HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 23 Aug 2025 18:37:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 6423\r\nserver: nginx/1.21.6\r\nlast-modified: Fri, 15 Aug 2025 01:09:57 GMT\r\netag: \"689e88e5-1917\"\r\nexpires: Mon, 25 Aug 2025 18:37:33 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: ah0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6423,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 192x192, components 3","md5":"d8f143c53ef89fe568fb4f86eaaadd76","sha1":"57435a41ae46252e83eaa425e86c8d004fc82287","sha256":"2939c9713939fc59e054d5101edbb46015515ea52bd362372aeb6475d0a67a26","sha512":"1344497a4e548bea8882be8acbb9384fa7dcc15e31194cc670622945ba95d60825d069dffb2d3cd3a659c21df65909b3780e377c55202560be35db2aec41b680","ssdeep":"96:IElbw+iukgvhR4EpfmZe4iM/B+bNpqt9TJu5FY67pz97OPhk7fIOA+e1vRvzo:9wtwRfunBKMt9eY2pz9qa6RZvE","tlshash":"73d18e4a94192ba1ee9a49f8e8d73f03d22876716e66b63420830cfdbb12dfc4144741","first_seen":"2025-08-15T07:53:25.315072Z","last_seen":"2025-12-22T04:22:03.419479Z","times_seen":1333,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/bi/0a/53/90/0a53908c9034476078b3f956b9663221/1595867552.jpeg","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:32.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Jul 2025 02:33:11 GMT","end":"Wed, 08 Oct 2025 02:33:10 GMT"},"fingerprint":{"sha1":"06:D8:07:0F:AB:BF:D8:7F:C5:38:82:AC:A7:8A:20:4D:83:6C:EA:C9","sha256":"CF:05:58:46:C3:07:3F:B6:A6:8D:42:F2:3B:3D:91:36:93:10:CB:D5:89:47:A3:62:26:D2:F3:BA:AC:51:0E:B7"}}},"request":{"raw":"GET /bi/0a/53/90/0a53908c9034476078b3f956b9663221/1595867552.jpeg HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 23 Aug 2025 18:37:32 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 26445\r\nserver: nginx/1.21.6\r\nlast-modified: Mon, 27 Jul 2020 16:32:35 GMT\r\netag: \"5f1f01a3-674d\"\r\nexpires: Mon, 25 Aug 2025 18:37:32 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: ah0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26445,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 320x240, components 3","md5":"3e1892e0453f03d4ec6a0b45987918c5","sha1":"82fb49dde6bed053485f2614e8f2fef6c8296387","sha256":"3ffc29b8b73ec8921b9595e98665d1e2886fce31ffcc8fea2cd0ba5eb612cd89","sha512":"94505f2a2164a0d67d9979ea125dfac5a620f560248bb875710657a5f0716f52255f2dc1470c7c9b2dd0c8d3d94c7cd244fcaf68d088ff7b74c8e962d01cd36c","ssdeep":"768:YMlTLrs9OsWzsZ9UHQ4Uhq7iANj0XF+TRVR:Y0TLA9UC91hq7iYj01e","tlshash":"e2c2d14c830079ff5322963dc73b1dc55adca9d7ffa666d004d11a3fa26aa62834c5a1","first_seen":"2023-05-12T06:41:10Z","last_seen":"2026-03-29T19:59:39.862092Z","times_seen":171,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":39,"dns":34,"connect":19,"send":0,"wait":37,"receive":5,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wayfarerorthodox.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2Ffinanceskipper%2Fmessage_redcircle2%2F16%2Fcss%2Fanimate.css\u0026l=78689\u0026fd=135","fqdn":"wayfarerorthodox.com","domain":"wayfarerorthodox.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:33.801Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"wayfarerorthodox.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Jul 2025 00:39:20 GMT","end":"Tue, 30 Sep 2025 00:39:19 GMT"},"fingerprint":{"sha1":"2F:53:8D:73:5E:CE:FB:91:B4:FD:2B:4E:F3:E9:80:AA:62:1A:61:CD","sha256":"C1:D4:30:78:23:7C:54:B2:69:C9:DF:D9:A9:CB:93:CF:63:1B:C9:46:05:84:47:B1:70:77:4E:B8:85:DE:85:B8"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2Ffinanceskipper%2Fmessage_redcircle2%2F16%2Fcss%2Fanimate.css\u0026l=78689\u0026fd=135 HTTP/1.1\r\nHost: wayfarerorthodox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/\r\nCookie: uid_id2=c281c967-8a50-45a7-a119-265aa7206517:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl27062818=1; slecf0b511a8c19914e652dfaaae77a5ac81=[3078207]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 23 Aug 2025 18:37:33 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: wayfarerorthodox.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T05:45:54.968102Z","times_seen":13318572,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-23","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:34.472Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://genizymath.github.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 22 Aug 2025 08:13:09 GMT\r\nexpires: Sat, 22 Aug 2026 08:13:09 GMT\r\ncache-control: public, max-age=31536000\r\nage: 123865\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-04-04T05:45:37.747965Z","times_seen":713826,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/f0/b5/11/f0b511a8c19914e652dfaaae77a5ac81.js","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"192.243.61.227","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:31.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 22:21:33 GMT","end":"Fri, 26 Sep 2025 22:21:32 GMT"},"fingerprint":{"sha1":"4A:6A:48:C8:5B:C5:2B:2E:9C:03:AF:BF:4C:E6:10:23:E2:7B:EA:97","sha256":"A8:42:B5:4A:20:C8:13:EF:B5:90:0F:54:37:F7:05:60:8D:91:07:E3:A4:0F:7A:22:C9:AF:F1:F5:22:E8:68:C9"}}},"request":{"raw":"GET /f0/b5/11/f0b511a8c19914e652dfaaae77a5ac81.js HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 23 Aug 2025 18:37:31 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 25639\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 92d81a2c0f6f18a22c83168ba01c277a\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":72632,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"358b5dc944ea34ae675e221ea0989259","sha1":"03412ea5a1ad4a3c54ebe185f177ff28cdb298bf","sha256":"d5f3e5baeda5be962ea6d6bc124717a30a276e18f32e2411d1125b10576caf32","sha512":"59cc1b93caacce5904cba237af8d2b9d9f5bc86d9e233f0ba09d344b3d918dc8f998741ae5aa1e4eca95e20a0e9cdfa6f70b0a7ec34560a8e4cb7682cd377b02","ssdeep":"768:Y2bnYsmzjHqw648+QhS8u+Jcj/XcdNjNimOdY08kUbTehzbcepwOf:Y2bnWE4x5O+jvcsdY0U3f4","tlshash":"ad63c7483f51b27802e6b8fa712fa61af0265c1195d8e0d8f503f4ddae66719f035f25","first_seen":"2025-08-23T15:42:19.259785Z","last_seen":"2025-08-30T00:29:25.242899Z","times_seen":3,"resource_available":true,"data":null}},"time_used":472,"timings":{"blocked":-1,"dns":0,"connect":94,"send":0,"wait":95,"receive":93,"ssl":189},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-23","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/gn-math/covers@main/283.png","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:31.687Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /gh/gn-math/covers@main/283.png HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: image/png\r\nx-jsd-version: main\r\nx-jsd-version-type: branch\r\netag: W/\"1db9b-EgllN4ukbqNkOD0/lPmiq58ucIo\"\r\naccept-ranges: bytes\r\nage: 1122\r\ndate: Sat, 23 Aug 2025 18:37:31 GMT\r\nx-served-by: cache-fra-eddf8230047-FRA, cache-hel1410025-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 121755\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":121755,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 314 x 314, 8-bit/color RGBA, non-interlaced","md5":"8b1895a694f345658b95b6dddd4f284e","sha1":"120965378ba46ea364383d3f94f9a2ab9f2e708a","sha256":"0e6208c76703e5969a0ed59b8a5634622a1990783f27ec317b4de5c599a22cd5","sha512":"0c34d0a473ff4046144e7e38de7c1debfd4d87aa5be97fc636ccdd05a3c16a9ee9a1485b0bc8e3b671a568cce654895061d3bc85ab3be858a137211dd67d8680","ssdeep":"3072:PJLuZSOrZfTlTRio8H6bPtozzvEDna7IEia3fN057I:RGTlJTQX8Gana7I2OI","tlshash":"86c31258a94dd0720f57f08c80564ab7fba03d9c825dc385eb8da3319298b5b15df19e","first_seen":"2025-08-23T18:38:03.347707Z","last_seen":"2025-08-23T18:38:03.347707Z","times_seen":1,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":13,"send":0,"wait":58,"receive":28,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wayfarerorthodox.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.show-sb.com%2Fsb%2Fau%2F2f%2F33%2F17%2F2f3317da28d2a6ed09610d2d267aa136%2F1648542458.html\u0026l=2977\u0026fd=170","fqdn":"wayfarerorthodox.com","domain":"wayfarerorthodox.com","tld":"com"},"ip":{"addr":"192.243.61.227","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:33.232Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"wayfarerorthodox.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Jul 2025 00:39:20 GMT","end":"Tue, 30 Sep 2025 00:39:19 GMT"},"fingerprint":{"sha1":"2F:53:8D:73:5E:CE:FB:91:B4:FD:2B:4E:F3:E9:80:AA:62:1A:61:CD","sha256":"C1:D4:30:78:23:7C:54:B2:69:C9:DF:D9:A9:CB:93:CF:63:1B:C9:46:05:84:47:B1:70:77:4E:B8:85:DE:85:B8"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.show-sb.com%2Fsb%2Fau%2F2f%2F33%2F17%2F2f3317da28d2a6ed09610d2d267aa136%2F1648542458.html\u0026l=2977\u0026fd=170 HTTP/1.1\r\nHost: wayfarerorthodox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 23 Aug 2025 18:37:33 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: wayfarerorthodox.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T05:45:54.968102Z","times_seen":13318572,"resource_available":true,"data":null}},"time_used":723,"timings":{"blocked":310,"dns":1,"connect":101,"send":0,"wait":103,"receive":0,"ssl":205},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-23","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/chat/mob/ssp/1/js/jquery.min.js","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:33.355Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Jul 2025 14:01:22 GMT","end":"Mon, 29 Sep 2025 14:59:36 GMT"},"fingerprint":{"sha1":"CD:76:E0:2A:28:09:08:24:2D:4C:A1:14:B2:AE:6C:39:A4:CC:2F:6B","sha256":"8B:98:84:C0:8D:47:7C:1B:A7:26:4B:E4:9E:6E:FD:8E:E1:6D:6E:41:1D:E7:91:B7:70:A3:C1:D0:C0:85:6B:31"}}},"request":{"raw":"GET /sb/chat/mob/ssp/1/js/jquery.min.js HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 23 Aug 2025 18:37:33 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sat, 07 May 2022 05:43:05 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=37XWREALRgpnJroZOK31yGgfgNFmH%2BH0okSWX%2FYpVW6%2B3ldAXrUYMRfGLycE1oiHVcE231GKVHaqpT%2Fn1nuAzAUHCoWIaDkHIf6%2FWrJLs%2B8%3D\"}]}\r\nage: 1330845\r\ncf-cache-status: HIT\r\netag: W/\"627606e9-15d94\"\r\ncontent-encoding: br\r\ncf-ray: 973cb8cb7ef95cf6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89492,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"561acb3e541133bbdd2c0c19f8ee35a1","sha1":"ffd1353cf3f77d25f801c84d8208613eb0d3d548","sha256":"9fde6da568db31801e29243a903bf24f342256b41e3c01e7d018ff7c566ce7fc","sha512":"8a647ed6f56b4da93c7a034609060991cc8080350f057f4f2af2c369f18af066db3b4e77701fc017027fd774264a6d0f84927239d7d2f693edc6f7d6a0917be3","ssdeep":"1536:YjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h5cApwEjOPrBeU6QLiTFbc0QlQvakV:YYh8eip3hXuf6IidlrvakdtQ47GKl","tlshash":"f993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","first_seen":"2023-03-07T01:04:00Z","last_seen":"2026-04-03T18:56:22.048855Z","times_seen":6515,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.show-sb.com/sb/notifications/utility/default/us/blog/financeskipper/message_redcircle2/16/index.html","fqdn":"cdn.show-sb.com","domain":"show-sb.com","tld":"com"},"ip":{"addr":"104.21.95.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:33.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"show-sb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 10 Aug 2025 11:11:15 GMT","end":"Sat, 08 Nov 2025 12:08:40 GMT"},"fingerprint":{"sha1":"46:26:78:BD:18:7A:95:15:D4:B3:89:73:FE:7E:99:33:18:7F:21:3E","sha256":"AD:6B:6A:10:54:38:33:B9:BB:A6:FD:B7:B0:1B:2E:9D:62:B8:47:35:C4:E6:7B:F6:4A:92:AA:75:B0:29:F7:F3"}}},"request":{"raw":"GET /sb/notifications/utility/default/us/blog/financeskipper/message_redcircle2/16/index.html HTTP/1.1\r\nHost: cdn.show-sb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://genizymath.github.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 23 Aug 2025 18:37:33 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:21:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1f7lT2nOvdznFxm5ibumi8T9fkTqLYGE8oF9RILTdoPi8Ce1lpkf%2F7FReOLrrxvFBvq9vzt%2Fl8tLIA14uZ9PijtWTF6Z5HVSSOPlwV%2BrUg%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 973cb8cbcb251806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1545,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"3f8de4c280d2d48e8418a562095ac7e4","sha1":"3dc3e5bc655dcd0ff5b045b147c28398e07b6e4d","sha256":"54358796e1fc6b065f33194b7e4f02b43fc28050a3d64e482e59f4251d06fc15","sha512":"c18250930cb2c86f3a7d61f48af05396524b301f316fdba1de20d4a47e4ebf85f98b0b7dd045320c232c861c07b4869ca74dcae0eb7ca578f8398c5e573d6ac3","ssdeep":"","tlshash":"cb314c462fecd5b611c38685bb303f27ec86d94be9462501b6fc0a548bdbda2d943a07","first_seen":"2023-04-07T13:35:32Z","last_seen":"2026-04-02T10:27:56.65016Z","times_seen":411,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"torchfriendlypay.com/sbar.json?key=71033c1d2ddd571b951e9de84dd54e0e\u0026uuid=c281c967-8a50-45a7-a119-265aa7206517%3A3%3A1","fqdn":"torchfriendlypay.com","domain":"torchfriendlypay.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:32.652Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"torchfriendlypay.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 22:31:57 GMT","end":"Fri, 26 Sep 2025 22:31:56 GMT"},"fingerprint":{"sha1":"C1:1A:8F:9D:C9:3D:22:4D:0E:AA:D9:B9:1C:98:E3:DC:41:83:82:4F","sha256":"B2:2E:9D:A4:0D:D7:A4:C2:A4:C1:7F:A9:E3:2A:AF:DE:7B:7F:BF:6A:1D:DC:6A:9C:AB:BF:98:D7:C2:A6:40:2E"}}},"request":{"raw":"GET /sbar.json?key=71033c1d2ddd571b951e9de84dd54e0e\u0026uuid=c281c967-8a50-45a7-a119-265aa7206517%3A3%3A1 HTTP/1.1\r\nHost: torchfriendlypay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://genizymath.github.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 23 Aug 2025 18:37:33 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\naccess-control-allow-origin: https://genizymath.github.io\r\naccess-control-allow-credentials: true\r\nset-cookie: uid_id2=c281c967-8a50-45a7-a119-265aa7206517:3:1; expires=Sat, 30 Aug 2025 18:37:33 GMT; path=/; secure; SameSite=None\npdhtkv=true; expires=Sun, 24 Aug 2025 18:37:33 GMT; path=/; secure; SameSite=None\nuncs=1; expires=Sun, 24 Aug 2025 18:37:33 GMT; path=/; secure; SameSite=None\npdhtkv29=true; expires=Sun, 24 Aug 2025 18:37:33 GMT; path=/; secure; SameSite=None\nuncs29=1; expires=Sun, 24 Aug 2025 18:37:33 GMT; path=/; secure; SameSite=None\nu_pl27249042=1; expires=Sun, 24 Aug 2025 18:37:33 GMT; path=/; secure; SameSite=None\nslec71033c1d2ddd571b951e9de84dd54e0e=[3078207]; expires=Sat, 23 Aug 2025 18:37:38 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 212\r\nHost: torchfriendlypay.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: e3f4b0c0a7c98175d7f3fd990e4439ca\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6172,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"JSON text data","md5":"59f863b2b6c26ce048391e43df327034","sha1":"d2327f332ad45297d89cec848fc7913e1e8a0a37","sha256":"9587cc79b86b7acc2911d2fa75082cf085c69d8dd09e7809af4b304fa4c787b3","sha512":"c1c1238a138cce9af7b091c379ab94fc3ce139420f44ebd77305137a9b3af28b560ebf294970df62ea80ad4077fb67d9a0128b4f902f70e293d19bcd7c957bf5","ssdeep":"192:9zcDPTFEvWlr1Jd/LEpTYeJUfSDQjgR1q8:9zmPhEsrxIYCQk","tlshash":"e3d18defe80935c601c1d8485ae63dfd3e7f7e002c9b661fa89a633d91a84885f445da","first_seen":"2025-08-23T18:38:03.35354Z","last_seen":"2025-08-23T18:38:03.35354Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1100,"timings":{"blocked":403,"dns":12,"connect":176,"send":0,"wait":308,"receive":0,"ssl":199},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-23","alert":"Sinkholed","trigger":"torchfriendlypay.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/cti/9c/a5/07/9ca507e45adf1d4433d2d595ae07bfeb/1753377890.jpg","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:32.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Jul 2025 02:33:11 GMT","end":"Wed, 08 Oct 2025 02:33:10 GMT"},"fingerprint":{"sha1":"06:D8:07:0F:AB:BF:D8:7F:C5:38:82:AC:A7:8A:20:4D:83:6C:EA:C9","sha256":"CF:05:58:46:C3:07:3F:B6:A6:8D:42:F2:3B:3D:91:36:93:10:CB:D5:89:47:A3:62:26:D2:F3:BA:AC:51:0E:B7"}}},"request":{"raw":"GET /cti/9c/a5/07/9ca507e45adf1d4433d2d595ae07bfeb/1753377890.jpg HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 23 Aug 2025 18:37:33 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 36102\r\nserver: nginx/1.21.6\r\nlast-modified: Thu, 24 Jul 2025 17:24:51 GMT\r\netag: \"68826c63-8d06\"\r\nexpires: Mon, 25 Aug 2025 18:37:33 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: ah0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":36102,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 26.3 (Macintosh), datetime=2025:07:23 17:44:57], progressive, precision 8, 728x90, components 3","md5":"7b410f137118463804f338bd6bcec7ed","sha1":"3a54db78c6f25fe0dfb6f448ee320daf750f4006","sha256":"f09ecabeefdad0f5ab177379b65086385114b96cdf1cbed614ab7b03d5dee744","sha512":"91d068536f948bea8b5ee67f610bb423fbf502d46d1db1500b5ba4f06fb48f8a90fe0da21941aacb060f0f5a57cba8300e43e0aa9641fb0ea2177ef698b0c3b5","ssdeep":"768:Ji1BuYy1Do46fgVSJBaPISqV0gS5MPrrb:SupAnJBaIOr4L","tlshash":"49f2c048bb329e11fdd9b77454f0c2816139cf5ca6639a91bc0dad053f71381acae197","first_seen":"2025-07-29T17:07:42.586433Z","last_seen":"2025-08-31T16:57:01.182714Z","times_seen":155,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":19,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"prefacebegbeginning.com/cc/26/99/cc2699d51b73e1eb5f9d2126b08c131a.js","fqdn":"prefacebegbeginning.com","domain":"prefacebegbeginning.com","tld":"com"},"ip":{"addr":"192.243.61.227","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:31.447Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"prefacebegbeginning.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 07 Aug 2025 09:12:18 GMT","end":"Wed, 05 Nov 2025 09:12:17 GMT"},"fingerprint":{"sha1":"02:DD:30:E6:FA:61:35:3B:6E:17:C3:A5:38:D6:82:9F:DD:79:CC:43","sha256":"97:9B:4B:68:15:BD:DE:B4:41:E2:49:37:12:C2:46:A0:AB:C7:E2:25:EC:7D:F9:A2:10:00:05:99:CC:2C:3E:F7"}}},"request":{"raw":"GET /cc/26/99/cc2699d51b73e1eb5f9d2126b08c131a.js HTTP/1.1\r\nHost: prefacebegbeginning.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 23 Aug 2025 18:37:31 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 33033\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nHost: prefacebegbeginning.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 26344d964d36b5b8079bd2005b733caa\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":105720,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"475d855a392d241b8376e6f6bd75d413","sha1":"d4d61d466d8b810b76ce05f213e6e70c08ebc359","sha256":"7070cd8e916f9de8681c1e0072f10d3ddbb62b08942530362d2ffad20d20ba13","sha512":"fe63fd6de014d64228466a7f1a82e203be70094f24f941275f8d4b88622f6a3cd154d5b83b0d7b8e03cdc251b492028b0b2113fc9d74e4404be4ca42ae0fde42","ssdeep":"1536:cmt7BMZUs9piv3i6In8noteGF1XF3Uy2T6sh4:ckdv3i6C8notJZFETa","tlshash":"bba3e9887f50f47d02da6036233f962ae1ee8e42154ee158d026edd53a68317e63ddb8","first_seen":"2025-08-23T18:38:03.357979Z","last_seen":"2025-08-23T18:38:03.357979Z","times_seen":1,"resource_available":true,"data":null}},"time_used":812,"timings":{"blocked":308,"dns":25,"connect":93,"send":0,"wait":96,"receive":92,"ssl":188},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-23","alert":"Sinkholed","trigger":"prefacebegbeginning.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/b2/bf/b0/b2bfb06d346184e36a9350004a86fed4.js","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"192.243.61.227","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:31.466Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 22:21:33 GMT","end":"Fri, 26 Sep 2025 22:21:32 GMT"},"fingerprint":{"sha1":"4A:6A:48:C8:5B:C5:2B:2E:9C:03:AF:BF:4C:E6:10:23:E2:7B:EA:97","sha256":"A8:42:B5:4A:20:C8:13:EF:B5:90:0F:54:37:F7:05:60:8D:91:07:E3:A4:0F:7A:22:C9:AF:F1:F5:22:E8:68:C9"}}},"request":{"raw":"GET /b2/bf/b0/b2bfb06d346184e36a9350004a86fed4.js HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 23 Aug 2025 18:37:31 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 33021\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 0e1c84f8cce9d376a90a5911b6080c07\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":105710,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"9782b4818b926e3a3dff64ae581c480e","sha1":"08a9fd6192c0f2ee3be406e6da290b4d1dfc8190","sha256":"d333df0f117809f385e17fc92d735bfca30a0708db590b77b58208fdbfc3f296","sha512":"f8a94b516ecde7bc917c8604f377384975ae71700795c6cb39982c64defd61d8fbd8db2ae00dc1e2fa0b68363fc3d443d8d6b14dab90153821c758c61b1cebb0","ssdeep":"1536:cmt7BMZUs9piv3i6In8noteGF1XF3xy/T6+h4:ckdv3i6C8notJZFhUM","tlshash":"89a3e9887f50f47d02da6036233f962ae1ee4e42154ee158d026fde53a68317e63ddb8","first_seen":"2025-08-23T18:38:03.360432Z","last_seen":"2025-08-26T15:34:52.137767Z","times_seen":2,"resource_available":true,"data":null}},"time_used":751,"timings":{"blocked":278,"dns":0,"connect":92,"send":0,"wait":97,"receive":93,"ssl":188},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-23","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"genizymath.github.io/iframe/283.html","fqdn":"genizymath.github.io","domain":"genizymath.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:31.654Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 07 Mar 2025 00:00:00 GMT","end":"Sat, 07 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8C:FF:59:E5:8E:C4:FA:76:FE:AF:2D:C5:C0:D4:13:6A:77:2D:F9:91","sha256":"7D:11:22:EA:96:98:52:34:1E:8D:D9:2B:CC:0C:7E:CC:00:96:30:D1:4D:A7:34:D7:CA:42:D5:B5:4A:2B:20:97"}}},"request":{"raw":"GET /iframe/283.html HTTP/1.1\r\nHost: genizymath.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/games/rooftop-snipers/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: text/html; charset=utf-8\r\nlast-modified: Sat, 23 Aug 2025 18:36:53 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: W/\"68aa0a45-966\"\r\nexpires: Sat, 23 Aug 2025 18:47:31 GMT\r\ncache-control: max-age=600\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: 7FD2:316DF6:35D749A:36112CA:68AA0A6B\r\naccept-ranges: bytes\r\ndate: Sat, 23 Aug 2025 18:37:31 GMT\r\nvia: 1.1 varnish\r\nage: 0\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1755974252.603674,VS0,VE133\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 2537e26f4b5377b3a1c86a65c59b42e62ca16115\r\ncontent-length: 972\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]}],"data":{"size":2406,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (351), with CRLF line terminators","md5":"ec23811200dac0fdd70c0ddc337210de","sha1":"07c0db6faea04862af46ec708b06b0e9ef4a5776","sha256":"c338efe1a2add01f9e2f22413c3833ce43c538096537a7f865e59fc81445682a","sha512":"0ddeb59b11551adce2e7d621da2ec349e8b5af9b0a6c5f61e7b9802986ee3b889e6e68c907e453ca56a51f352b4a1c066bdde011ede6883a25083bfd1c828047","ssdeep":"","tlshash":"20412e279dc0cc0a5772826509e3f06cef665047a385ac80b0ac116b5ff7b954ce36eb","first_seen":"2025-08-23T18:38:03.363131Z","last_seen":"2025-08-23T18:38:03.363131Z","times_seen":1,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/watch.199492741035.js?key=33e6a4f2bd7346c557e8569983b9a966\u0026kw=%5B%22play%22%2C%22rooftop%22%2C%22snipers%22%2C%22gn-math%22%2C%22unblocked%22%2C%22games%22%5D\u0026refer=https%3A%2F%2Fgenizymath.github.io%2Fgames%2Frooftop-snipers%2F\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=c281c967-8a50-45a7-a119-265aa7206517%3A3%3A1","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:31.807Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 21:49:55 GMT","end":"Fri, 26 Sep 2025 21:49:54 GMT"},"fingerprint":{"sha1":"38:55:0E:5D:7C:E7:08:BA:9A:77:8D:79:E7:3A:6B:27:F8:97:E4:89","sha256":"3A:54:48:30:C3:83:C3:F6:C2:3E:B3:7D:81:B3:37:9D:16:0C:B9:AE:C5:C3:56:8C:33:5D:AD:24:2B:B7:35:AF"}}},"request":{"raw":"GET /watch.199492741035.js?key=33e6a4f2bd7346c557e8569983b9a966\u0026kw=%5B%22play%22%2C%22rooftop%22%2C%22snipers%22%2C%22gn-math%22%2C%22unblocked%22%2C%22games%22%5D\u0026refer=https%3A%2F%2Fgenizymath.github.io%2Fgames%2Frooftop-snipers%2F\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=c281c967-8a50-45a7-a119-265aa7206517%3A3%3A1 HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://genizymath.github.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 307 Temporary Redirect\r\nServer: nginx/1.21.6\r\nDate: Sat, 23 Aug 2025 18:37:32 GMT\r\nContent-Type: text/html\r\nContent-Length: 0\r\nConnection: keep-alive\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\naccess-control-allow-origin: https://genizymath.github.io\r\naccess-control-allow-credentials: true\r\nlocation: https://kettledroopingcontinuation.com/watch.199492741035.js?dev=e\u0026key=33e6a4f2bd7346c557e8569983b9a966\u0026kw=%5B%22play%22%2C%22rooftop%22%2C%22snipers%22%2C%22gn-math%22%2C%22unblocked%22%2C%22games%22%5D\u0026pst=1755974312\u0026rb=\u0026refer=https%3A%2F%2Fgenizymath.github.io%2Fgames%2Frooftop-snipers%2F\u0026res=14.3095\u0026rmtc=t\u0026shu=d3fcd7711537095a3eef075c02776631e8a3fdeee6e148444d9fff0186ecf7ea21b44e016b3d97d3a85476b5ad3d8a54921bf8ee3f1e787d2af5e19e64d0ce51569130f7f6f75abd064043d683d5bdfd4cdb1d7cb9c596822e426b\u0026tz=0\u0026uuid=c281c967-8a50-45a7-a119-265aa7206517%3A3%3A1\r\nset-cookie: ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJwIjp7ImlkIjoyNjk0MDkyMSwiayI6IjMzZTZhNGYyYmQ3MzQ2YzU1N2U4NTY5OTgzYjlhOTY2Iiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjo1MDY0NDE3LCJwaWQiOjI3NTIwMTAsImFuIjp0cnVlLCJsYW4iOnRydWUsImNpZCI6MywiYWlkIjoyMywicHQiOjQsInBrIjoidXBmYjdiaXBxIiwiY3BrcyI6eyIyOCI6ImIyYmZiMDZkMzQ2MTg0ZTM2YTkzNTAwMDRhODZmZWQ0IiwiMjkiOiJmMGI1MTFhOGMxOTkxNGU2NTJkZmFhYWU3N2E1YWM4MSJ9LCJ0IjoxfSwidSI6eyJ1IjoxLCJhdSI6MSwiZCI6eyJpZCI6MjY2NTYxMTE1LCJpZHMiOiIiLCJpYyI6ZmFsc2UsIm4iOiJEZXNrdG9wLEVtdWxhdG9yIiwidiI6IlVua25vd24iLCJtIjoiVW5rbm93biIsImYiOjEsImZuIjoiRGVza3RvcCIsIm9pZCI6Mzg5MTQsIm9uIjoiV2luZG93cyIsIm92IjoiMTAuMCIsImJpZCI6MTM2OTI1LCJibiI6IkZpcmVmb3giLCJidiI6IjEzNC4wIiwid3YiOmZhbHNlLCJlIjp0cnVlLCJhYiI6ZmFsc2V9LCJjIjp7ImlkIjoxNjIsImMiOiJOTyIsIm4iOiJOb3J3YXkifSwiYSI6ZmFsc2UsImNyIjp7Im4iOiJCbGl4IFNvbHV0aW9ucyJ9LCJ4ZiI6IiIsIml4ZiI6ZmFsc2UsImlneGYiOmZhbHNlLCJ1cCI6dHJ1ZSwiciI6Imh0dHBzOi8vZ2VuaXp5bWF0aC5naXRodWIuaW8vZ2FtZXMvcm9vZnRvcC1zbmlwZXJzLyIsImFyIjpbXX19.GSN40yDQqCPk3Sp_Ky3GV4ehy9hJLYxPoTUuW-eBxXc; expires=Sat, 23 Aug 2025 18:38:32 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 1\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: d90c0fa415178002f276c5b1a31f3f94\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":4878,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T05:45:54.968102Z","times_seen":13318572,"resource_available":true,"data":null}},"time_used":672,"timings":{"blocked":287,"dns":2,"connect":92,"send":0,"wait":96,"receive":0,"ssl":192},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-23","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/genizy/assets@main/rooftop-snipers/Build/rooftop-snipers.asm.memory.unityweb","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://genizymath.github.io/iframe/283.html","date":"2025-08-23T18:37:32.449Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /gh/genizy/assets@main/rooftop-snipers/Build/rooftop-snipers.asm.memory.unityweb HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://genizymath.github.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 349865\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/vnd.unity\r\nx-jsd-version: main\r\nx-jsd-version-type: branch\r\netag: W/\"556a9-zF+Zs4bgy0bKsX1BxMmTm6w9Le0\"\r\naccept-ranges: bytes\r\nage: 6055\r\ndate: Sat, 23 Aug 2025 18:37:32 GMT\r\nx-served-by: cache-fra-eddf8230168-FRA, cache-hel1410032-HEL\r\nx-cache: HIT, MISS\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":349865,"size_decoded":0,"mime_type":"application/vnd.unity","magic":"gzip compressed data, was \"Rooftop Snipers WebGL.asm.memory.unityweb\", has comment, last modified: Fri Jun 16 19:17:48 2017, max compression, from Unix","md5":"5c86a755db120471767745ed1d7157f1","sha1":"cc5f99b386e0cb46cab17d41c4c9939bac3d2ded","sha256":"884ffa169399ef39af758b6d4fbc0dfd0a97e6dc8bff5d35a4cf2cf46098b682","sha512":"0f0d9e6e575b3aa07c4c561b12909f76c0e4296186d42fa0308d55dbe5c7b7b550cbb1c91741184256e09475eaf924c9ebaa500cab425f38d3455a433f1a8377","ssdeep":"6144:E7/J2J6yNoXQ+epi9z6Br9YclCbVRxq4SK6YaZ3ExzzuKbrmAmPS3+SnL:A2JDmXQ/I6p9YcliXYKDzuDXPe+SnL","tlshash":"de7423d940cede625374ce38256db4416ef1063ee7bbd51b928b10e958a91c079a0b3f","first_seen":"2025-08-23T18:38:03.365879Z","last_seen":"2025-08-23T18:38:03.365879Z","times_seen":1,"resource_available":false,"data":null}},"time_used":400,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":339,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"genizymath.github.io/games/rooftop-snipers/","fqdn":"genizymath.github.io","domain":"genizymath.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-23T18:37:30.513Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 07 Mar 2025 00:00:00 GMT","end":"Sat, 07 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8C:FF:59:E5:8E:C4:FA:76:FE:AF:2D:C5:C0:D4:13:6A:77:2D:F9:91","sha256":"7D:11:22:EA:96:98:52:34:1E:8D:D9:2B:CC:0C:7E:CC:00:96:30:D1:4D:A7:34:D7:CA:42:D5:B5:4A:2B:20:97"}}},"request":{"raw":"GET /games/rooftop-snipers/ HTTP/1.1\r\nHost: genizymath.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: text/html; charset=utf-8\r\nx-origin-cache: HIT\r\nlast-modified: Sat, 23 Aug 2025 18:36:53 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: W/\"68aa0a45-2839\"\r\nexpires: Sat, 23 Aug 2025 18:47:30 GMT\r\ncache-control: max-age=600\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: 91EA:4D8FF:3648E61:3682D28:68AA0A6A\r\naccept-ranges: bytes\r\ndate: Sat, 23 Aug 2025 18:37:30 GMT\r\nvia: 1.1 varnish\r\nage: 0\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1755974251.557431,VS0,VE139\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 9c16aeb148b1c731147f03e85d32e09470c59175\r\ncontent-length: 2742\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]}],"data":{"size":10297,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"23d04958b53d54efc4df1a6398db6ec3","sha1":"f420ad0a0587a685b3e26a9e79691f14090a354b","sha256":"dc15cc4428768b2e40e9e4f2c39ec79f680e1e5801325dd7f17d8f21178a6a92","sha512":"d27af21c9028ae7b5cb6115989b69fb4882a71c742cad77949e2b1c4ef0176d5f57c8f7331d61f0d3f1b65b5f326f32e749d8178020fce5953a32a4d9562f2de","ssdeep":"192:I2KYfg4ssDrcff1RVzLUCmyJzo9LFT5tLlyxKCIdvefcFQx9LFA:I2aPOlDdvefcKZA","tlshash":"9d22625b4df38896112281a62ff6f6047e65d403da08dc9576ec8258bfc2fd98c9335e","first_seen":"2025-08-23T18:38:03.368737Z","last_seen":"2025-08-23T18:38:03.368737Z","times_seen":1,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":37,"dns":1,"connect":13,"send":0,"wait":153,"receive":1,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flushpersist.com/pxf.gif?uuid=c281c967-8a50-45a7-a119-265aa7206517\u0026eb=bff3d6bf6d16c0bb5e58232c1a99ef63\u0026te=fe015aeda515c30449c87b1701cc307f\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=71033c1d2ddd571b951e9de84dd54e0e\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=18","fqdn":"flushpersist.com","domain":"flushpersist.com","tld":"com"},"ip":{"addr":"192.243.61.227","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:32.868Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"flushpersist.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 01 Jul 2025 15:12:33 GMT","end":"Mon, 29 Sep 2025 15:12:32 GMT"},"fingerprint":{"sha1":"9E:08:20:A0:75:ED:21:51:E0:3D:DE:29:CD:B0:11:01:4D:04:77:0A","sha256":"FB:D4:A2:1D:0F:F1:FB:A8:D9:5E:88:03:1F:BB:94:D2:32:5C:CC:49:11:11:FC:04:7B:C6:43:40:CF:1E:A2:BA"}}},"request":{"raw":"GET /pxf.gif?uuid=c281c967-8a50-45a7-a119-265aa7206517\u0026eb=bff3d6bf6d16c0bb5e58232c1a99ef63\u0026te=fe015aeda515c30449c87b1701cc307f\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=71033c1d2ddd571b951e9de84dd54e0e\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=18 HTTP/1.1\r\nHost: flushpersist.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 23 Aug 2025 18:37:33 GMT\r\nContent-Type: image/gif\r\nContent-Length: 1\r\nConnection: keep-alive\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nHost: flushpersist.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: b1032ac54fd2f72e031d9e9aa6d89070\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T05:45:54.968102Z","times_seen":13318572,"resource_available":true,"data":null}},"time_used":663,"timings":{"blocked":282,"dns":1,"connect":94,"send":0,"wait":94,"receive":0,"ssl":189},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/chat/mob/ssp/1/js/script.js","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:33.416Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Jul 2025 14:01:22 GMT","end":"Mon, 29 Sep 2025 14:59:36 GMT"},"fingerprint":{"sha1":"CD:76:E0:2A:28:09:08:24:2D:4C:A1:14:B2:AE:6C:39:A4:CC:2F:6B","sha256":"8B:98:84:C0:8D:47:7C:1B:A7:26:4B:E4:9E:6E:FD:8E:E1:6D:6E:41:1D:E7:91:B7:70:A3:C1:D0:C0:85:6B:31"}}},"request":{"raw":"GET /sb/chat/mob/ssp/1/js/script.js HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://genizymath.github.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 23 Aug 2025 18:37:33 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sat, 07 May 2022 03:21:31 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tKsF3q20VjVWS9KKFnJuYkruEDKYy0LxVHCWNaGF5PqIFKGyL%2BP9tR7VxjRDyEuVEqWifrQRjjmED7c5hf88LsDrvzbJW42c%2B09qLUxptmY%3D\"}]}\r\nage: 10548\r\ncf-cache-status: HIT\r\netag: W/\"6275e5bb-17e\"\r\ncontent-encoding: br\r\ncf-ray: 973cb8cbefcd5cf6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":382,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"4f5f05ab032dd8fc0db448fcf51a35e2","sha1":"78f94f93fdb792d95ea3ac293ac1b8e3bc13d609","sha256":"7fd8e9c0e5ca0c7123954a109fa8b7e8368c7e1262880925e2ac7b8c877a9e38","sha512":"66a1f6a4996b8a21631d4bbbe85654ee1a47562b478ebd97bac584e7efe9a9d431f59c52a495876295a1e59760f12adb083e299dc302bd15080e559e1adae206","ssdeep":"","tlshash":"f4e02b2052540234c3bbc19691cb6bcb6270451ad009050e641c575b1df2bb612c9e97","first_seen":"2023-05-19T20:45:50Z","last_seen":"2026-01-17T18:50:06.236167Z","times_seen":1120,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wayfarerorthodox.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fchat%2Fmob%2Fssp%2F1%2Fjs%2Fscript.js\u0026l=382\u0026fd=24","fqdn":"wayfarerorthodox.com","domain":"wayfarerorthodox.com","tld":"com"},"ip":{"addr":"192.243.61.227","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:33.443Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"wayfarerorthodox.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Jul 2025 00:39:20 GMT","end":"Tue, 30 Sep 2025 00:39:19 GMT"},"fingerprint":{"sha1":"2F:53:8D:73:5E:CE:FB:91:B4:FD:2B:4E:F3:E9:80:AA:62:1A:61:CD","sha256":"C1:D4:30:78:23:7C:54:B2:69:C9:DF:D9:A9:CB:93:CF:63:1B:C9:46:05:84:47:B1:70:77:4E:B8:85:DE:85:B8"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fchat%2Fmob%2Fssp%2F1%2Fjs%2Fscript.js\u0026l=382\u0026fd=24 HTTP/1.1\r\nHost: wayfarerorthodox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 23 Aug 2025 18:37:33 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: wayfarerorthodox.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T05:45:54.968102Z","times_seen":13318572,"resource_available":true,"data":null}},"time_used":723,"timings":{"blocked":310,"dns":1,"connect":101,"send":0,"wait":103,"receive":0,"ssl":205},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-23","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/notifications/utility/default/us/blog/financeskipper/message_redcircle2/16/img/sale3.jpg","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:33.847Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Jul 2025 14:01:22 GMT","end":"Mon, 29 Sep 2025 14:59:36 GMT"},"fingerprint":{"sha1":"CD:76:E0:2A:28:09:08:24:2D:4C:A1:14:B2:AE:6C:39:A4:CC:2F:6B","sha256":"8B:98:84:C0:8D:47:7C:1B:A7:26:4B:E4:9E:6E:FD:8E:E1:6D:6E:41:1D:E7:91:B7:70:A3:C1:D0:C0:85:6B:31"}}},"request":{"raw":"GET /sb/notifications/utility/default/us/blog/financeskipper/message_redcircle2/16/img/sale3.jpg HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 23 Aug 2025 18:37:33 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 64642\r\nlast-modified: Fri, 19 Jan 2024 14:21:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"65aa8566-fc82\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\naccept-ranges: bytes\r\nage: 1252416\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BJYbf8Jm50iCbQVQo1YF%2BSlZea6459kC8BWGiK2RI71WcgUwgPXv0WO11YxQqIPJo%2FIQBTxi9KKQXgxKTA9K5W8o4XxK5wx7Rx4Z80mcL5M%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 973cb8ce9a60767a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":64642,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=242, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=364], progressive, precision 8, 364x242, components 3","md5":"61f7b1fa1698507638df7882e2bdfcaf","sha1":"89134af9a734f4c30d0db01ea36c86895e46b7e3","sha256":"bc0a583f7e3c834e53d5263ecc90d279b27460ea2e9bce56b7ac6b129eb5849c","sha512":"359d9aab944bc2fe6dd5751a385cb4088b39539606e8f460f923ce597823dcfc0472f8ab9662a8808acaff4ed6fe6e5514e98418a9387e718061293b067708c5","ssdeep":"1536:7BNUdceBNUdcVApV4vIfhczULHmQ88PbzaRKg:VzczCLRLrb+RKg","tlshash":"1b53d016cb625c03edc8123a148cc286b2b3afc58b534387b99c7493bfb8a955c65793","first_seen":"2023-04-14T17:39:35Z","last_seen":"2026-04-02T10:27:56.662169Z","times_seen":568,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/cti/0f/73/81/0f73816927a7d0fdfa38987c65fdaa30/1753977078.jpg","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:32.103Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Jul 2025 02:33:11 GMT","end":"Wed, 08 Oct 2025 02:33:10 GMT"},"fingerprint":{"sha1":"06:D8:07:0F:AB:BF:D8:7F:C5:38:82:AC:A7:8A:20:4D:83:6C:EA:C9","sha256":"CF:05:58:46:C3:07:3F:B6:A6:8D:42:F2:3B:3D:91:36:93:10:CB:D5:89:47:A3:62:26:D2:F3:BA:AC:51:0E:B7"}}},"request":{"raw":"GET /cti/0f/73/81/0f73816927a7d0fdfa38987c65fdaa30/1753977078.jpg HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 23 Aug 2025 18:37:32 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 53840\r\nserver: nginx/1.21.6\r\nlast-modified: Thu, 31 Jul 2025 15:51:19 GMT\r\netag: \"688b90f7-d250\"\r\nexpires: Mon, 25 Aug 2025 18:37:32 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: ah0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":53840,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 26.3 (Macintosh), datetime=2025:07:30 12:51:32], progressive, precision 8, 320x240, components 3","md5":"409ee337784841a5e97454385dec8332","sha1":"c2dee6c3e297eb7364be26601340b0741edd99e0","sha256":"4bfae1be419414fa7b11343160feb21f77bf73ca4b652192da620ef1eb1b396f","sha512":"3f4bf5bc4eab6f1492502a476aca963d281de3817ce4a375eede9984909d79d38ac040892c8a73d64c1ded5a5848934a95f85528a9f0d18876641f03dc8b8773","ssdeep":"768:UgL4jN9TingL4jN93NrYyEUTL1soxiO/D0GVsuQ85nCUS1UZCt6npAgqA3NObb/M:PL4RL4fNr5TL6O/D0uDS1epMA9HF1","tlshash":"5133e0095bd3ed33fac1aa3488f1e3e3b6219a4825e39787bd8d25073b76380985d459","first_seen":"2025-08-01T20:03:18.130269Z","last_seen":"2025-09-02T17:23:30.738465Z","times_seen":172,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":41,"dns":33,"connect":19,"send":0,"wait":42,"receive":18,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/genizy/assets@main/rooftop-snipers/TemplateData/progressLogo.Dark.png","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://genizymath.github.io/iframe/283.html","date":"2025-08-23T18:37:32.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /gh/genizy/assets@main/rooftop-snipers/TemplateData/progressLogo.Dark.png HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/gh/genizy/assets@main/rooftop-snipers/TemplateData/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 1476\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: image/png\r\nx-jsd-version: main\r\nx-jsd-version-type: branch\r\netag: W/\"5c4-5P71iolzVDMOuppYTgORjSNJcQ4\"\r\naccept-ranges: bytes\r\nage: 6055\r\ndate: Sat, 23 Aug 2025 18:37:33 GMT\r\nx-served-by: cache-fra-etou8220029-FRA, cache-hel1410032-HEL\r\nx-cache: HIT, MISS\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1476,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 154 x 130, 8-bit gray+alpha, non-interlaced","md5":"cbf912eb4bcdbee5bc9f4529e8c8b535","sha1":"e4fef58a897354330eba9a584e03918d2349710e","sha256":"059ac94709b50cd2154049cb7d75ba44f95c1aeb183143409da41a2b887f7a39","sha512":"e55d03c44dd42c415af656867c6223c7cd13b14de2dff5222320bc1e56024f4359526751ce8425fb62ddcc726de42ce0d3f111fade35b4d422eff7d367b89f68","ssdeep":"","tlshash":"be31e9e20f245ea0c35396067715a7b04c7d756bd1e8964dc000e829c9d228fd9ddfa8","first_seen":"2025-08-23T18:38:03.376254Z","last_seen":"2026-02-20T21:07:29.345677Z","times_seen":3,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wayfarerorthodox.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2Ffinanceskipper%2Fmessage_redcircle2%2F16%2Fcss%2Fstyle.css\u0026l=3664\u0026fd=135","fqdn":"wayfarerorthodox.com","domain":"wayfarerorthodox.com","tld":"com"},"ip":{"addr":"192.243.61.227","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:33.814Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"wayfarerorthodox.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Jul 2025 00:39:20 GMT","end":"Tue, 30 Sep 2025 00:39:19 GMT"},"fingerprint":{"sha1":"2F:53:8D:73:5E:CE:FB:91:B4:FD:2B:4E:F3:E9:80:AA:62:1A:61:CD","sha256":"C1:D4:30:78:23:7C:54:B2:69:C9:DF:D9:A9:CB:93:CF:63:1B:C9:46:05:84:47:B1:70:77:4E:B8:85:DE:85:B8"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2Ffinanceskipper%2Fmessage_redcircle2%2F16%2Fcss%2Fstyle.css\u0026l=3664\u0026fd=135 HTTP/1.1\r\nHost: wayfarerorthodox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/\r\nCookie: uid_id2=c281c967-8a50-45a7-a119-265aa7206517:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl27062818=1; slecf0b511a8c19914e652dfaaae77a5ac81=[3078207]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 23 Aug 2025 18:37:33 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: wayfarerorthodox.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T05:45:54.968102Z","times_seen":13318572,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-23","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usefulspeak.com/33e6a4f2bd7346c557e8569983b9a966/invoke.js","fqdn":"usefulspeak.com","domain":"usefulspeak.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:30.945Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"usefulspeak.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Jul 2025 10:17:17 GMT","end":"Fri, 17 Oct 2025 10:17:16 GMT"},"fingerprint":{"sha1":"45:17:AD:B5:37:E3:46:A0:5F:98:AA:25:58:24:FF:14:28:9E:B8:27","sha256":"2D:E3:F0:06:D1:13:79:A6:88:54:6C:D5:A1:AF:C7:B4:03:72:F8:9C:01:4C:7B:FA:14:7C:59:78:43:59:46:3F"}}},"request":{"raw":"GET /33e6a4f2bd7346c557e8569983b9a966/invoke.js HTTP/1.1\r\nHost: usefulspeak.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 23 Aug 2025 18:37:31 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 13358\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 1\r\nHost: usefulspeak.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 235719cb31338b8eae9c7ef21bd57576\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":34132,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (34132), with no line terminators","md5":"afa140b808c7cf3fad51c323d9993499","sha1":"700078f81bfdb0c7ad49e7a0508aeca210278fa1","sha256":"9ed709e7568a04dfbae173a30fd3735eca09b94edee2a725b664ba461c788ea0","sha512":"6f9405e76cc0318a58a782c8e6a88a4de0ae771125e980e920e66cd59b95b97cc2d6ac9eb348c30cc054649bd9c8d05a7a97cc023f9ec0c01594b03199f17fb5","ssdeep":"768:WBkqYtc5vIm+3UJaUhwlnYRIKvE43kRRwlEK8cQsIBV43:WiiIJEJBhwlnJKH3kRylEK8cc6","tlshash":"a8e2e88c3f60b05817d6303f723f970de9960c0aa894c589c06bb5ecb97c767e5769a8","first_seen":"2025-08-23T15:42:19.222076Z","last_seen":"2025-08-30T00:29:25.168674Z","times_seen":6,"resource_available":true,"data":null}},"time_used":770,"timings":{"blocked":332,"dns":50,"connect":96,"send":0,"wait":96,"receive":1,"ssl":190},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-23","alert":"Sinkholed","trigger":"usefulspeak.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/genizy/assets@main/rooftop-snipers/TemplateData/UnityLoader.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://genizymath.github.io/iframe/283.html","date":"2025-08-23T18:37:31.798Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /gh/genizy/assets@main/rooftop-snipers/TemplateData/UnityLoader.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: main\r\nx-jsd-version-type: branch\r\netag: W/\"248fc-RVHIAj027lBY4JhdB+7vSYgXBaE\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 14370\r\ndate: Sat, 23 Aug 2025 18:37:31 GMT\r\nx-served-by: cache-fra-etou8220098-FRA, cache-hel1410025-HEL\r\nx-cache: HIT, MISS\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 82040\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":149756,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"3565805838bac42f203529b57644569c","sha1":"4551c8023d36ee5058e0985d07eeef49881705a1","sha256":"9fa521f680f1d3414280b73b0fb257db116bada04b03cb6aa3558601d7f650af","sha512":"926272f2bbe7ae3cc547170c2cd0297a477ead5498c401ddd79e9ca7f6add1c69d501ca93bf5052b58eb9b5f5018f4877e6094a2806f4efbbdb7d9d0196ed23c","ssdeep":"3072:UsK60ds9+TT1R0VSMEhssnJUoTQS8aIiFoMQRwa:Usv0i+1RK5EhjnP8S83yRi","tlshash":"d4e3af31226412e603e30bd650cb258b21b59a1638096c79db31e9ccedf5dd7e237e7a","first_seen":"2025-08-23T18:38:03.381055Z","last_seen":"2025-08-23T18:38:03.381055Z","times_seen":1,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/genizy/assets@main/rooftop-snipers/Build/rooftop-snipers.asm.code.unityweb","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://genizymath.github.io/iframe/283.html","date":"2025-08-23T18:37:32.447Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /gh/genizy/assets@main/rooftop-snipers/Build/rooftop-snipers.asm.code.unityweb HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://genizymath.github.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 5013861\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/vnd.unity\r\nx-jsd-version: main\r\nx-jsd-version-type: branch\r\netag: W/\"4c8165-6nFYvw+DmQV5Ziq/xvZugTZMVRg\"\r\naccept-ranges: bytes\r\nage: 6055\r\ndate: Sat, 23 Aug 2025 18:37:32 GMT\r\nx-served-by: cache-fra-etou8220077-FRA, cache-hel1410032-HEL\r\nx-cache: HIT, MISS\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5013861,"size_decoded":0,"mime_type":"application/vnd.unity","magic":"gzip compressed data, was \"Rooftop Snipers WebGL.asm.code.unityweb\", has comment, last modified: Fri Jun 16 19:17:48 2017, max compression, from Unix","md5":"a87882ae572327be81acc0afb5632d34","sha1":"352ede4c815598ec601e852dc7bdbdd8596901e0","sha256":"bfc1a21609d92ea7d1f054a2137ce78a4634592a909ca88d522d953c8286cfa2","sha512":"6be485eb350b96962799707b8278e58f25275fb59aaaa049dc7ce3e7cb0a1fc7b8bf829d759be8c68e20a6abd0d135935c63a3efb42d5c758f4b7d7113e168f6","ssdeep":"24576:gdjYgn6GlU3ehUx4Ig3wPwAxaTKInrao8lt+drYBK:GzO4vmxeLratcZYBK","tlshash":"882533c2b6be86da2009bc64d8149b69884cf6c679c1f35c52cd528d084f686d6bfec7","first_seen":"2025-08-23T18:38:03.384055Z","last_seen":"2025-08-23T18:38:03.384055Z","times_seen":1,"resource_available":false,"data":null}},"time_used":393,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":306,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/impr.gif?sid=H4sIAAAAAAAC_4SUz4scRRvHq3cDL-SFvLwvrwoBYZAcDLizXT09PdPmIMa4Eswvk0gOQaS6qnqm3O6utqp7encuBgMSb5ubBw8935nsmhhE0asoEy8SEDKe9pAF8R8QxeBJZHY3bDxZh6rn259-4Ps8_XR9MCp3SAsl275wVg9VkrDldtNtPH9FZUJXtnHucoO6TfdE44rKAv9EY22-mcGLtOU33eON1yRf1cueS12XurSxooyM9dryLoXK74a0GbpN32vSto8183dty0VYtgAx2CH_gxKz__wcX4XiU2Tp56ekXS10_sKraZmwQhsMxNab2WqmqwzpQRgbB3G2tf82tJ0R8tECdLa1XwH0YDKvAJGakYWnHyLKtvZtIhrc2nMaJZAZIvFvVIMpZDKFYlNwfR1KPCAAFzh3Hlm6eU6biq3vUTanM3Lo0W9Q1Ywcevh_ZOlnJxO11rikk7JQOrNYi2uotSlUb4q8nKIYLkBV98CL96HED2T50Rlk6eS8TTSU2D7GvS7lYdBZ6rK2u-S3WWeJURoueUGbsY7nBm3a2W2RiqdgdhGldVAqB2XsoMwdpGK74btdn1PWCuJQ8I7rM98XMnLDrue6LOQdlHzufQNFvgGebICbDzfLjFsvHNHtYzaRPHajNqWsy2kYUl8GbU_EjDHZ6bA24116-2pAadAO6FuTeeLI-yQX_WJ14LUmhSnl3fLtPPGC0HdDj47oYxg-ATtu4HVpd0Q39-Au2nPRGlHk5hpW1c0ZcZ76Eqb8FrZfw4pF2GJGnDfew0DUqCRBZQkqRlApgqogqAb1LZFYz9abIrFlRPdPb_9s1WNd9Ebsli56MiNgZgNG1BOVv2uvgxeL42FsxVjPNxYV9ZhFoh7lO-S_88_tfPzrc1iV241_ahCsqqHsAph1MFQzcnblJ-RqRo7_eRgRuweb3ANXi2Dls2BVDdavMcy-6slMDddTVvSbPVX0y6ipNISukReHUKw7o2SHHN0dvOYfS5D8Ptlf4KZGbmq8o74j6CU3xhd1RSYXdWXJF-fzQqVqyOZDealghXTuvC7XK23E6VN24_bLfA7m4d3L0hZnWCZU1rPk05NKCGlWtOGSfH3aXpHRhdL2T5YmK_MzF15ZOZ3mRlqrdDYFUw-OHAFXM_Kv73_f_d2e2TkKZaYwZY20fMJpfg02P9BWE5jkQEe5g6qsx8aLDh4miiCRB5pFNay8_80vj5MO4rFh82ym6pG9gZ5xwIrryNIaA1NjkNRgycb8-hkXubn_0o-t3YUoccZRYpxJlJjk5l6DrdpuxC3pcdftdgLa6saStnzB43bXD0XA3FZLorCz_p3D6V8BAAD___ocKTlMBQAA","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:34.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 21:49:55 GMT","end":"Fri, 26 Sep 2025 21:49:54 GMT"},"fingerprint":{"sha1":"38:55:0E:5D:7C:E7:08:BA:9A:77:8D:79:E7:3A:6B:27:F8:97:E4:89","sha256":"3A:54:48:30:C3:83:C3:F6:C2:3E:B3:7D:81:B3:37:9D:16:0C:B9:AE:C5:C3:56:8C:33:5D:AD:24:2B:B7:35:AF"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_4SUz4scRRvHq3cDL-SFvLwvrwoBYZAcDLizXT09PdPmIMa4Eswvk0gOQaS6qnqm3O6utqp7encuBgMSb5ubBw8935nsmhhE0asoEy8SEDKe9pAF8R8QxeBJZHY3bDxZh6rn259-4Ps8_XR9MCp3SAsl275wVg9VkrDldtNtPH9FZUJXtnHucoO6TfdE44rKAv9EY22-mcGLtOU33eON1yRf1cueS12XurSxooyM9dryLoXK74a0GbpN32vSto8183dty0VYtgAx2CH_gxKz__wcX4XiU2Tp56ekXS10_sKraZmwQhsMxNab2WqmqwzpQRgbB3G2tf82tJ0R8tECdLa1XwH0YDKvAJGakYWnHyLKtvZtIhrc2nMaJZAZIvFvVIMpZDKFYlNwfR1KPCAAFzh3Hlm6eU6biq3vUTanM3Lo0W9Q1Ywcevh_ZOlnJxO11rikk7JQOrNYi2uotSlUb4q8nKIYLkBV98CL96HED2T50Rlk6eS8TTSU2D7GvS7lYdBZ6rK2u-S3WWeJURoueUGbsY7nBm3a2W2RiqdgdhGldVAqB2XsoMwdpGK74btdn1PWCuJQ8I7rM98XMnLDrue6LOQdlHzufQNFvgGebICbDzfLjFsvHNHtYzaRPHajNqWsy2kYUl8GbU_EjDHZ6bA24116-2pAadAO6FuTeeLI-yQX_WJ14LUmhSnl3fLtPPGC0HdDj47oYxg-ATtu4HVpd0Q39-Au2nPRGlHk5hpW1c0ZcZ76Eqb8FrZfw4pF2GJGnDfew0DUqCRBZQkqRlApgqogqAb1LZFYz9abIrFlRPdPb_9s1WNd9Ebsli56MiNgZgNG1BOVv2uvgxeL42FsxVjPNxYV9ZhFoh7lO-S_88_tfPzrc1iV241_ahCsqqHsAph1MFQzcnblJ-RqRo7_eRgRuweb3ANXi2Dls2BVDdavMcy-6slMDddTVvSbPVX0y6ipNISukReHUKw7o2SHHN0dvOYfS5D8Ptlf4KZGbmq8o74j6CU3xhd1RSYXdWXJF-fzQqVqyOZDealghXTuvC7XK23E6VN24_bLfA7m4d3L0hZnWCZU1rPk05NKCGlWtOGSfH3aXpHRhdL2T5YmK_MzF15ZOZ3mRlqrdDYFUw-OHAFXM_Kv73_f_d2e2TkKZaYwZY20fMJpfg02P9BWE5jkQEe5g6qsx8aLDh4miiCRB5pFNay8_80vj5MO4rFh82ym6pG9gZ5xwIrryNIaA1NjkNRgycb8-hkXubn_0o-t3YUoccZRYpxJlJjk5l6DrdpuxC3pcdftdgLa6saStnzB43bXD0XA3FZLorCz_p3D6V8BAAD___ocKTlMBQAA HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/\r\nCookie: ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.GSN40yDQqCPk3Sp_Ky3GV4ehy9hJLYxPoTUuW-eBxXc; uid_id2=c281c967-8a50-45a7-a119-265aa7206517:3:1; pdhtkv=true; uncs=3; pdhtkv23=true; uncs23=1; u_pl26940921=1; pdhtkv29=true; uncs29=2; u_pl27062818=1; slecf0b511a8c19914e652dfaaae77a5ac81=[6116561,3078189]; iprc_l+fa45cf1da90fcacf70d2619d3260ec9d=6116561; iprc_l:6116561=3; iprc_a+170033c337f7892b8665965499cab037=127602; iprc_a:127602=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 23 Aug 2025 18:37:34 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nset-cookie: iprc_l+49abf6eee0a0f187549c3b17eeb5b196=3078189; expires=Sun, 24 Aug 2025 18:37:34 GMT; path=/; secure; SameSite=None\niprc_l:3078189=1; expires=Sun, 24 Aug 2025 18:37:34 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 7\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 2ace455e83475d0f4fe72d1ac664c674\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T05:45:54.968102Z","times_seen":13318572,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-23","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"weirdopt.com/ad/advertisers.js","fqdn":"weirdopt.com","domain":"weirdopt.com","tld":"com"},"ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:32.011Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"weirdopt.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 01 Jul 2025 15:18:37 GMT","end":"Mon, 29 Sep 2025 15:18:36 GMT"},"fingerprint":{"sha1":"1A:27:71:C0:8E:44:D4:6B:F5:AA:49:F0:F1:AF:E5:5F:30:23:A4:D4","sha256":"84:6C:2E:D6:ED:8A:2F:33:05:CC:E9:F2:24:E5:5C:E0:80:C2:04:2D:C3:21:06:64:E1:0D:14:81:A1:9A:00:1B"}}},"request":{"raw":"GET /ad/advertisers.js HTTP/1.1\r\nHost: weirdopt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 23 Aug 2025 18:37:32 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 0\r\nConnection: keep-alive\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 9bab5f70445e1de8817268476b97a373\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T05:45:54.968102Z","times_seen":13318572,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":48,"dns":2,"connect":17,"send":0,"wait":17,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-23","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:32.390Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"preferencenail.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 01 Jul 2025 15:11:38 GMT","end":"Mon, 29 Sep 2025 15:11:37 GMT"},"fingerprint":{"sha1":"F9:52:70:4B:81:A8:F8:39:E6:E7:96:8F:EA:FE:17:FD:96:C5:32:E3","sha256":"D8:C9:87:B5:89:5E:D4:F4:8D:FD:98:3C:31:39:42:67:D3:20:27:14:A9:AD:F2:AB:97:A4:48:0F:94:F0:FF:A2"}}},"request":{"raw":"GET /sfp.js HTTP/1.1\r\nHost: preferencenail.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 23 Aug 2025 18:37:32 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nContent-Length: 28254\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nVary: Accept-Encoding\r\nHost: preferencenail.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 12714432dd1348fb05b6279fb3a2fd6c\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":85386,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"46a6fef91632b94d14252fe324c1585f","sha1":"387cebbd261b8fe947fe9805875300f2ceeb5cfd","sha256":"36d0c771f8bf310d740cb4d0ca144354c45df284e72361660448708d72f175d5","sha512":"a3aaa1b5ab1113a12793bd1085332eb257416aaa9c4a690525838b91453a281580a979bfb856b3c429c2d4243c3ce02bd318a4b7048124eef96912179836d0fd","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRL:nPncLBSUBULGVTfGpucE5fox","tlshash":"528395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","first_seen":"2025-07-08T10:38:39.799377Z","last_seen":"2025-11-18T17:01:51.014373Z","times_seen":15230,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:300,400,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:33.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"DF:A1:DB:1F:BC:5E:31:D7:F8:FE:26:E3:B9:B3:02:98:B1:C8:50:EC","sha256":"A2:57:20:B6:AE:46:89:B9:39:C7:57:9B:1E:43:96:E3:5A:BC:7E:3F:1D:18:10:34:CC:53:3D:DB:78:4E:5C:21"}}},"request":{"raw":"GET /css?family=Roboto:300,400,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 23 Aug 2025 18:37:33 GMT\r\ndate: Sat, 23 Aug 2025 18:37:33 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16755,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"e9d2e14beb088f37fae98294940a9dcd","sha1":"1dafc3c55550249c8c2d782d5616c7b445c8e005","sha256":"f2e491cc46d3fcba81f729065d622bd722751d4a2e7f80b479aa64a92c17b5c7","sha512":"64025ea9b660d5e1d45a593a27345e152ba6b5ef95daceee5e43201319a555eb5457cfe1ecdcc725202063a22c5f406f3ba4607863d5b714c378f144bcdea5f7","ssdeep":"384:pjf5jgjPjrjyUj/qY4+j4jYjpjfMj1jWj6jyhj/qY4XjNjtj4jfdjkjDj3jyQj/E:p90DXOU/R08toBy+Oh/EBpcZwPLOQ/VK","tlshash":"e5722291041740009b835ce223cebf35fe1f92117152d0b5abfd9b6badcbc66526939d","first_seen":"2025-06-02T17:27:24.212334Z","last_seen":"2026-01-19T16:22:17.33804Z","times_seen":5482,"resource_available":false,"data":null}},"time_used":339,"timings":{"blocked":156,"dns":1,"connect":7,"send":0,"wait":25,"receive":0,"ssl":148},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/chat/mob/ssp/1/img/close.png","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:33.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Jul 2025 14:01:22 GMT","end":"Mon, 29 Sep 2025 14:59:36 GMT"},"fingerprint":{"sha1":"CD:76:E0:2A:28:09:08:24:2D:4C:A1:14:B2:AE:6C:39:A4:CC:2F:6B","sha256":"8B:98:84:C0:8D:47:7C:1B:A7:26:4B:E4:9E:6E:FD:8E:E1:6D:6E:41:1D:E7:91:B7:70:A3:C1:D0:C0:85:6B:31"}}},"request":{"raw":"GET /sb/chat/mob/ssp/1/img/close.png HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 23 Aug 2025 18:37:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 5982\r\nserver: cloudflare\r\nlast-modified: Sat, 07 May 2022 04:02:16 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"6275ef48-175e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\naccept-ranges: bytes\r\nage: 1330846\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Sd9Rur5QkBWpyCnz1QXkUaV24QB0%2BMi8s6tFlMv1XyEtgqRpQfAm1qcdm5G9EHEunkWDlCOshJXl2zaRUsNkwaSxPZGe%2FynEwcrsuOEu8vc%3D\"}]}\r\ncf-ray: 973cb8cb7eee5cf6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5982,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 522 x 391, 8-bit/color RGBA, non-interlaced","md5":"c489ce2c491a22ee37a55e26a92dfd73","sha1":"2fa588ab09e94dd902e5bd24b48f98ad1949c9d6","sha256":"1eed147c7d5de6291c25fbc5274830c12d5549262fb144271576d4e15966e5bd","sha512":"fe6a53296238283eac984b1912bfe7fbbdf5f0692f59f86e7e1ca989555a81be786ff29b9f8644443b2ace8137d412b6d9a92b0edf7f595ddf36058702a2d0d0","ssdeep":"96:FSDZ/I09Da01l+gmkyTt6Hk8nTbo5GZNKEBX97O+co2RF9JNssCgSSiiFr4uolec:FSDS0tKg9E05TAYwEBPwF9JNsTgSSL3C","tlshash":"80c1afeff8a058cf4566b7021c8e4080fbaa713d835536b4d4a092dc958be4a0fd7475","first_seen":"2023-04-05T23:50:36Z","last_seen":"2026-04-03T18:56:21.987759Z","times_seen":4059,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:32.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"preferencenail.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 01 Jul 2025 15:11:38 GMT","end":"Mon, 29 Sep 2025 15:11:37 GMT"},"fingerprint":{"sha1":"F9:52:70:4B:81:A8:F8:39:E6:E7:96:8F:EA:FE:17:FD:96:C5:32:E3","sha256":"D8:C9:87:B5:89:5E:D4:F4:8D:FD:98:3C:31:39:42:67:D3:20:27:14:A9:AD:F2:AB:97:A4:48:0F:94:F0:FF:A2"}}},"request":{"raw":"GET /sfp.js HTTP/1.1\r\nHost: preferencenail.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 23 Aug 2025 18:37:32 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nContent-Length: 28254\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nVary: Accept-Encoding\r\nHost: preferencenail.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 5eeb182e907fd644c7f35ccf848d8eaf\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":85386,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"46a6fef91632b94d14252fe324c1585f","sha1":"387cebbd261b8fe947fe9805875300f2ceeb5cfd","sha256":"36d0c771f8bf310d740cb4d0ca144354c45df284e72361660448708d72f175d5","sha512":"a3aaa1b5ab1113a12793bd1085332eb257416aaa9c4a690525838b91453a281580a979bfb856b3c429c2d4243c3ce02bd318a4b7048124eef96912179836d0fd","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRL:nPncLBSUBULGVTfGpucE5fox","tlshash":"528395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","first_seen":"2025-07-08T10:38:39.799377Z","last_seen":"2025-11-18T17:01:51.014373Z","times_seen":15230,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rashcolonizeexpand.com/impr.gif?sid=H4sIAAAAAAAC_1RTzWsd1Rs-k5Tfor-F-FEFV3fhwkJzc-bMt12IsUaK_aKtdKGb8zU3x8ydGefM3EmCi2JBuszCheJm8ty0wVpEsS4FuXFXEHLdmEUD4n-gUnAjctNA6rt43-eZZw487-E5n2w1B8RDw_evXCw2TJbxxaBPe6_eMLkqWtu7dL3n0j4927th8tA_21ubtWr0muv5fXq697aWq8Uioy6lLnV7y6bSabG2eKjClPcTt5_Qvs_6buBjrfovt40Dyx2o0QF5DkZNn_k9fQ9GTpAPvzmn7WpdlGfeGjYZr4sKI7Xzbr6aF22O4TFMKwdpvnP0Nwo7JeSzORT5ztEGKEbbsw0gzJTMvfgIIt85sgkxuvPEqcigcwj1f7SjCXS2C8MnkMUtGLVHAKlw6TLy4d1LRdXy9Scqn6lTcuLxnzDtlJx49ALy4ddLmVnrXSuypjZFbrGWdjBrE5jBBGWzi3pjDqbdhaw_hlE_k8XHF5APty_brIBR-69IFrsyCaOFmAd0wQ94tMBdN1lgYcB5xGgYuNHhFZl0Am7n0VgHjXHQpA6a0sFQ7fd8GvvS5V6YJkpG1Oe-r7SgScwo5YmM0MiZ903U5SZktglZ3URZ3cSq-XTP_35v_q898uuUOKe-Q9X8CLuy_0AwnmoaJpr6NKWMyZTxQHpasVAkPtOuiKnrJzLWWjMWqiAJpPDckCWu56uYi0QFKUt8yt3AF3EsE6XiyPXT2BPcS2KPejyUaRSlgYpl6jNXBDr0A1cIGoWUUiaUZlSIhLmu4lEgUiYTLT2Pe1KEVAacB7EbRyIMmUpd5kcprHJga4KR6tBqgtYStJygNQRtTdCOujsqs8x2d1VmG-EeTXY0vW5c1IMtfqeoBzon4NUmKtVtm_JDewuynh9vpFaNi1njou7GXKhuqzwgz86S4Xxx6m-s6v2e5-mQ-ykTKvL8UAZBpOMgTJLYEwlPwhDWdDB2Dtw62DBTcnH5N5RmSk7_cxKC78Jmu5BmHrx5CbwdRywGX0FCsZE_GOjcbKwPeb3SH5h6pRF9U0AVHcr6BOp1Zys7IC8fBvX9P25Dy4fkqCCrDmXV4QPzE8Eguz2-WrRk-2rRWvLt5bI2Q7PBZyG-VvNa_-_eO3q9LSp1_pzd_PINORNm8P51besLPFcmH1jy1ZJRSlfLRSU1-eG8vaHFlcauLDVV3pQXrry5fH5YVtpaU-QTcDMlJw_OQJopef6jpcMH6n8ewlQTVE2HYfOU1_ImbHnMbUFQZcdclARt040rJo4_ZoYg08eciw72KS6O8bjis9PcdFv2NgaVA17fQj7sMKo6jLIOPNuEbebHdVk9fP0X77AgMmcssopsi6ya6Wa_l3qaSUrjKHS9ONWz9Ms0iP1EhZx6nkZtpyv3Tmb_BgAA__-KpxBMeQUAAA==","fqdn":"rashcolonizeexpand.com","domain":"rashcolonizeexpand.com","tld":"com"},"ip":{"addr":"192.243.61.227","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:32.912Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rashcolonizeexpand.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 22:10:41 GMT","end":"Fri, 26 Sep 2025 22:10:40 GMT"},"fingerprint":{"sha1":"C7:75:50:5C:D3:7C:BF:A1:34:3E:61:33:FC:D6:81:21:2E:31:1D:92","sha256":"CB:A9:18:8B:DD:56:71:B4:C1:61:A7:9F:5C:50:7F:22:BB:83:72:BC:0F:B3:14:19:C4:E9:F9:59:6A:0F:95:EC"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1RTzWsd1Rs-k5Tfor-F-FEFV3fhwkJzc-bMt12IsUaK_aKtdKGb8zU3x8ydGefM3EmCi2JBuszCheJm8ty0wVpEsS4FuXFXEHLdmEUD4n-gUnAjctNA6rt43-eZZw487-E5n2w1B8RDw_evXCw2TJbxxaBPe6_eMLkqWtu7dL3n0j4927th8tA_21ubtWr0muv5fXq697aWq8Uioy6lLnV7y6bSabG2eKjClPcTt5_Qvs_6buBjrfovt40Dyx2o0QF5DkZNn_k9fQ9GTpAPvzmn7WpdlGfeGjYZr4sKI7Xzbr6aF22O4TFMKwdpvnP0Nwo7JeSzORT5ztEGKEbbsw0gzJTMvfgIIt85sgkxuvPEqcigcwj1f7SjCXS2C8MnkMUtGLVHAKlw6TLy4d1LRdXy9Scqn6lTcuLxnzDtlJx49ALy4ddLmVnrXSuypjZFbrGWdjBrE5jBBGWzi3pjDqbdhaw_hlE_k8XHF5APty_brIBR-69IFrsyCaOFmAd0wQ94tMBdN1lgYcB5xGgYuNHhFZl0Am7n0VgHjXHQpA6a0sFQ7fd8GvvS5V6YJkpG1Oe-r7SgScwo5YmM0MiZ903U5SZktglZ3URZ3cSq-XTP_35v_q898uuUOKe-Q9X8CLuy_0AwnmoaJpr6NKWMyZTxQHpasVAkPtOuiKnrJzLWWjMWqiAJpPDckCWu56uYi0QFKUt8yt3AF3EsE6XiyPXT2BPcS2KPejyUaRSlgYpl6jNXBDr0A1cIGoWUUiaUZlSIhLmu4lEgUiYTLT2Pe1KEVAacB7EbRyIMmUpd5kcprHJga4KR6tBqgtYStJygNQRtTdCOujsqs8x2d1VmG-EeTXY0vW5c1IMtfqeoBzon4NUmKtVtm_JDewuynh9vpFaNi1njou7GXKhuqzwgz86S4Xxx6m-s6v2e5-mQ-ykTKvL8UAZBpOMgTJLYEwlPwhDWdDB2Dtw62DBTcnH5N5RmSk7_cxKC78Jmu5BmHrx5CbwdRywGX0FCsZE_GOjcbKwPeb3SH5h6pRF9U0AVHcr6BOp1Zys7IC8fBvX9P25Dy4fkqCCrDmXV4QPzE8Eguz2-WrRk-2rRWvLt5bI2Q7PBZyG-VvNa_-_eO3q9LSp1_pzd_PINORNm8P51besLPFcmH1jy1ZJRSlfLRSU1-eG8vaHFlcauLDVV3pQXrry5fH5YVtpaU-QTcDMlJw_OQJopef6jpcMH6n8ewlQTVE2HYfOU1_ImbHnMbUFQZcdclARt040rJo4_ZoYg08eciw72KS6O8bjis9PcdFv2NgaVA17fQj7sMKo6jLIOPNuEbebHdVk9fP0X77AgMmcssopsi6ya6Wa_l3qaSUrjKHS9ONWz9Ms0iP1EhZx6nkZtpyv3Tmb_BgAA__-KpxBMeQUAAA== HTTP/1.1\r\nHost: rashcolonizeexpand.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.GSN40yDQqCPk3Sp_Ky3GV4ehy9hJLYxPoTUuW-eBxXc; uid_id2=c281c967-8a50-45a7-a119-265aa7206517:3:1; pdhtkv=true; uncs=1; pdhtkv23=true; uncs23=1; u_pl26940921=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 23 Aug 2025 18:37:32 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Credentials: true\r\nVary: Origin\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nHost: rashcolonizeexpand.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 0681f7de4b003ef4e6f0cbf5e27ab0ac\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T05:45:54.968102Z","times_seen":13318572,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-23","alert":"Sinkholed","trigger":"rashcolonizeexpand.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/impr.gif?sid=H4sIAAAAAAAC_1RTz2sdVRS-Lyku6kL8UQVXb-HCQvNyZ-78tAux1kixv2grXejm_pqXa-bNTOfOvEneqjQgXQZ0IbiZfC9psBZRrEtBXtxVhDw3ZtGA-CcoBTciLw2kHphzzjffvfCde7_76WZ9QBhqvn_1Uj4yacoX_R7tvnnTZCpvbPfyja5De_Rs96bJAu9sd3WWyuFbDvN69HT3fS1X8kWXOpQ61OkumVIn-eriIQtTPIidXkx7nttzfA-r5f-xrTuwvAM1PCAvwajpC38mH8HICbLBt-e1Xany4sx7gzrlVV5iqHY-zFayvMkwOG6TsoMk2zlajdxOCfliDnm2czQB8uHWbAIIMyVzrz6GyHaOZEIMt58qFSl0BqGeRzOcQKe7MHwCma_DqD0CSIXLV5AN7l3Oy4avPWX5jJ2SE0_-gmmm5MTjV5ANvjmXmtXu9TytK5NnFqtJC7M6gelPUNS7qEZzMM0uZHUHRv1KFp9cRDbYumLTHEbtv6Gk6yvtRAtR6PkLXkSdBSFDuuDSRHA38WMWqcMjMskE3HZQzz7TQZ10UBcdDNR-16ORJx3OgiRWMqQe9zylBY0jl1IeyxC1nGnfQFVsQKYbkOVtFOVtrJjP97wf9ub_3iO_T0nn1Pco659gl_cfuiGPdaQ9yZRyqJY08F0nZqGvXRUmEXOU0ozJhCZRQkNPUSkdHoeaU-1HUeAqzgUPqE8TN4pi3w19JgI_DEUsdBj5mrNAasp4EkZJ5HFBWUA9lfgycB3qhL5irvI9qeLYD5WSyomdwJGucrSgNHBoGGsWsoh6setoySRzQwGrOrAVwVC1aDRBYwkaTtAYgqYiaIbttkqta9t7KrW1cI6qe1RZO86r_ibfzqu-zgh4uYFStVumuGXXIav58SixapzPEhdVO-ZCtZvFAXlx5ozOl6f-wYre7zKmA-4lrlAh8wLp-6GO_CCOIyZiHgcBrGlh7NzhfY7MlFxa-gOFmZLT_56E4Luw6S6kmQevXwNvxqEbgS8jphhlD_s6M6O1Aa-We31TLdeiZ3KovEVRnUC11tlMD8jrh0b9-JdtaPmIHAVk2aIoW3xifibop3fH1_KGbF3LG0u-u1JUZmBGfGbi6xWv9HP3P9BrTV6qC-ftxlfvyBkxax_c0La6yDNlsr4lX58zSulyKS-lJj9esDe1uFrb5XN1mdXFxavvLl0YFKW21uTZBNxMycmDM5BmSl6-tXv4QL07n8GUE5R1i0H9jNbiNmxxjG1OUKbHWBQETd2OS1cc_0wNQaqPMRct7DNYHPfjks92c9Nu2rvolx3wah3ZoMWwbDFMW_B0A7aeH1dF-ejt39hhQKSdsUhLsiXScsab_W7CtCspjcLAYVGiHeYpmfiRF6uAU8Y0Kjtdvn8y_S8AAP__GxM2OXkFAAA=","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"192.243.61.227","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:33.040Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 22:21:33 GMT","end":"Fri, 26 Sep 2025 22:21:32 GMT"},"fingerprint":{"sha1":"4A:6A:48:C8:5B:C5:2B:2E:9C:03:AF:BF:4C:E6:10:23:E2:7B:EA:97","sha256":"A8:42:B5:4A:20:C8:13:EF:B5:90:0F:54:37:F7:05:60:8D:91:07:E3:A4:0F:7A:22:C9:AF:F1:F5:22:E8:68:C9"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1RTz2sdVRS-Lyku6kL8UQVXb-HCQvNyZ-78tAux1kixv2grXejm_pqXa-bNTOfOvEneqjQgXQZ0IbiZfC9psBZRrEtBXtxVhDw3ZtGA-CcoBTciLw2kHphzzjffvfCde7_76WZ9QBhqvn_1Uj4yacoX_R7tvnnTZCpvbPfyja5De_Rs96bJAu9sd3WWyuFbDvN69HT3fS1X8kWXOpQ61OkumVIn-eriIQtTPIidXkx7nttzfA-r5f-xrTuwvAM1PCAvwajpC38mH8HICbLBt-e1Xany4sx7gzrlVV5iqHY-zFayvMkwOG6TsoMk2zlajdxOCfliDnm2czQB8uHWbAIIMyVzrz6GyHaOZEIMt58qFSl0BqGeRzOcQKe7MHwCma_DqD0CSIXLV5AN7l3Oy4avPWX5jJ2SE0_-gmmm5MTjV5ANvjmXmtXu9TytK5NnFqtJC7M6gelPUNS7qEZzMM0uZHUHRv1KFp9cRDbYumLTHEbtv6Gk6yvtRAtR6PkLXkSdBSFDuuDSRHA38WMWqcMjMskE3HZQzz7TQZ10UBcdDNR-16ORJx3OgiRWMqQe9zylBY0jl1IeyxC1nGnfQFVsQKYbkOVtFOVtrJjP97wf9ub_3iO_T0nn1Pco659gl_cfuiGPdaQ9yZRyqJY08F0nZqGvXRUmEXOU0ozJhCZRQkNPUSkdHoeaU-1HUeAqzgUPqE8TN4pi3w19JgI_DEUsdBj5mrNAasp4EkZJ5HFBWUA9lfgycB3qhL5irvI9qeLYD5WSyomdwJGucrSgNHBoGGsWsoh6setoySRzQwGrOrAVwVC1aDRBYwkaTtAYgqYiaIbttkqta9t7KrW1cI6qe1RZO86r_ibfzqu-zgh4uYFStVumuGXXIav58SixapzPEhdVO-ZCtZvFAXlx5ozOl6f-wYre7zKmA-4lrlAh8wLp-6GO_CCOIyZiHgcBrGlh7NzhfY7MlFxa-gOFmZLT_56E4Luw6S6kmQevXwNvxqEbgS8jphhlD_s6M6O1Aa-We31TLdeiZ3KovEVRnUC11tlMD8jrh0b9-JdtaPmIHAVk2aIoW3xifibop3fH1_KGbF3LG0u-u1JUZmBGfGbi6xWv9HP3P9BrTV6qC-ftxlfvyBkxax_c0La6yDNlsr4lX58zSulyKS-lJj9esDe1uFrb5XN1mdXFxavvLl0YFKW21uTZBNxMycmDM5BmSl6-tXv4QL07n8GUE5R1i0H9jNbiNmxxjG1OUKbHWBQETd2OS1cc_0wNQaqPMRct7DNYHPfjks92c9Nu2rvolx3wah3ZoMWwbDFMW_B0A7aeH1dF-ejt39hhQKSdsUhLsiXScsab_W7CtCspjcLAYVGiHeYpmfiRF6uAU8Y0Kjtdvn8y_S8AAP__GxM2OXkFAAA= HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJwIjp7ImlkIjoyNjk0MDkyMSwiayI6IjMzZTZhNGYyYmQ3MzQ2YzU1N2U4NTY5OTgzYjlhOTY2Iiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjo1MDY0NDE3LCJwaWQiOjI3NTIwMTAsImFuIjp0cnVlLCJsYW4iOnRydWUsImNpZCI6MywiYWlkIjoyMywicHQiOjQsInBrIjoidXBmYjdiaXBxIiwiY3BrcyI6eyIyOCI6ImIyYmZiMDZkMzQ2MTg0ZTM2YTkzNTAwMDRhODZmZWQ0IiwiMjkiOiJmMGI1MTFhOGMxOTkxNGU2NTJkZmFhYWU3N2E1YWM4MSJ9LCJ0IjoxfSwidSI6eyJ1IjoxLCJhdSI6MSwiZCI6eyJpZCI6MjY2NTYxMTE1LCJpZHMiOiIiLCJpYyI6ZmFsc2UsIm4iOiJEZXNrdG9wLEVtdWxhdG9yIiwidiI6IlVua25vd24iLCJtIjoiVW5rbm93biIsImYiOjEsImZuIjoiRGVza3RvcCIsIm9pZCI6Mzg5MTQsIm9uIjoiV2luZG93cyIsIm92IjoiMTAuMCIsImJpZCI6MTM2OTI1LCJibiI6IkZpcmVmb3giLCJidiI6IjEzNC4wIiwid3YiOmZhbHNlLCJlIjp0cnVlLCJhYiI6ZmFsc2V9LCJjIjp7ImlkIjoxNjIsImMiOiJOTyIsIm4iOiJOb3J3YXkifSwiYSI6ZmFsc2UsImNyIjp7Im4iOiJCbGl4IFNvbHV0aW9ucyJ9LCJ4ZiI6IiIsIml4ZiI6ZmFsc2UsImlneGYiOmZhbHNlLCJ1cCI6dHJ1ZSwiciI6Imh0dHBzOi8vZ2VuaXp5bWF0aC5naXRodWIuaW8vZ2FtZXMvcm9vZnRvcC1zbmlwZXJzLyIsImFyIjpbXX19.GSN40yDQqCPk3Sp_Ky3GV4ehy9hJLYxPoTUuW-eBxXc; uid_id2=dc25de18-8745-4801-bc70-20fba2f5938d:1:1; pdhtkv=true; uncs=1; pdhtkv23=true; uncs23=1; u_pl26940921=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 23 Aug 2025 18:37:33 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nVary: Origin\r\nAccess-Control-Allow-Credentials: true\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 059e1b25a7d05bf869a2458837760f9b\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T05:45:54.968102Z","times_seen":13318572,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-23","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"torchfriendlypay.com/pixel/sbs?c=1","fqdn":"torchfriendlypay.com","domain":"torchfriendlypay.com","tld":"com"},"ip":{"addr":"192.243.61.225","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:34.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"torchfriendlypay.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 22:31:57 GMT","end":"Fri, 26 Sep 2025 22:31:56 GMT"},"fingerprint":{"sha1":"C1:1A:8F:9D:C9:3D:22:4D:0E:AA:D9:B9:1C:98:E3:DC:41:83:82:4F","sha256":"B2:2E:9D:A4:0D:D7:A4:C2:A4:C1:7F:A9:E3:2A:AF:DE:7B:7F:BF:6A:1D:DC:6A:9C:AB:BF:98:D7:C2:A6:40:2E"}}},"request":{"raw":"GET /pixel/sbs?c=1 HTTP/1.1\r\nHost: torchfriendlypay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/\r\nCookie: uid_id2=c281c967-8a50-45a7-a119-265aa7206517:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl27249042=1; slec71033c1d2ddd571b951e9de84dd54e0e=[3078207]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 23 Aug 2025 18:37:34 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: torchfriendlypay.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T05:45:54.968102Z","times_seen":13318572,"resource_available":true,"data":null}},"time_used":659,"timings":{"blocked":283,"dns":1,"connect":93,"send":0,"wait":92,"receive":0,"ssl":188},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-23","alert":"Sinkholed","trigger":"torchfriendlypay.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"prefacebegbeginning.com/impr.gif?sid=H4sIAAAAAAAC_1RSz2skxRevTuaUhf3yFRX0NDddkEn3TCeZcQ-LcY0Es0ncXQnoXqq7qmfK6e5qq7qnJ3MKBmSPs-BB91T5TLLRdRFFr6JMvGhA2L7lsEHxHxCEHEV6dmT0Qb_3Pv2pB5_346OD7Jw0kNGz7RtyIMKQLi7V7OrLOyJmMtfVzdtVx67ZV6s7Il52r1b7pVO9V52GW7OvVN_kflcu1m3Hth3bqa4JxQPZX5ywEMmjllNr2TW3XnOWXPTVf7HOLGhqgfXOyTMQrPjf78F7EP4YcfTVda67qUxeeSPKQppKhR47fifuxjKPEc3SQFkI4uPpa0hdEPLJHGR8PO0AsndYdgBPFGTu-Sfw4uOpTHi9o6dKvRA8hscuIe-NwcMxBB3Dl_sQ7DEBfIbNLcTRg02pcrr7lKUlW5DKxZ8QeUEqT55FHH25Gop-9ZYMs1TIWKMfGIj-GKI9RpKdIB3MQeQn8NMPIdgvZPFiA3F0uKVDCcHMpHsRjEG1haz8hIUssJAlFiJ2VnXtpus7tLEctJi_YrvUdRn37Fazbtu05a8g80tZQ6TJEH44hK_2kKg9dMW9gljPfQOV_QDdMdDMgk4LYr29hx4zyDlBrglySpALgjwlyHvmiIW6rs0DFurMc6axPo0NM5Jp-4AeybTNYwKqhlDMHIrkA70PP50fDQLNRrJ01EvNiHrMHCTn5P_l6Kz7v95Bl59Vm62gGQR-0_O9-ood8IbttKjfrNPAbXm2Q6GFgdBzk6kMREFurP2GRBTkyl8L8OgJdHgCX8yDZg5obkA7BoP42zaPxWA3ommn1hZpJ_NqQoJJgyStIN21DsJz8uJkiS_87ID7p2Rq8JVBogzeFz8StMO7o5syJ4c3Za7J11tJKiIxoOWCb6U05dbDt_huLhVbv66Hn7_ml0SZPrrNdbpBYybitiZfrArGuFqTyufku3W9w73tTHdWMxVnycb262vrUaK41kLGY1Dx-PJl-OXJ3nMmp3tp7yUINYbKDKLsX0qTPehkhrUkUOEMe4mFPDMjVfdmP0NBEPIZpp6B5qff__FP0SwfKVpWU2EO9F20VQU03UccGfSUQS80oOEQOlsYpYk6vfbTp6XdhxdWRl6oKodeqMKPJwMuXb0g7352rSB3LuahxVk1aPC6b9vNlWWn0Qy403CZHyw13RZbpnajwZHqovNwoft3AAAA__8PRwFIpwQAAA==","fqdn":"prefacebegbeginning.com","domain":"prefacebegbeginning.com","tld":"com"},"ip":{"addr":"192.243.61.227","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:32.106Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"prefacebegbeginning.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 07 Aug 2025 09:12:18 GMT","end":"Wed, 05 Nov 2025 09:12:17 GMT"},"fingerprint":{"sha1":"02:DD:30:E6:FA:61:35:3B:6E:17:C3:A5:38:D6:82:9F:DD:79:CC:43","sha256":"97:9B:4B:68:15:BD:DE:B4:41:E2:49:37:12:C2:46:A0:AB:C7:E2:25:EC:7D:F9:A2:10:00:05:99:CC:2C:3E:F7"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1RSz2skxRevTuaUhf3yFRX0NDddkEn3TCeZcQ-LcY0Es0ncXQnoXqq7qmfK6e5qq7qnJ3MKBmSPs-BB91T5TLLRdRFFr6JMvGhA2L7lsEHxHxCEHEV6dmT0Qb_3Pv2pB5_346OD7Jw0kNGz7RtyIMKQLi7V7OrLOyJmMtfVzdtVx67ZV6s7Il52r1b7pVO9V52GW7OvVN_kflcu1m3Hth3bqa4JxQPZX5ywEMmjllNr2TW3XnOWXPTVf7HOLGhqgfXOyTMQrPjf78F7EP4YcfTVda67qUxeeSPKQppKhR47fifuxjKPEc3SQFkI4uPpa0hdEPLJHGR8PO0AsndYdgBPFGTu-Sfw4uOpTHi9o6dKvRA8hscuIe-NwcMxBB3Dl_sQ7DEBfIbNLcTRg02pcrr7lKUlW5DKxZ8QeUEqT55FHH25Gop-9ZYMs1TIWKMfGIj-GKI9RpKdIB3MQeQn8NMPIdgvZPFiA3F0uKVDCcHMpHsRjEG1haz8hIUssJAlFiJ2VnXtpus7tLEctJi_YrvUdRn37Fazbtu05a8g80tZQ6TJEH44hK_2kKg9dMW9gljPfQOV_QDdMdDMgk4LYr29hx4zyDlBrglySpALgjwlyHvmiIW6rs0DFurMc6axPo0NM5Jp-4AeybTNYwKqhlDMHIrkA70PP50fDQLNRrJ01EvNiHrMHCTn5P_l6Kz7v95Bl59Vm62gGQR-0_O9-ood8IbttKjfrNPAbXm2Q6GFgdBzk6kMREFurP2GRBTkyl8L8OgJdHgCX8yDZg5obkA7BoP42zaPxWA3ommn1hZpJ_NqQoJJgyStIN21DsJz8uJkiS_87ID7p2Rq8JVBogzeFz8StMO7o5syJ4c3Za7J11tJKiIxoOWCb6U05dbDt_huLhVbv66Hn7_ml0SZPrrNdbpBYybitiZfrArGuFqTyufku3W9w73tTHdWMxVnycb262vrUaK41kLGY1Dx-PJl-OXJ3nMmp3tp7yUINYbKDKLsX0qTPehkhrUkUOEMe4mFPDMjVfdmP0NBEPIZpp6B5qff__FP0SwfKVpWU2EO9F20VQU03UccGfSUQS80oOEQOlsYpYk6vfbTp6XdhxdWRl6oKodeqMKPJwMuXb0g7352rSB3LuahxVk1aPC6b9vNlWWn0Qy403CZHyw13RZbpnajwZHqovNwoft3AAAA__8PRwFIpwQAAA== HTTP/1.1\r\nHost: prefacebegbeginning.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/\r\nCookie: pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; u_pl26927196=1; nlec89f8ffc8bcb270fe3019ac82af49b01a=[1690161,1690162,5941311]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 23 Aug 2025 18:37:32 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nVary: Origin\r\nAccess-Control-Allow-Credentials: true\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nSet-Cookie: iprc_l+210346a00424304992a4f83898d544a1=1690161; expires=Sat, 06 Sep 2025 18:37:32 GMT; path=/; secure; SameSite=None\niprc_l:1690161=1; expires=Sat, 06 Sep 2025 18:37:32 GMT; path=/; secure; SameSite=None\r\nHost: prefacebegbeginning.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 0fd96b42701fdde14e6aef32bff409cc\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T05:45:54.968102Z","times_seen":13318572,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-23","alert":"Sinkholed","trigger":"prefacebegbeginning.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/sbar.json?key=f0b511a8c19914e652dfaaae77a5ac81\u0026uuid=c281c967-8a50-45a7-a119-265aa7206517%3A3%3A1","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:32.653Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 21:49:55 GMT","end":"Fri, 26 Sep 2025 21:49:54 GMT"},"fingerprint":{"sha1":"38:55:0E:5D:7C:E7:08:BA:9A:77:8D:79:E7:3A:6B:27:F8:97:E4:89","sha256":"3A:54:48:30:C3:83:C3:F6:C2:3E:B3:7D:81:B3:37:9D:16:0C:B9:AE:C5:C3:56:8C:33:5D:AD:24:2B:B7:35:AF"}}},"request":{"raw":"GET /sbar.json?key=f0b511a8c19914e652dfaaae77a5ac81\u0026uuid=c281c967-8a50-45a7-a119-265aa7206517%3A3%3A1 HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://genizymath.github.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/\r\nCookie: ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.GSN40yDQqCPk3Sp_Ky3GV4ehy9hJLYxPoTUuW-eBxXc; uid_id2=c281c967-8a50-45a7-a119-265aa7206517:3:1; pdhtkv=true; uncs=1; pdhtkv23=true; uncs23=1; u_pl26940921=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 23 Aug 2025 18:37:32 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\naccess-control-allow-origin: https://genizymath.github.io\r\naccess-control-allow-credentials: true\r\nset-cookie: uid_id2=c281c967-8a50-45a7-a119-265aa7206517:3:1; expires=Sat, 30 Aug 2025 18:37:32 GMT; path=/; secure; SameSite=None\nuncs=2; expires=Sun, 24 Aug 2025 18:37:32 GMT; path=/; secure; SameSite=None\npdhtkv29=true; expires=Sun, 24 Aug 2025 18:37:32 GMT; path=/; secure; SameSite=None\nuncs29=1; expires=Sun, 24 Aug 2025 18:37:32 GMT; path=/; secure; SameSite=None\nu_pl27062818=1; expires=Sun, 24 Aug 2025 18:37:32 GMT; path=/; secure; SameSite=None\nslecf0b511a8c19914e652dfaaae77a5ac81=[6116561]; expires=Sat, 23 Aug 2025 18:37:37 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 214\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 0507189218279bfebb39f563bd0a2e80\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":6436,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"JSON text data","md5":"05c37cd257d79ae990d04640b9740f22","sha1":"79685b2adad4d3b9d254151d62229fe3204a04a0","sha256":"548d0e87678d1d7b7ecee78646bb75f017447493518e9872796146d9c02bb311","sha512":"f2efd643779360296935a4b75f73695ff1f132b84d79cd511b9c86417106c00ce39dcd2ec42171cd3ca17d0bae662194c55c226c47100241bb023d29a085f93c","ssdeep":"192:9zTnHiu1uJm2g0kTPaSfnsfgv6ezPLye3:9z7HiDN5hi6st3","tlshash":"63d18d5f015c8881bbe989504cb77cb65e86accb7d42897d82dbe7dfe41b201a98835c","first_seen":"2025-08-23T18:38:03.389309Z","last_seen":"2025-08-23T18:38:03.389309Z","times_seen":1,"resource_available":false,"data":null}},"time_used":355,"timings":{"blocked":12,"dns":0,"connect":0,"send":0,"wait":343,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-23","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/notifications/utility/default/us/blog/financeskipper/message_redcircle2/16/js/script.js","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:33.558Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Jul 2025 14:01:22 GMT","end":"Mon, 29 Sep 2025 14:59:36 GMT"},"fingerprint":{"sha1":"CD:76:E0:2A:28:09:08:24:2D:4C:A1:14:B2:AE:6C:39:A4:CC:2F:6B","sha256":"8B:98:84:C0:8D:47:7C:1B:A7:26:4B:E4:9E:6E:FD:8E:E1:6D:6E:41:1D:E7:91:B7:70:A3:C1:D0:C0:85:6B:31"}}},"request":{"raw":"GET /sb/notifications/utility/default/us/blog/financeskipper/message_redcircle2/16/js/script.js HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://genizymath.github.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 23 Aug 2025 18:37:34 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Fri, 19 Jan 2024 14:21:26 GMT\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OduxMX0sVT8ikee8%2ByHnyJ0WMcZ%2BxWveU0IUa5pufAqnCcIESiFh0DO0bkgoSUq6NG0XgWiu5yAASjPAhsD0OpKriVmv6Q8Vr2q9GjjXg5M%3D\"}]}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\netag: W/\"65aa8566-182\"\r\ncf-ray: 973cb8ccaa780b9c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":386,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"5ca8c1679ba9453cfa512e01d6fec9c5","sha1":"45628341eb20e4acee5e812d3b2dfc8f23962daf","sha256":"520a0196a18cbe656f7382a02ec828125e68bdac511b9ebe2bf27f31e262d037","sha512":"842e878cb264f7362266570b9a8e4b50187e8bedf2a499c0b8fe5e9fa2c563fa7577427039f58540b103c4da5197287373efc5f031ebd7ce17e5b34bbb8d11f7","ssdeep":"","tlshash":"86e02b386158513487f7d1a2619f27df2730469ed00a025e702c474f0ce1fa622c1d9b","first_seen":"2023-04-05T09:22:06Z","last_seen":"2026-04-04T05:52:30.476752Z","times_seen":2550,"resource_available":false,"data":null}},"time_used":494,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":494,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/pixel/sbs?c=1","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:34.248Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 21:49:55 GMT","end":"Fri, 26 Sep 2025 21:49:54 GMT"},"fingerprint":{"sha1":"38:55:0E:5D:7C:E7:08:BA:9A:77:8D:79:E7:3A:6B:27:F8:97:E4:89","sha256":"3A:54:48:30:C3:83:C3:F6:C2:3E:B3:7D:81:B3:37:9D:16:0C:B9:AE:C5:C3:56:8C:33:5D:AD:24:2B:B7:35:AF"}}},"request":{"raw":"GET /pixel/sbs?c=1 HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/\r\nCookie: ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.GSN40yDQqCPk3Sp_Ky3GV4ehy9hJLYxPoTUuW-eBxXc; uid_id2=c281c967-8a50-45a7-a119-265aa7206517:3:1; pdhtkv=true; uncs=3; pdhtkv23=true; uncs23=1; u_pl26940921=1; pdhtkv29=true; uncs29=2; u_pl27062818=1; slecf0b511a8c19914e652dfaaae77a5ac81=[6116561,3078189]; iprc_l+fa45cf1da90fcacf70d2619d3260ec9d=6116561; iprc_l:6116561=3; iprc_a+170033c337f7892b8665965499cab037=127602; iprc_a:127602=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 23 Aug 2025 18:37:34 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T05:45:54.968102Z","times_seen":13318572,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-23","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/f0/b5/11/f0b511a8c19914e652dfaaae77a5ac81.js","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:31.813Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 21:49:55 GMT","end":"Fri, 26 Sep 2025 21:49:54 GMT"},"fingerprint":{"sha1":"38:55:0E:5D:7C:E7:08:BA:9A:77:8D:79:E7:3A:6B:27:F8:97:E4:89","sha256":"3A:54:48:30:C3:83:C3:F6:C2:3E:B3:7D:81:B3:37:9D:16:0C:B9:AE:C5:C3:56:8C:33:5D:AD:24:2B:B7:35:AF"}}},"request":{"raw":"GET /f0/b5/11/f0b511a8c19914e652dfaaae77a5ac81.js HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 23 Aug 2025 18:37:32 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 25627\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 7\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 0b4731c6f09286eff641a413ae0c9adf\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":72611,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"accf7ef88c2dd5a34e982001002c47ba","sha1":"d3147353c1f931f4eecc805a37a312d7ddfbda05","sha256":"05148a4d3900555e78d98ebfcc5516a8404a13454220d7f3cc739d0c5d8ded26","sha512":"b3bd7bfe5473c7ccc7866cb963521f23b5922386ad8d45547d23f9afad92b8de4db4e5372a1f68e18f192d34cc0e1797e9d0f8fd22b14f3f4ee61ee3005dd871","ssdeep":"768:Y2bnYsmrjBqw648+QhS8u+Jcj/XcdNjNimOdY08kUbTehzbcepw4f:Y2bneC4x5O+jvcsdY0U3fm","tlshash":"cd63c6483f51b27802e6b8fa712fa61af0265c1195d8e0d8f503f4deae6a719f035f25","first_seen":"2025-08-23T18:38:03.393033Z","last_seen":"2025-08-27T19:23:04.223018Z","times_seen":2,"resource_available":true,"data":null}},"time_used":760,"timings":{"blocked":281,"dns":1,"connect":92,"send":0,"wait":101,"receive":92,"ssl":191},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-23","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/watch.199492741035.js?dev=e\u0026key=33e6a4f2bd7346c557e8569983b9a966\u0026kw=%5B%22play%22%2C%22rooftop%22%2C%22snipers%22%2C%22gn-math%22%2C%22unblocked%22%2C%22games%22%5D\u0026pst=1755974312\u0026rb=\u0026refer=https%3A%2F%2Fgenizymath.github.io%2Fgames%2Frooftop-snipers%2F\u0026res=14.3095\u0026rmtc=t\u0026shu=d3fcd7711537095a3eef075c02776631e8a3fdeee6e148444d9fff0186ecf7ea21b44e016b3d97d3a85476b5ad3d8a54921bf8ee3f1e787d2af5e19e64d0ce51569130f7f6f75abd064043d683d5bdfd4cdb1d7cb9c596822e426b\u0026tz=0\u0026uuid=c281c967-8a50-45a7-a119-265aa7206517%3A3%3A1","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:32.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 21:49:55 GMT","end":"Fri, 26 Sep 2025 21:49:54 GMT"},"fingerprint":{"sha1":"38:55:0E:5D:7C:E7:08:BA:9A:77:8D:79:E7:3A:6B:27:F8:97:E4:89","sha256":"3A:54:48:30:C3:83:C3:F6:C2:3E:B3:7D:81:B3:37:9D:16:0C:B9:AE:C5:C3:56:8C:33:5D:AD:24:2B:B7:35:AF"}}},"request":{"raw":"GET /watch.199492741035.js?dev=e\u0026key=33e6a4f2bd7346c557e8569983b9a966\u0026kw=%5B%22play%22%2C%22rooftop%22%2C%22snipers%22%2C%22gn-math%22%2C%22unblocked%22%2C%22games%22%5D\u0026pst=1755974312\u0026rb=\u0026refer=https%3A%2F%2Fgenizymath.github.io%2Fgames%2Frooftop-snipers%2F\u0026res=14.3095\u0026rmtc=t\u0026shu=d3fcd7711537095a3eef075c02776631e8a3fdeee6e148444d9fff0186ecf7ea21b44e016b3d97d3a85476b5ad3d8a54921bf8ee3f1e787d2af5e19e64d0ce51569130f7f6f75abd064043d683d5bdfd4cdb1d7cb9c596822e426b\u0026tz=0\u0026uuid=c281c967-8a50-45a7-a119-265aa7206517%3A3%3A1 HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://genizymath.github.io\r\nReferer: https://genizymath.github.io/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.GSN40yDQqCPk3Sp_Ky3GV4ehy9hJLYxPoTUuW-eBxXc\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 23 Aug 2025 18:37:32 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\naccess-control-allow-origin: https://genizymath.github.io\r\naccess-control-allow-credentials: true\r\nset-cookie: uid_id2=c281c967-8a50-45a7-a119-265aa7206517:3:1; expires=Sat, 30 Aug 2025 18:37:32 GMT; path=/; secure; SameSite=None\npdhtkv=true; expires=Sun, 24 Aug 2025 18:37:32 GMT; path=/; secure; SameSite=None\nuncs=1; expires=Sun, 24 Aug 2025 18:37:32 GMT; path=/; secure; SameSite=None\npdhtkv23=true; expires=Sun, 24 Aug 2025 18:37:32 GMT; path=/; secure; SameSite=None\nuncs23=1; expires=Sun, 24 Aug 2025 18:37:32 GMT; path=/; secure; SameSite=None\nu_pl26940921=1; expires=Sun, 24 Aug 2025 18:37:32 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 18\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: af4ba4bb06e92ad391b193db1c380d1e\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4878,"size_decoded":0,"mime_type":"text/html","magic":"JavaScript source, ASCII text, with very long lines (4002)","md5":"ec6d3d233e41d48d5797e8570ac4e429","sha1":"2b83ce7932d412bc454fd03ac06c6267db8cece8","sha256":"240f63267fc0f40499904ee797eb384c6535a24cdffed5bb7f8ba917af490225","sha512":"b2b4a42d416007af106738f98a2a355957520d7e706e6058450cacba23f520760eb097388d3021bb0ff7b98397f4747e8d5b88b859ed13543dc6baeddcfb58cb","ssdeep":"96:vozJC9FkYB9l/nmEmVCk90+Esf9fOeMHxJRSb1/D2CfMEDaH:wzR6mYkP9fpMRwb2CkCaH","tlshash":"11a12aa6edd050e861c3a8fa5177ba0c2530e50e2604ce8a748ddd910f686b41eacadc","first_seen":"2025-08-23T18:38:03.395624Z","last_seen":"2025-08-23T18:38:03.395624Z","times_seen":1,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-23","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/notifications/utility/default/us/blog/financeskipper/message_redcircle2/16/js/script.js","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:33.750Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Jul 2025 14:01:22 GMT","end":"Mon, 29 Sep 2025 14:59:36 GMT"},"fingerprint":{"sha1":"CD:76:E0:2A:28:09:08:24:2D:4C:A1:14:B2:AE:6C:39:A4:CC:2F:6B","sha256":"8B:98:84:C0:8D:47:7C:1B:A7:26:4B:E4:9E:6E:FD:8E:E1:6D:6E:41:1D:E7:91:B7:70:A3:C1:D0:C0:85:6B:31"}}},"request":{"raw":"GET /sb/notifications/utility/default/us/blog/financeskipper/message_redcircle2/16/js/script.js HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://genizymath.github.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 23 Aug 2025 18:37:34 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Fri, 19 Jan 2024 14:21:26 GMT\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KqbaLBTwWw0h9de94iuHPM4fQgopo793M%2BGsKFn2Qd9Mi96gBNmmXpxYPLAmV%2BEjYcuCddcTr8eQNuSUJc%2F1SOUEEs9Tl5quhIK1yeQ6aAM%3D\"}]}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 0\r\ncf-cache-status: HIT\r\netag: W/\"65aa8566-182\"\r\ncf-ray: 973cb8cdfb470b9c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":386,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"5ca8c1679ba9453cfa512e01d6fec9c5","sha1":"45628341eb20e4acee5e812d3b2dfc8f23962daf","sha256":"520a0196a18cbe656f7382a02ec828125e68bdac511b9ebe2bf27f31e262d037","sha512":"842e878cb264f7362266570b9a8e4b50187e8bedf2a499c0b8fe5e9fa2c563fa7577427039f58540b103c4da5197287373efc5f031ebd7ce17e5b34bbb8d11f7","ssdeep":"","tlshash":"86e02b386158513487f7d1a2619f27df2730469ed00a025e702c474f0ce1fa622c1d9b","first_seen":"2023-04-05T09:22:06Z","last_seen":"2026-04-04T05:52:30.476752Z","times_seen":2550,"resource_available":false,"data":null}},"time_used":280,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":280,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/notifications/utility/default/us/blog/financeskipper/message_redcircle2/16/img/sale3.jpg","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:33.779Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Jul 2025 14:01:22 GMT","end":"Mon, 29 Sep 2025 14:59:36 GMT"},"fingerprint":{"sha1":"CD:76:E0:2A:28:09:08:24:2D:4C:A1:14:B2:AE:6C:39:A4:CC:2F:6B","sha256":"8B:98:84:C0:8D:47:7C:1B:A7:26:4B:E4:9E:6E:FD:8E:E1:6D:6E:41:1D:E7:91:B7:70:A3:C1:D0:C0:85:6B:31"}}},"request":{"raw":"GET /sb/notifications/utility/default/us/blog/financeskipper/message_redcircle2/16/img/sale3.jpg HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 23 Aug 2025 18:37:33 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 64642\r\nlast-modified: Fri, 19 Jan 2024 14:21:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"65aa8566-fc82\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\naccept-ranges: bytes\r\nage: 1252416\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k9jI6eAe1S7%2B7LEVVNe0imZqX8vK5HK40nI4bK%2BIltSnv3YGsqA5TSYRgLcoB7tu%2BwFmz97qtvKOi4GogKdPCjVqrFJ2OIF%2B3POrbWCAdw4%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 973cb8ce1a20767a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":64642,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=242, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=364], progressive, precision 8, 364x242, components 3","md5":"61f7b1fa1698507638df7882e2bdfcaf","sha1":"89134af9a734f4c30d0db01ea36c86895e46b7e3","sha256":"bc0a583f7e3c834e53d5263ecc90d279b27460ea2e9bce56b7ac6b129eb5849c","sha512":"359d9aab944bc2fe6dd5751a385cb4088b39539606e8f460f923ce597823dcfc0472f8ab9662a8808acaff4ed6fe6e5514e98418a9387e718061293b067708c5","ssdeep":"1536:7BNUdceBNUdcVApV4vIfhczULHmQ88PbzaRKg:VzczCLRLrb+RKg","tlshash":"1b53d016cb625c03edc8123a148cc286b2b3afc58b534387b99c7493bfb8a955c65793","first_seen":"2023-04-14T17:39:35Z","last_seen":"2026-04-02T10:27:56.662169Z","times_seen":568,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"genizymath.github.io/javascript/script.js","fqdn":"genizymath.github.io","domain":"genizymath.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:30.947Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 07 Mar 2025 00:00:00 GMT","end":"Sat, 07 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8C:FF:59:E5:8E:C4:FA:76:FE:AF:2D:C5:C0:D4:13:6A:77:2D:F9:91","sha256":"7D:11:22:EA:96:98:52:34:1E:8D:D9:2B:CC:0C:7E:CC:00:96:30:D1:4D:A7:34:D7:CA:42:D5:B5:4A:2B:20:97"}}},"request":{"raw":"GET /javascript/script.js HTTP/1.1\r\nHost: genizymath.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/games/rooftop-snipers/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: GitHub.com\r\ncontent-type: text/html; charset=utf-8\r\nx-origin-cache: HIT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: W/\"64d39a40-24a3\"\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; img-src data:; connect-src 'self'\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: 91EA:4D8FF:3648F13:3682DEA:68AA0A6A\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sat, 23 Aug 2025 18:37:31 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1755974251.946371,VS0,VE131\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 6b575a59e5b48c3b88959c7499825a835d13bbed\r\ncontent-length: 5254\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":9379,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (3909)","md5":"c1f9838a645648cb3b25359f7890a288","sha1":"0cf12d25140e329bcb4c304feefce63f8f0ba7b3","sha256":"b620507312c5e97566a3c6cfaf99144fefc18a0da7d941401dfa0f5f58fb0368","sha512":"385898ec5d1ce3d13e8169945128724f6717cc35cec01d642b90046f7e03dd28a688771ca84ea53b81c8ef8cec8c1e28012c37732b80d1278a233468514a13f3","ssdeep":"192:Iwnb1iC9OA9XXMa9bYnr7JMkrALQDUnulGVopLAGCALQD6vnglET31iCLL3d:rB8HN3DUulGmmv3D6vglETliCfN","tlshash":"5a125c7f19e93705d8028e1539f227993d65840f9a866f6eb9ad1312cf8ed10e1a37cc","first_seen":"2023-06-17T01:23:25Z","last_seen":"2026-04-04T05:05:26.854156Z","times_seen":14975,"resource_available":true,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wayfarerorthodox.com/sbar.json?key=f0b511a8c19914e652dfaaae77a5ac81\u0026uuid=c281c967-8a50-45a7-a119-265aa7206517%3A3%3A1","fqdn":"wayfarerorthodox.com","domain":"wayfarerorthodox.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:33.061Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"wayfarerorthodox.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Jul 2025 00:39:20 GMT","end":"Tue, 30 Sep 2025 00:39:19 GMT"},"fingerprint":{"sha1":"2F:53:8D:73:5E:CE:FB:91:B4:FD:2B:4E:F3:E9:80:AA:62:1A:61:CD","sha256":"C1:D4:30:78:23:7C:54:B2:69:C9:DF:D9:A9:CB:93:CF:63:1B:C9:46:05:84:47:B1:70:77:4E:B8:85:DE:85:B8"}}},"request":{"raw":"GET /sbar.json?key=f0b511a8c19914e652dfaaae77a5ac81\u0026uuid=c281c967-8a50-45a7-a119-265aa7206517%3A3%3A1 HTTP/1.1\r\nHost: wayfarerorthodox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://genizymath.github.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 23 Aug 2025 18:37:33 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\naccess-control-allow-origin: https://genizymath.github.io\r\naccess-control-allow-credentials: true\r\nset-cookie: uid_id2=c281c967-8a50-45a7-a119-265aa7206517:3:1; expires=Sat, 30 Aug 2025 18:37:33 GMT; path=/; secure; SameSite=None\npdhtkv=true; expires=Sun, 24 Aug 2025 18:37:33 GMT; path=/; secure; SameSite=None\nuncs=1; expires=Sun, 24 Aug 2025 18:37:33 GMT; path=/; secure; SameSite=None\npdhtkv29=true; expires=Sun, 24 Aug 2025 18:37:33 GMT; path=/; secure; SameSite=None\nuncs29=1; expires=Sun, 24 Aug 2025 18:37:33 GMT; path=/; secure; SameSite=None\nu_pl27062818=1; expires=Sun, 24 Aug 2025 18:37:33 GMT; path=/; secure; SameSite=None\nslecf0b511a8c19914e652dfaaae77a5ac81=[3078207]; expires=Sat, 23 Aug 2025 18:37:38 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 221\r\nHost: wayfarerorthodox.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 8e60b22eef141c70aa8007fabcd661f1\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6172,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"JSON text data","md5":"aefdcadfff2d0be3787ddb5e7358d7d8","sha1":"17fb3b32397aca0103d8f1e1700e2eab461be4f8","sha256":"35f4bc970b92d77646e4903d8ce8296ae9408c48768ccc86e296c791e369da11","sha512":"37b5cd404538597d70733a6c020933d6ac65de7ac65bc4f0d296b2468f350b49bf2ae34a5b203343311cb7a27d59dbdd933b957e283e1ce2bf250fb9a55f4bad","ssdeep":"96:9zb46vRh4DWvLF4XWewfvI2ytnRt0oi1JYFVgDdHTAXz8TmWV6iznVd9a4dKWkCL:9zVvRh4SDG3t0oJO5kz8TmWUwPa48WjJ","tlshash":"ded16cfe906c716689c380481c633dae3da3e85d2898d45ca4eadbbf61845317f878dd","first_seen":"2025-08-23T18:38:03.397946Z","last_seen":"2025-08-23T18:38:03.397946Z","times_seen":1,"resource_available":false,"data":null}},"time_used":877,"timings":{"blocked":281,"dns":1,"connect":92,"send":0,"wait":315,"receive":0,"ssl":186},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-23","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/notifications/utility/default/us/blog/financeskipper/message_redcircle2/16/css/animate.css","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:33.958Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Jul 2025 14:01:22 GMT","end":"Mon, 29 Sep 2025 14:59:36 GMT"},"fingerprint":{"sha1":"CD:76:E0:2A:28:09:08:24:2D:4C:A1:14:B2:AE:6C:39:A4:CC:2F:6B","sha256":"8B:98:84:C0:8D:47:7C:1B:A7:26:4B:E4:9E:6E:FD:8E:E1:6D:6E:41:1D:E7:91:B7:70:A3:C1:D0:C0:85:6B:31"}}},"request":{"raw":"GET /sb/notifications/utility/default/us/blog/financeskipper/message_redcircle2/16/css/animate.css HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://genizymath.github.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 23 Aug 2025 18:37:33 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 19 Jan 2024 14:21:26 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"65aa8566-13361\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L4acn47kH45P0F7t7EMACntmiL1MfIZ8XImRF%2FQFpDhNPFcOwvaFtA4OxoBKgoQu7F2b0dgDAFgapF4J43s0Cu%2BJfHgh2kI8cWv2mhaLXog%3D\"}]}\r\ncf-ray: 973cb8cf4bdd0b9c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78689,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"3d4123dbfb33d27a5cfdfcfa91df6783","sha1":"e7d0eeeec54b848f0bc3da8685fa3bc88429d660","sha256":"cb7d1393b65701b2f97d8da244c2c6023e9cbc3463ecb0136b915cfc775c6887","sha512":"75c8a48dc207595e201b50b87ff68782112a21aded9f15f14185c07d40f0151d6afe74a2b278aa575caf12ac422e8166316296ed7b6573ea24e667cca4af51dd","ssdeep":"384:jvuAuF81dghu3ublZlX/m/Gu7uNUtrL4VrbZJgBhLYNKwZiMUL6Vpaj7F:jvuAu21dghu3uLu7uNKwZiMUL6Vpaj7F","tlshash":"22731bad399115845263861d83df9e68273ce5731826acef73c2488bcf8bf9867c9147","first_seen":"2024-01-20T06:37:31Z","last_seen":"2026-04-04T05:38:56.851953Z","times_seen":10530,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:300,400,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:33.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"DF:A1:DB:1F:BC:5E:31:D7:F8:FE:26:E3:B9:B3:02:98:B1:C8:50:EC","sha256":"A2:57:20:B6:AE:46:89:B9:39:C7:57:9B:1E:43:96:E3:5A:BC:7E:3F:1D:18:10:34:CC:53:3D:DB:78:4E:5C:21"}}},"request":{"raw":"GET /css?family=Roboto:300,400,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 23 Aug 2025 18:37:33 GMT\r\ndate: Sat, 23 Aug 2025 18:37:33 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16755,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"e9d2e14beb088f37fae98294940a9dcd","sha1":"1dafc3c55550249c8c2d782d5616c7b445c8e005","sha256":"f2e491cc46d3fcba81f729065d622bd722751d4a2e7f80b479aa64a92c17b5c7","sha512":"64025ea9b660d5e1d45a593a27345e152ba6b5ef95daceee5e43201319a555eb5457cfe1ecdcc725202063a22c5f406f3ba4607863d5b714c378f144bcdea5f7","ssdeep":"384:pjf5jgjPjrjyUj/qY4+j4jYjpjfMj1jWj6jyhj/qY4XjNjtj4jfdjkjDj3jyQj/E:p90DXOU/R08toBy+Oh/EBpcZwPLOQ/VK","tlshash":"e5722291041740009b835ce223cebf35fe1f92117152d0b5abfd9b6badcbc66526939d","first_seen":"2025-06-02T17:27:24.212334Z","last_seen":"2026-01-19T16:22:17.33804Z","times_seen":5482,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/pixel/sbs?c=1","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:33.784Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 21:49:55 GMT","end":"Fri, 26 Sep 2025 21:49:54 GMT"},"fingerprint":{"sha1":"38:55:0E:5D:7C:E7:08:BA:9A:77:8D:79:E7:3A:6B:27:F8:97:E4:89","sha256":"3A:54:48:30:C3:83:C3:F6:C2:3E:B3:7D:81:B3:37:9D:16:0C:B9:AE:C5:C3:56:8C:33:5D:AD:24:2B:B7:35:AF"}}},"request":{"raw":"GET /pixel/sbs?c=1 HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/\r\nCookie: ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.GSN40yDQqCPk3Sp_Ky3GV4ehy9hJLYxPoTUuW-eBxXc; uid_id2=c281c967-8a50-45a7-a119-265aa7206517:3:1; pdhtkv=true; uncs=3; pdhtkv23=true; uncs23=1; u_pl26940921=1; pdhtkv29=true; uncs29=2; u_pl27062818=1; slecf0b511a8c19914e652dfaaae77a5ac81=[6116561,3078189]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 23 Aug 2025 18:37:33 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T05:45:54.968102Z","times_seen":13318572,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-23","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/notifications/utility/default/us/blog/financeskipper/message_redcircle2/16/css/style.css","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:33.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Jul 2025 14:01:22 GMT","end":"Mon, 29 Sep 2025 14:59:36 GMT"},"fingerprint":{"sha1":"CD:76:E0:2A:28:09:08:24:2D:4C:A1:14:B2:AE:6C:39:A4:CC:2F:6B","sha256":"8B:98:84:C0:8D:47:7C:1B:A7:26:4B:E4:9E:6E:FD:8E:E1:6D:6E:41:1D:E7:91:B7:70:A3:C1:D0:C0:85:6B:31"}}},"request":{"raw":"GET /sb/notifications/utility/default/us/blog/financeskipper/message_redcircle2/16/css/style.css HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://genizymath.github.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 23 Aug 2025 18:37:33 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 19 Jan 2024 14:21:26 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"65aa8566-e50\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8kx0aadzsNlXgBumerWcSjP62rzlDgjVpei%2BtKEPzfPrExpBmjvdlFFcSnCz38LIH5eXqXHDqQRVqyZMfLIoKDS9LqW9v574ofR%2FD99k3uM%3D\"}]}\r\ncf-ray: 973cb8cf4bde0b9c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3664,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"da91945ede579f34a99cde40a98ce5a4","sha1":"cfbf9b6c295766437a906f7fd6f46a0302240c9a","sha256":"9b9d07bcd50263ebd848d3f60889a594727d925ee4488df503eac791023d57b1","sha512":"764d388d8e0d63feaf440cdb92de9ef3f1eb76152b4f1ac1ad0d1fc7b30c110f24628b0e0c34bf5a9cbb1918aa8dc2fc466386f07ec0fda75ea7ec1cf9befae4","ssdeep":"","tlshash":"3071ee961b372604b40bd49a2f652717132540078a4bed183fca774c8fc66a8c6e3bdf","first_seen":"2024-01-21T07:50:10Z","last_seen":"2026-04-02T10:27:56.661633Z","times_seen":384,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"genizymath.github.io/styles/style.css","fqdn":"genizymath.github.io","domain":"genizymath.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:30.938Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 07 Mar 2025 00:00:00 GMT","end":"Sat, 07 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8C:FF:59:E5:8E:C4:FA:76:FE:AF:2D:C5:C0:D4:13:6A:77:2D:F9:91","sha256":"7D:11:22:EA:96:98:52:34:1E:8D:D9:2B:CC:0C:7E:CC:00:96:30:D1:4D:A7:34:D7:CA:42:D5:B5:4A:2B:20:97"}}},"request":{"raw":"GET /styles/style.css HTTP/1.1\r\nHost: genizymath.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/games/rooftop-snipers/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: text/css; charset=utf-8\r\nlast-modified: Sat, 23 Aug 2025 18:36:53 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: W/\"68aa0a45-199b\"\r\nexpires: Sat, 23 Aug 2025 18:47:31 GMT\r\ncache-control: max-age=600\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: 268D:33F4B0:36F1082:372AF79:68AA0A68\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sat, 23 Aug 2025 18:37:31 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1755974251.944313,VS0,VE134\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 4d6dbd27878b9770e2c3e566100e41646541f87b\r\ncontent-length: 1454\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6555,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with CRLF line terminators","md5":"c6a446a9ad3bd2ede47a8a50345946f9","sha1":"2306313f703c0cdb575aa1338e30570ff06ae8a3","sha256":"e095272394cba6ac7bf8cdce18fffd9fdd8fd1c4cba1c79e69835ba43e053eda","sha512":"535f75b82acef53615aacd81a9072a721798b3115425d3cbbb2e4d97befc17bebc5e7888eab5584d721f240693986dccb4211dab5e938db49d7279e9bf871e2a","ssdeep":"96:6mS9m+L5qjSC/vzxl4lrFuJrDMGUNDFAF5bctQa2D9yi/c:a9m+F6SCVClIJr4LOPctsDZk","tlshash":"84d1db5dda12126a653b8a283bf1870af3e66063cf01537d3ed962408ff62b451a1ecc","first_seen":"2025-08-23T15:42:19.248461Z","last_seen":"2026-03-23T14:13:21.538179Z","times_seen":14,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"prefacebegbeginning.com/ren.gif?sid=H4sIAAAAAAAC_1RSz4scxRev3swpgXz5igp6mpsGZLZ7pncybQ7BGFeCye6aRBY0l-qu7plyurvaqurp2TktLkiOE_CgOdV-ZjerMYiiV1FmveiCkL7tIYviPyAIexTpycjog37vffpTDz7vx0e7-QlpIafHGzfEiMcxXV5p2PWXN3nKRKHqa7frjt2wL9U3edp2L9WHlZODV52W27Av1N8Mg75YbtqObTu2U1_lMozEcHnGgmePPKfh2Q232XBWXAzlf7HKLShqgQ1OyDPgrPzf79F74MEUafLV1VD1tcheeSPJY6qFxIAdvJP2U1GkSBZpJC1E6cH8NYQqCflkCSI9mHcAMdirOoDPS7L0_BP46cFcJvzB_lOlfowwhc_OoRhMEcZTcDpFIHbA2WMCBAxr60iTB2tCFnTrKUsrtiS10z_Bi5LUnjyLNPnySsyH9VsizjUXqcIwMuDDKXh3iiw_hB4tgReHCPSH4OwXsnx6HWmyt65iAc7MrHseTUGVhbz6uIU8spBnFhJ2XHftjhs4tNWOPBZctF3quiz0ba_TtG3qBReRB5WsMXQ2RhCPEchtZHIbfX6vJNZz30DmP0D1DBSzoHRJrLe3MWAGRUhQKIKCEhScoNAExcDss1g1lXnAYpX7zjw257FlJkJ3d-m-0N0wJaByDMnMHs8-UDsI9JnJKFJsIipHfW0m1GdmNzsh_69GZ93_9Q764XG940WdKAo6fuA3L9pR2LIdjwadJo1cz7cdCsUNuFqaTWXES3Jj9TdkvCQX_joLnx5CxYcI-BnQ3AEtDGjPYJR-2w1TPtpKqO41ulz3cr_BBZgwyHQNesvajU_Ii7MlvvCzgzA4InNDIA0yafA-_5GgG9-d3BQF2bspCkW-Xs80T_iIVgu-pakOrYdvhVuFkOzaVTX-_LWgIqr00e1Q6es0ZTztKvLFFc5YKFeFDELy3TW1GfobuepdyWWaZ9c3Xl-9lmQyVIqLdArKH58_j6A62XvO7HTPbb8ELqeQuUGS_0tptg2VLbASBDJeYD-zUORmIpv-4mfMCeJwgalvoMKj7__4p2iRTyStqik3u-ouurIGqneQJgYDaTCIDWg8hsrPTnQmjy7_9Gll9-HHtYkfy9qeH8v449mAK9csybufXS7JndMzUPy4vtL0W-1Opx1GbRa1WKvZYt6KHXou9dqu565Aq7L38Gz_7wAAAP__8y-RlqcEAAA=","fqdn":"prefacebegbeginning.com","domain":"prefacebegbeginning.com","tld":"com"},"ip":{"addr":"192.243.61.227","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:32.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"prefacebegbeginning.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 07 Aug 2025 09:12:18 GMT","end":"Wed, 05 Nov 2025 09:12:17 GMT"},"fingerprint":{"sha1":"02:DD:30:E6:FA:61:35:3B:6E:17:C3:A5:38:D6:82:9F:DD:79:CC:43","sha256":"97:9B:4B:68:15:BD:DE:B4:41:E2:49:37:12:C2:46:A0:AB:C7:E2:25:EC:7D:F9:A2:10:00:05:99:CC:2C:3E:F7"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_1RSz4scxRev3swpgXz5igp6mpsGZLZ7pncybQ7BGFeCye6aRBY0l-qu7plyurvaqurp2TktLkiOE_CgOdV-ZjerMYiiV1FmveiCkL7tIYviPyAIexTpycjog37vffpTDz7vx0e7-QlpIafHGzfEiMcxXV5p2PWXN3nKRKHqa7frjt2wL9U3edp2L9WHlZODV52W27Av1N8Mg75YbtqObTu2U1_lMozEcHnGgmePPKfh2Q232XBWXAzlf7HKLShqgQ1OyDPgrPzf79F74MEUafLV1VD1tcheeSPJY6qFxIAdvJP2U1GkSBZpJC1E6cH8NYQqCflkCSI9mHcAMdirOoDPS7L0_BP46cFcJvzB_lOlfowwhc_OoRhMEcZTcDpFIHbA2WMCBAxr60iTB2tCFnTrKUsrtiS10z_Bi5LUnjyLNPnySsyH9VsizjUXqcIwMuDDKXh3iiw_hB4tgReHCPSH4OwXsnx6HWmyt65iAc7MrHseTUGVhbz6uIU8spBnFhJ2XHftjhs4tNWOPBZctF3quiz0ba_TtG3qBReRB5WsMXQ2RhCPEchtZHIbfX6vJNZz30DmP0D1DBSzoHRJrLe3MWAGRUhQKIKCEhScoNAExcDss1g1lXnAYpX7zjw257FlJkJ3d-m-0N0wJaByDMnMHs8-UDsI9JnJKFJsIipHfW0m1GdmNzsh_69GZ93_9Q764XG940WdKAo6fuA3L9pR2LIdjwadJo1cz7cdCsUNuFqaTWXES3Jj9TdkvCQX_joLnx5CxYcI-BnQ3AEtDGjPYJR-2w1TPtpKqO41ulz3cr_BBZgwyHQNesvajU_Ii7MlvvCzgzA4InNDIA0yafA-_5GgG9-d3BQF2bspCkW-Xs80T_iIVgu-pakOrYdvhVuFkOzaVTX-_LWgIqr00e1Q6es0ZTztKvLFFc5YKFeFDELy3TW1GfobuepdyWWaZ9c3Xl-9lmQyVIqLdArKH58_j6A62XvO7HTPbb8ELqeQuUGS_0tptg2VLbASBDJeYD-zUORmIpv-4mfMCeJwgalvoMKj7__4p2iRTyStqik3u-ouurIGqneQJgYDaTCIDWg8hsrPTnQmjy7_9Gll9-HHtYkfy9qeH8v449mAK9csybufXS7JndMzUPy4vtL0W-1Opx1GbRa1WKvZYt6KHXou9dqu565Aq7L38Gz_7wAAAP__8y-RlqcEAAA= HTTP/1.1\r\nHost: prefacebegbeginning.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/\r\nCookie: pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; u_pl26927196=1; nlec89f8ffc8bcb270fe3019ac82af49b01a=[1690161,1690162,5941311]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 23 Aug 2025 18:37:32 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nVary: Origin\r\nAccess-Control-Allow-Credentials: true\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nHost: prefacebegbeginning.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: e21b5976f5d1d1fab996226465e13fb4\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T05:45:54.968102Z","times_seen":13318572,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-23","alert":"Sinkholed","trigger":"prefacebegbeginning.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"genizymath.github.io/images/favicon.png","fqdn":"genizymath.github.io","domain":"genizymath.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:32.566Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 07 Mar 2025 00:00:00 GMT","end":"Sat, 07 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8C:FF:59:E5:8E:C4:FA:76:FE:AF:2D:C5:C0:D4:13:6A:77:2D:F9:91","sha256":"7D:11:22:EA:96:98:52:34:1E:8D:D9:2B:CC:0C:7E:CC:00:96:30:D1:4D:A7:34:D7:CA:42:D5:B5:4A:2B:20:97"}}},"request":{"raw":"GET /images/favicon.png HTTP/1.1\r\nHost: genizymath.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/games/rooftop-snipers/\r\nCookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=c281c967-8a50-45a7-a119-265aa7206517%3A3%3A1; m5a4xojbcp2nx3gptmm633qal3gzmadn=prefacebegbeginning.com; pp_main_cc2699d51b73e1eb5f9d2126b08c131a=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: image/png\r\nlast-modified: Sat, 23 Aug 2025 18:36:52 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: \"68aa0a44-62cf\"\r\nexpires: Sat, 23 Aug 2025 18:47:32 GMT\r\ncache-control: max-age=600\r\nx-proxy-cache: MISS\r\nx-github-request-id: 6736:268739:3650153:3689532:68AA0A6B\r\naccept-ranges: bytes\r\ndate: Sat, 23 Aug 2025 18:37:32 GMT\r\nvia: 1.1 varnish\r\nage: 0\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1755974253.572073,VS0,VE142\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 2e9e2df75c45eac62f65ae44d892ae0659019399\r\ncontent-length: 25295\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":25295,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGBA, non-interlaced","md5":"72aa4990bc6a836b9899c64a10b2042d","sha1":"cb4b7a6793366440997dbada67b706013d610267","sha256":"8671155b22c5b72692cfccc26c51fe671c0f1fdd89a3ba09a8a84b54d8cd9041","sha512":"663d9e53798f92151beffc86c961b730952ac11607d095f909ca180c916da34a42445f46aac9b69f11131f9319f5e4a59c2bb7dc949f20dc9d5021db4020b751","ssdeep":"192:sF32J55555555555555s1Dv3i3O613i3O613i3O613i3O6fffffffffffffffffK:sI55555555555555s1yEEEXy","tlshash":"deb263a6e309d9777ac96588b049810f46898e3b3f1ace5295cb750f131bff52c3ac52","first_seen":"2025-08-23T15:42:19.270228Z","last_seen":"2026-03-23T14:13:21.528376Z","times_seen":14,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wayfarerorthodox.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fchat%2Fmob%2Fssp%2F1%2Fcss%2Fstyle.css\u0026l=4617\u0026fd=64","fqdn":"wayfarerorthodox.com","domain":"wayfarerorthodox.com","tld":"com"},"ip":{"addr":"192.243.61.227","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:33.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"wayfarerorthodox.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Jul 2025 00:39:20 GMT","end":"Tue, 30 Sep 2025 00:39:19 GMT"},"fingerprint":{"sha1":"2F:53:8D:73:5E:CE:FB:91:B4:FD:2B:4E:F3:E9:80:AA:62:1A:61:CD","sha256":"C1:D4:30:78:23:7C:54:B2:69:C9:DF:D9:A9:CB:93:CF:63:1B:C9:46:05:84:47:B1:70:77:4E:B8:85:DE:85:B8"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fchat%2Fmob%2Fssp%2F1%2Fcss%2Fstyle.css\u0026l=4617\u0026fd=64 HTTP/1.1\r\nHost: wayfarerorthodox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 23 Aug 2025 18:37:33 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: wayfarerorthodox.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T05:45:54.968102Z","times_seen":13318572,"resource_available":true,"data":null}},"time_used":667,"timings":{"blocked":285,"dns":1,"connect":93,"send":0,"wait":97,"receive":0,"ssl":188},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-23","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/ren.gif?sid=H4sIAAAAAAAC_4SUzYscxR_Gq3cDP8gPIoovEBAGycGAO9vV090zbQ5ijCvBvJlEcggi1V3VM-V2d7VV3dO7czEYkHjb3Dx46HlmsmtiEEWvoky8yIKQ8bSHLIj_gCgGTyKzu2HiyTpUPU9_uprnW_3t_mhY7pIWSrZz4awayCRhy17Tbrx4RWZcVaZx7nKD2k37ROOKzHz3RGNtNun-y7TlNu3jjTdEtKqWHZvaNrVpY0VqEau15T0Kmd8NaDOwm67TpJ6LNf1vb8pFGLYA3t8lT0Hy6RO_xlchowmy9MtTwqwWKn_p9bRMWKE0-nzr7Ww1U1WGdC5jbSHOtg7uhjJTQj5ZgMq2DiqA6o9nFSCUU7Lw7AOE2dZBTIT9W_tJwwQiQ8j_j6o_gUgmkGyCSF2H5PcJEHGcO48s3TyndMXW9ymb0Sk59PAPyGpKDj14Gln6xclErjUuqaQspMoM1uIacm0C2Z0gLycoBguQ1T1ExYeQ_Cey_PAMsnR83iQKku8ci5wOjQK_vdRhnr3keqy9xCgNlhzfY6zt2L5H23tHJOMJmFlEaSyU0kIZWyhzCynfabh2x40oa_lxwKO27TLX5SK0g45j2yyI2iijWfYNFPkGomQDkf54XGaRGTqf5bxXrPad1rjQpbhbvpsnjh-4duDQIX0Eg8dg2_adDu0M6eY-3EObs4c5rSHdF8GQ7hwziYhiO_QoZZ2IBgF1he85PGaMiXabeSzq0NtXfUp9z6fvINfXsCpvTon1zNfQ5fcwvRqGL8IUU2K99QH6vEYlCCpDUDGCShJUBUHVr2_xxDim3uSJKUN6sDoHa6seqaI7ZLdU0RUZAdMb0Lwey_x9cx1RsTgaxIaP1GxiYVGPWMjrYb5Lnpy9buvT31_Aqthp_FcpMLKGNAtgxsJATsnZlV-Qyyk5_vdhhOweTHIPkVwEK58Hq2qwXo1B9k1XZHKwnrKi1-zKoleGTanAVY28OIRi3Romu-ToXuM1_1qCiLbJwUCka-S6xnvyB4JucmN0UVVkfFFVhnx1Pi9kKgds1pSXClYI686bYr1Smp8-ZTZuvxrNwEzevSxMcYZlXGZdQz4_KTkXekXpSJBvT5srIrxQmt7JUmdlfubCayun01wLY6TKJmDy_pEjiOSU_O_HP_c-t-d2j0LqCXRZIy0fS5pfg8nn3igCncx9mFuoynqknXB-MZEEiZh7FtYwYvu73x5tmuuRZrPdTNZDcwNdbYEV15GlNfq6Rj-pwZKN2e9nVOR6-5WfW3sDYWKNwkRb4zDRyc39AzZyp-E5YcvvdHwR-zxu8ZbT4oFni8Blge8GrofCTHt3Dqf_BAAA___aSEkPTAUAAA==","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:33.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 21:49:55 GMT","end":"Fri, 26 Sep 2025 21:49:54 GMT"},"fingerprint":{"sha1":"38:55:0E:5D:7C:E7:08:BA:9A:77:8D:79:E7:3A:6B:27:F8:97:E4:89","sha256":"3A:54:48:30:C3:83:C3:F6:C2:3E:B3:7D:81:B3:37:9D:16:0C:B9:AE:C5:C3:56:8C:33:5D:AD:24:2B:B7:35:AF"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_4SUzYscxR_Gq3cDP8gPIoovEBAGycGAO9vV090zbQ5ijCvBvJlEcggi1V3VM-V2d7VV3dO7czEYkHjb3Dx46HlmsmtiEEWvoky8yIKQ8bSHLIj_gCgGTyKzu2HiyTpUPU9_uprnW_3t_mhY7pIWSrZz4awayCRhy17Tbrx4RWZcVaZx7nKD2k37ROOKzHz3RGNtNun-y7TlNu3jjTdEtKqWHZvaNrVpY0VqEau15T0Kmd8NaDOwm67TpJ6LNf1vb8pFGLYA3t8lT0Hy6RO_xlchowmy9MtTwqwWKn_p9bRMWKE0-nzr7Ww1U1WGdC5jbSHOtg7uhjJTQj5ZgMq2DiqA6o9nFSCUU7Lw7AOE2dZBTIT9W_tJwwQiQ8j_j6o_gUgmkGyCSF2H5PcJEHGcO48s3TyndMXW9ymb0Sk59PAPyGpKDj14Gln6xclErjUuqaQspMoM1uIacm0C2Z0gLycoBguQ1T1ExYeQ_Cey_PAMsnR83iQKku8ci5wOjQK_vdRhnr3keqy9xCgNlhzfY6zt2L5H23tHJOMJmFlEaSyU0kIZWyhzCynfabh2x40oa_lxwKO27TLX5SK0g45j2yyI2iijWfYNFPkGomQDkf54XGaRGTqf5bxXrPad1rjQpbhbvpsnjh-4duDQIX0Eg8dg2_adDu0M6eY-3EObs4c5rSHdF8GQ7hwziYhiO_QoZZ2IBgF1he85PGaMiXabeSzq0NtXfUp9z6fvINfXsCpvTon1zNfQ5fcwvRqGL8IUU2K99QH6vEYlCCpDUDGCShJUBUHVr2_xxDim3uSJKUN6sDoHa6seqaI7ZLdU0RUZAdMb0Lwey_x9cx1RsTgaxIaP1GxiYVGPWMjrYb5Lnpy9buvT31_Aqthp_FcpMLKGNAtgxsJATsnZlV-Qyyk5_vdhhOweTHIPkVwEK58Hq2qwXo1B9k1XZHKwnrKi1-zKoleGTanAVY28OIRi3Romu-ToXuM1_1qCiLbJwUCka-S6xnvyB4JucmN0UVVkfFFVhnx1Pi9kKgds1pSXClYI686bYr1Smp8-ZTZuvxrNwEzevSxMcYZlXGZdQz4_KTkXekXpSJBvT5srIrxQmt7JUmdlfubCayun01wLY6TKJmDy_pEjiOSU_O_HP_c-t-d2j0LqCXRZIy0fS5pfg8nn3igCncx9mFuoynqknXB-MZEEiZh7FtYwYvu73x5tmuuRZrPdTNZDcwNdbYEV15GlNfq6Rj-pwZKN2e9nVOR6-5WfW3sDYWKNwkRb4zDRyc39AzZyp-E5YcvvdHwR-zxu8ZbT4oFni8Blge8GrofCTHt3Dqf_BAAA___aSEkPTAUAAA== HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/\r\nCookie: ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.GSN40yDQqCPk3Sp_Ky3GV4ehy9hJLYxPoTUuW-eBxXc; uid_id2=c281c967-8a50-45a7-a119-265aa7206517:3:1; pdhtkv=true; uncs=3; pdhtkv23=true; uncs23=1; u_pl26940921=1; pdhtkv29=true; uncs29=2; u_pl27062818=1; slecf0b511a8c19914e652dfaaae77a5ac81=[6116561,3078189]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 23 Aug 2025 18:37:33 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 2\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: e81649c3740c4575009920d335a29ecf\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T05:45:54.968102Z","times_seen":13318572,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-23","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:300,400,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:34.085Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"DF:A1:DB:1F:BC:5E:31:D7:F8:FE:26:E3:B9:B3:02:98:B1:C8:50:EC","sha256":"A2:57:20:B6:AE:46:89:B9:39:C7:57:9B:1E:43:96:E3:5A:BC:7E:3F:1D:18:10:34:CC:53:3D:DB:78:4E:5C:21"}}},"request":{"raw":"GET /css?family=Roboto:300,400,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 23 Aug 2025 18:37:34 GMT\r\ndate: Sat, 23 Aug 2025 18:37:34 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16755,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"e9d2e14beb088f37fae98294940a9dcd","sha1":"1dafc3c55550249c8c2d782d5616c7b445c8e005","sha256":"f2e491cc46d3fcba81f729065d622bd722751d4a2e7f80b479aa64a92c17b5c7","sha512":"64025ea9b660d5e1d45a593a27345e152ba6b5ef95daceee5e43201319a555eb5457cfe1ecdcc725202063a22c5f406f3ba4607863d5b714c378f144bcdea5f7","ssdeep":"384:pjf5jgjPjrjyUj/qY4+j4jYjpjfMj1jWj6jyhj/qY4XjNjtj4jfdjkjDj3jyQj/E:p90DXOU/R08toBy+Oh/EBpcZwPLOQ/VK","tlshash":"e5722291041740009b835ce223cebf35fe1f92117152d0b5abfd9b6badcbc66526939d","first_seen":"2025-06-02T17:27:24.212334Z","last_seen":"2026-01-19T16:22:17.33804Z","times_seen":5482,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"prefacebegbeginning.com/ntv.json?key=89f8ffc8bcb270fe3019ac82af49b01a\u0026vstc=4\u0026rb=","fqdn":"prefacebegbeginning.com","domain":"prefacebegbeginning.com","tld":"com"},"ip":{"addr":"192.243.61.227","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:31.445Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"prefacebegbeginning.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 07 Aug 2025 09:12:18 GMT","end":"Wed, 05 Nov 2025 09:12:17 GMT"},"fingerprint":{"sha1":"02:DD:30:E6:FA:61:35:3B:6E:17:C3:A5:38:D6:82:9F:DD:79:CC:43","sha256":"97:9B:4B:68:15:BD:DE:B4:41:E2:49:37:12:C2:46:A0:AB:C7:E2:25:EC:7D:F9:A2:10:00:05:99:CC:2C:3E:F7"}}},"request":{"raw":"GET /ntv.json?key=89f8ffc8bcb270fe3019ac82af49b01a\u0026vstc=4\u0026rb= HTTP/1.1\r\nHost: prefacebegbeginning.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://genizymath.github.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 23 Aug 2025 18:37:31 GMT\r\nContent-Type: application/json\r\nContent-Length: 16918\r\nConnection: keep-alive\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nAccess-Control-Allow-Origin: https://genizymath.github.io\r\nAccess-Control-Allow-Credentials: true\r\nSet-Cookie: pdhtkv=true; expires=Sun, 24 Aug 2025 18:37:31 GMT; path=/; secure; SameSite=None\nuncs=1; expires=Sun, 24 Aug 2025 18:37:31 GMT; path=/; secure; SameSite=None\npdhtkv49=true; expires=Sun, 24 Aug 2025 18:37:31 GMT; path=/; secure; SameSite=None\nuncs49=1; expires=Sun, 24 Aug 2025 18:37:31 GMT; path=/; secure; SameSite=None\nu_pl26927196=1; expires=Sun, 24 Aug 2025 18:37:31 GMT; path=/; secure; SameSite=None\nnlec89f8ffc8bcb270fe3019ac82af49b01a=[1690161,1690162,5941311]; expires=Sat, 23 Aug 2025 18:37:36 GMT; path=/; secure; SameSite=None\r\nHost: prefacebegbeginning.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 8514cf952c7e53789e2622820c55de8b\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16918,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"eb1033493394c48c901b4f420bc5a68d","sha1":"880cb7e79391c6311c584414f6007c8bb6e9e7df","sha256":"dd2567de1cfd383f899101ff525915d45d468dd1eb97f7bde9ebda2b50737885","sha512":"9b3be211df91c477bd884e7a3be8a6a41782c6a0dce9ec3319b86e3b82dfb02b2e8c4cbcaf115bc03f77923dd8cd1820d122377afba89ac2e7ec6160144c2e67","ssdeep":"384:231VCYNbsH4IW5bXb3Fd8EL2HbN7RFM75oJK7mv+J:231VCYNYHzWJr3FaE2bNlp4","tlshash":"6372c0f3451a19250f96caa31f4be9ed4e53a622e1ce7cdf89c882be101ce2254564f7","first_seen":"2025-08-23T18:38:03.406368Z","last_seen":"2025-08-23T18:38:03.406368Z","times_seen":1,"resource_available":false,"data":null}},"time_used":857,"timings":{"blocked":328,"dns":24,"connect":92,"send":0,"wait":104,"receive":91,"ssl":209},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-23","alert":"Sinkholed","trigger":"prefacebegbeginning.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/genizy/assets@main/rooftop-snipers/TemplateData/progressEmpty.Dark.png","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://genizymath.github.io/iframe/283.html","date":"2025-08-23T18:37:32.969Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /gh/genizy/assets@main/rooftop-snipers/TemplateData/progressEmpty.Dark.png HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/gh/genizy/assets@main/rooftop-snipers/TemplateData/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 114\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: image/png\r\nx-jsd-version: main\r\nx-jsd-version-type: branch\r\netag: W/\"72-OkzXJvuE5vS1f4ifxqTorVgRyXo\"\r\naccept-ranges: bytes\r\nage: 6055\r\ndate: Sat, 23 Aug 2025 18:37:33 GMT\r\nx-served-by: cache-fra-eddf8230148-FRA, cache-hel1410032-HEL\r\nx-cache: HIT, MISS\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":114,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 141 x 18, 8-bit gray+alpha, non-interlaced","md5":"652e682fc93a3f23f0df2fae461694f3","sha1":"3a4cd726fb84e6f4b57f889fc6a4e8ad5811c97a","sha256":"ce9bb70697d8a0065a02e47be4be35ef0807ada4275b131e40a523bfca2eadf6","sha512":"b143c33f27eecd78adb531ded98e1641cf4c9bad2ad46efc2eeb1c80b0837feb882327f7de26e5c3a34be37c62e3b63c5f468356c6581299d5d7353bd14a45cd","ssdeep":"","tlshash":"26b012e2e3116c2dcbd6952751293023e661cdd7d721061c60254f23216bf4dc6d8e17","first_seen":"2025-08-23T18:38:03.408594Z","last_seen":"2026-02-20T21:07:29.371537Z","times_seen":2,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":41,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:33.790Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://genizymath.github.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 22 Aug 2025 08:13:09 GMT\r\nexpires: Sat, 22 Aug 2026 08:13:09 GMT\r\ncache-control: public, max-age=31536000\r\nage: 123864\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-04-04T05:45:37.747965Z","times_seen":713826,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":80,"dns":0,"connect":29,"send":0,"wait":31,"receive":9,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wayfarerorthodox.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.show-sb.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2Ffinanceskipper%2Fmessage_redcircle2%2F16%2Findex.html\u0026l=1545\u0026fd=134","fqdn":"wayfarerorthodox.com","domain":"wayfarerorthodox.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:33.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"wayfarerorthodox.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Jul 2025 00:39:20 GMT","end":"Tue, 30 Sep 2025 00:39:19 GMT"},"fingerprint":{"sha1":"2F:53:8D:73:5E:CE:FB:91:B4:FD:2B:4E:F3:E9:80:AA:62:1A:61:CD","sha256":"C1:D4:30:78:23:7C:54:B2:69:C9:DF:D9:A9:CB:93:CF:63:1B:C9:46:05:84:47:B1:70:77:4E:B8:85:DE:85:B8"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.show-sb.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2Ffinanceskipper%2Fmessage_redcircle2%2F16%2Findex.html\u0026l=1545\u0026fd=134 HTTP/1.1\r\nHost: wayfarerorthodox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/\r\nCookie: uid_id2=c281c967-8a50-45a7-a119-265aa7206517:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl27062818=1; slecf0b511a8c19914e652dfaaae77a5ac81=[3078207]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 23 Aug 2025 18:37:33 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: wayfarerorthodox.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T05:45:54.968102Z","times_seen":13318572,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-23","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.uca.cloud.unity3d.com/v1/events","fqdn":"api.uca.cloud.unity3d.com","domain":"unity3d.com","tld":"com"},"ip":{"addr":"34.107.172.168","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://genizymath.github.io/iframe/283.html","date":"2025-08-23T18:37:42.114Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thind.0.gusc1.prd.data.unity3d.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Jul 2025 15:45:47 GMT","end":"Thu, 16 Oct 2025 15:45:46 GMT"},"fingerprint":{"sha1":"CF:D2:0F:97:4F:2D:F7:FC:1C:F6:46:FF:19:7C:19:15:52:2D:49:A0","sha256":"4B:CD:8F:CC:3A:BA:C4:36:B8:BF:F7:C4:B3:B5:1A:06:EA:B2:FB:A4:22:7B:49:2C:4F:DA:8A:36:D2:D3:1B:99"}}},"request":{"raw":"OPTIONS /v1/events HTTP/1.1\r\nHost: api.uca.cloud.unity3d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,continuous_request,data_block_id,data_retry_count,event_count,expired_session_dropped\r\nReferer: https://genizymath.github.io/\r\nOrigin: https://genizymath.github.io\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: content-type,continuous_request,data_block_id,data_retry_count,event_count,expired_session_dropped\r\naccess-control-allow-methods: POST\r\naccess-control-allow-origin: https://genizymath.github.io\r\naccess-control-max-age: 600\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ndate: Sat, 23 Aug 2025 18:37:42 GMT\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T05:45:54.968102Z","times_seen":13318572,"resource_available":true,"data":null}},"time_used":340,"timings":{"blocked":99,"dns":25,"connect":12,"send":0,"wait":140,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/js/main.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://genizymath.github.io/iframe/283.html","date":"2025-08-23T18:37:31.797Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /js/main.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/plain; charset=utf-8\r\netag: W/\"24-Db5x2VUXD4Fx1NYDZzTYg5fKIHI\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 469824\r\ndate: Sat, 23 Aug 2025 18:37:31 GMT\r\nx-served-by: cache-fra-etou8220177-FRA, cache-hel1410025-HEL\r\nx-cache: HIT, MISS\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 38\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T05:45:54.968102Z","times_seen":13318572,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/ren.gif?sid=H4sIAAAAAAAC_1RTy4scRRiv3s0pHsQ3CMIgHgy4s909PY82h2CMK8G8SCI5iEh1V_VMuTVdbT2md-cUDEqOm5uCh57fTHY1BlH0KsistwUhIwh7yIIE_AMi5Cgyswur3-F7_H5V8Pu--urzkTsgDTi6f-WiGgop6Wqz7tdevyFypkpTu3S9Fvh1_3Tthshb0enaxtzpwZtBI6r7p2rv8nRdrYZ-4PuBH9TWhOaZ2lhdsBDF_Tiox349CutBM8KG_n9t3BIM9cAGB-RZCDZ7-lH2AUQ6Rd7__hw361YVb7zTd5JapTFgO-_n67kqc_SP00x7yPKdo9NQZkbIF0tQ-c5RB1CDybwDJGJGll58iCTfOZKJZHD3UGkiwXMk7CmUgym4nELQKVJ1C4I9IEDKcOky8v72JaVLunnI0jk7Iyee_A1RzsiJh88j7393VoqN2jUlnRUqN9jIKoiNKUR3isLtwg6XIMpdpPZTCPYbWX1yAXl_ctlIBcH2X0vDTpDGrfZKhzb9lahJ2ys0COKVsNWktB36rWbQXoxIZFNQswxnPDjhwWUeXOGhz_Zrkd-J0oA2WlnM0rYf0ShiPPHjTuj7NE7bcOlc-xZssYVUbiHVn20XrGfXBxOrHZ-4PDWj4OtDKGwswO05GDZGwX33USHDVhz5cRiMAhT6JtbFnRnxXvgR2v0C06tgmAdjCQasQskJSkNQUoJSEJSWoBxUd5k0oam2mTQuCY5ieBQb1VjZ7ojeVbbLcwKqt6BZNRHFJ-YWUrs8HmaGjdXc0cRWY5qwalQckGfmj-J99fhVrPP9WuYnzSCgnTSI4yDirWbIMkopb7dpk6adAEZUEGYJ1HgYihm5uPYnCjEjp_45iYTuwshdpGIZ1L0CWlagvQrD_Kcuz8Vws09tr94VtueSulBgqkJhT8BueiN5QF5erMeH1x-Ap3tn_soWhlRXKHSFj8WvBF15e3xVlWRyVZWG_HC5sKIvhnS-OtcstXz53nt8s1SanT9ntr55K50T8_T-dW7sBZozkXcN-fasYIzrNaVTTn4-b27w5IozvbNO5664cOXttfP9QnNjhMqnoGJGvMcaqZiR5758afEtoj8eQegptKvQd3vkyJAWN2GKY-1GEWh5zCeFh9JVYx0mx6AUBJIf1zSpYP5TJ8f5WNP5bSqqkbmNrvZA7S3k_QoDXWEgK1C5BeOWx7bQe2d-bywMifTGidTeJJFa3jkcsRH7tWaYNFqdTotnLZY1WCNssLjp8ziicSuKoyasmfXunZT_BgAA__8tDEWg9AQAAA==","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:33.062Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 21:49:55 GMT","end":"Fri, 26 Sep 2025 21:49:54 GMT"},"fingerprint":{"sha1":"38:55:0E:5D:7C:E7:08:BA:9A:77:8D:79:E7:3A:6B:27:F8:97:E4:89","sha256":"3A:54:48:30:C3:83:C3:F6:C2:3E:B3:7D:81:B3:37:9D:16:0C:B9:AE:C5:C3:56:8C:33:5D:AD:24:2B:B7:35:AF"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_1RTy4scRRiv3s0pHsQ3CMIgHgy4s909PY82h2CMK8G8SCI5iEh1V_VMuTVdbT2md-cUDEqOm5uCh57fTHY1BlH0KsistwUhIwh7yIIE_AMi5Cgyswur3-F7_H5V8Pu--urzkTsgDTi6f-WiGgop6Wqz7tdevyFypkpTu3S9Fvh1_3Tthshb0enaxtzpwZtBI6r7p2rv8nRdrYZ-4PuBH9TWhOaZ2lhdsBDF_Tiox349CutBM8KG_n9t3BIM9cAGB-RZCDZ7-lH2AUQ6Rd7__hw361YVb7zTd5JapTFgO-_n67kqc_SP00x7yPKdo9NQZkbIF0tQ-c5RB1CDybwDJGJGll58iCTfOZKJZHD3UGkiwXMk7CmUgym4nELQKVJ1C4I9IEDKcOky8v72JaVLunnI0jk7Iyee_A1RzsiJh88j7393VoqN2jUlnRUqN9jIKoiNKUR3isLtwg6XIMpdpPZTCPYbWX1yAXl_ctlIBcH2X0vDTpDGrfZKhzb9lahJ2ys0COKVsNWktB36rWbQXoxIZFNQswxnPDjhwWUeXOGhz_Zrkd-J0oA2WlnM0rYf0ShiPPHjTuj7NE7bcOlc-xZssYVUbiHVn20XrGfXBxOrHZ-4PDWj4OtDKGwswO05GDZGwX33USHDVhz5cRiMAhT6JtbFnRnxXvgR2v0C06tgmAdjCQasQskJSkNQUoJSEJSWoBxUd5k0oam2mTQuCY5ieBQb1VjZ7ojeVbbLcwKqt6BZNRHFJ-YWUrs8HmaGjdXc0cRWY5qwalQckGfmj-J99fhVrPP9WuYnzSCgnTSI4yDirWbIMkopb7dpk6adAEZUEGYJ1HgYihm5uPYnCjEjp_45iYTuwshdpGIZ1L0CWlagvQrD_Kcuz8Vws09tr94VtueSulBgqkJhT8BueiN5QF5erMeH1x-Ap3tn_soWhlRXKHSFj8WvBF15e3xVlWRyVZWG_HC5sKIvhnS-OtcstXz53nt8s1SanT9ntr55K50T8_T-dW7sBZozkXcN-fasYIzrNaVTTn4-b27w5IozvbNO5664cOXttfP9QnNjhMqnoGJGvMcaqZiR5758afEtoj8eQegptKvQd3vkyJAWN2GKY-1GEWh5zCeFh9JVYx0mx6AUBJIf1zSpYP5TJ8f5WNP5bSqqkbmNrvZA7S3k_QoDXWEgK1C5BeOWx7bQe2d-bywMifTGidTeJJFa3jkcsRH7tWaYNFqdTotnLZY1WCNssLjp8ziicSuKoyasmfXunZT_BgAA__8tDEWg9AQAAA== HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/\r\nCookie: ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJwIjp7ImlkIjoyNjk0MDkyMSwiayI6IjMzZTZhNGYyYmQ3MzQ2YzU1N2U4NTY5OTgzYjlhOTY2Iiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjo1MDY0NDE3LCJwaWQiOjI3NTIwMTAsImFuIjp0cnVlLCJsYW4iOnRydWUsImNpZCI6MywiYWlkIjoyMywicHQiOjQsInBrIjoidXBmYjdiaXBxIiwiY3BrcyI6eyIyOCI6ImIyYmZiMDZkMzQ2MTg0ZTM2YTkzNTAwMDRhODZmZWQ0IiwiMjkiOiJmMGI1MTFhOGMxOTkxNGU2NTJkZmFhYWU3N2E1YWM4MSJ9LCJ0IjoxfSwidSI6eyJ1IjoxLCJhdSI6MSwiZCI6eyJpZCI6MjY2NTYxMTE1LCJpZHMiOiIiLCJpYyI6ZmFsc2UsIm4iOiJEZXNrdG9wLEVtdWxhdG9yIiwidiI6IlVua25vd24iLCJtIjoiVW5rbm93biIsImYiOjEsImZuIjoiRGVza3RvcCIsIm9pZCI6Mzg5MTQsIm9uIjoiV2luZG93cyIsIm92IjoiMTAuMCIsImJpZCI6MTM2OTI1LCJibiI6IkZpcmVmb3giLCJidiI6IjEzNC4wIiwid3YiOmZhbHNlLCJlIjp0cnVlLCJhYiI6ZmFsc2V9LCJjIjp7ImlkIjoxNjIsImMiOiJOTyIsIm4iOiJOb3J3YXkifSwiYSI6ZmFsc2UsImNyIjp7Im4iOiJCbGl4IFNvbHV0aW9ucyJ9LCJ4ZiI6IiIsIml4ZiI6ZmFsc2UsImlneGYiOmZhbHNlLCJ1cCI6dHJ1ZSwiciI6Imh0dHBzOi8vZ2VuaXp5bWF0aC5naXRodWIuaW8vZ2FtZXMvcm9vZnRvcC1zbmlwZXJzLyIsImFyIjpbXX19.GSN40yDQqCPk3Sp_Ky3GV4ehy9hJLYxPoTUuW-eBxXc; uid_id2=c281c967-8a50-45a7-a119-265aa7206517:3:1; pdhtkv=true; uncs=2; pdhtkv23=true; uncs23=1; u_pl26940921=1; pdhtkv29=true; uncs29=1; u_pl27062818=1; slecf0b511a8c19914e652dfaaae77a5ac81=[6116561]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 23 Aug 2025 18:37:33 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 8\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: f599efb895873995f01d641f54fe1e41\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T05:45:54.968102Z","times_seen":13318572,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-23","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.show-sb.com/sb/au/2f/33/17/2f3317da28d2a6ed09610d2d267aa136/1648542458.html","fqdn":"cdn.show-sb.com","domain":"show-sb.com","tld":"com"},"ip":{"addr":"104.21.95.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:33.063Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"show-sb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 10 Aug 2025 11:11:15 GMT","end":"Sat, 08 Nov 2025 12:08:40 GMT"},"fingerprint":{"sha1":"46:26:78:BD:18:7A:95:15:D4:B3:89:73:FE:7E:99:33:18:7F:21:3E","sha256":"AD:6B:6A:10:54:38:33:B9:BB:A6:FD:B7:B0:1B:2E:9D:62:B8:47:35:C4:E6:7B:F6:4A:92:AA:75:B0:29:F7:F3"}}},"request":{"raw":"GET /sb/au/2f/33/17/2f3317da28d2a6ed09610d2d267aa136/1648542458.html HTTP/1.1\r\nHost: cdn.show-sb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://genizymath.github.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 23 Aug 2025 18:37:33 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Tue, 29 Mar 2022 08:27:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GnbS3Aoa%2B66dHtcgG5v7%2BDJG2zdyJsHMfA%2F3YiIbwdOJokc9VmznYeCnwDBO62XbchKpmRz7dO1aH%2BkDSGlzpw6C0AdpYDfT24VNPgBtng%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 973cb8c9eea01806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2977,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"027fddd0d322239ada2f2b8b93934fda","sha1":"6f99560bca5c6d8d747c802f26058344eb179cec","sha256":"a5b2073d8f57ef0469b777f73d6c3f4a85cc17b4c2ed2a53aa3f1acb2273dbd5","sha512":"2c2eff668f38734b17c8847dfe11b5b40027948a1ebf24d6a763c44ab0b0fc63d260f69f9b3e0eefd8d82646223d88df36a256155ab3b7c21078a697e052afc8","ssdeep":"","tlshash":"26517d101fa8cc3670b08128a7233e2a7b9f6083931a6764317d5c255f949ea777f6f1","first_seen":"2023-05-18T23:46:38Z","last_seen":"2026-01-17T18:50:06.211937Z","times_seen":1108,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":32,"dns":5,"connect":8,"send":0,"wait":115,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"prefacebegbeginning.com/impr.gif?sid=H4sIAAAAAAAC_1RSTYgcRRSu3gwe1oP4C3qao4Ew2z3T2Z0xh2CMK8EkuyaRBc2luqt7ppzqrraqenp2QFhckBxH8KB7qv1mN6sxiKJXQWa9aECwb3vIonjyLOxRpHcHJj7o997XXxV873v1yW5-TFrI6dH6DTniQtCliw23_uoGT5ksdP3mnbrnNtxL9Q2eLvuX6sMqqcFrXstvuOfrb0VhXy41Xc91Pderr3IVxXK4dMqCZw87XqPjNvxmw7voY6j-j3XuQFMHbHBMngNn5TN_xe-Dh1OkybdXI903MrvwZpILaqTCgB28m_ZTWaRI5m2sHMTpwew0pC4J-XwBMj2YTQA52KsmQMBLsvDSYwTpwUwmgsH-mdJAIEoRsKdRDKaIxBScThHKbXD2OwFChptrSJP7N6Uq6OYZSyu2JLWTf8CLktQev4A0-eaK4MP6bSlyw2WqMYwt-HAK3p0iyw9hRgvgxSFC8zE4-40snVxHmuytaSHBmT2dnsdTUO0grz7uII8d5JmDhB3Vfbfthx5tLccdFq64PvV9FgVup910XdoJV5CHlawxTDZGKMYI1RYytYU-_7QkzovfQ-U_QfcsNHOgTUmcd7YwYBZFRFBogoISFJygMATFwO4zoZva3mdC54E3q81ZbdmJNN1dui9NN0oJqBpDMbvHsw_1NkJzbjKKNZvIKtHA2AkNmN3NjsmzlXXOzh930Y-O6u1O3I7jsB2EQXPFjaOW63Vo2G7S2O8ErkehuQXXC6eujHhJbqz-iYyX5Py_iwjoIbQ4RMjPgeYeaGFBexaj9IdulPLRZkJNr9HlppcHDS7BpEVmajCbzq44Jq-cLvHuyTlE4SMyC4TKIlMWH_CfCbri3uSWLMjeLVlo8t1aZnjCR7Ra8G1DTfTUg7ejzUIqdu2qHn_1elgRVfvwTqTNdZoynnY1-foKZyxSq1KFEfnxmt6IgvVc967kKs2z6-tvrF5LMhVpzWU6BeUlWTy-gJCX5PmPJqeP19_5G1xNoXKLJH9Ca7YFnc2xlgRKzHGQ1VDkdqKawfyn4AQimmMaWOgncDDvJ4pWtym3u_oeuqoGaraRJhYDZTEQFlSMofPFicnUo8u_fFHFDgJRmwRC1fYCocRnJXn5V69KzZK89-XlM8c1P6rHragZum57ZdlrtePIa_ksjC-2_Q5bpm6rFcHosvdgsf9fAAAA___2TlMGqQQAAA==","fqdn":"prefacebegbeginning.com","domain":"prefacebegbeginning.com","tld":"com"},"ip":{"addr":"192.243.61.225","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:32.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"prefacebegbeginning.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 07 Aug 2025 09:12:18 GMT","end":"Wed, 05 Nov 2025 09:12:17 GMT"},"fingerprint":{"sha1":"02:DD:30:E6:FA:61:35:3B:6E:17:C3:A5:38:D6:82:9F:DD:79:CC:43","sha256":"97:9B:4B:68:15:BD:DE:B4:41:E2:49:37:12:C2:46:A0:AB:C7:E2:25:EC:7D:F9:A2:10:00:05:99:CC:2C:3E:F7"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1RSTYgcRRSu3gwe1oP4C3qao4Ew2z3T2Z0xh2CMK8EkuyaRBc2luqt7ppzqrraqenp2QFhckBxH8KB7qv1mN6sxiKJXQWa9aECwb3vIonjyLOxRpHcHJj7o997XXxV873v1yW5-TFrI6dH6DTniQtCliw23_uoGT5ksdP3mnbrnNtxL9Q2eLvuX6sMqqcFrXstvuOfrb0VhXy41Xc91Pderr3IVxXK4dMqCZw87XqPjNvxmw7voY6j-j3XuQFMHbHBMngNn5TN_xe-Dh1OkybdXI903MrvwZpILaqTCgB28m_ZTWaRI5m2sHMTpwew0pC4J-XwBMj2YTQA52KsmQMBLsvDSYwTpwUwmgsH-mdJAIEoRsKdRDKaIxBScThHKbXD2OwFChptrSJP7N6Uq6OYZSyu2JLWTf8CLktQev4A0-eaK4MP6bSlyw2WqMYwt-HAK3p0iyw9hRgvgxSFC8zE4-40snVxHmuytaSHBmT2dnsdTUO0grz7uII8d5JmDhB3Vfbfthx5tLccdFq64PvV9FgVup910XdoJV5CHlawxTDZGKMYI1RYytYU-_7QkzovfQ-U_QfcsNHOgTUmcd7YwYBZFRFBogoISFJygMATFwO4zoZva3mdC54E3q81ZbdmJNN1dui9NN0oJqBpDMbvHsw_1NkJzbjKKNZvIKtHA2AkNmN3NjsmzlXXOzh930Y-O6u1O3I7jsB2EQXPFjaOW63Vo2G7S2O8ErkehuQXXC6eujHhJbqz-iYyX5Py_iwjoIbQ4RMjPgeYeaGFBexaj9IdulPLRZkJNr9HlppcHDS7BpEVmajCbzq44Jq-cLvHuyTlE4SMyC4TKIlMWH_CfCbri3uSWLMjeLVlo8t1aZnjCR7Ra8G1DTfTUg7ejzUIqdu2qHn_1elgRVfvwTqTNdZoynnY1-foKZyxSq1KFEfnxmt6IgvVc967kKs2z6-tvrF5LMhVpzWU6BeUlWTy-gJCX5PmPJqeP19_5G1xNoXKLJH9Ca7YFnc2xlgRKzHGQ1VDkdqKawfyn4AQimmMaWOgncDDvJ4pWtym3u_oeuqoGaraRJhYDZTEQFlSMofPFicnUo8u_fFHFDgJRmwRC1fYCocRnJXn5V69KzZK89-XlM8c1P6rHragZum57ZdlrtePIa_ksjC-2_Q5bpm6rFcHosvdgsf9fAAAA___2TlMGqQQAAA== HTTP/1.1\r\nHost: prefacebegbeginning.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/\r\nCookie: pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; u_pl26927196=1; nlec89f8ffc8bcb270fe3019ac82af49b01a=[1690161,1690162,5941311]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 23 Aug 2025 18:37:32 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nVary: Origin\r\nAccess-Control-Allow-Credentials: true\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nHost: prefacebegbeginning.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: f8aecff2a8e831fad59156da52c0c9a0\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T05:45:54.968102Z","times_seen":13318572,"resource_available":true,"data":null}},"time_used":458,"timings":{"blocked":180,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":184},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-23","alert":"Sinkholed","trigger":"prefacebegbeginning.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:300,400,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:33.846Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"DF:A1:DB:1F:BC:5E:31:D7:F8:FE:26:E3:B9:B3:02:98:B1:C8:50:EC","sha256":"A2:57:20:B6:AE:46:89:B9:39:C7:57:9B:1E:43:96:E3:5A:BC:7E:3F:1D:18:10:34:CC:53:3D:DB:78:4E:5C:21"}}},"request":{"raw":"GET /css?family=Roboto:300,400,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 23 Aug 2025 18:37:33 GMT\r\ndate: Sat, 23 Aug 2025 18:37:33 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16755,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"e9d2e14beb088f37fae98294940a9dcd","sha1":"1dafc3c55550249c8c2d782d5616c7b445c8e005","sha256":"f2e491cc46d3fcba81f729065d622bd722751d4a2e7f80b479aa64a92c17b5c7","sha512":"64025ea9b660d5e1d45a593a27345e152ba6b5ef95daceee5e43201319a555eb5457cfe1ecdcc725202063a22c5f406f3ba4607863d5b714c378f144bcdea5f7","ssdeep":"384:pjf5jgjPjrjyUj/qY4+j4jYjpjfMj1jWj6jyhj/qY4XjNjtj4jfdjkjDj3jyQj/E:p90DXOU/R08toBy+Oh/EBpcZwPLOQ/VK","tlshash":"e5722291041740009b835ce223cebf35fe1f92117152d0b5abfd9b6badcbc66526939d","first_seen":"2025-06-02T17:27:24.212334Z","last_seen":"2026-01-19T16:22:17.33804Z","times_seen":5482,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/notifications/utility/default/us/blog/financeskipper/message_redcircle2/16/img/sale3.jpg","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:34.087Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Jul 2025 14:01:22 GMT","end":"Mon, 29 Sep 2025 14:59:36 GMT"},"fingerprint":{"sha1":"CD:76:E0:2A:28:09:08:24:2D:4C:A1:14:B2:AE:6C:39:A4:CC:2F:6B","sha256":"8B:98:84:C0:8D:47:7C:1B:A7:26:4B:E4:9E:6E:FD:8E:E1:6D:6E:41:1D:E7:91:B7:70:A3:C1:D0:C0:85:6B:31"}}},"request":{"raw":"GET /sb/notifications/utility/default/us/blog/financeskipper/message_redcircle2/16/img/sale3.jpg HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 23 Aug 2025 18:37:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 64642\r\nlast-modified: Fri, 19 Jan 2024 14:21:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"65aa8566-fc82\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\naccept-ranges: bytes\r\nage: 1252416\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VZDVTYw5nJtDP8%2Fu6xChQ54hFsWkjmXsoB6FZ4esox6aal3I5Qgf5eWkHRkD32xY7vtHSkUe69qBNWtANIp5feEsnE0FVOwqsas4jzah818%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 973cb8d01b17767a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":64642,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=242, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=364], progressive, precision 8, 364x242, components 3","md5":"61f7b1fa1698507638df7882e2bdfcaf","sha1":"89134af9a734f4c30d0db01ea36c86895e46b7e3","sha256":"bc0a583f7e3c834e53d5263ecc90d279b27460ea2e9bce56b7ac6b129eb5849c","sha512":"359d9aab944bc2fe6dd5751a385cb4088b39539606e8f460f923ce597823dcfc0472f8ab9662a8808acaff4ed6fe6e5514e98418a9387e718061293b067708c5","ssdeep":"1536:7BNUdceBNUdcVApV4vIfhczULHmQ88PbzaRKg:VzczCLRLrb+RKg","tlshash":"1b53d016cb625c03edc8123a148cc286b2b3afc58b534387b99c7493bfb8a955c65793","first_seen":"2023-04-14T17:39:35Z","last_seen":"2026-04-02T10:27:56.662169Z","times_seen":568,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:34.539Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://genizymath.github.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 22 Aug 2025 08:13:09 GMT\r\nexpires: Sat, 22 Aug 2026 08:13:09 GMT\r\ncache-control: public, max-age=31536000\r\nage: 123865\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-04-04T05:45:37.747965Z","times_seen":713826,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/genizy/assets@main/rooftop-snipers/Build/rooftop-snipers.asm.framework.unityweb","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://genizymath.github.io/iframe/283.html","date":"2025-08-23T18:37:32.452Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /gh/genizy/assets@main/rooftop-snipers/Build/rooftop-snipers.asm.framework.unityweb HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://genizymath.github.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 89396\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/vnd.unity\r\nx-jsd-version: main\r\nx-jsd-version-type: branch\r\netag: W/\"15d34-tSwrmQlGfaFoRO406PXIJUYcTtM\"\r\naccept-ranges: bytes\r\ndate: Sat, 23 Aug 2025 18:37:32 GMT\r\nage: 14370\r\nx-served-by: cache-fra-etou8220166-FRA, cache-hel1410032-HEL\r\nx-cache: HIT, MISS\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":89396,"size_decoded":0,"mime_type":"application/vnd.unity","magic":"gzip compressed data, was \"Rooftop Snipers WebGL.asm.framework.unityweb\", has comment, last modified: Fri Jun 16 19:17:48 2017, max compression, from Unix","md5":"3cdec5e7a49302326e7d18bd162bcc2e","sha1":"b52c2b9909467da16844ee34e8f5c825461c4ed3","sha256":"89b185bd7aaefb6081595b8e9a96dc025f45310ea28520ff359e4465ca7b6330","sha512":"494507d13769e0d19fc7ba5c3c5c736b244671bba90aa2fbf4b945d6197372b57face42b668df580aea125584117f48d0e14548048e930c98fed8eab77c7c828","ssdeep":"1536:E9ZYJvq4MTBcZW/DBBAhhem6/DMKtMF7cXtt0eLtIzpBy2XDr811h+65UZnVy2xq:uYJC1TB/Lm6/DMlCXtaMajJX/q10pnVC","tlshash":"7a93020bf99b4bd86ae2aca478fc357445d00ac316e1d60f7241d889e36d3371a54f6e","first_seen":"2025-08-23T18:38:03.41161Z","last_seen":"2025-08-23T18:38:03.41161Z","times_seen":1,"resource_available":false,"data":null}},"time_used":399,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":344,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wayfarerorthodox.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fchat%2Fmob%2Fssp%2F1%2Fcss%2Fanimate.css\u0026l=79313\u0026fd=68","fqdn":"wayfarerorthodox.com","domain":"wayfarerorthodox.com","tld":"com"},"ip":{"addr":"192.243.61.227","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:33.340Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"wayfarerorthodox.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Jul 2025 00:39:20 GMT","end":"Tue, 30 Sep 2025 00:39:19 GMT"},"fingerprint":{"sha1":"2F:53:8D:73:5E:CE:FB:91:B4:FD:2B:4E:F3:E9:80:AA:62:1A:61:CD","sha256":"C1:D4:30:78:23:7C:54:B2:69:C9:DF:D9:A9:CB:93:CF:63:1B:C9:46:05:84:47:B1:70:77:4E:B8:85:DE:85:B8"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fchat%2Fmob%2Fssp%2F1%2Fcss%2Fanimate.css\u0026l=79313\u0026fd=68 HTTP/1.1\r\nHost: wayfarerorthodox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 23 Aug 2025 18:37:33 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: wayfarerorthodox.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T05:45:54.968102Z","times_seen":13318572,"resource_available":true,"data":null}},"time_used":662,"timings":{"blocked":283,"dns":1,"connect":92,"send":0,"wait":94,"receive":0,"ssl":190},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-23","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:34.269Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://genizymath.github.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 22 Aug 2025 08:13:09 GMT\r\nexpires: Sat, 22 Aug 2026 08:13:09 GMT\r\ncache-control: public, max-age=31536000\r\nage: 123865\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-04-04T05:45:37.747965Z","times_seen":713826,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"prefacebegbeginning.com/71/03/3c/71033c1d2ddd571b951e9de84dd54e0e.js","fqdn":"prefacebegbeginning.com","domain":"prefacebegbeginning.com","tld":"com"},"ip":{"addr":"192.243.61.227","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:31.448Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"prefacebegbeginning.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 07 Aug 2025 09:12:18 GMT","end":"Wed, 05 Nov 2025 09:12:17 GMT"},"fingerprint":{"sha1":"02:DD:30:E6:FA:61:35:3B:6E:17:C3:A5:38:D6:82:9F:DD:79:CC:43","sha256":"97:9B:4B:68:15:BD:DE:B4:41:E2:49:37:12:C2:46:A0:AB:C7:E2:25:EC:7D:F9:A2:10:00:05:99:CC:2C:3E:F7"}}},"request":{"raw":"GET /71/03/3c/71033c1d2ddd571b951e9de84dd54e0e.js HTTP/1.1\r\nHost: prefacebegbeginning.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 23 Aug 2025 18:37:31 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 25622\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nHost: prefacebegbeginning.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 4297325f7813f3e44552b847bd89077f\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":72604,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"f1aa8052a69b6391796b8c689543352b","sha1":"c2d6368ba746a75c6bf604c40b17f61b5929f366","sha256":"7b785a0d6e8545d8df86176f4f30f39842fea88cf3d262946419725a318f9b0e","sha512":"f6c630ee7c995e05e9641c9a63b61d4007aafadcd7341c3149617de6bcb7aae89fdd6871b4eb656904e3cbe076365cda6d9b4e33e12909ce35429ce0bbf8efd9","ssdeep":"768:Y2bnYsmijAqw648+QhS8u+Jcj/XcdNjNimOdY08kUbTehzbcepwPf:Y2bnDL4x5O+jvcsdY0U3fX","tlshash":"f163c7483f51b27802e6b8fa712fa61af0265c1195d8e0d8f503f4deae66719f036f25","first_seen":"2025-08-23T18:38:03.413688Z","last_seen":"2025-08-23T18:38:03.413688Z","times_seen":1,"resource_available":true,"data":null}},"time_used":801,"timings":{"blocked":303,"dns":21,"connect":92,"send":0,"wait":98,"receive":92,"ssl":189},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-23","alert":"Sinkholed","trigger":"prefacebegbeginning.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"professionaltrafficmonitor.com/stats","fqdn":"professionaltrafficmonitor.com","domain":"professionaltrafficmonitor.com","tld":"com"},"ip":{"addr":"18.198.116.222","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:31.464Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"protrafficinspector.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 01 Jul 2025 00:00:00 GMT","end":"Thu, 30 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:D5:8D:EB:A4:50:13:0D:7C:33:71:82:B8:02:49:4F:D6:31:B6:E6","sha256":"49:03:4C:2C:1B:23:D8:D6:CB:AE:F0:54:61:99:C2:20:F4:FF:87:5E:0B:72:B1:6B:D8:AB:21:49:2D:F2:EC:4A"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: professionaltrafficmonitor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://genizymath.github.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 23 Aug 2025 18:37:31 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\nserver: fasthttp\r\naccess-control-allow-origin: https://genizymath.github.io\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nset-cookie: uid_id2=dc25de18-8745-4801-bc70-20fba2f5938d:1:1; expires=Tue, 21 Aug 2035 18:37:31 GMT; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"682b1960caaabdd9b03da1b04e2bf66e","sha1":"ec5399c0827402e3c1a0ab7c87f049264e55c39a","sha256":"2b99546f336abfc28e3ff9323c612606115d88984db37088c451b461b19f557d","sha512":"c0d068a6fbdcd7f6ecb9dcf03babfa39ccc659193174a7b3ca9fc7b619d8473675fd8e409a6aae9927b423d57a28103311459e8bb166367f56aa89eb75c2bd63","ssdeep":"","tlshash":"ed9004001d105c70174145d50d00c717cc0c413c1555d0f4041f44f1730701d5570d75","first_seen":"2025-08-23T18:38:03.415848Z","last_seen":"2025-08-23T18:38:03.415848Z","times_seen":1,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":104,"dns":1,"connect":21,"send":0,"wait":22,"receive":0,"ssl":85},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rashcolonizeexpand.com/b2/bf/b0/b2bfb06d346184e36a9350004a86fed4.js","fqdn":"rashcolonizeexpand.com","domain":"rashcolonizeexpand.com","tld":"com"},"ip":{"addr":"192.243.61.227","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:31.594Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rashcolonizeexpand.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 22:10:41 GMT","end":"Fri, 26 Sep 2025 22:10:40 GMT"},"fingerprint":{"sha1":"C7:75:50:5C:D3:7C:BF:A1:34:3E:61:33:FC:D6:81:21:2E:31:1D:92","sha256":"CB:A9:18:8B:DD:56:71:B4:C1:61:A7:9F:5C:50:7F:22:BB:83:72:BC:0F:B3:14:19:C4:E9:F9:59:6A:0F:95:EC"}}},"request":{"raw":"GET /b2/bf/b0/b2bfb06d346184e36a9350004a86fed4.js HTTP/1.1\r\nHost: rashcolonizeexpand.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 23 Aug 2025 18:37:31 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 33022\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nHost: rashcolonizeexpand.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 68afb1d76b0cdf3641a89182754feb47\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":105710,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"c2af57c165e66ca1bf358715f935144f","sha1":"5d99e2990e1002c097d384d0e350bc28f093ca8a","sha256":"156f51dbe16afd110639af14359f273030cd4659e7759e6d792b3f58fa0ef220","sha512":"05f7dd1957ad250897cb97ad014348978b21b28c4b747759b5c3d52767bd1e7be85228daebf64b6b9f18fc586ee9d633d2fed478c97a8358e0bc5ecf347c2bff","ssdeep":"1536:cmt7BMZUs9piv3i6In8noteGF1XF3xyiT67h4:ckdv3i6C8notJZFhpP","tlshash":"88a3e9887f50f47d02da6036233f962ae1ee4e42154ee158d026fde53a68317e63ddb8","first_seen":"2025-08-23T18:38:03.418156Z","last_seen":"2025-08-26T15:34:52.151813Z","times_seen":2,"resource_available":true,"data":null}},"time_used":852,"timings":{"blocked":327,"dns":26,"connect":105,"send":0,"wait":102,"receive":93,"ssl":189},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-23","alert":"Sinkholed","trigger":"rashcolonizeexpand.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/pixel/purst?dl=0\u0026th=0\u0026sc=0\u0026rs=1453\u0026rd=1453\u0026fd=533\u0026bv=25.8.5278\u0026tmpl=136","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:32.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 21:49:55 GMT","end":"Fri, 26 Sep 2025 21:49:54 GMT"},"fingerprint":{"sha1":"38:55:0E:5D:7C:E7:08:BA:9A:77:8D:79:E7:3A:6B:27:F8:97:E4:89","sha256":"3A:54:48:30:C3:83:C3:F6:C2:3E:B3:7D:81:B3:37:9D:16:0C:B9:AE:C5:C3:56:8C:33:5D:AD:24:2B:B7:35:AF"}}},"request":{"raw":"GET /pixel/purst?dl=0\u0026th=0\u0026sc=0\u0026rs=1453\u0026rd=1453\u0026fd=533\u0026bv=25.8.5278\u0026tmpl=136 HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 23 Aug 2025 18:37:32 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T05:45:54.968102Z","times_seen":13318572,"resource_available":true,"data":null}},"time_used":638,"timings":{"blocked":267,"dns":1,"connect":91,"send":0,"wait":92,"receive":0,"ssl":184},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-23","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"prefacebegbeginning.com/ren.gif?sid=H4sIAAAAAAAC_1RSTWgkRRSuzg4e4kH8BT3N0YVl0j3TmZ12D4vrGlnMJnF3JaB7qe7qnimnu6utqp6eDAjBgOxxBA-aU-WbZKPrIopeBZl40QXBvuWwQfHkWchRpJOBWR_0e-_rrwq-9736ZC8_IS3k9HjjphjxOKZLyw27_uomT5koVH3tTt2xG_aV-iZP2-6V-rBKcvCa03Ib9sX6W2HQF0tN27Ftx3bqK1yGkRgunbHg2UPPaXh2w202nGUXQ_l_rHILilpggxPyHDgrn_kreh88mCJNvr0eqr4W2aU3kzymWkgM2OG7aT8VRYpk3kbSQpQezk5DqJKQzxcg0sPZBBCD_WoC-LwkCy89hp8ezmTCHxycK_VjhCl89jSKwRRhPAWnUwRiB5z9ToCAYW0daXJ_TciCbp2ztGJLUjv9B7woSe3xC0iTb67FfFi_LeJcc5EqDCMDPpyCd6fI8iPo0QJ4cYRAfwzOfiNLp6tIk_11FQtwZs6m59EUVFnIq49byCMLeWYhYcd11-64gUNb7chjwWXbpa7LQt_2Ok3bpl5wGXlQyRpDZ2ME8RiB3EYmt9Hnn5bEevF7yPwnqJ6BYhaULon1zjYGzKAICQpFUFCCghMUmqAYmAMWq6Yy91msct-Z1eastsxE6O4ePRC6G6YEVI4hmdnn2YdqB4G-MBlFik1ElaivzYT6zOxlJ-TZyjpr94-76IfH9Y4XdaIo6PiB37xsR2HLdjwadJo0cj3fdigUN-Bq4cyVES_JzZU_kfGSXPx3ET49goqPEPALoLkDWhjQnsEo_aEbpny0lVDda3S57uV-gwswYZDpGvSWtRefkFfOlnj39ALC4BGZBQJpkEmDD_jPBN343uSWKMj-LVEo8t16pnnCR7Ra8G1NdfjUg7fDrUJIduO6Gn_1elARVfvwTqj0Kk0ZT7uKfH2NMxbKFSGDkPx4Q22G_kauetdymebZ6sYbKzeSTIZKcZFOQXlJFk8uIeAlef6jydnjdXf_BpdTyNwgyZ_Qmm1DZXOsBIGM59jPaihyM5FNf_4z5gRxOMfUN1BPYH_eTyStblNu9tQ9dGUNVO8gTQwG0mAQG9B4DJUvTnQmH1395YsqduHHtYkfy9q-H8v4s5K8_KtTpWZJ3vvy6rnjih_Xl5t-q93ptMOozaIWazVbzFu2Q8-lXtv13GVoVfYeLPb_CwAA__8KJsPYqQQAAA==","fqdn":"prefacebegbeginning.com","domain":"prefacebegbeginning.com","tld":"com"},"ip":{"addr":"192.243.61.227","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:32.094Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"prefacebegbeginning.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 07 Aug 2025 09:12:18 GMT","end":"Wed, 05 Nov 2025 09:12:17 GMT"},"fingerprint":{"sha1":"02:DD:30:E6:FA:61:35:3B:6E:17:C3:A5:38:D6:82:9F:DD:79:CC:43","sha256":"97:9B:4B:68:15:BD:DE:B4:41:E2:49:37:12:C2:46:A0:AB:C7:E2:25:EC:7D:F9:A2:10:00:05:99:CC:2C:3E:F7"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_1RSTWgkRRSuzg4e4kH8BT3N0YVl0j3TmZ12D4vrGlnMJnF3JaB7qe7qnimnu6utqp6eDAjBgOxxBA-aU-WbZKPrIopeBZl40QXBvuWwQfHkWchRpJOBWR_0e-_rrwq-9736ZC8_IS3k9HjjphjxOKZLyw27_uomT5koVH3tTt2xG_aV-iZP2-6V-rBKcvCa03Ib9sX6W2HQF0tN27Ftx3bqK1yGkRgunbHg2UPPaXh2w202nGUXQ_l_rHILilpggxPyHDgrn_kreh88mCJNvr0eqr4W2aU3kzymWkgM2OG7aT8VRYpk3kbSQpQezk5DqJKQzxcg0sPZBBCD_WoC-LwkCy89hp8ezmTCHxycK_VjhCl89jSKwRRhPAWnUwRiB5z9ToCAYW0daXJ_TciCbp2ztGJLUjv9B7woSe3xC0iTb67FfFi_LeJcc5EqDCMDPpyCd6fI8iPo0QJ4cYRAfwzOfiNLp6tIk_11FQtwZs6m59EUVFnIq49byCMLeWYhYcd11-64gUNb7chjwWXbpa7LQt_2Ok3bpl5wGXlQyRpDZ2ME8RiB3EYmt9Hnn5bEevF7yPwnqJ6BYhaULon1zjYGzKAICQpFUFCCghMUmqAYmAMWq6Yy91msct-Z1eastsxE6O4ePRC6G6YEVI4hmdnn2YdqB4G-MBlFik1ElaivzYT6zOxlJ-TZyjpr94-76IfH9Y4XdaIo6PiB37xsR2HLdjwadJo0cj3fdigUN-Bq4cyVES_JzZU_kfGSXPx3ET49goqPEPALoLkDWhjQnsEo_aEbpny0lVDda3S57uV-gwswYZDpGvSWtRefkFfOlnj39ALC4BGZBQJpkEmDD_jPBN343uSWKMj-LVEo8t16pnnCR7Ra8G1NdfjUg7fDrUJIduO6Gn_1elARVfvwTqj0Kk0ZT7uKfH2NMxbKFSGDkPx4Q22G_kauetdymebZ6sYbKzeSTIZKcZFOQXlJFk8uIeAlef6jydnjdXf_BpdTyNwgyZ_Qmm1DZXOsBIGM59jPaihyM5FNf_4z5gRxOMfUN1BPYH_eTyStblNu9tQ9dGUNVO8gTQwG0mAQG9B4DJUvTnQmH1395YsqduHHtYkfy9q-H8v4s5K8_KtTpWZJ3vvy6rnjih_Xl5t-q93ptMOozaIWazVbzFu2Q8-lXtv13GVoVfYeLPb_CwAA__8KJsPYqQQAAA== HTTP/1.1\r\nHost: prefacebegbeginning.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/\r\nCookie: pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; u_pl26927196=1; nlec89f8ffc8bcb270fe3019ac82af49b01a=[1690161,1690162,5941311]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 23 Aug 2025 18:37:32 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nVary: Origin\r\nAccess-Control-Allow-Credentials: true\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nHost: prefacebegbeginning.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 8354afcbedfdbdfa5ae205e7b4c4c179\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T05:45:54.968102Z","times_seen":13318572,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-23","alert":"Sinkholed","trigger":"prefacebegbeginning.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wayfarerorthodox.com/impr.gif?sid=H4sIAAAAAAAC_1RSz2skRRSuThaEFVYUf8CCMIgHF8yke6bnl3tYjGskmE3i7koOnqqrqmfKdHe1VdXTk7kYDMgeZ28ePHS-STa4LqLoVZSJFwkIO55y2ID4D4ji4klkkpHRd3jvff31g-999T7ey05JFRk92bih-jKK6GKt7JZe2ZQJV7kprd0ueW7ZvVralEndv1rqTZLuvuZV_bJ7pfSWYFtqseJ6ruu5XmlZahGq3uIZC5k-aHnlllv2K2Wv5qOn_49N5sBQB7x7Sp6B5OOnfg3fg2QjJPGX14XZsip99c04i6hVGl1--G6ylag8QTxrQ-0gTA6nf0OZMSGfzEElh9MNoLr7kw0QyDGZe_4RguRwKhNB9-BcaRBBJAj4k8i7I4hoBElHYGoXkj8kAONYW0cS31tTOqfb5yydsGNy4fEfkPmYXHj0LJL4i6VI9kq3VJRZqRKDXlhA9kaQ7RHS7Ai2PweZH4HZjyD5T2Tx8SqSeH_dRAqSn7zMKk2PteqNhSatuQt-jTYWqOe1Fir1GqWNiluveY0zi2Q4AjXzyIyDTDrIQgdZ6iDmJyXfbfrMo9V62OKs4frU97kI3Faz4rq0xRrI2ET7ADYdgEUDML2DVO9gS94dE-e5r6Gz72E6BQyfh7Fj4rzzIbq8QC4IckOQU4JcEuSWIO8WBzwyFVPc45HJAm9aK9NaLYbKtvfogbJtkRBQPYDmxb5MPzC7YHZ-2A8NH6pJooEthjTgxV56Sp6e-Ot8-vtL2BInpdANap5Hm8xrtTxf1GsVHlJKRaNBa5Q1PRhZQJo5UOOgL8fkxvIvSOWYXPn7IgJ6BBMdgcl50OxF0LwA7RToJ9-0RSL72zG1nXJb2k4WlKUCVwVSewF229mLTsnls5cu_3UNgh2TaYDpAqku8L78gaAd3RneVDnZv6lyQ75aT62MZZ9OruCWpVY4998W27nSfOW6GXz2OpsQk_bBbWHsKk24TNqGfL4kORd6WWkmyLcrZlMEG5npLGU6ydLVjTeWV-JUC2OkSkag8uGlS2ByTJ748c-z-37h9DKkHkFnBeLsP0rTHZh0ho0i0NEMB6mDPCuGuhLMPkaSIBIzTIMCRhx_99u_Q7N-qOlkmspiz9xBWzugdhdJXKCrC3SjAjQawGTzQ5vq42s_V88CQeQMg0g7-0Gko7vnBht5UgqrosJct9moe9VmKLyqz1lYa_otXqdutSpgzbhz_2L8TwAAAP__7H1p-r0EAAA=","fqdn":"wayfarerorthodox.com","domain":"wayfarerorthodox.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:34.464Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"wayfarerorthodox.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Jul 2025 00:39:20 GMT","end":"Tue, 30 Sep 2025 00:39:19 GMT"},"fingerprint":{"sha1":"2F:53:8D:73:5E:CE:FB:91:B4:FD:2B:4E:F3:E9:80:AA:62:1A:61:CD","sha256":"C1:D4:30:78:23:7C:54:B2:69:C9:DF:D9:A9:CB:93:CF:63:1B:C9:46:05:84:47:B1:70:77:4E:B8:85:DE:85:B8"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1RSz2skRRSuThaEFVYUf8CCMIgHF8yke6bnl3tYjGskmE3i7koOnqqrqmfKdHe1VdXTk7kYDMgeZ28ePHS-STa4LqLoVZSJFwkIO55y2ID4D4ji4klkkpHRd3jvff31g-999T7ey05JFRk92bih-jKK6GKt7JZe2ZQJV7kprd0ueW7ZvVralEndv1rqTZLuvuZV_bJ7pfSWYFtqseJ6ruu5XmlZahGq3uIZC5k-aHnlllv2K2Wv5qOn_49N5sBQB7x7Sp6B5OOnfg3fg2QjJPGX14XZsip99c04i6hVGl1--G6ylag8QTxrQ-0gTA6nf0OZMSGfzEElh9MNoLr7kw0QyDGZe_4RguRwKhNB9-BcaRBBJAj4k8i7I4hoBElHYGoXkj8kAONYW0cS31tTOqfb5yydsGNy4fEfkPmYXHj0LJL4i6VI9kq3VJRZqRKDXlhA9kaQ7RHS7Ai2PweZH4HZjyD5T2Tx8SqSeH_dRAqSn7zMKk2PteqNhSatuQt-jTYWqOe1Fir1GqWNiluveY0zi2Q4AjXzyIyDTDrIQgdZ6iDmJyXfbfrMo9V62OKs4frU97kI3Faz4rq0xRrI2ET7ADYdgEUDML2DVO9gS94dE-e5r6Gz72E6BQyfh7Fj4rzzIbq8QC4IckOQU4JcEuSWIO8WBzwyFVPc45HJAm9aK9NaLYbKtvfogbJtkRBQPYDmxb5MPzC7YHZ-2A8NH6pJooEthjTgxV56Sp6e-Ot8-vtL2BInpdANap5Hm8xrtTxf1GsVHlJKRaNBa5Q1PRhZQJo5UOOgL8fkxvIvSOWYXPn7IgJ6BBMdgcl50OxF0LwA7RToJ9-0RSL72zG1nXJb2k4WlKUCVwVSewF229mLTsnls5cu_3UNgh2TaYDpAqku8L78gaAd3RneVDnZv6lyQ75aT62MZZ9OruCWpVY4998W27nSfOW6GXz2OpsQk_bBbWHsKk24TNqGfL4kORd6WWkmyLcrZlMEG5npLGU6ydLVjTeWV-JUC2OkSkag8uGlS2ByTJ748c-z-37h9DKkHkFnBeLsP0rTHZh0ho0i0NEMB6mDPCuGuhLMPkaSIBIzTIMCRhx_99u_Q7N-qOlkmspiz9xBWzugdhdJXKCrC3SjAjQawGTzQ5vq42s_V88CQeQMg0g7-0Gko7vnBht5UgqrosJct9moe9VmKLyqz1lYa_otXqdutSpgzbhz_2L8TwAAAP__7H1p-r0EAAA= HTTP/1.1\r\nHost: wayfarerorthodox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/\r\nCookie: uid_id2=c281c967-8a50-45a7-a119-265aa7206517:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl27062818=1; slecf0b511a8c19914e652dfaaae77a5ac81=[3078207]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 23 Aug 2025 18:37:34 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\nvary: Origin\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nset-cookie: iprc_l+c703d4c62055de0349e746568a9ef8ff=3078207; expires=Sun, 24 Aug 2025 18:37:34 GMT; path=/; secure; SameSite=None\niprc_l:3078207=1; expires=Sun, 24 Aug 2025 18:37:34 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 7\r\nHost: wayfarerorthodox.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: f46d0c60bd636b5e738a7738fd813252\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T05:45:54.968102Z","times_seen":13318572,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-23","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:34.271Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://genizymath.github.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 22 Aug 2025 08:13:09 GMT\r\nexpires: Sat, 22 Aug 2026 08:13:09 GMT\r\ncache-control: public, max-age=31536000\r\nage: 123865\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-04-04T05:45:37.747965Z","times_seen":713826,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wayfarerorthodox.com/pixel/sbs?c=1","fqdn":"wayfarerorthodox.com","domain":"wayfarerorthodox.com","tld":"com"},"ip":{"addr":"192.243.61.227","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:34.465Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"wayfarerorthodox.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Jul 2025 00:39:20 GMT","end":"Tue, 30 Sep 2025 00:39:19 GMT"},"fingerprint":{"sha1":"2F:53:8D:73:5E:CE:FB:91:B4:FD:2B:4E:F3:E9:80:AA:62:1A:61:CD","sha256":"C1:D4:30:78:23:7C:54:B2:69:C9:DF:D9:A9:CB:93:CF:63:1B:C9:46:05:84:47:B1:70:77:4E:B8:85:DE:85:B8"}}},"request":{"raw":"GET /pixel/sbs?c=1 HTTP/1.1\r\nHost: wayfarerorthodox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/\r\nCookie: uid_id2=c281c967-8a50-45a7-a119-265aa7206517:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl27062818=1; slecf0b511a8c19914e652dfaaae77a5ac81=[3078207]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 23 Aug 2025 18:37:34 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: wayfarerorthodox.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T05:45:54.968102Z","times_seen":13318572,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-23","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:34.474Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://genizymath.github.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 22 Aug 2025 08:13:09 GMT\r\nexpires: Sat, 22 Aug 2026 08:13:09 GMT\r\ncache-control: public, max-age=31536000\r\nage: 123865\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-04-04T05:45:37.747965Z","times_seen":713826,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usefulspeak.com/33e6a4f2bd7346c557e8569983b9a966/invoke.js","fqdn":"usefulspeak.com","domain":"usefulspeak.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:31.693Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"usefulspeak.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Jul 2025 10:17:17 GMT","end":"Fri, 17 Oct 2025 10:17:16 GMT"},"fingerprint":{"sha1":"45:17:AD:B5:37:E3:46:A0:5F:98:AA:25:58:24:FF:14:28:9E:B8:27","sha256":"2D:E3:F0:06:D1:13:79:A6:88:54:6C:D5:A1:AF:C7:B4:03:72:F8:9C:01:4C:7B:FA:14:7C:59:78:43:59:46:3F"}}},"request":{"raw":"GET /33e6a4f2bd7346c557e8569983b9a966/invoke.js HTTP/1.1\r\nHost: usefulspeak.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 23 Aug 2025 18:37:31 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 13363\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 3\r\nHost: usefulspeak.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 7b911dc4670625f09cb9b3d9e352e5d2\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":34168,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (34168), with no line terminators","md5":"bd11dfa36f83fe43d49c5186fc9d6994","sha1":"c223ce0a36ac60c3b8c7e005d44ad8d3da7d9b33","sha256":"2e9e9e080803d1c632daacdd4535c994f412f683cfc7e42d894d55084d46d1b9","sha512":"0228c0f2f847cc12b0354c750a3aa38f047f7d196d2bc92a9d4c2ab7ee57204f0f4c3f95bec1ac057f8e61f79d5b8a51052c81d8059ed13d880ee8a9cfa6e809","ssdeep":"768:WBkqYtc5vIm+3UJ0UhwlnYRkKvE43kRRwlEK8cQsIBVOb:WiiIJEJDhwln/KH3kRylEK8ccq","tlshash":"d8e2e78c3f60b05813d6307f733f960de9960c0aa894c549c06bb5ecb97c767e5769a8","first_seen":"2025-08-23T18:38:03.420252Z","last_seen":"2025-08-28T16:18:44.079482Z","times_seen":3,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-23","alert":"Sinkholed","trigger":"usefulspeak.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/b2/bf/b0/b2bfb06d346184e36a9350004a86fed4.js","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:31.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 21:49:55 GMT","end":"Fri, 26 Sep 2025 21:49:54 GMT"},"fingerprint":{"sha1":"38:55:0E:5D:7C:E7:08:BA:9A:77:8D:79:E7:3A:6B:27:F8:97:E4:89","sha256":"3A:54:48:30:C3:83:C3:F6:C2:3E:B3:7D:81:B3:37:9D:16:0C:B9:AE:C5:C3:56:8C:33:5D:AD:24:2B:B7:35:AF"}}},"request":{"raw":"GET /b2/bf/b0/b2bfb06d346184e36a9350004a86fed4.js HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 23 Aug 2025 18:37:32 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 33034\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 5\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 393958d267fb3fbc193ec83b4977e4d6\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":105717,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"a059d133678c5de63e5a1bf67d2c1964","sha1":"e2c4fe671ee8e2db2c74c5790d8d29ff512713eb","sha256":"1db649091f3a4442fb233594304244d11c79ebb007d9236540abf30cfffcec49","sha512":"43a7083d24f7f646e3b686ebf7f83ac4b1bd3e8702d82845a22ce45ea52a81664f8ce49f5bf114e13517e6e79f8ac3bd06230cd0d9b1779e0db392d2bd8622cc","ssdeep":"1536:cmt7BMZUs9piv3i6In8noteGF1XF3xyvT6qh4:ckdv3i6C8notJZFhEO","tlshash":"48a3e9887f50f47d02da6036233f962ae1ee4e42154ee158d026edd53a68317e63ddb8","first_seen":"2025-08-23T18:38:03.422266Z","last_seen":"2025-08-23T18:38:03.422266Z","times_seen":1,"resource_available":true,"data":null}},"time_used":755,"timings":{"blocked":283,"dns":1,"connect":93,"send":0,"wait":97,"receive":92,"ssl":187},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-23","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/js/main.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://genizymath.github.io/iframe/283.html","date":"2025-08-23T18:37:31.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /js/main.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncontent-length: 38\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/plain; charset=utf-8\r\netag: W/\"24-Db5x2VUXD4Fx1NYDZzTYg5fKIHI\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sat, 23 Aug 2025 18:37:31 GMT\r\nage: 469824\r\nx-served-by: cache-fra-etou8220177-FRA, cache-hel1410032-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T05:45:54.968102Z","times_seen":13318572,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:32.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"preferencenail.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 01 Jul 2025 15:11:38 GMT","end":"Mon, 29 Sep 2025 15:11:37 GMT"},"fingerprint":{"sha1":"F9:52:70:4B:81:A8:F8:39:E6:E7:96:8F:EA:FE:17:FD:96:C5:32:E3","sha256":"D8:C9:87:B5:89:5E:D4:F4:8D:FD:98:3C:31:39:42:67:D3:20:27:14:A9:AD:F2:AB:97:A4:48:0F:94:F0:FF:A2"}}},"request":{"raw":"GET /sfp.js HTTP/1.1\r\nHost: preferencenail.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 23 Aug 2025 18:37:32 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nContent-Length: 28254\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nVary: Accept-Encoding\r\nHost: preferencenail.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 3bff6590d7270a84481ef2bca7e1dfa5\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":85386,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"46a6fef91632b94d14252fe324c1585f","sha1":"387cebbd261b8fe947fe9805875300f2ceeb5cfd","sha256":"36d0c771f8bf310d740cb4d0ca144354c45df284e72361660448708d72f175d5","sha512":"a3aaa1b5ab1113a12793bd1085332eb257416aaa9c4a690525838b91453a281580a979bfb856b3c429c2d4243c3ce02bd318a4b7048124eef96912179836d0fd","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRL:nPncLBSUBULGVTfGpucE5fox","tlshash":"528395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","first_seen":"2025-07-08T10:38:39.799377Z","last_seen":"2025-11-18T17:01:51.014373Z","times_seen":15230,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":1,"connect":19,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wayfarerorthodox.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2Ffinanceskipper%2Fmessage_redcircle2%2F16%2Fcss%2Fanimate.css\u0026l=78689\u0026fd=135","fqdn":"wayfarerorthodox.com","domain":"wayfarerorthodox.com","tld":"com"},"ip":{"addr":"192.243.61.227","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:34.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"wayfarerorthodox.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Jul 2025 00:39:20 GMT","end":"Tue, 30 Sep 2025 00:39:19 GMT"},"fingerprint":{"sha1":"2F:53:8D:73:5E:CE:FB:91:B4:FD:2B:4E:F3:E9:80:AA:62:1A:61:CD","sha256":"C1:D4:30:78:23:7C:54:B2:69:C9:DF:D9:A9:CB:93:CF:63:1B:C9:46:05:84:47:B1:70:77:4E:B8:85:DE:85:B8"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2Ffinanceskipper%2Fmessage_redcircle2%2F16%2Fcss%2Fanimate.css\u0026l=78689\u0026fd=135 HTTP/1.1\r\nHost: wayfarerorthodox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/\r\nCookie: uid_id2=c281c967-8a50-45a7-a119-265aa7206517:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl27062818=1; slecf0b511a8c19914e652dfaaae77a5ac81=[3078207]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 23 Aug 2025 18:37:34 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: wayfarerorthodox.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T05:45:54.968102Z","times_seen":13318572,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-23","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"torchfriendlypay.com/impr.gif?sid=H4sIAAAAAAAC_1RSz4scRRSu3g0IESKKPyAgzMGDAXe2e7rnlzkEY1wJJtk1iezBU3VX9Uy51V1tVfX07FxcXJAcJ5682fvNbhZjEEWvosx6CQtCxtMesiD-A4IYPInM7sjoO7z3vv76wfe-ep_s5MfER06P1q6rgZCSLterbuXVdZEyVZjKjdsVz626FyvrIm0EFyv9adK91z0_qLoXKm_zaEMt11zPdT3Xq6wIzWPVXz5hIbIHba_adqtBrerVA_T1_7HJHRjqgPWOyXMQbPLMb_H7ENEYafL1FW42rMpeeyvJJbVKo8f230s3UlWkSOZtrB3E6f7sbygzIeSzBah0f7YBVG93ugFCMSELLz5GmO7PZCLs7Z0qDSV4ipA9jaI3BpdjCDpGpLYh2CMCRAw3VpEm924oXdDNU5ZO2Qk58-QPiGJCzjx-Hmny1WUp-pVbSuZWqNSgH5cQ_TFEZ4wsP4AdLEAUB4jsxxDsZ7L85BrSZHfVSAXBjl6Jai0vajeaSy1ad5eCOm0uUc9rL9UadUqbNbdR95onFol4DGoWkRsHuXCQxw7yzEHCjiqB2woij_qNuM2iphvQIGA8dNutmuvSdtREHk21D2GzISI5RKS3kOktbIi7E-K88C10_iNMt4RhizB2Qpx3P0KPlSg4QWEICkpQCILCEhS9co9JUzPlPSZNHnqzWptVvxwp29mhe8p2eEpA9RCalbsi-9BsI7KLo0Fs2EhNEw1tOaIhK3eyY_Ls1F_n84efYoMfVZqe6_uRx2qMsXrTC9t1j7cZbwWM1QPuchhRQpgFUONgICbk-sqvyMSEXPj7LEJ6ACMPEIlF0Pxl0KIE7ZYYpN91eCoGmwm13WpH2G4eVoUCUyUyewZ209mRx-T8yUtX_7oEHh2SWSDSJTJd4gPxE0FH3hndVAXZvakKQ75ZzaxIxIBOr-CWpZY799_hm4XS7OoVM_zijWhKTNsHt7mx12jKRNox5MvLgjGuV5SOOPn-qlnn4VpuupdznebZtbU3V64mmebGCJWOQcWjc-cQiQl56uGfJ_f90vF5CD2Gzksk-X-UZlsw2RwbRaDlHIeZgyIvR7oWzj9KQSD5HNOwhOGHP_z-79C8H2k6naai3DF30NEOqN1GmpTo6RI9WYLKIUy-OLKZPrz0i38SCKUzCqV2dkOp5d1Tg404qsQ-r0Wu22o2PL8Vc88PWBTXW0GbNajr-xzWTLr3zyb_BAAA__9EsgDEvQQAAA==","fqdn":"torchfriendlypay.com","domain":"torchfriendlypay.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:34.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"torchfriendlypay.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 22:31:57 GMT","end":"Fri, 26 Sep 2025 22:31:56 GMT"},"fingerprint":{"sha1":"C1:1A:8F:9D:C9:3D:22:4D:0E:AA:D9:B9:1C:98:E3:DC:41:83:82:4F","sha256":"B2:2E:9D:A4:0D:D7:A4:C2:A4:C1:7F:A9:E3:2A:AF:DE:7B:7F:BF:6A:1D:DC:6A:9C:AB:BF:98:D7:C2:A6:40:2E"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1RSz4scRRSu3g0IESKKPyAgzMGDAXe2e7rnlzkEY1wJJtk1iezBU3VX9Uy51V1tVfX07FxcXJAcJ5682fvNbhZjEEWvosx6CQtCxtMesiD-A4IYPInM7sjoO7z3vv76wfe-ep_s5MfER06P1q6rgZCSLterbuXVdZEyVZjKjdsVz626FyvrIm0EFyv9adK91z0_qLoXKm_zaEMt11zPdT3Xq6wIzWPVXz5hIbIHba_adqtBrerVA_T1_7HJHRjqgPWOyXMQbPLMb_H7ENEYafL1FW42rMpeeyvJJbVKo8f230s3UlWkSOZtrB3E6f7sbygzIeSzBah0f7YBVG93ugFCMSELLz5GmO7PZCLs7Z0qDSV4ipA9jaI3BpdjCDpGpLYh2CMCRAw3VpEm924oXdDNU5ZO2Qk58-QPiGJCzjx-Hmny1WUp-pVbSuZWqNSgH5cQ_TFEZ4wsP4AdLEAUB4jsxxDsZ7L85BrSZHfVSAXBjl6Jai0vajeaSy1ad5eCOm0uUc9rL9UadUqbNbdR95onFol4DGoWkRsHuXCQxw7yzEHCjiqB2woij_qNuM2iphvQIGA8dNutmuvSdtREHk21D2GzISI5RKS3kOktbIi7E-K88C10_iNMt4RhizB2Qpx3P0KPlSg4QWEICkpQCILCEhS9co9JUzPlPSZNHnqzWptVvxwp29mhe8p2eEpA9RCalbsi-9BsI7KLo0Fs2EhNEw1tOaIhK3eyY_Ls1F_n84efYoMfVZqe6_uRx2qMsXrTC9t1j7cZbwWM1QPuchhRQpgFUONgICbk-sqvyMSEXPj7LEJ6ACMPEIlF0Pxl0KIE7ZYYpN91eCoGmwm13WpH2G4eVoUCUyUyewZ209mRx-T8yUtX_7oEHh2SWSDSJTJd4gPxE0FH3hndVAXZvakKQ75ZzaxIxIBOr-CWpZY799_hm4XS7OoVM_zijWhKTNsHt7mx12jKRNox5MvLgjGuV5SOOPn-qlnn4VpuupdznebZtbU3V64mmebGCJWOQcWjc-cQiQl56uGfJ_f90vF5CD2Gzksk-X-UZlsw2RwbRaDlHIeZgyIvR7oWzj9KQSD5HNOwhOGHP_z-79C8H2k6naai3DF30NEOqN1GmpTo6RI9WYLKIUy-OLKZPrz0i38SCKUzCqV2dkOp5d1Tg404qsQ-r0Wu22o2PL8Vc88PWBTXW0GbNajr-xzWTLr3zyb_BAAA__9EsgDEvQQAAA== HTTP/1.1\r\nHost: torchfriendlypay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/\r\nCookie: uid_id2=c281c967-8a50-45a7-a119-265aa7206517:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl27249042=1; slec71033c1d2ddd571b951e9de84dd54e0e=[3078207]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 23 Aug 2025 18:37:34 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nset-cookie: iprc_l+c703d4c62055de0349e746568a9ef8ff=3078207; expires=Sun, 24 Aug 2025 18:37:34 GMT; path=/; secure; SameSite=None\niprc_l:3078207=1; expires=Sun, 24 Aug 2025 18:37:34 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 11\r\nHost: torchfriendlypay.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: cb37c0a246d0bad067b511fc44d7dd2a\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T05:45:54.968102Z","times_seen":13318572,"resource_available":true,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-23","alert":"Sinkholed","trigger":"torchfriendlypay.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/watch.1434519058993.js?key=33e6a4f2bd7346c557e8569983b9a966\u0026kw=%5B%22play%22%2C%22rooftop%22%2C%22snipers%22%2C%22gn-math%22%2C%22unblocked%22%2C%22games%22%5D\u0026refer=https%3A%2F%2Fgenizymath.github.io%2Fgames%2Frooftop-snipers%2F\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=dc25de18-8745-4801-bc70-20fba2f5938d%3A1%3A1","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"192.243.61.225","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:31.701Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 22:21:33 GMT","end":"Fri, 26 Sep 2025 22:21:32 GMT"},"fingerprint":{"sha1":"4A:6A:48:C8:5B:C5:2B:2E:9C:03:AF:BF:4C:E6:10:23:E2:7B:EA:97","sha256":"A8:42:B5:4A:20:C8:13:EF:B5:90:0F:54:37:F7:05:60:8D:91:07:E3:A4:0F:7A:22:C9:AF:F1:F5:22:E8:68:C9"}}},"request":{"raw":"GET /watch.1434519058993.js?key=33e6a4f2bd7346c557e8569983b9a966\u0026kw=%5B%22play%22%2C%22rooftop%22%2C%22snipers%22%2C%22gn-math%22%2C%22unblocked%22%2C%22games%22%5D\u0026refer=https%3A%2F%2Fgenizymath.github.io%2Fgames%2Frooftop-snipers%2F\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=dc25de18-8745-4801-bc70-20fba2f5938d%3A1%3A1 HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://genizymath.github.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 307 Temporary Redirect\r\nServer: nginx/1.21.6\r\nDate: Sat, 23 Aug 2025 18:37:32 GMT\r\nContent-Type: text/html\r\nContent-Length: 0\r\nConnection: keep-alive\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nAccess-Control-Allow-Origin: https://genizymath.github.io\r\nAccess-Control-Allow-Credentials: true\r\nLocation: https://skinnycrawlinglax.com/watch.1434519058993.js?dev=e\u0026key=33e6a4f2bd7346c557e8569983b9a966\u0026kw=%5B%22play%22%2C%22rooftop%22%2C%22snipers%22%2C%22gn-math%22%2C%22unblocked%22%2C%22games%22%5D\u0026pst=1755974312\u0026rb=\u0026refer=https%3A%2F%2Fgenizymath.github.io%2Fgames%2Frooftop-snipers%2F\u0026res=14.3095\u0026rmtc=t\u0026shu=27a9e8e4c3dd10ec065219375e2d7f831dde33cf0f8f074d0cc1a97ea0e58862daaba6050f288952753b6577b9be785ea36ce03af78f84ab03604df5c6210175d32d54cd9957ddcd19161c2d1eb0061079e373804921ec3c327b\u0026tz=0\u0026uuid=dc25de18-8745-4801-bc70-20fba2f5938d%3A1%3A1\r\nSet-Cookie: ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.GSN40yDQqCPk3Sp_Ky3GV4ehy9hJLYxPoTUuW-eBxXc; expires=Sat, 23 Aug 2025 18:38:32 GMT; path=/; secure; SameSite=None\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 0c0718dce3dbc9986239d6bd86b75cdf\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4852,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T05:45:54.968102Z","times_seen":13318572,"resource_available":true,"data":null}},"time_used":662,"timings":{"blocked":283,"dns":1,"connect":92,"send":0,"wait":95,"receive":0,"ssl":189},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-23","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"prefacebegbeginning.com/impr.gif?sid=H4sIAAAAAAAC_1RS32scVRS-k-5TCxWlCvq0b1qQzczuJNm1D8FYU4JpEttKQPtyZ-6d3evOzB3vvbOzWV-CAenjFnzQPk2-TRqtpSj6KsrGFw0Inbc8NFj8BwQhjyKzXYkemPNjvnvgO985n-6mJ6SBlB5vXJcDEYZ0dq5mV1_bFDGTma6u3ao6ds2-Ut0U8bx7pdovneq94TTcmn25eo37XTlbtx3bdmynuiwUD2R_doJCJA9bTq1l19x6zZlz0Vf_r3VqQVMLrHdCXoBgxXN_BB9A-GPE0TdXue4ambz-dpSG1EiFHjt4L-7GMosRnaWBshDEB9PXkLog5PMZyPhgOgFkb6-cAJ4oyMxLT-DFB1Oa8Hr7z5h6IXgMj11A1huDh2MIOoYvdyDYYwL4DGvriKP7a1JldOsZSku0IJXTvyCyglSeXEIcPVoKRb96U4apETLW6Ac5RH8M0R4jSQ9hBjMQ2SF88wkE-43Mnq4ijvbWdSghWD6ZXgRjUG0hLT9hIQ0spImFiB1XXbvp-g5tzAct5i_YLnVdxj271azbNm35C0j9ktYQJhnCD4fw1TYStY2uuFsQ68XvoNKfoDs5NLOgTUGsd7fRYzkyTpBpgowSZIIgMwRZL99noa7r_D4Ldeo501ifxkY-kqa9S_elafOYgKohFMv3RPKR3oFvzo0GgWYjWTrqmXxEPZbvJifk-VI6697vt9Hlx9VmK2gGgd_0fK--YAe8YTst6jfrNHBbnu1QaJFD6JmJKgNRkOvLT5GIglz--zw8eggdHsIX50BTBzTLQTs5BvH3bR6LwVZETafWFqaTejUhwWSOxFRgtqzd8IS8Mlniy7_Wwf0jMjX4KkeicnwofiZoh3dGN2RG9m7ITJNv1xMjIjGg5YJvGmq49eAdvpVJxVau6uFXb_olUKYPb3FtVmnMRNzW5OslwRhXy1L5nPywoje5t5HqzlKq4jRZ3XhreSVKFNdayHgMKh5fvAi_PNm7zuR0L2y_CqHGUGmOKP0P02QbOjlaNIOn1x5d-hhaEqjwDPeSGWRpPlJ17-xnKAhCflZTL4fmRz_--W_TWT5StOymIt_Vd9BWFVCzgzjK0VM5emEOGg6h0_Mjk6ijxV--KO0evLAy8kJV2fNCFX5WCuxMVC7I-18uFuT26TlocVwNGrzu23ZzYd5pNAPuNFzmB3NNt8Xmqd1ocBhddB6c7_4TAAD__7O-cPGnBAAA","fqdn":"prefacebegbeginning.com","domain":"prefacebegbeginning.com","tld":"com"},"ip":{"addr":"192.243.61.225","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:32.107Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"prefacebegbeginning.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 07 Aug 2025 09:12:18 GMT","end":"Wed, 05 Nov 2025 09:12:17 GMT"},"fingerprint":{"sha1":"02:DD:30:E6:FA:61:35:3B:6E:17:C3:A5:38:D6:82:9F:DD:79:CC:43","sha256":"97:9B:4B:68:15:BD:DE:B4:41:E2:49:37:12:C2:46:A0:AB:C7:E2:25:EC:7D:F9:A2:10:00:05:99:CC:2C:3E:F7"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1RS32scVRS-k-5TCxWlCvq0b1qQzczuJNm1D8FYU4JpEttKQPtyZ-6d3evOzB3vvbOzWV-CAenjFnzQPk2-TRqtpSj6KsrGFw0Inbc8NFj8BwQhjyKzXYkemPNjvnvgO985n-6mJ6SBlB5vXJcDEYZ0dq5mV1_bFDGTma6u3ao6ds2-Ut0U8bx7pdovneq94TTcmn25eo37XTlbtx3bdmynuiwUD2R_doJCJA9bTq1l19x6zZlz0Vf_r3VqQVMLrHdCXoBgxXN_BB9A-GPE0TdXue4ambz-dpSG1EiFHjt4L-7GMosRnaWBshDEB9PXkLog5PMZyPhgOgFkb6-cAJ4oyMxLT-DFB1Oa8Hr7z5h6IXgMj11A1huDh2MIOoYvdyDYYwL4DGvriKP7a1JldOsZSku0IJXTvyCyglSeXEIcPVoKRb96U4apETLW6Ac5RH8M0R4jSQ9hBjMQ2SF88wkE-43Mnq4ijvbWdSghWD6ZXgRjUG0hLT9hIQ0spImFiB1XXbvp-g5tzAct5i_YLnVdxj271azbNm35C0j9ktYQJhnCD4fw1TYStY2uuFsQ68XvoNKfoDs5NLOgTUGsd7fRYzkyTpBpgowSZIIgMwRZL99noa7r_D4Ldeo501ifxkY-kqa9S_elafOYgKohFMv3RPKR3oFvzo0GgWYjWTrqmXxEPZbvJifk-VI6697vt9Hlx9VmK2gGgd_0fK--YAe8YTst6jfrNHBbnu1QaJFD6JmJKgNRkOvLT5GIglz--zw8eggdHsIX50BTBzTLQTs5BvH3bR6LwVZETafWFqaTejUhwWSOxFRgtqzd8IS8Mlniy7_Wwf0jMjX4KkeicnwofiZoh3dGN2RG9m7ITJNv1xMjIjGg5YJvGmq49eAdvpVJxVau6uFXb_olUKYPb3FtVmnMRNzW5OslwRhXy1L5nPywoje5t5HqzlKq4jRZ3XhreSVKFNdayHgMKh5fvAi_PNm7zuR0L2y_CqHGUGmOKP0P02QbOjlaNIOn1x5d-hhaEqjwDPeSGWRpPlJ17-xnKAhCflZTL4fmRz_--W_TWT5StOymIt_Vd9BWFVCzgzjK0VM5emEOGg6h0_Mjk6ijxV--KO0evLAy8kJV2fNCFX5WCuxMVC7I-18uFuT26TlocVwNGrzu23ZzYd5pNAPuNFzmB3NNt8Xmqd1ocBhddB6c7_4TAAD__7O-cPGnBAAA HTTP/1.1\r\nHost: prefacebegbeginning.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/\r\nCookie: pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; u_pl26927196=1; nlec89f8ffc8bcb270fe3019ac82af49b01a=[1690161,1690162,5941311]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 23 Aug 2025 18:37:32 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nVary: Origin\r\nAccess-Control-Allow-Credentials: true\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nSet-Cookie: iprc_l+cbb667145857f6d4375fa91e46a4f121=1690162; expires=Sat, 06 Sep 2025 18:37:32 GMT; path=/; secure; SameSite=None\niprc_l:1690162=1; expires=Sat, 06 Sep 2025 18:37:32 GMT; path=/; secure; SameSite=None\r\nHost: prefacebegbeginning.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 7b5d211d4436581de29c53a7374cc0d3\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T05:45:54.968102Z","times_seen":13318572,"resource_available":true,"data":null}},"time_used":338,"timings":{"blocked":-1,"dns":1,"connect":91,"send":0,"wait":94,"receive":0,"ssl":188},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-23","alert":"Sinkholed","trigger":"prefacebegbeginning.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.show-sb.com/sb/notifications/utility/default/us/blog/financeskipper/message_redcircle2/16/index.html","fqdn":"cdn.show-sb.com","domain":"show-sb.com","tld":"com"},"ip":{"addr":"104.21.95.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:33.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"show-sb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 10 Aug 2025 11:11:15 GMT","end":"Sat, 08 Nov 2025 12:08:40 GMT"},"fingerprint":{"sha1":"46:26:78:BD:18:7A:95:15:D4:B3:89:73:FE:7E:99:33:18:7F:21:3E","sha256":"AD:6B:6A:10:54:38:33:B9:BB:A6:FD:B7:B0:1B:2E:9D:62:B8:47:35:C4:E6:7B:F6:4A:92:AA:75:B0:29:F7:F3"}}},"request":{"raw":"GET /sb/notifications/utility/default/us/blog/financeskipper/message_redcircle2/16/index.html HTTP/1.1\r\nHost: cdn.show-sb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://genizymath.github.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 23 Aug 2025 18:37:33 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:21:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pSxs6yT0xvj6skKM2VkiOzSYXLt4veiHa5VYSJgPAXBCJXyMCRqDik%2FdToIbmuXeZhL916rrgmEQTMh4aXLHEt%2BBtocQhwQJnTfsU61gCg%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 973cb8cbcb341806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1545,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"3f8de4c280d2d48e8418a562095ac7e4","sha1":"3dc3e5bc655dcd0ff5b045b147c28398e07b6e4d","sha256":"54358796e1fc6b065f33194b7e4f02b43fc28050a3d64e482e59f4251d06fc15","sha512":"c18250930cb2c86f3a7d61f48af05396524b301f316fdba1de20d4a47e4ebf85f98b0b7dd045320c232c861c07b4869ca74dcae0eb7ca578f8398c5e573d6ac3","ssdeep":"","tlshash":"cb314c462fecd5b611c38685bb303f27ec86d94be9462501b6fc0a548bdbda2d943a07","first_seen":"2023-04-07T13:35:32Z","last_seen":"2026-04-02T10:27:56.65016Z","times_seen":411,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.show-sb.com/sb/notifications/utility/default/us/blog/financeskipper/message_redcircle2/16/index.html","fqdn":"cdn.show-sb.com","domain":"show-sb.com","tld":"com"},"ip":{"addr":"104.21.95.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:33.818Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"show-sb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 10 Aug 2025 11:11:15 GMT","end":"Sat, 08 Nov 2025 12:08:40 GMT"},"fingerprint":{"sha1":"46:26:78:BD:18:7A:95:15:D4:B3:89:73:FE:7E:99:33:18:7F:21:3E","sha256":"AD:6B:6A:10:54:38:33:B9:BB:A6:FD:B7:B0:1B:2E:9D:62:B8:47:35:C4:E6:7B:F6:4A:92:AA:75:B0:29:F7:F3"}}},"request":{"raw":"GET /sb/notifications/utility/default/us/blog/financeskipper/message_redcircle2/16/index.html HTTP/1.1\r\nHost: cdn.show-sb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://genizymath.github.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 23 Aug 2025 18:37:33 GMT\r\ncontent-type: text/html\r\nlast-modified: Fri, 19 Jan 2024 14:21:26 GMT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RxFni6Yt8t3z1rBJhRO5cb1ZqV7TduhbwXF8nYF97hwOmsxHDywHKMnzMnjonQhn3S3GBbdMCQNHd4VOtVAqXMtGIPBUN8m%2FJwJUkF4u7w%3D%3D\"}]}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 973cb8ce6fd824b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1545,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"3f8de4c280d2d48e8418a562095ac7e4","sha1":"3dc3e5bc655dcd0ff5b045b147c28398e07b6e4d","sha256":"54358796e1fc6b065f33194b7e4f02b43fc28050a3d64e482e59f4251d06fc15","sha512":"c18250930cb2c86f3a7d61f48af05396524b301f316fdba1de20d4a47e4ebf85f98b0b7dd045320c232c861c07b4869ca74dcae0eb7ca578f8398c5e573d6ac3","ssdeep":"","tlshash":"cb314c462fecd5b611c38685bb303f27ec86d94be9462501b6fc0a548bdbda2d943a07","first_seen":"2023-04-07T13:35:32Z","last_seen":"2026-04-02T10:27:56.65016Z","times_seen":411,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wayfarerorthodox.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2Ffinanceskipper%2Fmessage_redcircle2%2F16%2Fjs%2Fscript.js\u0026l=386\u0026fd=507","fqdn":"wayfarerorthodox.com","domain":"wayfarerorthodox.com","tld":"com"},"ip":{"addr":"192.243.61.227","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:34.040Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"wayfarerorthodox.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Jul 2025 00:39:20 GMT","end":"Tue, 30 Sep 2025 00:39:19 GMT"},"fingerprint":{"sha1":"2F:53:8D:73:5E:CE:FB:91:B4:FD:2B:4E:F3:E9:80:AA:62:1A:61:CD","sha256":"C1:D4:30:78:23:7C:54:B2:69:C9:DF:D9:A9:CB:93:CF:63:1B:C9:46:05:84:47:B1:70:77:4E:B8:85:DE:85:B8"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2Ffinanceskipper%2Fmessage_redcircle2%2F16%2Fjs%2Fscript.js\u0026l=386\u0026fd=507 HTTP/1.1\r\nHost: wayfarerorthodox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/\r\nCookie: uid_id2=c281c967-8a50-45a7-a119-265aa7206517:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl27062818=1; slecf0b511a8c19914e652dfaaae77a5ac81=[3078207]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 23 Aug 2025 18:37:34 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: wayfarerorthodox.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T05:45:54.968102Z","times_seen":13318572,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-23","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"professionaltrafficmonitor.com/stats","fqdn":"professionaltrafficmonitor.com","domain":"professionaltrafficmonitor.com","tld":"com"},"ip":{"addr":"18.198.116.222","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:31.590Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"protrafficinspector.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 01 Jul 2025 00:00:00 GMT","end":"Thu, 30 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:D5:8D:EB:A4:50:13:0D:7C:33:71:82:B8:02:49:4F:D6:31:B6:E6","sha256":"49:03:4C:2C:1B:23:D8:D6:CB:AE:F0:54:61:99:C2:20:F4:FF:87:5E:0B:72:B1:6B:D8:AB:21:49:2D:F2:EC:4A"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: professionaltrafficmonitor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://genizymath.github.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 23 Aug 2025 18:37:31 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\nserver: fasthttp\r\naccess-control-allow-origin: https://genizymath.github.io\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nset-cookie: uid_id2=c281c967-8a50-45a7-a119-265aa7206517:3:1; expires=Tue, 21 Aug 2035 18:37:31 GMT; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"fcd1f4284a2155191e590822c8c484e5","sha1":"d9abccc81ea9f2d0faa3aaae99050aaba7cc7447","sha256":"7207ffb8412ab2eaa95e2bcc61ca6e8a106f5c1c5696f0fea00a53abf226dd26","sha512":"7934204050fdc5995100da9bacb40be5ed346fd4612a20b415907198e4b103f08c7d54fa4e01f7d660d0648d5f72dad02abac524c54f0edc2dc4342fa69acdcc","ssdeep":"","tlshash":"7190040d15d30d00f40dc0cd3c0c41d3d45c34731550001410c3d1c045305030154311","first_seen":"2025-08-23T18:38:03.424317Z","last_seen":"2025-08-23T18:38:03.424317Z","times_seen":1,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/sbar.json?key=f0b511a8c19914e652dfaaae77a5ac81\u0026uuid=c281c967-8a50-45a7-a119-265aa7206517%3A3%3A1","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:33.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 21:49:55 GMT","end":"Fri, 26 Sep 2025 21:49:54 GMT"},"fingerprint":{"sha1":"38:55:0E:5D:7C:E7:08:BA:9A:77:8D:79:E7:3A:6B:27:F8:97:E4:89","sha256":"3A:54:48:30:C3:83:C3:F6:C2:3E:B3:7D:81:B3:37:9D:16:0C:B9:AE:C5:C3:56:8C:33:5D:AD:24:2B:B7:35:AF"}}},"request":{"raw":"GET /sbar.json?key=f0b511a8c19914e652dfaaae77a5ac81\u0026uuid=c281c967-8a50-45a7-a119-265aa7206517%3A3%3A1 HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://genizymath.github.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/\r\nCookie: ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.GSN40yDQqCPk3Sp_Ky3GV4ehy9hJLYxPoTUuW-eBxXc; uid_id2=c281c967-8a50-45a7-a119-265aa7206517:3:1; pdhtkv=true; uncs=2; pdhtkv23=true; uncs23=1; u_pl26940921=1; pdhtkv29=true; uncs29=1; u_pl27062818=1; slecf0b511a8c19914e652dfaaae77a5ac81=[6116561]\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 23 Aug 2025 18:37:33 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\naccess-control-allow-origin: https://genizymath.github.io\r\naccess-control-allow-credentials: true\r\nset-cookie: uid_id2=c281c967-8a50-45a7-a119-265aa7206517:3:1; expires=Sat, 30 Aug 2025 18:37:33 GMT; path=/; secure; SameSite=None\nuncs=3; expires=Sun, 24 Aug 2025 18:37:33 GMT; path=/; secure; SameSite=None\nuncs29=2; expires=Sun, 24 Aug 2025 18:37:33 GMT; path=/; secure; SameSite=None\nslecf0b511a8c19914e652dfaaae77a5ac81=[6116561,3078189]; expires=Sat, 23 Aug 2025 18:37:38 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 221\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 16435d76aa373ea22ef3ae3b4018d77b\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6615,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"JSON text data","md5":"d4aa8573252999c76c937531944fa8fc","sha1":"5da7d74ea12f179c017f8ab93c5d6f38cb4d449c","sha256":"1322086308a5bf54e310b87c6755401205b26a215eaedd5378236642462e286e","sha512":"d8ea1d7fc7653ee589f249391db4058f1baa860acdf757a21862a3d48fb49741e625a8b70b5a12e1dee90508063cd955579212a2739595be3e668e4443768005","ssdeep":"96:9zb2g5w2Fusn0ze/djoMyWkzzEcGY11I04HX4jRvHcO+TLNXE2NWr+L83lR4HmXj:9zqga23mekSY144jRUO+N02NJXHmBJ","tlshash":"7bd18cff0905238e0b82d34d191f38b27e53f82e0acce91ad2235fac2094ad02a5016f","first_seen":"2025-08-23T18:38:03.426Z","last_seen":"2025-08-23T18:38:03.426Z","times_seen":1,"resource_available":false,"data":null}},"time_used":314,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":314,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-23","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/impr.gif?sid=H4sIAAAAAAAC_1RTS4scVRS-NZNVXIhvEIRGXBhweqqqq19mEYxxJJgXSSQLEbl1b1X3dW7VLe-ja6ZXwaBkOdkpuKj-ujOjMYiiW0F63A0IaUGYRQYk4A-IkKVI9wyMnsV5fV_Bd06d-_nIHZAGHN2_clENhZR0tVn3a6_fEDlXpaldul4L_Lp_unZD5K3odG1j7vTgzaAR1f1TtXcTtq5WQz_w_cAPamtCJ6naWF2gEMX9blDv-vUorAfNCBv6_7VxSzDUAx8ckGch-OzpR-kHEGyKPPv-XGLWrSreeCdzklqlMeA77-fruSpzZMdpqj2k-c4RG8rMCPliCSrfOZoAajCZT4BYzMjSiw8R5ztHMhEP7h4qjSWSHDF_CuVgikROIegUTN2C4A8IwDguXUaebV9SuqSbhyidozNy4snfEOWMnHj4PPLsu7NSbNSuKemsULnBRlpBbEwhelMUbhd2uARR7oLZTyH4b2T1yQXk2eSykQqC77_Gwk7Auq32Soc2_ZWoSdsrNAi6K2GrSWk79FvNoL1YkUinoGYZznhwwoNLPbjCQ8b3a5HfiVhAG620y1nbj2gU8ST2u53Q92mXteHYXPsWbLEFJrfA9GcTlzMzCr4ueN-uD8LGxGqXbM-bYWMU3HcfFTJsdSO_GwajYPuQteCg0DexLu7MiPfCj9DuF5h-BcM9GEsw4BXKhKA0BCUlKAVBaQnKQXWXSxOaaptL4-LgKIZHsVGNle2N6F1le0lOQPUWNK8movjE3AKzy-NhavhYzR2NbTWmMa9GxQF5Zv5TvK8ev4r1ZL-W-nEzCGiHBd1uECWtZshTSmnSbtMmZZ0ARlQQZgnUeBiKGbm49icKMSOn_jmJmO7CyF0wsQzqXgEtK9B-hWH-Uy_JxXAzo7Zf7wnbd3FdKHBVobAnYDe9kTwgLy_O48PrD5CwvTN_pQsD0xUKXeFj8StBT94eX1UlmVxVpSE_XC6syMSQzk_nmqU2Wb73XrJZKs3PnzNb37zF5sA8vX89MfYCzbnIe4Z8e1Zwnug1pVlCfj5vbiTxFWf6Z53OXXHhyttr57NCJ8YIlU9BxYx4jzWYmJHnvnxp8SyiPx5B6Cm0q5C5PXJkYMVNmOJYu1EEWh7jceGhdNVYh_FxUwoCmRzXNK5g_lPHx_lY0_nXVFQjcxs97YHaW8izCgNdYSArULkF45bHttB7Z35vLAyx9Max1N4kllreOVyxEfu1tJGEzPc77VbQ6KRJ0Ig4S5udqMtb1G80Elgz6987Kf8NAAD__6ONhMD0BAAA","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:33.782Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 21:49:55 GMT","end":"Fri, 26 Sep 2025 21:49:54 GMT"},"fingerprint":{"sha1":"38:55:0E:5D:7C:E7:08:BA:9A:77:8D:79:E7:3A:6B:27:F8:97:E4:89","sha256":"3A:54:48:30:C3:83:C3:F6:C2:3E:B3:7D:81:B3:37:9D:16:0C:B9:AE:C5:C3:56:8C:33:5D:AD:24:2B:B7:35:AF"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1RTS4scVRS-NZNVXIhvEIRGXBhweqqqq19mEYxxJJgXSSQLEbl1b1X3dW7VLe-ja6ZXwaBkOdkpuKj-ujOjMYiiW0F63A0IaUGYRQYk4A-IkKVI9wyMnsV5fV_Bd06d-_nIHZAGHN2_clENhZR0tVn3a6_fEDlXpaldul4L_Lp_unZD5K3odG1j7vTgzaAR1f1TtXcTtq5WQz_w_cAPamtCJ6naWF2gEMX9blDv-vUorAfNCBv6_7VxSzDUAx8ckGch-OzpR-kHEGyKPPv-XGLWrSreeCdzklqlMeA77-fruSpzZMdpqj2k-c4RG8rMCPliCSrfOZoAajCZT4BYzMjSiw8R5ztHMhEP7h4qjSWSHDF_CuVgikROIegUTN2C4A8IwDguXUaebV9SuqSbhyidozNy4snfEOWMnHj4PPLsu7NSbNSuKemsULnBRlpBbEwhelMUbhd2uARR7oLZTyH4b2T1yQXk2eSykQqC77_Gwk7Auq32Soc2_ZWoSdsrNAi6K2GrSWk79FvNoL1YkUinoGYZznhwwoNLPbjCQ8b3a5HfiVhAG620y1nbj2gU8ST2u53Q92mXteHYXPsWbLEFJrfA9GcTlzMzCr4ueN-uD8LGxGqXbM-bYWMU3HcfFTJsdSO_GwajYPuQteCg0DexLu7MiPfCj9DuF5h-BcM9GEsw4BXKhKA0BCUlKAVBaQnKQXWXSxOaaptL4-LgKIZHsVGNle2N6F1le0lOQPUWNK8movjE3AKzy-NhavhYzR2NbTWmMa9GxQF5Zv5TvK8ev4r1ZL-W-nEzCGiHBd1uECWtZshTSmnSbtMmZZ0ARlQQZgnUeBiKGbm49icKMSOn_jmJmO7CyF0wsQzqXgEtK9B-hWH-Uy_JxXAzo7Zf7wnbd3FdKHBVobAnYDe9kTwgLy_O48PrD5CwvTN_pQsD0xUKXeFj8StBT94eX1UlmVxVpSE_XC6syMSQzk_nmqU2Wb73XrJZKs3PnzNb37zF5sA8vX89MfYCzbnIe4Z8e1Zwnug1pVlCfj5vbiTxFWf6Z53OXXHhyttr57NCJ8YIlU9BxYx4jzWYmJHnvnxp8SyiPx5B6Cm0q5C5PXJkYMVNmOJYu1EEWh7jceGhdNVYh_FxUwoCmRzXNK5g_lPHx_lY0_nXVFQjcxs97YHaW8izCgNdYSArULkF45bHttB7Z35vLAyx9Max1N4kllreOVyxEfu1tJGEzPc77VbQ6KRJ0Ig4S5udqMtb1G80Elgz6987Kf8NAAD__6ONhMD0BAAA HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/\r\nCookie: ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.GSN40yDQqCPk3Sp_Ky3GV4ehy9hJLYxPoTUuW-eBxXc; uid_id2=c281c967-8a50-45a7-a119-265aa7206517:3:1; pdhtkv=true; uncs=3; pdhtkv23=true; uncs23=1; u_pl26940921=1; pdhtkv29=true; uncs29=2; u_pl27062818=1; slecf0b511a8c19914e652dfaaae77a5ac81=[6116561,3078189]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 23 Aug 2025 18:37:33 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nset-cookie: iprc_l+fa45cf1da90fcacf70d2619d3260ec9d=6116561; expires=Sun, 24 Aug 2025 18:37:33 GMT; path=/; secure; SameSite=None\niprc_l:6116561=3; expires=Sun, 24 Aug 2025 18:37:33 GMT; path=/; secure; SameSite=None\niprc_a+170033c337f7892b8665965499cab037=127602; expires=Sun, 24 Aug 2025 18:37:33 GMT; path=/; secure; SameSite=None\niprc_a:127602=1; expires=Sun, 24 Aug 2025 18:37:33 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 5\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: f65995a516507f469de809c1bc30fdc2\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T05:45:54.968102Z","times_seen":13318572,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-23","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:34.537Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://genizymath.github.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 22 Aug 2025 08:13:09 GMT\r\nexpires: Sat, 22 Aug 2026 08:13:09 GMT\r\ncache-control: public, max-age=31536000\r\nage: 123865\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-04-04T05:45:37.747965Z","times_seen":713826,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"prefacebegbeginning.com/ren.gif?sid=H4sIAAAAAAAC_1RSwWskxReuTuaU3-GHyyroaY4uyKR7pjM77R6CcU0IZpO4uxLQvVR3dc-U093VVlVPT8ZLMCB7HMGD7qnzTbLRuCyKXoVl4kUDgn2RHDa4-CcIwZNIzw6MPuj33tdfFbzve_XJQXpBGkjp-fYtMeBhSBeXamb11R0eM5Gp6ubdqmXWzBvVHR437RvVfplk73WrYdfMa9U13-uKxbppmaZlWtVVLv1A9BcnLHjyyLFqjlmz6zVryUZf_her1ICiBljvglwBZ8X__wjeB_fGiKNvbvqqq0Xy2ltRGlItJHrs-N24G4ssRjRrA2kgiI-npyFUQcjncxDx8VQBRO-wVACXF2Tupadw4-PpmHB7R88ndUP4MVz2P2S9MfxwDE7H8MQ-OPuVAB7D5hbi6OGmkBndfc7Ski1I5fJP8KwgladXEUePV0Ler94RYaq5iBX6QQ7eH4O3x0jSU-jBHHh2Ck9_DM5-IYuXG4ijwy0VCnCWT9TzYAyqDKTlxw2kgYE0MRCx86pttmzPoo1m4DDvumlT22a-azqtumlSx7uO1CvHGkInQ3jhEJ7cQyL30OWfFsR48TvI9AlUJ4diBpQuiPHOHnosR-YTZIogowQZJ8g0QdbLj1io6ip_yEKVuta01qe1kY-Ebh_QI6HbfkxA5RCS5Yc8-VDtw9Pzo0Gg2EiUibo6H1GX5QfJBXmhtM548Ps9dP3zassJWkHgtVzPrV83A79hWg71WnUa2I5rWhSK5-BqbuLKgBfk1uozJLwg1_5egEtPocJTeHweNLVAsxy0k2MQf9_2Yz7Yjaju1Npcd1K3xgWYyJHoCvSucRBekFcmS3zvy2X43tmyHjxbe3z1I3gyRyJzfMB_JGiH90e3RUYOb4tMkW-3Es0jPqDlgu9oqv35k7f93UxItn5TDb96wyuJsn1011d6g8aMx21Fvl7hjPlyVUjPJz-sqx3f3U5VZyWVcZpsbL-5uh4l0leKi3gMyguy8OQEHi_Ild_2J4-3sfYXuBxDpjmi9IxMA16yB5XMsBIEMpxhN5lHluYjWXdnP0NOEPozTN0c6l_YnfUjScvblOcH6j7asgKq9xFHOXoyRy_MQcMhVLow0ok8W_7pizIewA0rIzeUlUM3lOFnBXn5Z6tM9YnZBbl3OQ_Fz6tLdbfRbLWaftBkQYM16g3mLJm-Y1OnaTv2ErQqOicL3X8CAAD__0t7dY6pBAAA","fqdn":"prefacebegbeginning.com","domain":"prefacebegbeginning.com","tld":"com"},"ip":{"addr":"192.243.61.227","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:32.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"prefacebegbeginning.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 07 Aug 2025 09:12:18 GMT","end":"Wed, 05 Nov 2025 09:12:17 GMT"},"fingerprint":{"sha1":"02:DD:30:E6:FA:61:35:3B:6E:17:C3:A5:38:D6:82:9F:DD:79:CC:43","sha256":"97:9B:4B:68:15:BD:DE:B4:41:E2:49:37:12:C2:46:A0:AB:C7:E2:25:EC:7D:F9:A2:10:00:05:99:CC:2C:3E:F7"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_1RSwWskxReuTuaU3-GHyyroaY4uyKR7pjM77R6CcU0IZpO4uxLQvVR3dc-U093VVlVPT8ZLMCB7HMGD7qnzTbLRuCyKXoVl4kUDgn2RHDa4-CcIwZNIzw6MPuj33tdfFbzve_XJQXpBGkjp-fYtMeBhSBeXamb11R0eM5Gp6ubdqmXWzBvVHR437RvVfplk73WrYdfMa9U13-uKxbppmaZlWtVVLv1A9BcnLHjyyLFqjlmz6zVryUZf_her1ICiBljvglwBZ8X__wjeB_fGiKNvbvqqq0Xy2ltRGlItJHrs-N24G4ssRjRrA2kgiI-npyFUQcjncxDx8VQBRO-wVACXF2Tupadw4-PpmHB7R88ndUP4MVz2P2S9MfxwDE7H8MQ-OPuVAB7D5hbi6OGmkBndfc7Ski1I5fJP8KwgladXEUePV0Ler94RYaq5iBX6QQ7eH4O3x0jSU-jBHHh2Ck9_DM5-IYuXG4ijwy0VCnCWT9TzYAyqDKTlxw2kgYE0MRCx86pttmzPoo1m4DDvumlT22a-azqtumlSx7uO1CvHGkInQ3jhEJ7cQyL30OWfFsR48TvI9AlUJ4diBpQuiPHOHnosR-YTZIogowQZJ8g0QdbLj1io6ip_yEKVuta01qe1kY-Ebh_QI6HbfkxA5RCS5Yc8-VDtw9Pzo0Gg2EiUibo6H1GX5QfJBXmhtM548Ps9dP3zassJWkHgtVzPrV83A79hWg71WnUa2I5rWhSK5-BqbuLKgBfk1uozJLwg1_5egEtPocJTeHweNLVAsxy0k2MQf9_2Yz7Yjaju1Npcd1K3xgWYyJHoCvSucRBekFcmS3zvy2X43tmyHjxbe3z1I3gyRyJzfMB_JGiH90e3RUYOb4tMkW-3Es0jPqDlgu9oqv35k7f93UxItn5TDb96wyuJsn1011d6g8aMx21Fvl7hjPlyVUjPJz-sqx3f3U5VZyWVcZpsbL-5uh4l0leKi3gMyguy8OQEHi_Ild_2J4-3sfYXuBxDpjmi9IxMA16yB5XMsBIEMpxhN5lHluYjWXdnP0NOEPozTN0c6l_YnfUjScvblOcH6j7asgKq9xFHOXoyRy_MQcMhVLow0ok8W_7pizIewA0rIzeUlUM3lOFnBXn5Z6tM9YnZBbl3OQ_Fz6tLdbfRbLWaftBkQYM16g3mLJm-Y1OnaTv2ErQqOicL3X8CAAD__0t7dY6pBAAA HTTP/1.1\r\nHost: prefacebegbeginning.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/\r\nCookie: pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; u_pl26927196=1; nlec89f8ffc8bcb270fe3019ac82af49b01a=[1690161,1690162,5941311]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 23 Aug 2025 18:37:32 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nVary: Origin\r\nAccess-Control-Allow-Credentials: true\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nHost: prefacebegbeginning.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: a35106128b29daaa190c216d74f4ff95\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T05:45:54.968102Z","times_seen":13318572,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-23","alert":"Sinkholed","trigger":"prefacebegbeginning.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"prefacebegbeginning.com/impr.gif?sid=H4sIAAAAAAAC_1RSwWskxReuTuaU3-GHyyroaY4uyKR7pjeZcQ-L65oQzCZxdyWge6mu6p4pp7urraqenoyXYED2OIIH3VPnm2SjcVkUvQrLxIsGBPsiOWxw8U8QgieRnh0YfdDvva-_Knjf9-qT_fScNJDSs61bciDCkC5erdnVV7dFzGWmqxt3q45ds69Vt0W85F6r9sukeq87DbdmX6mu-qwrF-u2Y9uO7VRXhPID2V-csBDJo5ZTa9k1t15zrrroq_9inVrQ1ALvnZNLELz4_x_B-xBsjDj65qavu0Ymr70VpSE1UqHHj96Nu7HMYkSzNlAWgvhoehpSF4R8PgcZH00VQPYOSgXwREHmXnoKLz6ajgmvd_h8Ui-EH8Pj_0PWG8MPxxB0DCb3IPivBGAcG5uIo4cbUmV05zlLS7YglYs_IbKCVJ5eRhw9vhGKfvWODFMjZKzRD3KI_hiiPUaSnsAM5iCyEzDzMQT_hSxerCOODjZ1KCF4PlEvgjGotpCWn7CQBhbSxELEz6qu3XSZQxtLQYuzZdulrst9z24167ZNW2wZKSvHGsIkQ7BwCKZ2kahddMWnBbFe_A4qfQLdyaG5BW0KYr2zix7PkfkEmSbIKEEmCDJDkPXyQx7qus4f8lCnnjOt9Wlt5CNp2vv0UJq2HxNQNYTi-YFIPtR7YGZ-NAg0H8kyUc_kI-rxfD85Jy-U1lkPfr-Hrn9WbbaCZhCwpse8-rId-A3baVHWrNPAbXm2Q6FFDqHnJq4MREFurTxDIgpy5e8FePQEOjwBE_OgqQOa5aCdHIP4-7Yfi8FORE2n1hamk3o1IcFljsRUYHas_fCcvDJZ4ntfXofPTq-bwbPVx5c_AlM5EpXjA_EjQTu8P7otM3JwW2aafLuZGBGJAS0XfMdQ488fv-3vZFLxtZt6-NUbrCTK9tFdX5t1GnMRtzX5-obg3FcrUjGf_LCmt31vK9WdG6mK02R9682VtShRvtZCxmNQUZCFJ8dgoiCXftubPN7G6l8QagyV5ojSUzINsGQXOplhLQlUOMNeMo8szUeq7s1-hoIg9GeYejn0v7A360eKlrepyPf1fbRVBdTsIY5y9FSOXpiDhkPodGFkEnV6_acvyngAL6yMvFBVDrxQhZ8V5OWfnTLVJ2YX5N7FPLQ4qwYNv85su7m85DSage80XM6Cq023xZeo3Wj4MLroHC90_wkAAP__txPlUKkEAAA=","fqdn":"prefacebegbeginning.com","domain":"prefacebegbeginning.com","tld":"com"},"ip":{"addr":"192.243.61.227","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:32.140Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"prefacebegbeginning.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 07 Aug 2025 09:12:18 GMT","end":"Wed, 05 Nov 2025 09:12:17 GMT"},"fingerprint":{"sha1":"02:DD:30:E6:FA:61:35:3B:6E:17:C3:A5:38:D6:82:9F:DD:79:CC:43","sha256":"97:9B:4B:68:15:BD:DE:B4:41:E2:49:37:12:C2:46:A0:AB:C7:E2:25:EC:7D:F9:A2:10:00:05:99:CC:2C:3E:F7"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1RSwWskxReuTuaU3-GHyyroaY4uyKR7pjeZcQ-L65oQzCZxdyWge6mu6p4pp7urraqenoyXYED2OIIH3VPnm2SjcVkUvQrLxIsGBPsiOWxw8U8QgieRnh0YfdDvva-_Knjf9-qT_fScNJDSs61bciDCkC5erdnVV7dFzGWmqxt3q45ds69Vt0W85F6r9sukeq87DbdmX6mu-qwrF-u2Y9uO7VRXhPID2V-csBDJo5ZTa9k1t15zrrroq_9inVrQ1ALvnZNLELz4_x_B-xBsjDj65qavu0Ymr70VpSE1UqHHj96Nu7HMYkSzNlAWgvhoehpSF4R8PgcZH00VQPYOSgXwREHmXnoKLz6ajgmvd_h8Ui-EH8Pj_0PWG8MPxxB0DCb3IPivBGAcG5uIo4cbUmV05zlLS7YglYs_IbKCVJ5eRhw9vhGKfvWODFMjZKzRD3KI_hiiPUaSnsAM5iCyEzDzMQT_hSxerCOODjZ1KCF4PlEvgjGotpCWn7CQBhbSxELEz6qu3XSZQxtLQYuzZdulrst9z24167ZNW2wZKSvHGsIkQ7BwCKZ2kahddMWnBbFe_A4qfQLdyaG5BW0KYr2zix7PkfkEmSbIKEEmCDJDkPXyQx7qus4f8lCnnjOt9Wlt5CNp2vv0UJq2HxNQNYTi-YFIPtR7YGZ-NAg0H8kyUc_kI-rxfD85Jy-U1lkPfr-Hrn9WbbaCZhCwpse8-rId-A3baVHWrNPAbXm2Q6FFDqHnJq4MREFurTxDIgpy5e8FePQEOjwBE_OgqQOa5aCdHIP4-7Yfi8FORE2n1hamk3o1IcFljsRUYHas_fCcvDJZ4ntfXofPTq-bwbPVx5c_AlM5EpXjA_EjQTu8P7otM3JwW2aafLuZGBGJAS0XfMdQ488fv-3vZFLxtZt6-NUbrCTK9tFdX5t1GnMRtzX5-obg3FcrUjGf_LCmt31vK9WdG6mK02R9682VtShRvtZCxmNQUZCFJ8dgoiCXftubPN7G6l8QagyV5ojSUzINsGQXOplhLQlUOMNeMo8szUeq7s1-hoIg9GeYejn0v7A360eKlrepyPf1fbRVBdTsIY5y9FSOXpiDhkPodGFkEnV6_acvyngAL6yMvFBVDrxQhZ8V5OWfnTLVJ2YX5N7FPLQ4qwYNv85su7m85DSage80XM6Cq023xZeo3Wj4MLroHC90_wkAAP__txPlUKkEAAA= HTTP/1.1\r\nHost: prefacebegbeginning.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/\r\nCookie: pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; u_pl26927196=1; nlec89f8ffc8bcb270fe3019ac82af49b01a=[1690161,1690162,5941311]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 23 Aug 2025 18:37:32 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nVary: Origin\r\nAccess-Control-Allow-Credentials: true\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nSet-Cookie: iprc_l+e5c6160c0de2dbd41b13b8f4750c921e=5941311; expires=Sun, 24 Aug 2025 18:37:32 GMT; path=/; secure; SameSite=None\niprc_l:5941311=1; expires=Sun, 24 Aug 2025 18:37:32 GMT; path=/; secure; SameSite=None\r\nHost: prefacebegbeginning.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: a7bdfdabd15ab9c18cc9f98b3173c36c\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T05:45:54.968102Z","times_seen":13318572,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-23","alert":"Sinkholed","trigger":"prefacebegbeginning.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/notifications/utility/default/us/blog/financeskipper/message_redcircle2/16/css/style.css","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:33.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Jul 2025 14:01:22 GMT","end":"Mon, 29 Sep 2025 14:59:36 GMT"},"fingerprint":{"sha1":"CD:76:E0:2A:28:09:08:24:2D:4C:A1:14:B2:AE:6C:39:A4:CC:2F:6B","sha256":"8B:98:84:C0:8D:47:7C:1B:A7:26:4B:E4:9E:6E:FD:8E:E1:6D:6E:41:1D:E7:91:B7:70:A3:C1:D0:C0:85:6B:31"}}},"request":{"raw":"GET /sb/notifications/utility/default/us/blog/financeskipper/message_redcircle2/16/css/style.css HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://genizymath.github.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 23 Aug 2025 18:37:33 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 19 Jan 2024 14:21:26 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"65aa8566-e50\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JFXXcla3q%2BR54DgDCpbyfEhrlQ8wigFlEadY%2FDvM%2BTcEQy%2ByrNvNYWHHTfVHOoVMHmMM4EmRWwb8%2BAf%2BFQ9kCYoQIdpjO3zX0enh4IF2IG4%3D\"}]}\r\ncf-ray: 973cb8cc9a730b9c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3664,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"da91945ede579f34a99cde40a98ce5a4","sha1":"cfbf9b6c295766437a906f7fd6f46a0302240c9a","sha256":"9b9d07bcd50263ebd848d3f60889a594727d925ee4488df503eac791023d57b1","sha512":"764d388d8e0d63feaf440cdb92de9ef3f1eb76152b4f1ac1ad0d1fc7b30c110f24628b0e0c34bf5a9cbb1918aa8dc2fc466386f07ec0fda75ea7ec1cf9befae4","ssdeep":"","tlshash":"3071ee961b372604b40bd49a2f652717132540078a4bed183fca774c8fc66a8c6e3bdf","first_seen":"2024-01-21T07:50:10Z","last_seen":"2026-04-02T10:27:56.661633Z","times_seen":384,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/si/d8/b1/09/d8b109165fc0ec08002c14fd9e81f6ece67b955e786b918b73abb33e5be5188f.png","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:32.102Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Jul 2025 02:33:11 GMT","end":"Wed, 08 Oct 2025 02:33:10 GMT"},"fingerprint":{"sha1":"06:D8:07:0F:AB:BF:D8:7F:C5:38:82:AC:A7:8A:20:4D:83:6C:EA:C9","sha256":"CF:05:58:46:C3:07:3F:B6:A6:8D:42:F2:3B:3D:91:36:93:10:CB:D5:89:47:A3:62:26:D2:F3:BA:AC:51:0E:B7"}}},"request":{"raw":"GET /si/d8/b1/09/d8b109165fc0ec08002c14fd9e81f6ece67b955e786b918b73abb33e5be5188f.png HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 23 Aug 2025 18:37:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 57237\r\nserver: nginx/1.21.6\r\nlast-modified: Sun, 11 May 2025 14:02:30 GMT\r\netag: \"6820adf6-df95\"\r\nexpires: Mon, 25 Aug 2025 18:37:32 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: ah0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":57237,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 320 x 240, 8-bit/color RGBA, non-interlaced","md5":"423a240fbfb182d7805dad3bb9e822bb","sha1":"6a853689b2cc95a6c36b98e6938e598bf2a28d52","sha256":"da19475c70c6669a83473eb52dec1feb61e629e374fdd426dd02024080d0b1a6","sha512":"98e063f429420821aa55688891aa4426d16d9e7ffa44f92f8d9d7f3e3870007872a66a718185428f197db14d070b7254e92a2cc7734cc54c39034c808daa7c8f","ssdeep":"1536:BP5oFAaPeX990yL036TelNvY6lEFLXmLw2JR:FWqaPeXz0yLDe7luXyH","tlshash":"ab430224ff03e61784be24af91eae88f1f6421bfb5b092807770221445b7c6b4282463","first_seen":"2025-05-16T16:44:08.672031Z","last_seen":"2026-04-04T04:46:50.98821Z","times_seen":3519,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":44,"dns":30,"connect":21,"send":0,"wait":64,"receive":9,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:32.209Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"preferencenail.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 01 Jul 2025 15:11:38 GMT","end":"Mon, 29 Sep 2025 15:11:37 GMT"},"fingerprint":{"sha1":"F9:52:70:4B:81:A8:F8:39:E6:E7:96:8F:EA:FE:17:FD:96:C5:32:E3","sha256":"D8:C9:87:B5:89:5E:D4:F4:8D:FD:98:3C:31:39:42:67:D3:20:27:14:A9:AD:F2:AB:97:A4:48:0F:94:F0:FF:A2"}}},"request":{"raw":"GET /sfp.js HTTP/1.1\r\nHost: preferencenail.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 23 Aug 2025 18:37:32 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nContent-Length: 28254\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nVary: Accept-Encoding\r\nHost: preferencenail.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 6879a875f740a12cd01b4fb9a70750c2\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":85386,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"46a6fef91632b94d14252fe324c1585f","sha1":"387cebbd261b8fe947fe9805875300f2ceeb5cfd","sha256":"36d0c771f8bf310d740cb4d0ca144354c45df284e72361660448708d72f175d5","sha512":"a3aaa1b5ab1113a12793bd1085332eb257416aaa9c4a690525838b91453a281580a979bfb856b3c429c2d4243c3ce02bd318a4b7048124eef96912179836d0fd","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRL:nPncLBSUBULGVTfGpucE5fox","tlshash":"528395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","first_seen":"2025-07-08T10:38:39.799377Z","last_seen":"2025-11-18T17:01:51.014373Z","times_seen":15230,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/genizy/assets@main/rooftop-snipers/Build/rooftop-snipers.data.unityweb","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://genizymath.github.io/iframe/283.html","date":"2025-08-23T18:37:32.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /gh/genizy/assets@main/rooftop-snipers/Build/rooftop-snipers.data.unityweb HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://genizymath.github.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 2883506\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/vnd.unity\r\nx-jsd-version: main\r\nx-jsd-version-type: branch\r\netag: W/\"2bffb2-jMhZI0uFeNfnEidAPUpofxNKXlU\"\r\naccept-ranges: bytes\r\nage: 22\r\ndate: Sat, 23 Aug 2025 18:37:32 GMT\r\nx-served-by: cache-fra-eddf8230071-FRA, cache-hel1410032-HEL\r\nx-cache: HIT, MISS\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2883506,"size_decoded":0,"mime_type":"application/vnd.unity","magic":"gzip compressed data, was \"Rooftop Snipers WebGL.data.unityweb\", has comment, last modified: Fri Jun 16 19:17:48 2017, max compression, from Unix","md5":"f13d1d0d535116476958bc618a5c9974","sha1":"814986422f790b4dc5153d707c0cfba0047e5ca8","sha256":"b3c6fa877ef4a8d32012b5c91b2bd0c97b7a47f067cc125084951180a0c91ffb","sha512":"068e3ad98edf318fb62c7f82f90e31112164db055b5acf2f4714a634e8b2e35009cca22bcc2181484852ce87bb163fe2321a6fab11d00f3e6e596892c9a74c03","ssdeep":"24576:8jEPPAGcrcdYb+jcAbowPCWZYwL7geTzmecRNa+/kwZ:QMIHrCYyjRowJZdgeTzncTj/D","tlshash":"6725337b1a4db023d3fa1390aa5376fe61cfd711826c4b6acbaac199f521f18374046d","first_seen":"2025-08-23T18:38:03.429295Z","last_seen":"2025-08-23T18:38:03.429295Z","times_seen":1,"resource_available":false,"data":null}},"time_used":557,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":398,"receive":159,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.uca.cloud.unity3d.com/v1/events","fqdn":"api.uca.cloud.unity3d.com","domain":"unity3d.com","tld":"com"},"ip":{"addr":"34.107.172.168","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://genizymath.github.io/iframe/283.html","date":"2025-08-23T18:37:42.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thind.0.gusc1.prd.data.unity3d.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Jul 2025 15:45:47 GMT","end":"Thu, 16 Oct 2025 15:45:46 GMT"},"fingerprint":{"sha1":"CF:D2:0F:97:4F:2D:F7:FC:1C:F6:46:FF:19:7C:19:15:52:2D:49:A0","sha256":"4B:CD:8F:CC:3A:BA:C4:36:B8:BF:F7:C4:B3:B5:1A:06:EA:B2:FB:A4:22:7B:49:2C:4F:DA:8A:36:D2:D3:1B:99"}}},"request":{"raw":"POST /v1/events HTTP/1.1\r\nHost: api.uca.cloud.unity3d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\ncontinuous_request: 1\r\ndata_block_id: a2ed0311bd8d23098631e852672dafcf\r\ndata_retry_count: 1\r\nevent_count: 1\r\nexpired_session_dropped: 0\r\nContent-Length: 360\r\nOrigin: https://genizymath.github.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://genizymath.github.io\r\nvary: Origin\r\ndate: Sat, 23 Aug 2025 18:37:42 GMT\r\ncontent-length: 0\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T05:45:54.968102Z","times_seen":13318572,"resource_available":true,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/genizy/assets@main/rooftop-snipers/TemplateData/style.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://genizymath.github.io/iframe/283.html","date":"2025-08-23T18:37:31.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /gh/genizy/assets@main/rooftop-snipers/TemplateData/style.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: main\r\nx-jsd-version-type: branch\r\netag: W/\"57d-hTgKxYi9I3NOw7IOnxI45qQrY18\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 6055\r\ndate: Sat, 23 Aug 2025 18:37:31 GMT\r\nx-served-by: cache-fra-etou8220111-FRA, cache-hel1410025-HEL\r\nx-cache: HIT, MISS\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 427\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1405,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1404)","md5":"66502fdfa534debce0568f6ee8888e66","sha1":"85380ac588bd23734ec3b20e9f1238e6a42b635f","sha256":"ba1811fd1df9f42e56045c99e77b730ef7fed5883faa979f22f00942cd82cfe9","sha512":"a9c42c5437a7a9b471c446bd3b3b0435e70801ef0d68c404c2d98e9064a9a3e7860b180fc9971fad63c8da174e6ea33ea51cf93ea0423c58b97c06ad97b89c2f","ssdeep":"","tlshash":"bb21a23691be156bd667cc1365d63acc312ac006d2c32afda94c557ec0d630829683c2","first_seen":"2025-08-23T18:38:03.431263Z","last_seen":"2025-08-23T18:38:03.431263Z","times_seen":1,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"prefacebegbeginning.com/ren.gif?sid=H4sIAAAAAAAC_1RS32scVRS-k-xTChWlCvq0b1qQzczuZLNjH4KxpgTTJLaVgPblztyZ3evOzB3vvbOzWV-CAenjFnzQPk2-TRqtpSj6KsrGFw0Inbc8NFj8BwQhjyKzXYkemPNjvnvgO985n-6lp6SBlJ5sXhcDHoZ0fqFmVl_b4jETmaqu36paZs28Ut3icdO-Uu2XTvbesBp2zbxcveZ7XTFfNy3TtEyrusKlH4j-_AQFTx46Vs0xa3a9Zi3Y6Mv_1yo1oKgB1jslL4Cz4rk_gg_AvTHi6Jurvupqkbz-dpSGVAuJHjt8L-7GIosRnaeBNBDEh9PXEKog5PMZiPhwOgFEb7-cAC4vyMxLT-DGh1OacHsHz5i6IfwYLruArDeGH47B6Rie2AVnjwngMaxvII7urwuZ0e1nKC3RglTO_gLPClJ5cglx9Gg55P3qTRGmmotYoR_k4P0xeHuMJD2CHsyAZ0fw9Cfg7Dcyf7aGONrfUKEAZ_lkeh6MQZWBtPy4gTQwkCYGInZStc2W7Vm00Qwc5i2aNrVt5rum06qbJnW8RaReSWsInQzhhUN4cgeJ3EGX3y2I8eJ3kOlPUJ0cihlQuiDGuzvosRyZT5ApgowSZJwg0wRZLz9goaqr_D4LVepa01ifxkY-Erq9Rw-EbvsxAZVDSJbv8-QjtQtPz44GgWIjUTrq6nxEXZbvJafk-VI6497vt9H1T6otJ2gFgddyPbe-aAZ-w7Qc6rXqNLAd17QoFM_B1cxElQEvyPWVp0h4QS7_PQeXHkGFR_D4LGhqgWY5aCfHIP6-7cd8sB1R3am1ue6kbo0LMJEj0RXobWMvPCWvTJb48q91-N4xmRo8mSOROT7kPxO0wzujGyIj-zdEpsi3G4nmER_QcsE3NdW-8eAdfzsTkq1eVcOv3vRKoEwf3vKVXqMx43Fbka-XOWO-XBHS88kPq2rLdzdT1VlOZZwma5tvraxGifSV4iIeg_LHFy_CK0_2rjU53Qs7r4LLMWSaI0r_wzTZgUqOl_Tg6bVHlz6GEgQyPMfdZAZZmo9k3T3_GXKC0D-vqZtD-cc__vlv03k-krTspjzfU3fQlhVQvYs4ytGTOXphDhoOodK5kU7k8dIvX5R2D25YGbmhrOy7oQw_KwW2JioX5P0vlwpy-2wWip9UF-puo9lqNf2gyYIGa9QbzFkwfcemTtN27AVoVXQezHX_CQAA__9P1uAvpwQAAA==","fqdn":"prefacebegbeginning.com","domain":"prefacebegbeginning.com","tld":"com"},"ip":{"addr":"192.243.61.227","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:32.063Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"prefacebegbeginning.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 07 Aug 2025 09:12:18 GMT","end":"Wed, 05 Nov 2025 09:12:17 GMT"},"fingerprint":{"sha1":"02:DD:30:E6:FA:61:35:3B:6E:17:C3:A5:38:D6:82:9F:DD:79:CC:43","sha256":"97:9B:4B:68:15:BD:DE:B4:41:E2:49:37:12:C2:46:A0:AB:C7:E2:25:EC:7D:F9:A2:10:00:05:99:CC:2C:3E:F7"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_1RS32scVRS-k-xTChWlCvq0b1qQzczuZLNjH4KxpgTTJLaVgPblztyZ3evOzB3vvbOzWV-CAenjFnzQPk2-TRqtpSj6KsrGFw0Inbc8NFj8BwQhjyKzXYkemPNjvnvgO985n-6lp6SBlJ5sXhcDHoZ0fqFmVl_b4jETmaqu36paZs28Ut3icdO-Uu2XTvbesBp2zbxcveZ7XTFfNy3TtEyrusKlH4j-_AQFTx46Vs0xa3a9Zi3Y6Mv_1yo1oKgB1jslL4Cz4rk_gg_AvTHi6Jurvupqkbz-dpSGVAuJHjt8L-7GIosRnaeBNBDEh9PXEKog5PMZiPhwOgFEb7-cAC4vyMxLT-DGh1OacHsHz5i6IfwYLruArDeGH47B6Rie2AVnjwngMaxvII7urwuZ0e1nKC3RglTO_gLPClJ5cglx9Gg55P3qTRGmmotYoR_k4P0xeHuMJD2CHsyAZ0fw9Cfg7Dcyf7aGONrfUKEAZ_lkeh6MQZWBtPy4gTQwkCYGInZStc2W7Vm00Qwc5i2aNrVt5rum06qbJnW8RaReSWsInQzhhUN4cgeJ3EGX3y2I8eJ3kOlPUJ0cihlQuiDGuzvosRyZT5ApgowSZJwg0wRZLz9goaqr_D4LVepa01ifxkY-Erq9Rw-EbvsxAZVDSJbv8-QjtQtPz44GgWIjUTrq6nxEXZbvJafk-VI6497vt9H1T6otJ2gFgddyPbe-aAZ-w7Qc6rXqNLAd17QoFM_B1cxElQEvyPWVp0h4QS7_PQeXHkGFR_D4LGhqgWY5aCfHIP6-7cd8sB1R3am1ue6kbo0LMJEj0RXobWMvPCWvTJb48q91-N4xmRo8mSOROT7kPxO0wzujGyIj-zdEpsi3G4nmER_QcsE3NdW-8eAdfzsTkq1eVcOv3vRKoEwf3vKVXqMx43Fbka-XOWO-XBHS88kPq2rLdzdT1VlOZZwma5tvraxGifSV4iIeg_LHFy_CK0_2rjU53Qs7r4LLMWSaI0r_wzTZgUqOl_Tg6bVHlz6GEgQyPMfdZAZZmo9k3T3_GXKC0D-vqZtD-cc__vlv03k-krTspjzfU3fQlhVQvYs4ytGTOXphDhoOodK5kU7k8dIvX5R2D25YGbmhrOy7oQw_KwW2JioX5P0vlwpy-2wWip9UF-puo9lqNf2gyYIGa9QbzFkwfcemTtN27AVoVXQezHX_CQAA__9P1uAvpwQAAA== HTTP/1.1\r\nHost: prefacebegbeginning.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/\r\nCookie: pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; u_pl26927196=1; nlec89f8ffc8bcb270fe3019ac82af49b01a=[1690161,1690162,5941311]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 23 Aug 2025 18:37:32 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nVary: Origin\r\nAccess-Control-Allow-Credentials: true\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nHost: prefacebegbeginning.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 907efa7f70473710dec333e4944b29d5\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T05:45:54.968102Z","times_seen":13318572,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-23","alert":"Sinkholed","trigger":"prefacebegbeginning.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:33.789Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://genizymath.github.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 22 Aug 2025 08:13:09 GMT\r\nexpires: Sat, 22 Aug 2026 08:13:09 GMT\r\ncache-control: public, max-age=31536000\r\nage: 123864\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-04-04T05:45:37.747965Z","times_seen":713826,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":80,"dns":1,"connect":14,"send":0,"wait":15,"receive":17,"ssl":65},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flushpersist.com/pxf.gif?uuid=c281c967-8a50-45a7-a119-265aa7206517\u0026eb=bff3d6bf6d16c0bb5e58232c1a99ef63\u0026te=fe015aeda515c30449c87b1701cc307f\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=cc2699d51b73e1eb5f9d2126b08c131a\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=18","fqdn":"flushpersist.com","domain":"flushpersist.com","tld":"com"},"ip":{"addr":"192.243.61.227","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:32.865Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"flushpersist.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 01 Jul 2025 15:12:33 GMT","end":"Mon, 29 Sep 2025 15:12:32 GMT"},"fingerprint":{"sha1":"9E:08:20:A0:75:ED:21:51:E0:3D:DE:29:CD:B0:11:01:4D:04:77:0A","sha256":"FB:D4:A2:1D:0F:F1:FB:A8:D9:5E:88:03:1F:BB:94:D2:32:5C:CC:49:11:11:FC:04:7B:C6:43:40:CF:1E:A2:BA"}}},"request":{"raw":"GET /pxf.gif?uuid=c281c967-8a50-45a7-a119-265aa7206517\u0026eb=bff3d6bf6d16c0bb5e58232c1a99ef63\u0026te=fe015aeda515c30449c87b1701cc307f\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=cc2699d51b73e1eb5f9d2126b08c131a\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=18 HTTP/1.1\r\nHost: flushpersist.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 23 Aug 2025 18:37:33 GMT\r\nContent-Type: image/gif\r\nContent-Length: 1\r\nConnection: keep-alive\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nHost: flushpersist.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: b3d9f60718ebde014bef542619e88a8e\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T05:45:54.968102Z","times_seen":13318572,"resource_available":true,"data":null}},"time_used":664,"timings":{"blocked":281,"dns":1,"connect":93,"send":0,"wait":96,"receive":0,"ssl":191},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rashcolonizeexpand.com/watch.570254004381.js?dev=e\u0026key=33e6a4f2bd7346c557e8569983b9a966\u0026kw=%5B%22play%22%2C%22rooftop%22%2C%22snipers%22%2C%22gn-math%22%2C%22unblocked%22%2C%22games%22%5D\u0026pst=1755974312\u0026rb=\u0026refer=https%3A%2F%2Fgenizymath.github.io%2Fgames%2Frooftop-snipers%2F\u0026res=14.3095\u0026rmtc=t\u0026shu=b2afe069e040f022cf2a5c3ed26b942e1b80149c8eee226d595cb31629134d8ab9d5f2940a154b88c9dd8714f83ba398303a6cf77f5d8cf421b5e6451bb0760002bde20bb9211da75bf2c9ec33a3cb60c5aa58187b662df1247f\u0026tz=0\u0026uuid=c281c967-8a50-45a7-a119-265aa7206517%3A3%3A1","fqdn":"rashcolonizeexpand.com","domain":"rashcolonizeexpand.com","tld":"com"},"ip":{"addr":"192.243.61.227","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:32.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rashcolonizeexpand.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 22:10:41 GMT","end":"Fri, 26 Sep 2025 22:10:40 GMT"},"fingerprint":{"sha1":"C7:75:50:5C:D3:7C:BF:A1:34:3E:61:33:FC:D6:81:21:2E:31:1D:92","sha256":"CB:A9:18:8B:DD:56:71:B4:C1:61:A7:9F:5C:50:7F:22:BB:83:72:BC:0F:B3:14:19:C4:E9:F9:59:6A:0F:95:EC"}}},"request":{"raw":"GET /watch.570254004381.js?dev=e\u0026key=33e6a4f2bd7346c557e8569983b9a966\u0026kw=%5B%22play%22%2C%22rooftop%22%2C%22snipers%22%2C%22gn-math%22%2C%22unblocked%22%2C%22games%22%5D\u0026pst=1755974312\u0026rb=\u0026refer=https%3A%2F%2Fgenizymath.github.io%2Fgames%2Frooftop-snipers%2F\u0026res=14.3095\u0026rmtc=t\u0026shu=b2afe069e040f022cf2a5c3ed26b942e1b80149c8eee226d595cb31629134d8ab9d5f2940a154b88c9dd8714f83ba398303a6cf77f5d8cf421b5e6451bb0760002bde20bb9211da75bf2c9ec33a3cb60c5aa58187b662df1247f\u0026tz=0\u0026uuid=c281c967-8a50-45a7-a119-265aa7206517%3A3%3A1 HTTP/1.1\r\nHost: rashcolonizeexpand.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://genizymath.github.io\r\nReferer: https://genizymath.github.io/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.GSN40yDQqCPk3Sp_Ky3GV4ehy9hJLYxPoTUuW-eBxXc\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 23 Aug 2025 18:37:32 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nAccess-Control-Allow-Origin: https://genizymath.github.io\r\nAccess-Control-Allow-Credentials: true\r\nSet-Cookie: uid_id2=c281c967-8a50-45a7-a119-265aa7206517:3:1; expires=Sat, 30 Aug 2025 18:37:32 GMT; path=/; secure; SameSite=None\npdhtkv=true; expires=Sun, 24 Aug 2025 18:37:32 GMT; path=/; secure; SameSite=None\nuncs=1; expires=Sun, 24 Aug 2025 18:37:32 GMT; path=/; secure; SameSite=None\npdhtkv23=true; expires=Sun, 24 Aug 2025 18:37:32 GMT; path=/; secure; SameSite=None\nuncs23=1; expires=Sun, 24 Aug 2025 18:37:32 GMT; path=/; secure; SameSite=None\nu_pl26940921=1; expires=Sun, 24 Aug 2025 18:37:32 GMT; path=/; secure; SameSite=None\r\nHost: rashcolonizeexpand.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: e72460e68efa61d06af68a911803cf70\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4862,"size_decoded":0,"mime_type":"text/html","magic":"JavaScript source, ASCII text, with very long lines (3986)","md5":"1909d1ba47cf37513f2736f533207eee","sha1":"e055badfaba6e9fa06a8c2769d1475f8d362b195","sha256":"b5f1ea448ad248f2ac4a122f50ec5ae92cb6e1664bad63f64d28b9c3aa479e10","sha512":"a5bf83f3c21acc27acff60f9bd72d1e250316c00ffef358c9a774f6dd2dc897ad2375c1daee7561054ab368ed8be2b1b27dcf7af251b7b2e37923bd0156f1be2","ssdeep":"96:vozPGCoelymeDY3n1XHmX90lymeDY3n1XHm8c1/D2CfMEDaH:wzi0ymsYF2XgymsYF28Eb2CkCaH","tlshash":"25a12be2ae82a131215598ee263e19482c61f17f3243ee4ebdacc7415f447b10af87dc","first_seen":"2025-08-23T18:38:03.433172Z","last_seen":"2025-08-23T18:38:03.433172Z","times_seen":1,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-23","alert":"Sinkholed","trigger":"rashcolonizeexpand.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/impr.gif?sid=H4sIAAAAAAAC_1RTS4sdRRSungku4kJ8RMHVXbgwkLlT1V39MgsxxpFgXiSRLHRTzzvl9O3qVHXfnplVSECyHMSF4Kbn3EkGYxDFx06QO-4iwlw3ziID4k9QAm5E7mRg4lmc8339dcF3iq8-3mz2UQQN27t8wa6bomCLcR_3Xr9uSmlb37t4rUdwH5_uXTdlQk_3VmfNjd4gEe3jk713lVixiyEmGBNMekvGKW1XFw9UMNWDnPRz3Kdhn8QUVt3_uW8C8CwAOdpHL4CR0-f-1B-AERMoh1-fVX6lttWpd4ZNwWrrYCS33y9XStuWMDyC2gWgy-3Dv8H6KUKfzYEttw83ADvamm0A3EzR3MuPgJfbhzaBj-4-ccoLUCVw-Sy0owmoYgcMm4Cwt8HIXQQgJFy8BOXw3kXrWrb2RGUzdYqOPf4LTDtFxx69BOXwqzOFWe1dtUVTG1t6WNUdmNUJmMEEqmYH6vU5MO0OiPoWGPkrWnx8Hsrh1iVfWDBy7zURZkTkSbqQsRgv0JilC4yQfCFMYsbSECcxSQ-uyOgJMD8PjQ-gMQE0OoCmCmAo93oUZ1QQFiU6lyLFlFEqFcd5FmLMcpFCI2beN6CuNkAUGyDcTajcTVgxn-7S73fn_95Fv09RcOJbcM1P4Jf3fpCRFjJNCYmjFOcxi5TSOI0FDtM0SSKiMhZpqZRKFKEZpVTmWmtMskQJnSoWEk6pwiThkcxTGbEspmnCYyYjmbGY5iHhOlMq0kSlWSpDpmNFcpVQiYWKSZzkJMI61YlOY8YlTiimkUyySMZcakmF5ESmgucizpMsDBUNEw5eBuBrBCPZQasQtB5ByxC0BkFbI2hH3V1Z-NB392ThG04OZ3g4o25s68Emu2vrgSoRMLcBTnZbprrhb4Oo58fr2suxnTXG627MuOw2q330_Cwbwecn_oEVtdeLIpUwqkMu04gmIo5TlcVJnmcRz1meJOBNB8bPAfMBrJspurD0B1Rmik7-exw42wFf7IAw88CaV4C14zTMgC1DjmG9_G6gSrO-NmT1cn9g6uWG940FaTuo6mNQrwWbxT569SCqH_6yBUo8RIcFwnVQuQ4-Mj8jGBR3xldsi7au2Najby5VtRmadTaL8dWa1eqZ---ptdY6ee6s3_jiLTETZvDBNeXr86yUphx49OUZI6VyS9YJhX48568rfrnxy2caVzbV-ctvL50bVk55b2w5AWam6Pj-KRBmil68sXPwROmtT8C4Cbimg2HzlNfqJvjqiHuLwBVHnFcI2qYbu5AffSwMgkIdccY78E9xfoTHjs1OM9Nt-jswcAGw-jaUww5GroNR0QErNsA38-O6cg_f_C06KOBFMOaFQ1u8cDPd7PV0pEKBcZYmJMq0IhGVQscZzWXCcBQpqP10-f7x4r8AAAD__ws5idp7BQAA","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:32.895Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 21:49:55 GMT","end":"Fri, 26 Sep 2025 21:49:54 GMT"},"fingerprint":{"sha1":"38:55:0E:5D:7C:E7:08:BA:9A:77:8D:79:E7:3A:6B:27:F8:97:E4:89","sha256":"3A:54:48:30:C3:83:C3:F6:C2:3E:B3:7D:81:B3:37:9D:16:0C:B9:AE:C5:C3:56:8C:33:5D:AD:24:2B:B7:35:AF"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1RTS4sdRRSungku4kJ8RMHVXbgwkLlT1V39MgsxxpFgXiSRLHRTzzvl9O3qVHXfnplVSECyHMSF4Kbn3EkGYxDFx06QO-4iwlw3ziID4k9QAm5E7mRg4lmc8339dcF3iq8-3mz2UQQN27t8wa6bomCLcR_3Xr9uSmlb37t4rUdwH5_uXTdlQk_3VmfNjd4gEe3jk713lVixiyEmGBNMekvGKW1XFw9UMNWDnPRz3Kdhn8QUVt3_uW8C8CwAOdpHL4CR0-f-1B-AERMoh1-fVX6lttWpd4ZNwWrrYCS33y9XStuWMDyC2gWgy-3Dv8H6KUKfzYEttw83ADvamm0A3EzR3MuPgJfbhzaBj-4-ccoLUCVw-Sy0owmoYgcMm4Cwt8HIXQQgJFy8BOXw3kXrWrb2RGUzdYqOPf4LTDtFxx69BOXwqzOFWe1dtUVTG1t6WNUdmNUJmMEEqmYH6vU5MO0OiPoWGPkrWnx8Hsrh1iVfWDBy7zURZkTkSbqQsRgv0JilC4yQfCFMYsbSECcxSQ-uyOgJMD8PjQ-gMQE0OoCmCmAo93oUZ1QQFiU6lyLFlFEqFcd5FmLMcpFCI2beN6CuNkAUGyDcTajcTVgxn-7S73fn_95Fv09RcOJbcM1P4Jf3fpCRFjJNCYmjFOcxi5TSOI0FDtM0SSKiMhZpqZRKFKEZpVTmWmtMskQJnSoWEk6pwiThkcxTGbEspmnCYyYjmbGY5iHhOlMq0kSlWSpDpmNFcpVQiYWKSZzkJMI61YlOY8YlTiimkUyySMZcakmF5ESmgucizpMsDBUNEw5eBuBrBCPZQasQtB5ByxC0BkFbI2hH3V1Z-NB392ThG04OZ3g4o25s68Emu2vrgSoRMLcBTnZbprrhb4Oo58fr2suxnTXG627MuOw2q330_Cwbwecn_oEVtdeLIpUwqkMu04gmIo5TlcVJnmcRz1meJOBNB8bPAfMBrJspurD0B1Rmik7-exw42wFf7IAw88CaV4C14zTMgC1DjmG9_G6gSrO-NmT1cn9g6uWG940FaTuo6mNQrwWbxT569SCqH_6yBUo8RIcFwnVQuQ4-Mj8jGBR3xldsi7au2Najby5VtRmadTaL8dWa1eqZ---ptdY6ee6s3_jiLTETZvDBNeXr86yUphx49OUZI6VyS9YJhX48568rfrnxy2caVzbV-ctvL50bVk55b2w5AWam6Pj-KRBmil68sXPwROmtT8C4Cbimg2HzlNfqJvjqiHuLwBVHnFcI2qYbu5AffSwMgkIdccY78E9xfoTHjs1OM9Nt-jswcAGw-jaUww5GroNR0QErNsA38-O6cg_f_C06KOBFMOaFQ1u8cDPd7PV0pEKBcZYmJMq0IhGVQscZzWXCcBQpqP10-f7x4r8AAAD__ws5idp7BQAA HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.GSN40yDQqCPk3Sp_Ky3GV4ehy9hJLYxPoTUuW-eBxXc; uid_id2=c281c967-8a50-45a7-a119-265aa7206517:3:1; pdhtkv=true; uncs=1; pdhtkv23=true; uncs23=1; u_pl26940921=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 23 Aug 2025 18:37:32 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 2\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 4bdff5c331fe2b9f70d1e6e056a5c392\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T05:45:54.968102Z","times_seen":13318572,"resource_available":true,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-23","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/notifications/utility/default/us/blog/financeskipper/message_redcircle2/16/css/style.css","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:33.748Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Jul 2025 14:01:22 GMT","end":"Mon, 29 Sep 2025 14:59:36 GMT"},"fingerprint":{"sha1":"CD:76:E0:2A:28:09:08:24:2D:4C:A1:14:B2:AE:6C:39:A4:CC:2F:6B","sha256":"8B:98:84:C0:8D:47:7C:1B:A7:26:4B:E4:9E:6E:FD:8E:E1:6D:6E:41:1D:E7:91:B7:70:A3:C1:D0:C0:85:6B:31"}}},"request":{"raw":"GET /sb/notifications/utility/default/us/blog/financeskipper/message_redcircle2/16/css/style.css HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://genizymath.github.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 23 Aug 2025 18:37:33 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 19 Jan 2024 14:21:26 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"65aa8566-e50\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3kapvbou52p0TUdZ2qbMtbyb62Ev%2F34gqOL86yCSlmK1%2FEum9mXkWWAQel0JFE6uqLLm9TDcExhMEjrjQK69tn1Uw8HjWGIS0vXuSIs6SJM%3D\"}]}\r\ncf-ray: 973cb8cdfb450b9c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3664,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"da91945ede579f34a99cde40a98ce5a4","sha1":"cfbf9b6c295766437a906f7fd6f46a0302240c9a","sha256":"9b9d07bcd50263ebd848d3f60889a594727d925ee4488df503eac791023d57b1","sha512":"764d388d8e0d63feaf440cdb92de9ef3f1eb76152b4f1ac1ad0d1fc7b30c110f24628b0e0c34bf5a9cbb1918aa8dc2fc466386f07ec0fda75ea7ec1cf9befae4","ssdeep":"","tlshash":"3071ee961b372604b40bd49a2f652717132540078a4bed183fca774c8fc66a8c6e3bdf","first_seen":"2024-01-21T07:50:10Z","last_seen":"2026-04-02T10:27:56.661633Z","times_seen":384,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/notifications/utility/default/us/blog/financeskipper/message_redcircle2/16/js/script.js","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:33.966Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Jul 2025 14:01:22 GMT","end":"Mon, 29 Sep 2025 14:59:36 GMT"},"fingerprint":{"sha1":"CD:76:E0:2A:28:09:08:24:2D:4C:A1:14:B2:AE:6C:39:A4:CC:2F:6B","sha256":"8B:98:84:C0:8D:47:7C:1B:A7:26:4B:E4:9E:6E:FD:8E:E1:6D:6E:41:1D:E7:91:B7:70:A3:C1:D0:C0:85:6B:31"}}},"request":{"raw":"GET /sb/notifications/utility/default/us/blog/financeskipper/message_redcircle2/16/js/script.js HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://genizymath.github.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 23 Aug 2025 18:37:34 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Fri, 19 Jan 2024 14:21:26 GMT\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lhmPH7Q5%2BJiSIQPH91Lejd1996ERIDymcOiOHGqv8bJpgzjVsSPiwf%2B0SF7v14BsxS8DJME6XY0EGw6yDosQWyH%2Bn1UzRcWBDWmB77GO3Ys%3D\"}]}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 0\r\ncf-cache-status: HIT\r\netag: W/\"65aa8566-182\"\r\ncf-ray: 973cb8cf5be40b9c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":386,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"5ca8c1679ba9453cfa512e01d6fec9c5","sha1":"45628341eb20e4acee5e812d3b2dfc8f23962daf","sha256":"520a0196a18cbe656f7382a02ec828125e68bdac511b9ebe2bf27f31e262d037","sha512":"842e878cb264f7362266570b9a8e4b50187e8bedf2a499c0b8fe5e9fa2c563fa7577427039f58540b103c4da5197287373efc5f031ebd7ce17e5b34bbb8d11f7","ssdeep":"","tlshash":"86e02b386158513487f7d1a2619f27df2730469ed00a025e702c474f0ce1fa622c1d9b","first_seen":"2023-04-05T09:22:06Z","last_seen":"2026-04-04T05:52:30.476752Z","times_seen":2550,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rashcolonizeexpand.com/watch.570254004381.js?key=33e6a4f2bd7346c557e8569983b9a966\u0026kw=%5B%22play%22%2C%22rooftop%22%2C%22snipers%22%2C%22gn-math%22%2C%22unblocked%22%2C%22games%22%5D\u0026refer=https%3A%2F%2Fgenizymath.github.io%2Fgames%2Frooftop-snipers%2F\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=c281c967-8a50-45a7-a119-265aa7206517%3A3%3A1","fqdn":"rashcolonizeexpand.com","domain":"rashcolonizeexpand.com","tld":"com"},"ip":{"addr":"192.243.59.20","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:31.732Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rashcolonizeexpand.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 22:10:41 GMT","end":"Fri, 26 Sep 2025 22:10:40 GMT"},"fingerprint":{"sha1":"C7:75:50:5C:D3:7C:BF:A1:34:3E:61:33:FC:D6:81:21:2E:31:1D:92","sha256":"CB:A9:18:8B:DD:56:71:B4:C1:61:A7:9F:5C:50:7F:22:BB:83:72:BC:0F:B3:14:19:C4:E9:F9:59:6A:0F:95:EC"}}},"request":{"raw":"GET /watch.570254004381.js?key=33e6a4f2bd7346c557e8569983b9a966\u0026kw=%5B%22play%22%2C%22rooftop%22%2C%22snipers%22%2C%22gn-math%22%2C%22unblocked%22%2C%22games%22%5D\u0026refer=https%3A%2F%2Fgenizymath.github.io%2Fgames%2Frooftop-snipers%2F\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=c281c967-8a50-45a7-a119-265aa7206517%3A3%3A1 HTTP/1.1\r\nHost: rashcolonizeexpand.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://genizymath.github.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 307 Temporary Redirect\r\nServer: nginx/1.19.5\r\nDate: Sat, 23 Aug 2025 18:37:32 GMT\r\nContent-Type: text/html\r\nContent-Length: 0\r\nConnection: keep-alive\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nAccess-Control-Allow-Origin: https://genizymath.github.io\r\nAccess-Control-Allow-Credentials: true\r\nLocation: https://rashcolonizeexpand.com/watch.570254004381.js?dev=e\u0026key=33e6a4f2bd7346c557e8569983b9a966\u0026kw=%5B%22play%22%2C%22rooftop%22%2C%22snipers%22%2C%22gn-math%22%2C%22unblocked%22%2C%22games%22%5D\u0026pst=1755974312\u0026rb=\u0026refer=https%3A%2F%2Fgenizymath.github.io%2Fgames%2Frooftop-snipers%2F\u0026res=14.3095\u0026rmtc=t\u0026shu=b2afe069e040f022cf2a5c3ed26b942e1b80149c8eee226d595cb31629134d8ab9d5f2940a154b88c9dd8714f83ba398303a6cf77f5d8cf421b5e6451bb0760002bde20bb9211da75bf2c9ec33a3cb60c5aa58187b662df1247f\u0026tz=0\u0026uuid=c281c967-8a50-45a7-a119-265aa7206517%3A3%3A1\r\nSet-Cookie: ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.GSN40yDQqCPk3Sp_Ky3GV4ehy9hJLYxPoTUuW-eBxXc; expires=Sat, 23 Aug 2025 18:38:32 GMT; path=/; secure; SameSite=None\r\nHost: rashcolonizeexpand.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: e50b90d36c3d839a5490a76b8df7f402\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Nginx:1.19.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4862,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T05:45:54.968102Z","times_seen":13318572,"resource_available":true,"data":null}},"time_used":669,"timings":{"blocked":281,"dns":4,"connect":92,"send":0,"wait":102,"receive":0,"ssl":188},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-23","alert":"Sinkholed","trigger":"rashcolonizeexpand.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wayfarerorthodox.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.show-sb.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2Ffinanceskipper%2Fmessage_redcircle2%2F16%2Findex.html\u0026l=1545\u0026fd=134","fqdn":"wayfarerorthodox.com","domain":"wayfarerorthodox.com","tld":"com"},"ip":{"addr":"192.243.61.227","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:33.516Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"wayfarerorthodox.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Jul 2025 00:39:20 GMT","end":"Tue, 30 Sep 2025 00:39:19 GMT"},"fingerprint":{"sha1":"2F:53:8D:73:5E:CE:FB:91:B4:FD:2B:4E:F3:E9:80:AA:62:1A:61:CD","sha256":"C1:D4:30:78:23:7C:54:B2:69:C9:DF:D9:A9:CB:93:CF:63:1B:C9:46:05:84:47:B1:70:77:4E:B8:85:DE:85:B8"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.show-sb.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2Ffinanceskipper%2Fmessage_redcircle2%2F16%2Findex.html\u0026l=1545\u0026fd=134 HTTP/1.1\r\nHost: wayfarerorthodox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 23 Aug 2025 18:37:33 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: wayfarerorthodox.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T05:45:54.968102Z","times_seen":13318572,"resource_available":true,"data":null}},"time_used":652,"timings":{"blocked":280,"dns":1,"connect":91,"send":0,"wait":92,"receive":0,"ssl":186},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-23","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/notifications/utility/default/us/blog/financeskipper/message_redcircle2/16/css/animate.css","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:33.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Jul 2025 14:01:22 GMT","end":"Mon, 29 Sep 2025 14:59:36 GMT"},"fingerprint":{"sha1":"CD:76:E0:2A:28:09:08:24:2D:4C:A1:14:B2:AE:6C:39:A4:CC:2F:6B","sha256":"8B:98:84:C0:8D:47:7C:1B:A7:26:4B:E4:9E:6E:FD:8E:E1:6D:6E:41:1D:E7:91:B7:70:A3:C1:D0:C0:85:6B:31"}}},"request":{"raw":"GET /sb/notifications/utility/default/us/blog/financeskipper/message_redcircle2/16/css/animate.css HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://genizymath.github.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 23 Aug 2025 18:37:33 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 19 Jan 2024 14:21:26 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"65aa8566-13361\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lNb46VruOGtaf593kHQ8DJMRVHHxTpYOT4QsGWo0eAtT71%2Fu60gFRVNAzR09BfXKoK8jqD0QrgFoafyLwN43wF3v3S3OvR%2B%2FTWX60zWzUMM%3D\"}]}\r\ncf-ray: 973cb8cc8a6f0b9c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78689,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"3d4123dbfb33d27a5cfdfcfa91df6783","sha1":"e7d0eeeec54b848f0bc3da8685fa3bc88429d660","sha256":"cb7d1393b65701b2f97d8da244c2c6023e9cbc3463ecb0136b915cfc775c6887","sha512":"75c8a48dc207595e201b50b87ff68782112a21aded9f15f14185c07d40f0151d6afe74a2b278aa575caf12ac422e8166316296ed7b6573ea24e667cca4af51dd","ssdeep":"384:jvuAuF81dghu3ublZlX/m/Gu7uNUtrL4VrbZJgBhLYNKwZiMUL6Vpaj7F:jvuAu21dghu3uLu7uNKwZiMUL6Vpaj7F","tlshash":"22731bad399115845263861d83df9e68273ce5731826acef73c2488bcf8bf9867c9147","first_seen":"2024-01-20T06:37:31Z","last_seen":"2026-04-04T05:38:56.851953Z","times_seen":10530,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/notifications/utility/default/us/blog/financeskipper/message_redcircle2/16/css/animate.css","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:33.747Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Jul 2025 14:01:22 GMT","end":"Mon, 29 Sep 2025 14:59:36 GMT"},"fingerprint":{"sha1":"CD:76:E0:2A:28:09:08:24:2D:4C:A1:14:B2:AE:6C:39:A4:CC:2F:6B","sha256":"8B:98:84:C0:8D:47:7C:1B:A7:26:4B:E4:9E:6E:FD:8E:E1:6D:6E:41:1D:E7:91:B7:70:A3:C1:D0:C0:85:6B:31"}}},"request":{"raw":"GET /sb/notifications/utility/default/us/blog/financeskipper/message_redcircle2/16/css/animate.css HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://genizymath.github.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 23 Aug 2025 18:37:33 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 19 Jan 2024 14:21:26 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"65aa8566-13361\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7wLYuwS%2F08SRQEuj2JqOg3d3QPTTwokGRfC%2FQKmLsRz6MZM9JCaXKypimjMqsfTI0wNlHOFoFJRM4IhJIdCySwb2C0Boh4w8PvPBi2%2Fgg6w%3D\"}]}\r\ncf-ray: 973cb8cdfb430b9c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78689,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"3d4123dbfb33d27a5cfdfcfa91df6783","sha1":"e7d0eeeec54b848f0bc3da8685fa3bc88429d660","sha256":"cb7d1393b65701b2f97d8da244c2c6023e9cbc3463ecb0136b915cfc775c6887","sha512":"75c8a48dc207595e201b50b87ff68782112a21aded9f15f14185c07d40f0151d6afe74a2b278aa575caf12ac422e8166316296ed7b6573ea24e667cca4af51dd","ssdeep":"384:jvuAuF81dghu3ublZlX/m/Gu7uNUtrL4VrbZJgBhLYNKwZiMUL6Vpaj7F:jvuAu21dghu3uLu7uNKwZiMUL6Vpaj7F","tlshash":"22731bad399115845263861d83df9e68273ce5731826acef73c2488bcf8bf9867c9147","first_seen":"2024-01-20T06:37:31Z","last_seen":"2026-04-04T05:38:56.851953Z","times_seen":10530,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usefulspeak.com/89f8ffc8bcb270fe3019ac82af49b01a/invoke.js","fqdn":"usefulspeak.com","domain":"usefulspeak.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:30.940Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"usefulspeak.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Jul 2025 10:17:17 GMT","end":"Fri, 17 Oct 2025 10:17:16 GMT"},"fingerprint":{"sha1":"45:17:AD:B5:37:E3:46:A0:5F:98:AA:25:58:24:FF:14:28:9E:B8:27","sha256":"2D:E3:F0:06:D1:13:79:A6:88:54:6C:D5:A1:AF:C7:B4:03:72:F8:9C:01:4C:7B:FA:14:7C:59:78:43:59:46:3F"}}},"request":{"raw":"GET /89f8ffc8bcb270fe3019ac82af49b01a/invoke.js HTTP/1.1\r\nHost: usefulspeak.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 23 Aug 2025 18:37:31 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 11172\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 6\r\nHost: usefulspeak.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 16201ae8d0285ba78f03f1561944cecf\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31139,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (31137), with no line terminators","md5":"ac85de708c3cf1e18db3470027f3d21a","sha1":"c2ec8310beb4d3781d1a8cd2a729f4321104465f","sha256":"8ecdef0a2fb6ac2c0ba6cd521dc71aa6a07299796f541a4379044665f2d31482","sha512":"6670dd10d1666fa3eda8d86688962ea29c177450907de361a78ea480a93ba5c4a234bc548f729c5112779dccd809f83739efe84cdaa9229be957b646aa265d23","ssdeep":"768:5d2JfLHRgAJk/57cz0GGTmrpJEOlhPmyd:4LHRwaoKnd","tlshash":"72e2d7eb7f10b37c129b9473263f440ae3391c02f5c8c75dd976d6952a9c30b896a6e8","first_seen":"2025-08-23T18:38:03.435233Z","last_seen":"2025-08-23T18:38:03.435233Z","times_seen":1,"resource_available":true,"data":null}},"time_used":763,"timings":{"blocked":329,"dns":51,"connect":92,"send":0,"wait":101,"receive":0,"ssl":186},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-23","alert":"Sinkholed","trigger":"usefulspeak.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/watch.1434519058993.js?dev=e\u0026key=33e6a4f2bd7346c557e8569983b9a966\u0026kw=%5B%22play%22%2C%22rooftop%22%2C%22snipers%22%2C%22gn-math%22%2C%22unblocked%22%2C%22games%22%5D\u0026pst=1755974312\u0026rb=\u0026refer=https%3A%2F%2Fgenizymath.github.io%2Fgames%2Frooftop-snipers%2F\u0026res=14.3095\u0026rmtc=t\u0026shu=27a9e8e4c3dd10ec065219375e2d7f831dde33cf0f8f074d0cc1a97ea0e58862daaba6050f288952753b6577b9be785ea36ce03af78f84ab03604df5c6210175d32d54cd9957ddcd19161c2d1eb0061079e373804921ec3c327b\u0026tz=0\u0026uuid=dc25de18-8745-4801-bc70-20fba2f5938d%3A1%3A1","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"192.243.61.227","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:32.393Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 22:21:33 GMT","end":"Fri, 26 Sep 2025 22:21:32 GMT"},"fingerprint":{"sha1":"4A:6A:48:C8:5B:C5:2B:2E:9C:03:AF:BF:4C:E6:10:23:E2:7B:EA:97","sha256":"A8:42:B5:4A:20:C8:13:EF:B5:90:0F:54:37:F7:05:60:8D:91:07:E3:A4:0F:7A:22:C9:AF:F1:F5:22:E8:68:C9"}}},"request":{"raw":"GET /watch.1434519058993.js?dev=e\u0026key=33e6a4f2bd7346c557e8569983b9a966\u0026kw=%5B%22play%22%2C%22rooftop%22%2C%22snipers%22%2C%22gn-math%22%2C%22unblocked%22%2C%22games%22%5D\u0026pst=1755974312\u0026rb=\u0026refer=https%3A%2F%2Fgenizymath.github.io%2Fgames%2Frooftop-snipers%2F\u0026res=14.3095\u0026rmtc=t\u0026shu=27a9e8e4c3dd10ec065219375e2d7f831dde33cf0f8f074d0cc1a97ea0e58862daaba6050f288952753b6577b9be785ea36ce03af78f84ab03604df5c6210175d32d54cd9957ddcd19161c2d1eb0061079e373804921ec3c327b\u0026tz=0\u0026uuid=dc25de18-8745-4801-bc70-20fba2f5938d%3A1%3A1 HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://genizymath.github.io\r\nReferer: https://genizymath.github.io/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.GSN40yDQqCPk3Sp_Ky3GV4ehy9hJLYxPoTUuW-eBxXc\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 23 Aug 2025 18:37:32 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nAccess-Control-Allow-Origin: https://genizymath.github.io\r\nAccess-Control-Allow-Credentials: true\r\nSet-Cookie: uid_id2=dc25de18-8745-4801-bc70-20fba2f5938d:1:1; expires=Sat, 30 Aug 2025 18:37:32 GMT; path=/; secure; SameSite=None\npdhtkv=true; expires=Sun, 24 Aug 2025 18:37:32 GMT; path=/; secure; SameSite=None\nuncs=1; expires=Sun, 24 Aug 2025 18:37:32 GMT; path=/; secure; SameSite=None\npdhtkv23=true; expires=Sun, 24 Aug 2025 18:37:32 GMT; path=/; secure; SameSite=None\nuncs23=1; expires=Sun, 24 Aug 2025 18:37:32 GMT; path=/; secure; SameSite=None\nu_pl26940921=1; expires=Sun, 24 Aug 2025 18:37:32 GMT; path=/; secure; SameSite=None\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: c50ec14baf7fd3782cd0b48cd1a46a1c\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4852,"size_decoded":0,"mime_type":"text/html","magic":"JavaScript source, ASCII text, with very long lines (3976)","md5":"ca8bac572d24d211b9639cdfd537f247","sha1":"509caf888c20c512e7841207803f50c4412f263f","sha256":"8e62ce8591724c61a5b3223ce46d39e9397a7638e2a54f42bcb61e4386ea3e10","sha512":"41ba16e71a09ca365d4567dea834e7faae28bcf1bafd9c794a72f18c23edfd4374d94dbada06e9c866f8756f147b8f53734a45ac82de0898b916618680f874c9","ssdeep":"96:vozXpCsMB86xnkWz6js4ipq9xyFUTPDuahbLg4cT1xFI71/D2CfMEDaH:wzbMBrkG6YVcTTTbs4cTQb2CkCaH","tlshash":"1da13a287c5679354423b1be11bbba1e3ca0f20f660cce80f48cd5095f69a654f99de9","first_seen":"2025-08-23T18:38:03.437248Z","last_seen":"2025-08-23T18:38:03.437248Z","times_seen":1,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-23","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"genizymath.github.io/images/favicon.png","fqdn":"genizymath.github.io","domain":"genizymath.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:32.565Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 07 Mar 2025 00:00:00 GMT","end":"Sat, 07 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8C:FF:59:E5:8E:C4:FA:76:FE:AF:2D:C5:C0:D4:13:6A:77:2D:F9:91","sha256":"7D:11:22:EA:96:98:52:34:1E:8D:D9:2B:CC:0C:7E:CC:00:96:30:D1:4D:A7:34:D7:CA:42:D5:B5:4A:2B:20:97"}}},"request":{"raw":"GET /images/favicon.png HTTP/1.1\r\nHost: genizymath.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/games/rooftop-snipers/\r\nCookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=c281c967-8a50-45a7-a119-265aa7206517%3A3%3A1; m5a4xojbcp2nx3gptmm633qal3gzmadn=prefacebegbeginning.com; pp_main_cc2699d51b73e1eb5f9d2126b08c131a=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: image/png\r\nlast-modified: Sat, 23 Aug 2025 18:36:52 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: \"68aa0a44-62cf\"\r\nexpires: Sat, 23 Aug 2025 18:47:32 GMT\r\ncache-control: max-age=600\r\nx-proxy-cache: MISS\r\nx-github-request-id: 6736:268739:3650153:3689532:68AA0A6B\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sat, 23 Aug 2025 18:37:32 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1755974253.571066,VS0,VE141\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 247ce6fa74353b85ec9616ed5629e81a1cf7fddc\r\ncontent-length: 25295\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":25295,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGBA, non-interlaced","md5":"72aa4990bc6a836b9899c64a10b2042d","sha1":"cb4b7a6793366440997dbada67b706013d610267","sha256":"8671155b22c5b72692cfccc26c51fe671c0f1fdd89a3ba09a8a84b54d8cd9041","sha512":"663d9e53798f92151beffc86c961b730952ac11607d095f909ca180c916da34a42445f46aac9b69f11131f9319f5e4a59c2bb7dc949f20dc9d5021db4020b751","ssdeep":"192:sF32J55555555555555s1Dv3i3O613i3O613i3O613i3O6fffffffffffffffffK:sI55555555555555s1yEEEXy","tlshash":"deb263a6e309d9777ac96588b049810f46898e3b3f1ace5295cb750f131bff52c3ac52","first_seen":"2025-08-23T15:42:19.270228Z","last_seen":"2026-03-23T14:13:21.528376Z","times_seen":14,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flushpersist.com/pxf.gif?uuid=c281c967-8a50-45a7-a119-265aa7206517\u0026eb=bff3d6bf6d16c0bb5e58232c1a99ef63\u0026te=fe015aeda515c30449c87b1701cc307f\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=f0b511a8c19914e652dfaaae77a5ac81\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=18","fqdn":"flushpersist.com","domain":"flushpersist.com","tld":"com"},"ip":{"addr":"192.243.61.227","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:32.869Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"flushpersist.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 01 Jul 2025 15:12:33 GMT","end":"Mon, 29 Sep 2025 15:12:32 GMT"},"fingerprint":{"sha1":"9E:08:20:A0:75:ED:21:51:E0:3D:DE:29:CD:B0:11:01:4D:04:77:0A","sha256":"FB:D4:A2:1D:0F:F1:FB:A8:D9:5E:88:03:1F:BB:94:D2:32:5C:CC:49:11:11:FC:04:7B:C6:43:40:CF:1E:A2:BA"}}},"request":{"raw":"GET /pxf.gif?uuid=c281c967-8a50-45a7-a119-265aa7206517\u0026eb=bff3d6bf6d16c0bb5e58232c1a99ef63\u0026te=fe015aeda515c30449c87b1701cc307f\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=f0b511a8c19914e652dfaaae77a5ac81\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=18 HTTP/1.1\r\nHost: flushpersist.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 23 Aug 2025 18:37:33 GMT\r\nContent-Type: image/gif\r\nContent-Length: 1\r\nConnection: keep-alive\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nHost: flushpersist.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 5f2eb13c73d6b9ad20fa48a7e76f6c10\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T05:45:54.968102Z","times_seen":13318572,"resource_available":true,"data":null}},"time_used":654,"timings":{"blocked":277,"dns":1,"connect":92,"send":0,"wait":94,"receive":0,"ssl":188},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/chat/mob/ssp/1/css/animate.css","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:33.267Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Jul 2025 14:01:22 GMT","end":"Mon, 29 Sep 2025 14:59:36 GMT"},"fingerprint":{"sha1":"CD:76:E0:2A:28:09:08:24:2D:4C:A1:14:B2:AE:6C:39:A4:CC:2F:6B","sha256":"8B:98:84:C0:8D:47:7C:1B:A7:26:4B:E4:9E:6E:FD:8E:E1:6D:6E:41:1D:E7:91:B7:70:A3:C1:D0:C0:85:6B:31"}}},"request":{"raw":"GET /sb/chat/mob/ssp/1/css/animate.css HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://genizymath.github.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 23 Aug 2025 18:37:33 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Sat, 07 May 2022 03:21:31 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6275e5bb-135d1\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: gzip\r\nage: 10548\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=31wa1u2q%2F%2FgaMqyy4EPnDG%2FnPD%2B0yVs53ntfMHfLjFwKxt3%2Bjzmv7zTZYdvs1UIJ6JRKWzaRYS%2BUxrFO2BUODaNlwxA3EpUMd8bYCiQ%2FcaE%3D\"}]}\r\ncf-ray: 973cb8cb0e175cf6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":79313,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"fc638645a938f69e69360c75335ffd1a","sha1":"143132fb8361c3ad0acf88cb70bf0b07c0ecc2d4","sha256":"7ef76aab275d0221c68602d18f81b4285b280756f0f71d535ed8b5b889bc2f90","sha512":"53aa35f68eede2f65b272821573513db8d2505a051c8af7fbf2350eee39d0103b8536740f5c0815dd4004bd82f7493276ad362f6f87715e281cbb1dd6297fa34","ssdeep":"384:ZNFu8uVWgnu5uLlFlH/O/Qu7u/sjzbg/jxXlIPfL4jKgZQMkL0Vvaj7Z:ZNFu8uEgnu5uBu7uhKgZQMkL0Vvaj7Z","tlshash":"27731fad2991148456638a1d83df8e68673ce573181a9cef73c2488bcf8bf9c67c9147","first_seen":"2023-04-05T09:47:15Z","last_seen":"2026-01-17T18:50:06.222826Z","times_seen":1884,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":15,"dns":6,"connect":10,"send":0,"wait":20,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/cti/ec/e1/69/ece169cc626c31c9334e291868315b15/1753955343.jpg","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:32.910Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Jul 2025 02:33:11 GMT","end":"Wed, 08 Oct 2025 02:33:10 GMT"},"fingerprint":{"sha1":"06:D8:07:0F:AB:BF:D8:7F:C5:38:82:AC:A7:8A:20:4D:83:6C:EA:C9","sha256":"CF:05:58:46:C3:07:3F:B6:A6:8D:42:F2:3B:3D:91:36:93:10:CB:D5:89:47:A3:62:26:D2:F3:BA:AC:51:0E:B7"}}},"request":{"raw":"GET /cti/ec/e1/69/ece169cc626c31c9334e291868315b15/1753955343.jpg HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 23 Aug 2025 18:37:32 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 35973\r\nserver: nginx/1.21.6\r\nlast-modified: Thu, 31 Jul 2025 09:49:03 GMT\r\netag: \"688b3c0f-8c85\"\r\nexpires: Mon, 25 Aug 2025 18:37:32 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: ah0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":35973,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 26.3 (Macintosh), datetime=2025:07:29 14:23:41], progressive, precision 8, 728x90, components 3","md5":"67f0b1af81edea3676affe1cdc803565","sha1":"e8018bd4ef7fd40433393e72c0e2902bbbc6ccff","sha256":"80a3f10cd98ed6796f8a23c6d67423f97b42e8fe803d973cc568634594221c61","sha512":"10e142a700629bf34c1f6de19cb4bb9fc015401f3c78240eb9da0e2f5d9f89d4ecc4bb838f68158a4b29555fd8d9773e833958ad169770b8a20d7adf86a2b183","ssdeep":"768:JUgi34UrOpEkYyqsrzt0IUEWdVExW2/NgF/y:JO4sOpEkewt0SIExW2/Ngc","tlshash":"dff2cf15bb69ad10f4c686bcc651d39fa310ee68e6b3a646b88c71413f306e1adcc357","first_seen":"2025-07-31T23:25:06.907005Z","last_seen":"2025-09-02T16:44:03.396613Z","times_seen":157,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":21,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wayfarerorthodox.com/ren.gif?sid=H4sIAAAAAAAC_1RSz4scRRSu3g0IESKKPyAgDOLBgDvb3dM9M20OwRhXgkl2TSJ78FTdVT1TbndXW1U9PTsXFxckx8nNg4feb3azGIMoehVl1ossCBlPe8iC-A-IYvAkMrsjo-_w3vv66wff--p9vFMckwYKerR2XQ5EktBlv27XXlkXGZOlrt24XXPsun2xti6ypnex1p8m1XvNaXh1-0LtLR5tyGXXdmzbsZ3ailA8lv3lExYifxA49cCue27d8T301f-xLixoaoH1jskzEGzy1K_xexDRGFn65RWuN4zMX30zLRJqpEKP7b-bbWSyzJDO21hZiLP92d-QekLIJwuQ2f5sA8je7nQDhGJCFp5_hDDbn8lE2Ns7VRom4BlC9iTK3hg8GUPQMSK5DcEeEiBiuLGKLL13Q6qSbp6ydMpOyJnHf0CUE3Lm0bPI0i8uJ6JfuyWTwgiZafTjCqI_huiMkRcHMIMFiPIAkfkIgv1Elh9fQ5burupEQrCjlyO37URBs7XUpr695Pm0tUQdJ1hymz6lLddu-k7rxCIRj0H1IgptoRAWithCkVtI2VHNs9te5NBGMw5Y1LI96nmMh3bQdm2bBlELRTTVPoTJh4iSISK1hVxtYUPcnRDrua-hiu-huxU0W4Q2E2K98yF6rELJCUpNUFKCUhCUhqDsVXss0a6u7rFEF6Ezq-6sNqqRNJ0duidNh2cEVA2hWLUr8g_0NiKzOBrEmo3kNNHQVCMasmonPyZPT_21Pv39JWzwo1psh77j0HbkBIHj8abvsphSylst6tOo7UCLCkIvgGoLAzEh11d-QS4m5MLfZxHSA-jkAJFYBC1eBC0r0G6FQfZNh2disJlS0613hOkWYV1IMFkhN2dgNq2d5JicP3np-l-XwKNDMgtEqkKuKrwvfiDoJHdGN2VJdm_KUpOvVnMjUjGg0yu4Zajh1v23-WYpFbt6RQ8_ez2aEtP2wW2uzTWaMZF1NPn8smCMqxWpIk6-varXebhW6O7lQmVFfm3tjZWraa641kJmY1Dx8Nw5RGJCnvjxz5P7fuH4PIQaQxUV0uI_SvMt6HyOtSRQyRyHuYWyqEbKDecfE0GQ8DmmYQXND7_77d-heT9SdDpNRbWj76CjLFCzjSyt0FMVekkFmgyhi8WRydXhpZ8bJ4EwsUZhoqzdMFHJ3VODtTiq-W7YaLbbTR43WdxgDbfBAt_mgUeDphd4PoyedO-fTf8JAAD__xAV-SS9BAAA","fqdn":"wayfarerorthodox.com","domain":"wayfarerorthodox.com","tld":"com"},"ip":{"addr":"192.243.61.227","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:33.816Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"wayfarerorthodox.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Jul 2025 00:39:20 GMT","end":"Tue, 30 Sep 2025 00:39:19 GMT"},"fingerprint":{"sha1":"2F:53:8D:73:5E:CE:FB:91:B4:FD:2B:4E:F3:E9:80:AA:62:1A:61:CD","sha256":"C1:D4:30:78:23:7C:54:B2:69:C9:DF:D9:A9:CB:93:CF:63:1B:C9:46:05:84:47:B1:70:77:4E:B8:85:DE:85:B8"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_1RSz4scRRSu3g0IESKKPyAgDOLBgDvb3dM9M20OwRhXgkl2TSJ78FTdVT1TbndXW1U9PTsXFxckx8nNg4feb3azGIMoehVl1ossCBlPe8iC-A-IYvAkMrsjo-_w3vv66wff--p9vFMckwYKerR2XQ5EktBlv27XXlkXGZOlrt24XXPsun2xti6ypnex1p8m1XvNaXh1-0LtLR5tyGXXdmzbsZ3ailA8lv3lExYifxA49cCue27d8T301f-xLixoaoH1jskzEGzy1K_xexDRGFn65RWuN4zMX30zLRJqpEKP7b-bbWSyzJDO21hZiLP92d-QekLIJwuQ2f5sA8je7nQDhGJCFp5_hDDbn8lE2Ns7VRom4BlC9iTK3hg8GUPQMSK5DcEeEiBiuLGKLL13Q6qSbp6ydMpOyJnHf0CUE3Lm0bPI0i8uJ6JfuyWTwgiZafTjCqI_huiMkRcHMIMFiPIAkfkIgv1Elh9fQ5burupEQrCjlyO37URBs7XUpr695Pm0tUQdJ1hymz6lLddu-k7rxCIRj0H1IgptoRAWithCkVtI2VHNs9te5NBGMw5Y1LI96nmMh3bQdm2bBlELRTTVPoTJh4iSISK1hVxtYUPcnRDrua-hiu-huxU0W4Q2E2K98yF6rELJCUpNUFKCUhCUhqDsVXss0a6u7rFEF6Ezq-6sNqqRNJ0duidNh2cEVA2hWLUr8g_0NiKzOBrEmo3kNNHQVCMasmonPyZPT_21Pv39JWzwo1psh77j0HbkBIHj8abvsphSylst6tOo7UCLCkIvgGoLAzEh11d-QS4m5MLfZxHSA-jkAJFYBC1eBC0r0G6FQfZNh2disJlS0613hOkWYV1IMFkhN2dgNq2d5JicP3np-l-XwKNDMgtEqkKuKrwvfiDoJHdGN2VJdm_KUpOvVnMjUjGg0yu4Zajh1v23-WYpFbt6RQ8_ez2aEtP2wW2uzTWaMZF1NPn8smCMqxWpIk6-varXebhW6O7lQmVFfm3tjZWraa641kJmY1Dx8Nw5RGJCnvjxz5P7fuH4PIQaQxUV0uI_SvMt6HyOtSRQyRyHuYWyqEbKDecfE0GQ8DmmYQXND7_77d-heT9SdDpNRbWj76CjLFCzjSyt0FMVekkFmgyhi8WRydXhpZ8bJ4EwsUZhoqzdMFHJ3VODtTiq-W7YaLbbTR43WdxgDbfBAt_mgUeDphd4PoyedO-fTf8JAAD__xAV-SS9BAAA HTTP/1.1\r\nHost: wayfarerorthodox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/\r\nCookie: uid_id2=c281c967-8a50-45a7-a119-265aa7206517:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl27062818=1; slecf0b511a8c19914e652dfaaae77a5ac81=[3078207]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 23 Aug 2025 18:37:33 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nVary: Origin\r\nAccess-Control-Allow-Credentials: true\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nHost: wayfarerorthodox.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: cedea42973499422b294236f16b03be9\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T05:45:54.968102Z","times_seen":13318572,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-23","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wayfarerorthodox.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2Ffinanceskipper%2Fmessage_redcircle2%2F16%2Fcss%2Fstyle.css\u0026l=3664\u0026fd=135","fqdn":"wayfarerorthodox.com","domain":"wayfarerorthodox.com","tld":"com"},"ip":{"addr":"192.243.61.227","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:34.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"wayfarerorthodox.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Jul 2025 00:39:20 GMT","end":"Tue, 30 Sep 2025 00:39:19 GMT"},"fingerprint":{"sha1":"2F:53:8D:73:5E:CE:FB:91:B4:FD:2B:4E:F3:E9:80:AA:62:1A:61:CD","sha256":"C1:D4:30:78:23:7C:54:B2:69:C9:DF:D9:A9:CB:93:CF:63:1B:C9:46:05:84:47:B1:70:77:4E:B8:85:DE:85:B8"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2Ffinanceskipper%2Fmessage_redcircle2%2F16%2Fcss%2Fstyle.css\u0026l=3664\u0026fd=135 HTTP/1.1\r\nHost: wayfarerorthodox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/\r\nCookie: uid_id2=c281c967-8a50-45a7-a119-265aa7206517:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl27062818=1; slecf0b511a8c19914e652dfaaae77a5ac81=[3078207]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 23 Aug 2025 18:37:34 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: wayfarerorthodox.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T05:45:54.968102Z","times_seen":13318572,"resource_available":true,"data":null}},"time_used":357,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":357,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-23","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"professionaltrafficmonitor.com/stats","fqdn":"professionaltrafficmonitor.com","domain":"professionaltrafficmonitor.com","tld":"com"},"ip":{"addr":"18.198.116.222","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:31.443Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"protrafficinspector.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 01 Jul 2025 00:00:00 GMT","end":"Thu, 30 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:D5:8D:EB:A4:50:13:0D:7C:33:71:82:B8:02:49:4F:D6:31:B6:E6","sha256":"49:03:4C:2C:1B:23:D8:D6:CB:AE:F0:54:61:99:C2:20:F4:FF:87:5E:0B:72:B1:6B:D8:AB:21:49:2D:F2:EC:4A"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: professionaltrafficmonitor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://genizymath.github.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 23 Aug 2025 18:37:31 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\nserver: fasthttp\r\naccess-control-allow-origin: https://genizymath.github.io\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nset-cookie: uid_id2=7202da9e-70ba-4d48-b194-241439e7b569:2:1; expires=Tue, 21 Aug 2035 18:37:31 GMT; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"09b28a31220a5c35f4e861a1d725f8c2","sha1":"68d46e62e29f5f4968858596163928789d4cebbe","sha256":"e226e4363827040d415f92219dfde3fcfe35fd00d9201785981ca9c6a18d6e4c","sha512":"625796f2902e3f7fa8264183fe01793f5dacf40ac391eeb0aa6268143f20f8e55f1d3821d92bfb30d93546812e6b77cb124757dafa7173595ea14bae322ef27c","ssdeep":"","tlshash":"19900405f401150344710043540030ddf110403f001d154d55cfd35dc41173d441013c","first_seen":"2025-08-23T18:38:03.440934Z","last_seen":"2025-08-23T18:38:03.440934Z","times_seen":1,"resource_available":false,"data":null}},"time_used":287,"timings":{"blocked":130,"dns":12,"connect":21,"send":0,"wait":22,"receive":0,"ssl":99},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/cti/17/16/91/171691404d5156acb756219b39758406/1753377874.jpg","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:32.888Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Jul 2025 02:33:11 GMT","end":"Wed, 08 Oct 2025 02:33:10 GMT"},"fingerprint":{"sha1":"06:D8:07:0F:AB:BF:D8:7F:C5:38:82:AC:A7:8A:20:4D:83:6C:EA:C9","sha256":"CF:05:58:46:C3:07:3F:B6:A6:8D:42:F2:3B:3D:91:36:93:10:CB:D5:89:47:A3:62:26:D2:F3:BA:AC:51:0E:B7"}}},"request":{"raw":"GET /cti/17/16/91/171691404d5156acb756219b39758406/1753377874.jpg HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 23 Aug 2025 18:37:32 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 49606\r\nserver: nginx/1.21.6\r\nlast-modified: Thu, 24 Jul 2025 17:24:35 GMT\r\netag: \"68826c53-c1c6\"\r\nexpires: Mon, 25 Aug 2025 18:37:32 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: ah0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":49606,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 26.3 (Macintosh), datetime=2025:07:23 17:39:38], progressive, precision 8, 728x90, components 3","md5":"ff3335c5adb88bebb94657587844d223","sha1":"fbebac2f40ae0a4ffada2bf1ce427ce66ca61c2e","sha256":"13a1b9e7465c06d2cc1c968fb08df202c6cdcb2d91a9212083a732d0215da3a2","sha512":"fc021783fb6474ac8cd490388610fcdb5a4f0e8adce037d14a4428cca9bd08a8493a7e89ece79bded32ef04aa20c2bb3c696583c2723883305699872937c4fd2","ssdeep":"1536:caYaMlz/TqSqLjUb2HEy8nQwJrflJYueP:ZlK6PE2HEy8nQw5flvg","tlshash":"4623f179af524e52f0d1cd3459a1cbe327307d489ae392d27c8c2e4abf713499cae125","first_seen":"2025-07-30T01:32:47.000935Z","last_seen":"2025-08-31T17:13:21.91077Z","times_seen":133,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/chat/mob/ssp/1/css/style.css","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:33.266Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Jul 2025 14:01:22 GMT","end":"Mon, 29 Sep 2025 14:59:36 GMT"},"fingerprint":{"sha1":"CD:76:E0:2A:28:09:08:24:2D:4C:A1:14:B2:AE:6C:39:A4:CC:2F:6B","sha256":"8B:98:84:C0:8D:47:7C:1B:A7:26:4B:E4:9E:6E:FD:8E:E1:6D:6E:41:1D:E7:91:B7:70:A3:C1:D0:C0:85:6B:31"}}},"request":{"raw":"GET /sb/chat/mob/ssp/1/css/style.css HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://genizymath.github.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 23 Aug 2025 18:37:33 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Mon, 21 Feb 2022 08:25:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"62134c60-1209\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: gzip\r\nage: 10548\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hs86D8SRMD%2FTk%2FhK1OFF5K2w0ECwwmUxF1hKDl6o%2BPfAJctDoXlKXxVfwvNp8A89FBiEJSyMuwMnSKX29YnwqCStKdyG%2BBbpsxBql03P6KY%3D\"}]}\r\ncf-ray: 973cb8cb0dfe5cf6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4617,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"630f303dfe147dec2c4a226287393b69","sha1":"3e9f8270b84e09595181bd55de6785a89f53ba10","sha256":"967d085a33a12064d83cb38f582c3e418e021a2d523dd9597bb75dc00589fec7","sha512":"aa41feb60ccd79d5e3499f58fcdee9d8b14312a885901990af21f8b15cc21e84e57edf843c9dc69e8146b7151c4d010d0c2d2b4cf8dd46a312266bf73d88359d","ssdeep":"96:ynjK1CQxCqyjG+6VE1VOCXYAX5yIvcMpzsFuTOKoMGMp9h815/SgarZnA3AG5Nbd:QjK1C1qiG+6VE1VOib5yIvdpzsFuTOK+","tlshash":"a491eea202e70a40ea0bd5631bec4b027b7504c32e0ace59badd194c9fc197893d39b2","first_seen":"2023-05-18T19:42:30Z","last_seen":"2026-01-17T18:50:06.19479Z","times_seen":1110,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":14,"dns":5,"connect":8,"send":0,"wait":18,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/genizy/assets@main/rooftop-snipers/Build/rooftop-snipers.json","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://genizymath.github.io/iframe/283.html","date":"2025-08-23T18:37:32.371Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /gh/genizy/assets@main/rooftop-snipers/Build/rooftop-snipers.json HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://genizymath.github.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 164\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/json; charset=utf-8\r\nx-jsd-version: main\r\nx-jsd-version-type: branch\r\netag: W/\"12c-pb8oOmyAWGDsLSXFAP9Her4k99g\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 6055\r\ndate: Sat, 23 Aug 2025 18:37:32 GMT\r\nx-served-by: cache-fra-eddf8230161-FRA, cache-hel1410032-HEL\r\nx-cache: HIT, MISS\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":300,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"4f39a009ceaa55204a098ed34b6b9d2c","sha1":"a5bf283a6c805860ec2d25c500ff477abe24f7d8","sha256":"ca6ea795ea2f06abd2bdd4b3bfc0d7f36efbbc15de697c77cf734f3d7a9381f2","sha512":"f10ca8d06df0287fa32e1e2c819a1f50fbd6b0b57cf15dda7e3c85dd0a44f2ba367a388e13b1176cb4d311d28baf7eca3505cd26bed5247b7778960a9a05fca2","ssdeep":"","tlshash":"8ae0c2e8ec9e8dab137141c8591fb388111f5842dd18ca4c83ac582ee0f4cec08e7a6c","first_seen":"2025-08-23T18:38:03.445432Z","last_seen":"2025-08-23T18:38:03.445432Z","times_seen":1,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"torchfriendlypay.com/ren.gif?sid=H4sIAAAAAAAC_1RSz2skRRSuThaEFVYUf8CCMAcPLphJd0_3zLR7WIxrJJhN4u5KDp6qu2pmynR3tVXV05O5GAzIHmc9ebPzTbLBdRFFr6JMvCwBYcdTDhsQ_wFBXDyJTDIy-g7vva-_fvC9r94ne_kpqSGnJxs3ZF_EMV30q3bl1U2RMlnoytrtimNX7auVTZHWvauV3iSp7utOzavaVypv82hLLrq2Y9uO7VSWheIt2Vs8YyGyB4FTDeyq51Yd30NP_R_r3IKmFlj3lDwHwcbP_NZ6HyIaIU2-vs71lpHZa28leUyNVOiyw_fSrVQWKZJZ21IWWunh9G9IPSbksznI9HC6AWR3f7IBQjEmcy8-RpgeTmUi7B6cKw1j8BQhexpFdwQejyDoCJHchWCPCBAxrK0jTe6tSVXQ7XOWTtgxufDkD4hiTC48fh5p8tVSLHqVWzLOjZCpRq9VQvRGEO0RsvwIpj8HURwhMh9DsJ_J4pNVpMn-uo4lBDt5JXKbThTUGwtN6tsLnk8bC9RxggW37lPacO267zTOLBKtEaieR64t5MJC3rKQZxYSdlLx7KYXObRWbwUsatge9TzGQztourZNg6iBPJpoH8BkA0TxAJHaQaZ2sCXujon1wrdQ-Y_QnRKazUObMbHe_QhdVqLgBIUmKChBIQgKQ1B0ywMWa1eX91is89CZVndaa-VQmvYePZCmzVMCqgZQrNwX2Yd6F5GZH_Zbmg3lJNHQlEMasnIvOyXPTvy1Pn_4Kbb4SaXh2LVa5DCXMeY3nDDwHR4w3vQY8z1uc2hRQug5UG2hL8bkxvKvyMSYXPn7IkJ6BB0fIRLzoPnLoEUJ2inRT79r81T0txNqOtW2MJ08rAoJJktk5gLMtrUXn5LLZy9d_esaeHRMpoFIlchUiQ_ETwTt-M7wpizI_k1ZaPLNemZEIvp0cgW3DDXcuv8O3y6kYivX9eCLN6IJMWkf3ObarNKUibStyZdLgjGulqWKOPl-RW_ycCPXnaVcpXm2uvHm8kqSKa61kOkIVDy6dAmRGJOnHv55dt8vnV6GUCOovESS_0dptgOdzbCWBCqe4TCzUOTlULnh7GMsCGI-wzQsofnxD7__OzTrh4pOpqko9_QdtJUFanaRJiW6qkQ3LkHjAXQ-PzSZOr72S-0sEMbWMIyVtR_GKr57brAWJxXfDWv1ZrPOW3XWqrGaW2OBb_PAo0HdCzwfRo879y8m_wQAAP__uNqQGr0EAAA=","fqdn":"torchfriendlypay.com","domain":"torchfriendlypay.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://genizymath.github.io/games/rooftop-snipers/","date":"2025-08-23T18:37:33.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"torchfriendlypay.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 22:31:57 GMT","end":"Fri, 26 Sep 2025 22:31:56 GMT"},"fingerprint":{"sha1":"C1:1A:8F:9D:C9:3D:22:4D:0E:AA:D9:B9:1C:98:E3:DC:41:83:82:4F","sha256":"B2:2E:9D:A4:0D:D7:A4:C2:A4:C1:7F:A9:E3:2A:AF:DE:7B:7F:BF:6A:1D:DC:6A:9C:AB:BF:98:D7:C2:A6:40:2E"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_1RSz2skRRSuThaEFVYUf8CCMAcPLphJd0_3zLR7WIxrJJhN4u5KDp6qu2pmynR3tVXV05O5GAzIHmc9ebPzTbLBdRFFr6JMvCwBYcdTDhsQ_wFBXDyJTDIy-g7vva-_fvC9r94ne_kpqSGnJxs3ZF_EMV30q3bl1U2RMlnoytrtimNX7auVTZHWvauV3iSp7utOzavaVypv82hLLrq2Y9uO7VSWheIt2Vs8YyGyB4FTDeyq51Yd30NP_R_r3IKmFlj3lDwHwcbP_NZ6HyIaIU2-vs71lpHZa28leUyNVOiyw_fSrVQWKZJZ21IWWunh9G9IPSbksznI9HC6AWR3f7IBQjEmcy8-RpgeTmUi7B6cKw1j8BQhexpFdwQejyDoCJHchWCPCBAxrK0jTe6tSVXQ7XOWTtgxufDkD4hiTC48fh5p8tVSLHqVWzLOjZCpRq9VQvRGEO0RsvwIpj8HURwhMh9DsJ_J4pNVpMn-uo4lBDt5JXKbThTUGwtN6tsLnk8bC9RxggW37lPacO267zTOLBKtEaieR64t5MJC3rKQZxYSdlLx7KYXObRWbwUsatge9TzGQztourZNg6iBPJpoH8BkA0TxAJHaQaZ2sCXujon1wrdQ-Y_QnRKazUObMbHe_QhdVqLgBIUmKChBIQgKQ1B0ywMWa1eX91is89CZVndaa-VQmvYePZCmzVMCqgZQrNwX2Yd6F5GZH_Zbmg3lJNHQlEMasnIvOyXPTvy1Pn_4Kbb4SaXh2LVa5DCXMeY3nDDwHR4w3vQY8z1uc2hRQug5UG2hL8bkxvKvyMSYXPn7IkJ6BB0fIRLzoPnLoEUJ2inRT79r81T0txNqOtW2MJ08rAoJJktk5gLMtrUXn5LLZy9d_esaeHRMpoFIlchUiQ_ETwTt-M7wpizI_k1ZaPLNemZEIvp0cgW3DDXcuv8O3y6kYivX9eCLN6IJMWkf3ObarNKUibStyZdLgjGulqWKOPl-RW_ycCPXnaVcpXm2uvHm8kqSKa61kOkIVDy6dAmRGJOnHv55dt8vnV6GUCOovESS_0dptgOdzbCWBCqe4TCzUOTlULnh7GMsCGI-wzQsofnxD7__OzTrh4pOpqko9_QdtJUFanaRJiW6qkQ3LkHjAXQ-PzSZOr72S-0sEMbWMIyVtR_GKr57brAWJxXfDWv1ZrPOW3XWqrGaW2OBb_PAo0HdCzwfRo879y8m_wQAAP__uNqQGr0EAAA= HTTP/1.1\r\nHost: torchfriendlypay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://genizymath.github.io/\r\nCookie: uid_id2=c281c967-8a50-45a7-a119-265aa7206517:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl27249042=1; slec71033c1d2ddd571b951e9de84dd54e0e=[3078207]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 23 Aug 2025 18:37:33 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 6\r\nHost: torchfriendlypay.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 9b9c57f6dd5107541070bd040e857f16\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T05:45:54.968102Z","times_seen":13318572,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-23","alert":"Sinkholed","trigger":"torchfriendlypay.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}