{"report_id":"12b373a5-d9ba-42f7-91c9-11ab9495bc00","version":0,"status":"done","tags":[],"date":"2026-09-14T14:12:40Z","url":{"schema":"http","addr":"lylib.fun/","fqdn":"lylib.fun","domain":"lylib.fun","tld":"fun"},"ip":{"addr":"144.31.25.157","port":0,"asn":210457,"as":"Kyonix Networks Limited","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"lylib.fun/","fqdn":"lylib.fun","domain":"lylib.fun","tld":"fun"},"title":"Lylib — Roblox music codes","dom":{"size":38747,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (707), with CRLF, LF line terminators","md5":"b513164a9559c2cd7087fdcd46c767ab","sha1":"53b19a503be570b92d84b86782cd1a2fefd958fd","sha256":"8d44783ccebeb56abb28b100a748facd90a4f28dbdf9d8f9b9282a585a343937","sha512":"2ea7823b144856123805118dab713c2024631752350d8243e618aed9b09509b52dd1fd8a606452ce46c9dc5cb63266f4bae72aab9f3247c66eb3203ee4f6bfd6","ssdeep":"768:YDr9XMormDX0lv6d412/S2yC2j12IlsxtW2cXRuyZ4:YDr9XMormz0lv6d4oaLjlsxtW2chI","tlshash":"450354b0d4f04437519383caa26a7e0bb99ee54fc4c91680b2ae1ad44fd6df1fd4b819","dom_hash":"domhashf5ec8c80c3b68286da50fac77e050815","first_seen":"2026-09-14T14:12:46.584537Z","last_seen":"2026-09-14T14:12:46.584537Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"lylib.fun/","fqdn":"lylib.fun","domain":"lylib.fun","tld":"fun"},"ip":{"addr":"144.31.25.157","port":0,"asn":210457,"as":"Kyonix Networks Limited","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-19T14:12:40Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"lylib.fun","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"lylib.fun","ip":{"addr":"144.31.25.157","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2026-08-30","domain_rank":0,"first_seen":"2026-09-14T14:09:16.473413Z","last_seen":"2026-09-14T14:09:16.473413Z","alert_count":230,"request_count":46,"received_data":965353,"sent_data":21482,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.discordapp.com","ip":{"addr":"162.159.130.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-02-26","domain_rank":16705,"first_seen":"2015-08-24T13:06:21Z","last_seen":"2026-09-13T21:00:51.265634Z","alert_count":0,"request_count":1,"received_data":30941,"sent_data":599,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"telegram.org","ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"domain_registered":"2003-12-15","domain_rank":499,"first_seen":"2013-12-18T13:14:30Z","last_seen":"2026-09-10T09:13:00.771531Z","alert_count":0,"request_count":1,"received_data":116841,"sent_data":459,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"lylib.fun/","fqdn":"lylib.fun","domain":"lylib.fun","tld":"fun"},"ip":{"addr":"144.31.25.157","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ca4ebf44caeab09f246e25580b404e9b","sha1":"60a3c1cb68cd9e58e01d811eb1cdf3140ae6cd03","sha256":"f768d3ff8491e18877600654b5f46b3c238989ace8e18e30f4a48797ff45084c","sha512":"2e9216d8fcb1efeb01a480d569f44ff857038a8b8c1f925bfa84d513079001a7c854385aa33a3d3f74f7ad65a35f93b61b4cccbc20aefc20a0ecbc74f8132e9f","ssdeep":"","tlshash":"b40123ea3c891124c3f302a53bb3a218347a252f740d9d52b94d18562f9599604a360c","size":685,"data":"","first_seen":"2026-09-14T14:09:21.180063Z","last_seen":"2026-09-29T01:51:01.054317Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lylib.fun/add_track.js?v=d2b631108e","fqdn":"lylib.fun","domain":"lylib.fun","tld":"fun"},"ip":{"addr":"144.31.25.157","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"637e0cf39f683f963e6316790f56578e","sha1":"328fea85505d538e5413bfaf4f866b279c9062ef","sha256":"cc732205d63a61e229884872407bfb20ee141539b4a9ee3f30731837c57dcddd","sha512":"df53389defa076ddcc03ff694771c88cc3c9c4e0f89242e2edc33c29a2a516d112bad5fd1f1f2a594cb1d3ac5fc82d42964e14f62531c6b65f5ffde79bde8d53","ssdeep":"384:9Qc5DTwdaui+FrZ/SN3FIvnrhxHhHZjfIflitfTflh0DjP0Pg9qgqv:xToaed0fP79q","tlshash":"cd62c6b314ff083b31633839da8f61093a5250576c4ae454be4c9b692fd9e28a4f77c9","size":15220,"data":"","first_seen":"2026-09-14T14:09:21.165931Z","last_seen":"2026-09-14T19:23:32.094051Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lylib.fun/notifications_center.js?v=d2b631108e","fqdn":"lylib.fun","domain":"lylib.fun","tld":"fun"},"ip":{"addr":"144.31.25.157","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"cf8bc5e363edb839da202346542c2216","sha1":"ce68f7931b2673b8c02fa03fdaa840674538f38b","sha256":"8ee55de7cbf773452baf8aefd3bf5b10ca60751be14a84e5be5e715a784637d4","sha512":"a035847c670e77bf7591594aedee1c40f976174693d1bee28453daa64b072df0b9c8a773c59d6a96d8027b53da3396639454343bdf100228b597e1722b6466cb","ssdeep":"96:t4YQuN/D4ASOpUrMuSQ357k0M7yv9c5x4UPrZpLQSfEi3vuyQunlYZsq1X5d/8jB:cupD4BqU79357IOvuCSMwPzuvUT/s1a","tlshash":"590284dc78f720722567b06907ef5546367b8213884add007adcc1047fe866697bafe8","size":8356,"data":"","first_seen":"2026-09-14T14:09:21.176789Z","last_seen":"2026-09-29T01:51:01.029835Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lylib.fun/visit_tracker.js?v=d2b631108e","fqdn":"lylib.fun","domain":"lylib.fun","tld":"fun"},"ip":{"addr":"144.31.25.157","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d9864b90d8c5cfed510d0fc08ee1bbe3","sha1":"d8ecbf0694075552cf3076f2602a8ec694afbe54","sha256":"f199b757fff04479911c5df54f7adf8fcf0b60a5854c07638621cd11d3dd1204","sha512":"5ecfac10349404c81a72f0ddf56f7caa881e83e3baf583c2bbbed3bc1eb1e6b63deaa1c2f68f7126da2361fc2997b59370010236a802b67ba346bc8d38b6b680","ssdeep":"","tlshash":"43e02beb18e31c630f3bb129455e9506312780676dd9ac62b99e13511f542be07a19cc","size":430,"data":"","first_seen":"2026-09-14T14:09:21.143269Z","last_seen":"2026-09-29T01:51:01.005655Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lylib.fun/ads.js?v=d2b631108e","fqdn":"lylib.fun","domain":"lylib.fun","tld":"fun"},"ip":{"addr":"144.31.25.157","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ae45dd04296499a0690eddadc232c12d","sha1":"fbef6551fa69c0f3b0a92e6435806de021d812f0","sha256":"400a22226c2b8012fe1ae68e6149d41d1adf7d6d0ec4bcaee3f8299e527d62d6","sha512":"cad54b5ff1479ef457608a2dfa5e62a719c70912ac88c9b8f0159874e0d1dea3c8717a8f5c09631f7797ba367e2538b3b9f76a2ee607bfe0521c63332e5cf454","ssdeep":"96:oRDDbWDTXSo8ZfKahZAtpouf+8NCI3eluIFk9FMAywV:oRX6DbCfKah6tlf+8Uw96dA","tlshash":"1e91316c72f314365133a0be429f56063a2d5953a04bcb45bb9c47641fa0d29aaf38fc","size":4410,"data":"","first_seen":"2026-09-14T14:09:21.178551Z","last_seen":"2026-09-14T19:23:32.08413Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/telegram-web-app.js","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"7ff489f43d13a9c3ee7f7c7f6f4dd7c9","sha1":"07be491fa7955c1d77363629551064f42e448551","sha256":"3549138a7934039fe7dfd1291a4ee739bd2b705a614308053a8b08a87d85c451","sha512":"2b69a2654fc2b049aa90773afd62510e46aaec8325d76d2d0bb873e3b64d119a0567608a156231792e2e139c1f7fc064c104021f3ad5cea4114c1ef83049dbed","ssdeep":"1536:pdpTpRdoKd4F0WN2ZbBcn9cF9KTfVjLo03ueLE+wFFz1NIVIB/MGYV7p/xHK8ITU:TpTpRdfcKFU7RxDv","tlshash":"e6b33e4d6cb3612285b3b1bf8b5f925172719883301def20794d9b646f80e7c53eaad8","size":116510,"data":"","first_seen":"2026-07-14T10:55:37.795951Z","last_seen":"2026-10-09T11:51:14.098943Z","times_seen":1436,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lylib.fun/lang_detect.js?v=d2b631108e","fqdn":"lylib.fun","domain":"lylib.fun","tld":"fun"},"ip":{"addr":"144.31.25.157","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"482faa71e8df2e03a618ffd3131ff088","sha1":"3c939898cc0be368111109d26c2fef9d901db035","sha256":"0b6aa48274bbc9921423b9fe528fa81ba52f1f0f21fc47b9e637ef823602d8f4","sha512":"b31272f62e07c35a52baa871be1fd853f8e17e4a2cbce4a8d95ac2d20a430c7c53cf34e38b20f28b4b7e540d52d779ee4308a227e0e8acec13f9cb8483723220","ssdeep":"","tlshash":"7841ae5f78eb30052112a0bfb9ce5805b0a9c443c90dad46b66ddb10afc16b48ab5bad","size":2158,"data":"","first_seen":"2026-09-14T14:09:21.136847Z","last_seen":"2026-09-29T01:51:01.015282Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lylib.fun/assets/index.js?v=d2b631108e","fqdn":"lylib.fun","domain":"lylib.fun","tld":"fun"},"ip":{"addr":"144.31.25.157","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"de2bb852e03252924c2fe32144e7094a","sha1":"8cc068e3d80acc8f03853c34230eb0ffeb72c4f2","sha256":"e01e4a36aef6b06b1b5f4574545e14641776e4aa41234fbadfd3255a01c8e79c","sha512":"ca3af6238da698a90e145b5b8aaa92281db53d931a6c88925107d57ed20dbbf353fd573b43a232a570d4fb4c490b3e345c16d2d55c793be250b7ab15a9be6122","ssdeep":"384:O8kgcZJ90SfIxvTdsFPq/ob/QTn5+nFuRnE2HGSDPGgIT3fg8FIHWRGMHs1avNho:OxzMrMIlE6ZAUiI2RGMHvV8TI1K","tlshash":"d013b6f568fb00394463a0af97cf140e352a405bad4af9287b4c47492fd5868d9fbbc9","size":44804,"data":"","first_seen":"2026-09-14T14:09:21.111344Z","last_seen":"2026-09-14T19:23:32.08785Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lylib.fun/player.js?v=d2b631108e","fqdn":"lylib.fun","domain":"lylib.fun","tld":"fun"},"ip":{"addr":"144.31.25.157","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d5858ed396139df30e7b2f9e192674cf","sha1":"0435ce68273370f7a6a5d22893ec2cf64e9c2481","sha256":"9c9e2b53a040a70661660572dcf90ada24a446221e374b5f43771a7dc7aaa239","sha512":"b1cda8f13f598939bb9734116729bcf1f2565e68040b1656665d135d9b57eaffd8fd857e1b16698231590d47a7bc93fde191f6738dde2a8a503f24e578a9af63","ssdeep":"384:8pK+GgghT0WVDVszszIzfNkwW2PCg1EWQRJGOyg2T:1+Ggdk4HJKxoT","tlshash":"5fa2832638f7143685a360a93bdf961936369243314eca107e1dc7801fd2ea6d6b7bdc","size":21711,"data":"","first_seen":"2026-09-14T14:09:21.125517Z","last_seen":"2026-09-14T19:23:32.102676Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lylib.fun/admin_menu.js?v=d2b631108e","fqdn":"lylib.fun","domain":"lylib.fun","tld":"fun"},"ip":{"addr":"144.31.25.157","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"85b0ce019c32fdbac7325f55a8d830fe","sha1":"1514a7c9cd0a3ad5a9e282da4dbf5d52d8684df8","sha256":"944fd077430819cc5029119f8e7fc73d5622d2c17a423112a162086b70a22acc","sha512":"81e7dee504069d0c6cc47cf3b3eb243ba680a2fa3b481d1db9953be19b60fda90c9c1b3e08ce5b5d26941a0eaa28b997a3573968891a93ccec46cfa9d82d5391","ssdeep":"","tlshash":"87f0591939fb21708367b0bd569f8606322590173649cd497e1c9240af497706ab2a9d","size":524,"data":"","first_seen":"2026-09-14T14:09:21.141109Z","last_seen":"2026-09-29T01:51:01.011961Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lylib.fun/announcement.js?v=d2b631108e","fqdn":"lylib.fun","domain":"lylib.fun","tld":"fun"},"ip":{"addr":"144.31.25.157","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ddf05ad5d224736ab3dd33a95ad44712","sha1":"1f466eff07554f1e68728f8589fa67e933a2380a","sha256":"9b1aa95f74e60e423205624b532e4380a38c3b5104d8e7b89c95fb6a34a69b1d","sha512":"9838dfaa0312dc3c72567b81addf49b6b07d0c13e6738cfff725ae12aec98beb30e9475410078cc9e008bfeddd969b423bd0d5095d624424c963e63662a12a57","ssdeep":"","tlshash":"ab61157838b3053b5363609e37ef24257515a0236405dd49fa9cca0c7fe4fa8bda2788","size":3445,"data":"","first_seen":"2026-09-14T14:09:21.098363Z","last_seen":"2026-09-29T01:51:01.026138Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lylib.fun/footer.js?v=d2b631108e","fqdn":"lylib.fun","domain":"lylib.fun","tld":"fun"},"ip":{"addr":"144.31.25.157","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"14a991f0f7e6bb0645845eb129007d29","sha1":"4eebef3318b1755c4b2e5b91c3e63b533e6cde87","sha256":"036cc00b7671ad567a2d6046a115826b1333d70337c3febbed6e57344ff000ed","sha512":"ef32f0c9615885c99381e0c3f4987a83eae7e754b4ab5fad1e99ba830f0f423ee7a0914fda3672a7c1a11fa2ddb48c01619a43e972804075beae0fb7c53b485d","ssdeep":"","tlshash":"f9e0862a76f920208377b07d16dfa349353490533049de6a7a8ca651ffd0a74157aacd","size":326,"data":"","first_seen":"2026-09-14T14:09:21.075933Z","last_seen":"2026-09-29T01:51:01.027093Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lylib.fun/cookie_consent.js?v=d2b631108e","fqdn":"lylib.fun","domain":"lylib.fun","tld":"fun"},"ip":{"addr":"144.31.25.157","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"85025fc117e8c57281ae5ac03ece3702","sha1":"5d76bc89bdee92738540a49f0f4ec19153f46e83","sha256":"a41cebf1127d4afcac2d6e16fd696aceabca8c9d02398c83169f8e3eb3d9287d","sha512":"aefa2c5b61bc1c1a1465b6787c95c621758dbef39476fcbc7bc79032309ccd68e526c0fb54b764c0d106cbbdf4df85a2e8629b3f9ad798fbab8498963300c6c5","ssdeep":"","tlshash":"4b41337d3efb11395b13304d6b6e9a007475413b6a28de48798ce9183fdda3446b4749","size":2196,"data":"","first_seen":"2026-09-14T14:09:21.175429Z","last_seen":"2026-09-29T01:51:01.005108Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lylib.fun/nickname_prompt.js?v=d2b631108e","fqdn":"lylib.fun","domain":"lylib.fun","tld":"fun"},"ip":{"addr":"144.31.25.157","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"834d1d875392e66cf570019ecbc6cf7b","sha1":"87f17dc466834b5942f5dda13aed3c156eaa805f","sha256":"745f580ecb1ee8649d98673d910626229b45eb45b90a21d48c35b4563606e922","sha512":"97e3b039c8bdbeacece05088b5462aa440f51a29e0947c995c855c2037610ed9d65cbdea6d13aed763020016c94187b1a02790ee8deb47add4518e9509951e65","ssdeep":"192:L18RmXAPMhbObsmel548Py6reDtrt4qu8LxTEotQ/EiA:BwDvb8pP1reD7dHFQoEEiA","tlshash":"00f196ad68c720254613f0a9aa5f4409797330af6f9aed043c4c9264afe453d53f7af8","size":7931,"data":"","first_seen":"2026-09-14T14:09:21.081683Z","last_seen":"2026-09-29T01:51:01.027753Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"🎵 Lylib initialized","filename":"https://lylib.fun/assets/index.js?v=d2b631108e","line_number":1151,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_set_header_colormap[actor:server1.conn0.watcher16.process8//obj33 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:Object ownProperties:map[color_key:map[configurable:true enumerable:true value:bg_color writable:true]] ownPropertiesLength:1] sealed:false type:object]","filename":"https://telegram.org/js/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_set_bottom_bar_colormap[actor:server1.conn0.watcher16.process8//obj34 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:Object ownProperties:map[color:map[configurable:true enumerable:true value:#ffffff writable:true]] ownPropertiesLength:1] sealed:false type:object]","filename":"https://telegram.org/js/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_request_theme","filename":"https://telegram.org/js/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_request_viewport","filename":"https://telegram.org/js/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_request_safe_area","filename":"https://telegram.org/js/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_request_content_safe_area","filename":"https://telegram.org/js/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"🚀 App initializing...","filename":"https://lylib.fun/assets/index.js?v=d2b631108e","line_number":1113,"column_number":15},{"level":"log","text":"🌐 Language changed to: en","filename":"https://lylib.fun/assets/index.js?v=d2b631108e","line_number":447,"column_number":15},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_ready","filename":"https://telegram.org/js/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_expand","filename":"https://telegram.org/js/telegram-web-app.js","line_number":135,"column_number":13}]},"http":[{"url":{"schema":"https","addr":"lylib.fun/ads.css?v=d2b631108e","fqdn":"lylib.fun","domain":"lylib.fun","tld":"fun"},"ip":{"addr":"144.31.25.157","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lylib.fun/","date":"2026-09-14T14:12:10.624Z","timestamp":1789395130624,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lylib.fun","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 14:44:21 GMT","end":"Sat, 28 Nov 2026 14:44:20 GMT"},"fingerprint":{"sha1":"E4:50:36:35:3E:2B:72:4E:9F:66:BF:42:68:9E:F1:29:35:39:87:73","sha256":"87:0F:C5:4E:1F:56:1A:C8:E1:2D:4B:3A:D1:F6:8B:91:79:32:1E:DC:82:3D:F0:A9:3E:8D:FF:FD:C5:BE:E6:94"}}},"request":{"raw":"GET /ads.css?v=d2b631108e HTTP/1.1\r\nHost: lylib.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lylib.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Mon, 14 Sep 2026 14:12:10 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-disposition: inline; filename=ads.css\r\nlast-modified: Fri, 11 Sep 2026 14:29:37 GMT\r\ncache-control: no-cache\r\netag: W/\"1789136977.7462385-5009-1594165233\"\r\naccess-control-allow-origin: https://lylib.fun\r\nvary: Accept-Encoding, Origin, Cookie\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5009,"size_decoded":1773,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"9e78cf47b8afd8d0eb55f0edadad4d29","sha1":"61f06b84108032b554a3837f640f8eae04d81e1a","sha256":"796a4600b275829ef4914b21472595486b0ad26721e3dd6e0d00f1e89d5d4876","sha512":"7d508c125e913d9046b9e93a74308a04933830af36802337bbc2791312f004a4cc64f4e4091f7fc52b7fb70b905ab1d082d8265055e912e9c34d70e7cd33d08b","ssdeep":"96:915VNj1BvBsk4lsyPSANicAktUkfXwOUJZDQwJC7lU9q/h7zdgYQqDIB302isIBC:9zVNj1BvBsDlsyPSANicA6UkfXwOQDQM","tlshash":"38a134afd6170505bc3ba6792bf74a4aa399a007c90ace6c7fcd614c8f4a1dc68507cc","first_seen":"2026-09-14T14:09:21.138812Z","last_seen":"2026-09-14T19:23:32.101659Z","times_seen":3,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"lylib.fun","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lylib.fun/nickname_prompt.css","fqdn":"lylib.fun","domain":"lylib.fun","tld":"fun"},"ip":{"addr":"144.31.25.157","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lylib.fun/","date":"2026-09-14T14:12:10.639Z","timestamp":1789395130639,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lylib.fun","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 14:44:21 GMT","end":"Sat, 28 Nov 2026 14:44:20 GMT"},"fingerprint":{"sha1":"E4:50:36:35:3E:2B:72:4E:9F:66:BF:42:68:9E:F1:29:35:39:87:73","sha256":"87:0F:C5:4E:1F:56:1A:C8:E1:2D:4B:3A:D1:F6:8B:91:79:32:1E:DC:82:3D:F0:A9:3E:8D:FF:FD:C5:BE:E6:94"}}},"request":{"raw":"GET /nickname_prompt.css HTTP/1.1\r\nHost: lylib.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lylib.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Mon, 14 Sep 2026 14:12:10 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-disposition: inline; filename=nickname_prompt.css\r\nlast-modified: Wed, 09 Sep 2026 22:46:22 GMT\r\ncache-control: no-cache\r\netag: W/\"1788993982.3935103-3271-3783331072\"\r\naccess-control-allow-origin: https://lylib.fun\r\nvary: Accept-Encoding, Origin, Cookie\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":3271,"size_decoded":1609,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"4fd87b352e17bdbe949abc5c95117a64","sha1":"1d02e05d6f2bfc27f57320a63d10b28770f72706","sha256":"ecb51b744c2e3d0bd2ae6aba9a32f9a80620c0129df8dee61a0fbd2b039ba07b","sha512":"0cd6d1f9eefcbe544bce3e2cbe4a6e0421bfd4d1619fde90516861e1501ae90eaadb8eeba86b255908154241d568b1145b5836b2a34c83ebda4254271024ba42","ssdeep":"","tlshash":"c16142b16ad842047c2b409436e2ce4fb78eb6c39325d93d27e1b00cded90e46dd4ea6","first_seen":"2026-09-14T14:09:21.108247Z","last_seen":"2026-09-29T01:51:01.037237Z","times_seen":4,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"lylib.fun","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.discordapp.com/avatars/1311762128620883989/350d91714549927cca3847b48b496242.png?size=128","fqdn":"cdn.discordapp.com","domain":"discordapp.com","tld":"com"},"ip":{"addr":"162.159.130.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lylib.fun/","date":"2026-09-14T14:12:10.750Z","timestamp":1789395130750,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"discordapp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 22:09:52 GMT","end":"Thu, 26 Nov 2026 23:09:41 GMT"},"fingerprint":{"sha1":"13:14:B0:88:51:F1:B1:AB:47:77:F8:32:3D:BD:7B:14:F8:64:A4:A2","sha256":"51:44:F8:55:D8:F4:80:9B:8E:31:D2:33:0B:B1:C6:4E:5E:9C:CD:D6:F9:FA:4E:5A:39:BB:1A:11:D3:AD:AD:08"}}},"request":{"raw":"GET /avatars/1311762128620883989/350d91714549927cca3847b48b496242.png?size=128 HTTP/1.1\r\nHost: cdn.discordapp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lylib.fun/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 14 Sep 2026 14:12:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 29851\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 14 Sep 2026 13:57:53 GMT\r\nset-cookie: __cf_bm=hBnvze3WXi6ZayNTP6HvGlvbkxM1EY2kalTred12srs-1789395130.7674387-1.0.1.1-6fIsdaAMdsU0KEoZu2ISQLPup_CCdGCx8bGhkOSkBXVfiixjFqZzOWqBM3hkClnmw7iaYBtHNUwm1NLBfdPGpAtNuxIqJBxwfUp5cM6ti1J6xqJO9mCc24zJSMvZQurx; HttpOnly; SameSite=None; Secure; Path=/; Domain=discordapp.com; Expires=Mon, 14 Sep 2026 14:42:10 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oeswvfFdwmoogWAAvMKYpr22xRb4AHvcGdl0x0vHikjMupm8TCb9aJ%2BTv5ogined5e%2FA7qokEEdFJ91g1P8nFDayUqDVsNEUSqrWBJl79v4btkpGgUzz%2F1f8rt8tm0HoqYHBDw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-robots-tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp\r\npriority: u=4,i\r\nserver: cloudflare\r\ncf-ray: a3affc2f48e01525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"hBnvze3WXi6ZayNTP6HvGlvbkxM1EY2kalTred12srs-1789395130.7674387-1.0.1.1-6fIsdaAMdsU0KEoZu2ISQLPup_CCdGCx8bGhkOSkBXVfiixjFqZzOWqBM3hkClnmw7iaYBtHNUwm1NLBfdPGpAtNuxIqJBxwfUp5cM6ti1J6xqJO9mCc24zJSMvZQurx","quoted":false,"path":"/","domain":"discordapp.com","expires":"2026-09-14T14:42:10Z","raw_expires":"Mon, 14 Sep 2026 14:42:10 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=hBnvze3WXi6ZayNTP6HvGlvbkxM1EY2kalTred12srs-1789395130.7674387-1.0.1.1-6fIsdaAMdsU0KEoZu2ISQLPup_CCdGCx8bGhkOSkBXVfiixjFqZzOWqBM3hkClnmw7iaYBtHNUwm1NLBfdPGpAtNuxIqJBxwfUp5cM6ti1J6xqJO9mCc24zJSMvZQurx; HttpOnly; SameSite=None; Secure; Path=/; Domain=discordapp.com; Expires=Mon, 14 Sep 2026 14:42:10 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29851,"size_decoded":30941,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"527652a7c2876c06ea6fa0afffae1216","sha1":"d4fb17efaeeaf254d356614bba1204635624ac9b","sha256":"e9b9b969c51c10af9e1e49006c3a8fbe90603578c9a3bc5b66c01216e6e38624","sha512":"96d2dad22a5742d87befe4b4eb3764a8e1a340458e486cc1b9b0fb3629caf0e3fd2a6fb1efe23db112cea921cf60dd30898b8720dcf3652fbfe561446f4113aa","ssdeep":"384:mLrrme0To8rEqyQ/pk3EymMUg5peMnNLH7m9McSpvPZn16iKbcvsdThHOe6ykKFr:Pe0T3rEqxkwQiSjZQTh9nFazgJ+eD","tlshash":"cbd2e11efa782143c9cd892b71596b4a77016f24aaeb4453348490244bf59fd1cd6373","first_seen":"2026-09-14T14:09:21.100022Z","last_seen":"2026-09-14T19:23:32.097175Z","times_seen":3,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":4,"connect":9,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lylib.fun/thumbnails/138018389539356.jpg?v=84d8fb1f","fqdn":"lylib.fun","domain":"lylib.fun","tld":"fun"},"ip":{"addr":"144.31.25.157","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lylib.fun/","date":"2026-09-14T14:12:10.753Z","timestamp":1789395130753,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lylib.fun","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 14:44:21 GMT","end":"Sat, 28 Nov 2026 14:44:20 GMT"},"fingerprint":{"sha1":"E4:50:36:35:3E:2B:72:4E:9F:66:BF:42:68:9E:F1:29:35:39:87:73","sha256":"87:0F:C5:4E:1F:56:1A:C8:E1:2D:4B:3A:D1:F6:8B:91:79:32:1E:DC:82:3D:F0:A9:3E:8D:FF:FD:C5:BE:E6:94"}}},"request":{"raw":"GET /thumbnails/138018389539356.jpg?v=84d8fb1f HTTP/1.1\r\nHost: lylib.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lylib.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Mon, 14 Sep 2026 14:12:10 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 37900\r\nlast-modified: Mon, 14 Sep 2026 13:49:44 GMT\r\netag: \"6aa7fb78-940c\"\r\nexpires: Wed, 14 Oct 2026 14:12:10 GMT\r\ncache-control: max-age=2592000, public, max-age=2592000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":37900,"size_decoded":38251,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 500x500, components 3","md5":"73633857eb0302fcf87d4acb341f0876","sha1":"84d8fb1f6658cbd70b8d9fddc7ad622270121d23","sha256":"8fe51e57eba29b2395e5f3aa33ffa3e0c5fc480441db4b6e76f93193633cb1eb","sha512":"6538fe8f0f4ab2d6fc6890d03be2e02f1f0a4145f7e09b1c19683d2ca11db4df7408777257d9822231c021c14cc0012a435918a8345c87313d03668216cc2fec","ssdeep":"768:cn7pxoizQ+rNtR2pOfG4x6HIoFFlRSXTuNnQ+11iB806PQ3rjZ8Vnq5Wnq4DPOF:cn7gizRRa06HpLwDWvbzHPQbjknPHK","tlshash":"7a03e066f2d78391ab0bd07d093e2c3b57e48af056d1421b54ba6f62c544f3258c787e","first_seen":"2026-09-14T14:09:21.117479Z","last_seen":"2026-09-14T19:23:32.09029Z","times_seen":3,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"lylib.fun","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lylib.fun/api/announcement","fqdn":"lylib.fun","domain":"lylib.fun","tld":"fun"},"ip":{"addr":"144.31.25.157","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://lylib.fun/","date":"2026-09-14T14:12:11.209Z","timestamp":1789395131209,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lylib.fun","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 14:44:21 GMT","end":"Sat, 28 Nov 2026 14:44:20 GMT"},"fingerprint":{"sha1":"E4:50:36:35:3E:2B:72:4E:9F:66:BF:42:68:9E:F1:29:35:39:87:73","sha256":"87:0F:C5:4E:1F:56:1A:C8:E1:2D:4B:3A:D1:F6:8B:91:79:32:1E:DC:82:3D:F0:A9:3E:8D:FF:FD:C5:BE:E6:94"}}},"request":{"raw":"GET /api/announcement HTTP/1.1\r\nHost: lylib.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lylib.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Mon, 14 Sep 2026 14:12:11 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: https://lylib.fun\r\nvary: Accept-Encoding, Origin, Cookie\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":364,"size_decoded":589,"mime_type":"application/json","magic":"JSON text data","md5":"e5fe0fd46dd3a144390c08c634203e73","sha1":"2b6e36fff78e25c729fcb350de87a887f3c2539b","sha256":"729769022107acf8208c4a57d529e158cda3773b047630b61a00f32d170836e6","sha512":"52b81ebba978ea727d696f4853e2c00fe99dd436b74059be9bc9cf249864f38e513b268bd8704a4767362b560e5f8e2e3d8e5fc43d2d46272ff4f0347cbc555d","ssdeep":"","tlshash":"afe0c272f31d176d1584b2c302bc38883bccfd5245602c33c875774b8210c319250c42","first_seen":"2026-09-14T14:09:21.150023Z","last_seen":"2026-09-14T19:23:32.07487Z","times_seen":3,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"lylib.fun","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lylib.fun/api/songs?sort=new\u0026per_page=10\u0026period=day","fqdn":"lylib.fun","domain":"lylib.fun","tld":"fun"},"ip":{"addr":"144.31.25.157","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://lylib.fun/","date":"2026-09-14T14:12:11.223Z","timestamp":1789395131223,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lylib.fun","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 14:44:21 GMT","end":"Sat, 28 Nov 2026 14:44:20 GMT"},"fingerprint":{"sha1":"E4:50:36:35:3E:2B:72:4E:9F:66:BF:42:68:9E:F1:29:35:39:87:73","sha256":"87:0F:C5:4E:1F:56:1A:C8:E1:2D:4B:3A:D1:F6:8B:91:79:32:1E:DC:82:3D:F0:A9:3E:8D:FF:FD:C5:BE:E6:94"}}},"request":{"raw":"GET /api/songs?sort=new\u0026per_page=10\u0026period=day HTTP/1.1\r\nHost: lylib.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lylib.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Mon, 14 Sep 2026 14:12:11 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: https://lylib.fun\r\nvary: Accept-Encoding, Origin, Cookie\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4695,"size_decoded":1528,"mime_type":"application/json","magic":"JSON text data","md5":"5cc4fccebfc0165dc8ecf307f6e6fb09","sha1":"31234502d4c13a46dd940698c27055c0e68c9868","sha256":"1f3e6cb6df3de455a23a15f665ce0d2295948d0c289ae8678e57daa23a586c9b","sha512":"1e9e5ad4f552c40df9fa27e81903bdeb9eb11b1d64a9f2fb48396e64bbaccf72e37e208c0b35625eb74995f0a0074fc1e57849e412785d735da53d646c2d7520","ssdeep":"96:IWxLTKWxcx7ZiWxjHdWxSoHI96319bC25cPuCRkiQjA/:I2fK2WZi2B24UcR","tlshash":"33a1ffb4552808b8ffc4b4dac87b3e5e90c8bbbbd1d19994de99fc2fc421461ab4c442","first_seen":"2026-09-14T14:12:46.594026Z","last_seen":"2026-09-14T14:12:46.594026Z","times_seen":1,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"lylib.fun","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lylib.fun/favicon-120x120.png","fqdn":"lylib.fun","domain":"lylib.fun","tld":"fun"},"ip":{"addr":"144.31.25.157","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lylib.fun/","date":"2026-09-14T14:12:11.349Z","timestamp":1789395131349,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lylib.fun","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 14:44:21 GMT","end":"Sat, 28 Nov 2026 14:44:20 GMT"},"fingerprint":{"sha1":"E4:50:36:35:3E:2B:72:4E:9F:66:BF:42:68:9E:F1:29:35:39:87:73","sha256":"87:0F:C5:4E:1F:56:1A:C8:E1:2D:4B:3A:D1:F6:8B:91:79:32:1E:DC:82:3D:F0:A9:3E:8D:FF:FD:C5:BE:E6:94"}}},"request":{"raw":"GET /favicon-120x120.png HTTP/1.1\r\nHost: lylib.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lylib.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: lylib_vid=c7a86bedc8cb50d192638fb81728a294\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Mon, 14 Sep 2026 14:12:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 19082\r\ncontent-disposition: inline; filename=favicon-120x120.png\r\nlast-modified: Wed, 02 Sep 2026 14:49:34 GMT\r\ncache-control: no-cache\r\netag: \"1788360574.2351763-19082-3560770406\"\r\naccept-ranges: bytes\r\naccess-control-allow-origin: https://lylib.fun\r\nvary: Origin, Cookie\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19082,"size_decoded":19647,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit/color RGB, non-interlaced","md5":"1aa0bea919a8f5d3483dea22e6b48ac9","sha1":"6ef898091db03a8e6455cfbb638ba9d95c16191e","sha256":"3d04d5ca10be9d85d1b8e50427d1bfac9f19db30fbdd7baf9f8324356a893374","sha512":"a69cd9a331dd821721d7d4daaf4cd8b7e4957a081096846f859e4aed18fe7324cc1ed5aa6fbab78d9216912a0aa78f2d1947f99cbdaa2f0f930bad3cde064717","ssdeep":"384:ogbpPRosimPdlOQOsJaABa6N+W3SISHqOAy9Nid8snMTtd:oSPfptTJaq4N22d","tlshash":"a282d0445345cab76786b5b78f840135837be42e12a4d85e57b3a3f84498db6f233af0","first_seen":"2026-09-14T14:09:21.155191Z","last_seen":"2026-09-29T01:51:01.024672Z","times_seen":4,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"lylib.fun","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lylib.fun/","fqdn":"lylib.fun","domain":"lylib.fun","tld":"fun"},"ip":{"addr":"144.31.25.157","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-14T14:12:10.049Z","timestamp":1789395130049,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lylib.fun","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 14:44:21 GMT","end":"Sat, 28 Nov 2026 14:44:20 GMT"},"fingerprint":{"sha1":"E4:50:36:35:3E:2B:72:4E:9F:66:BF:42:68:9E:F1:29:35:39:87:73","sha256":"87:0F:C5:4E:1F:56:1A:C8:E1:2D:4B:3A:D1:F6:8B:91:79:32:1E:DC:82:3D:F0:A9:3E:8D:FF:FD:C5:BE:E6:94"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: lylib.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Mon, 14 Sep 2026 14:12:10 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: https://lylib.fun\r\nvary: Accept-Encoding, Origin, Cookie\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27666,"size_decoded":6917,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (6963)","md5":"b2aebd9636be478acafde440c8215303","sha1":"986f73fe7320b5df3aa8563a9cb6ac9e5ca2bac1","sha256":"a5e88c06aae4cd9bbb9bbf934d56634ac2732ddacab0d76a8ee5fa9caf2d1c90","sha512":"8fe0db2423c863afc07d0e13d6847ce1cc4ecfe7390f8beaac54a0c2d58154151684a0ee512fbecf797f32eb0fb85f86c9ddf0f265959d6c57fe3707f450e80d","ssdeep":"768:yDr9oMormDX05JxF2Li2as2Rz2Wfnig+9vSRYYg:yDr9oMormz05JxiCv9fnig+9vgO","tlshash":"05c25371d8e04433519383cab2697f0a799ee64fc9860690b2fd17e84fd2de0ee57858","first_seen":"2026-09-14T14:12:46.596753Z","last_seen":"2026-09-14T14:12:46.596753Z","times_seen":1,"resource_available":true,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":8,"connect":30,"send":0,"wait":36,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"lylib.fun","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lylib.fun/player.css?v=d2b631108e","fqdn":"lylib.fun","domain":"lylib.fun","tld":"fun"},"ip":{"addr":"144.31.25.157","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lylib.fun/","date":"2026-09-14T14:12:10.626Z","timestamp":1789395130626,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lylib.fun","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 14:44:21 GMT","end":"Sat, 28 Nov 2026 14:44:20 GMT"},"fingerprint":{"sha1":"E4:50:36:35:3E:2B:72:4E:9F:66:BF:42:68:9E:F1:29:35:39:87:73","sha256":"87:0F:C5:4E:1F:56:1A:C8:E1:2D:4B:3A:D1:F6:8B:91:79:32:1E:DC:82:3D:F0:A9:3E:8D:FF:FD:C5:BE:E6:94"}}},"request":{"raw":"GET /player.css?v=d2b631108e HTTP/1.1\r\nHost: lylib.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lylib.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Mon, 14 Sep 2026 14:12:10 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-disposition: inline; filename=player.css\r\nlast-modified: Wed, 09 Sep 2026 22:46:22 GMT\r\ncache-control: no-cache\r\netag: W/\"1788993982.3935103-10868-2057832774\"\r\naccess-control-allow-origin: https://lylib.fun\r\nvary: Accept-Encoding, Origin, Cookie\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10868,"size_decoded":3019,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"0fc85e017d7c5d4bc1ec7be68b82969e","sha1":"654eda4df135bc2523ce4e0ccbbe20c032fcf276","sha256":"1d0306884439a4ae9594547b2dda04f8db0819c60d0ef4c7b1556dacbebb7a7e","sha512":"45bc979df87a71ff5cdec8a11746aab127fa17c396c447eea7bc28d9f57757c86d909597899cfdbaa904d6f2ba9acd231a8523b39c1a04a63d6c90388905e8fc","ssdeep":"192:EDb++Uvtx07J+FoF9NniOg3RLpnmhLY7X9JjwnZ4O/xnFn0NBv3trwLInUSkgN8g:EeLvtMAFoFG5mhLuXUlFoZ9klrk","tlshash":"7c2210996ae74608b5378cc539dac64d33789502960ecf2cf7d5306c4fac9c9a87229d","first_seen":"2026-09-14T14:09:21.122627Z","last_seen":"2026-09-29T01:51:01.043208Z","times_seen":4,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"lylib.fun","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lylib.fun/player.js?v=d2b631108e","fqdn":"lylib.fun","domain":"lylib.fun","tld":"fun"},"ip":{"addr":"144.31.25.157","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lylib.fun/","date":"2026-09-14T14:12:10.627Z","timestamp":1789395130627,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lylib.fun","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 14:44:21 GMT","end":"Sat, 28 Nov 2026 14:44:20 GMT"},"fingerprint":{"sha1":"E4:50:36:35:3E:2B:72:4E:9F:66:BF:42:68:9E:F1:29:35:39:87:73","sha256":"87:0F:C5:4E:1F:56:1A:C8:E1:2D:4B:3A:D1:F6:8B:91:79:32:1E:DC:82:3D:F0:A9:3E:8D:FF:FD:C5:BE:E6:94"}}},"request":{"raw":"GET /player.js?v=d2b631108e HTTP/1.1\r\nHost: lylib.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lylib.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Mon, 14 Sep 2026 14:12:10 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-disposition: inline; filename=player.js\r\nlast-modified: Wed, 09 Sep 2026 22:46:22 GMT\r\ncache-control: no-cache\r\netag: W/\"1788993982.3945103-21901-1903167706\"\r\naccess-control-allow-origin: https://lylib.fun\r\nvary: Accept-Encoding, Origin, Cookie\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21901,"size_decoded":6610,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (412)","md5":"d5858ed396139df30e7b2f9e192674cf","sha1":"0435ce68273370f7a6a5d22893ec2cf64e9c2481","sha256":"9c9e2b53a040a70661660572dcf90ada24a446221e374b5f43771a7dc7aaa239","sha512":"b1cda8f13f598939bb9734116729bcf1f2565e68040b1656665d135d9b57eaffd8fd857e1b16698231590d47a7bc93fde191f6738dde2a8a503f24e578a9af63","ssdeep":"384:8pK+GgghT0WVDVszszIzfNkwW2PCg1EWQRJGOyg2T:1+Ggdk4HJKxoT","tlshash":"5fa2832638f7143685a360a93bdf961936369243314eca107e1dc7801fd2ea6d6b7bdc","first_seen":"2026-09-14T14:09:21.125517Z","last_seen":"2026-09-14T19:23:32.102676Z","times_seen":3,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"lylib.fun","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lylib.fun/add_track.css?v=2","fqdn":"lylib.fun","domain":"lylib.fun","tld":"fun"},"ip":{"addr":"144.31.25.157","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lylib.fun/","date":"2026-09-14T14:12:10.629Z","timestamp":1789395130629,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lylib.fun","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 14:44:21 GMT","end":"Sat, 28 Nov 2026 14:44:20 GMT"},"fingerprint":{"sha1":"E4:50:36:35:3E:2B:72:4E:9F:66:BF:42:68:9E:F1:29:35:39:87:73","sha256":"87:0F:C5:4E:1F:56:1A:C8:E1:2D:4B:3A:D1:F6:8B:91:79:32:1E:DC:82:3D:F0:A9:3E:8D:FF:FD:C5:BE:E6:94"}}},"request":{"raw":"GET /add_track.css?v=2 HTTP/1.1\r\nHost: lylib.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lylib.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Mon, 14 Sep 2026 14:12:10 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-disposition: inline; filename=add_track.css\r\nlast-modified: Wed, 09 Sep 2026 22:46:22 GMT\r\ncache-control: no-cache\r\netag: W/\"1788993982.3735101-5771-2544241238\"\r\naccess-control-allow-origin: https://lylib.fun\r\nvary: Accept-Encoding, Origin, Cookie\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5771,"size_decoded":2169,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"a6192ff6fb5b806270ba4ae981729f48","sha1":"4605f7f8f98eb8c0dd2045411a9e2bcfdc4e5808","sha256":"54a975de3a2af35b3fbd233683405384c622a9dae07f1468b2dbd906aa307823","sha512":"2cbf53764bc4bb613fbb37041c7a6bab5eaf3dd41a3a0e1859303b7a3d81bc7f3dae1c84a89f50e96393a536ba41ba7ff48e11d9292aba18b72b1e85172ec4b7","ssdeep":"96:xC5WJkp3hV4wj4CJqZkwcmr0jcuplXXZHfMZDDBZIm7kpyuIyHaCeCNta2:E5W8LP0BIcupppfsruIyHJdza2","tlshash":"8ac1219577920604b92f94947ac3cb6db3e8d042a50acabce7eb204eef491cce555f0d","first_seen":"2026-09-14T14:09:21.127428Z","last_seen":"2026-09-14T19:23:32.086354Z","times_seen":3,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"lylib.fun","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lylib.fun/announcement.js?v=d2b631108e","fqdn":"lylib.fun","domain":"lylib.fun","tld":"fun"},"ip":{"addr":"144.31.25.157","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lylib.fun/","date":"2026-09-14T14:12:10.634Z","timestamp":1789395130634,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lylib.fun","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 14:44:21 GMT","end":"Sat, 28 Nov 2026 14:44:20 GMT"},"fingerprint":{"sha1":"E4:50:36:35:3E:2B:72:4E:9F:66:BF:42:68:9E:F1:29:35:39:87:73","sha256":"87:0F:C5:4E:1F:56:1A:C8:E1:2D:4B:3A:D1:F6:8B:91:79:32:1E:DC:82:3D:F0:A9:3E:8D:FF:FD:C5:BE:E6:94"}}},"request":{"raw":"GET /announcement.js?v=d2b631108e HTTP/1.1\r\nHost: lylib.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lylib.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Mon, 14 Sep 2026 14:12:10 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-disposition: inline; filename=announcement.js\r\nlast-modified: Wed, 09 Sep 2026 22:46:22 GMT\r\ncache-control: no-cache\r\netag: W/\"1788993982.37551-3445-2955938648\"\r\naccess-control-allow-origin: https://lylib.fun\r\nvary: Accept-Encoding, Origin, Cookie\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":3445,"size_decoded":1791,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"ddf05ad5d224736ab3dd33a95ad44712","sha1":"1f466eff07554f1e68728f8589fa67e933a2380a","sha256":"9b1aa95f74e60e423205624b532e4380a38c3b5104d8e7b89c95fb6a34a69b1d","sha512":"9838dfaa0312dc3c72567b81addf49b6b07d0c13e6738cfff725ae12aec98beb30e9475410078cc9e008bfeddd969b423bd0d5095d624424c963e63662a12a57","ssdeep":"","tlshash":"ab61157838b3053b5363609e37ef24257515a0236405dd49fa9cca0c7fe4fa8bda2788","first_seen":"2026-09-14T14:09:21.098363Z","last_seen":"2026-09-29T01:51:01.026138Z","times_seen":4,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"lylib.fun","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lylib.fun/nickname_prompt.js?v=d2b631108e","fqdn":"lylib.fun","domain":"lylib.fun","tld":"fun"},"ip":{"addr":"144.31.25.157","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lylib.fun/","date":"2026-09-14T14:12:10.642Z","timestamp":1789395130642,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lylib.fun","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 14:44:21 GMT","end":"Sat, 28 Nov 2026 14:44:20 GMT"},"fingerprint":{"sha1":"E4:50:36:35:3E:2B:72:4E:9F:66:BF:42:68:9E:F1:29:35:39:87:73","sha256":"87:0F:C5:4E:1F:56:1A:C8:E1:2D:4B:3A:D1:F6:8B:91:79:32:1E:DC:82:3D:F0:A9:3E:8D:FF:FD:C5:BE:E6:94"}}},"request":{"raw":"GET /nickname_prompt.js?v=d2b631108e HTTP/1.1\r\nHost: lylib.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lylib.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Mon, 14 Sep 2026 14:12:10 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-disposition: inline; filename=nickname_prompt.js\r\nlast-modified: Wed, 09 Sep 2026 22:46:22 GMT\r\ncache-control: no-cache\r\netag: W/\"1788993982.3935103-7931-3566144660\"\r\naccess-control-allow-origin: https://lylib.fun\r\nvary: Accept-Encoding, Origin, Cookie\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":7931,"size_decoded":3371,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"834d1d875392e66cf570019ecbc6cf7b","sha1":"87f17dc466834b5942f5dda13aed3c156eaa805f","sha256":"745f580ecb1ee8649d98673d910626229b45eb45b90a21d48c35b4563606e922","sha512":"97e3b039c8bdbeacece05088b5462aa440f51a29e0947c995c855c2037610ed9d65cbdea6d13aed763020016c94187b1a02790ee8deb47add4518e9509951e65","ssdeep":"192:L18RmXAPMhbObsmel548Py6reDtrt4qu8LxTEotQ/EiA:BwDvb8pP1reD7dHFQoEEiA","tlshash":"00f196ad68c720254613f0a9aa5f4409797330af6f9aed043c4c9264afe453d53f7af8","first_seen":"2026-09-14T14:09:21.081683Z","last_seen":"2026-09-29T01:51:01.027753Z","times_seen":4,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"lylib.fun","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lylib.fun/notifications_center.js?v=d2b631108e","fqdn":"lylib.fun","domain":"lylib.fun","tld":"fun"},"ip":{"addr":"144.31.25.157","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lylib.fun/","date":"2026-09-14T14:12:10.644Z","timestamp":1789395130644,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lylib.fun","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 14:44:21 GMT","end":"Sat, 28 Nov 2026 14:44:20 GMT"},"fingerprint":{"sha1":"E4:50:36:35:3E:2B:72:4E:9F:66:BF:42:68:9E:F1:29:35:39:87:73","sha256":"87:0F:C5:4E:1F:56:1A:C8:E1:2D:4B:3A:D1:F6:8B:91:79:32:1E:DC:82:3D:F0:A9:3E:8D:FF:FD:C5:BE:E6:94"}}},"request":{"raw":"GET /notifications_center.js?v=d2b631108e HTTP/1.1\r\nHost: lylib.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lylib.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Mon, 14 Sep 2026 14:12:10 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-disposition: inline; filename=notifications_center.js\r\nlast-modified: Wed, 09 Sep 2026 22:46:22 GMT\r\ncache-control: no-cache\r\netag: W/\"1788993982.3935103-8356-459411111\"\r\naccess-control-allow-origin: https://lylib.fun\r\nvary: Accept-Encoding, Origin, Cookie\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8356,"size_decoded":3221,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"cf8bc5e363edb839da202346542c2216","sha1":"ce68f7931b2673b8c02fa03fdaa840674538f38b","sha256":"8ee55de7cbf773452baf8aefd3bf5b10ca60751be14a84e5be5e715a784637d4","sha512":"a035847c670e77bf7591594aedee1c40f976174693d1bee28453daa64b072df0b9c8a773c59d6a96d8027b53da3396639454343bdf100228b597e1722b6466cb","ssdeep":"96:t4YQuN/D4ASOpUrMuSQ357k0M7yv9c5x4UPrZpLQSfEi3vuyQunlYZsq1X5d/8jB:cupD4BqU79357IOvuCSMwPzuvUT/s1a","tlshash":"590284dc78f720722567b06907ef5546367b8213884add007adcc1047fe866697bafe8","first_seen":"2026-09-14T14:09:21.176789Z","last_seen":"2026-09-29T01:51:01.029835Z","times_seen":4,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"lylib.fun","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lylib.fun/thumbnails/92644389545906.jpg?v=dca14a5f","fqdn":"lylib.fun","domain":"lylib.fun","tld":"fun"},"ip":{"addr":"144.31.25.157","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lylib.fun/","date":"2026-09-14T14:12:10.754Z","timestamp":1789395130754,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lylib.fun","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 14:44:21 GMT","end":"Sat, 28 Nov 2026 14:44:20 GMT"},"fingerprint":{"sha1":"E4:50:36:35:3E:2B:72:4E:9F:66:BF:42:68:9E:F1:29:35:39:87:73","sha256":"87:0F:C5:4E:1F:56:1A:C8:E1:2D:4B:3A:D1:F6:8B:91:79:32:1E:DC:82:3D:F0:A9:3E:8D:FF:FD:C5:BE:E6:94"}}},"request":{"raw":"GET /thumbnails/92644389545906.jpg?v=dca14a5f HTTP/1.1\r\nHost: lylib.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lylib.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Mon, 14 Sep 2026 14:12:10 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 62361\r\nlast-modified: Mon, 14 Sep 2026 13:46:14 GMT\r\netag: \"6aa7faa6-f399\"\r\nexpires: Wed, 14 Oct 2026 14:12:10 GMT\r\ncache-control: max-age=2592000, public, max-age=2592000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":62361,"size_decoded":62712,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 500x500, components 3","md5":"f64c3a14ccb0e4d1733fd7300efcb58f","sha1":"dca14a5f58b1ecb6a434cd73572e81be60006924","sha256":"052841d3777d2d640a982e6cdf7df97eb21b952d107e3d38c898857c08a92283","sha512":"18ed9f413e95e44dd743992c8bc36e670602018c9df6660b9bbe9aed9eb6b1337b04fc99cf18aef1ddf27a6fc39b2913552612101a8b82fbd467d40fa24bc36f","ssdeep":"1536:cp2x3EKgPPNJtsFG6NIPiHd4SAovfJMcrL4Ctt5aKWod/i:nxcPFAFG6PHd4SAYmcroKWo0","tlshash":"f553022a322494658d525d36bce506f20b3527f1bbf96798a96e331ef1478dc03aca0d","first_seen":"2026-09-14T14:09:21.119769Z","last_seen":"2026-09-14T19:23:32.061769Z","times_seen":3,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"lylib.fun","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lylib.fun/announcement.css?v=2","fqdn":"lylib.fun","domain":"lylib.fun","tld":"fun"},"ip":{"addr":"144.31.25.157","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lylib.fun/","date":"2026-09-14T14:12:10.633Z","timestamp":1789395130633,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lylib.fun","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 14:44:21 GMT","end":"Sat, 28 Nov 2026 14:44:20 GMT"},"fingerprint":{"sha1":"E4:50:36:35:3E:2B:72:4E:9F:66:BF:42:68:9E:F1:29:35:39:87:73","sha256":"87:0F:C5:4E:1F:56:1A:C8:E1:2D:4B:3A:D1:F6:8B:91:79:32:1E:DC:82:3D:F0:A9:3E:8D:FF:FD:C5:BE:E6:94"}}},"request":{"raw":"GET /announcement.css?v=2 HTTP/1.1\r\nHost: lylib.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lylib.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Mon, 14 Sep 2026 14:12:10 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-disposition: inline; filename=announcement.css\r\nlast-modified: Wed, 09 Sep 2026 22:46:22 GMT\r\ncache-control: no-cache\r\netag: W/\"1788993982.37451-2155-3152415684\"\r\naccess-control-allow-origin: https://lylib.fun\r\nvary: Accept-Encoding, Origin, Cookie\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2155,"size_decoded":1374,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"7051ffade30995a72895d834bf35b49b","sha1":"fba741c03c63dc16338a01b5c9698b5c35a63e5f","sha256":"b472dd079bf3dd85822db19e101cafb5c2f37d9835766716fe3f6b2adcd76f7c","sha512":"c33db23253bdcd78491c43bc8742bdcdbd14b8494f10e892b9613174616e4b7b0c5abc23412b024139d60d1fb7d90c814e816d7f5ceffafb79a89ffea98d53a6","ssdeep":"","tlshash":"cf41e3c656d60a00be0bc8e475c2678e6b28e1068a05c9fcd6e1e21d4d8c1dd39e2aca","first_seen":"2026-09-14T14:09:21.168008Z","last_seen":"2026-09-29T01:51:00.996843Z","times_seen":4,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"lylib.fun","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lylib.fun/footer.js?v=d2b631108e","fqdn":"lylib.fun","domain":"lylib.fun","tld":"fun"},"ip":{"addr":"144.31.25.157","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lylib.fun/","date":"2026-09-14T14:12:10.636Z","timestamp":1789395130636,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lylib.fun","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 14:44:21 GMT","end":"Sat, 28 Nov 2026 14:44:20 GMT"},"fingerprint":{"sha1":"E4:50:36:35:3E:2B:72:4E:9F:66:BF:42:68:9E:F1:29:35:39:87:73","sha256":"87:0F:C5:4E:1F:56:1A:C8:E1:2D:4B:3A:D1:F6:8B:91:79:32:1E:DC:82:3D:F0:A9:3E:8D:FF:FD:C5:BE:E6:94"}}},"request":{"raw":"GET /footer.js?v=d2b631108e HTTP/1.1\r\nHost: lylib.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lylib.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Mon, 14 Sep 2026 14:12:10 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-disposition: inline; filename=footer.js\r\nlast-modified: Wed, 09 Sep 2026 22:46:22 GMT\r\ncache-control: no-cache\r\netag: W/\"1788993982.3865101-326-1903298780\"\r\naccess-control-allow-origin: https://lylib.fun\r\nvary: Accept-Encoding, Origin, Cookie\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":326,"size_decoded":788,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"14a991f0f7e6bb0645845eb129007d29","sha1":"4eebef3318b1755c4b2e5b91c3e63b533e6cde87","sha256":"036cc00b7671ad567a2d6046a115826b1333d70337c3febbed6e57344ff000ed","sha512":"ef32f0c9615885c99381e0c3f4987a83eae7e754b4ab5fad1e99ba830f0f423ee7a0914fda3672a7c1a11fa2ddb48c01619a43e972804075beae0fb7c53b485d","ssdeep":"","tlshash":"f9e0862a76f920208377b07d16dfa349353490533049de6a7a8ca651ffd0a74157aacd","first_seen":"2026-09-14T14:09:21.075933Z","last_seen":"2026-09-29T01:51:01.027093Z","times_seen":4,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"lylib.fun","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lylib.fun/thumbnails/93843378360088.jpg?v=e5b39964","fqdn":"lylib.fun","domain":"lylib.fun","tld":"fun"},"ip":{"addr":"144.31.25.157","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lylib.fun/","date":"2026-09-14T14:12:10.755Z","timestamp":1789395130755,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lylib.fun","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 14:44:21 GMT","end":"Sat, 28 Nov 2026 14:44:20 GMT"},"fingerprint":{"sha1":"E4:50:36:35:3E:2B:72:4E:9F:66:BF:42:68:9E:F1:29:35:39:87:73","sha256":"87:0F:C5:4E:1F:56:1A:C8:E1:2D:4B:3A:D1:F6:8B:91:79:32:1E:DC:82:3D:F0:A9:3E:8D:FF:FD:C5:BE:E6:94"}}},"request":{"raw":"GET /thumbnails/93843378360088.jpg?v=e5b39964 HTTP/1.1\r\nHost: lylib.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lylib.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Mon, 14 Sep 2026 14:12:10 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 112934\r\nlast-modified: Mon, 14 Sep 2026 13:40:36 GMT\r\netag: \"6aa7f954-1b926\"\r\nexpires: Wed, 14 Oct 2026 14:12:10 GMT\r\ncache-control: max-age=2592000, public, max-age=2592000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":112934,"size_decoded":113287,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 600x600, components 3","md5":"70f40179d9e483b02e9d57af7eff6760","sha1":"e5b39964096685f3932a43d13d93569f861e4bb1","sha256":"9b4215a7fb8b87a8f294fe3ab66bdd2e455ba8ca64d0b0778bec77b194e71860","sha512":"ee12b3640ee5805fee9b2938834c9420341a653cfbf49089e280cc9657e9663cd039f20c734267160ab5d1c0c0b5113bf312fe706e91f6b38b88d8fab54bd74f","ssdeep":"3072:aYtm3jXhxWvxSovhZD+o5iVRTwPKOybhQfXjT2HX0ot:5m3jhwxSovhdcgpybCPAX0K","tlshash":"57b31204ee1263a6de93d1bb2b5fa33822247f9d5e2c5e7d71434de95b6201f6c08908","first_seen":"2026-09-14T14:09:21.132304Z","last_seen":"2026-09-14T19:23:32.062685Z","times_seen":3,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"lylib.fun","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lylib.fun/thumbnails/128048502331483.jpg?v=b4d2083b","fqdn":"lylib.fun","domain":"lylib.fun","tld":"fun"},"ip":{"addr":"144.31.25.157","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lylib.fun/","date":"2026-09-14T14:12:10.759Z","timestamp":1789395130759,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lylib.fun","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 14:44:21 GMT","end":"Sat, 28 Nov 2026 14:44:20 GMT"},"fingerprint":{"sha1":"E4:50:36:35:3E:2B:72:4E:9F:66:BF:42:68:9E:F1:29:35:39:87:73","sha256":"87:0F:C5:4E:1F:56:1A:C8:E1:2D:4B:3A:D1:F6:8B:91:79:32:1E:DC:82:3D:F0:A9:3E:8D:FF:FD:C5:BE:E6:94"}}},"request":{"raw":"GET /thumbnails/128048502331483.jpg?v=b4d2083b HTTP/1.1\r\nHost: lylib.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lylib.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Mon, 14 Sep 2026 14:12:10 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 81478\r\nlast-modified: Mon, 14 Sep 2026 13:01:02 GMT\r\netag: \"6aa7f00e-13e46\"\r\nexpires: Wed, 14 Oct 2026 14:12:10 GMT\r\ncache-control: max-age=2592000, public, max-age=2592000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":81478,"size_decoded":81830,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 600x600, components 3","md5":"89b3e578701263fdd2c2345ee357ddf8","sha1":"b4d2083bc27398d8d5f17e9652b93a7558c78c34","sha256":"14374862de132e5a6d847dc6132e66d212be14446672d5ad87d2a11b5e09d9a4","sha512":"b3942b981be6537e3446971d99354f1fa8310e54fdef5bf1b539de78d01822511056c4404ec099dda14e50983aa1c9cd9d4a0814f2145b9362ba3c78992f16ce","ssdeep":"1536:uX8pYnKw9/FS4kbNLv88SaGhInXrMZR0EdK5tTCHCsMZcZq+UYs+bgLW:NKnZ9NS/LvZSXhI7FEQIQ8q+UYDULW","tlshash":"f58302008d57a5c6d7412b67ec5135428c5bbc1f6bf8c53836e3aa27462e3e4da7ec02","first_seen":"2026-09-14T14:09:21.088704Z","last_seen":"2026-09-14T19:23:32.078736Z","times_seen":3,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"lylib.fun","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lylib.fun/thumbnails/83203007766703.jpg?v=c2212aaa","fqdn":"lylib.fun","domain":"lylib.fun","tld":"fun"},"ip":{"addr":"144.31.25.157","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lylib.fun/","date":"2026-09-14T14:12:10.760Z","timestamp":1789395130760,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lylib.fun","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 14:44:21 GMT","end":"Sat, 28 Nov 2026 14:44:20 GMT"},"fingerprint":{"sha1":"E4:50:36:35:3E:2B:72:4E:9F:66:BF:42:68:9E:F1:29:35:39:87:73","sha256":"87:0F:C5:4E:1F:56:1A:C8:E1:2D:4B:3A:D1:F6:8B:91:79:32:1E:DC:82:3D:F0:A9:3E:8D:FF:FD:C5:BE:E6:94"}}},"request":{"raw":"GET /thumbnails/83203007766703.jpg?v=c2212aaa HTTP/1.1\r\nHost: lylib.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lylib.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Mon, 14 Sep 2026 14:12:10 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 51009\r\nlast-modified: Mon, 14 Sep 2026 12:43:05 GMT\r\netag: \"6aa7ebd9-c741\"\r\nexpires: Wed, 14 Oct 2026 14:12:10 GMT\r\ncache-control: max-age=2592000, public, max-age=2592000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":51009,"size_decoded":51360,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 500x500, components 3","md5":"adf75552f45e0f275bfb6f95aa7c200d","sha1":"c2212aaa1f61c76f3296121e6076c40348ea363b","sha256":"63405ade7a3b3ab893c5959af0be314c291f3fb8143e23ec43907b8f3e08e936","sha512":"edbb55c375499f05a6f7d14237352c2fbb59042b3ed9a42626f2f4a22d81d6bf20d5ab23ba69ab8de82bace3d43a1f569fadce1df120cec5afe72c50b8135a3f","ssdeep":"1536:cH5KtgIeSLg6gmuLNiDT1n0KXtVWgQI8YlijS:U5KtgaLdNsNihWxI8tjS","tlshash":"4b330281e066e2f76922cdb69cd838a2eb54800599f5260e917d359cec50f0df5cf8b7","first_seen":"2026-09-14T14:09:21.091458Z","last_seen":"2026-09-14T14:12:46.614103Z","times_seen":2,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"lylib.fun","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lylib.fun/thumbnails/109919425555431.jpg?v=9fdfda8e","fqdn":"lylib.fun","domain":"lylib.fun","tld":"fun"},"ip":{"addr":"144.31.25.157","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lylib.fun/","date":"2026-09-14T14:12:10.762Z","timestamp":1789395130762,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lylib.fun","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 14:44:21 GMT","end":"Sat, 28 Nov 2026 14:44:20 GMT"},"fingerprint":{"sha1":"E4:50:36:35:3E:2B:72:4E:9F:66:BF:42:68:9E:F1:29:35:39:87:73","sha256":"87:0F:C5:4E:1F:56:1A:C8:E1:2D:4B:3A:D1:F6:8B:91:79:32:1E:DC:82:3D:F0:A9:3E:8D:FF:FD:C5:BE:E6:94"}}},"request":{"raw":"GET /thumbnails/109919425555431.jpg?v=9fdfda8e HTTP/1.1\r\nHost: lylib.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lylib.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Mon, 14 Sep 2026 14:12:10 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 81175\r\nlast-modified: Mon, 14 Sep 2026 12:37:13 GMT\r\netag: \"6aa7ea79-13d17\"\r\nexpires: Wed, 14 Oct 2026 14:12:10 GMT\r\ncache-control: max-age=2592000, public, max-age=2592000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":81175,"size_decoded":81527,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 600x600, components 3","md5":"748ccaf597ed0230f6e1ac29538971a7","sha1":"9fdfda8e16ea7f2c1bd5b971f8842aca28148456","sha256":"c0a3471d5e757265a9c56dce57a091eadda97b6d4ed72259741e91934d5b3192","sha512":"fdf717d57852db57a4123911b4aca9d5f2880e5c55db69937a5862501981ba48fa724af009d784d98cad47591efadb3438a5e203ef4131d17c8b2b126625cc9a","ssdeep":"1536:q7KiKvTJlBvA7k1M4en+h//SDRfMYgplzhkpAWtXX2MbM7fPni15DMRNLnLzjw:wKiKH67k1Ren+t/wfMY2lz5WbAjvIDKK","tlshash":"0b83027f8c69a243e228da3bbd19310ea223971f3356063dc72d8517765d72d8a63738","first_seen":"2026-09-14T14:09:21.093982Z","last_seen":"2026-09-14T14:12:46.615655Z","times_seen":2,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"lylib.fun","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lylib.fun/api/track","fqdn":"lylib.fun","domain":"lylib.fun","tld":"fun"},"ip":{"addr":"144.31.25.157","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://lylib.fun/","date":"2026-09-14T14:12:11.212Z","timestamp":1789395131212,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lylib.fun","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 14:44:21 GMT","end":"Sat, 28 Nov 2026 14:44:20 GMT"},"fingerprint":{"sha1":"E4:50:36:35:3E:2B:72:4E:9F:66:BF:42:68:9E:F1:29:35:39:87:73","sha256":"87:0F:C5:4E:1F:56:1A:C8:E1:2D:4B:3A:D1:F6:8B:91:79:32:1E:DC:82:3D:F0:A9:3E:8D:FF:FD:C5:BE:E6:94"}}},"request":{"raw":"POST /api/track HTTP/1.1\r\nHost: lylib.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lylib.fun/\r\nContent-Type: application/json\r\nContent-Length: 12\r\nOrigin: https://lylib.fun\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":12,"data":"{\"path\":\"/\"}"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Mon, 14 Sep 2026 14:12:11 GMT\r\ncontent-type: application/json\r\ncontent-length: 12\r\nset-cookie: lylib_vid=c7a86bedc8cb50d192638fb81728a294; Expires=Tue, 19 Oct 2027 14:12:11 GMT; Max-Age=34560000; HttpOnly; Path=/; SameSite=Lax\r\naccess-control-allow-origin: https://lylib.fun\r\nvary: Origin, Cookie\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"lylib_vid","value":"c7a86bedc8cb50d192638fb81728a294","quoted":false,"path":"/","expires":"2027-10-19T14:12:11Z","raw_expires":"Tue, 19 Oct 2027 14:12:11 GMT","max_age":34560000,"secure":false,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"lylib_vid=c7a86bedc8cb50d192638fb81728a294; Expires=Tue, 19 Oct 2027 14:12:11 GMT; Max-Age=34560000; HttpOnly; Path=/; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12,"size_decoded":529,"mime_type":"application/json","magic":"JSON text data","md5":"c60417de14f10fc7b4915ba8f6232522","sha1":"54b5d14407a490598a32efef92921ccc05cec105","sha256":"e5f1eb4d806641698a35efe20e098efd20d7d57a9b90ee69079d5bb650920726","sha512":"f9bc6f7a59cb2a013767ea7b2036c6ce9d38ea186056e92cfad37635348300f4ad57db99a0f850fb537b8f23761eb8506a7f9b318bd95af37870e30d682af1ed","ssdeep":"","tlshash":"40600003000c0030c000030003c0ff30000300300000000c000cf000033000c0003c0f","first_seen":"2023-05-13T00:46:17Z","last_seen":"2026-10-11T13:30:28.552497Z","times_seen":11426,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"lylib.fun","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lylib.fun/assets/index.css?v=d2b631108e","fqdn":"lylib.fun","domain":"lylib.fun","tld":"fun"},"ip":{"addr":"144.31.25.157","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lylib.fun/","date":"2026-09-14T14:12:10.619Z","timestamp":1789395130619,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lylib.fun","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 14:44:21 GMT","end":"Sat, 28 Nov 2026 14:44:20 GMT"},"fingerprint":{"sha1":"E4:50:36:35:3E:2B:72:4E:9F:66:BF:42:68:9E:F1:29:35:39:87:73","sha256":"87:0F:C5:4E:1F:56:1A:C8:E1:2D:4B:3A:D1:F6:8B:91:79:32:1E:DC:82:3D:F0:A9:3E:8D:FF:FD:C5:BE:E6:94"}}},"request":{"raw":"GET /assets/index.css?v=d2b631108e HTTP/1.1\r\nHost: lylib.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lylib.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Mon, 14 Sep 2026 14:12:10 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-disposition: inline; filename=index.css\r\nlast-modified: Thu, 10 Sep 2026 19:54:35 GMT\r\ncache-control: no-cache\r\netag: W/\"1789070075.6101813-49356-3122334611\"\r\naccess-control-allow-origin: https://lylib.fun\r\nvary: Accept-Encoding, Origin, Cookie\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":49356,"size_decoded":8314,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text","md5":"394d28463cfa5bdd5da825b6d146892d","sha1":"9f3c1ed6fce2f7a75e7790f605b928e9ee33d42f","sha256":"54274e5682e6cdfc24aba3c5a3ee4cdd0163ab7ccc3a1067052cf8d31f77738b","sha512":"8bc2807fb5c1b990ae81afda828c9cdb551e3eb8653edb5ab85145f63b2ab99b672a1a6d2e9fad0d2723867ee39e8315bc352f558b3e07a4d8f3056bfe1951df","ssdeep":"768:T1sgvZFW+RF3n7fDJDHKtsUZ9kiceU5WJ71d:ZR44FRHbriceU5WJ71d","tlshash":"dc23118eaa9305447d17a5682beb574ab379d003d10ece6c7fdd32888f861dce9a0b54","first_seen":"2026-09-14T14:09:21.163847Z","last_seen":"2026-09-14T19:23:32.06939Z","times_seen":3,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"lylib.fun","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lylib.fun/admin_menu.js?v=d2b631108e","fqdn":"lylib.fun","domain":"lylib.fun","tld":"fun"},"ip":{"addr":"144.31.25.157","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lylib.fun/","date":"2026-09-14T14:12:10.631Z","timestamp":1789395130631,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lylib.fun","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 14:44:21 GMT","end":"Sat, 28 Nov 2026 14:44:20 GMT"},"fingerprint":{"sha1":"E4:50:36:35:3E:2B:72:4E:9F:66:BF:42:68:9E:F1:29:35:39:87:73","sha256":"87:0F:C5:4E:1F:56:1A:C8:E1:2D:4B:3A:D1:F6:8B:91:79:32:1E:DC:82:3D:F0:A9:3E:8D:FF:FD:C5:BE:E6:94"}}},"request":{"raw":"GET /admin_menu.js?v=d2b631108e HTTP/1.1\r\nHost: lylib.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lylib.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Mon, 14 Sep 2026 14:12:10 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-disposition: inline; filename=admin_menu.js\r\nlast-modified: Wed, 09 Sep 2026 22:46:22 GMT\r\ncache-control: no-cache\r\netag: W/\"1788993982.37451-524-2558069354\"\r\naccess-control-allow-origin: https://lylib.fun\r\nvary: Accept-Encoding, Origin, Cookie\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":524,"size_decoded":871,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"85b0ce019c32fdbac7325f55a8d830fe","sha1":"1514a7c9cd0a3ad5a9e282da4dbf5d52d8684df8","sha256":"944fd077430819cc5029119f8e7fc73d5622d2c17a423112a162086b70a22acc","sha512":"81e7dee504069d0c6cc47cf3b3eb243ba680a2fa3b481d1db9953be19b60fda90c9c1b3e08ce5b5d26941a0eaa28b997a3573968891a93ccec46cfa9d82d5391","ssdeep":"","tlshash":"87f0591939fb21708367b0bd569f8606322590173649cd497e1c9240af497706ab2a9d","first_seen":"2026-09-14T14:09:21.141109Z","last_seen":"2026-09-29T01:51:01.011961Z","times_seen":4,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"lylib.fun","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lylib.fun/api/admin/me","fqdn":"lylib.fun","domain":"lylib.fun","tld":"fun"},"ip":{"addr":"144.31.25.157","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://lylib.fun/","date":"2026-09-14T14:12:11.207Z","timestamp":1789395131207,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lylib.fun","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 14:44:21 GMT","end":"Sat, 28 Nov 2026 14:44:20 GMT"},"fingerprint":{"sha1":"E4:50:36:35:3E:2B:72:4E:9F:66:BF:42:68:9E:F1:29:35:39:87:73","sha256":"87:0F:C5:4E:1F:56:1A:C8:E1:2D:4B:3A:D1:F6:8B:91:79:32:1E:DC:82:3D:F0:A9:3E:8D:FF:FD:C5:BE:E6:94"}}},"request":{"raw":"GET /api/admin/me HTTP/1.1\r\nHost: lylib.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lylib.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Mon, 14 Sep 2026 14:12:11 GMT\r\ncontent-type: application/json\r\ncontent-length: 19\r\naccess-control-allow-origin: https://lylib.fun\r\nvary: Origin, Cookie\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":19,"size_decoded":391,"mime_type":"application/json","magic":"JSON text data","md5":"8973f27806047cc2e07eda1b7706e35f","sha1":"8f1e63ce21c67f21f70df398836bf12e01952bd2","sha256":"134651279c2906eb5751d8d3c24141d4c2d7db318b24f7d245ddf85392936195","sha512":"a4239ae8689553dcfc9d8808810108424743efc889b4883010cb06125be2fd1a152c0e7dd596089016508b7273f7b27863e3a44f92b48734753455c94fe128ab","ssdeep":"","tlshash":"b670000008c00a28200808c00a00c2032000002030aa3000c020c00028820200a08800","first_seen":"2026-01-08T16:06:30.33105Z","last_seen":"2026-09-29T01:51:01.018679Z","times_seen":6,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"lylib.fun","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lylib.fun/api/songs?sort=new\u0026per_page=10\u0026period=day","fqdn":"lylib.fun","domain":"lylib.fun","tld":"fun"},"ip":{"addr":"144.31.25.157","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://lylib.fun/","date":"2026-09-14T14:12:11.221Z","timestamp":1789395131221,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lylib.fun","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 14:44:21 GMT","end":"Sat, 28 Nov 2026 14:44:20 GMT"},"fingerprint":{"sha1":"E4:50:36:35:3E:2B:72:4E:9F:66:BF:42:68:9E:F1:29:35:39:87:73","sha256":"87:0F:C5:4E:1F:56:1A:C8:E1:2D:4B:3A:D1:F6:8B:91:79:32:1E:DC:82:3D:F0:A9:3E:8D:FF:FD:C5:BE:E6:94"}}},"request":{"raw":"GET /api/songs?sort=new\u0026per_page=10\u0026period=day HTTP/1.1\r\nHost: lylib.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lylib.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Mon, 14 Sep 2026 14:12:11 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: https://lylib.fun\r\nvary: Accept-Encoding, Origin, Cookie\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4695,"size_decoded":1528,"mime_type":"application/json","magic":"JSON text data","md5":"5cc4fccebfc0165dc8ecf307f6e6fb09","sha1":"31234502d4c13a46dd940698c27055c0e68c9868","sha256":"1f3e6cb6df3de455a23a15f665ce0d2295948d0c289ae8678e57daa23a586c9b","sha512":"1e9e5ad4f552c40df9fa27e81903bdeb9eb11b1d64a9f2fb48396e64bbaccf72e37e208c0b35625eb74995f0a0074fc1e57849e412785d735da53d646c2d7520","ssdeep":"96:IWxLTKWxcx7ZiWxjHdWxSoHI96319bC25cPuCRkiQjA/:I2fK2WZi2B24UcR","tlshash":"33a1ffb4552808b8ffc4b4dac87b3e5e90c8bbbbd1d19994de99fc2fc421461ab4c442","first_seen":"2026-09-14T14:12:46.594026Z","last_seen":"2026-09-14T14:12:46.594026Z","times_seen":1,"resource_available":true,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"lylib.fun","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lylib.fun/api/top-authors?limit=10","fqdn":"lylib.fun","domain":"lylib.fun","tld":"fun"},"ip":{"addr":"144.31.25.157","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://lylib.fun/","date":"2026-09-14T14:12:11.226Z","timestamp":1789395131226,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lylib.fun","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 14:44:21 GMT","end":"Sat, 28 Nov 2026 14:44:20 GMT"},"fingerprint":{"sha1":"E4:50:36:35:3E:2B:72:4E:9F:66:BF:42:68:9E:F1:29:35:39:87:73","sha256":"87:0F:C5:4E:1F:56:1A:C8:E1:2D:4B:3A:D1:F6:8B:91:79:32:1E:DC:82:3D:F0:A9:3E:8D:FF:FD:C5:BE:E6:94"}}},"request":{"raw":"GET /api/top-authors?limit=10 HTTP/1.1\r\nHost: lylib.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lylib.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Mon, 14 Sep 2026 14:12:11 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: https://lylib.fun\r\nvary: Accept-Encoding, Origin, Cookie\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1990,"size_decoded":906,"mime_type":"application/json","magic":"JSON text data","md5":"498ca8dc056dc5e7162801eb3b20a07c","sha1":"cf7b091725ee0e9b8d71d187a97d17d8a9ccc3bc","sha256":"78f822b6b368328b77d71acdc05f773e708e032aec104d8463468d30aed06f0e","sha512":"7010a53b80a1c674b3ff003769cc410c85240c27472e21878ba5ab84c1c7b148ba6dbf89485ecfb223e5b0596ebae535483b2d00625f73331d07b4dd92512310","ssdeep":"","tlshash":"3c411904dd0d099affb6f8b8da12ae6bdd8d2d94a3f05652cdc6fc3a8443521c78d514","first_seen":"2026-09-14T14:09:21.172075Z","last_seen":"2026-09-14T14:12:46.626026Z","times_seen":2,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"lylib.fun","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lylib.fun/favicon-16x16.png?v=5","fqdn":"lylib.fun","domain":"lylib.fun","tld":"fun"},"ip":{"addr":"144.31.25.157","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lylib.fun/","date":"2026-09-14T14:12:11.350Z","timestamp":1789395131350,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lylib.fun","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 14:44:21 GMT","end":"Sat, 28 Nov 2026 14:44:20 GMT"},"fingerprint":{"sha1":"E4:50:36:35:3E:2B:72:4E:9F:66:BF:42:68:9E:F1:29:35:39:87:73","sha256":"87:0F:C5:4E:1F:56:1A:C8:E1:2D:4B:3A:D1:F6:8B:91:79:32:1E:DC:82:3D:F0:A9:3E:8D:FF:FD:C5:BE:E6:94"}}},"request":{"raw":"GET /favicon-16x16.png?v=5 HTTP/1.1\r\nHost: lylib.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lylib.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: lylib_vid=c7a86bedc8cb50d192638fb81728a294\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Mon, 14 Sep 2026 14:12:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 662\r\ncontent-disposition: inline; filename=favicon-16x16.png\r\nlast-modified: Sun, 30 Aug 2026 20:43:22 GMT\r\ncache-control: no-cache\r\netag: \"1788122602.0644073-662-3213232910\"\r\naccept-ranges: bytes\r\naccess-control-allow-origin: https://lylib.fun\r\nvary: Origin, Cookie\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":662,"size_decoded":1221,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"2716c340992b0b348461db18ef7eb0d4","sha1":"92baf54f0aa8f46f295ccbc6d177865bc1d2080a","sha256":"ce2ec476ffce7e0552282f5cbc3f886f5279c4a8cd388c3dea17752e051db3cd","sha512":"e8057d3ea97a7f4a6d030e8b1d771b77cabddfdf919b7d40f479e4e1a6248b225ae300b013d4399fcc28ec942fe3f39d3a125ca6cac6512175af85e81de6b799","ssdeep":"","tlshash":"630168b46a05fe188d432bf6560b713ea4f7e96b0d63070c0e60b63454e0cf85bb9803","first_seen":"2026-09-14T14:09:21.173934Z","last_seen":"2026-09-29T01:51:01.034829Z","times_seen":4,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"lylib.fun","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lylib.fun/visit_tracker.js?v=d2b631108e","fqdn":"lylib.fun","domain":"lylib.fun","tld":"fun"},"ip":{"addr":"144.31.25.157","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lylib.fun/","date":"2026-09-14T14:12:10.645Z","timestamp":1789395130645,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lylib.fun","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 14:44:21 GMT","end":"Sat, 28 Nov 2026 14:44:20 GMT"},"fingerprint":{"sha1":"E4:50:36:35:3E:2B:72:4E:9F:66:BF:42:68:9E:F1:29:35:39:87:73","sha256":"87:0F:C5:4E:1F:56:1A:C8:E1:2D:4B:3A:D1:F6:8B:91:79:32:1E:DC:82:3D:F0:A9:3E:8D:FF:FD:C5:BE:E6:94"}}},"request":{"raw":"GET /visit_tracker.js?v=d2b631108e HTTP/1.1\r\nHost: lylib.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lylib.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Mon, 14 Sep 2026 14:12:10 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-disposition: inline; filename=visit_tracker.js\r\nlast-modified: Wed, 09 Sep 2026 22:46:22 GMT\r\ncache-control: no-cache\r\netag: W/\"1788993982.4075105-430-3169127367\"\r\naccess-control-allow-origin: https://lylib.fun\r\nvary: Accept-Encoding, Origin, Cookie\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":430,"size_decoded":847,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"d9864b90d8c5cfed510d0fc08ee1bbe3","sha1":"d8ecbf0694075552cf3076f2602a8ec694afbe54","sha256":"f199b757fff04479911c5df54f7adf8fcf0b60a5854c07638621cd11d3dd1204","sha512":"5ecfac10349404c81a72f0ddf56f7caa881e83e3baf583c2bbbed3bc1eb1e6b63deaa1c2f68f7126da2361fc2997b59370010236a802b67ba346bc8d38b6b680","ssdeep":"","tlshash":"43e02beb18e31c630f3bb129455e9506312780676dd9ac62b99e13511f542be07a19cc","first_seen":"2026-09-14T14:09:21.143269Z","last_seen":"2026-09-29T01:51:01.005655Z","times_seen":4,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"lylib.fun","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lylib.fun/ads.js?v=d2b631108e","fqdn":"lylib.fun","domain":"lylib.fun","tld":"fun"},"ip":{"addr":"144.31.25.157","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lylib.fun/","date":"2026-09-14T14:12:10.646Z","timestamp":1789395130646,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lylib.fun","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 14:44:21 GMT","end":"Sat, 28 Nov 2026 14:44:20 GMT"},"fingerprint":{"sha1":"E4:50:36:35:3E:2B:72:4E:9F:66:BF:42:68:9E:F1:29:35:39:87:73","sha256":"87:0F:C5:4E:1F:56:1A:C8:E1:2D:4B:3A:D1:F6:8B:91:79:32:1E:DC:82:3D:F0:A9:3E:8D:FF:FD:C5:BE:E6:94"}}},"request":{"raw":"GET /ads.js?v=d2b631108e HTTP/1.1\r\nHost: lylib.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lylib.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Mon, 14 Sep 2026 14:12:10 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-disposition: inline; filename=ads.js\r\nlast-modified: Fri, 11 Sep 2026 14:29:37 GMT\r\ncache-control: no-cache\r\netag: W/\"1789136977.7472384-4410-1461847941\"\r\naccess-control-allow-origin: https://lylib.fun\r\nvary: Accept-Encoding, Origin, Cookie\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4410,"size_decoded":2185,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"ae45dd04296499a0690eddadc232c12d","sha1":"fbef6551fa69c0f3b0a92e6435806de021d812f0","sha256":"400a22226c2b8012fe1ae68e6149d41d1adf7d6d0ec4bcaee3f8299e527d62d6","sha512":"cad54b5ff1479ef457608a2dfa5e62a719c70912ac88c9b8f0159874e0d1dea3c8717a8f5c09631f7797ba367e2538b3b9f76a2ee607bfe0521c63332e5cf454","ssdeep":"96:oRDDbWDTXSo8ZfKahZAtpouf+8NCI3eluIFk9FMAywV:oRX6DbCfKah6tlf+8Uw96dA","tlshash":"1e91316c72f314365133a0be429f56063a2d5953a04bcb45bb9c47641fa0d29aaf38fc","first_seen":"2026-09-14T14:09:21.178551Z","last_seen":"2026-09-14T19:23:32.08413Z","times_seen":3,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"lylib.fun","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lylib.fun/assets/index.js?v=d2b631108e","fqdn":"lylib.fun","domain":"lylib.fun","tld":"fun"},"ip":{"addr":"144.31.25.157","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lylib.fun/","date":"2026-09-14T14:12:10.647Z","timestamp":1789395130647,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lylib.fun","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 14:44:21 GMT","end":"Sat, 28 Nov 2026 14:44:20 GMT"},"fingerprint":{"sha1":"E4:50:36:35:3E:2B:72:4E:9F:66:BF:42:68:9E:F1:29:35:39:87:73","sha256":"87:0F:C5:4E:1F:56:1A:C8:E1:2D:4B:3A:D1:F6:8B:91:79:32:1E:DC:82:3D:F0:A9:3E:8D:FF:FD:C5:BE:E6:94"}}},"request":{"raw":"GET /assets/index.js?v=d2b631108e HTTP/1.1\r\nHost: lylib.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lylib.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Mon, 14 Sep 2026 14:12:10 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-disposition: inline; filename=index.js\r\nlast-modified: Fri, 11 Sep 2026 14:04:39 GMT\r\ncache-control: no-cache\r\netag: W/\"1789135479.7393317-44804-2929068839\"\r\naccess-control-allow-origin: https://lylib.fun\r\nvary: Accept-Encoding, Origin, Cookie\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":44804,"size_decoded":11489,"mime_type":"text/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text","md5":"de2bb852e03252924c2fe32144e7094a","sha1":"8cc068e3d80acc8f03853c34230eb0ffeb72c4f2","sha256":"e01e4a36aef6b06b1b5f4574545e14641776e4aa41234fbadfd3255a01c8e79c","sha512":"ca3af6238da698a90e145b5b8aaa92281db53d931a6c88925107d57ed20dbbf353fd573b43a232a570d4fb4c490b3e345c16d2d55c793be250b7ab15a9be6122","ssdeep":"384:O8kgcZJ90SfIxvTdsFPq/ob/QTn5+nFuRnE2HGSDPGgIT3fg8FIHWRGMHs1avNho:OxzMrMIlE6ZAUiI2RGMHvV8TI1K","tlshash":"d013b6f568fb00394463a0af97cf140e352a405bad4af9287b4c47492fd5868d9fbbc9","first_seen":"2026-09-14T14:09:21.111344Z","last_seen":"2026-09-14T19:23:32.08785Z","times_seen":3,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"lylib.fun","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lylib.fun/thumbnails/80583573418108.jpg?v=e5b39964","fqdn":"lylib.fun","domain":"lylib.fun","tld":"fun"},"ip":{"addr":"144.31.25.157","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lylib.fun/","date":"2026-09-14T14:12:10.757Z","timestamp":1789395130757,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lylib.fun","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 14:44:21 GMT","end":"Sat, 28 Nov 2026 14:44:20 GMT"},"fingerprint":{"sha1":"E4:50:36:35:3E:2B:72:4E:9F:66:BF:42:68:9E:F1:29:35:39:87:73","sha256":"87:0F:C5:4E:1F:56:1A:C8:E1:2D:4B:3A:D1:F6:8B:91:79:32:1E:DC:82:3D:F0:A9:3E:8D:FF:FD:C5:BE:E6:94"}}},"request":{"raw":"GET /thumbnails/80583573418108.jpg?v=e5b39964 HTTP/1.1\r\nHost: lylib.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lylib.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Mon, 14 Sep 2026 14:12:10 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 112934\r\nlast-modified: Mon, 14 Sep 2026 13:40:36 GMT\r\netag: \"6aa7f954-1b926\"\r\nexpires: Wed, 14 Oct 2026 14:12:10 GMT\r\ncache-control: max-age=2592000, public, max-age=2592000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":112934,"size_decoded":113287,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 600x600, components 3","md5":"70f40179d9e483b02e9d57af7eff6760","sha1":"e5b39964096685f3932a43d13d93569f861e4bb1","sha256":"9b4215a7fb8b87a8f294fe3ab66bdd2e455ba8ca64d0b0778bec77b194e71860","sha512":"ee12b3640ee5805fee9b2938834c9420341a653cfbf49089e280cc9657e9663cd039f20c734267160ab5d1c0c0b5113bf312fe706e91f6b38b88d8fab54bd74f","ssdeep":"3072:aYtm3jXhxWvxSovhZD+o5iVRTwPKOybhQfXjT2HX0ot:5m3jhwxSovhdcgpybCPAX0K","tlshash":"57b31204ee1263a6de93d1bb2b5fa33822247f9d5e2c5e7d71434de95b6201f6c08908","first_seen":"2026-09-14T14:09:21.132304Z","last_seen":"2026-09-14T19:23:32.062685Z","times_seen":3,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"lylib.fun","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lylib.fun/api/stats","fqdn":"lylib.fun","domain":"lylib.fun","tld":"fun"},"ip":{"addr":"144.31.25.157","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://lylib.fun/","date":"2026-09-14T14:12:11.224Z","timestamp":1789395131224,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lylib.fun","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 14:44:21 GMT","end":"Sat, 28 Nov 2026 14:44:20 GMT"},"fingerprint":{"sha1":"E4:50:36:35:3E:2B:72:4E:9F:66:BF:42:68:9E:F1:29:35:39:87:73","sha256":"87:0F:C5:4E:1F:56:1A:C8:E1:2D:4B:3A:D1:F6:8B:91:79:32:1E:DC:82:3D:F0:A9:3E:8D:FF:FD:C5:BE:E6:94"}}},"request":{"raw":"GET /api/stats HTTP/1.1\r\nHost: lylib.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lylib.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Mon, 14 Sep 2026 14:12:11 GMT\r\ncontent-type: application/json\r\ncontent-length: 46\r\naccess-control-allow-origin: https://lylib.fun\r\nvary: Origin, Cookie\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":46,"size_decoded":418,"mime_type":"application/json","magic":"JSON text data","md5":"dd8fa5fba36d2c9a0f9c79756ac55d2e","sha1":"d70de10b735c7323452fd647662e940db83c905c","sha256":"3b1e91d43bdb99fca5e34b6f5da01f93d3efd2c88489f850b4a7b0e6766915fa","sha512":"e4dd2373630001c2a55e58b1f5264d1ae8879e83b2cbdee8cb6c028f5c93520af6fdd32e754a2944a4100640d24a5fb30167d45d86cb087a46156c3ad800dae4","ssdeep":"","tlshash":"2490021068b5066052f436427425440500ad412a045b6c2567670455a1018593188141","first_seen":"2026-09-14T14:12:46.633786Z","last_seen":"2026-09-14T14:12:46.633786Z","times_seen":1,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"lylib.fun","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lylib.fun/api/user/me","fqdn":"lylib.fun","domain":"lylib.fun","tld":"fun"},"ip":{"addr":"144.31.25.157","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://lylib.fun/","date":"2026-09-14T14:12:11.227Z","timestamp":1789395131227,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lylib.fun","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 14:44:21 GMT","end":"Sat, 28 Nov 2026 14:44:20 GMT"},"fingerprint":{"sha1":"E4:50:36:35:3E:2B:72:4E:9F:66:BF:42:68:9E:F1:29:35:39:87:73","sha256":"87:0F:C5:4E:1F:56:1A:C8:E1:2D:4B:3A:D1:F6:8B:91:79:32:1E:DC:82:3D:F0:A9:3E:8D:FF:FD:C5:BE:E6:94"}}},"request":{"raw":"GET /api/user/me HTTP/1.1\r\nHost: lylib.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lylib.fun/\r\nContent-Type: application/json\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 401 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Mon, 14 Sep 2026 14:12:11 GMT\r\ncontent-type: application/json\r\ncontent-length: 30\r\naccess-control-allow-origin: https://lylib.fun\r\nvary: Origin, Cookie\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"Unauthorized","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":30,"size_decoded":402,"mime_type":"application/json","magic":"JSON text data","md5":"9d22e453ffa80aad7f293640d8fa4086","sha1":"73af80394e730d3365adb6dd68c144f4dc4ad0a2","sha256":"cde3693ac9c19f4d1b8d2f3df87d19aaa0aa8f401117f8b9e8d125423495d46f","sha512":"a456b4143e788a1a132689fdd87505ed3e3800615ffcfe617110bfcedc2b1d710ee0e1118909787b129d989873af101982c55d75cc1186aa50b2dfb3707e45eb","ssdeep":"","tlshash":"f9800020c2c20c2bc203c2e08a080a8002c0aaac00b00c0080202802800828fc8b80c2","first_seen":"2025-12-22T01:40:44.783653Z","last_seen":"2026-09-29T01:51:01.020769Z","times_seen":18,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"lylib.fun","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/telegram-web-app.js","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lylib.fun/","date":"2026-09-14T14:12:10.623Z","timestamp":1789395130623,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"GoDaddy TLS Intermediate CA DV - R1v1","organization":"GoDaddy.com"},"validity":{"start":"Tue, 25 Aug 2026 15:23:05 GMT","end":"Thu, 11 Mar 2027 15:23:05 GMT"},"fingerprint":{"sha1":"D3:F2:BD:73:90:23:52:7C:F2:6D:35:7F:50:B8:B8:02:08:20:4B:56","sha256":"77:93:78:39:A3:40:CC:A0:3D:7C:07:91:31:55:5F:C1:96:A6:72:7B:23:EE:A5:40:39:CD:81:93:81:7A:21:F6"}}},"request":{"raw":"GET /js/telegram-web-app.js HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lylib.fun/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Mon, 14 Sep 2026 14:12:10 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 14 Jul 2026 09:31:36 GMT\r\netag: W/\"6a5601f8-1c71e\"\r\nexpires: Fri, 18 Sep 2026 14:12:10 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":116510,"size_decoded":24062,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (768)","md5":"7ff489f43d13a9c3ee7f7c7f6f4dd7c9","sha1":"07be491fa7955c1d77363629551064f42e448551","sha256":"3549138a7934039fe7dfd1291a4ee739bd2b705a614308053a8b08a87d85c451","sha512":"2b69a2654fc2b049aa90773afd62510e46aaec8325d76d2d0bb873e3b64d119a0567608a156231792e2e139c1f7fc064c104021f3ad5cea4114c1ef83049dbed","ssdeep":"1536:pdpTpRdoKd4F0WN2ZbBcn9cF9KTfVjLo03ueLE+wFFz1NIVIB/MGYV7p/xHK8ITU:TpTpRdfcKFU7RxDv","tlshash":"e6b33e4d6cb3612285b3b1bf8b5f925172719883301def20794d9b646f80e7c53eaad8","first_seen":"2026-07-14T10:55:37.795951Z","last_seen":"2026-10-09T11:51:14.098943Z","times_seen":1436,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":2,"connect":22,"send":0,"wait":22,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lylib.fun/add_track.js?v=d2b631108e","fqdn":"lylib.fun","domain":"lylib.fun","tld":"fun"},"ip":{"addr":"144.31.25.157","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lylib.fun/","date":"2026-09-14T14:12:10.630Z","timestamp":1789395130630,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lylib.fun","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 14:44:21 GMT","end":"Sat, 28 Nov 2026 14:44:20 GMT"},"fingerprint":{"sha1":"E4:50:36:35:3E:2B:72:4E:9F:66:BF:42:68:9E:F1:29:35:39:87:73","sha256":"87:0F:C5:4E:1F:56:1A:C8:E1:2D:4B:3A:D1:F6:8B:91:79:32:1E:DC:82:3D:F0:A9:3E:8D:FF:FD:C5:BE:E6:94"}}},"request":{"raw":"GET /add_track.js?v=d2b631108e HTTP/1.1\r\nHost: lylib.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lylib.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Mon, 14 Sep 2026 14:12:10 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-disposition: inline; filename=add_track.js\r\nlast-modified: Fri, 11 Sep 2026 17:12:33 GMT\r\ncache-control: no-cache\r\netag: W/\"1789146753.6665397-15230-2371750378\"\r\naccess-control-allow-origin: https://lylib.fun\r\nvary: Accept-Encoding, Origin, Cookie\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":15230,"size_decoded":5005,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"637e0cf39f683f963e6316790f56578e","sha1":"328fea85505d538e5413bfaf4f866b279c9062ef","sha256":"cc732205d63a61e229884872407bfb20ee141539b4a9ee3f30731837c57dcddd","sha512":"df53389defa076ddcc03ff694771c88cc3c9c4e0f89242e2edc33c29a2a516d112bad5fd1f1f2a594cb1d3ac5fc82d42964e14f62531c6b65f5ffde79bde8d53","ssdeep":"384:9Qc5DTwdaui+FrZ/SN3FIvnrhxHhHZjfIflitfTflh0DjP0Pg9qgqv:xToaed0fP79q","tlshash":"cd62c6b314ff083b31633839da8f61093a5250576c4ae454be4c9b692fd9e28a4f77c9","first_seen":"2026-09-14T14:09:21.165931Z","last_seen":"2026-09-14T19:23:32.094051Z","times_seen":3,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"lylib.fun","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lylib.fun/footer.css","fqdn":"lylib.fun","domain":"lylib.fun","tld":"fun"},"ip":{"addr":"144.31.25.157","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lylib.fun/","date":"2026-09-14T14:12:10.635Z","timestamp":1789395130635,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lylib.fun","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 14:44:21 GMT","end":"Sat, 28 Nov 2026 14:44:20 GMT"},"fingerprint":{"sha1":"E4:50:36:35:3E:2B:72:4E:9F:66:BF:42:68:9E:F1:29:35:39:87:73","sha256":"87:0F:C5:4E:1F:56:1A:C8:E1:2D:4B:3A:D1:F6:8B:91:79:32:1E:DC:82:3D:F0:A9:3E:8D:FF:FD:C5:BE:E6:94"}}},"request":{"raw":"GET /footer.css HTTP/1.1\r\nHost: lylib.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lylib.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Mon, 14 Sep 2026 14:12:10 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-disposition: inline; filename=footer.css\r\nlast-modified: Wed, 09 Sep 2026 22:46:22 GMT\r\ncache-control: no-cache\r\netag: W/\"1788993982.3865101-2431-2058094920\"\r\naccess-control-allow-origin: https://lylib.fun\r\nvary: Accept-Encoding, Origin, Cookie\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2431,"size_decoded":1402,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"48960e315c379965e420ee6cb4a94d9e","sha1":"2d730eb472a23fd6efc5c216b04158abb23d44c2","sha256":"e7debbbc662cd1fda949f093f7604691331c0fe8574933aef3aaa3a7abec3d93","sha512":"734acfa0e6da526fbaf9d39fd54cedecdda72592b4e6c517cd3926a1f6a1e2792bbb8a5b56189fed3b8d3756f0eefe0a1e4226c89a8216bdb1ef771644a3e1e7","ssdeep":"","tlshash":"3041f09a3a7552146d1b5929b1c6d74df3b8c481c60ec7bc7ffb0248dd8a2ece921e48","first_seen":"2026-09-14T14:09:21.170387Z","last_seen":"2026-09-29T01:51:01.050649Z","times_seen":4,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"lylib.fun","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lylib.fun/cookie_consent.css","fqdn":"lylib.fun","domain":"lylib.fun","tld":"fun"},"ip":{"addr":"144.31.25.157","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lylib.fun/","date":"2026-09-14T14:12:10.638Z","timestamp":1789395130638,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lylib.fun","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 14:44:21 GMT","end":"Sat, 28 Nov 2026 14:44:20 GMT"},"fingerprint":{"sha1":"E4:50:36:35:3E:2B:72:4E:9F:66:BF:42:68:9E:F1:29:35:39:87:73","sha256":"87:0F:C5:4E:1F:56:1A:C8:E1:2D:4B:3A:D1:F6:8B:91:79:32:1E:DC:82:3D:F0:A9:3E:8D:FF:FD:C5:BE:E6:94"}}},"request":{"raw":"GET /cookie_consent.css HTTP/1.1\r\nHost: lylib.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lylib.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Mon, 14 Sep 2026 14:12:10 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-disposition: inline; filename=cookie_consent.css\r\nlast-modified: Wed, 09 Sep 2026 22:46:22 GMT\r\ncache-control: no-cache\r\netag: W/\"1788993982.38351-1449-3559001228\"\r\naccess-control-allow-origin: https://lylib.fun\r\nvary: Accept-Encoding, Origin, Cookie\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1449,"size_decoded":1259,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"b0a0cabc4e2e661fa680e8c6e287a145","sha1":"52b00bb60e736c909e30f745dd32c5f3ad278f8b","sha256":"8786ac618e9ad2b8c2f17c3f0ce76a5cb8fe264f757788da71c9bf6156a1ca01","sha512":"d89ee91f89db56fc20e727c56cf1b89f978527eed7e11f6fbae7d6eed087715d98c4da862c9c9adce6d82de73df89c60ae1b27c6f5f72858932a69ae1b81c1c5","ssdeep":"","tlshash":"4231771d3abb01147b2650e038568f0f6758d54ada2bc57cabe12168dfcc3d469e4748","first_seen":"2026-09-14T14:09:21.129848Z","last_seen":"2026-09-29T01:51:01.045236Z","times_seen":4,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"lylib.fun","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lylib.fun/cookie_consent.js?v=d2b631108e","fqdn":"lylib.fun","domain":"lylib.fun","tld":"fun"},"ip":{"addr":"144.31.25.157","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lylib.fun/","date":"2026-09-14T14:12:10.641Z","timestamp":1789395130641,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lylib.fun","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 14:44:21 GMT","end":"Sat, 28 Nov 2026 14:44:20 GMT"},"fingerprint":{"sha1":"E4:50:36:35:3E:2B:72:4E:9F:66:BF:42:68:9E:F1:29:35:39:87:73","sha256":"87:0F:C5:4E:1F:56:1A:C8:E1:2D:4B:3A:D1:F6:8B:91:79:32:1E:DC:82:3D:F0:A9:3E:8D:FF:FD:C5:BE:E6:94"}}},"request":{"raw":"GET /cookie_consent.js?v=d2b631108e HTTP/1.1\r\nHost: lylib.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lylib.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Mon, 14 Sep 2026 14:12:10 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-disposition: inline; filename=cookie_consent.js\r\nlast-modified: Wed, 09 Sep 2026 22:46:22 GMT\r\ncache-control: no-cache\r\netag: W/\"1788993982.38351-2196-3349416992\"\r\naccess-control-allow-origin: https://lylib.fun\r\nvary: Accept-Encoding, Origin, Cookie\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2196,"size_decoded":1569,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"85025fc117e8c57281ae5ac03ece3702","sha1":"5d76bc89bdee92738540a49f0f4ec19153f46e83","sha256":"a41cebf1127d4afcac2d6e16fd696aceabca8c9d02398c83169f8e3eb3d9287d","sha512":"aefa2c5b61bc1c1a1465b6787c95c621758dbef39476fcbc7bc79032309ccd68e526c0fb54b764c0d106cbbdf4df85a2e8629b3f9ad798fbab8498963300c6c5","ssdeep":"","tlshash":"4b41337d3efb11395b13304d6b6e9a007475413b6a28de48798ce9183fdda3446b4749","first_seen":"2026-09-14T14:09:21.175429Z","last_seen":"2026-09-29T01:51:01.005108Z","times_seen":4,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"lylib.fun","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lylib.fun/thumbnails/137394792718113.jpg?v=431ffc47","fqdn":"lylib.fun","domain":"lylib.fun","tld":"fun"},"ip":{"addr":"144.31.25.157","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lylib.fun/","date":"2026-09-14T14:12:10.748Z","timestamp":1789395130748,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lylib.fun","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 14:44:21 GMT","end":"Sat, 28 Nov 2026 14:44:20 GMT"},"fingerprint":{"sha1":"E4:50:36:35:3E:2B:72:4E:9F:66:BF:42:68:9E:F1:29:35:39:87:73","sha256":"87:0F:C5:4E:1F:56:1A:C8:E1:2D:4B:3A:D1:F6:8B:91:79:32:1E:DC:82:3D:F0:A9:3E:8D:FF:FD:C5:BE:E6:94"}}},"request":{"raw":"GET /thumbnails/137394792718113.jpg?v=431ffc47 HTTP/1.1\r\nHost: lylib.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lylib.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Mon, 14 Sep 2026 14:12:10 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 100636\r\nlast-modified: Mon, 14 Sep 2026 14:11:34 GMT\r\netag: \"6aa80096-1891c\"\r\nexpires: Wed, 14 Oct 2026 14:12:10 GMT\r\ncache-control: max-age=2592000, public, max-age=2592000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":100636,"size_decoded":100989,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 500x500, components 3","md5":"e0b64a4464035ea3874dc808db12e8d7","sha1":"431ffc473d63dba8d73d0b71799a1ecd10380fb8","sha256":"9d7caf680fb2386374e834836c85a0eca4e833481cfd2986a40186952591dae4","sha512":"4ea79076ab738c58d166aefd4b110ac542bfe661a315882673f5715c3dcf72eeca19bfe3d2167925da95347851179758f3ae67ef46b4ea62cb4d684cd4874bff","ssdeep":"3072:7U0/kgZfVYD9lfFxe2vvdxaY13IyM1qybTc:757PA9l9U2uEIyMgybQ","tlshash":"4ca3129ca4af9cef13dc358f4309563b9f545d0d206b80646a61b8c339cf63a9889b93","first_seen":"2026-09-14T14:12:46.643494Z","last_seen":"2026-09-14T19:23:32.072051Z","times_seen":2,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"lylib.fun","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lylib.fun/api/user/me","fqdn":"lylib.fun","domain":"lylib.fun","tld":"fun"},"ip":{"addr":"144.31.25.157","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://lylib.fun/","date":"2026-09-14T14:12:11.210Z","timestamp":1789395131210,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lylib.fun","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 14:44:21 GMT","end":"Sat, 28 Nov 2026 14:44:20 GMT"},"fingerprint":{"sha1":"E4:50:36:35:3E:2B:72:4E:9F:66:BF:42:68:9E:F1:29:35:39:87:73","sha256":"87:0F:C5:4E:1F:56:1A:C8:E1:2D:4B:3A:D1:F6:8B:91:79:32:1E:DC:82:3D:F0:A9:3E:8D:FF:FD:C5:BE:E6:94"}}},"request":{"raw":"GET /api/user/me HTTP/1.1\r\nHost: lylib.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lylib.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 401 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Mon, 14 Sep 2026 14:12:11 GMT\r\ncontent-type: application/json\r\ncontent-length: 30\r\naccess-control-allow-origin: https://lylib.fun\r\nvary: Origin, Cookie\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"Unauthorized","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30,"size_decoded":402,"mime_type":"application/json","magic":"JSON text data","md5":"9d22e453ffa80aad7f293640d8fa4086","sha1":"73af80394e730d3365adb6dd68c144f4dc4ad0a2","sha256":"cde3693ac9c19f4d1b8d2f3df87d19aaa0aa8f401117f8b9e8d125423495d46f","sha512":"a456b4143e788a1a132689fdd87505ed3e3800615ffcfe617110bfcedc2b1d710ee0e1118909787b129d989873af101982c55d75cc1186aa50b2dfb3707e45eb","ssdeep":"","tlshash":"f9800020c2c20c2bc203c2e08a080a8002c0aaac00b00c0080202802800828fc8b80c2","first_seen":"2025-12-22T01:40:44.783653Z","last_seen":"2026-09-29T01:51:01.020769Z","times_seen":18,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"lylib.fun","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lylib.fun/thumbnails/134883430501637.jpg?v=f05adffe","fqdn":"lylib.fun","domain":"lylib.fun","tld":"fun"},"ip":{"addr":"144.31.25.157","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lylib.fun/","date":"2026-09-14T14:12:10.752Z","timestamp":1789395130752,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lylib.fun","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 14:44:21 GMT","end":"Sat, 28 Nov 2026 14:44:20 GMT"},"fingerprint":{"sha1":"E4:50:36:35:3E:2B:72:4E:9F:66:BF:42:68:9E:F1:29:35:39:87:73","sha256":"87:0F:C5:4E:1F:56:1A:C8:E1:2D:4B:3A:D1:F6:8B:91:79:32:1E:DC:82:3D:F0:A9:3E:8D:FF:FD:C5:BE:E6:94"}}},"request":{"raw":"GET /thumbnails/134883430501637.jpg?v=f05adffe HTTP/1.1\r\nHost: lylib.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lylib.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Mon, 14 Sep 2026 14:12:10 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 9775\r\nlast-modified: Mon, 14 Sep 2026 13:53:34 GMT\r\netag: \"6aa7fc5e-262f\"\r\nexpires: Wed, 14 Oct 2026 14:12:10 GMT\r\ncache-control: max-age=2592000, public, max-age=2592000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":9775,"size_decoded":10125,"mime_type":"image/jpeg","magic":"PNG image data, 150 x 150, 8-bit/color RGB, non-interlaced","md5":"3543efef6e2b4b05f0f0174ba08ac5d7","sha1":"f05adffe30635f7c42d16d6c357f9eec29fc2932","sha256":"c1b6ec40be861998daa6530b4de2cd4677c94f8049f31aa6ce13963779f1f044","sha512":"cd9ca2e4d6cd328fdfe1263d3357d8fef687c268754822abfed88eaf26eae44feb343a9794e8303cbddfa1aa051bec754412992c6182c180187a9cc00bb2805c","ssdeep":"192:OikTEhJfUuss2u2uJmabkQ+UgwZ8a4uKb1Qd9Ng0SavbUZxlGMOUhV+0ACupf:Oikgh5KBu2udrLgwZt7eG9NjvbUUMOa6","tlshash":"c412aec9abb5e3fef9d171119f880200294232fc7d68b2580e9c62461bd27673a1c66f","first_seen":"2026-09-14T14:09:21.157294Z","last_seen":"2026-09-14T19:23:32.084978Z","times_seen":3,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"lylib.fun","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lylib.fun/avatars/u9000000000216-220b675e5294.jpg","fqdn":"lylib.fun","domain":"lylib.fun","tld":"fun"},"ip":{"addr":"144.31.25.157","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lylib.fun/","date":"2026-09-14T14:12:10.756Z","timestamp":1789395130756,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lylib.fun","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 14:44:21 GMT","end":"Sat, 28 Nov 2026 14:44:20 GMT"},"fingerprint":{"sha1":"E4:50:36:35:3E:2B:72:4E:9F:66:BF:42:68:9E:F1:29:35:39:87:73","sha256":"87:0F:C5:4E:1F:56:1A:C8:E1:2D:4B:3A:D1:F6:8B:91:79:32:1E:DC:82:3D:F0:A9:3E:8D:FF:FD:C5:BE:E6:94"}}},"request":{"raw":"GET /avatars/u9000000000216-220b675e5294.jpg HTTP/1.1\r\nHost: lylib.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lylib.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Mon, 14 Sep 2026 14:12:10 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 26615\r\nlast-modified: Fri, 11 Sep 2026 15:57:01 GMT\r\netag: \"6aa424cd-67f7\"\r\nexpires: Wed, 14 Oct 2026 14:12:10 GMT\r\ncache-control: max-age=2592000, public, max-age=2592000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26615,"size_decoded":26966,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 512x512, components 3","md5":"f4777990f4b04c6f152b1dd26bd617f4","sha1":"71bce5c38ed15cb9b10ed0b02bd0ff0b618bc534","sha256":"eb13d2fc1c1ab0fc52e24c4d7fde4c66c01294a0214f37b3ef8ac6f4190c24b9","sha512":"a26d92b49c3a6c98558ff3a85ce8ab35e19897fa5ecb992991e91b05f1d5853f662e93733bde35ae543a6f5673a250b4a759c3354f0b1ec7b53a46d01c808480","ssdeep":"768:CmnoC7TTCHAkvl0lYO3XgTpUMrhHUxt3vX:hoCvCgkd23XGrRipvX","tlshash":"9cc2f1bb1328a390c45f5f763bc232f167362d20d33533a4768d0aad8725e42b96499d","first_seen":"2026-09-14T14:09:21.145214Z","last_seen":"2026-09-14T19:23:32.057143Z","times_seen":3,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"lylib.fun","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lylib.fun/api/notifications?limit=30","fqdn":"lylib.fun","domain":"lylib.fun","tld":"fun"},"ip":{"addr":"144.31.25.157","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://lylib.fun/","date":"2026-09-14T14:12:11.211Z","timestamp":1789395131211,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lylib.fun","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 14:44:21 GMT","end":"Sat, 28 Nov 2026 14:44:20 GMT"},"fingerprint":{"sha1":"E4:50:36:35:3E:2B:72:4E:9F:66:BF:42:68:9E:F1:29:35:39:87:73","sha256":"87:0F:C5:4E:1F:56:1A:C8:E1:2D:4B:3A:D1:F6:8B:91:79:32:1E:DC:82:3D:F0:A9:3E:8D:FF:FD:C5:BE:E6:94"}}},"request":{"raw":"GET /api/notifications?limit=30 HTTP/1.1\r\nHost: lylib.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lylib.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 401 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Mon, 14 Sep 2026 14:12:11 GMT\r\ncontent-type: application/json\r\ncontent-length: 26\r\naccess-control-allow-origin: https://lylib.fun\r\nvary: Origin, Cookie\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"Unauthorized","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26,"size_decoded":398,"mime_type":"application/json","magic":"JSON text data","md5":"90664d3682c016fa0540407542fc2f10","sha1":"bf0d6f0c95e4a89658f54bd5f49fa7c27fcc42f6","sha256":"ba57ce238d0fe3648ab8d4a8cad2ca046ede321ca4ab7217b76fb4532597bcc9","sha512":"b092ea7d51fe796bb32b0b1ae3ff873cacc3d4ef657f65d5b676fa87f670a5d9c7e4e965d92b7c5d3031147b4d913a86b5bf90dfbbb9d1c7f64799fa8bde80ab","ssdeep":"","tlshash":"bf8000800ae8000fba0200880c022b200282c8aa03300c00c8b000b00083282ce2c0a0","first_seen":"2026-05-14T23:08:25.1728Z","last_seen":"2026-10-10T09:40:43.596675Z","times_seen":6,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"lylib.fun","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lylib.fun/api/ads?formats=billboard,inline,native","fqdn":"lylib.fun","domain":"lylib.fun","tld":"fun"},"ip":{"addr":"144.31.25.157","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://lylib.fun/","date":"2026-09-14T14:12:11.213Z","timestamp":1789395131213,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lylib.fun","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 14:44:21 GMT","end":"Sat, 28 Nov 2026 14:44:20 GMT"},"fingerprint":{"sha1":"E4:50:36:35:3E:2B:72:4E:9F:66:BF:42:68:9E:F1:29:35:39:87:73","sha256":"87:0F:C5:4E:1F:56:1A:C8:E1:2D:4B:3A:D1:F6:8B:91:79:32:1E:DC:82:3D:F0:A9:3E:8D:FF:FD:C5:BE:E6:94"}}},"request":{"raw":"GET /api/ads?formats=billboard,inline,native HTTP/1.1\r\nHost: lylib.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lylib.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Mon, 14 Sep 2026 14:12:11 GMT\r\ncontent-type: application/json\r\ncontent-length: 11\r\naccess-control-allow-origin: https://lylib.fun\r\nvary: Origin, Cookie\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11,"size_decoded":383,"mime_type":"application/json","magic":"JSON text data","md5":"ff27fb8a20f30d5fea192fdfbdf38a77","sha1":"07ec18c9ad780e58e43d7687657505a72cdb87f6","sha256":"ced0ceb77cb7ff868a92fdbdb8174848168b056f7982d6622e3e76afdca02a00","sha512":"235ccb531ff0da844a1daf91d83c0f87c4aeee1d4e42f5efa80275931006f13cfa8c601109bfa3084a014725b47c8d1b7ca9ac239685a9002eed6b1373aee017","ssdeep":"","tlshash":"69500000000c030000c00000fc003000000000000030c0f00c0000c003003000cc00c0","first_seen":"2024-12-02T06:06:31.428445Z","last_seen":"2026-09-14T19:23:32.089521Z","times_seen":9,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"lylib.fun","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lylib.fun/lang_detect.js?v=d2b631108e","fqdn":"lylib.fun","domain":"lylib.fun","tld":"fun"},"ip":{"addr":"144.31.25.157","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lylib.fun/","date":"2026-09-14T14:12:10.617Z","timestamp":1789395130617,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lylib.fun","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 14:44:21 GMT","end":"Sat, 28 Nov 2026 14:44:20 GMT"},"fingerprint":{"sha1":"E4:50:36:35:3E:2B:72:4E:9F:66:BF:42:68:9E:F1:29:35:39:87:73","sha256":"87:0F:C5:4E:1F:56:1A:C8:E1:2D:4B:3A:D1:F6:8B:91:79:32:1E:DC:82:3D:F0:A9:3E:8D:FF:FD:C5:BE:E6:94"}}},"request":{"raw":"GET /lang_detect.js?v=d2b631108e HTTP/1.1\r\nHost: lylib.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lylib.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Mon, 14 Sep 2026 14:12:10 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-disposition: inline; filename=lang_detect.js\r\nlast-modified: Wed, 09 Sep 2026 22:46:22 GMT\r\ncache-control: no-cache\r\netag: W/\"1788993982.3925104-2158-2738948807\"\r\naccess-control-allow-origin: https://lylib.fun\r\nvary: Accept-Encoding, Origin, Cookie\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2158,"size_decoded":1421,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"482faa71e8df2e03a618ffd3131ff088","sha1":"3c939898cc0be368111109d26c2fef9d901db035","sha256":"0b6aa48274bbc9921423b9fe528fa81ba52f1f0f21fc47b9e637ef823602d8f4","sha512":"b31272f62e07c35a52baa871be1fd853f8e17e4a2cbce4a8d95ac2d20a430c7c53cf34e38b20f28b4b7e540d52d779ee4308a227e0e8acec13f9cb8483723220","ssdeep":"","tlshash":"7841ae5f78eb30052112a0bfb9ce5805b0a9c443c90dad46b66ddb10afc16b48ab5bad","first_seen":"2026-09-14T14:09:21.136847Z","last_seen":"2026-09-29T01:51:01.015282Z","times_seen":4,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"lylib.fun","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lylib.fun/notifications_center.css","fqdn":"lylib.fun","domain":"lylib.fun","tld":"fun"},"ip":{"addr":"144.31.25.157","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lylib.fun/","date":"2026-09-14T14:12:10.640Z","timestamp":1789395130640,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lylib.fun","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 14:44:21 GMT","end":"Sat, 28 Nov 2026 14:44:20 GMT"},"fingerprint":{"sha1":"E4:50:36:35:3E:2B:72:4E:9F:66:BF:42:68:9E:F1:29:35:39:87:73","sha256":"87:0F:C5:4E:1F:56:1A:C8:E1:2D:4B:3A:D1:F6:8B:91:79:32:1E:DC:82:3D:F0:A9:3E:8D:FF:FD:C5:BE:E6:94"}}},"request":{"raw":"GET /notifications_center.css HTTP/1.1\r\nHost: lylib.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lylib.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Mon, 14 Sep 2026 14:12:10 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-disposition: inline; filename=notifications_center.css\r\nlast-modified: Wed, 09 Sep 2026 22:46:22 GMT\r\ncache-control: no-cache\r\netag: W/\"1788993982.3935103-3313-711397139\"\r\naccess-control-allow-origin: https://lylib.fun\r\nvary: Accept-Encoding, Origin, Cookie\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3313,"size_decoded":1653,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"bc708edb82100484be1b6e935bc1ff87","sha1":"9f58be1cf5f019df6039c5de2e90a9c110901d33","sha256":"4f14fcd4ee44d27b2cb6df40cb5d6a3e5789b6ff1c209f6a2a3e80fd1fb3e45f","sha512":"2a2df8628cf3aa86cd2a81990d9ecf05342e8d998f4027d58653725c9a7c103f2c1aa4e9ad8ff4ac86d4fb7ec0a509d791a51791134a0e4a293cc02d395a0d39","ssdeep":"","tlshash":"70610fc927d74604be2fe8d466c29b99a36c4212dd0eca7c6be1300c5edc1e969f0b4d","first_seen":"2026-09-14T14:09:21.109893Z","last_seen":"2026-09-29T01:51:00.983011Z","times_seen":4,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"lylib.fun","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lylib.fun/thumbnails/93394085746316.jpg?v=5cb4a50a","fqdn":"lylib.fun","domain":"lylib.fun","tld":"fun"},"ip":{"addr":"144.31.25.157","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lylib.fun/","date":"2026-09-14T14:12:10.758Z","timestamp":1789395130758,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lylib.fun","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 14:44:21 GMT","end":"Sat, 28 Nov 2026 14:44:20 GMT"},"fingerprint":{"sha1":"E4:50:36:35:3E:2B:72:4E:9F:66:BF:42:68:9E:F1:29:35:39:87:73","sha256":"87:0F:C5:4E:1F:56:1A:C8:E1:2D:4B:3A:D1:F6:8B:91:79:32:1E:DC:82:3D:F0:A9:3E:8D:FF:FD:C5:BE:E6:94"}}},"request":{"raw":"GET /thumbnails/93394085746316.jpg?v=5cb4a50a HTTP/1.1\r\nHost: lylib.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lylib.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Mon, 14 Sep 2026 14:12:10 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 12103\r\nlast-modified: Mon, 14 Sep 2026 13:15:46 GMT\r\netag: \"6aa7f382-2f47\"\r\nexpires: Wed, 14 Oct 2026 14:12:10 GMT\r\ncache-control: max-age=2592000, public, max-age=2592000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":12103,"size_decoded":12454,"mime_type":"image/jpeg","magic":"PNG image data, 150 x 150, 8-bit/color RGB, non-interlaced","md5":"ffc06185b13efbeba2669acf2655b8a7","sha1":"5cb4a50a9c1db273976c91b202c21d0b93be1fd2","sha256":"53149e4f3684627515159b465a4153d8a61d85429506c6c9ea0638fba82d839a","sha512":"83f5c5caa9f585b2640c7190b0c6ff61345599a0cb66a4e75558ab8f371cb49cb0f66d5cad8eb8ecc28b7765e11146ee4cb6c9ba5450f4ab2481ed9fe643836c","ssdeep":"192:wrppmuA0lWP9bxzn0kSBqGICzjVp5f7GWL/rzUhHDxtnXIaP4hcdty1:qppmLtldznXSkivVp5fnoxxl3d41","tlshash":"a242cf884400785ee188b338373ba1b64813c6fae371f67982be571ee91e18fc65344c","first_seen":"2026-09-14T14:09:21.085087Z","last_seen":"2026-09-14T19:23:32.074023Z","times_seen":3,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"lylib.fun","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"lylib.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}