{"report_id":"1545d6bf-e966-41ef-9379-28970125bcaa","version":0,"status":"done","tags":[],"date":"2026-09-29T16:10:57Z","url":{"schema":"https","addr":"rbx1000dfthfhhfhu.blogspot.com/","fqdn":"rbx1000dfthfhhfhu.blogspot.com","domain":"rbx1000dfthfhhfhu.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"2a00:1450:400f:808::2001","port":0,"asn":15169,"as":"Google LLC","country":"Ireland","country_code":"IE"},"final":{"url":{"schema":"https","addr":"rbx1000dfthfhhfhu.blogspot.com/","fqdn":"rbx1000dfthfhhfhu.blogspot.com","domain":"rbx1000dfthfhhfhu.blogspot.com","tld":"blogspot.com"},"title":"ROBUX","dom":{"size":39,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"086707e4369f60afedcafb16050a7618","sha1":"8216b0cc6876cbd44f01c158e7dff3833ceccd41","sha256":"a7fe83ec64bb23eb28090598db3d166ed98e52e39d1afbbfd74c579553f93e4e","sha512":"aade21843813e2cab329b99185c6f61db7907a556ea974e0315dcf3ad967cab20fee66d4f10db0d0ec43a71e086ce6d700d5524103deaefa3ce5f6be74ba5737","ssdeep":"","tlshash":"6a9000fee0a2000efc303bc00cc2238a0c28c3a830028e002ac038b8c80822bcc032c8","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"2023-03-07T01:03:24Z","last_seen":"2026-09-29T23:17:29.171794Z","times_seen":1052723,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"rbx1000dfthfhhfhu.blogspot.com/","fqdn":"rbx1000dfthfhhfhu.blogspot.com","domain":"rbx1000dfthfhhfhu.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"2a00:1450:400f:808::2001","port":0,"asn":15169,"as":"Google LLC","country":"Ireland","country_code":"IE"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-03T16:10:57Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":12}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"lilphawdaily.netlify.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"rbx1000dfthfhhfhu.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"rbx1000dfthfhhfhu.blogspot.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"rbx1000dfthfhhfhu.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"pl25536823.profitablecpmrate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"zoologyfibre.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"zoologyfibre.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"www.highperformanceformat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"www.highperformanceformat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"kettledroopingcontinuation.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"rbx1000dfthfhhfhu.blogspot.com","ip":{"addr":"142.250.178.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2000-07-31","domain_rank":0,"first_seen":"2026-08-29T21:32:06.68284Z","last_seen":"2026-09-13T20:42:10.157361Z","alert_count":18,"request_count":6,"received_data":39317,"sent_data":3284,"comment":"","tags":null,"fingerprints":[{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}]},{"fqdn":"pl25536823.profitablecpmrate.com","ip":{"addr":"172.237.146.39","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"domain_registered":"2024-10-15","domain_rank":0,"first_seen":"2025-03-06T21:56:36.485475Z","last_seen":"2026-09-13T20:42:10.187041Z","alert_count":1,"request_count":1,"received_data":6671,"sent_data":537,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"mamshirt.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-04-14","domain_rank":0,"first_seen":"2026-07-24T11:08:27.428544Z","last_seen":"2026-09-28T01:54:39.648712Z","alert_count":0,"request_count":2,"received_data":11920,"sent_data":1322,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"kettledroopingcontinuation.com","ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2024-09-01","domain_rank":196057,"first_seen":"2025-07-30T15:18:19.355595Z","last_seen":"2026-09-27T02:00:14.879715Z","alert_count":9,"request_count":3,"received_data":4328,"sent_data":3319,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-09-27T23:14:39.019501Z","alert_count":0,"request_count":1,"received_data":72755,"sent_data":538,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"archive.org","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"1995-12-14","domain_rank":184,"first_seen":"2013-04-16T14:52:59Z","last_seen":"2026-09-25T19:04:24.784207Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":600,"comment":"","tags":null,"fingerprints":null},{"fqdn":"d3r33tlb373kwk.cloudfront.net","ip":{"addr":"65.9.60.123","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2026-08-25T17:58:17.794366Z","last_seen":"2026-09-28T01:45:35.600887Z","alert_count":0,"request_count":3,"received_data":9355,"sent_data":1604,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server:2.4.51","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"OpenSSL:1.0.2k","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"PHP:7.4.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"imgur.com","ip":{"addr":"199.232.196.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2009-01-09","domain_rank":695,"first_seen":"2012-10-04T02:07:24Z","last_seen":"2026-09-26T23:57:25.795891Z","alert_count":0,"request_count":2,"received_data":1072,"sent_data":1098,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.highperformanceformat.com","ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2024-10-15","domain_rank":366864,"first_seen":"2024-10-23T18:32:34.138968Z","last_seen":"2026-09-23T10:55:38.157488Z","alert_count":4,"request_count":2,"received_data":100836,"sent_data":1097,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"d19k1sh57v5k0g.cloudfront.net","ip":{"addr":"65.9.60.135","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2026-05-04T04:19:17.420666Z","last_seen":"2026-09-08T20:42:33.977867Z","alert_count":0,"request_count":1,"received_data":27798,"sent_data":485,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"lilphawdaily.netlify.app","ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2018-05-08","domain_rank":0,"first_seen":"2024-01-04T18:06:22Z","last_seen":"2026-09-12T20:39:39.166994Z","alert_count":1,"request_count":1,"received_data":448,"sent_data":559,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}]},{"fqdn":"sf-tb-sg.ibytedtos.com","ip":{"addr":"184.51.252.141","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"domain_registered":"2017-12-18","domain_rank":491751,"first_seen":"2018-05-17T06:40:48Z","last_seen":"2026-09-10T21:15:22.712555Z","alert_count":0,"request_count":1,"received_data":11617,"sent_data":597,"comment":"","tags":null,"fingerprints":null},{"fqdn":"i.imgur.com","ip":{"addr":"199.232.196.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2009-01-09","domain_rank":3309,"first_seen":"2012-05-21T08:09:36Z","last_seen":"2026-09-26T11:04:41.947368Z","alert_count":0,"request_count":2,"received_data":293144,"sent_data":1038,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"zoologyfibre.com","ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2024-09-03","domain_rank":0,"first_seen":"2026-05-23T09:52:15.201176Z","last_seen":"2026-09-27T01:41:55.654079Z","alert_count":6,"request_count":3,"received_data":4260,"sent_data":3255,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"protrafficinspector.com","ip":{"addr":"63.189.55.98","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2025-06-18","domain_rank":614186,"first_seen":"2025-07-25T22:45:21.95813Z","last_seen":"2026-09-24T11:32:14.988512Z","alert_count":0,"request_count":1,"received_data":533,"sent_data":518,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rbx1000dfthfhhfhu.blogspot.com/","fqdn":"rbx1000dfthfhhfhu.blogspot.com","domain":"rbx1000dfthfhhfhu.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.250.178.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"61b679dcf136c6d676eb1aafe1dbce2d","sha1":"f7fb59325355207b3c1bed1871d06b2b6a47af22","sha256":"f67cf9a0dc650164a148b1f95a9c201513eadf681462f7d51ec722c835b9ebbf","sha512":"786b9d54f448cb63c02e3588c9a5cab4729852db400e98732ff2b8f71eaa437e68ec06f0b192054f60d477aa7a062ba20f9817785456aab05e3a0b918a2b8aaf","ssdeep":"","tlshash":"e9c08ca8808bb204442a881f1818c0a029205e073c0ca89236d0a8001fcc40e4cfaf79","size":147,"data":"","first_seen":"2026-08-29T21:32:13.104606Z","last_seen":"2026-09-29T16:11:13.208112Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rbx1000dfthfhhfhu.blogspot.com/","fqdn":"rbx1000dfthfhhfhu.blogspot.com","domain":"rbx1000dfthfhhfhu.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.250.178.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"9d60bbd6d0e373acc4d78d1b2beccad8","sha1":"1e1dc57329b0fb32f5ac35ec6b51065da5be9a0b","sha256":"cfc01c04bdad0de512828c4493e50da3cf6b8759b957c182d14fca38928dd80b","sha512":"1038d5308a3d3edd2fbd647629f214fd09a8486a646ab70e7e944354fe12289b37fb9f2a4cba99925593e6ac005a602b9f4407f5c9904e79f0d165a984e6e61a","ssdeep":"","tlshash":"74e0ab2998e706384cf67a441038da3930fc38a0aaa3d027625cc87dcd39fc50c00aed","size":424,"data":"","first_seen":"2026-08-29T21:32:13.106272Z","last_seen":"2026-09-29T16:11:13.209356Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rbx1000dfthfhhfhu.blogspot.com/","fqdn":"rbx1000dfthfhhfhu.blogspot.com","domain":"rbx1000dfthfhhfhu.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.250.178.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"3b85eb4ef0ada1723b39f473267da586","sha1":"c1e28bdf766341d0c5f79d5e997120c8479d22c7","sha256":"0cc4dc54386e74ecf84777efbea90c28293f40c4fa8a8ca36e72931ab667b233","sha512":"b5cf46f98607c23edb99620ab9536dc45b6725e9a3d0705e5c1e3f3124cbb8dc3a7fdcbd39960733acecd02f1e1fb9dd71cebff26c7a0cca6af901ec21b99dab","ssdeep":"","tlshash":"a1e0c62a0a80207008a3a0781f69f0004023534bd84ebb047c0d0f294f7682a03322fa","size":346,"data":"","first_seen":"2026-08-29T21:32:13.110653Z","last_seen":"2026-09-29T16:11:13.209924Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rbx1000dfthfhhfhu.blogspot.com/","fqdn":"rbx1000dfthfhhfhu.blogspot.com","domain":"rbx1000dfthfhhfhu.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.250.178.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"2536df5500472e1de28034f4c07a067d","sha1":"c5fa7462aa7e964efd6dbf6e56caff6a128158c0","sha256":"b815fbb81f71ce5cdff4631273a38f936b6c85ab06cd3d045d4de7bc41dfd3d9","sha512":"5eeca9855bb1ed2ad469634d09ec143f6580e1c301f6c7695c72bafaf5b5fd0c5014cc00b5ba9f47bc229e84c63afbe1d2ae2afd4d5301d94341182494644f15","ssdeep":"","tlshash":"c0d02ef7f4d5ac218809a3200825e9083032e6feb3a04de094c0053a088a8ba9306fa0","size":271,"data":"","first_seen":"2026-05-25T18:38:39.672755Z","last_seen":"2026-09-29T22:54:25.720964Z","times_seen":16813,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rbx1000dfthfhhfhu.blogspot.com/","fqdn":"rbx1000dfthfhhfhu.blogspot.com","domain":"rbx1000dfthfhhfhu.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.250.178.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"402f47856f54930e93c88a889d2742ea","sha1":"3dcac8418cef0ee63be1ee54b52a2d9e4efd5b70","sha256":"983dc5b1c202aee0427b849ecb84977540e7ec46fb1589ed7f879c09a6d2fcc6","sha512":"3a0686055aa9095b682dc2fca98dd919afcc5ecec6bd95f4f436dffb716accc97442d4203d3d12257ee3c0e29dc9347764b0966cf9c86608686432cfc1e42af3","ssdeep":"","tlshash":"9a90025411a8a07d8902071c4cd582531b06622195684c0504546628695249d8e4588e","size":50,"data":"","first_seen":"2026-08-29T21:32:13.113174Z","last_seen":"2026-09-29T16:11:13.210962Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rbx1000dfthfhhfhu.blogspot.com/","fqdn":"rbx1000dfthfhhfhu.blogspot.com","domain":"rbx1000dfthfhhfhu.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.250.178.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"3c22e2de9de80d037bcf985e2443170a","sha1":"e510197fd4ed88989421b9bb967cd0d21e289fd6","sha256":"cbb4a01c51aa56ccd227ae557670eec8f845ce145ce548b40f8d561158af4e21","sha512":"697a67befcc7810b6ef3e0af08e133a20c453a919f7bae9b41d42ce569496c18ad79a52d44641b3dbb9c1c008372433d45ea4240d511b2f54f38c441fe92faa0","ssdeep":"","tlshash":"ea71f354e6b60c649223c07e2bd7260a283c212b7c45ba493f3c425c2f9ef5f65f94ad","size":3556,"data":"","first_seen":"2026-06-07T13:39:08.169048Z","last_seen":"2026-09-29T16:11:13.21198Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rbx1000dfthfhhfhu.blogspot.com/","fqdn":"rbx1000dfthfhhfhu.blogspot.com","domain":"rbx1000dfthfhhfhu.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.250.178.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"eafa77d525fb6872e28877463359485f","sha1":"cf742e0f0330aef2a84bf39c18047bdcea5ed1e2","sha256":"88a3faabec58a51e564dc9a4d8e0536b8d2c55587248515388581a07de188343","sha512":"c94e123021055e50c181b2ffc7b2e82e2b528b890101bbd5a00f4a464beb39f943cc9333c8c9909844e8055b090e560fe4346e9a5f71ba9ba130fa4068ef7f18","ssdeep":"","tlshash":"0ce0721a34c2203a02b385aa23b7810a2122270bc48ecb22ba5fc4961f28ca1050210c","size":303,"data":"","first_seen":"2026-06-07T13:39:08.170093Z","last_seen":"2026-09-29T16:11:13.212558Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rbx1000dfthfhhfhu.blogspot.com/","fqdn":"rbx1000dfthfhhfhu.blogspot.com","domain":"rbx1000dfthfhhfhu.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.250.178.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"27a2b2fc594daf6ecad1257063bb7174","sha1":"32f4da7049292636a70d20cb17030d2fd55c91a0","sha256":"33d18bd6aa09439d4ff2b2176e12d5ddf783816de932887a5650e96bab729c72","sha512":"ffa07838b4e8fa85bd49022d6d9719e347ab340bbbbac296709a3583c44048685c85f14ab8fe72c56ad4a6e3f77a7d531f4d48655f4ef6267c365de69513b240","ssdeep":"","tlshash":"ab016813b108e31432a614347b8baa18fd2ac2561c95453f381cf9324f57a63cedaae3","size":772,"data":"","first_seen":"2026-05-25T19:22:56.253262Z","last_seen":"2026-09-29T16:11:13.213784Z","times_seen":1536,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.highperformanceformat.com/90f42858fbf62705eb9917c6a09a9a21/invoke.js","fqdn":"www.highperformanceformat.com","domain":"highperformanceformat.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e625c70ee4a82c5e6718e0965ac2fe0f","sha1":"4d386705c40c7ad9130d4b67f222cdb0c0cc0e7d","sha256":"87a746859c0641e8b78e65f160c9ac6f27b66f403b779c2c7099e6e55f0d0349","sha512":"6fd86e448438f1cb4ab628b7b1b416a7447f37a0d812dd2cf4f551c2d099e5e33cd696cc23ce797e611d6ef8c707583b76659857b05d449d5d4e6b53e3f996a1","ssdeep":"768:vc6LklBn3+yxhRvR75gW/b9QECstnF36/I8UtEbDsPZxPvYXKvgHPRDAKRT5VsXG:aLnNOPnDsUD/l8kkCNskOT1tA","tlshash":"bd2307803f92ea6956a1a8f7332e9575f8094d55704cc0e8e16f3c943d9b337e878b68","size":49585,"data":"","first_seen":"2026-09-29T16:11:13.198892Z","last_seen":"2026-09-29T16:11:13.198892Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d19k1sh57v5k0g.cloudfront.net/e3bc26e.js","fqdn":"d19k1sh57v5k0g.cloudfront.net","domain":"d19k1sh57v5k0g.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"65.9.60.135","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b94ddaf5314bb49deec7c31316d7a363","sha1":"9053000c2ce886c75b21b3872b822cc1609a862c","sha256":"69a93a3114bad62633241b19555906f994925bb1ec6ed246720304d3fecb84fb","sha512":"44f49a59f4842bf4c583121420ad43e1121dac50cd1437b580d8995d77d11319878ea330ff1c66882e4634acc02c2de2fa1373c736f526b4810eb7214b20b84c","ssdeep":"768:n5f2T236wBXroljZ1/peRXMiH54aGz1WCyQgmip4L/4aLv0NO:z3Z7OZ1h2ayQgM","tlshash":"5bc2535aab6a1809867763b9df1f5208f575432f1512c119bc7c88d85fb0d3842aaffc","size":27325,"data":"","first_seen":"2026-08-25T17:58:20.627952Z","last_seen":"2026-09-29T16:11:13.203617Z","times_seen":185,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rbx1000dfthfhhfhu.blogspot.com/js/cookienotice.js","fqdn":"rbx1000dfthfhhfhu.blogspot.com","domain":"rbx1000dfthfhhfhu.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.250.178.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a705132a2174f88e196ec3610d68faa8","sha1":"3bad57a48d973a678fec600d45933010f6edc659","sha256":"068ffe90977f2b5b2dc2ef18572166e85281bd0ecb31c4902464b23db54d2568","sha512":"e947d33e0e9c5e6516f05e0ea696406e4e09b458f85021bc3a217071ae14879b2251e65aec5d1935ca9af2433d023356298321564e1a41119d41be7c2b2d36d5","ssdeep":"96:q54UPzHFcJZ7haKemb/m2GzrzCXAl/MStzo41Pm+YsttcVcbYhyjcso13EZDjiat:q5rPzHgxm2GzaXeMnuzYstyryPhZD9","tlshash":"4fd1630938a7127d125fa03fb6bf515ab66410238101db08786dfa785fd5f42a8e4ffa","size":6513,"data":"","first_seen":"2023-03-07T01:02:24Z","last_seen":"2026-09-29T22:54:25.635819Z","times_seen":140699,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.highperformanceformat.com/90f42858fbf62705eb9917c6a09a9a21/invoke.js","fqdn":"www.highperformanceformat.com","domain":"highperformanceformat.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c11037cce00296c6fc39a2a1f5337636","sha1":"982c0e54df8fc3d9681247784d566277fcd8b871","sha256":"6d952e3ed1007a69ed343cab1ce4c7752f2cd7bbdb4f96fc7d300e621038f20b","sha512":"bd811ee1929eb751d1f40ee43665d961a3179bfe9708f9fca341b4959f5533411d901ca561e0499e552a25c29110fccb73876d3d4caafc67795369cdb895e04c","ssdeep":"768:vc6LklBn3+yxhRvR75gW/bUQECstnF36/I8UtcbDsPZxPvYXKvgHPRDAKRT5VsXi:aLnNTPHDsUD/l8PkTNskOT1tA","tlshash":"242307803f92ea6956a1a8f7332e9575f8094d55704cc0e8e16f3c943d9b337e878b68","size":49515,"data":"","first_seen":"2026-09-29T16:11:13.205328Z","last_seen":"2026-09-29T16:11:13.205328Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mamshirt.com/17/1b50e57a5911fd0a5b46962ab48ca22b?ppk=90f42858fbf62705eb9917c6a09a9a21","fqdn":"mamshirt.com","domain":"mamshirt.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"06cfe8a1d68fd9df932bd0293227212c","sha1":"f4474824f10ab58a35a8c355cdab5b39ffe301d4","sha256":"46bcbbb84c37056cdb0fc47e9e6680779d5d3193ca4df61aef62ecc13d4ea554","sha512":"c6a1286df1bfe3d761e106d5746059c73e78e6af5741989610396e2bbc305618d4236dbbf9225bea95a39527143aa11fa43b5e749568d1242b7b9fb6e30d88ca","ssdeep":"96:yigF+LesfrhE+jrWMdi+lUkYmGmY+Gac51kvLKA+:yTF+fVEKrHU1Ac51eKA+","tlshash":"0f9182de7281b0a09b9328eb7b363a15b49c5d70349fc8e0f12d348a7c1673ac173a65","size":4461,"data":"","first_seen":"2026-09-25T16:16:28.005265Z","last_seen":"2026-09-29T18:54:14.197271Z","times_seen":91,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d3r33tlb373kwk.cloudfront.net/hzUtsSUlsXm.4623705.9f66a.0.js","fqdn":"d3r33tlb373kwk.cloudfront.net","domain":"d3r33tlb373kwk.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"65.9.60.123","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5727c1b213f38807648d0a49de98152f","sha1":"681f55783ce33115ca64f24a4909d84949365c8a","sha256":"b0e7ac5dd54786388e769457cde257d51531d4a496764268bd8b6f6d57a4d8d3","sha512":"b28d9d72734278c5c47f5677fea4471738a0aa0a4b1800b05ae3016899bbb326425b63de7538f13a97dd8d9152b626879e183b83cdaab10f220f133bb1327656","ssdeep":"192:M3vIrh56VmmV/GDJ/PMrYS6jtVV9JFDTARsUQ8w04vcswaw3wmhwewXwu:M3wWVxBKJsMHjLJFDERsn8w04vcswaw0","tlshash":"5132b6e678c0c41af2d28c5d76fbae3d998554158383ba64f68de73cc7ca4f44ae2250","size":11133,"data":"","first_seen":"2026-08-29T21:32:13.103392Z","last_seen":"2026-09-29T16:11:13.214324Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d3r33tlb373kwk.cloudfront.net/public/external/check.php?it=4623705\u0026time=1790698232073","fqdn":"d3r33tlb373kwk.cloudfront.net","domain":"d3r33tlb373kwk.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"65.9.60.123","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"69d77690ed201acd0627e99dd35c96eb","sha1":"05ffc794be6dae3836ee5df72d82d917323b2941","sha256":"577d248638c57941b7e35d9a19ef4b5d88d52482f6e59254142d4266c57bad38","sha512":"06aaf36275b0c4de82580319878333d973d3cd464f4c09df4281551f4381940dc792eb28c2c84b3a94196b53edf41751b01976ad77c5e393c0b62574c4b214bf","ssdeep":"","tlshash":"32a0220c0c02220f033230b080bbc8280030e3320bc0c3a8282aca8a2e03c3b2a0208e","size":72,"data":"","first_seen":"2023-08-12T16:35:44Z","last_seen":"2026-09-29T16:11:13.204188Z","times_seen":3630,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d3r33tlb373kwk.cloudfront.net/public/external/check.php?it=4623705\u0026time=1790698247543","fqdn":"d3r33tlb373kwk.cloudfront.net","domain":"d3r33tlb373kwk.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"65.9.60.123","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"69d77690ed201acd0627e99dd35c96eb","sha1":"05ffc794be6dae3836ee5df72d82d917323b2941","sha256":"577d248638c57941b7e35d9a19ef4b5d88d52482f6e59254142d4266c57bad38","sha512":"06aaf36275b0c4de82580319878333d973d3cd464f4c09df4281551f4381940dc792eb28c2c84b3a94196b53edf41751b01976ad77c5e393c0b62574c4b214bf","ssdeep":"","tlshash":"32a0220c0c02220f033230b080bbc8280030e3320bc0c3a8282aca8a2e03c3b2a0208e","size":72,"data":"","first_seen":"2023-08-12T16:35:44Z","last_seen":"2026-09-29T16:11:13.204188Z","times_seen":3630,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"protrafficinspector.com/stats","fqdn":"protrafficinspector.com","domain":"protrafficinspector.com","tld":"com"},"ip":{"addr":"63.189.55.98","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rbx1000dfthfhhfhu.blogspot.com/","date":"2026-09-29T16:10:21.679Z","timestamp":1790698221679,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"protrafficinspector.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 26 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A5:A0:EB:57:26:41:24:03:DD:F3:2D:91:FB:6B:49:B6:53:8B:5F:86","sha256":"82:7E:C7:50:5F:EC:61:E0:5F:7F:ED:2E:10:87:9B:31:A9:8F:4B:DF:E8:99:CC:2E:A1:13:31:E7:45:CE:89:25"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: protrafficinspector.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://rbx1000dfthfhhfhu.blogspot.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rbx1000dfthfhhfhu.blogspot.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 29 Sep 2026 16:10:21 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://rbx1000dfthfhhfhu.blogspot.com\r\nset-cookie: uid_id2=01a0edee-70d0-754b-954a-759627eb22eb:1:1; Path=/; Expires=Fri, 26 Sep 2036 16:10:21 GMT; Secure; SameSite=None\r\nvary: Origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"uid_id2","value":"01a0edee-70d0-754b-954a-759627eb22eb:1:1","quoted":false,"path":"/","expires":"2036-09-26T16:10:21Z","raw_expires":"Fri, 26 Sep 2036 16:10:21 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uid_id2=01a0edee-70d0-754b-954a-759627eb22eb:1:1; Path=/; Expires=Fri, 26 Sep 2036 16:10:21 GMT; Secure; SameSite=None"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40,"size_decoded":533,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"d0bc0a1fb90d16da32853d09605ef1a0","sha1":"556f2b98fb2bfa301077007cd8141cdf122624e9","sha256":"4e0c5473c08bb4a2d477a2bb89d7589f58ed6944ccfb11c09a7fa5b34e579d2a","sha512":"ed40827d8c408e8707520eb2cd326622a2898dfe508a84484b12e0609108d44023d8a06be282ef8a156718447a67ff5f9c4e884f886a0a888fe1034ee4c308d2","ssdeep":"","tlshash":"959004510045c11414c117d34f01d4dc513cc140117cd011414ffd507030f5d45d0547","first_seen":"2026-09-29T16:11:13.192368Z","last_seen":"2026-09-29T16:11:13.192368Z","times_seen":1,"resource_available":true,"data":null}},"time_used":108,"timings":{"blocked":0,"dns":5,"connect":24,"send":0,"wait":25,"receive":0,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lilphawdaily.netlify.app/bp.png","fqdn":"lilphawdaily.netlify.app","domain":"lilphawdaily.netlify.app","tld":"netlify.app"},"ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rbx1000dfthfhhfhu.blogspot.com/","date":"2026-09-29T16:10:28.987Z","timestamp":1790698228987,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /bp.png HTTP/1.1\r\nHost: lilphawdaily.netlify.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rbx1000dfthfhhfhu.blogspot.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nage: 1821\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit; ttl=31534180\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Tue, 29 Sep 2026 16:10:29 GMT\r\netag: 1736384723-ssl-df\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01M3PYX3HX4D7WMM572WGXKFGF\r\ncontent-length: 1393\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-29T23:35:44.423362Z","times_seen":18729606,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"lilphawdaily.netlify.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rbx1000dfthfhhfhu.blogspot.com/sara1.png","fqdn":"rbx1000dfthfhhfhu.blogspot.com","domain":"rbx1000dfthfhhfhu.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.250.178.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rbx1000dfthfhhfhu.blogspot.com/","date":"2026-09-29T16:10:29.011Z","timestamp":1790698229011,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.blogspot.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:11 GMT","end":"Thu, 03 Dec 2026 19:23:10 GMT"},"fingerprint":{"sha1":"18:27:51:1B:36:B0:7B:7B:27:4E:7C:B4:91:6F:A5:B0:2F:52:95:CC","sha256":"F9:6D:4E:75:3D:CB:5B:3B:41:D3:38:53:FC:06:10:DC:27:82:94:5E:81:56:D2:4B:82:46:93:93:6C:18:84:88"}}},"request":{"raw":"GET /sara1.png HTTP/1.1\r\nHost: rbx1000dfthfhhfhu.blogspot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rbx1000dfthfhhfhu.blogspot.com/\r\nCookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=01a0edee-70d0-754b-954a-759627eb22eb%3A1%3A1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"dom3ic8zudi28v8lr6fgphwffqoz0j6c","value":"01a0edee-70d0-754b-954a-759627eb22eb%3A1%3A1"}],"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Tue, 29 Sep 2026 16:10:29 GMT\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 905\r\nserver: GSE\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}],"data":{"size":1871,"size_decoded":1299,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (536)","md5":"225adf7daa3613e2cc7d1e7bb636b3bc","sha1":"5eb94e0cac47414736614f871d6f057c74972d7a","sha256":"654cd7c6a5b0c792fd93d71d657d88f291a8ed2390eb10357f871efc52610e67","sha512":"ef015e84aeadbd4d372f2d4271c99a44dcf51fcc47806b14302787e35ee1ad5a01349b9e869f3cdf6dbe23b4bc5964c0cb747c2bc2e1a3df0e3cdb15dde6cc1d","ssdeep":"","tlshash":"03312232469d68060f32f2dcb9f0731ab4c3a29fc7544c80f6ecaaeb5fc5b54a551259","first_seen":"2026-08-29T21:32:13.063928Z","last_seen":"2026-09-29T16:11:13.194526Z","times_seen":5,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"rbx1000dfthfhhfhu.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"rbx1000dfthfhhfhu.blogspot.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"rbx1000dfthfhhfhu.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"archive.org/download/win-3_202412/win%20%283%29.mpeg","fqdn":"archive.org","domain":"archive.org","tld":"org"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://rbx1000dfthfhhfhu.blogspot.com/","date":"2026-09-29T16:10:29.030Z","timestamp":1790698229030,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /download/win-3_202412/win%20%283%29.mpeg HTTP/1.1\r\nHost: archive.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rbx1000dfthfhhfhu.blogspot.com/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-29T23:35:44.423362Z","times_seen":18729606,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d3r33tlb373kwk.cloudfront.net/public/clockers/PrimeApps/cssXF.css","fqdn":"d3r33tlb373kwk.cloudfront.net","domain":"d3r33tlb373kwk.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"65.9.60.123","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rbx1000dfthfhhfhu.blogspot.com/","date":"2026-09-29T16:10:30.064Z","timestamp":1790698230064,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 25 Aug 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"5E:9C:8C:03:23:F3:2C:16:F1:D3:F8:2D:AE:8E:8E:2D:88:E9:60:56","sha256":"BB:D2:A7:53:57:A1:50:6D:AC:51:47:E7:F1:6F:3E:26:93:2E:AA:72:59:0F:B9:AA:5F:E3:C3:E3:99:D6:69:2B"}}},"request":{"raw":"GET /public/clockers/PrimeApps/cssXF.css HTTP/1.1\r\nHost: d3r33tlb373kwk.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rbx1000dfthfhhfhu.blogspot.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css\r\ncontent-length: 1804\r\ndate: Tue, 29 Sep 2026 16:10:30 GMT\r\naccept-ranges: bytes\r\nserver: Apache/2.4.51 () OpenSSL/1.0.2k-fips PHP/7.4.11\r\nlast-modified: Thu, 17 Aug 2023 03:34:50 GMT\r\netag: \"70c-60316183ba14c\"\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 ba6ea0ac48ef516c00fa1bd16e2e5c2a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: tEB3ZhdeDu3SO2yMcjxkQ5HuFQG-HsjCL84XtqhZEl3m6cs6w4FpqQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.51","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"OpenSSL:1.0.2k","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"PHP:7.4.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":1804,"size_decoded":2271,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"9be74b455cf7e0b6fc1461ba3d9ad01c","sha1":"f1fa072d9874b423fd003efeffcd128e174d88ca","sha256":"e6959d5cfed508bcc278587c05b26b361bc678f8a7f0502ca6f8ce01f2838cd5","sha512":"6269145c9f99746b9135c994e118582b5219ff98a20ebe50e57d27a14f7859bc085c063002e86f718e301197d53a73275f3544915c1a1a3416adaf9669767182","ssdeep":"","tlshash":"51316a3eae72594f41b9861126f7d21ba5bc515f0a30af7d7a20360a1f261bd2073fd8","first_seen":"2023-08-26T19:01:26Z","last_seen":"2026-09-29T16:11:13.194982Z","times_seen":2442,"resource_available":true,"data":null}},"time_used":358,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":358,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rbx1000dfthfhhfhu.blogspot.com/js/cookienotice.js","fqdn":"rbx1000dfthfhhfhu.blogspot.com","domain":"rbx1000dfthfhhfhu.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.250.178.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rbx1000dfthfhhfhu.blogspot.com/","date":"2026-09-29T16:10:21.105Z","timestamp":1790698221105,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.blogspot.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:11 GMT","end":"Thu, 03 Dec 2026 19:23:10 GMT"},"fingerprint":{"sha1":"18:27:51:1B:36:B0:7B:7B:27:4E:7C:B4:91:6F:A5:B0:2F:52:95:CC","sha256":"F9:6D:4E:75:3D:CB:5B:3B:41:D3:38:53:FC:06:10:DC:27:82:94:5E:81:56:D2:4B:82:46:93:93:6C:18:84:88"}}},"request":{"raw":"GET /js/cookienotice.js HTTP/1.1\r\nHost: rbx1000dfthfhhfhu.blogspot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rbx1000dfthfhhfhu.blogspot.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"blogger-tech\"\r\nreport-to: {\"group\":\"blogger-tech\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/blogger-tech\"}]}\r\ncontent-length: 2026\r\ndate: Tue, 29 Sep 2026 16:10:21 GMT\r\nexpires: Tue, 06 Oct 2026 16:10:21 GMT\r\ncache-control: public, max-age=604800\r\nlast-modified: Tue, 29 Sep 2026 10:35:17 GMT\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6513,"size_decoded":2706,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"a705132a2174f88e196ec3610d68faa8","sha1":"3bad57a48d973a678fec600d45933010f6edc659","sha256":"068ffe90977f2b5b2dc2ef18572166e85281bd0ecb31c4902464b23db54d2568","sha512":"e947d33e0e9c5e6516f05e0ea696406e4e09b458f85021bc3a217071ae14879b2251e65aec5d1935ca9af2433d023356298321564e1a41119d41be7c2b2d36d5","ssdeep":"96:q54UPzHFcJZ7haKemb/m2GzrzCXAl/MStzo41Pm+YsttcVcbYhyjcso13EZDjiat:q5rPzHgxm2GzaXeMnuzYstyryPhZD9","tlshash":"4fd1630938a7127d125fa03fb6bf515ab66410238101db08786dfa785fd5f42a8e4ffa","first_seen":"2023-03-07T01:02:24Z","last_seen":"2026-09-29T22:54:25.635819Z","times_seen":140699,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"rbx1000dfthfhhfhu.blogspot.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"rbx1000dfthfhhfhu.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"rbx1000dfthfhhfhu.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rbx1000dfthfhhfhu.blogspot.com/samue.png","fqdn":"rbx1000dfthfhhfhu.blogspot.com","domain":"rbx1000dfthfhhfhu.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.250.178.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rbx1000dfthfhhfhu.blogspot.com/","date":"2026-09-29T16:10:21.121Z","timestamp":1790698221121,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.blogspot.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:11 GMT","end":"Thu, 03 Dec 2026 19:23:10 GMT"},"fingerprint":{"sha1":"18:27:51:1B:36:B0:7B:7B:27:4E:7C:B4:91:6F:A5:B0:2F:52:95:CC","sha256":"F9:6D:4E:75:3D:CB:5B:3B:41:D3:38:53:FC:06:10:DC:27:82:94:5E:81:56:D2:4B:82:46:93:93:6C:18:84:88"}}},"request":{"raw":"GET /samue.png HTTP/1.1\r\nHost: rbx1000dfthfhhfhu.blogspot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rbx1000dfthfhhfhu.blogspot.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Tue, 29 Sep 2026 16:10:21 GMT\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 905\r\nserver: GSE\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":1871,"size_decoded":1299,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (536)","md5":"225adf7daa3613e2cc7d1e7bb636b3bc","sha1":"5eb94e0cac47414736614f871d6f057c74972d7a","sha256":"654cd7c6a5b0c792fd93d71d657d88f291a8ed2390eb10357f871efc52610e67","sha512":"ef015e84aeadbd4d372f2d4271c99a44dcf51fcc47806b14302787e35ee1ad5a01349b9e869f3cdf6dbe23b4bc5964c0cb747c2bc2e1a3df0e3cdb15dde6cc1d","ssdeep":"","tlshash":"03312232469d68060f32f2dcb9f0731ab4c3a29fc7544c80f6ecaaeb5fc5b54a551259","first_seen":"2026-08-29T21:32:13.063928Z","last_seen":"2026-09-29T16:11:13.194526Z","times_seen":5,"resource_available":true,"data":null}},"time_used":742,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":741,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"rbx1000dfthfhhfhu.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"rbx1000dfthfhhfhu.blogspot.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"rbx1000dfthfhhfhu.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rbx1000dfthfhhfhu.blogspot.com/samue.png","fqdn":"rbx1000dfthfhhfhu.blogspot.com","domain":"rbx1000dfthfhhfhu.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.250.178.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rbx1000dfthfhhfhu.blogspot.com/","date":"2026-09-29T16:10:29.018Z","timestamp":1790698229018,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.blogspot.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:11 GMT","end":"Thu, 03 Dec 2026 19:23:10 GMT"},"fingerprint":{"sha1":"18:27:51:1B:36:B0:7B:7B:27:4E:7C:B4:91:6F:A5:B0:2F:52:95:CC","sha256":"F9:6D:4E:75:3D:CB:5B:3B:41:D3:38:53:FC:06:10:DC:27:82:94:5E:81:56:D2:4B:82:46:93:93:6C:18:84:88"}}},"request":{"raw":"GET /samue.png HTTP/1.1\r\nHost: rbx1000dfthfhhfhu.blogspot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rbx1000dfthfhhfhu.blogspot.com/\r\nCookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=01a0edee-70d0-754b-954a-759627eb22eb%3A1%3A1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"dom3ic8zudi28v8lr6fgphwffqoz0j6c","value":"01a0edee-70d0-754b-954a-759627eb22eb%3A1%3A1"}],"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncontent-security-policy: upgrade-insecure-requests\r\ncontent-security-policy-report-only: default-src https: blob: data: 'unsafe-inline' 'unsafe-eval'; report-to blogspot; report-uri https://www.blogger.com/cspreport\r\nreport-to: {\"group\":\"blogspot\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://www.blogger.com/cspreport\"}]}\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Tue, 29 Sep 2026 16:10:29 GMT\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 905\r\nserver: GSE\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}],"data":{"size":1871,"size_decoded":1625,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (536)","md5":"225adf7daa3613e2cc7d1e7bb636b3bc","sha1":"5eb94e0cac47414736614f871d6f057c74972d7a","sha256":"654cd7c6a5b0c792fd93d71d657d88f291a8ed2390eb10357f871efc52610e67","sha512":"ef015e84aeadbd4d372f2d4271c99a44dcf51fcc47806b14302787e35ee1ad5a01349b9e869f3cdf6dbe23b4bc5964c0cb747c2bc2e1a3df0e3cdb15dde6cc1d","ssdeep":"","tlshash":"03312232469d68060f32f2dcb9f0731ab4c3a29fc7544c80f6ecaaeb5fc5b54a551259","first_seen":"2026-08-29T21:32:13.063928Z","last_seen":"2026-09-29T16:11:13.194526Z","times_seen":5,"resource_available":true,"data":null}},"time_used":714,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":712,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"rbx1000dfthfhhfhu.blogspot.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"rbx1000dfthfhhfhu.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"rbx1000dfthfhhfhu.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pl25536823.profitablecpmrate.com/f7/ea/d9/f7ead9ea006868efd329f089f9c6984b.js","fqdn":"pl25536823.profitablecpmrate.com","domain":"profitablecpmrate.com","tld":"com"},"ip":{"addr":"172.237.146.39","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rbx1000dfthfhhfhu.blogspot.com/","date":"2026-09-29T16:10:21.092Z","timestamp":1790698221092,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.profitablecpmrate.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 03:57:10 GMT","end":"Sun, 18 Oct 2026 03:57:09 GMT"},"fingerprint":{"sha1":"CF:F9:0E:22:85:35:D8:2C:D4:CB:FC:72:6D:AB:8D:06:37:1E:53:CE","sha256":"78:34:4B:44:F1:4D:54:D9:E8:BE:54:7F:F7:10:C2:55:63:15:BE:1E:72:0C:C4:47:52:D7:26:20:09:A1:BC:2B"}}},"request":{"raw":"GET /f7/ea/d9/f7ead9ea006868efd329f089f9c6984b.js HTTP/1.1\r\nHost: pl25536823.profitablecpmrate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rbx1000dfthfhhfhu.blogspot.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 29 Sep 2026 16:10:28 GMT\r\ncontent-type: application/javascript\r\ncache-control: no-store, max-age=0\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-WoW64\r\npermissions-policy: ch-ua=(self \"https://*.parklogic.com\"), ch-ua-arch=(self \"https://*.parklogic.com\"), ch-ua-bitness=(self \"https://*.parklogic.com\"), ch-ua-full-version=(self \"https://*.parklogic.com\"), ch-ua-full-version-list=(self \"https://*.parklogic.com\"), ch-ua-mobile=(self \"https://*.parklogic.com\"), ch-ua-model=(self \"https://*.parklogic.com\"), ch-ua-platform=(self \"https://*.parklogic.com\"), ch-ua-platform-version=(self \"https://*.parklogic.com\"), ch-ua-wow64=(self \"https://*.parklogic.com\")\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5787,"size_decoded":6671,"mime_type":"application/javascript","magic":"HTML document, ASCII text, with very long lines (5787), with no line terminators","md5":"95017c6711cfb28ef6dc89d72168374f","sha1":"ac62723ca20a6929c8a4cace4bbf9d56bb393953","sha256":"fd39391bd0c2983f8d416c29766b36dd061ddbb29d35d4794fe5f8b255b0fac6","sha512":"9c6040edf380b9d10864c1c1377003c1d1142b14732d3d0284800d65280565531b3b35ec9182236a1a6043494dd0a042a8fbdb994404bce30b3e353dca41c7bc","ssdeep":"96:zGIG7Wbuu9gzJVd5pAJ9/4EEi2XHVCGICfM/0Cqa4oDtEFiozmOQjff97BfL:6t7WbuuOzJVd5pAEE3aICfe08SFCjfpx","tlshash":"1dc129757781b02d9be610e6b2bfa72c743d4211310a8063f3adfce63c51e1a50a7e66","first_seen":"2026-09-29T16:11:13.196209Z","last_seen":"2026-09-29T16:11:13.196209Z","times_seen":1,"resource_available":true,"data":null}},"time_used":7807,"timings":{"blocked":-1,"dns":2045,"connect":104,"send":0,"wait":105,"receive":0,"ssl":5552},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"pl25536823.profitablecpmrate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imgur.com/JeVOFbV.png","fqdn":"imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.196.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rbx1000dfthfhhfhu.blogspot.com/","date":"2026-09-29T16:10:21.114Z","timestamp":1790698221114,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 13 Feb 2026 00:00:00 GMT","end":"Mon, 15 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"D4:9A:34:EF:13:3D:45:98:6B:98:4B:9D:CD:FC:74:9C:06:42:A0:7A","sha256":"90:50:0F:E4:90:40:B5:50:04:7E:E1:6E:55:14:FE:7B:38:BB:79:2B:70:83:78:AC:16:E0:F7:1E:3D:ED:92:9A"}}},"request":{"raw":"GET /JeVOFbV.png HTTP/1.1\r\nHost: imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rbx1000dfthfhhfhu.blogspot.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\nretry-after: 0\r\nlocation: https://i.imgur.com/JeVOFbV.png\r\naccept-ranges: bytes\r\ndate: Tue, 29 Sep 2026 16:10:28 GMT\r\nx-served-by: cache-bma-essb1270034-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1790698229.953698,VS0,VE0\r\nserver: cat factory 1.0\r\nstrict-transport-security: max-age=300\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nx-frame-options: DENY\r\naccess-control-allow-origin: https://imgur.com\r\naccess-control-allow-credentials: false\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-29T23:35:44.423362Z","times_seen":18729606,"resource_available":true,"data":null}},"time_used":7828,"timings":{"blocked":7786,"dns":0,"connect":9,"send":0,"wait":10,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoologyfibre.com/pixel/ase","fqdn":"zoologyfibre.com","domain":"zoologyfibre.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rbx1000dfthfhhfhu.blogspot.com/","date":"2026-09-29T16:10:22.675Z","timestamp":1790698222675,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"zoologyfibre.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 05:55:20 GMT","end":"Tue, 24 Nov 2026 05:55:19 GMT"},"fingerprint":{"sha1":"D9:C4:6B:72:BF:AD:1D:89:A0:42:3A:8F:4C:FB:16:ED:76:B5:49:4E","sha256":"5A:7C:DE:6E:DA:4D:5D:C0:2A:21:D8:D5:89:20:66:D3:9E:94:22:FF:B3:29:F3:C8:20:0D:25:E4:9A:74:C3:D2"}}},"request":{"raw":"POST /pixel/ase HTTP/1.1\r\nHost: zoologyfibre.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rbx1000dfthfhhfhu.blogspot.com/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 713\r\nOrigin: https://rbx1000dfthfhhfhu.blogspot.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Tue, 29 Sep 2026 16:10:29 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: Device-Stock-Ua, X-Device-User-Agent, X-Operamini-Phone-Ua, X-Ucbrowser-Device-Ua, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Ua-Platform, User-Agent, Sec-Ch-Ua, Sec-Ch-Ua-Platformuser-Agent, Sec-Ch-Ua-Full-Version, Sec-Ch-Ua-Model, Sec-Ch-Ua-Mobile\r\nHost: zoologyfibre.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":2071,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-29T23:35:44.423362Z","times_seen":18729606,"resource_available":true,"data":null}},"time_used":6609,"timings":{"blocked":6237,"dns":0,"connect":91,"send":0,"wait":94,"receive":0,"ssl":187},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"zoologyfibre.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"zoologyfibre.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sf-tb-sg.ibytedtos.com/obj/eden-sg/uhtyvueh7nulogpoguhm/tiktok-icon2.png","fqdn":"sf-tb-sg.ibytedtos.com","domain":"ibytedtos.com","tld":"com"},"ip":{"addr":"184.51.252.141","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rbx1000dfthfhhfhu.blogspot.com/","date":"2026-09-29T16:10:28.036Z","timestamp":1790698228036,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ibytedtos.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 24 Feb 2026 00:00:00 GMT","end":"Sat, 27 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8B:41:44:0B:D2:F4:2B:A7:8B:EF:26:B0:9B:06:BC:65:00:28:2D:FC","sha256":"D7:0F:D7:93:E1:33:72:83:5B:8C:FA:94:CF:15:21:93:EB:D5:1C:5E:FF:D1:B4:D4:20:63:A7:9B:6C:41:09:D5"}}},"request":{"raw":"GET /obj/eden-sg/uhtyvueh7nulogpoguhm/tiktok-icon2.png HTTP/1.1\r\nHost: sf-tb-sg.ibytedtos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rbx1000dfthfhhfhu.blogspot.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 10487\r\naccept-ranges: bytes\r\ncontent-md5: hGT5W/T3/E2YYxjoY11AFA==\r\netag: \"8464f95bf4f7fc4d986318e8635d4014\"\r\nlast-modified: Tue, 29 Nov 2022 09:57:19 GMT\r\nx-bdcdn-cache-status: TCP_MISS\r\nx-tos-request-id: cce64b8559234dad6a855923-fdbdgdc53g22gf2cgg18\r\nx-tos-response-time: Wed, 19 Aug 2026 07:20:04 GMT\r\nx-request-ip: fdbd:dc53:3:779::14\r\nx-response-cinfo: fdbd:dc53:3:779::14\r\nx-response-cache: miss\r\nx-tt-trace-host: 01bc6466195c84574feb6fc70198ca6a4daadd9fb3ddcb30050fcf44787534e09d71e31a9e79bdc0ef06e3b435cb6841bd625e6a3042dd29b3549500ae2f8db98eb98b9d45af7d6ce781e5694468e7f31940e0533b1e17cd376b25cbb1507ab3bf34d80a4846ca2938766843cc09625e8e\r\nx-tt-trace-id: 00-260819152003F0C4B826FB21317FE530-581F08237177024A-00\r\nserver: TLB\r\nx-tt-logid: 20260819152003F0C4B826FB21317FE530\r\ncache-control: max-age=1332135\r\ndate: Tue, 29 Sep 2026 16:10:28 GMT\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-origin: *\r\nx-tt-trace-tag: id=16;cdn-cache=hit;type=static\r\nserver-timing: cdn-cache; desc=HIT, edge; dur=2, origin; dur=0, inner; dur=66\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10487,"size_decoded":11617,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"8464f95bf4f7fc4d986318e8635d4014","sha1":"2d5a2e02212d5f2192b1a731cda57f37c009db50","sha256":"d19fdd56b6188d88e2d8e6151f6f622df63a15b9fa79d3b624e67095b7dd75d2","sha512":"dffa7672aae4dbd07d348efdcf4015eaf2c848e0f443a5d652eebbfd524a2992587dd0f23406df063af2ce79353ab245208234d461f09c68ff7996cafdf7db08","ssdeep":"192:sSwoKD0HwL0BebC/1iLzJGSI4eNRZkPpTwJ2frf/a38k3Pad4z8Wq/uFFytvQQbn:r9Kcy0//izJHInOT6wfSsk3PFza/uPKp","tlshash":"a522bfc4e6d38184ff3c8134d76716b2e9735b2d5808d9b21c0c1fe629709b69ba1a39","first_seen":"2023-12-28T20:46:41Z","last_seen":"2026-09-29T16:11:13.197355Z","times_seen":74,"resource_available":false,"data":null}},"time_used":928,"timings":{"blocked":875,"dns":0,"connect":10,"send":0,"wait":14,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgur.com/OxjOk2k.png","fqdn":"imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.196.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rbx1000dfthfhhfhu.blogspot.com/","date":"2026-09-29T16:10:21.116Z","timestamp":1790698221116,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 13 Feb 2026 00:00:00 GMT","end":"Mon, 15 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"D4:9A:34:EF:13:3D:45:98:6B:98:4B:9D:CD:FC:74:9C:06:42:A0:7A","sha256":"90:50:0F:E4:90:40:B5:50:04:7E:E1:6E:55:14:FE:7B:38:BB:79:2B:70:83:78:AC:16:E0:F7:1E:3D:ED:92:9A"}}},"request":{"raw":"GET /OxjOk2k.png HTTP/1.1\r\nHost: imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rbx1000dfthfhhfhu.blogspot.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\nretry-after: 0\r\nlocation: https://i.imgur.com/OxjOk2k.png\r\naccept-ranges: bytes\r\ndate: Tue, 29 Sep 2026 16:10:29 GMT\r\nx-served-by: cache-bma-essb1270034-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1790698229.179630,VS0,VE0\r\nserver: cat factory 1.0\r\nstrict-transport-security: max-age=300\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nx-frame-options: DENY\r\naccess-control-allow-origin: https://imgur.com\r\naccess-control-allow-credentials: false\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-29T23:35:44.423362Z","times_seen":18729606,"resource_available":true,"data":null}},"time_used":8054,"timings":{"blocked":7786,"dns":0,"connect":10,"send":0,"wait":10,"receive":0,"ssl":247},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.highperformanceformat.com/90f42858fbf62705eb9917c6a09a9a21/invoke.js","fqdn":"www.highperformanceformat.com","domain":"highperformanceformat.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rbx1000dfthfhhfhu.blogspot.com/","date":"2026-09-29T16:10:29.014Z","timestamp":1790698229014,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"highperformanceformat.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 23:52:39 GMT","end":"Wed, 04 Nov 2026 23:52:38 GMT"},"fingerprint":{"sha1":"B8:83:42:30:01:F1:50:DF:BA:43:AD:F5:FF:7C:75:43:E4:F3:14:B8","sha256":"06:90:24:D1:9F:9A:3E:F1:28:CC:2D:B9:77:E8:06:2F:0D:9E:37:96:BE:CB:04:A2:6B:68:B2:4A:66:04:FE:87"}}},"request":{"raw":"GET /90f42858fbf62705eb9917c6a09a9a21/invoke.js HTTP/1.1\r\nHost: www.highperformanceformat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rbx1000dfthfhhfhu.blogspot.com/\r\nCookie: pip_229eb6236e617d029c258747f872c7fc=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"pip_229eb6236e617d029c258747f872c7fc","value":"1"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Tue, 29 Sep 2026 16:10:29 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\naccept-ch: X-Operamini-Phone-Ua,Sec-Ch-Ua,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Model,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Mobile,Device-Stock-Ua,X-Device-User-Agent\r\naccess-control-allow-origin: *\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\nx-envoy-upstream-service-time: 7\r\nHost: www.highperformanceformat.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: dd46b786779da36bfca4dd0d447a03ba\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":49585,"size_decoded":21706,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (49585), with no line terminators","md5":"e625c70ee4a82c5e6718e0965ac2fe0f","sha1":"4d386705c40c7ad9130d4b67f222cdb0c0cc0e7d","sha256":"87a746859c0641e8b78e65f160c9ac6f27b66f403b779c2c7099e6e55f0d0349","sha512":"6fd86e448438f1cb4ab628b7b1b416a7447f37a0d812dd2cf4f551c2d099e5e33cd696cc23ce797e611d6ef8c707583b76659857b05d449d5d4e6b53e3f996a1","ssdeep":"768:vc6LklBn3+yxhRvR75gW/b9QECstnF36/I8UtEbDsPZxPvYXKvgHPRDAKRT5VsXG:aLnNOPnDsUD/l8kkCNskOT1tA","tlshash":"bd2307803f92ea6956a1a8f7332e9575f8094d55704cc0e8e16f3c943d9b337e878b68","first_seen":"2026-09-29T16:11:13.198892Z","last_seen":"2026-09-29T16:11:13.198892Z","times_seen":1,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"www.highperformanceformat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"www.highperformanceformat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mamshirt.com/17/1b50e57a5911fd0a5b46962ab48ca22b?ppk=90f42858fbf62705eb9917c6a09a9a21","fqdn":"mamshirt.com","domain":"mamshirt.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rbx1000dfthfhhfhu.blogspot.com/","date":"2026-09-29T16:10:29.136Z","timestamp":1790698229136,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mamshirt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 16:05:40 GMT","end":"Thu, 26 Nov 2026 17:05:35 GMT"},"fingerprint":{"sha1":"BC:77:44:FD:F1:4E:49:75:F1:D1:4B:79:5E:0C:25:1B:61:78:53:C3","sha256":"27:14:1A:D5:8D:DC:F0:58:04:A8:C7:F1:58:29:46:06:3B:1D:5B:D4:A1:B5:75:53:59:6E:AA:82:C8:D7:D3:65"}}},"request":{"raw":"GET /17/1b50e57a5911fd0a5b46962ab48ca22b?ppk=90f42858fbf62705eb9917c6a09a9a21 HTTP/1.1\r\nHost: mamshirt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rbx1000dfthfhhfhu.blogspot.com/\r\nCookie: uidm=01a0edee-7cf1-7ba8-82ca-71cfb749f765_1; __cf_bm=xjWPziHorkSP1aU6vRa5kTDRWv3G.kfzuuFgFHtsQ0Q-1790698224.8624806-1.0.1.1-3Z_lMICb4gfmf42SBEsty7F0xeNzp197FGbgOFROtN8M3QWUtSTAXTv1.x0fAQVMjAecI9E9Mrqw5kSSUHtB5Nk4gt75XothX5bEwXkeRnIjb9orzeFhVf2ppZtt_WNk\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"uidm","value":"01a0edee-7cf1-7ba8-82ca-71cfb749f765_1"},{"name":"__cf_bm","value":"xjWPziHorkSP1aU6vRa5kTDRWv3G.kfzuuFgFHtsQ0Q-1790698224.8624806-1.0.1.1-3Z_lMICb4gfmf42SBEsty7F0xeNzp197FGbgOFROtN8M3QWUtSTAXTv1.x0fAQVMjAecI9E9Mrqw5kSSUHtB5Nk4gt75XothX5bEwXkeRnIjb9orzeFhVf2ppZtt_WNk"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 29 Sep 2026 16:10:29 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\naccept-ch: Sec-Ch-Ua-Model,Device-Stock-Ua,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Mobile,X-Device-User-Agent,User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua,Sec-Ch-Ua-Full-Version\r\ncontent-encoding: gzip\r\nlink: \u003chttps://araplhn.org\u003e; rel=preconnect; crossorigin, \u003chttps://araplhn.org\u003e; rel=dns-prefetch, \u003chttps://static.nresystems.com\u003e; rel=preconnect; crossorigin, \u003chttps://static.nresystems.com\u003e; rel=dns-prefetch\r\nvary: Accept-Encoding, Origin\r\nx-envoy-upstream-service-time: 8\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: no-cache, max-age=0, private, no-cache\r\nx-request-id: 6a97db54af8a2ffce1a6bf59891a6d77\r\npragma: no-cache\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,X-Forwarded-For,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1728000\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a42c421c2f2b8be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4461,"size_decoded":3701,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4461), with no line terminators","md5":"06cfe8a1d68fd9df932bd0293227212c","sha1":"f4474824f10ab58a35a8c355cdab5b39ffe301d4","sha256":"46bcbbb84c37056cdb0fc47e9e6680779d5d3193ca4df61aef62ecc13d4ea554","sha512":"c6a1286df1bfe3d761e106d5746059c73e78e6af5741989610396e2bbc305618d4236dbbf9225bea95a39527143aa11fa43b5e749568d1242b7b9fb6e30d88ca","ssdeep":"96:yigF+LesfrhE+jrWMdi+lUkYmGmY+Gac51kvLKA+:yTF+fVEKrHU1Ac51eKA+","tlshash":"0f9182de7281b0a09b9328eb7b363a15b49c5d70349fc8e0f12d348a7c1673ac173a65","first_seen":"2026-09-25T16:16:28.005265Z","last_seen":"2026-09-29T18:54:14.197271Z","times_seen":91,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.imgur.com/OxjOk2k.png","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.196.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rbx1000dfthfhhfhu.blogspot.com/","date":"2026-09-29T16:10:29.188Z","timestamp":1790698229188,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 13 Feb 2026 00:00:00 GMT","end":"Mon, 15 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"D4:9A:34:EF:13:3D:45:98:6B:98:4B:9D:CD:FC:74:9C:06:42:A0:7A","sha256":"90:50:0F:E4:90:40:B5:50:04:7E:E1:6E:55:14:FE:7B:38:BB:79:2B:70:83:78:AC:16:E0:F7:1E:3D:ED:92:9A"}}},"request":{"raw":"GET /OxjOk2k.png HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rbx1000dfthfhhfhu.blogspot.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\nlast-modified: Thu, 20 Mar 2025 14:42:16 GMT\r\netag: \"c7045784cf7ef1869fda05c07c53ec55\"\r\nx-amz-storage-class: STANDARD_IA\r\nx-amz-server-side-encryption: AES256\r\nx-amz-cf-pop: IAD89-P1\r\nx-amz-cf-id: BNYEs87I17ZHMK6tfM4GV9bhVRWxYvWy5jYGZ_LIVDSl4gJ7VFgrXA==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 101652\r\ndate: Tue, 29 Sep 2026 16:10:29 GMT\r\nx-served-by: cache-iad-kcgs7200082-IAD, cache-bma-essb1270034-BMA\r\nx-cache: Miss from cloudfront, HIT, MISS\r\nx-cache-hits: 41, 0\r\nx-timer: S1790698229.246817,VS0,VE109\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-length: 223028\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":223028,"size_decoded":223823,"mime_type":"image/png","magic":"PNG image data, 549 x 264, 8-bit/color RGBA, non-interlaced","md5":"c7045784cf7ef1869fda05c07c53ec55","sha1":"f5c87324c39bb4884fb9a175883e8f4b8ebcf6c6","sha256":"7760ad9442411a7884c3bd982f16cd24348d7908fbf48bdaccaf80e11846ec50","sha512":"072273abe2c2ddff6f7719214a122526329922780bf05f042c04a2a6a0dd7963264af88aa8c24b0469a0581d812273770443801c1bd44aeab4f18f844ed2d235","ssdeep":"6144:ZonQ0rntRkdj+0rn2MbbnhVsq2391KcvX+2JR:yTrntqdlr2wA37JXL3","tlshash":"fc2423e9c8d8dce65ec0c998cf003ed3a34399946c79204c58fc2b67395792ea1fd692","first_seen":"2026-02-01T14:36:47.727495Z","last_seen":"2026-09-29T16:11:13.200447Z","times_seen":6,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":47,"dns":0,"connect":11,"send":0,"wait":130,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoologyfibre.com/watch.436289720807.js?dev=e\u0026fstu=01a0edee-724a-75a6-9780-cfdc661beac8\u0026key=90f42858fbf62705eb9917c6a09a9a21\u0026kw=%5B%5D\u0026ps1=1790698222\u0026rb=e\u0026refer=https%3A%2F%2Frbx1000dfthfhhfhu.blogspot.com%2F\u0026res=14.1055\u0026rmtc=t\u0026sht=oxIk44_-y9FsOmkwRUMNTiIYaRJeYqtkeiLg0mtl2G8\u0026shv=2\u0026st1=89b38d8e018f3fa30394a0ea63cdc99f\u0026tz=0\u0026uuid=01a0edee-70d0-754b-954a-759627eb22eb%3A1%3A1","fqdn":"zoologyfibre.com","domain":"zoologyfibre.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rbx1000dfthfhhfhu.blogspot.com/","date":"2026-09-29T16:10:22.204Z","timestamp":1790698222204,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"zoologyfibre.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 05:55:20 GMT","end":"Tue, 24 Nov 2026 05:55:19 GMT"},"fingerprint":{"sha1":"D9:C4:6B:72:BF:AD:1D:89:A0:42:3A:8F:4C:FB:16:ED:76:B5:49:4E","sha256":"5A:7C:DE:6E:DA:4D:5D:C0:2A:21:D8:D5:89:20:66:D3:9E:94:22:FF:B3:29:F3:C8:20:0D:25:E4:9A:74:C3:D2"}}},"request":{"raw":"GET /watch.436289720807.js?dev=e\u0026fstu=01a0edee-724a-75a6-9780-cfdc661beac8\u0026key=90f42858fbf62705eb9917c6a09a9a21\u0026kw=%5B%5D\u0026ps1=1790698222\u0026rb=e\u0026refer=https%3A%2F%2Frbx1000dfthfhhfhu.blogspot.com%2F\u0026res=14.1055\u0026rmtc=t\u0026sht=oxIk44_-y9FsOmkwRUMNTiIYaRJeYqtkeiLg0mtl2G8\u0026shv=2\u0026st1=89b38d8e018f3fa30394a0ea63cdc99f\u0026tz=0\u0026uuid=01a0edee-70d0-754b-954a-759627eb22eb%3A1%3A1 HTTP/1.1\r\nHost: zoologyfibre.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://rbx1000dfthfhhfhu.blogspot.com\r\nReferer: https://rbx1000dfthfhhfhu.blogspot.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=01a0edee-70d0-754b-954a-759627eb22eb:1:1; ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.KSUvOUVy5mmDB5DElD5KIFSouofp5gW7X1SJ8xu-rAs\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"uid_id2","value":"01a0edee-70d0-754b-954a-759627eb22eb:1:1"},{"name":"ain","value":"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.KSUvOUVy5mmDB5DElD5KIFSouofp5gW7X1SJ8xu-rAs"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Tue, 29 Sep 2026 16:10:22 GMT\r\nContent-Type: text/html\r\nContent-Length: 0\r\nConnection: keep-alive\r\naccept-ch: Sec-Ch-Ua-Platform,Sec-Ch-Ua-Model,X-Device-User-Agent,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Mobile,Device-Stock-Ua,User-Agent,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://rbx1000dfthfhhfhu.blogspot.com\r\nset-cookie: uid_id2=01a0edee-70d0-754b-954a-759627eb22eb:1:1; Path=/; Expires=Tue, 06 Oct 2026 16:10:22 GMT; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nx-envoy-upstream-service-time: 14\r\nHost: zoologyfibre.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 80b723a0f5adf648b38cfabb21dea5ac\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":[{"name":"uid_id2","value":"01a0edee-70d0-754b-954a-759627eb22eb:1:1","quoted":false,"path":"/","expires":"2026-10-06T16:10:22Z","raw_expires":"Tue, 06 Oct 2026 16:10:22 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uid_id2=01a0edee-70d0-754b-954a-759627eb22eb:1:1; Path=/; Expires=Tue, 06 Oct 2026 16:10:22 GMT; Secure; SameSite=None"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":958,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-29T23:35:44.423362Z","times_seen":18729606,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"zoologyfibre.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"zoologyfibre.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.imgur.com/JeVOFbV.png","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.196.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rbx1000dfthfhhfhu.blogspot.com/","date":"2026-09-29T16:10:29.033Z","timestamp":1790698229033,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 13 Feb 2026 00:00:00 GMT","end":"Mon, 15 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"D4:9A:34:EF:13:3D:45:98:6B:98:4B:9D:CD:FC:74:9C:06:42:A0:7A","sha256":"90:50:0F:E4:90:40:B5:50:04:7E:E1:6E:55:14:FE:7B:38:BB:79:2B:70:83:78:AC:16:E0:F7:1E:3D:ED:92:9A"}}},"request":{"raw":"GET /JeVOFbV.png HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rbx1000dfthfhhfhu.blogspot.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\nlast-modified: Fri, 21 Mar 2025 09:11:23 GMT\r\netag: \"9086cf0751ae2578c1b66ecb487141b7\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-cf-pop: IAD89-P1\r\nx-amz-cf-id: oYRMfU-9xs4ji1Cz7isffbHsEsbOtXxWtWjW8c9w91r13T0FmBeVJw==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 248543\r\ndate: Tue, 29 Sep 2026 16:10:29 GMT\r\nx-served-by: cache-iad-kcgs7200065-IAD, cache-bma-essb1270034-BMA\r\nx-cache: Miss from cloudfront, HIT, HIT\r\nx-cache-hits: 6, 0\r\nx-timer: S1790698229.245271,VS0,VE107\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-length: 68563\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":68563,"size_decoded":69321,"mime_type":"image/png","magic":"PNG image data, 1200 x 1300, 8-bit/color RGBA, non-interlaced","md5":"9086cf0751ae2578c1b66ecb487141b7","sha1":"726ccc48e9eda88b8ed3b76a029629756799d9b7","sha256":"0cb27a078c9ca57cb4b975b7a8142d21e7d3eadd1d60a9a7c13c54e679eec306","sha512":"f4c0ad8f5f26b9044d4ee12b4444d073d66edcfe824ac752b1a84128f231a47cb0f52743a97f679de8c63fecf754557a5ce0cab00d26a8da3a8013b607744cb5","ssdeep":"1536:agkiC3h1KtRKhlhiJv5XLKaRq2HgynakXOtP:VkIKNqv5XLKmAynaR","tlshash":"6263f163f4b901a0f811c5bde94ae1d8e63640d87247f364053fe6b0f93219fa1ae756","first_seen":"2026-02-01T14:36:47.697297Z","last_seen":"2026-09-29T16:11:13.201746Z","times_seen":6,"resource_available":false,"data":null}},"time_used":330,"timings":{"blocked":201,"dns":0,"connect":9,"send":0,"wait":118,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/pixel/ase","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rbx1000dfthfhhfhu.blogspot.com/","date":"2026-09-29T16:10:30.136Z","timestamp":1790698230136,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 00:02:23 GMT","end":"Sat, 21 Nov 2026 00:02:22 GMT"},"fingerprint":{"sha1":"45:C6:44:0A:42:17:85:94:0C:43:02:EA:82:14:8D:F8:D3:13:D9:E2","sha256":"8C:E7:C4:F5:8F:DB:E8:10:A8:55:E4:5C:85:CC:97:D0:7D:0A:FE:C9:6C:C4:4D:6A:FF:20:87:2C:BC:34:2D:F4"}}},"request":{"raw":"POST /pixel/ase HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rbx1000dfthfhhfhu.blogspot.com/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 713\r\nOrigin: https://rbx1000dfthfhhfhu.blogspot.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":713,"data":"[{\"placement_key\":\"90f42858fbf62705eb9917c6a09a9a21\",\"template_body\":\"body_banner_pl_general\",\"event_name\":\"base.bb.ready\",\"id_frontend_invoke\":\"01a0edee-8d8d-7628-aa2f-749a596bbacf\",\"script_version\":\"\",\"extra_json\":{\"cpk\":\"1b50e57a5911fd0a5b46962ab48ca22b\"}},{\"placement_key\":\"90f42858fbf62705eb9917c6a09a9a21\",\"template_body\":\"body_banner_pl_general\",\"event_name\":\"fatal.render.fail\",\"id_frontend_invoke\":\"01a0edee-8d8d-7628-aa2f-749a596bbacf\",\"script_version\":\"\",\"error_message\":\"empty response\"},{\"placement_key\":\"90f42858fbf62705eb9917c6a09a9a21\",\"template_body\":\"body_banner_pl_general\",\"event_name\":\"base.load_watch.success\",\"id_frontend_invoke\":\"01a0edee-8d8d-7628-aa2f-749a596bbacf\",\"script_version\":\"\"}]"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Tue, 29 Sep 2026 16:10:30 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: Sec-Ch-Ua-Model, Device-Stock-Ua, X-Operamini-Phone-Ua, X-Ucbrowser-Device-Ua, User-Agent, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua, Sec-Ch-Ua-Platformuser-Agent, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, X-Device-User-Agent, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Ua-Full-Version\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":2099,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-29T23:35:44.423362Z","times_seen":18729606,"resource_available":true,"data":null}},"time_used":373,"timings":{"blocked":0,"dns":0,"connect":91,"send":0,"wait":94,"receive":0,"ssl":188},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"kettledroopingcontinuation.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"d19k1sh57v5k0g.cloudfront.net/e3bc26e.js","fqdn":"d19k1sh57v5k0g.cloudfront.net","domain":"d19k1sh57v5k0g.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"65.9.60.135","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rbx1000dfthfhhfhu.blogspot.com/","date":"2026-09-29T16:10:21.100Z","timestamp":1790698221100,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 25 Aug 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"5E:9C:8C:03:23:F3:2C:16:F1:D3:F8:2D:AE:8E:8E:2D:88:E9:60:56","sha256":"BB:D2:A7:53:57:A1:50:6D:AC:51:47:E7:F1:6F:3E:26:93:2E:AA:72:59:0F:B9:AA:5F:E3:C3:E3:99:D6:69:2B"}}},"request":{"raw":"GET /e3bc26e.js HTTP/1.1\r\nHost: d19k1sh57v5k0g.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rbx1000dfthfhhfhu.blogspot.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\nserver: AmazonS3\r\nlast-modified: Tue, 25 Aug 2026 10:03:11 GMT\r\ncontent-encoding: gzip\r\ndate: Tue, 29 Sep 2026 15:56:04 GMT\r\netag: W/\"b94ddaf5314bb49deec7c31316d7a363\"\r\nvary: Accept-Encoding\r\nx-cache: Error from cloudfront\r\nvia: 1.1 8aa819fa9ebdf851190f85415ebafd60.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: EK6XH_7BKwahRDWSIuouaUthIhFl0kPlg7YG99HD2kc35WR_JjA_AQ==\r\nage: 914\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":27325,"size_decoded":8119,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1637), with CRLF line terminators","md5":"b94ddaf5314bb49deec7c31316d7a363","sha1":"9053000c2ce886c75b21b3872b822cc1609a862c","sha256":"69a93a3114bad62633241b19555906f994925bb1ec6ed246720304d3fecb84fb","sha512":"44f49a59f4842bf4c583121420ad43e1121dac50cd1437b580d8995d77d11319878ea330ff1c66882e4634acc02c2de2fa1373c736f526b4810eb7214b20b84c","ssdeep":"768:n5f2T236wBXroljZ1/peRXMiH54aGz1WCyQgmip4L/4aLv0NO:z3Z7OZ1h2ayQgM","tlshash":"5bc2535aab6a1809867763b9df1f5208f575432f1512c119bc7c88d85fb0d3842aaffc","first_seen":"2026-08-25T17:58:20.627952Z","last_seen":"2026-09-29T16:11:13.203617Z","times_seen":185,"resource_available":true,"data":null}},"time_used":274,"timings":{"blocked":-1,"dns":24,"connect":11,"send":0,"wait":216,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/watch.380604265924.js?key=90f42858fbf62705eb9917c6a09a9a21\u0026kw=%5B%22robux%22%5D\u0026refer=https%3A%2F%2Frbx1000dfthfhhfhu.blogspot.com%2F\u0026tz=0\u0026dev=e\u0026res=14.1055\u0026rb=e\u0026uuid=01a0edee-70d0-754b-954a-759627eb22eb%3A1%3A1","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rbx1000dfthfhhfhu.blogspot.com/","date":"2026-09-29T16:10:29.139Z","timestamp":1790698229139,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 00:02:23 GMT","end":"Sat, 21 Nov 2026 00:02:22 GMT"},"fingerprint":{"sha1":"45:C6:44:0A:42:17:85:94:0C:43:02:EA:82:14:8D:F8:D3:13:D9:E2","sha256":"8C:E7:C4:F5:8F:DB:E8:10:A8:55:E4:5C:85:CC:97:D0:7D:0A:FE:C9:6C:C4:4D:6A:FF:20:87:2C:BC:34:2D:F4"}}},"request":{"raw":"GET /watch.380604265924.js?key=90f42858fbf62705eb9917c6a09a9a21\u0026kw=%5B%22robux%22%5D\u0026refer=https%3A%2F%2Frbx1000dfthfhhfhu.blogspot.com%2F\u0026tz=0\u0026dev=e\u0026res=14.1055\u0026rb=e\u0026uuid=01a0edee-70d0-754b-954a-759627eb22eb%3A1%3A1 HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://rbx1000dfthfhhfhu.blogspot.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rbx1000dfthfhhfhu.blogspot.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 307 Temporary Redirect\r\nServer: nginx/1.28.2\r\nDate: Tue, 29 Sep 2026 16:10:29 GMT\r\nContent-Type: text/html\r\nContent-Length: 0\r\nConnection: keep-alive\r\naccept-ch: Sec-Ch-Ua-Platformuser-Agent,X-Device-User-Agent,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile,Device-Stock-Ua\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://rbx1000dfthfhhfhu.blogspot.com\r\nlocation: https://kettledroopingcontinuation.com/watch.380604265924.js?dev=e\u0026fstu=01a0edee-8f4a-7179-8883-ed07847541fd\u0026key=90f42858fbf62705eb9917c6a09a9a21\u0026kw=%5B%22robux%22%5D\u0026ps1=1790698229\u0026rb=e\u0026refer=https%3A%2F%2Frbx1000dfthfhhfhu.blogspot.com%2F\u0026res=14.1055\u0026rmtc=t\u0026sht=N7WCeFI_QeSC332rcmT6D_mPv_UeJDrFFQEFGhWm-og\u0026shv=2\u0026st1=4e63569e12ac623461eeba975f2af6ab\u0026tz=0\u0026uuid=01a0edee-70d0-754b-954a-759627eb22eb%3A1%3A1\r\nset-cookie: uid_id2=01a0edee-70d0-754b-954a-759627eb22eb:1:1; Path=/; Expires=Tue, 06 Oct 2026 16:10:29 GMT; Secure; SameSite=None\nain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJwIjp7ImlkIjozMDU4NDc5NywiayI6IjkwZjQyODU4ZmJmNjI3MDVlYjk5MTdjNmEwOWE5YTIxIiwic2lkIjoiIiwiaXNpZCI6MCwiYXNpZCI6MSwiemlkIjo1OTU4NjA4LCJwaWQiOjM0MTIxNTQsImFuIjp0cnVlLCJsYW4iOnRydWUsImNpZCI6MjgsImFpZCI6MjcsInB0Ijo0LCJwayI6IncycGFhMnB4azEiLCJjcGtzIjp7IjI4IjoiMjI5ZWI2MjM2ZTYxN2QwMjljMjU4NzQ3Zjg3MmM3ZmMifSwidCI6MX0sInUiOnsidSI6MSwiYXUiOjEsImQiOnsiaWQiOjI2NjU2MTExNSwiaWRzIjoiIiwiaWMiOmZhbHNlLCJuIjoiRGVza3RvcCxFbXVsYXRvciIsInYiOiJVbmtub3duIiwibSI6IlVua25vd24iLCJmIjoxLCJmbiI6IkRlc2t0b3AiLCJvaWQiOjM4OTE0LCJvbiI6IldpbmRvd3MiLCJvdiI6IjEwLjAiLCJiaWQiOjEzNjkyNSwiYm4iOiJGaXJlZm94IiwiYnYiOiIxMzQuMCIsInd2IjpmYWxzZSwiZSI6dHJ1ZSwiYWIiOmZhbHNlfSwiYyI6eyJpZCI6MTYyLCJjIjoiTk8iLCJuIjoiTm9yd2F5In0sImN0Ijp7ImlkIjozMTQ2MjcwLCJuIjoiTWF1cmEifSwicmciOnsiaWQiOjMyNzEsIm4iOiJWaWtlbiJ9LCJhIjpmYWxzZSwiY3IiOnsibiI6IkJsaXggU29sdXRpb25zIn0sInhmIjoiIiwiaXhmIjpmYWxzZSwiaWd4ZiI6ZmFsc2UsIml3ZiI6dHJ1ZSwidXAiOnRydWUsInIiOiJodHRwczovL3JieDEwMDBkZnRoZmhoZmh1LmJsb2dzcG90LmNvbS8iLCJ0eiI6MiwiaWR1YyI6MCwiYXIiOltdfX0.KSUvOUVy5mmDB5DElD5KIFSouofp5gW7X1SJ8xu-rAs; Path=/; Expires=Tue, 29 Sep 2026 16:11:29 GMT; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nx-envoy-upstream-service-time: 15\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 8c93cb8f21cdca308e1e32bccb9b798a\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":[{"name":"uid_id2","value":"01a0edee-70d0-754b-954a-759627eb22eb:1:1","quoted":false,"path":"/","expires":"2026-10-06T16:10:29Z","raw_expires":"Tue, 06 Oct 2026 16:10:29 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uid_id2=01a0edee-70d0-754b-954a-759627eb22eb:1:1; Path=/; Expires=Tue, 06 Oct 2026 16:10:29 GMT; Secure; SameSite=None"},{"name":"ain","value":"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.KSUvOUVy5mmDB5DElD5KIFSouofp5gW7X1SJ8xu-rAs","quoted":false,"path":"/","expires":"2026-09-29T16:11:29Z","raw_expires":"Tue, 29 Sep 2026 16:11:29 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.KSUvOUVy5mmDB5DElD5KIFSouofp5gW7X1SJ8xu-rAs; Path=/; Expires=Tue, 29 Sep 2026 16:11:29 GMT; Secure; SameSite=None"}],"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-29T23:35:44.423362Z","times_seen":18729606,"resource_available":true,"data":null}},"time_used":487,"timings":{"blocked":0,"dns":3,"connect":91,"send":0,"wait":114,"receive":0,"ssl":279},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"kettledroopingcontinuation.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"d3r33tlb373kwk.cloudfront.net/public/external/check.php?it=4623705\u0026time=1790698232073","fqdn":"d3r33tlb373kwk.cloudfront.net","domain":"d3r33tlb373kwk.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"65.9.60.123","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rbx1000dfthfhhfhu.blogspot.com/","date":"2026-09-29T16:10:32.076Z","timestamp":1790698232076,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 25 Aug 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"5E:9C:8C:03:23:F3:2C:16:F1:D3:F8:2D:AE:8E:8E:2D:88:E9:60:56","sha256":"BB:D2:A7:53:57:A1:50:6D:AC:51:47:E7:F1:6F:3E:26:93:2E:AA:72:59:0F:B9:AA:5F:E3:C3:E3:99:D6:69:2B"}}},"request":{"raw":"GET /public/external/check.php?it=4623705\u0026time=1790698232073 HTTP/1.1\r\nHost: d3r33tlb373kwk.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rbx1000dfthfhhfhu.blogspot.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ncontent-length: 72\r\ndate: Tue, 29 Sep 2026 16:10:32 GMT\r\nx-powered-by: PHP/7.4.11\r\nserver: Apache/2.4.51 () OpenSSL/1.0.2k-fips PHP/7.4.11\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 ba6ea0ac48ef516c00fa1bd16e2e5c2a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: tmO5odk2oUROdyPW1bAw2uIVRBfAe0kEuZkO9Hym9WWmLycb2p2afg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"PHP:7.4.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Apache HTTP Server:2.4.51","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"OpenSSL:1.0.2k","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":72,"size_decoded":482,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"69d77690ed201acd0627e99dd35c96eb","sha1":"05ffc794be6dae3836ee5df72d82d917323b2941","sha256":"577d248638c57941b7e35d9a19ef4b5d88d52482f6e59254142d4266c57bad38","sha512":"06aaf36275b0c4de82580319878333d973d3cd464f4c09df4281551f4381940dc792eb28c2c84b3a94196b53edf41751b01976ad77c5e393c0b62574c4b214bf","ssdeep":"","tlshash":"32a0220c0c02220f033230b080bbc8280030e3320bc0c3a8282aca8a2e03c3b2a0208e","first_seen":"2023-08-12T16:35:44Z","last_seen":"2026-09-29T16:11:13.204188Z","times_seen":3630,"resource_available":true,"data":null}},"time_used":359,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":359,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.highperformanceformat.com/90f42858fbf62705eb9917c6a09a9a21/invoke.js","fqdn":"www.highperformanceformat.com","domain":"highperformanceformat.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rbx1000dfthfhhfhu.blogspot.com/","date":"2026-09-29T16:10:21.088Z","timestamp":1790698221088,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"highperformanceformat.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 23:52:39 GMT","end":"Wed, 04 Nov 2026 23:52:38 GMT"},"fingerprint":{"sha1":"B8:83:42:30:01:F1:50:DF:BA:43:AD:F5:FF:7C:75:43:E4:F3:14:B8","sha256":"06:90:24:D1:9F:9A:3E:F1:28:CC:2D:B9:77:E8:06:2F:0D:9E:37:96:BE:CB:04:A2:6B:68:B2:4A:66:04:FE:87"}}},"request":{"raw":"GET /90f42858fbf62705eb9917c6a09a9a21/invoke.js HTTP/1.1\r\nHost: www.highperformanceformat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rbx1000dfthfhhfhu.blogspot.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Tue, 29 Sep 2026 16:10:21 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\naccept-ch: Device-Stock-Ua,X-Device-User-Agent,X-Ucbrowser-Device-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Mobile,X-Operamini-Phone-Ua,User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Model\r\naccess-control-allow-origin: *\r\ncontent-encoding: zstd\r\nset-cookie: pip_229eb6236e617d029c258747f872c7fc=1; Path=/; Expires=Wed, 30 Sep 2026 16:10:21 GMT; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nx-envoy-upstream-service-time: 5\r\nHost: www.highperformanceformat.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 46d8ddc24f46b480f2a19686f2a102ad\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":[{"name":"pip_229eb6236e617d029c258747f872c7fc","value":"1","quoted":false,"path":"/","expires":"2026-09-30T16:10:21Z","raw_expires":"Wed, 30 Sep 2026 16:10:21 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"pip_229eb6236e617d029c258747f872c7fc=1; Path=/; Expires=Wed, 30 Sep 2026 16:10:21 GMT; Secure; SameSite=None"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":49515,"size_decoded":21847,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (49515), with no line terminators","md5":"c11037cce00296c6fc39a2a1f5337636","sha1":"982c0e54df8fc3d9681247784d566277fcd8b871","sha256":"6d952e3ed1007a69ed343cab1ce4c7752f2cd7bbdb4f96fc7d300e621038f20b","sha512":"bd811ee1929eb751d1f40ee43665d961a3179bfe9708f9fca341b4959f5533411d901ca561e0499e552a25c29110fccb73876d3d4caafc67795369cdb895e04c","ssdeep":"768:vc6LklBn3+yxhRvR75gW/bUQECstnF36/I8UtcbDsPZxPvYXKvgHPRDAKRT5VsXi:aLnNTPHDsUD/l8PkTNskOT1tA","tlshash":"242307803f92ea6956a1a8f7332e9575f8094d55704cc0e8e16f3c943d9b337e878b68","first_seen":"2026-09-29T16:11:13.205328Z","last_seen":"2026-09-29T16:11:13.205328Z","times_seen":1,"resource_available":true,"data":null}},"time_used":564,"timings":{"blocked":-1,"dns":4,"connect":92,"send":0,"wait":100,"receive":91,"ssl":278},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"www.highperformanceformat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"www.highperformanceformat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mamshirt.com/17/1b50e57a5911fd0a5b46962ab48ca22b?ppk=90f42858fbf62705eb9917c6a09a9a21","fqdn":"mamshirt.com","domain":"mamshirt.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rbx1000dfthfhhfhu.blogspot.com/","date":"2026-09-29T16:10:21.670Z","timestamp":1790698221670,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mamshirt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 16:05:40 GMT","end":"Thu, 26 Nov 2026 17:05:35 GMT"},"fingerprint":{"sha1":"BC:77:44:FD:F1:4E:49:75:F1:D1:4B:79:5E:0C:25:1B:61:78:53:C3","sha256":"27:14:1A:D5:8D:DC:F0:58:04:A8:C7:F1:58:29:46:06:3B:1D:5B:D4:A1:B5:75:53:59:6E:AA:82:C8:D7:D3:65"}}},"request":{"raw":"GET /17/1b50e57a5911fd0a5b46962ab48ca22b?ppk=90f42858fbf62705eb9917c6a09a9a21 HTTP/1.1\r\nHost: mamshirt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rbx1000dfthfhhfhu.blogspot.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 29 Sep 2026 16:10:25 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nset-cookie: uidm=01a0edee-7cf1-7ba8-82ca-71cfb749f765_1; Path=/; Expires=Fri, 26 Sep 2036 16:10:24 GMT; Secure; SameSite=None\n__cf_bm=xjWPziHorkSP1aU6vRa5kTDRWv3G.kfzuuFgFHtsQ0Q-1790698224.8624806-1.0.1.1-3Z_lMICb4gfmf42SBEsty7F0xeNzp197FGbgOFROtN8M3QWUtSTAXTv1.x0fAQVMjAecI9E9Mrqw5kSSUHtB5Nk4gt75XothX5bEwXkeRnIjb9orzeFhVf2ppZtt_WNk; HttpOnly; SameSite=None; Secure; Path=/; Domain=mamshirt.com; Expires=Tue, 29 Sep 2026 16:40:24 GMT\r\naccept-ch: Sec-Ch-Ua-Full-Version,Device-Stock-Ua,X-Device-User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua-Full-Version-List\r\ncontent-encoding: gzip\r\nlink: \u003chttps://araplhn.org\u003e; rel=preconnect; crossorigin, \u003chttps://araplhn.org\u003e; rel=dns-prefetch, \u003chttps://static.nresystems.com\u003e; rel=preconnect; crossorigin, \u003chttps://static.nresystems.com\u003e; rel=dns-prefetch\r\nvary: Accept-Encoding, Origin\r\nx-envoy-upstream-service-time: 4\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: no-cache, max-age=0, private, no-cache\r\nx-request-id: 8a0891719609450c92bebdcf378179f2\r\npragma: no-cache\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,X-Forwarded-For,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1728000\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a42c420168098be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"uidm","value":"01a0edee-7cf1-7ba8-82ca-71cfb749f765_1","quoted":false,"path":"/","expires":"2036-09-26T16:10:24Z","raw_expires":"Fri, 26 Sep 2036 16:10:24 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uidm=01a0edee-7cf1-7ba8-82ca-71cfb749f765_1; Path=/; Expires=Fri, 26 Sep 2036 16:10:24 GMT; Secure; SameSite=None"},{"name":"__cf_bm","value":"xjWPziHorkSP1aU6vRa5kTDRWv3G.kfzuuFgFHtsQ0Q-1790698224.8624806-1.0.1.1-3Z_lMICb4gfmf42SBEsty7F0xeNzp197FGbgOFROtN8M3QWUtSTAXTv1.x0fAQVMjAecI9E9Mrqw5kSSUHtB5Nk4gt75XothX5bEwXkeRnIjb9orzeFhVf2ppZtt_WNk","quoted":false,"path":"/","domain":"mamshirt.com","expires":"2026-09-29T16:40:24Z","raw_expires":"Tue, 29 Sep 2026 16:40:24 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=xjWPziHorkSP1aU6vRa5kTDRWv3G.kfzuuFgFHtsQ0Q-1790698224.8624806-1.0.1.1-3Z_lMICb4gfmf42SBEsty7F0xeNzp197FGbgOFROtN8M3QWUtSTAXTv1.x0fAQVMjAecI9E9Mrqw5kSSUHtB5Nk4gt75XothX5bEwXkeRnIjb9orzeFhVf2ppZtt_WNk; HttpOnly; SameSite=None; Secure; Path=/; Domain=mamshirt.com; Expires=Tue, 29 Sep 2026 16:40:24 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":4461,"size_decoded":4137,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4461), with no line terminators","md5":"06cfe8a1d68fd9df932bd0293227212c","sha1":"f4474824f10ab58a35a8c355cdab5b39ffe301d4","sha256":"46bcbbb84c37056cdb0fc47e9e6680779d5d3193ca4df61aef62ecc13d4ea554","sha512":"c6a1286df1bfe3d761e106d5746059c73e78e6af5741989610396e2bbc305618d4236dbbf9225bea95a39527143aa11fa43b5e749568d1242b7b9fb6e30d88ca","ssdeep":"96:yigF+LesfrhE+jrWMdi+lUkYmGmY+Gac51kvLKA+:yTF+fVEKrHU1Ac51eKA+","tlshash":"0f9182de7281b0a09b9328eb7b363a15b49c5d70349fc8e0f12d348a7c1673ac173a65","first_seen":"2026-09-25T16:16:28.005265Z","last_seen":"2026-09-29T18:54:14.197271Z","times_seen":91,"resource_available":true,"data":null}},"time_used":3345,"timings":{"blocked":0,"dns":36,"connect":9,"send":0,"wait":151,"receive":-1,"ssl":3149},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rbx1000dfthfhhfhu.blogspot.com/","fqdn":"rbx1000dfthfhhfhu.blogspot.com","domain":"rbx1000dfthfhhfhu.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.250.178.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-29T16:10:20.215Z","timestamp":1790698220215,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.blogspot.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:11 GMT","end":"Thu, 03 Dec 2026 19:23:10 GMT"},"fingerprint":{"sha1":"18:27:51:1B:36:B0:7B:7B:27:4E:7C:B4:91:6F:A5:B0:2F:52:95:CC","sha256":"F9:6D:4E:75:3D:CB:5B:3B:41:D3:38:53:FC:06:10:DC:27:82:94:5E:81:56:D2:4B:82:46:93:93:6C:18:84:88"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rbx1000dfthfhhfhu.blogspot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html; charset=UTF-8\r\nexpires: Tue, 29 Sep 2026 16:10:20 GMT\r\ndate: Tue, 29 Sep 2026 16:10:20 GMT\r\ncache-control: private, max-age=0\r\nlast-modified: Wed, 19 Aug 2026 14:24:31 GMT\r\netag: W/\"65fecd5fc4a0a7b5ec4075cafc4070029da4af66a2fb9cde5e5b794c04e441f1\"\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 5917\r\nserver: GSE\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}],"data":{"size":22247,"size_decoded":6408,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (345)","md5":"290db839abdb341ae6f2259dd6c4c2ff","sha1":"81be9010dcf86a9e6e0e1cf8996788fa31ec14cf","sha256":"24c17e894a076d45cc24d9b0d00cd979be23960924d544fd8314e3f44637d356","sha512":"44ec042ae7bb3c4fb83523e3603fc517c84378cccaead237120b791d8352ff1b184a152be0d3ca2bd11fee9ffa63cc08c8d5965f55b09f591302a99872c09bb3","ssdeep":"384:SpwKcag4PyDZs8kbRFwFerkyeBfKwfKZnDsP/tSoixiGi2jiUikDi1i1i4it9uo4:S6Kcag461PCFwFerkyeBfKe/vXZJHkke","tlshash":"1aa2b6276ce744076912d0a87ff253093535d107dc4ac9ad3aec62885f8afdad9a339c","first_seen":"2026-08-29T21:32:13.074723Z","last_seen":"2026-09-29T16:11:13.206466Z","times_seen":5,"resource_available":true,"data":null}},"time_used":296,"timings":{"blocked":-1,"dns":40,"connect":15,"send":0,"wait":188,"receive":16,"ssl":36},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"rbx1000dfthfhhfhu.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"rbx1000dfthfhhfhu.blogspot.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"rbx1000dfthfhhfhu.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rbx1000dfthfhhfhu.blogspot.com/sara1.png","fqdn":"rbx1000dfthfhhfhu.blogspot.com","domain":"rbx1000dfthfhhfhu.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.250.178.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rbx1000dfthfhhfhu.blogspot.com/","date":"2026-09-29T16:10:21.118Z","timestamp":1790698221118,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.blogspot.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:11 GMT","end":"Thu, 03 Dec 2026 19:23:10 GMT"},"fingerprint":{"sha1":"18:27:51:1B:36:B0:7B:7B:27:4E:7C:B4:91:6F:A5:B0:2F:52:95:CC","sha256":"F9:6D:4E:75:3D:CB:5B:3B:41:D3:38:53:FC:06:10:DC:27:82:94:5E:81:56:D2:4B:82:46:93:93:6C:18:84:88"}}},"request":{"raw":"GET /sara1.png HTTP/1.1\r\nHost: rbx1000dfthfhhfhu.blogspot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rbx1000dfthfhhfhu.blogspot.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Tue, 29 Sep 2026 16:10:21 GMT\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 905\r\nserver: GSE\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":1871,"size_decoded":1299,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (536)","md5":"225adf7daa3613e2cc7d1e7bb636b3bc","sha1":"5eb94e0cac47414736614f871d6f057c74972d7a","sha256":"654cd7c6a5b0c792fd93d71d657d88f291a8ed2390eb10357f871efc52610e67","sha512":"ef015e84aeadbd4d372f2d4271c99a44dcf51fcc47806b14302787e35ee1ad5a01349b9e869f3cdf6dbe23b4bc5964c0cb747c2bc2e1a3df0e3cdb15dde6cc1d","ssdeep":"","tlshash":"03312232469d68060f32f2dcb9f0731ab4c3a29fc7544c80f6ecaaeb5fc5b54a551259","first_seen":"2026-08-29T21:32:13.063928Z","last_seen":"2026-09-29T16:11:13.194526Z","times_seen":5,"resource_available":true,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"rbx1000dfthfhhfhu.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"rbx1000dfthfhhfhu.blogspot.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"rbx1000dfthfhhfhu.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zoologyfibre.com/watch.436289720807.js?key=90f42858fbf62705eb9917c6a09a9a21\u0026kw=%5B%5D\u0026refer=https%3A%2F%2Frbx1000dfthfhhfhu.blogspot.com%2F\u0026tz=0\u0026dev=e\u0026res=14.1055\u0026rb=e\u0026uuid=01a0edee-70d0-754b-954a-759627eb22eb%3A1%3A1","fqdn":"zoologyfibre.com","domain":"zoologyfibre.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rbx1000dfthfhhfhu.blogspot.com/","date":"2026-09-29T16:10:21.801Z","timestamp":1790698221801,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"zoologyfibre.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 05:55:20 GMT","end":"Tue, 24 Nov 2026 05:55:19 GMT"},"fingerprint":{"sha1":"D9:C4:6B:72:BF:AD:1D:89:A0:42:3A:8F:4C:FB:16:ED:76:B5:49:4E","sha256":"5A:7C:DE:6E:DA:4D:5D:C0:2A:21:D8:D5:89:20:66:D3:9E:94:22:FF:B3:29:F3:C8:20:0D:25:E4:9A:74:C3:D2"}}},"request":{"raw":"GET /watch.436289720807.js?key=90f42858fbf62705eb9917c6a09a9a21\u0026kw=%5B%5D\u0026refer=https%3A%2F%2Frbx1000dfthfhhfhu.blogspot.com%2F\u0026tz=0\u0026dev=e\u0026res=14.1055\u0026rb=e\u0026uuid=01a0edee-70d0-754b-954a-759627eb22eb%3A1%3A1 HTTP/1.1\r\nHost: zoologyfibre.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://rbx1000dfthfhhfhu.blogspot.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rbx1000dfthfhhfhu.blogspot.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 307 Temporary Redirect\r\nServer: nginx/1.28.2\r\nDate: Tue, 29 Sep 2026 16:10:22 GMT\r\nContent-Type: text/html\r\nContent-Length: 0\r\nConnection: keep-alive\r\naccept-ch: X-Device-User-Agent,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Mobile,Device-Stock-Ua,User-Agent,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Model\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://rbx1000dfthfhhfhu.blogspot.com\r\nlocation: https://zoologyfibre.com/watch.436289720807.js?dev=e\u0026fstu=01a0edee-724a-75a6-9780-cfdc661beac8\u0026key=90f42858fbf62705eb9917c6a09a9a21\u0026kw=%5B%5D\u0026ps1=1790698222\u0026rb=e\u0026refer=https%3A%2F%2Frbx1000dfthfhhfhu.blogspot.com%2F\u0026res=14.1055\u0026rmtc=t\u0026sht=oxIk44_-y9FsOmkwRUMNTiIYaRJeYqtkeiLg0mtl2G8\u0026shv=2\u0026st1=89b38d8e018f3fa30394a0ea63cdc99f\u0026tz=0\u0026uuid=01a0edee-70d0-754b-954a-759627eb22eb%3A1%3A1\r\nset-cookie: uid_id2=01a0edee-70d0-754b-954a-759627eb22eb:1:1; Path=/; Expires=Tue, 06 Oct 2026 16:10:22 GMT; Secure; SameSite=None\nain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.KSUvOUVy5mmDB5DElD5KIFSouofp5gW7X1SJ8xu-rAs; Path=/; Expires=Tue, 29 Sep 2026 16:11:22 GMT; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nx-envoy-upstream-service-time: 8\r\nHost: zoologyfibre.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 67806f131c9ee3297e0a94cfd622d5ac\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":[{"name":"uid_id2","value":"01a0edee-70d0-754b-954a-759627eb22eb:1:1","quoted":false,"path":"/","expires":"2026-10-06T16:10:22Z","raw_expires":"Tue, 06 Oct 2026 16:10:22 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uid_id2=01a0edee-70d0-754b-954a-759627eb22eb:1:1; Path=/; Expires=Tue, 06 Oct 2026 16:10:22 GMT; Secure; SameSite=None"},{"name":"ain","value":"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.KSUvOUVy5mmDB5DElD5KIFSouofp5gW7X1SJ8xu-rAs","quoted":false,"path":"/","expires":"2026-09-29T16:11:22Z","raw_expires":"Tue, 29 Sep 2026 16:11:22 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJwIjp7ImlkIjozMDU4NDc5NywiayI6IjkwZjQyODU4ZmJmNjI3MDVlYjk5MTdjNmEwOWE5YTIxIiwic2lkIjoiIiwiaXNpZCI6MCwiYXNpZCI6MSwiemlkIjo1OTU4NjA4LCJwaWQiOjM0MTIxNTQsImFuIjp0cnVlLCJsYW4iOnRydWUsImNpZCI6MjgsImFpZCI6MjcsInB0Ijo0LCJwayI6IncycGFhMnB4azEiLCJjcGtzIjp7IjI4IjoiMjI5ZWI2MjM2ZTYxN2QwMjljMjU4NzQ3Zjg3MmM3ZmMifSwidCI6MX0sInUiOnsidSI6MSwiYXUiOjEsImQiOnsiaWQiOjI2NjU2MTExNSwiaWRzIjoiIiwiaWMiOmZhbHNlLCJuIjoiRGVza3RvcCxFbXVsYXRvciIsInYiOiJVbmtub3duIiwibSI6IlVua25vd24iLCJmIjoxLCJmbiI6IkRlc2t0b3AiLCJvaWQiOjM4OTE0LCJvbiI6IldpbmRvd3MiLCJvdiI6IjEwLjAiLCJiaWQiOjEzNjkyNSwiYm4iOiJGaXJlZm94IiwiYnYiOiIxMzQuMCIsInd2IjpmYWxzZSwiZSI6dHJ1ZSwiYWIiOmZhbHNlfSwiYyI6eyJpZCI6MTYyLCJjIjoiTk8iLCJuIjoiTm9yd2F5In0sImN0Ijp7ImlkIjozMTQ2MjcwLCJuIjoiTWF1cmEifSwicmciOnsiaWQiOjMyNzEsIm4iOiJWaWtlbiJ9LCJhIjpmYWxzZSwiY3IiOnsibiI6IkJsaXggU29sdXRpb25zIn0sInhmIjoiIiwiaXhmIjpmYWxzZSwiaWd4ZiI6ZmFsc2UsIml3ZiI6dHJ1ZSwidXAiOnRydWUsInIiOiJodHRwczovL3JieDEwMDBkZnRoZmhoZmh1LmJsb2dzcG90LmNvbS8iLCJ0eiI6MiwiaWR1YyI6MCwiYXIiOltdfX0.KSUvOUVy5mmDB5DElD5KIFSouofp5gW7X1SJ8xu-rAs; Path=/; Expires=Tue, 29 Sep 2026 16:11:22 GMT; Secure; SameSite=None"}],"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-29T23:35:44.423362Z","times_seen":18729606,"resource_available":true,"data":null}},"time_used":397,"timings":{"blocked":0,"dns":16,"connect":91,"send":0,"wait":103,"receive":0,"ssl":187},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"zoologyfibre.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"zoologyfibre.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"d3r33tlb373kwk.cloudfront.net/public/external/css_frontXF.css","fqdn":"d3r33tlb373kwk.cloudfront.net","domain":"d3r33tlb373kwk.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"65.9.60.123","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rbx1000dfthfhhfhu.blogspot.com/","date":"2026-09-29T16:10:29.005Z","timestamp":1790698229005,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 25 Aug 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"5E:9C:8C:03:23:F3:2C:16:F1:D3:F8:2D:AE:8E:8E:2D:88:E9:60:56","sha256":"BB:D2:A7:53:57:A1:50:6D:AC:51:47:E7:F1:6F:3E:26:93:2E:AA:72:59:0F:B9:AA:5F:E3:C3:E3:99:D6:69:2B"}}},"request":{"raw":"GET /public/external/css_frontXF.css HTTP/1.1\r\nHost: d3r33tlb373kwk.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rbx1000dfthfhhfhu.blogspot.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css\r\ncontent-length: 6134\r\ndate: Tue, 29 Sep 2026 16:10:29 GMT\r\naccept-ranges: bytes\r\nserver: Apache/2.4.51 () OpenSSL/1.0.2k-fips PHP/7.4.11\r\nlast-modified: Thu, 17 Aug 2023 03:23:53 GMT\r\netag: \"17f6-60315f10d79b1\"\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 ba6ea0ac48ef516c00fa1bd16e2e5c2a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: LxFOgabUA7PVzhtRHRbAqJ-HniX2wtWBHizUxylqvSt_ftWBaI-ATQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.4.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Apache HTTP Server:2.4.51","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"OpenSSL:1.0.2k","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":6134,"size_decoded":6602,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"8cf8da7dc6b5d43ae6872b4fe5564c38","sha1":"cc3c14ce8bccf427b4a777449876eb722381cb18","sha256":"60a0f85900cf8e56c1607c8c120f68064a4f8d22a40637b224774cb611e93c2f","sha512":"e719aa872285169d609b29810cf8b4d748bae32bb08ceb4122ea4cd08345f7fb1f688eb03f55c10ad145e414920de88ffdc02f6b77be46e2d9106d80438f7826","ssdeep":"96:XtPngNH2uJbg6iLiTX9KFORdtHGMl3JYYD9PzhZ:XtPgRpViLiTX1dtHGMlm29PzhZ","tlshash":"eac1e16c6d21254581368a15e3db861ad87ca12319317efdb381235b4f316fc13abfba","first_seen":"2023-08-18T00:45:26Z","last_seen":"2026-09-29T16:11:13.20704Z","times_seen":3534,"resource_available":true,"data":null}},"time_used":232,"timings":{"blocked":-1,"dns":23,"connect":11,"send":0,"wait":183,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/watch.380604265924.js?dev=e\u0026fstu=01a0edee-8f4a-7179-8883-ed07847541fd\u0026key=90f42858fbf62705eb9917c6a09a9a21\u0026kw=%5B%22robux%22%5D\u0026ps1=1790698229\u0026rb=e\u0026refer=https%3A%2F%2Frbx1000dfthfhhfhu.blogspot.com%2F\u0026res=14.1055\u0026rmtc=t\u0026sht=N7WCeFI_QeSC332rcmT6D_mPv_UeJDrFFQEFGhWm-og\u0026shv=2\u0026st1=4e63569e12ac623461eeba975f2af6ab\u0026tz=0\u0026uuid=01a0edee-70d0-754b-954a-759627eb22eb%3A1%3A1","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rbx1000dfthfhhfhu.blogspot.com/","date":"2026-09-29T16:10:29.633Z","timestamp":1790698229633,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 00:02:23 GMT","end":"Sat, 21 Nov 2026 00:02:22 GMT"},"fingerprint":{"sha1":"45:C6:44:0A:42:17:85:94:0C:43:02:EA:82:14:8D:F8:D3:13:D9:E2","sha256":"8C:E7:C4:F5:8F:DB:E8:10:A8:55:E4:5C:85:CC:97:D0:7D:0A:FE:C9:6C:C4:4D:6A:FF:20:87:2C:BC:34:2D:F4"}}},"request":{"raw":"GET /watch.380604265924.js?dev=e\u0026fstu=01a0edee-8f4a-7179-8883-ed07847541fd\u0026key=90f42858fbf62705eb9917c6a09a9a21\u0026kw=%5B%22robux%22%5D\u0026ps1=1790698229\u0026rb=e\u0026refer=https%3A%2F%2Frbx1000dfthfhhfhu.blogspot.com%2F\u0026res=14.1055\u0026rmtc=t\u0026sht=N7WCeFI_QeSC332rcmT6D_mPv_UeJDrFFQEFGhWm-og\u0026shv=2\u0026st1=4e63569e12ac623461eeba975f2af6ab\u0026tz=0\u0026uuid=01a0edee-70d0-754b-954a-759627eb22eb%3A1%3A1 HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://rbx1000dfthfhhfhu.blogspot.com\r\nReferer: https://rbx1000dfthfhhfhu.blogspot.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=01a0edee-70d0-754b-954a-759627eb22eb:1:1; ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.KSUvOUVy5mmDB5DElD5KIFSouofp5gW7X1SJ8xu-rAs\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"uid_id2","value":"01a0edee-70d0-754b-954a-759627eb22eb:1:1"},{"name":"ain","value":"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.KSUvOUVy5mmDB5DElD5KIFSouofp5gW7X1SJ8xu-rAs"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Tue, 29 Sep 2026 16:10:29 GMT\r\nContent-Type: text/html\r\nContent-Length: 0\r\nConnection: keep-alive\r\naccept-ch: X-Device-User-Agent,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Mobile,Device-Stock-Ua,User-Agent,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Model\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://rbx1000dfthfhhfhu.blogspot.com\r\nset-cookie: uid_id2=01a0edee-70d0-754b-954a-759627eb22eb:1:1; Path=/; Expires=Tue, 06 Oct 2026 16:10:29 GMT; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nx-envoy-upstream-service-time: 10\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 4b04c33e48359145ed53dbfac80adcc8\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":[{"name":"uid_id2","value":"01a0edee-70d0-754b-954a-759627eb22eb:1:1","quoted":false,"path":"/","expires":"2026-10-06T16:10:29Z","raw_expires":"Tue, 06 Oct 2026 16:10:29 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uid_id2=01a0edee-70d0-754b-954a-759627eb22eb:1:1; Path=/; Expires=Tue, 06 Oct 2026 16:10:29 GMT; Secure; SameSite=None"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":972,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-29T23:35:44.423362Z","times_seen":18729606,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"kettledroopingcontinuation.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/animate.css/4.1.1/animate.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rbx1000dfthfhhfhu.blogspot.com/","date":"2026-09-29T16:10:21.097Z","timestamp":1790698221097,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/animate.css/4.1.1/animate.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rbx1000dfthfhhfhu.blogspot.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 16:10:21 GMT\r\ncontent-type: text/css; charset=utf-8\r\npriority: u=2,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 491472\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Mon, 07 Sep 2020 12:33:38 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rRyzhZ7lBTuy3O6aqzFap%2FDtnU%2BgzARyg6xDLpAjo6AWyvAmeFyggaMjHzLGzEEE2lnJigyFlTqfywG12t2CDYrtGhHp6N%2Frnsqs2Sbx3W65mXBZK8AA0DVkQ%2FzMECf9ObXfCeST\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a42c41ea2c0e56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4216\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":71750,"size_decoded":5221,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65348)","md5":"c0be8e53226ac34833fd9b5dbc01ebc5","sha1":"b81ef1b22de26af8a7a4656f565fbc91a69d7518","sha256":"5fbaeb9f8e25d7e0143bae61d4b1802c16ce7390b96ceb2d498b0d96ff4c853f","sha512":"738daa4d2c3fc0f677ff92c1cc3f81c397fb6d2176a31a2eeb011bf88fe5a9e68a57914321f32fbd1a7bef6cb88dc24b2ae1943a96c931d83f053979d1f25803","ssdeep":"1536:h6uNQ3fdPwwanleMf72yMPkZ8PFwh1nAukdDO3Xyr5Ir5eh0dTo:AkZgwh1nAukdDO3Xyr5Ir5eh0dTo","tlshash":"a66329ae4891128990230f6787cd5ea84b3dc6a355721cee33552c0b8b46fee73de617","first_seen":"2023-04-05T05:17:37Z","last_seen":"2026-09-29T20:30:07.214617Z","times_seen":33643,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":13,"connect":24,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}