{"report_id":"19e100e0-2f40-468e-bfa8-e71bd4887bb9","version":0,"status":"done","tags":[],"date":"2026-07-07T16:54:45Z","url":{"schema":"http","addr":"ryujinxcanary.blog/ryubing-canary/","fqdn":"ryujinxcanary.blog","domain":"ryujinxcanary.blog","tld":"blog"},"ip":{"addr":"104.21.64.117","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"ryujinxcanary.blog/ryubing-canary/","fqdn":"ryujinxcanary.blog","domain":"ryujinxcanary.blog","tld":"blog"},"title":"(1) New Message!","dom":{"size":30205,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (541)","md5":"49006dc57401b5b17f41c44e08eb5370","sha1":"d401a1fe62c5d8da64f3c1a18e0f1f46977f2cea","sha256":"2d20c66870292ce157a71860d1820d68507f007acbf9b43e6740dd9f9f2ea7e0","sha512":"1d11f844948851f58d7b15a2907633a7a2c2f5a7650ad17dcfad4c262255834481cf53fa6a9d0ef992e1cf718f8f5c4425fc80c672444e78b8ba7e60848080ad","ssdeep":"768:z+9zh+HzGvs/Wt9F1vrJuuJ6ke4TJ9QLhTCtDH:ST+HzGvs/Wtf1zJuuYaTsRCtb","tlshash":"e3d2c623b5f1123f056351e766ebb718ef93a20bc70a9d21b1bd425c5faad43852328d","dom_hash":"domhashcc6c76fb92895e627a729f24a880b228","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"ryujinxcanary.blog/ryubing-canary/","fqdn":"ryujinxcanary.blog","domain":"ryujinxcanary.blog","tld":"blog"},"ip":{"addr":"104.21.64.117","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-11T16:54:45Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":7}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"immigrationacre.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"immigrationacre.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"flushpersist.com","ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2025-07-01","domain_rank":23810,"first_seen":"2025-07-08T10:43:12.76905Z","last_seen":"2026-07-03T03:42:49.326673Z","alert_count":3,"request_count":1,"received_data":477,"sent_data":874,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"portalfluently.com","ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2026-06-18","domain_rank":0,"first_seen":"2026-06-19T16:11:46.270184Z","last_seen":"2026-07-03T19:01:33.612646Z","alert_count":0,"request_count":1,"received_data":85885,"sent_data":458,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.show-sb.com","ip":{"addr":"172.67.170.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-08-20","domain_rank":187612,"first_seen":"2024-08-31T03:46:04Z","last_seen":"2026-07-03T05:52:02.23828Z","alert_count":2,"request_count":1,"received_data":2713,"sent_data":498,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-07-05T22:22:24.069932Z","alert_count":0,"request_count":1,"received_data":17439,"sent_data":487,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"protrafficinspector.com","ip":{"addr":"63.185.202.254","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2025-06-18","domain_rank":614186,"first_seen":"2025-07-25T22:45:21.95813Z","last_seen":"2026-07-02T04:53:51.188847Z","alert_count":0,"request_count":1,"received_data":513,"sent_data":494,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ryujinxcanary.blog","ip":{"addr":"104.21.64.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-05-18","domain_rank":0,"first_seen":"2026-05-30T21:56:48.643344Z","last_seen":"2026-06-15T20:00:39.734885Z","alert_count":0,"request_count":8,"received_data":132530,"sent_data":4094,"comment":"","tags":null,"fingerprints":[{"name":"Bootstrap:5.3.2","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-07-05T22:48:05.057169Z","alert_count":0,"request_count":2,"received_data":315165,"sent_data":1026,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-07-05T22:41:50.352327Z","alert_count":0,"request_count":2,"received_data":261082,"sent_data":1145,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.redgarto.com","ip":{"addr":"104.21.80.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-09","domain_rank":0,"first_seen":"2026-06-10T14:51:12.515203Z","last_seen":"2026-07-01T19:01:26.079692Z","alert_count":0,"request_count":7,"received_data":196100,"sent_data":3486,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-07-05T22:19:28.847206Z","alert_count":0,"request_count":2,"received_data":87898,"sent_data":1144,"comment":"","tags":null,"fingerprints":null},{"fqdn":"immigrationacre.com","ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2026-01-21","domain_rank":0,"first_seen":"2026-01-30T08:57:45.831225Z","last_seen":"2026-06-27T05:19:55.473266Z","alert_count":2,"request_count":1,"received_data":94222,"sent_data":497,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"zoologyfibre.com","ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2024-09-03","domain_rank":0,"first_seen":"2026-05-23T09:52:15.201176Z","last_seen":"2026-07-04T15:03:46.472908Z","alert_count":0,"request_count":9,"received_data":18620,"sent_data":8770,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ryujinxcanary.blog/static/js/main.js","fqdn":"ryujinxcanary.blog","domain":"ryujinxcanary.blog","tld":"blog"},"ip":{"addr":"104.21.64.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ed796b3f589ebe50ed4cfc936c555ba","sha1":"d2223087c5cc66d32c7818d898c9dd429a10230d","sha256":"39d225483a7d83b2b0062ee23ecb5d9158ffc7fbe5184ef07104ac0f07b4d149","sha512":"96955ae62feca7696a523ceb2883cb4ddad764bdc02ddd81f7c613c83999035db61ae7ce0822fdc3e1b485f01413c65676398639174e1d550190185299a54a75","ssdeep":"384:xn521I3P8gpareF8rH9yr8zbNwhWrC8F5F1zrijIW3Qi:B5Vmyk5rXXGIW3Qi","tlshash":"b9a273ae29f710144567717b2f8f424972319007390acf493e6e83849f95fa5aab3fd8","size":22655,"data":"","first_seen":"2025-12-21T19:06:57.847166Z","last_seen":"2026-07-07T16:54:47.433893Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"immigrationacre.com/24/a9/28/24a92801f0d1813b0190a08ef670866d.js","fqdn":"immigrationacre.com","domain":"immigrationacre.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ba36395ce5b0776917bb55fb16f6b517","sha1":"a7a6b267f1f012f602ab7ad4620ab811f6dc9a93","sha256":"51f7e2b3c8a1dc0594868ef6ea79597975bdf2c45a70d781962ef9078f42443c","sha512":"f1f947fb50515c3ad2ea7cc499f6a26d3169e5fe6d151b8d162429820ebf3d37b054837d2a90c6039f4a88bb1bf5931568a3115f8a217033fa5df7696adbaa27","ssdeep":"1536:Z+cTczilRothjlroOtZEpqziTJydEAwUySeJkBeBdMNAZwayiWEND8:V3otDXGEEcmjRW29yJ","tlshash":"c093d9897f91b46f435730b726af943ff16dac417088f444d202f9e85dbab1ae532a24","size":93425,"data":"","first_seen":"2026-07-07T16:54:47.439106Z","last_seen":"2026-07-07T16:54:47.439106Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portalfluently.com/sfp.js","fqdn":"portalfluently.com","domain":"portalfluently.com","tld":"com"},"ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","size":85379,"data":"","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-07-07T19:01:38.48845Z","times_seen":20494,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.redgarto.com/sb/interstitial/sweep/default/system/5/js/jquery.min.js","fqdn":"cdn.redgarto.com","domain":"redgarto.com","tld":"com"},"ip":{"addr":"104.21.80.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6326c600df01e3bfb9b40e1aa08176f8","sha1":"6b4fb754d29b297b539bf62ba9b4eaf0f33f314a","sha256":"df34524351c5fabc921a89183b5da5667aebd7b9e9a1c52255c76ff722935ea3","sha512":"641aaeecb9b89bcc319cabfef18f76faa9b1ba79f9de30c6d07f22d385fc78ac3f11a718fe9ec96f8a13d82e3dff4ca34944ccb449a4ef8e378ad65dfad581c0","ssdeep":"1536:oP10iSi65U/dXXeyhzeBuG+HYE0mdDuJO1z6Oy4sh3J1x72BjmN7TwpDKba98Hri:f+41hJiz6fhdlTqya98Hri","tlshash":"eb83d6d9b2c67062977734b851bf510bb17a98dab40c8c60f0a4d8e47eb4a8d517bf2c","size":84384,"data":"","first_seen":"2023-03-07T01:10:11Z","last_seen":"2026-07-07T17:47:48.62135Z","times_seen":12406,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"410475c57f168e1ba83aa6f00d907d05","sha1":"b4520c63231cc486857f80d7ff71f96537510eca","sha256":"e11802c5acc89c447cb8e6dde17dd2ab580c8f5647e8a5df88e1dc42b2e27616","sha512":"3469a7019af7788e9df5efab7c25fd5b9ea3c57fbac5cd7db20fa554eef4139415a8364c1a2ff6426faf502330133c0cf784937395755a2d19f2b19e4e6dc4cb","ssdeep":"192:4m4jk8T09xOUysjSm3Oi5ph+Enh5EOEOz/4mONCt6olkcJ:4m4WRHf+EnHEyk06oJ","tlshash":"c312ee8848ba9825d106b06d227e1962b3246c9b4c7abfe43f4d02580f9d47f767573f","size":9409,"data":"","first_seen":"2026-07-07T16:54:47.45243Z","last_seen":"2026-07-07T16:54:47.45243Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ryujinxcanary.blog/ryubing-canary/","fqdn":"ryujinxcanary.blog","domain":"ryujinxcanary.blog","tld":"blog"},"ip":{"addr":"104.21.64.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b2be5ec532ecac93316200982c544770","sha1":"69fa1cca1cc34e5cdd1149fbcdba16e80dee77ea","sha256":"b4c13a6768b79a1f6024f638279e33d2abb8579368cabf1f1af6a257ca8ecd6a","sha512":"d255f351b15ce9884a29127acf21dd38e3d525d80c9a06ed41e3d172993ed6e4004718804ec3773cc1ef83e0aa67d15b0c47c0e9247309f9b5058767c0feeeb0","ssdeep":"","tlshash":"32e0722a30c2003a12b388aa23b7810a2522270fc48e8b227a5fc4961f24ca1044210c","size":303,"data":"","first_seen":"2026-06-15T20:00:41.300164Z","last_seen":"2026-07-07T16:54:47.453355Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ryujinxcanary.blog/static/js/translations.js","fqdn":"ryujinxcanary.blog","domain":"ryujinxcanary.blog","tld":"blog"},"ip":{"addr":"104.21.64.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"479a32ff5c77073f095350ca71228e82","sha1":"b399115f6f2f25d20b6f08ff4eabbc1ec238af09","sha256":"70c325199c9188f92a9488713d805371e424b2b9101587091c55120387e394f5","sha512":"3677768ba5ac42f0ce445f1eafa817f12211091f76716fca8fb32f5fb674f631d0213988536e02a5fb1363f1f3b30641e24ffa768922ed60f2617e0c0c214e31","ssdeep":"192:sQvOWL/3jSbs4CMzpCTat4pt00i1W9/bYA/yANCWiI7jOet:lgj8TLr/hOm","tlshash":"e7f12dfebaa1495d4d923112529e2305a05500a34c24bc3cbe6d974cff6c88ed8f8af3","size":7649,"data":"","first_seen":"2026-06-15T20:00:41.270497Z","last_seen":"2026-07-07T16:54:47.438115Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoologyfibre.com/1e/e3/36/1ee3363d3f6736b5616821dca2afa5c7.js","fqdn":"zoologyfibre.com","domain":"zoologyfibre.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9454b75035bf1e7fbd8bc933d239763a","sha1":"05ac0f19656d2fd1882cb0ec3bc347cf2dbec25e","sha256":"261c1fc4c2d7eadeabb8edc511b4d3681cad5a27060128b4c3a6690484ccaffd","sha512":"8ec190336b0024f3fe41752f3d850ecb0e31157b2b2a80f9cabf627f95f05e0211f367f259bf6318c64243943faad6d9ee583b3b9893bf4463e0faa8c18272c8","ssdeep":"96:wa7EWyNaHUHRLQjFAqZPXU5ZLbCqEKNbuCKwMBPP2z6vgdgM:KWOSUoaXjxqiY+0gdL","tlshash":"11b144dd3f80b0d00ba620b36b1f251ab0694c21e55fd498f50b91a03e6da1fda67fb5","size":5126,"data":"","first_seen":"2026-05-04T13:56:21.08631Z","last_seen":"2026-07-07T18:29:07.552136Z","times_seen":2874,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ryujinxcanary.blog/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"ryujinxcanary.blog","domain":"ryujinxcanary.blog","tld":"blog"},"ip":{"addr":"104.21.64.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-07T19:06:25.06425Z","times_seen":389898,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.2/dist/js/bootstrap.bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6baf57f25796c332144ed58a2a0cd9ee","sha1":"f7fd0f3dc84b2cf93bf81e832505a673f354e0a3","sha256":"82f64f62bb03c1bc1824b0f9c9e05f70dba33e146818e63cdf5c306c8cf3dedd","sha512":"5ff6240d9ca34dfe30c9cd95cb5e981823c7c0063cad9258f8f3a0a24663401da684844524272410673a6325fd78db0f7e7d0fcd3844b8db3eb9aa2613908ee8","ssdeep":"1536:Qmw0iELO+TBR2t472RirWyKsVfK5GEfy3YJtCRv/45wZbqbXZTbYWU178:VwXza3YCl45wZODZTbYR8","tlshash":"cc73c5593244b4730ade85b68037430bf2265998b24b812cb57cadde2a7dcc67277f78","size":80663,"data":"","first_seen":"2023-09-18T01:21:14Z","last_seen":"2026-07-07T18:12:56.843216Z","times_seen":20209,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ryujinxcanary.blog/ryubing-canary/","fqdn":"ryujinxcanary.blog","domain":"ryujinxcanary.blog","tld":"blog"},"ip":{"addr":"104.21.64.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-07T16:54:20.636Z","timestamp":1783443260636,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ryujinxcanary.blog","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 May 2026 10:32:06 GMT","end":"Mon, 17 Aug 2026 11:31:58 GMT"},"fingerprint":{"sha1":"95:B2:07:5C:66:E2:C7:0B:93:3A:6E:73:4C:F1:24:09:A7:A4:2E:2B","sha256":"DF:1B:63:82:7A:D2:AA:C7:5B:1E:A9:FA:2A:D1:41:23:87:11:AF:FE:A7:94:DB:95:A8:C3:18:86:6A:A6:E4:31"}}},"request":{"raw":"GET /ryubing-canary/ HTTP/1.1\r\nHost: ryujinxcanary.blog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gqNdBrWP1k%2FBPP8762bcZqk5tO3mYdUtqSpGVM9BqtV4KnvI9n6BS%2F0X5ZY7EzKVVbepcs9tlp%2FOrAqcOmngpItE7NMKjhOqeqeq4H0S56C18Q%2B7VRz5yxgGo3btz0OBlBQ%2FuTs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/html; charset=utf-8\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nvary: accept-encoding\r\npriority: u=0,i\r\nserver: cloudflare\r\ncontent-encoding: br\r\ndate: Tue, 07 Jul 2026 16:54:20 GMT\r\ncf-ray: a1785edb9aef56a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bootstrap:5.3.2","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29636,"size_decoded":8254,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (541)","md5":"7dbb09e9349ab5f38a2bb5bc45fb8263","sha1":"f2c6bf0fcab5b54f61ac2f764c3c7d8e052626ab","sha256":"03ebe80524a38c70de8aa68a9a328cd30beb5d34f467e717cf442c17c16ba923","sha512":"c36512a791657ed0b599f3c6926183803e3d713cf44510fc5588ff70a545f0c6dbb9b281213deffea9a8ca1c89fc4fc18117abc2074dedb990da8f4a330da8b2","ssdeep":"768:A+9zh+HzGvs/WtHF1vrtuuJ6ke4TJ9QL65v4:pT+HzGvs/Wtl1ztuuYaTsKA","tlshash":"bfd2d623b5f1123f156351e766ebb718ef93a20bc70a9c21b1bd425c5faad43852328d","first_seen":"2026-07-07T16:54:47.431638Z","last_seen":"2026-07-07T16:54:47.431638Z","times_seen":1,"resource_available":true,"data":null}},"time_used":289,"timings":{"blocked":0,"dns":62,"connect":20,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.2/dist/css/bootstrap.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ryujinxcanary.blog/ryubing-canary/","date":"2026-07-07T16:54:21.412Z","timestamp":1783443261412,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/bootstrap@5.3.2/dist/css/bootstrap.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ryujinxcanary.blog/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 5.3.2\r\nx-jsd-version-type: version\r\netag: W/\"38df4-HxOZgbm0enZu+gphu3ito1HxbEs\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Tue, 07 Jul 2026 16:54:21 GMT\r\nage: 534775\r\nx-served-by: cache-fra-eddf8230027-FRA, cache-bma-essb1270079-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 33186\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":232948,"size_decoded":33966,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65342)","md5":"cd822b7fd22c8a95a68470c795adea69","sha1":"1f139981b9b47a766efa0a61bb78ada351f16c4b","sha256":"3017df4a76db5f01c2b99b603d88b03106df13bcfe18e67b7c13c2341d3a67df","sha512":"6f641c4b94ac03cb59a1d703b464442e21afe5268a4a4d6f0c70da41175ad21b4f61667ad38ea5af7909e5b00041da55da6980ff8bf4c1017d33253afe90c802","ssdeep":"1536:m9YnIWbn98fhRfvO5wlP7Qy9P3CV98IsYRElV6V6pz600I41r:pnIw98fsV986I6V6pz600I41r","tlshash":"c63482d6f590317d9ca7c1499681fefd8a6fa985cb1209a6f003776807cabd30962dcc","first_seen":"2023-09-18T01:21:14Z","last_seen":"2026-07-07T16:56:47.416568Z","times_seen":17744,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":50,"connect":8,"send":0,"wait":9,"receive":4,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ryujinxcanary.blog/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"ryujinxcanary.blog","domain":"ryujinxcanary.blog","tld":"blog"},"ip":{"addr":"104.21.64.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ryujinxcanary.blog/ryubing-canary/","date":"2026-07-07T16:54:21.422Z","timestamp":1783443261422,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ryujinxcanary.blog","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 May 2026 10:32:06 GMT","end":"Mon, 17 Aug 2026 11:31:58 GMT"},"fingerprint":{"sha1":"95:B2:07:5C:66:E2:C7:0B:93:3A:6E:73:4C:F1:24:09:A7:A4:2E:2B","sha256":"DF:1B:63:82:7A:D2:AA:C7:5B:1E:A9:FA:2A:D1:41:23:87:11:AF:FE:A7:94:DB:95:A8:C3:18:86:6A:A6:E4:31"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: ryujinxcanary.blog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ryujinxcanary.blog/ryubing-canary/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Thu, 09 Jul 2026 16:54:21 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MSQ4QAAzS%2Bu3GbEH9Xj0AZ%2F35xwGKrvfG%2FmzAo98CFODqkC2id3QYa8yfc%2FWKp0diLRXorfN6hGFsLtYdavHQKEMkLAPUN2b61b08N4HxPBSV%2BZjw0xefkjPIo72IoS9%2BC4zPNc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ndate: Tue, 07 Jul 2026 16:54:21 GMT\r\nserver: cloudflare\r\ncf-ray: a1785edfeba556a3-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1248,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-07T19:06:25.06425Z","times_seen":389898,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ryujinxcanary.blog/static/js/main.js","fqdn":"ryujinxcanary.blog","domain":"ryujinxcanary.blog","tld":"blog"},"ip":{"addr":"104.21.64.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ryujinxcanary.blog/ryubing-canary/","date":"2026-07-07T16:54:21.428Z","timestamp":1783443261428,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ryujinxcanary.blog","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 May 2026 10:32:06 GMT","end":"Mon, 17 Aug 2026 11:31:58 GMT"},"fingerprint":{"sha1":"95:B2:07:5C:66:E2:C7:0B:93:3A:6E:73:4C:F1:24:09:A7:A4:2E:2B","sha256":"DF:1B:63:82:7A:D2:AA:C7:5B:1E:A9:FA:2A:D1:41:23:87:11:AF:FE:A7:94:DB:95:A8:C3:18:86:6A:A6:E4:31"}}},"request":{"raw":"GET /static/js/main.js HTTP/1.1\r\nHost: ryujinxcanary.blog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ryujinxcanary.blog/ryubing-canary/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q1W0HyvsRZG3Uctr7P0BeLOdnGg630pf%2BGOzTYoqtxGcYC8fs4R%2Ba6A6ewDFIM29%2Fv2YmX4wmLznCKJDBpoXY43DaADbCYl%2Bp1IcH49KrHzbcS82AAgBmizxHERMAD4WTTTChsw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"136ada038e90d29e0f5ecbec35892452\"\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Tue, 07 Jul 2026 16:54:21 GMT\r\ncf-ray: a1785edfeba756a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22655,"size_decoded":6833,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"9ed796b3f589ebe50ed4cfc936c555ba","sha1":"d2223087c5cc66d32c7818d898c9dd429a10230d","sha256":"39d225483a7d83b2b0062ee23ecb5d9158ffc7fbe5184ef07104ac0f07b4d149","sha512":"96955ae62feca7696a523ceb2883cb4ddad764bdc02ddd81f7c613c83999035db61ae7ce0822fdc3e1b485f01413c65676398639174e1d550190185299a54a75","ssdeep":"384:xn521I3P8gpareF8rH9yr8zbNwhWrC8F5F1zrijIW3Qi:B5Vmyk5rXXGIW3Qi","tlshash":"b9a273ae29f710144567717b2f8f424972319007390acf493e6e83849f95fa5aab3fd8","first_seen":"2025-12-21T19:06:57.847166Z","last_seen":"2026-07-07T16:54:47.433893Z","times_seen":5,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.1/webfonts/fa-solid-900.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ryujinxcanary.blog/ryubing-canary/","date":"2026-07-07T16:54:21.659Z","timestamp":1783443261659,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.5.1/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://ryujinxcanary.blog\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.1/css/all.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 16:54:21 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\nserver: cloudflare\r\npriority: u=5,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\nlast-modified: Fri, 01 Dec 2023 00:32:25 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\ncf-cache-status: HIT\r\nage: 12964\r\nexpires: Sun, 27 Jun 2027 16:54:21 GMT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aGrMUzaJTGs1cCkO2IYAkOCJRukzXN7sy0uLi0RD2BbXzEHkwpCaOaVQYtG03Th%2FnYlHakX3PNG3jp%2FL%2BUoQt93sMOJHKMngPggYrLU43diH0z5livRCq7uqY%2BivgiRR3D1n8DvL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a1785ee17b012efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":156496,"size_decoded":157465,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 156496, version 773.768","md5":"6c4eee562650e53cee32496bdfbe534b","sha1":"1aae708e3b94ee981b452a918d28ed037fbb5e18","sha256":"9fc85f3a4544ab0d570c7f8f9bbb88db8d92c359b2707580ea8b07c75673eae2","sha512":"ebcb5a2e2a908228f77ecd03b45491778cad73ddc39fa3a6334b129aaf9fa36c16c0307aeaad74d77f616b5b34aac52d91e9f4816945253dc9a826ddd71f4d12","ssdeep":"3072:OvM6gZMLmY8uGpjVnlooQ+GQs8jic0f/KkMdE:OU65LoP5QSsuic0f/cdE","tlshash":"8ce31200d620498d9978fd5b2a1fa1ffa7a939c95ed210bad3c30cb93257143bbc2556","first_seen":"2023-12-02T04:06:15Z","last_seen":"2026-07-07T19:10:21.462608Z","times_seen":45363,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":12,"send":0,"wait":14,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.redgarto.com/sb/interstitial/sweep/default/system/5/js/jquery.min.js","fqdn":"cdn.redgarto.com","domain":"redgarto.com","tld":"com"},"ip":{"addr":"104.21.80.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ryujinxcanary.blog/ryubing-canary/","date":"2026-07-07T16:54:26.608Z","timestamp":1783443266608,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redgarto.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 12:56:57 GMT","end":"Mon, 07 Sep 2026 13:56:51 GMT"},"fingerprint":{"sha1":"D8:30:A0:FC:44:CC:CB:CC:41:34:6E:58:73:90:EB:8D:41:F2:56:BA","sha256":"85:56:6E:35:A5:13:48:28:ED:D2:1D:3C:B6:6B:C0:81:82:08:BB:68:8A:C5:D5:9E:CA:8A:77:EE:DD:4B:78:A4"}}},"request":{"raw":"GET /sb/interstitial/sweep/default/system/5/js/jquery.min.js HTTP/1.1\r\nHost: cdn.redgarto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 07 Jul 2026 16:54:26 GMT\r\ncontent-type: application/javascript\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 Aug 2025 15:36:03 GMT\r\npriority: u=3,i=?0\r\netag: \"689cb0e3-149a0\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\naccept-ranges: bytes\r\nage: 2295414\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C55VuLM2SMAWK74vBsSl6yVb27hMZOOdGF%2BEQV4tGQNCOCWfq0lcI%2BlZRxjZe3QjK8Ivz7FSED0HcvPU%2FOULwnd0U3K1KcVSUXwvjl1j%2FI18%2F%2BGdujBGJG%2FX6QQ8bJej174U\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1785f005851783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 84384\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84384,"size_decoded":85230,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32025), with CRLF line terminators","md5":"6326c600df01e3bfb9b40e1aa08176f8","sha1":"6b4fb754d29b297b539bf62ba9b4eaf0f33f314a","sha256":"df34524351c5fabc921a89183b5da5667aebd7b9e9a1c52255c76ff722935ea3","sha512":"641aaeecb9b89bcc319cabfef18f76faa9b1ba79f9de30c6d07f22d385fc78ac3f11a718fe9ec96f8a13d82e3dff4ca34944ccb449a4ef8e378ad65dfad581c0","ssdeep":"1536:oP10iSi65U/dXXeyhzeBuG+HYE0mdDuJO1z6Oy4sh3J1x72BjmN7TwpDKba98Hri:f+41hJiz6fhdlTqya98Hri","tlshash":"eb83d6d9b2c67062977734b851bf510bb17a98dab40c8c60f0a4d8e47eb4a8d517bf2c","first_seen":"2023-03-07T01:10:11Z","last_seen":"2026-07-07T17:47:48.62135Z","times_seen":12406,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.redgarto.com/sb/interstitial/sweep/default/system/5/js/script.js","fqdn":"cdn.redgarto.com","domain":"redgarto.com","tld":"com"},"ip":{"addr":"104.21.80.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ryujinxcanary.blog/ryubing-canary/","date":"2026-07-07T16:54:26.669Z","timestamp":1783443266669,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redgarto.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 12:56:57 GMT","end":"Mon, 07 Sep 2026 13:56:51 GMT"},"fingerprint":{"sha1":"D8:30:A0:FC:44:CC:CB:CC:41:34:6E:58:73:90:EB:8D:41:F2:56:BA","sha256":"85:56:6E:35:A5:13:48:28:ED:D2:1D:3C:B6:6B:C0:81:82:08:BB:68:8A:C5:D5:9E:CA:8A:77:EE:DD:4B:78:A4"}}},"request":{"raw":"GET /sb/interstitial/sweep/default/system/5/js/script.js HTTP/1.1\r\nHost: cdn.redgarto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ryujinxcanary.blog/\r\nOrigin: https://ryujinxcanary.blog\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 07 Jul 2026 16:54:27 GMT\r\ncontent-type: application/javascript\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 Aug 2025 15:36:03 GMT\r\npriority: u=3,i=?0\r\netag: \"689cb0e3-23ea\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GHiR6US5MgqRTTlwDirgYpnyibds%2Fc%2BCpk66eK%2BBQLjthtRIFunmQTuXVax%2FuR7DQMum%2FaMRun%2BOsZv8fv44fW2nXS%2F1obRV4%2Fi5xxlVBfn1jIBsRwWYmxHjNvmq5LolcmRi\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1785f00b88f783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9194\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9194,"size_decoded":10027,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text","md5":"b68e95d27d12985719dd6509a274fa79","sha1":"b9aed29f2b06bd135760aae0ca73de2edc3f90be","sha256":"c89d5402864ee687df3d1968d8520dfb19b9a034c2b14c27bbdbc41a94030b51","sha512":"e458bb9d90a8744abe49558843bebd65222160315be504d58c9cab4a65eb0c45ef7d07f128310608774942c1eb3f2ec77baf2e0bbb6ad3149b5dc752ac6a06b0","ssdeep":"192:Kmsjk8T09xOUysjSm3Oi5ph+Enh5EOEOz/4mONCt6olkcS:KmsWRHf+EnHEyk06oS","tlshash":"6912ec8848ba9815d006b06e227e19b2b32468978c79bfe43f4d02590f9d47f76b573f","first_seen":"2025-11-14T18:19:02.018283Z","last_seen":"2026-07-07T17:47:48.625739Z","times_seen":364,"resource_available":false,"data":null}},"time_used":470,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":470,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.redgarto.com/sb/interstitial/sweep/default/system/5/css/animate.css","fqdn":"cdn.redgarto.com","domain":"redgarto.com","tld":"com"},"ip":{"addr":"104.21.80.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ryujinxcanary.blog/ryubing-canary/","date":"2026-07-07T16:54:26.495Z","timestamp":1783443266495,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redgarto.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 12:56:57 GMT","end":"Mon, 07 Sep 2026 13:56:51 GMT"},"fingerprint":{"sha1":"D8:30:A0:FC:44:CC:CB:CC:41:34:6E:58:73:90:EB:8D:41:F2:56:BA","sha256":"85:56:6E:35:A5:13:48:28:ED:D2:1D:3C:B6:6B:C0:81:82:08:BB:68:8A:C5:D5:9E:CA:8A:77:EE:DD:4B:78:A4"}}},"request":{"raw":"GET /sb/interstitial/sweep/default/system/5/css/animate.css HTTP/1.1\r\nHost: cdn.redgarto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ryujinxcanary.blog/\r\nOrigin: https://ryujinxcanary.blog\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 07 Jul 2026 16:54:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 13 Aug 2025 15:35:51 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"689cb0d7-13365\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AxrHQ7NXs6MEiLnhfPPr3adod2%2Ff5HywO1SlogsEqUUf3hkXA1Gm4IYRLt3ugmm4juPouAE5bwu4QG70gjfnG4h9E%2FJzyF8VqMP800mVBRqceGVw9gqTnSibX6bJsDD1qR7d\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1785effc812783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78693,"size_decoded":5671,"mime_type":"text/css","magic":"ASCII text","md5":"5982c5377696d20476871062646b253f","sha1":"8bf2c93fa9ccc908f7df0fb7abb911bbac3e4242","sha256":"4e23a6449e6ef4614f0107cecf5c9eda75d2041c7c71f4a55d45f2a7e75450f4","sha512":"92592dac2a817293e8ec1d94bf99df639626a90d524420b01a12210398927c0650cc26fa8e730300096b29961563aa02efb707478c6d51ac8616bb1bde5a0cb2","ssdeep":"384:jvuAuF81dghu3uFlZlX/m/Gu7uNUtrL4VrbZJgBhLYNKwZiMUL6Vpaj7F:jvuAu21dghu3uhu7uNKwZiMUL6Vpaj7F","tlshash":"1d731bad399115845263861d83df9e68273ce5731826acef73c2488bcf8bf9867c9147","first_seen":"2024-02-12T20:28:38Z","last_seen":"2026-07-07T17:53:45.47635Z","times_seen":8704,"resource_available":false,"data":null}},"time_used":511,"timings":{"blocked":0,"dns":18,"connect":11,"send":0,"wait":482,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.redgarto.com/sb/interstitial/sweep/default/system/5/img/close.svg","fqdn":"cdn.redgarto.com","domain":"redgarto.com","tld":"com"},"ip":{"addr":"104.21.80.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ryujinxcanary.blog/ryubing-canary/","date":"2026-07-07T16:54:26.606Z","timestamp":1783443266606,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redgarto.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 12:56:57 GMT","end":"Mon, 07 Sep 2026 13:56:51 GMT"},"fingerprint":{"sha1":"D8:30:A0:FC:44:CC:CB:CC:41:34:6E:58:73:90:EB:8D:41:F2:56:BA","sha256":"85:56:6E:35:A5:13:48:28:ED:D2:1D:3C:B6:6B:C0:81:82:08:BB:68:8A:C5:D5:9E:CA:8A:77:EE:DD:4B:78:A4"}}},"request":{"raw":"GET /sb/interstitial/sweep/default/system/5/img/close.svg HTTP/1.1\r\nHost: cdn.redgarto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 07 Jul 2026 16:54:26 GMT\r\ncontent-type: image/svg+xml\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 Aug 2025 15:35:59 GMT\r\npriority: u=5,i\r\netag: \"689cb0df-4ff\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\naccept-ranges: bytes\r\nage: 2348189\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iY8Ul%2FCHk3wRYoCJWPmXfgx4NGZ0vdI6UNl31HN3e%2FQQJ5qXjrX0fc8H2Vnyiyh5UUqhXt1Qt7PVPgNRvEtkYNY4ZT7P2x8Ae0TlSzqDqV%2FTb8KqG%2Bjajuk0Nf%2FeOdi5XL3W\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1785f00584f783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1279\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1279,"size_decoded":2106,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"369850b9873659adf0951d845f57dba1","sha1":"a64257186daa33b6b318943a457b6cf8d80b26b6","sha256":"9630c142a8c074cc1809ebf4109538cf29cc0baeb6c27726191f1cf5376e2e21","sha512":"6441b40e85c86e21362c7061a6b9610f52a5c801b274b246711546ad45c68c3e7f2f242f1621b90967eaeebf52709545d06283c2015d6b9ad7f6f7d37fb14a88","ssdeep":"","tlshash":"6821d8dc958f223ef324ff6189b316606ba423f6bb18c5bcb199a8157e1cb910c48e14","first_seen":"2023-04-07T22:39:47Z","last_seen":"2026-07-07T17:47:48.619444Z","times_seen":9656,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ryujinxcanary.blog/ryubing-canary/","date":"2026-07-07T16:54:27.515Z","timestamp":1783443267515,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:41:01 GMT","end":"Mon, 07 Sep 2026 08:41:00 GMT"},"fingerprint":{"sha1":"01:31:A1:A6:4F:08:45:E1:F0:0B:CE:B1:B8:D8:61:D7:D1:70:ED:6F","sha256":"29:C5:5D:01:47:6E:72:F7:2C:CC:0B:96:BB:67:BA:39:CC:03:11:EB:7B:47:F5:3F:CC:DE:12:AC:68:07:A1:BA"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://ryujinxcanary.blog\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Jul 2026 10:17:38 GMT\r\nexpires: Fri, 02 Jul 2027 10:17:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 455809\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":43136,"size_decoded":43949,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-07-07T19:07:34.79482Z","times_seen":218184,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":32,"dns":0,"connect":0,"send":0,"wait":18,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ryujinxcanary.blog/static/js/translations.js","fqdn":"ryujinxcanary.blog","domain":"ryujinxcanary.blog","tld":"blog"},"ip":{"addr":"104.21.64.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ryujinxcanary.blog/ryubing-canary/","date":"2026-07-07T16:54:21.426Z","timestamp":1783443261426,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ryujinxcanary.blog","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 May 2026 10:32:06 GMT","end":"Mon, 17 Aug 2026 11:31:58 GMT"},"fingerprint":{"sha1":"95:B2:07:5C:66:E2:C7:0B:93:3A:6E:73:4C:F1:24:09:A7:A4:2E:2B","sha256":"DF:1B:63:82:7A:D2:AA:C7:5B:1E:A9:FA:2A:D1:41:23:87:11:AF:FE:A7:94:DB:95:A8:C3:18:86:6A:A6:E4:31"}}},"request":{"raw":"GET /static/js/translations.js HTTP/1.1\r\nHost: ryujinxcanary.blog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ryujinxcanary.blog/ryubing-canary/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p9UCPwsfBYuhp7k0WV0eAQXQG3ZCXSTA0ziK%2F9e1pSAV4NOaPgq5EX6HzS8rIITu5zFk6lNmgWgnWp6n%2Bw44RfrfREeDNN0yBLRjE4NgZ94QE8WInq0UxbysPyS9xdWtRNQI0Lw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"c7825daa48ed304b81a58b7fd67c321f\"\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Tue, 07 Jul 2026 16:54:21 GMT\r\ncf-ray: a1785edfeba656a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7649,"size_decoded":3118,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"479a32ff5c77073f095350ca71228e82","sha1":"b399115f6f2f25d20b6f08ff4eabbc1ec238af09","sha256":"70c325199c9188f92a9488713d805371e424b2b9101587091c55120387e394f5","sha512":"3677768ba5ac42f0ce445f1eafa817f12211091f76716fca8fb32f5fb674f631d0213988536e02a5fb1363f1f3b30641e24ffa768922ed60f2617e0c0c214e31","ssdeep":"192:sQvOWL/3jSbs4CMzpCTat4pt00i1W9/bYA/yANCWiI7jOet:lgj8TLr/hOm","tlshash":"e7f12dfebaa1495d4d923112529e2305a05500a34c24bc3cbe6d974cff6c88ed8f8af3","first_seen":"2026-06-15T20:00:41.270497Z","last_seen":"2026-07-07T16:54:47.438115Z","times_seen":3,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"immigrationacre.com/24/a9/28/24a92801f0d1813b0190a08ef670866d.js","fqdn":"immigrationacre.com","domain":"immigrationacre.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ryujinxcanary.blog/ryubing-canary/","date":"2026-07-07T16:54:21.429Z","timestamp":1783443261429,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"immigrationacre.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 21:34:58 GMT","end":"Thu, 20 Aug 2026 21:34:57 GMT"},"fingerprint":{"sha1":"F6:CA:1D:D1:D2:AF:5D:21:CA:9A:9A:46:2E:B4:CF:2B:1C:50:99:17","sha256":"8D:F1:15:AA:10:A5:32:87:6C:8D:72:92:AA:8A:35:5F:02:76:A5:24:0F:60:6E:79:1B:F6:93:DB:AD:9B:0F:EB"}}},"request":{"raw":"GET /24/a9/28/24a92801f0d1813b0190a08ef670866d.js HTTP/1.1\r\nHost: immigrationacre.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ryujinxcanary.blog/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Tue, 07 Jul 2026 16:54:21 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\naccept-ch: X-Device-User-Agent,X-UCBrowser-Device-UA,User-Agent,Sec-CH-UA-Platform-Version,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Platform,Sec-CH-UA-Model,X-OperaMini-Phone-UA,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Device-Stock-UA\r\naccess-control-allow-origin: *\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\nx-envoy-upstream-service-time: 6\r\nHost: immigrationacre.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 4dd3ee68e6c157810c732f9d139bcf68\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":93425,"size_decoded":32921,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"ba36395ce5b0776917bb55fb16f6b517","sha1":"a7a6b267f1f012f602ab7ad4620ab811f6dc9a93","sha256":"51f7e2b3c8a1dc0594868ef6ea79597975bdf2c45a70d781962ef9078f42443c","sha512":"f1f947fb50515c3ad2ea7cc499f6a26d3169e5fe6d151b8d162429820ebf3d37b054837d2a90c6039f4a88bb1bf5931568a3115f8a217033fa5df7696adbaa27","ssdeep":"1536:Z+cTczilRothjlroOtZEpqziTJydEAwUySeJkBeBdMNAZwayiWEND8:V3otDXGEEcmjRW29yJ","tlshash":"c093d9897f91b46f435730b726af943ff16dac417088f444d202f9e85dbab1ae532a24","first_seen":"2026-07-07T16:54:47.439106Z","last_seen":"2026-07-07T16:54:47.439106Z","times_seen":1,"resource_available":true,"data":null}},"time_used":611,"timings":{"blocked":-1,"dns":34,"connect":92,"send":0,"wait":105,"receive":94,"ssl":286},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"immigrationacre.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"immigrationacre.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portalfluently.com/sfp.js","fqdn":"portalfluently.com","domain":"portalfluently.com","tld":"com"},"ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ryujinxcanary.blog/ryubing-canary/","date":"2026-07-07T16:54:22.120Z","timestamp":1783443262120,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"portalfluently.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Jun 2026 10:51:11 GMT","end":"Wed, 16 Sep 2026 10:51:10 GMT"},"fingerprint":{"sha1":"4C:59:13:2E:71:EC:2C:13:DB:DC:E0:9C:09:5F:B6:92:AE:E0:AE:1B","sha256":"7B:33:44:1A:37:E0:26:00:C9:1A:0C:93:61:FF:49:14:7B:7F:82:27:76:99:C7:FE:74:D6:43:5A:20:70:42:F4"}}},"request":{"raw":"GET /sfp.js HTTP/1.1\r\nHost: portalfluently.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ryujinxcanary.blog/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Tue, 07 Jul 2026 16:54:22 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nContent-Encoding: zstd\r\nVary: Accept-Encoding\r\nHost: portalfluently.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: a77fbcdbdf99b19218b07a66c871d162\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":85379,"size_decoded":31055,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-07-07T19:01:38.48845Z","times_seen":20494,"resource_available":true,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":95,"connect":18,"send":0,"wait":35,"receive":18,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoologyfibre.com/1e/e3/36/1ee3363d3f6736b5616821dca2afa5c7.js","fqdn":"zoologyfibre.com","domain":"zoologyfibre.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ryujinxcanary.blog/ryubing-canary/","date":"2026-07-07T16:54:22.138Z","timestamp":1783443262138,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"zoologyfibre.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 03:57:55 GMT","end":"Fri, 25 Sep 2026 03:57:54 GMT"},"fingerprint":{"sha1":"21:E1:0C:F0:3C:47:B6:51:43:59:A6:9C:7F:45:F3:83:AF:8E:E8:1C","sha256":"8C:62:F5:05:48:06:52:25:19:4D:0F:3D:B5:18:63:0E:57:03:24:EE:E2:B9:FB:E5:24:00:E5:7B:9C:AE:94:CB"}}},"request":{"raw":"GET /1e/e3/36/1ee3363d3f6736b5616821dca2afa5c7.js HTTP/1.1\r\nHost: zoologyfibre.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ryujinxcanary.blog/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Tue, 07 Jul 2026 16:54:22 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\naccept-ch: Device-Stock-UA,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA,User-Agent,Sec-CH-UA-Platform-Version,Sec-CH-UA,Sec-CH-UA-Platform,Sec-CH-UA-Model\r\naccess-control-allow-origin: *\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\nx-envoy-upstream-service-time: 1\r\nHost: zoologyfibre.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 533d37071ee7e53b6013348254cf734e\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5126,"size_decoded":3348,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5126), with no line terminators","md5":"9454b75035bf1e7fbd8bc933d239763a","sha1":"05ac0f19656d2fd1882cb0ec3bc347cf2dbec25e","sha256":"261c1fc4c2d7eadeabb8edc511b4d3681cad5a27060128b4c3a6690484ccaffd","sha512":"8ec190336b0024f3fe41752f3d850ecb0e31157b2b2a80f9cabf627f95f05e0211f367f259bf6318c64243943faad6d9ee583b3b9893bf4463e0faa8c18272c8","ssdeep":"96:wa7EWyNaHUHRLQjFAqZPXU5ZLbCqEKNbuCKwMBPP2z6vgdgM:KWOSUoaXjxqiY+0gdL","tlshash":"11b144dd3f80b0d00ba620b36b1f251ab0694c21e55fd498f50b91a03e6da1fda67fb5","first_seen":"2026-05-04T13:56:21.08631Z","last_seen":"2026-07-07T18:29:07.552136Z","times_seen":2874,"resource_available":true,"data":null}},"time_used":546,"timings":{"blocked":0,"dns":79,"connect":91,"send":0,"wait":95,"receive":0,"ssl":281},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.show-sb.com/sb/interstitial/sweep/default/system/5/index.html","fqdn":"cdn.show-sb.com","domain":"show-sb.com","tld":"com"},"ip":{"addr":"172.67.170.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ryujinxcanary.blog/ryubing-canary/","date":"2026-07-07T16:54:23.165Z","timestamp":1783443263165,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"show-sb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Jun 2026 04:04:12 GMT","end":"Mon, 31 Aug 2026 05:00:57 GMT"},"fingerprint":{"sha1":"28:6F:05:E4:28:4E:C4:2B:34:02:67:C3:E1:F5:19:EB:20:E8:C4:A7","sha256":"0B:AF:1B:3F:5D:C6:E2:7F:31:2A:ED:02:73:11:9E:2B:13:55:A8:F3:39:07:61:B5:D6:1E:58:D1:59:D9:22:99"}}},"request":{"raw":"GET /sb/interstitial/sweep/default/system/5/index.html HTTP/1.1\r\nHost: cdn.show-sb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ryujinxcanary.blog/\r\nOrigin: https://ryujinxcanary.blog\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 07 Jul 2026 16:54:26 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Wed, 13 Aug 2025 15:35:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z%2B4%2BvDAIUDOmNSeBNyLOllda4UA2r6dsHThIOC2gRbwxvpB%2BMe47z%2FmRFPvyDrr8W3mazsZnic9iTy%2BEQkjb8bKx%2BkRRaZlsjIZv8lG6Yd%2BSb9wWTek9K9r0Trz07AdeB3s%3D\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1785efe6da7b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":1938,"size_decoded":1371,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"628789193c488394c8e4f92e1fe71de0","sha1":"51fe73295b445effa058303f1eae0b695bb1309d","sha256":"725e08d8b00c07ffefd0b5b8eec82f8a6a2523ef389117a20dd99b137f4ee40a","sha512":"f50baf9d744fcc160e1b265e2ab9905467452283b260c43ea820183f7b97094ada84608dcc5ce57e5ad0e8d8b2f2e549ef401f538dca43447a67cfb3ae3f543e","ssdeep":"","tlshash":"1041095129f8c93620d2a0853b712f2bade1a947ca5a650173fc0ad0cfdbdc8d9ab507","first_seen":"2025-11-19T10:58:40.124065Z","last_seen":"2026-07-07T17:47:48.623908Z","times_seen":350,"resource_available":false,"data":null}},"time_used":3295,"timings":{"blocked":-1,"dns":4,"connect":2,"send":0,"wait":156,"receive":0,"ssl":3133},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zoologyfibre.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.show-sb.com%2Fsb%2Finterstitial%2Fsweep%2Fdefault%2Fsystem%2F5%2Findex.html\u0026l=1938\u0026fd=3298","fqdn":"zoologyfibre.com","domain":"zoologyfibre.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ryujinxcanary.blog/ryubing-canary/","date":"2026-07-07T16:54:26.501Z","timestamp":1783443266501,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"zoologyfibre.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 03:57:55 GMT","end":"Fri, 25 Sep 2026 03:57:54 GMT"},"fingerprint":{"sha1":"21:E1:0C:F0:3C:47:B6:51:43:59:A6:9C:7F:45:F3:83:AF:8E:E8:1C","sha256":"8C:62:F5:05:48:06:52:25:19:4D:0F:3D:B5:18:63:0E:57:03:24:EE:E2:B9:FB:E5:24:00:E5:7B:9C:AE:94:CB"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.show-sb.com%2Fsb%2Finterstitial%2Fsweep%2Fdefault%2Fsystem%2F5%2Findex.html\u0026l=1938\u0026fd=3298 HTTP/1.1\r\nHost: zoologyfibre.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ryujinxcanary.blog/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=98702624-af77-47c8-add2-c06609276145:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl29508556=1; slec24a92801f0d1813b0190a08ef670866d=[6517248]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Tue, 07 Jul 2026 16:54:26 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: X-OperaMini-Phone-UA, User-Agent, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Mobile, Device-Stock-UA, X-UCBrowser-Device-UA, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-PlatformUser-Agent, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, X-Device-User-Agent\r\nHost: zoologyfibre.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":798,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-07T19:07:11.271514Z","times_seen":17067357,"resource_available":true,"data":null}},"time_used":423,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":423,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.redgarto.com/sb/interstitial/sweep/default/system/5/img/icon.png","fqdn":"cdn.redgarto.com","domain":"redgarto.com","tld":"com"},"ip":{"addr":"104.21.80.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ryujinxcanary.blog/ryubing-canary/","date":"2026-07-07T16:54:26.609Z","timestamp":1783443266609,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redgarto.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 12:56:57 GMT","end":"Mon, 07 Sep 2026 13:56:51 GMT"},"fingerprint":{"sha1":"D8:30:A0:FC:44:CC:CB:CC:41:34:6E:58:73:90:EB:8D:41:F2:56:BA","sha256":"85:56:6E:35:A5:13:48:28:ED:D2:1D:3C:B6:6B:C0:81:82:08:BB:68:8A:C5:D5:9E:CA:8A:77:EE:DD:4B:78:A4"}}},"request":{"raw":"GET /sb/interstitial/sweep/default/system/5/img/icon.png HTTP/1.1\r\nHost: cdn.redgarto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 07 Jul 2026 16:54:26 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 Aug 2025 15:35:59 GMT\r\npriority: u=5,i\r\netag: \"689cb0df-27f8\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\naccept-ranges: bytes\r\nage: 2348189\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i0DVBffa7hAIhHjfO3iA1TDfJRjcyI8FU02sxDf8wYuok6%2FPSvskTMNln3N0U5hRy%2B%2By6K7VQ%2Bi1FyKqgLWfvPf0EwEI9ozV%2FzD4Ym3vU6ETfdlyorxmIcRfdypmp9Bj%2FBDL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1785f005850783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10232\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10232,"size_decoded":11059,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"24a5e81b34aa002d3a1705dabb65302c","sha1":"e35c0129b0a258980be593673e958ddd3ea8d75a","sha256":"530f09c4dc9a4e8a50f8e063d5dd3fb7cefdea3ce1309ec1bdbb7489dda4f75b","sha512":"39843774c29524ddbb61dfabbc39584deaaa1a4363628260954af959eb896077a11a923049955b5ebce1fb19db35e688ad2640c70d8fa525ca4f4b32ac500819","ssdeep":"192:nDp+YjB32WWe/RojZKQsjh8nBV0KPh0xweeqgFWzYX/3Fcp8NkwvAJVOJpk:nDcYF32WWe/RooQZnBZ5GzgF+CFcp8NI","tlshash":"9922b0a2f8bd169ffc121aa40141f6b086389957950d48fce5c5f6d77842c1b3b7c368","first_seen":"2025-11-14T18:19:02.043615Z","last_seen":"2026-07-07T17:47:48.624531Z","times_seen":717,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.2/dist/js/bootstrap.bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ryujinxcanary.blog/ryubing-canary/","date":"2026-07-07T16:54:21.424Z","timestamp":1783443261424,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/bootstrap@5.3.2/dist/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ryujinxcanary.blog/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 24440\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 5.3.2\r\nx-jsd-version-type: version\r\netag: W/\"13b17-9/0PPchLLPk7+B6DJQWmc/NU4KM\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Tue, 07 Jul 2026 16:54:21 GMT\r\nage: 534762\r\nx-served-by: cache-fra-etou8220020-FRA, cache-bma-essb1270076-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":80663,"size_decoded":25214,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"6baf57f25796c332144ed58a2a0cd9ee","sha1":"f7fd0f3dc84b2cf93bf81e832505a673f354e0a3","sha256":"82f64f62bb03c1bc1824b0f9c9e05f70dba33e146818e63cdf5c306c8cf3dedd","sha512":"5ff6240d9ca34dfe30c9cd95cb5e981823c7c0063cad9258f8f3a0a24663401da684844524272410673a6325fd78db0f7e7d0fcd3844b8db3eb9aa2613908ee8","ssdeep":"1536:Qmw0iELO+TBR2t472RirWyKsVfK5GEfy3YJtCRv/45wZbqbXZTbYWU178:VwXza3YCl45wZODZTbYR8","tlshash":"cc73c5593244b4730ade85b68037430bf2265998b24b812cb57cadde2a7dcc67277f78","first_seen":"2023-09-18T01:21:14Z","last_seen":"2026-07-07T18:12:56.843216Z","times_seen":20209,"resource_available":true,"data":null}},"time_used":303,"timings":{"blocked":-1,"dns":39,"connect":9,"send":0,"wait":10,"receive":2,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flushpersist.com/pxf.gif?uuid=98702624-af77-47c8-add2-c06609276145\u0026eb=3740c30ae92858b5823bb74ffb1738ed\u0026te=06123e11b9786e0a58a68369708222a5\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.1055\u0026b_frame=0\u0026pk=24a92801f0d1813b0190a08ef670866d\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=16","fqdn":"flushpersist.com","domain":"flushpersist.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ryujinxcanary.blog/ryubing-canary/","date":"2026-07-07T16:54:22.879Z","timestamp":1783443262879,"http_version":"HTTP/1.1","security_state":"","security_info":null,"request":{"raw":"GET /pxf.gif?uuid=98702624-af77-47c8-add2-c06609276145\u0026eb=3740c30ae92858b5823bb74ffb1738ed\u0026te=06123e11b9786e0a58a68369708222a5\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.1055\u0026b_frame=0\u0026pk=24a92801f0d1813b0190a08ef670866d\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=16 HTTP/1.1\r\nHost: flushpersist.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ryujinxcanary.blog/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Tue, 07 Jul 2026 16:54:23 GMT\r\nContent-Type: image/gif\r\nContent-Length: 1\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\nx-envoy-upstream-service-time: 2\r\nHost: flushpersist.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 8a02837bd4f6c8030a632fe781394a6f\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-07T19:07:11.271514Z","times_seen":17067357,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.redgarto.com/sb/interstitial/sweep/default/system/5/css/style.css","fqdn":"cdn.redgarto.com","domain":"redgarto.com","tld":"com"},"ip":{"addr":"104.21.80.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ryujinxcanary.blog/ryubing-canary/","date":"2026-07-07T16:54:26.496Z","timestamp":1783443266496,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redgarto.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 12:56:57 GMT","end":"Mon, 07 Sep 2026 13:56:51 GMT"},"fingerprint":{"sha1":"D8:30:A0:FC:44:CC:CB:CC:41:34:6E:58:73:90:EB:8D:41:F2:56:BA","sha256":"85:56:6E:35:A5:13:48:28:ED:D2:1D:3C:B6:6B:C0:81:82:08:BB:68:8A:C5:D5:9E:CA:8A:77:EE:DD:4B:78:A4"}}},"request":{"raw":"GET /sb/interstitial/sweep/default/system/5/css/style.css HTTP/1.1\r\nHost: cdn.redgarto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ryujinxcanary.blog/\r\nOrigin: https://ryujinxcanary.blog\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 07 Jul 2026 16:54:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 13 Aug 2025 15:35:51 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"689cb0d7-151f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0KvC4vMMGfO1u2eDsrVznkl7k0pCFI2PAWpSYYJveZgOrCYOpXTkxrE4kfXpHMv2PngLx6jFHjQMo2aRJzFLUkccLTvCnWKnsaf5a1pJpG8ZGdmygg37cS%2FiKXJMCR64KBod\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1785effc813783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5407,"size_decoded":2241,"mime_type":"text/css","magic":"ASCII text","md5":"b6887befa496dfa81584ad2670c341af","sha1":"f4bd270dfea6c907bd5806974c327395d5b4b671","sha256":"04279f1bdd809e3b74ed30a8115e05bb2d27f5a85db6ea6311b964da3ea6ceb5","sha512":"7d91a488dc9c0e191d213df0e90691e056a997ff2a95d736cd51853b26261c0f6aa7de70859e148cd57a9557afbdd818bbfa796bdbeb30458fa6cb95d883d02a","ssdeep":"96:iTMXsWPj7wTMXsWoRR0zkHh7ignmJxMX5pqvdsF2HT5T9yJVWw:IMXKMX0YzkHhEJxMX5pqvdqMT5gKw","tlshash":"94b1ef951b771904b50ed4ab3f25675726244087ae1bc9383fc177488fca2ac92e3bce","first_seen":"2025-11-19T10:58:40.152351Z","last_seen":"2026-07-07T17:47:48.633103Z","times_seen":332,"resource_available":false,"data":null}},"time_used":485,"timings":{"blocked":29,"dns":0,"connect":0,"send":0,"wait":456,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoologyfibre.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.redgarto.com%2Fsb%2Finterstitial%2Fsweep%2Fdefault%2Fsystem%2F5%2Fjs%2Fscript.js\u0026l=7970\u0026fd=480","fqdn":"zoologyfibre.com","domain":"zoologyfibre.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ryujinxcanary.blog/ryubing-canary/","date":"2026-07-07T16:54:27.147Z","timestamp":1783443267147,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"zoologyfibre.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 03:57:55 GMT","end":"Fri, 25 Sep 2026 03:57:54 GMT"},"fingerprint":{"sha1":"21:E1:0C:F0:3C:47:B6:51:43:59:A6:9C:7F:45:F3:83:AF:8E:E8:1C","sha256":"8C:62:F5:05:48:06:52:25:19:4D:0F:3D:B5:18:63:0E:57:03:24:EE:E2:B9:FB:E5:24:00:E5:7B:9C:AE:94:CB"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.redgarto.com%2Fsb%2Finterstitial%2Fsweep%2Fdefault%2Fsystem%2F5%2Fjs%2Fscript.js\u0026l=7970\u0026fd=480 HTTP/1.1\r\nHost: zoologyfibre.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ryujinxcanary.blog/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=98702624-af77-47c8-add2-c06609276145:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl29508556=1; slec24a92801f0d1813b0190a08ef670866d=[6517248]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Tue, 07 Jul 2026 16:54:27 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Mobile, X-Device-User-Agent, X-UCBrowser-Device-UA, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-PlatformUser-Agent, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Device-Stock-UA, X-OperaMini-Phone-UA, User-Agent\r\nHost: zoologyfibre.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":798,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-07T19:07:11.271514Z","times_seen":17067357,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoologyfibre.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.redgarto.com%2Fsb%2Finterstitial%2Fsweep%2Fdefault%2Fsystem%2F5%2Fcss%2Fanimate.css\u0026l=78693\u0026fd=517","fqdn":"zoologyfibre.com","domain":"zoologyfibre.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ryujinxcanary.blog/ryubing-canary/","date":"2026-07-07T16:54:27.020Z","timestamp":1783443267020,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"zoologyfibre.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 03:57:55 GMT","end":"Fri, 25 Sep 2026 03:57:54 GMT"},"fingerprint":{"sha1":"21:E1:0C:F0:3C:47:B6:51:43:59:A6:9C:7F:45:F3:83:AF:8E:E8:1C","sha256":"8C:62:F5:05:48:06:52:25:19:4D:0F:3D:B5:18:63:0E:57:03:24:EE:E2:B9:FB:E5:24:00:E5:7B:9C:AE:94:CB"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.redgarto.com%2Fsb%2Finterstitial%2Fsweep%2Fdefault%2Fsystem%2F5%2Fcss%2Fanimate.css\u0026l=78693\u0026fd=517 HTTP/1.1\r\nHost: zoologyfibre.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ryujinxcanary.blog/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=98702624-af77-47c8-add2-c06609276145:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl29508556=1; slec24a92801f0d1813b0190a08ef670866d=[6517248]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Tue, 07 Jul 2026 16:54:27 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Mobile, X-Device-User-Agent, X-UCBrowser-Device-UA, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-PlatformUser-Agent, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Device-Stock-UA, X-OperaMini-Phone-UA, User-Agent\r\nHost: zoologyfibre.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":798,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-07T19:07:11.271514Z","times_seen":17067357,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ryujinxcanary.blog/static/favicon.ico","fqdn":"ryujinxcanary.blog","domain":"ryujinxcanary.blog","tld":"blog"},"ip":{"addr":"104.21.64.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ryujinxcanary.blog/ryubing-canary/","date":"2026-07-07T16:54:22.450Z","timestamp":1783443262450,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ryujinxcanary.blog","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 May 2026 10:32:06 GMT","end":"Mon, 17 Aug 2026 11:31:58 GMT"},"fingerprint":{"sha1":"95:B2:07:5C:66:E2:C7:0B:93:3A:6E:73:4C:F1:24:09:A7:A4:2E:2B","sha256":"DF:1B:63:82:7A:D2:AA:C7:5B:1E:A9:FA:2A:D1:41:23:87:11:AF:FE:A7:94:DB:95:A8:C3:18:86:6A:A6:E4:31"}}},"request":{"raw":"GET /static/favicon.ico HTTP/1.1\r\nHost: ryujinxcanary.blog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ryujinxcanary.blog/ryubing-canary/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: hu8935j4i9fq3hpuj9q39=true; s9ifs0idfjlwfie32dekl=0; dom3ic8zudi28v8lr6fgphwffqoz0j6c=98702624-af77-47c8-add2-c06609276145%3A1%3A1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d5omJIaGwXvabZEig%2FbhjfjYis7VqjAgBUpMu8VQ74FHQNlQPspqgSLYe7r0raxkP0iAf5mvAfd3KSfD6qS%2F1Um%2BSSo7ZlcIfClds2wVdA%2FDYtpXuZKo3gjLg%2FHFyRXnKZLFDj8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/vnd.microsoft.icon\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"bc7301451773c0dfea3cb04ca9dc8204\"\r\ncontent-encoding: br\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Tue, 07 Jul 2026 16:54:22 GMT\r\ncf-ray: a1785ee65ccd56a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7553,"size_decoded":8338,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 4 icons, 16x16 with PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, 32x32 with \n- PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced, 32 bits/pixel","md5":"e998a93dedfdb2cf344af40d7f9d4b09","sha1":"9df0a3ce65da2cd7020ba5b7b00e90497b3d3781","sha256":"420e8531b4712b36f00fe9f2f21c83d28020139736ed68d0807f279a8da833e7","sha512":"20ce20fe38d769c92fecdff4b211c784a0675162fe6e8844d8e3a812dce31fa792693a942f5b00bf8d85fd4d7b1c272d02a8c5fbb0f9095d58e1fe91328fbb29","ssdeep":"192:uhXKAQ0SeMGi52iHt2M/Ddp7fsd+CvcFTu3RgT:uFa0SD53HtDf7a+jTMRW","tlshash":"7ff1bfc6abd8a941e98cc3794e505017dce57e0019a1830fd39ea0e602bf918fd8495f","first_seen":"2026-06-15T20:00:41.267387Z","last_seen":"2026-07-07T16:54:47.443889Z","times_seen":2,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoologyfibre.com/ren.gif?sid=H4sIAAAAAAAC_1xSv28cRRSePYcKCcTPDrRFCpC48-zvXVJYCr8qO4gEBQkJaXZm5xh7b2ezs3t3vsohiNpAQ8f6OzvuIkCpKBA6U0QyQsp1V8QNfwIStOjOJwXxpHnvzXxTfO9731dHzQXpoWGLD7f1ROU52wx61H7jtiqEHhl755bt0B69Zt9WRehfs8fLVA3fdjy_R9-0P8j4nt50qUOpQx37fVVlUo83VyhU-cBJgl7o9xwn7jmBi3H1_xfTWDDMghhekBehxPz5P-WnUHyGYvDDu5nZq3X51nuDJme1rjAUpx8Xe4UeFRg8bWVlQRan69_QZk7Idx3o4nQ9BfTweDkFUjUnnVefIC1O11SRDk8u2aY5sgKpeBaj4QxZPoNiM3B9D0o8JgAX2LmBYnB_R1cjtn-JsiU6J1f-_gtqNCdXnryMYvDgeq7G9k2dN7XShcFYtlDjGVR_hrI5Qz3pQI3OwOsvoMQfhHZeRzE42WZNxaDE4moSR9QNXb_LZBR1_YjHXSaE2-U0DGniRqHjByuNlJyBGQvN8igLjeygKTsYiIXNklimSeizJJORFNSJOAs8L4n8wJUhD9Dwu1DiELw6QFkdYE8dwggLpiYYivZE5MY17X2RmyZ11tVdV6-d6rp_xE503c8KAlYdohLtsSrvmHvg9cZ0Io2Y6mViad1OWSraqRI1QXVncZU6ifRETLuxcINuFMV-N0482RXUj4I4TDwaecfS1E17VF6QF5YaW7N3fsdetrBdnyVuTB1JhRM7XkqdhDIaZzKMaByGAka1UKazEmai5uSTR_-gVHPyzLcaKTuDyc_A1QZY8xrYqAX7vMWk-Knab3ZVMeasYNV-L811H0K3KOsrqPeto_yCvDT96Nb1X1cL5xVBxs-3zrxVgFctyqrFrvqNoJ_f_fFGWauBmrClA27WrM42wNTjjW_A1Zy88tnFyorxw-fAywOY8nzr5-9_GT56mMBogrS0kCuCPDsn6wBLW5j_3NOn_ZH5Ev3KQppb0zSvrOM0r_KvL0katbCp8DOHJyyIZBYEQRr4LpcypZErPc-NE9Rmvru9ufVvAAAA__8D9YtXDAQAAA==","fqdn":"zoologyfibre.com","domain":"zoologyfibre.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ryujinxcanary.blog/ryubing-canary/","date":"2026-07-07T16:54:23.166Z","timestamp":1783443263166,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"zoologyfibre.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 03:57:55 GMT","end":"Fri, 25 Sep 2026 03:57:54 GMT"},"fingerprint":{"sha1":"21:E1:0C:F0:3C:47:B6:51:43:59:A6:9C:7F:45:F3:83:AF:8E:E8:1C","sha256":"8C:62:F5:05:48:06:52:25:19:4D:0F:3D:B5:18:63:0E:57:03:24:EE:E2:B9:FB:E5:24:00:E5:7B:9C:AE:94:CB"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_1xSv28cRRSePYcKCcTPDrRFCpC48-zvXVJYCr8qO4gEBQkJaXZm5xh7b2ezs3t3vsohiNpAQ8f6OzvuIkCpKBA6U0QyQsp1V8QNfwIStOjOJwXxpHnvzXxTfO9731dHzQXpoWGLD7f1ROU52wx61H7jtiqEHhl755bt0B69Zt9WRehfs8fLVA3fdjy_R9-0P8j4nt50qUOpQx37fVVlUo83VyhU-cBJgl7o9xwn7jmBi3H1_xfTWDDMghhekBehxPz5P-WnUHyGYvDDu5nZq3X51nuDJme1rjAUpx8Xe4UeFRg8bWVlQRan69_QZk7Idx3o4nQ9BfTweDkFUjUnnVefIC1O11SRDk8u2aY5sgKpeBaj4QxZPoNiM3B9D0o8JgAX2LmBYnB_R1cjtn-JsiU6J1f-_gtqNCdXnryMYvDgeq7G9k2dN7XShcFYtlDjGVR_hrI5Qz3pQI3OwOsvoMQfhHZeRzE42WZNxaDE4moSR9QNXb_LZBR1_YjHXSaE2-U0DGniRqHjByuNlJyBGQvN8igLjeygKTsYiIXNklimSeizJJORFNSJOAs8L4n8wJUhD9Dwu1DiELw6QFkdYE8dwggLpiYYivZE5MY17X2RmyZ11tVdV6-d6rp_xE503c8KAlYdohLtsSrvmHvg9cZ0Io2Y6mViad1OWSraqRI1QXVncZU6ifRETLuxcINuFMV-N0482RXUj4I4TDwaecfS1E17VF6QF5YaW7N3fsdetrBdnyVuTB1JhRM7XkqdhDIaZzKMaByGAka1UKazEmai5uSTR_-gVHPyzLcaKTuDyc_A1QZY8xrYqAX7vMWk-Knab3ZVMeasYNV-L811H0K3KOsrqPeto_yCvDT96Nb1X1cL5xVBxs-3zrxVgFctyqrFrvqNoJ_f_fFGWauBmrClA27WrM42wNTjjW_A1Zy88tnFyorxw-fAywOY8nzr5-9_GT56mMBogrS0kCuCPDsn6wBLW5j_3NOn_ZH5Ev3KQppb0zSvrOM0r_KvL0katbCp8DOHJyyIZBYEQRr4LpcypZErPc-NE9Rmvru9ufVvAAAA__8D9YtXDAQAAA== HTTP/1.1\r\nHost: zoologyfibre.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ryujinxcanary.blog/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=98702624-af77-47c8-add2-c06609276145:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl29508556=1; slec24a92801f0d1813b0190a08ef670866d=[6517248]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Tue, 07 Jul 2026 16:54:23 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccept-ch: Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Device-Stock-UA,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Platform,Sec-CH-UA-Mobile,X-Device-User-Agent,User-Agent,Sec-CH-UA-Platform-Version\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nvary: Origin,Accept-Encoding\r\nx-envoy-upstream-service-time: 5\r\nHost: zoologyfibre.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 3f14b9a889dfa6f591b69179a0e00800\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-07T19:07:11.271514Z","times_seen":17067357,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoologyfibre.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.redgarto.com%2Fsb%2Finterstitial%2Fsweep%2Fdefault%2Fsystem%2F5%2Fcss%2Fstyle.css\u0026l=5407\u0026fd=490","fqdn":"zoologyfibre.com","domain":"zoologyfibre.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ryujinxcanary.blog/ryubing-canary/","date":"2026-07-07T16:54:26.988Z","timestamp":1783443266988,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"zoologyfibre.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 03:57:55 GMT","end":"Fri, 25 Sep 2026 03:57:54 GMT"},"fingerprint":{"sha1":"21:E1:0C:F0:3C:47:B6:51:43:59:A6:9C:7F:45:F3:83:AF:8E:E8:1C","sha256":"8C:62:F5:05:48:06:52:25:19:4D:0F:3D:B5:18:63:0E:57:03:24:EE:E2:B9:FB:E5:24:00:E5:7B:9C:AE:94:CB"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.redgarto.com%2Fsb%2Finterstitial%2Fsweep%2Fdefault%2Fsystem%2F5%2Fcss%2Fstyle.css\u0026l=5407\u0026fd=490 HTTP/1.1\r\nHost: zoologyfibre.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ryujinxcanary.blog/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=98702624-af77-47c8-add2-c06609276145:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl29508556=1; slec24a92801f0d1813b0190a08ef670866d=[6517248]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Tue, 07 Jul 2026 16:54:27 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: X-OperaMini-Phone-UA, User-Agent, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Mobile, Device-Stock-UA, X-UCBrowser-Device-UA, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-PlatformUser-Agent, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, X-Device-User-Agent\r\nHost: zoologyfibre.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":798,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-07T19:07:11.271514Z","times_seen":17067357,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoologyfibre.com/impr.gif?sid=H4sIAAAAAAAC_1xSv28cRRSePYcKCcTPDrRFCpC48-zvXVJYCr8qO4gEBQkJaXZm9xh7b2czs3t3vsohiNpAQ8f6OzvuIkCpKBA6U0QyQsp1V8QNfwIStOjOJwXxpHnvzXxTfO9731dHzQXpoWGLD7fVRBYF2wx61H7jtiyFGhl755bt0B69Zt-WZehfs8fLpIdvO57fo2_aH2R8T2261KHUoY79vtRZrsabKxSyeuAkQS_0e44T95zAxVj__8U0FgyzIIYX5EVIMX_-z_xTSD5DOfjh3czs1ap6671BU7BaaQzF6cflXqlGJQZP21xbyMvT9W8oMyfkuw5UebqeAmp4vJwCqZyTzqtPkJana6pIhyeXbNMCWYlUPIvRcIasmEGyGbi6BykeE4AL7NxAObi_o_SI7V-ibInOyZW__4IczcmVJy-jHDy4XsixfVMVTS1VaTDOW8jxDLI_Q9WcoZ50IEdn4PUXkOIPQjuvoxycbLNGM0ixuJrEEXVD1--yPIq6fsTjLhPC7XIahjRxo9Dxg5VGMp-BGQvN8kgLTd5BU3UwEAubJXGeJqHPkiyPckGdiLPA85LID9w85AEafhdSHILrA1T6AHvyEEZYMDXBULQnojCuae-LwjSps67uunrtVNX9I3ai6n5WEjB9CC3aY1ndMffA643pJDdiqpaJpXU7Zalop1LUBPrO4ip1ktwTMe3Gwg26URT73Tjx8q6gfhTEYeLRyDvOTd20R9UFeWGpsTV753fsZQvb9VnixtTJqXBix0upk1BG4ywPIxqHoYCRLaTprISZyDn55NE_qOScPPOtQsrOYIozcLkB1rwGNmrBPm8xKX_S-82uLMeclUzv99JC9SFUi6q-gnrfOiouyEvTj25d_3W1cK4JMn6-deatAly3qHSLXfkbQb-4--ONqpYDOWFLB9ysWZ1tgMnHG9-Ayzl55bOLlRXjh8-BVwcw1fnWz9__Mnz0MIFRBGlloZAERXZO1gGWtjD_uadP-yPzJfraQlpY07TQ1nFa6OLrS5JGLuzYdSnljpuIJPATL86zwHeiKAscL8yoF6A2893tza1_AwAA___xLHCFDAQAAA==","fqdn":"zoologyfibre.com","domain":"zoologyfibre.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ryujinxcanary.blog/ryubing-canary/","date":"2026-07-07T16:54:27.503Z","timestamp":1783443267503,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"zoologyfibre.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 03:57:55 GMT","end":"Fri, 25 Sep 2026 03:57:54 GMT"},"fingerprint":{"sha1":"21:E1:0C:F0:3C:47:B6:51:43:59:A6:9C:7F:45:F3:83:AF:8E:E8:1C","sha256":"8C:62:F5:05:48:06:52:25:19:4D:0F:3D:B5:18:63:0E:57:03:24:EE:E2:B9:FB:E5:24:00:E5:7B:9C:AE:94:CB"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1xSv28cRRSePYcKCcTPDrRFCpC48-zvXVJYCr8qO4gEBQkJaXZm9xh7b2czs3t3vsohiNpAQ8f6OzvuIkCpKBA6U0QyQsp1V8QNfwIStOjOJwXxpHnvzXxTfO9731dHzQXpoWGLD7fVRBYF2wx61H7jtiyFGhl755bt0B69Zt-WZehfs8fLpIdvO57fo2_aH2R8T2261KHUoY79vtRZrsabKxSyeuAkQS_0e44T95zAxVj__8U0FgyzIIYX5EVIMX_-z_xTSD5DOfjh3czs1ap6671BU7BaaQzF6cflXqlGJQZP21xbyMvT9W8oMyfkuw5UebqeAmp4vJwCqZyTzqtPkJana6pIhyeXbNMCWYlUPIvRcIasmEGyGbi6BykeE4AL7NxAObi_o_SI7V-ibInOyZW__4IczcmVJy-jHDy4XsixfVMVTS1VaTDOW8jxDLI_Q9WcoZ50IEdn4PUXkOIPQjuvoxycbLNGM0ixuJrEEXVD1--yPIq6fsTjLhPC7XIahjRxo9Dxg5VGMp-BGQvN8kgLTd5BU3UwEAubJXGeJqHPkiyPckGdiLPA85LID9w85AEafhdSHILrA1T6AHvyEEZYMDXBULQnojCuae-LwjSps67uunrtVNX9I3ai6n5WEjB9CC3aY1ndMffA643pJDdiqpaJpXU7Zalop1LUBPrO4ip1ktwTMe3Gwg26URT73Tjx8q6gfhTEYeLRyDvOTd20R9UFeWGpsTV753fsZQvb9VnixtTJqXBix0upk1BG4ywPIxqHoYCRLaTprISZyDn55NE_qOScPPOtQsrOYIozcLkB1rwGNmrBPm8xKX_S-82uLMeclUzv99JC9SFUi6q-gnrfOiouyEvTj25d_3W1cK4JMn6-deatAly3qHSLXfkbQb-4--ONqpYDOWFLB9ysWZ1tgMnHG9-Ayzl55bOLlRXjh8-BVwcw1fnWz9__Mnz0MIFRBGlloZAERXZO1gGWtjD_uadP-yPzJfraQlpY07TQ1nFa6OLrS5JGLuzYdSnljpuIJPATL86zwHeiKAscL8yoF6A2893tza1_AwAA___xLHCFDAQAAA== HTTP/1.1\r\nHost: zoologyfibre.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ryujinxcanary.blog/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=98702624-af77-47c8-add2-c06609276145:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl29508556=1; slec24a92801f0d1813b0190a08ef670866d=[6517248]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Tue, 07 Jul 2026 16:54:27 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccept-ch: Sec-CH-UA-Platform-Version,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform,Sec-CH-UA-Mobile,Device-Stock-UA,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA,Sec-CH-UA,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Model,User-Agent\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nset-cookie: iprc_a+4fdd62dc11fe1059a7cd74f0bc75648e=914; Path=/; Expires=Fri, 31 Jul 2026 16:54:27 GMT; Secure; SameSite=None\niprc_a-914=1; Path=/; Expires=Fri, 31 Jul 2026 16:54:27 GMT; Secure; SameSite=None\niprc_l+636fcf38ec0a7b00d97e0dd0c764df33=6517248; Path=/; Expires=Wed, 08 Jul 2026 16:54:27 GMT; Secure; SameSite=None\niprc_l-6517248=1; Path=/; Expires=Wed, 08 Jul 2026 16:54:27 GMT; Secure; SameSite=None\r\nvary: Origin,Accept-Encoding\r\nx-envoy-upstream-service-time: 13\r\nHost: zoologyfibre.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: bb34982a70966794fad08225a694c0d7\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-07T19:07:11.271514Z","times_seen":17067357,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoologyfibre.com/pixel/sbs?c=1","fqdn":"zoologyfibre.com","domain":"zoologyfibre.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ryujinxcanary.blog/ryubing-canary/","date":"2026-07-07T16:54:27.506Z","timestamp":1783443267506,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"zoologyfibre.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 03:57:55 GMT","end":"Fri, 25 Sep 2026 03:57:54 GMT"},"fingerprint":{"sha1":"21:E1:0C:F0:3C:47:B6:51:43:59:A6:9C:7F:45:F3:83:AF:8E:E8:1C","sha256":"8C:62:F5:05:48:06:52:25:19:4D:0F:3D:B5:18:63:0E:57:03:24:EE:E2:B9:FB:E5:24:00:E5:7B:9C:AE:94:CB"}}},"request":{"raw":"GET /pixel/sbs?c=1 HTTP/1.1\r\nHost: zoologyfibre.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ryujinxcanary.blog/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=98702624-af77-47c8-add2-c06609276145:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl29508556=1; slec24a92801f0d1813b0190a08ef670866d=[6517248]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Tue, 07 Jul 2026 16:54:27 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: X-OperaMini-Phone-UA, User-Agent, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Mobile, Device-Stock-UA, X-UCBrowser-Device-UA, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-PlatformUser-Agent, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, X-Device-User-Agent\r\nHost: zoologyfibre.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":798,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-07T19:07:11.271514Z","times_seen":17067357,"resource_available":true,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ryujinxcanary.blog/ryubing-canary/","date":"2026-07-07T16:54:27.513Z","timestamp":1783443267513,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:41:01 GMT","end":"Mon, 07 Sep 2026 08:41:00 GMT"},"fingerprint":{"sha1":"01:31:A1:A6:4F:08:45:E1:F0:0B:CE:B1:B8:D8:61:D7:D1:70:ED:6F","sha256":"29:C5:5D:01:47:6E:72:F7:2C:CC:0B:96:BB:67:BA:39:CC:03:11:EB:7B:47:F5:3F:CC:DE:12:AC:68:07:A1:BA"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://ryujinxcanary.blog\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Jul 2026 10:17:38 GMT\r\nexpires: Fri, 02 Jul 2027 10:17:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 455809\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":43136,"size_decoded":43949,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-07-07T19:07:34.79482Z","times_seen":218184,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":4,"connect":30,"send":0,"wait":16,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:300,400,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ryujinxcanary.blog/ryubing-canary/","date":"2026-07-07T16:54:26.603Z","timestamp":1783443266603,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:41:02 GMT","end":"Mon, 07 Sep 2026 08:41:01 GMT"},"fingerprint":{"sha1":"FD:DA:E1:3E:1F:AC:E0:96:14:ED:37:58:30:0F:ED:9D:B4:5E:F1:EF","sha256":"7D:36:0C:A4:14:F6:05:8D:F4:E1:CD:BF:84:A7:03:AD:3F:C4:93:AE:B3:D6:7E:99:CB:92:D7:1F:29:A1:49:A4"}}},"request":{"raw":"GET /css?family=Roboto:300,400,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 07 Jul 2026 16:54:26 GMT\r\ndate: Tue, 07 Jul 2026 16:54:26 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16755,"size_decoded":2367,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"1936a90eef3ebd4c6b40eb59d72e164d","sha1":"4c698f8dc97e2e6186d46215e209aca1b1194a5d","sha256":"412d98c2f4410a048131a7d9362fb38456ce2ff67cd4731ea411708a7996a021","sha512":"07ad2431175e5566ae435738d94d4da3e96e4856a1fe1d5917c52474cab28808cd940fec0e8f75eb2f3d573e6fe8497fc12636ef4738d1b67e9144725192b580","ssdeep":"384:p9f59g9P9r9yU9/qY4+949Y9p9fM919W969yh9/qY4X9N9t949fd9k9D939yQ9/O:pDS99YURRuWDyjooYhREHPWP2ZZYQRVs","tlshash":"48721091041704009b834ce223cebf35fe1f52117142d0b5abfd9b6b9ddbca6526939d","first_seen":"2026-02-19T22:28:01.752187Z","last_seen":"2026-07-07T17:53:45.599642Z","times_seen":8386,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":0,"dns":2,"connect":14,"send":0,"wait":34,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ryujinxcanary.blog/static/css/style.css","fqdn":"ryujinxcanary.blog","domain":"ryujinxcanary.blog","tld":"blog"},"ip":{"addr":"104.21.64.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ryujinxcanary.blog/ryubing-canary/","date":"2026-07-07T16:54:21.419Z","timestamp":1783443261419,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ryujinxcanary.blog","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 May 2026 10:32:06 GMT","end":"Mon, 17 Aug 2026 11:31:58 GMT"},"fingerprint":{"sha1":"95:B2:07:5C:66:E2:C7:0B:93:3A:6E:73:4C:F1:24:09:A7:A4:2E:2B","sha256":"DF:1B:63:82:7A:D2:AA:C7:5B:1E:A9:FA:2A:D1:41:23:87:11:AF:FE:A7:94:DB:95:A8:C3:18:86:6A:A6:E4:31"}}},"request":{"raw":"GET /static/css/style.css HTTP/1.1\r\nHost: ryujinxcanary.blog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ryujinxcanary.blog/ryubing-canary/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BV1Lvv3%2Fu9bd8qF0kefMtWnrEImjEvzDMOh59poJUUBe8DhHoyHgPkO1STHZJISMwJywT0oBouUeuoemVb79gtpVymokkygJ8xBGcBKW%2FAFSRs0w%2BtpGiuUntFlRFi0%2FbXd3hr0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"0fb32bc1f60e73ae35a24c4c5bed4b50\"\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Tue, 07 Jul 2026 16:54:21 GMT\r\ncf-ray: a1785edfdba356a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40526,"size_decoded":8595,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"dbd85405db8e4e8411839f7baf7a0759","sha1":"22d481295fe058a8749b8f63baffcfe28b614ac4","sha256":"2a0aef6fff0c4df8dd9a5663910ac438c4d3ffb09b25f2ece3c54a887663fcc1","sha512":"f52db536a28a773ff5596e82e65ce3615a5309ad7631c9b158900eea9df7c97ec2f21cb6fbb3dd2339b58e432d1862064887822237549675e8d8e9f7342f3bf8","ssdeep":"384:JRsZ6X3COL+wh6NzEFLFkaqMvv3vl+AGX048/AxV/IsllP:QZ6X37Kwho4FLFkhcv3vl+AOYAxOs/P","tlshash":"380332496ae31940bd1b946d6bfb9789b36cd003850dce6d3bcd724c8f892a8b461f4d","first_seen":"2025-12-21T19:06:57.853684Z","last_seen":"2026-07-07T16:54:47.445426Z","times_seen":4,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ryujinxcanary.blog/static/css/ryujinx.css","fqdn":"ryujinxcanary.blog","domain":"ryujinxcanary.blog","tld":"blog"},"ip":{"addr":"104.21.64.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ryujinxcanary.blog/ryubing-canary/","date":"2026-07-07T16:54:21.420Z","timestamp":1783443261420,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ryujinxcanary.blog","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 May 2026 10:32:06 GMT","end":"Mon, 17 Aug 2026 11:31:58 GMT"},"fingerprint":{"sha1":"95:B2:07:5C:66:E2:C7:0B:93:3A:6E:73:4C:F1:24:09:A7:A4:2E:2B","sha256":"DF:1B:63:82:7A:D2:AA:C7:5B:1E:A9:FA:2A:D1:41:23:87:11:AF:FE:A7:94:DB:95:A8:C3:18:86:6A:A6:E4:31"}}},"request":{"raw":"GET /static/css/ryujinx.css HTTP/1.1\r\nHost: ryujinxcanary.blog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ryujinxcanary.blog/ryubing-canary/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NRf0x0dNk7kV3xizAcxrWP0BLjC5VgZl2OE2jTcZJuDJxAYQoMgvCtcGdJa6C5MDyIC8NgJYKoplkYfQN7xyiizzWytBI0hQg9TEeW3hi5ZxuUdAjM3KOFaRed9j99Q6bTrdv3U%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"0b498b6a676fa8a4e0e722bddf9d9886\"\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Tue, 07 Jul 2026 16:54:21 GMT\r\ncf-ray: a1785edfeba456a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13216,"size_decoded":3775,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"8357d6eadde9964bc43f910556c6d22f","sha1":"74ef40c46c4267b6613dcd612a804c4be9f00de8","sha256":"6f00b7ff3f90283fd8c862146ad1f9c2fa82b810b0bcc97c53e74fdd86bfdaa6","sha512":"86b95c6da5e4c5baef33a359b25925630d34dc3f674707170e03ab099c1c2b07d6eb9d56ac743345f60f5504c8781a28d72a16ebb7c94ce94376aa68135e6a76","ssdeep":"192:m3l/Wrkmgsm4rNtHkh/2B+6x9VyRBDRQgsM+7sg1dzR5izCwmbDek/uIsDIKS4:lrL0NGLrdzR5iuukXsy4","tlshash":"475275915b725528763bfdb46117db83b35898428d0ece7defe4208c9fc92e950b1b48","first_seen":"2026-06-15T20:00:41.296768Z","last_seen":"2026-07-07T16:54:47.446306Z","times_seen":2,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ryujinxcanary.blog/static/logo.png","fqdn":"ryujinxcanary.blog","domain":"ryujinxcanary.blog","tld":"blog"},"ip":{"addr":"104.21.64.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ryujinxcanary.blog/ryubing-canary/","date":"2026-07-07T16:54:21.434Z","timestamp":1783443261434,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ryujinxcanary.blog","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 May 2026 10:32:06 GMT","end":"Mon, 17 Aug 2026 11:31:58 GMT"},"fingerprint":{"sha1":"95:B2:07:5C:66:E2:C7:0B:93:3A:6E:73:4C:F1:24:09:A7:A4:2E:2B","sha256":"DF:1B:63:82:7A:D2:AA:C7:5B:1E:A9:FA:2A:D1:41:23:87:11:AF:FE:A7:94:DB:95:A8:C3:18:86:6A:A6:E4:31"}}},"request":{"raw":"GET /static/logo.png HTTP/1.1\r\nHost: ryujinxcanary.blog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ryujinxcanary.blog/ryubing-canary/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fepkbuUJz6SYD%2FN8JX6inbQxBfQBKOZDvds6yu53RZfS3fZbwTfox%2BPQD%2BsPWB8fb33CYyF3v9oNlRrou1bDM96%2F%2BSx3iRg8f0XGztIRXUzXLYOo7nSDMu5QPshqKB9uNraeErM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"5cfd2795a0e226ef71995149ab54ed92\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ndate: Tue, 07 Jul 2026 16:54:21 GMT\r\naccept-ranges: bytes\r\ncf-ray: a1785edffba856a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3704\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3704,"size_decoded":4513,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit colormap, non-interlaced","md5":"148b8e72b1e99fa38da5e8780c1e531b","sha1":"62ff83c5b906c2b6dea712d06770e8645c57f33f","sha256":"25b43cf2288830a008e1826f3d673f31b986d423785a917a9a16fbaae52db23b","sha512":"daa0b8d5e3d87b6a93c64539fc5f9093f24f25fe5df25d19435d7691e9fd1ff2c3324287b2ec0304ea00b8add9b14cb2dafe44f1ab87477e177ae8dacab150de","ssdeep":"","tlshash":"bb715bdd27427d0fee0dd890646512dbd4e57e2f3b12b04aaa92535000caec489a8fbb","first_seen":"2026-06-15T20:00:41.26164Z","last_seen":"2026-07-07T16:54:47.448466Z","times_seen":2,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"protrafficinspector.com/stats","fqdn":"protrafficinspector.com","domain":"protrafficinspector.com","tld":"com"},"ip":{"addr":"63.185.202.254","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ryujinxcanary.blog/ryubing-canary/","date":"2026-07-07T16:54:22.133Z","timestamp":1783443262133,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"protrafficinspector.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 26 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A5:A0:EB:57:26:41:24:03:DD:F3:2D:91:FB:6B:49:B6:53:8B:5F:86","sha256":"82:7E:C7:50:5F:EC:61:E0:5F:7F:ED:2E:10:87:9B:31:A9:8F:4B:DF:E8:99:CC:2E:A1:13:31:E7:45:CE:89:25"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: protrafficinspector.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ryujinxcanary.blog/\r\nOrigin: https://ryujinxcanary.blog\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 07 Jul 2026 16:54:22 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://ryujinxcanary.blog\r\nset-cookie: uid_id2=98702624-af77-47c8-add2-c06609276145:1:1; Expires=Fri, 04 Jul 2036 16:54:22 GMT; Secure; SameSite=None\r\nvary: Origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40,"size_decoded":513,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"8149fab4ab66464dc878a136d5521a03","sha1":"c17cb4ee377e75b6110c2fa2b9ae303204a927ad","sha256":"2474fd6c22c7579fe16443c9e94b0b11f55bba873fd33d65c4bbea86d53d6a27","sha512":"230dd35b02e0441affd077f5a30e2e9e4818ea0492a94eaf59e4688ed61d7adb14dbbbe2694f2379b57594f174e40cd5251fd48c59eb79ffced853beda680887","ssdeep":"","tlshash":"03900447c31c3030d31141d0c11d14dd515050d50131517550404f3d037c04001d0373","first_seen":"2026-07-07T16:54:47.449365Z","last_seen":"2026-07-07T16:54:47.449365Z","times_seen":1,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":83,"connect":21,"send":0,"wait":22,"receive":0,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.1/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ryujinxcanary.blog/ryubing-canary/","date":"2026-07-07T16:54:21.416Z","timestamp":1783443261416,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.5.1/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ryujinxcanary.blog/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 16:54:21 GMT\r\ncontent-type: text/css; charset=utf-8\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\nlast-modified: Fri, 01 Dec 2023 00:32:25 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\ncf-cache-status: HIT\r\nage: 7609\r\nexpires: Sun, 27 Jun 2027 16:54:21 GMT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5cWYqnSZ6b07oAncLqpxfETYpYiuchoa4%2FYAGz%2FgoBgAlTeWFKRuYLy94wIC6cjWFOw33YYlB1vSPrnXeHlMg1I9%2FK3iF2%2BenrMySnW8%2FB6JP5u923uL4yIqJ1FcoweDajZhzpYp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a1785ee0490149c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":102641,"size_decoded":19837,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (52276)","md5":"9402848c3d4bbc710c764326f8b887c9","sha1":"b6e555166eb1381392e00adcde9bf8863f16ff01","sha256":"c22cfb6520a7fdbb738632834019acf47c78b1279462c0eb4cb83bae83ecb5a7","sha512":"0d33903bd456087de9a46a9c59a100d41219382eb1c5a97012cc3d73641078021fb65f957a0a2f96779ed5cf505f84dcb6758c9f5dd36727be822326f1ed8bc0","ssdeep":"1536:iwMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPG9ZpgSLCJ:O709gMGFiyPG9ZiSLCJ","tlshash":"79a3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2023-12-02T04:06:15Z","last_seen":"2026-07-07T19:11:26.937579Z","times_seen":31623,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":48,"connect":17,"send":0,"wait":21,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoologyfibre.com/sbar.json?key=24a92801f0d1813b0190a08ef670866d\u0026uuid=98702624-af77-47c8-add2-c06609276145%3A1%3A1","fqdn":"zoologyfibre.com","domain":"zoologyfibre.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ryujinxcanary.blog/ryubing-canary/","date":"2026-07-07T16:54:22.644Z","timestamp":1783443262644,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"zoologyfibre.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 03:57:55 GMT","end":"Fri, 25 Sep 2026 03:57:54 GMT"},"fingerprint":{"sha1":"21:E1:0C:F0:3C:47:B6:51:43:59:A6:9C:7F:45:F3:83:AF:8E:E8:1C","sha256":"8C:62:F5:05:48:06:52:25:19:4D:0F:3D:B5:18:63:0E:57:03:24:EE:E2:B9:FB:E5:24:00:E5:7B:9C:AE:94:CB"}}},"request":{"raw":"GET /sbar.json?key=24a92801f0d1813b0190a08ef670866d\u0026uuid=98702624-af77-47c8-add2-c06609276145%3A1%3A1 HTTP/1.1\r\nHost: zoologyfibre.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ryujinxcanary.blog/\r\nOrigin: https://ryujinxcanary.blog\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Tue, 07 Jul 2026 16:54:23 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\naccept-ch: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform,Sec-CH-UA-Mobile,Device-Stock-UA,X-UCBrowser-Device-UA,User-Agent,Sec-CH-UA-Platform-Version,Sec-CH-UA-Model,X-Device-User-Agent,X-OperaMini-Phone-UA,Sec-CH-UA,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Full-Version\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://ryujinxcanary.blog\r\ncontent-encoding: zstd\r\nset-cookie: uid_id2=98702624-af77-47c8-add2-c06609276145:1:1; Path=/; Expires=Tue, 14 Jul 2026 16:54:22 GMT; Secure; SameSite=None\npdhtkv=true; Path=/; Expires=Wed, 08 Jul 2026 16:54:23 GMT; Secure; SameSite=None\nuncs=1; Path=/; Expires=Wed, 08 Jul 2026 16:54:23 GMT; Secure; SameSite=None\npdhtkv29=true; Path=/; Expires=Wed, 08 Jul 2026 16:54:23 GMT; Secure; SameSite=None\nuncs29=1; Path=/; Expires=Wed, 08 Jul 2026 16:54:23 GMT; Secure; SameSite=None\nu_pl29508556=1; Path=/; Expires=Wed, 08 Jul 2026 16:54:23 GMT; Secure; SameSite=None\nslec24a92801f0d1813b0190a08ef670866d=[6517248]; Path=/; Expires=Tue, 07 Jul 2026 16:54:28 GMT; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nx-envoy-upstream-service-time: 369\r\nHost: zoologyfibre.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: da21395882951bfb8ca1e70c4568fea1\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5184,"size_decoded":4458,"mime_type":"text/plain; charset=utf-8","magic":"JSON text data","md5":"376c5ee55486cfde9c5ef93364ed6114","sha1":"c38efb11b968946bccff4c9de0cfdbe1a07797c3","sha256":"26f1a320c7ab58b53ad83da4108a07db5e3ba6a59b1c71c1f87ca41da46aaff9","sha512":"04ed01786e7dc032110190a72be20809122b11f27cac2de250b702328fa80c3dce76659bc71858103257535441cae1992feaa97a534f85538736a5665521df3a","ssdeep":"96:9z8gF+ubk2Tg7wP22qg5iPoaZ4TakOHv6sapj0Hv6sapjgJ:9zNgj2sWkPrdkOSsapASsapa","tlshash":"27b14c29136cf42b77d0f6968a8c98f45dc108db51027408f6a7de4fa7ae3087113ab6","first_seen":"2026-07-07T16:54:47.450887Z","last_seen":"2026-07-07T16:54:47.450887Z","times_seen":1,"resource_available":false,"data":null}},"time_used":514,"timings":{"blocked":0,"dns":0,"connect":92,"send":0,"wait":471,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.redgarto.com/sb/interstitial/sweep/default/system/2/img/number.png","fqdn":"cdn.redgarto.com","domain":"redgarto.com","tld":"com"},"ip":{"addr":"104.21.80.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ryujinxcanary.blog/ryubing-canary/","date":"2026-07-07T16:54:27.509Z","timestamp":1783443267509,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redgarto.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 12:56:57 GMT","end":"Mon, 07 Sep 2026 13:56:51 GMT"},"fingerprint":{"sha1":"D8:30:A0:FC:44:CC:CB:CC:41:34:6E:58:73:90:EB:8D:41:F2:56:BA","sha256":"85:56:6E:35:A5:13:48:28:ED:D2:1D:3C:B6:6B:C0:81:82:08:BB:68:8A:C5:D5:9E:CA:8A:77:EE:DD:4B:78:A4"}}},"request":{"raw":"GET /sb/interstitial/sweep/default/system/2/img/number.png HTTP/1.1\r\nHost: cdn.redgarto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 07 Jul 2026 16:54:27 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 04 Sep 2025 11:21:07 GMT\r\npriority: u=4,i\r\netag: \"68b97623-472\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\naccept-ranges: bytes\r\nage: 2348190\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=87THSn3Z1KZf%2BAAMHz34MvaBnjfxScFzJVMRoOd5rAWLcXmmGzC80NS9PvrMXeFEwATWLOwyhJ1eWdOP5hDOB8fRZmFAzRx4s09Xi8c94rcQyT%2FLUvMLNNTDZTQoave69uzM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1785f05fad1783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1138\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1138,"size_decoded":1955,"mime_type":"image/png","magic":"PNG image data, 43 x 43, 8-bit/color RGBA, non-interlaced","md5":"9e4414e85c588bf7db195e49c02ab2bb","sha1":"09254e79b255f1b2dfe45adbbe44583a4b433782","sha256":"0b977ec6e7cf5d35df03cd3a8041f5f523f5d4059ac67c152c0a7b613e20b762","sha512":"07925dc4d8f6cc1b9b89d26f2c3a6aa3175279719a0999fd837a20e8b12f443eb521e23b3212227ac1b6dfa2ecfcdd94b7494dd67d9d8b046efdddd185bb9bfc","ssdeep":"","tlshash":"a121f90aeca21be0d7888f0214dc135095da07447f8e280a37b6aa599e1070614451fb","first_seen":"2023-04-09T12:43:14Z","last_seen":"2026-07-07T17:47:48.61492Z","times_seen":2981,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}