{"report_id":"1bd20d31-d552-4ecd-b934-41600aa6814a","version":6,"status":"done","tags":[],"date":"2026-03-29T13:08:26Z","url":{"schema":"http","addr":"w3t3as7bc31365kg3k8pi61i.connect-corner.com/","fqdn":"w3t3as7bc31365kg3k8pi61i.connect-corner.com","domain":"connect-corner.com","tld":"com"},"ip":{"addr":"34.138.8.166","port":0,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"w3t3as7bc31365kg3k8pi61i.connect-corner.com/sh-basic","fqdn":"w3t3as7bc31365kg3k8pi61i.connect-corner.com","domain":"connect-corner.com","tld":"com"},"title":"Good luck!","dom":{"size":4606,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1069)","md5":"0e27ecdb089f90dcf502618cd534c88e","sha1":"6beee618ca9d0166fb77436306be191e3694b70d","sha256":"80cbae17f2ef581475e9ca4488155ccfd063a3fad98e1ad70eca3e054c764560","sha512":"c78a93a9f1c94fe0eb37189664fbb0b556ffe27627337d27a5a0025133c6b0e14152d6b44ce478c3302067dcfa00688917f542daa7402242210b4199591fbb46","ssdeep":"96:nRDkTVVCyEIoI8NJN1gt9WCJH1bu8k8VH2/qq:RgVVCyEIoI8NJgt9WCJM8V8","tlshash":"e19144b3449298371e0261d9deb06dac84c9445bc6a74c98b2ed06245ff4df14e632bf","dom_hash":"domhashaf91a1096b341f18cecf205a639795ad","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"w3t3as7bc31365kg3k8pi61i.connect-corner.com/","fqdn":"w3t3as7bc31365kg3k8pi61i.connect-corner.com","domain":"connect-corner.com","tld":"com"},"ip":{"addr":"34.138.8.166","port":0,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-03T13:08:26Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"ilndngs.romanticboo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"ilndngs.romanticboo.com","ip":{"addr":"172.67.195.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-04-30","domain_rank":6267362,"first_seen":"2021-08-17T11:54:00Z","last_seen":"2026-03-28T12:10:46.220964Z","alert_count":4,"request_count":4,"received_data":96401,"sent_data":1905,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-22T22:16:16.728956Z","alert_count":0,"request_count":1,"received_data":24415,"sent_data":556,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-22T22:20:05.651051Z","alert_count":0,"request_count":1,"received_data":2330,"sent_data":493,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"w3t3as7bc31365kg3k8pi61i.connect-corner.com","ip":{"addr":"34.138.8.166","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2025-06-03","domain_rank":0,"first_seen":"2026-03-29T13:08:26.398145Z","last_seen":"2026-03-29T13:08:26.398145Z","alert_count":0,"request_count":4,"received_data":19087,"sent_data":2180,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ilndngs.romanticboo.com/scripts/main.js?v=9","fqdn":"ilndngs.romanticboo.com","domain":"romanticboo.com","tld":"com"},"ip":{"addr":"172.67.195.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6fe9bc2495a090f105292f7095339645","sha1":"29a609b509788290b4ebd2643dae89ce6286c9f6","sha256":"e64ebe5e47c5f2834cdc57260ab4a9f272cdff5a1b8240a76c39ddd7fccce4eb","sha512":"3d2cacdab9014c002dab5a3d6ed4dcf4d7028c7a536b0b1ed1d1ed2ca09f51b353e44fabc90eb73a153e11d868645dfcf880bec9c536f5e0520b2a4261c5aa14","ssdeep":"384:lorChhM8wHZcDeBdBJJDatl7BpNB5hG8wxHMotv:arChhM8wHZcDyJyd/NPhG8wxltv","tlshash":"3f821e5865f2182827fb722e9adf914871a5084b1d0ddc9c3d6c4e449f78a3c71f2bba","size":17618,"data":"","first_seen":"2025-12-11T00:45:41.664269Z","last_seen":"2026-04-05T08:46:32.392298Z","times_seen":394,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"w3t3as7bc31365kg3k8pi61i.connect-corner.com/apple-touch-icon-180x180-precomposed.png","fqdn":"w3t3as7bc31365kg3k8pi61i.connect-corner.com","domain":"connect-corner.com","tld":"com"},"ip":{"addr":"34.138.8.166","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://w3t3as7bc31365kg3k8pi61i.connect-corner.com/sh-basic","date":"2026-03-29T13:08:04.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connect-corner.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 18:47:22 GMT","end":"Thu, 18 Jun 2026 18:47:21 GMT"},"fingerprint":{"sha1":"39:57:38:B3:54:5E:A9:93:DF:2D:EC:D1:EE:D4:4B:01:76:AB:C9:9A","sha256":"56:9B:A9:2E:07:70:32:7D:31:1A:2D:A7:1B:8A:DD:83:66:06:9F:73:4A:BB:C7:30:19:3B:42:03:A1:46:07:26"}}},"request":{"raw":"GET /apple-touch-icon-180x180-precomposed.png HTTP/1.1\r\nHost: w3t3as7bc31365kg3k8pi61i.connect-corner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://w3t3as7bc31365kg3k8pi61i.connect-corner.com/sh-basic\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 29 Mar 2026 13:08:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 6209\r\nlast-modified: Fri, 20 Mar 2026 16:00:56 GMT\r\netag: \"69bd6f38-1841\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-max-age: 1728000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6209,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit colormap, non-interlaced","md5":"d023e00b68e30b40358115201b565531","sha1":"9a580a78786865bec255cabff1c7959e4fcb5716","sha256":"2b932652d6acea0968e8b87d955c4536e2c69c1dd5f97fb9cf0a7a99c0e4f515","sha512":"d47b9ea0be87d69f76dea72a45b88974120b51185931c252d4e801cb40d8794b410b597324de14fcf312d34723a624189642bd012c2e246a61b1742e40dea514","ssdeep":"96:hh6yaHo2klB/P2lBacjmBI0WsfllabXrXAVIO6AMkeLhLk5/jni0xARXN:h/jpj3CpmxVl0XrAXisni1RXN","tlshash":"15d18e3c6ac3ecccd1daf66588ab54bc403e428daed9fc2130960ce915a5f0971f81e2","first_seen":"2025-02-10T07:40:27.234588Z","last_seen":"2026-04-05T08:46:32.387942Z","times_seen":614,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ilndngs.romanticboo.com/56/1.jpg","fqdn":"ilndngs.romanticboo.com","domain":"romanticboo.com","tld":"com"},"ip":{"addr":"172.67.195.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://w3t3as7bc31365kg3k8pi61i.connect-corner.com/sh-basic","date":"2026-03-29T13:08:04.754Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"romanticboo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 20:13:07 GMT","end":"Sun, 03 May 2026 21:10:47 GMT"},"fingerprint":{"sha1":"3A:2A:37:F7:56:C4:79:94:DC:A6:B7:69:33:2B:D3:0F:E5:4C:66:F7","sha256":"9C:23:13:05:7B:AB:2E:A1:63:0F:B6:75:C2:B0:E6:49:CA:F8:3D:D7:6F:03:2B:63:C8:01:18:A8:0E:34:1A:F4"}}},"request":{"raw":"GET /56/1.jpg HTTP/1.1\r\nHost: ilndngs.romanticboo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://w3t3as7bc31365kg3k8pi61i.connect-corner.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 29 Mar 2026 13:08:04 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 28987\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 28 Feb 2022 21:09:25 GMT\r\netag: \"6a480f12d946ef147bc5b5c2e980b53c\"\r\nx-amz-version-id: KF3c9ut2gQeLFbGLIbf1D2xCVIbPzviG\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 1e604122efa69acb57f0b5ccc10d9de6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS58-P2\r\nx-amz-cf-id: 4dLPbfcThUhNBbWd8AYICC6BBtG443Bk3ABxSeoV5noGlVHLFjU18w==\r\nage: 4888\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jcpeCrJWv3pf3YOXbSGGKTh4I48MKCOyfoAR9bcht%2FbCBbVFF6lZeuBgjaF1BRE9ywVSXySMWp5BLvuuXFijzj0uE4cVpHBeGEshxSR20pkSmQtGQM%2BFrxeLEzyo8GXnWt8XxcPOi7wDew%3D%3D\"}]}\r\ncf-ray: 9e3f19e9bd275ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":28987,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1000x628, components 3","md5":"6a480f12d946ef147bc5b5c2e980b53c","sha1":"59478ed3668a1d013756af556adac0f8a2ac1074","sha256":"3a6fb6cb6b8b28a24de5c424b0403cf5a217ac4c78b50c9132e28fb2d56b1fbb","sha512":"1e9ec1cee10dc6a25d85c8434d7f16f9d4fcb1c05b62b6ab16ac5694b1004141243861d82e724096d5bee168ba5c59bef3668d6f69baff99d8231cd81f6734ba","ssdeep":"768:1ng6GPUG81CY4qOHvtfNAITKHl3EdV1Xr/KnVdPhX8u5oe+m:1gp8134qOHvtVhO6dV94VdpX8utv","tlshash":"fad2e12e4aed79f2fb77361d08084bac71d10bbbcb3763f2980150d1d5653a89a612ad","first_seen":"2025-09-05T07:33:26.221105Z","last_seen":"2026-04-05T07:04:54.710503Z","times_seen":459,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"ilndngs.romanticboo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"w3t3as7bc31365kg3k8pi61i.connect-corner.com/sh-basic","fqdn":"w3t3as7bc31365kg3k8pi61i.connect-corner.com","domain":"connect-corner.com","tld":"com"},"ip":{"addr":"34.138.8.166","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-29T13:08:04.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connect-corner.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 18:47:22 GMT","end":"Thu, 18 Jun 2026 18:47:21 GMT"},"fingerprint":{"sha1":"39:57:38:B3:54:5E:A9:93:DF:2D:EC:D1:EE:D4:4B:01:76:AB:C9:9A","sha256":"56:9B:A9:2E:07:70:32:7D:31:1A:2D:A7:1B:8A:DD:83:66:06:9F:73:4A:BB:C7:30:19:3B:42:03:A1:46:07:26"}}},"request":{"raw":"GET /sh-basic HTTP/1.1\r\nHost: w3t3as7bc31365kg3k8pi61i.connect-corner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 29 Mar 2026 13:08:04 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\naccept-ch: Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-WoW64\r\npermissions-policy: ch-ua=(self \"https://api.icalendars.app\"),ch-ua-mobile=(self \"https://api.icalendars.app\"),ch-ua-platform=(self \"https://api.icalendars.app\"),ch-ua-platform-version=(self \"https://api.icalendars.app\"),ch-ua-full-version=(self \"https://api.icalendars.app\"),ch-ua-full-version-list=(self \"https://api.icalendars.app\"),ch-ua-model=(self \"https://api.icalendars.app\"),ch-ua-arch=(self \"https://api.icalendars.app\"),ch-ua-bitness=(self \"https://api.icalendars.app\"),ch-ua-wow64=(self \"https://api.icalendars.app\")\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-max-age: 1728000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4685,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (1069)","md5":"b192b63539e240a3ab400804eab01319","sha1":"e8c04f96d5b2a24bc69138d7602c6cdd54b0d4f9","sha256":"e855a7f41083e853b7b49873d1c9dc2e0e83f9c0bbc25ccb127b2fad97bb8737","sha512":"b418a858e86304a1a9635c0666aa14a7eb093ea652db06204eeacbd4698f0c2fadb4a1d840d8174484f7041c1294cb4d37c9e9b37e6f818f36b130721228db84","ssdeep":"96:YDPSgiCBXOvIR6XN1gt9WCJ21bu8k8VH2/8y:YegiCBXOvIR6Xgt9WCJt8Vs","tlshash":"baa144b3045258371a0161daeeb06dac94c9409bc7ab4c9872ed09655ff5ef00ea32fb","first_seen":"2026-03-29T13:08:27.599115Z","last_seen":"2026-03-29T13:08:27.599115Z","times_seen":1,"resource_available":true,"data":null}},"time_used":143,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":143,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ilndngs.romanticboo.com/styles/style_land_e49b8b4053df9505e1f48c3a701c0682.css","fqdn":"ilndngs.romanticboo.com","domain":"romanticboo.com","tld":"com"},"ip":{"addr":"172.67.195.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://w3t3as7bc31365kg3k8pi61i.connect-corner.com/sh-basic","date":"2026-03-29T13:08:04.489Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"romanticboo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 20:13:07 GMT","end":"Sun, 03 May 2026 21:10:47 GMT"},"fingerprint":{"sha1":"3A:2A:37:F7:56:C4:79:94:DC:A6:B7:69:33:2B:D3:0F:E5:4C:66:F7","sha256":"9C:23:13:05:7B:AB:2E:A1:63:0F:B6:75:C2:B0:E6:49:CA:F8:3D:D7:6F:03:2B:63:C8:01:18:A8:0E:34:1A:F4"}}},"request":{"raw":"GET /styles/style_land_e49b8b4053df9505e1f48c3a701c0682.css HTTP/1.1\r\nHost: ilndngs.romanticboo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://w3t3as7bc31365kg3k8pi61i.connect-corner.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 29 Mar 2026 13:08:04 GMT\r\ncontent-type: text/css\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 18 Dec 2024 16:50:44 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: KrXXHHppNh9suluodCb2rx_2bgsQGPGU\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dNKkEYfO%2BSrpvGdn6VL2Pyp8VQ%2BRrnAm0%2FcVlO1P01vMOILbvmxbUFbnn2LhDp1dbBUj48R1l%2FzcMPi95Zi%2B9XH5DiER6L2R6YrwxoD%2FwuE5vz7%2FmnJQTb0i3j1kE0kQzPpAhaNsUK8Zfw%3D%3D\"}]}\r\nserver: cloudflare\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: HcmLZ6aWOCw2ZI1_7gpIjsYnfprReRC87BKiDCopilug533o_PZS8Q==\r\nage: 4888\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"e8d9ffc01e5cfa9697f7100bccd11acb\"\r\ncontent-encoding: br\r\ncf-ray: 9e3f19e848b75ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":809,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"e8d9ffc01e5cfa9697f7100bccd11acb","sha1":"359d3671d674fb482c787d3b151c767c528f168f","sha256":"b04310a69f96fe36719847747981dd3ca17fa44970a849ee7b423679fe4db37a","sha512":"a5f1ffba8de79da7f938fdc8a0b6ff5d77eb82ffadee9f52a2cc3b48295994f5a6cc20d6ff5280c4d0fd05592cbf997b06a740b81948418ed841d9d1b019ed74","ssdeep":"","tlshash":"7b01bd1306e36244f4525cba2f6e9755276c8423a68fc9387fce726ccf891e572a138c","first_seen":"2025-09-05T07:33:26.223585Z","last_seen":"2026-04-05T07:04:54.70864Z","times_seen":459,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":39,"dns":4,"connect":3,"send":0,"wait":10,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"ilndngs.romanticboo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"w3t3as7bc31365kg3k8pi61i.connect-corner.com/tracking/event-tracking","fqdn":"w3t3as7bc31365kg3k8pi61i.connect-corner.com","domain":"connect-corner.com","tld":"com"},"ip":{"addr":"34.138.8.166","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://w3t3as7bc31365kg3k8pi61i.connect-corner.com/sh-basic","date":"2026-03-29T13:08:04.750Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connect-corner.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 18:47:22 GMT","end":"Thu, 18 Jun 2026 18:47:21 GMT"},"fingerprint":{"sha1":"39:57:38:B3:54:5E:A9:93:DF:2D:EC:D1:EE:D4:4B:01:76:AB:C9:9A","sha256":"56:9B:A9:2E:07:70:32:7D:31:1A:2D:A7:1B:8A:DD:83:66:06:9F:73:4A:BB:C7:30:19:3B:42:03:A1:46:07:26"}}},"request":{"raw":"POST /tracking/event-tracking HTTP/1.1\r\nHost: w3t3as7bc31365kg3k8pi61i.connect-corner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://w3t3as7bc31365kg3k8pi61i.connect-corner.com/sh-basic\r\nContent-type: application/json; charset=utf-8\r\nContent-Length: 227\r\nOrigin: https://w3t3as7bc31365kg3k8pi61i.connect-corner.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":227,"data":"{\"event_id\":8,\"page_id\":\"980a58d5-e569-4a21-abf5-36bbef51090b\",\"step\":1,\"template_id\":1549,\"landing_name\":\"sh-basic\",\"land_id\":748,\"type\":\"mtds\",\"agent_width\":1280,\"agent_height\":1024,\"page_load_time\":1774789685953,\"dtng\":null}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 29 Mar 2026 13:08:04 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-max-age: 1728000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T08:47:05.766455Z","times_seen":13367613,"resource_available":true,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lato/v25/S6uyw4BMUTPHjx4wXg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://w3t3as7bc31365kg3k8pi61i.connect-corner.com/sh-basic","date":"2026-03-29T13:08:04.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:46 GMT","end":"Mon, 01 Jun 2026 08:37:45 GMT"},"fingerprint":{"sha1":"CE:A8:F5:0E:2D:25:9E:74:0C:47:4D:6C:AD:DF:7B:FC:CE:E6:41:7D","sha256":"E1:06:81:F7:22:E3:29:2F:2A:B9:4C:3F:37:46:25:24:5B:C8:B5:7F:9C:3E:54:A2:D2:DD:E0:54:C0:09:12:C1"}}},"request":{"raw":"GET /s/lato/v25/S6uyw4BMUTPHjx4wXg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://w3t3as7bc31365kg3k8pi61i.connect-corner.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23580\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 26 Mar 2026 02:01:23 GMT\r\nexpires: Fri, 26 Mar 2027 02:01:23 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 17:09:41 GMT\r\ncontent-type: font/woff2\r\nage: 299201\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23580,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23580, version 1.0","md5":"e1b3b5908c9cf23dfb2b9c52b9a023ab","sha1":"fcd4136085f2a03481d9958cc6793a5ed98e714c","sha256":"918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537","sha512":"b2da7ef768385707afed62ca1f178efc6aa14519762e3f270129b3afee4d3782cb991e6fa66b3b08a2f81ff7caba0b4c34c726d952198b2ac4a784b36eb2a828","ssdeep":"384:dRkIAJ8pVwWTW5VVjdVn8+2yvAMdriCEOY0kfW9GkAPqpPHi2vUuUSzB8:dKIAJ8pVHTZ+riY9oCpPHiodUeK","tlshash":"91b2e1ce5d546e3a8028213785c17b488273572e9edf42c6dd83a6263a7092cfd3d96e","first_seen":"2023-04-05T13:28:45Z","last_seen":"2026-04-05T08:49:26.963239Z","times_seen":184470,"resource_available":false,"data":null}},"time_used":309,"timings":{"blocked":127,"dns":1,"connect":27,"send":0,"wait":29,"receive":24,"ssl":97},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"w3t3as7bc31365kg3k8pi61i.connect-corner.com/","fqdn":"w3t3as7bc31365kg3k8pi61i.connect-corner.com","domain":"connect-corner.com","tld":"com"},"ip":{"addr":"34.138.8.166","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-29T13:08:02.962Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connect-corner.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 18:47:22 GMT","end":"Thu, 18 Jun 2026 18:47:21 GMT"},"fingerprint":{"sha1":"39:57:38:B3:54:5E:A9:93:DF:2D:EC:D1:EE:D4:4B:01:76:AB:C9:9A","sha256":"56:9B:A9:2E:07:70:32:7D:31:1A:2D:A7:1B:8A:DD:83:66:06:9F:73:4A:BB:C7:30:19:3B:42:03:A1:46:07:26"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: w3t3as7bc31365kg3k8pi61i.connect-corner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sun, 29 Mar 2026 13:08:03 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlocation: https://w3t3as7bc31365kg3k8pi61i.connect-corner.com/sh-basic\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-max-age: 1728000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4685,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T08:47:05.766455Z","times_seen":13367613,"resource_available":true,"data":null}},"time_used":2062,"timings":{"blocked":972,"dns":1,"connect":112,"send":0,"wait":118,"receive":0,"ssl":856},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ilndngs.romanticboo.com/scripts/main.js?v=9","fqdn":"ilndngs.romanticboo.com","domain":"romanticboo.com","tld":"com"},"ip":{"addr":"172.67.195.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://w3t3as7bc31365kg3k8pi61i.connect-corner.com/sh-basic","date":"2026-03-29T13:08:04.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"romanticboo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 20:13:07 GMT","end":"Sun, 03 May 2026 21:10:47 GMT"},"fingerprint":{"sha1":"3A:2A:37:F7:56:C4:79:94:DC:A6:B7:69:33:2B:D3:0F:E5:4C:66:F7","sha256":"9C:23:13:05:7B:AB:2E:A1:63:0F:B6:75:C2:B0:E6:49:CA:F8:3D:D7:6F:03:2B:63:C8:01:18:A8:0E:34:1A:F4"}}},"request":{"raw":"GET /scripts/main.js?v=9 HTTP/1.1\r\nHost: ilndngs.romanticboo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://w3t3as7bc31365kg3k8pi61i.connect-corner.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 29 Mar 2026 13:08:04 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 10 Dec 2025 09:52:35 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 8fL.8Jm01FdvXR3Pun5VLcB_bwR8mhYT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p7DsnEYbx%2BNkWjMyLOvcgItB0dNMMQVeAJ%2FJUENLmIQq9jg3NemxpUPLOASKd%2FPgYnwMLU9X3CADHTH9D6JrMLc1%2FEYE%2BmgN39b8vKUQPRJefnBE8bv%2BwVANYUimOFsf04Sh7qT8wL1v0w%3D%3D\"}]}\r\nserver: cloudflare\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: elunqO9TRyx4bF9wf4HK4Ao9L_1ABtPB-hne6Z8Uo4J_Jc13ySfNyw==\r\nage: 2798\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"6fe9bc2495a090f105292f7095339645\"\r\ncontent-encoding: br\r\ncf-ray: 9e3f19e848aa5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17618,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"6fe9bc2495a090f105292f7095339645","sha1":"29a609b509788290b4ebd2643dae89ce6286c9f6","sha256":"e64ebe5e47c5f2834cdc57260ab4a9f272cdff5a1b8240a76c39ddd7fccce4eb","sha512":"3d2cacdab9014c002dab5a3d6ed4dcf4d7028c7a536b0b1ed1d1ed2ca09f51b353e44fabc90eb73a153e11d868645dfcf880bec9c536f5e0520b2a4261c5aa14","ssdeep":"384:lorChhM8wHZcDeBdBJJDatl7BpNB5hG8wxHMotv:arChhM8wHZcDyJyd/NPhG8wxltv","tlshash":"3f821e5865f2182827fb722e9adf914871a5084b1d0ddc9c3d6c4e449f78a3c71f2bba","first_seen":"2025-12-11T00:45:41.664269Z","last_seen":"2026-04-05T08:46:32.392298Z","times_seen":394,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":33,"dns":1,"connect":3,"send":0,"wait":7,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"ilndngs.romanticboo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ilndngs.romanticboo.com/styles/main.css","fqdn":"ilndngs.romanticboo.com","domain":"romanticboo.com","tld":"com"},"ip":{"addr":"172.67.195.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://w3t3as7bc31365kg3k8pi61i.connect-corner.com/sh-basic","date":"2026-03-29T13:08:04.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"romanticboo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 20:13:07 GMT","end":"Sun, 03 May 2026 21:10:47 GMT"},"fingerprint":{"sha1":"3A:2A:37:F7:56:C4:79:94:DC:A6:B7:69:33:2B:D3:0F:E5:4C:66:F7","sha256":"9C:23:13:05:7B:AB:2E:A1:63:0F:B6:75:C2:B0:E6:49:CA:F8:3D:D7:6F:03:2B:63:C8:01:18:A8:0E:34:1A:F4"}}},"request":{"raw":"GET /styles/main.css HTTP/1.1\r\nHost: ilndngs.romanticboo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://w3t3as7bc31365kg3k8pi61i.connect-corner.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 29 Mar 2026 13:08:04 GMT\r\ncontent-type: text/css\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 10 Oct 2024 12:08:33 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: tr7jLbXswORbSc0wv4A7DyrlqnbfdA_U\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OLTuGoFRbQlTsh%2FuKA%2FLlXJ3d23o8%2BcYLb5QRO7tuEGr9M1b1Ea6GA4Bjy6g73WbG33eXi%2FeBrg9c5AQ5gMDg5erPrRVAACFs1RccFyUFx4PDsOSRnicZIlu4Zz%2F3kLdXcUCgGLDsWU4Hg%3D%3D\"}]}\r\nserver: cloudflare\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: qWLpayBZfBlIXqg_r6UdaVHVm0KtQJ1KRo-o24vy4Nx_M2KjSeXOtA==\r\nage: 1112\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"e05b66cef69a0e94dc5d62e2fc09b6cb\"\r\ncontent-encoding: br\r\ncf-ray: 9e3f19e848a75ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":45068,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"e05b66cef69a0e94dc5d62e2fc09b6cb","sha1":"27b8145800b9b1e346f3f9ef9d0a8eda29150148","sha256":"253d9751fadfb514b4943558fb81a7401ed0b7698486560ae6408aab1e4341ea","sha512":"004137044531a66947a06e32715f58fb2b67e5cca137f69981081cfd0c3093ca7dbf0d96781aec707a7c0005fa498eba22d43c4d62eca37f2a4a2b850f0a141e","ssdeep":"768:1s9FEVOqjaZ/F+RxsxFySTLhEkZWFIzFB25FayJFLF5F2FHvp9fQWLFMTjd+FSvK:C9CYqxRxsxhiuWSzm5YyJJjo1lLEQsK","tlshash":"f8135471a9631d59b02b892c27ead7c1336c8053910bce7cbbd931688fc91e44677b9e","first_seen":"2025-09-05T07:33:26.227351Z","last_seen":"2026-04-05T08:46:32.390575Z","times_seen":545,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":38,"dns":8,"connect":1,"send":0,"wait":7,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"ilndngs.romanticboo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Lato:wght@400;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://w3t3as7bc31365kg3k8pi61i.connect-corner.com/sh-basic","date":"2026-03-29T13:08:04.487Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:47 GMT","end":"Mon, 01 Jun 2026 08:37:46 GMT"},"fingerprint":{"sha1":"84:E2:03:36:CA:39:FF:65:64:D9:12:E7:E2:28:88:8C:3C:A0:CA:BA","sha256":"45:AF:9C:39:77:2B:D1:D7:B8:04:BB:2C:0E:98:C5:BB:8A:E8:99:A6:C3:AF:7F:90:AA:23:EA:F2:8F:AD:8F:B1"}}},"request":{"raw":"GET /css2?family=Lato:wght@400;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://w3t3as7bc31365kg3k8pi61i.connect-corner.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 29 Mar 2026 13:08:04 GMT\r\ndate: Sun, 29 Mar 2026 13:08:04 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1644,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"fbea5578099b2a11bc73c082c21f046f","sha1":"38612445ca5462921da82dab5d3eeba5b8e9be48","sha256":"c3e606051dc0106a9e30d26f110dbb1b835f7a7f2042caa0622ff01f13ef7e5e","sha512":"a4b2f66ec6f198bbb8f543c5c30236f5b1cae1b8c31a2cd78f0c4165ea7e6ee18474d62f09ad1263a7caeac3d1fc8c7ec8c0a89219bdb029c2dcdc72fed93fd0","ssdeep":"","tlshash":"5531ae91056ba508db870cc212cd7e32ff1e615064559935aefe14d8bc97c699362b0d","first_seen":"2025-09-17T13:26:47.228197Z","last_seen":"2026-04-05T07:54:37.630222Z","times_seen":3019,"resource_available":false,"data":null}},"time_used":373,"timings":{"blocked":165,"dns":1,"connect":18,"send":0,"wait":34,"receive":0,"ssl":143},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}