{"report_id":"26a1193a-bca9-43f3-a0bf-1fdc18c60987","version":6,"status":"done","tags":[],"date":"2025-11-12T21:19:56Z","url":{"schema":"http","addr":"switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"104.21.8.22","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"title":"(1) New Message!","dom":{"size":7553,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"3c18bbf6c1ec80e0ef1cef28e7b53d39","sha1":"30aac4a6c499dbd9987be9f2590a73d61ee490bd","sha256":"868f7a8855474fa7fe39a6ce86265841a55d3a5b4cc6350c650ee84e98b61a59","sha512":"343f61853756649fa61e58f96c89f01c2d54a3d91e8e55ef19be92a81319150432a05664a6b252326ccdd9d0da037b56091f64089c62399f64dbd05c1886093d","ssdeep":"192:BjK+QK9KyK03XK/KIqKI4Kn7KSKBKC3sKUKoNK8KGnKrKEKT3AKrKFpKwSp:o+tI/y6yekn+f8QZRtpGKuBjdu+wSp","tlshash":"9df18b90081a9400ab930cd273cf3e36ed4f51167146c8b6abfd68aceee7d27925974d","dom_hash":"domhash08ae0081c1574fe7e013785c60b9d7d5","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"104.21.8.22","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"country_code":"zz"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-12-17T21:19:56Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":21}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-12T21:19:36Z","timestamp":1762982376,"ip_dst":{"addr":"74.125.250.129","port":19302,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.15","port":32941,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)","source":"{\"timestamp\":\"2025-11-12T21:19:36.326445+0000\",\"flow_id\":798314059070253,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.15\",\"src_port\":32941,\"dest_ip\":\"74.125.250.129\",\"dest_port\":19302,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2033078,\"rev\":4,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2021_06_03\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_28\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-11-12T21:19:36.326445+0000\"}}"}],"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"handymanthemepumpkin.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"handymanthemepumpkin.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"handymanthemepumpkin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"compiledonatevanity.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"compiledonatevanity.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"premiumvertising.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"www.premiumvertising.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"kettledroopingcontinuation.com","ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2024-09-01","domain_rank":196057,"first_seen":"2025-07-30T15:18:19.355595Z","last_seen":"2025-11-10T00:58:47.710465Z","alert_count":72,"request_count":18,"received_data":43677,"sent_data":24296,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"c.adsco.re","ip":{"addr":"104.16.42.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-02-14","domain_rank":100769,"first_seen":"2017-11-29T18:42:15Z","last_seen":"2025-11-10T10:42:07.658842Z","alert_count":0,"request_count":1,"received_data":65153,"sent_data":510,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.251.38.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2025-11-09T22:13:25.255249Z","alert_count":0,"request_count":4,"received_data":92398,"sent_data":2592,"comment":"","tags":null,"fingerprints":null},{"fqdn":"compiledonatevanity.com","ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2023-06-18","domain_rank":813747,"first_seen":"2023-06-18T10:22:46Z","last_seen":"2025-11-09T16:40:33.060607Z","alert_count":8,"request_count":4,"received_data":284803,"sent_data":1812,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"r03obcy2avtm.l4.adsco.re","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2017-02-14","domain_rank":0,"first_seen":"2025-11-12T21:19:59.864295Z","last_seen":"2025-11-12T21:19:59.864296Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":438,"comment":"","tags":null,"fingerprints":null},{"fqdn":"r03obcy2avtm.s4.adsco.re","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2017-02-14","domain_rank":0,"first_seen":"2025-11-12T21:19:59.834355Z","last_seen":"2025-11-12T21:19:59.834355Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":438,"comment":"","tags":null,"fingerprints":null},{"fqdn":"r03obcy2avtm.n4.adsco.re","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2017-02-14","domain_rank":0,"first_seen":"2025-11-12T21:19:59.839344Z","last_seen":"2025-11-12T21:19:59.839344Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":438,"comment":"","tags":null,"fingerprints":null},{"fqdn":"premiumvertising.com","ip":{"addr":"162.252.214.11","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"domain_registered":"2020-04-18","domain_rank":64798,"first_seen":"2020-04-19T20:30:46Z","last_seen":"2025-11-12T01:23:20.772921Z","alert_count":1,"request_count":1,"received_data":258,"sent_data":1731,"comment":"","tags":null,"fingerprints":null},{"fqdn":"secure.gravatar.com","ip":{"addr":"192.0.73.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"2004-07-15","domain_rank":16323,"first_seen":"2012-05-22T05:36:38Z","last_seen":"2025-11-09T23:35:41.121207Z","alert_count":0,"request_count":3,"received_data":5220,"sent_data":1536,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"6.adsco.re","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2017-02-14","domain_rank":91627,"first_seen":"2018-01-15T04:15:29Z","last_seen":"2025-11-07T01:19:59.965772Z","alert_count":0,"request_count":2,"received_data":0,"sent_data":853,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.storageimagedisplay.com","ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2024-09-13","domain_rank":170153,"first_seen":"2024-09-13T12:56:32Z","last_seen":"2025-11-09T23:02:13.867301Z","alert_count":0,"request_count":2,"received_data":135291,"sent_data":977,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"4.adsco.re","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2017-02-14","domain_rank":95532,"first_seen":"2021-01-04T16:47:52Z","last_seen":"2025-11-07T07:25:07.891766Z","alert_count":0,"request_count":2,"received_data":0,"sent_data":853,"comment":"","tags":null,"fingerprints":null},{"fqdn":"weirdopt.com","ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-07-01","domain_rank":37519,"first_seen":"2025-07-08T12:55:47.272157Z","last_seen":"2025-11-12T13:47:59.819291Z","alert_count":2,"request_count":1,"received_data":377,"sent_data":416,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-11-09T22:13:41.73664Z","alert_count":0,"request_count":1,"received_data":432927,"sent_data":434,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"static.cloudflareinsights.com","ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-08-30","domain_rank":4073,"first_seen":"2019-09-24T14:34:56Z","last_seen":"2025-11-09T22:14:45.838019Z","alert_count":0,"request_count":1,"received_data":20344,"sent_data":504,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"flushpersist.com","ip":{"addr":"172.240.127.243","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2025-07-01","domain_rank":23810,"first_seen":"2025-07-08T10:43:12.76905Z","last_seen":"2025-11-12T02:09:22.444542Z","alert_count":4,"request_count":2,"received_data":1060,"sent_data":1530,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"professionaltrafficmonitor.com","ip":{"addr":"52.59.96.77","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2025-01-23","domain_rank":16376,"first_seen":"2025-01-25T08:56:07.448138Z","last_seen":"2025-11-09T22:50:08.036512Z","alert_count":0,"request_count":6,"received_data":2036,"sent_data":2926,"comment":"","tags":null,"fingerprints":null},{"fqdn":"creative-sb1.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-07-01","domain_rank":22211,"first_seen":"2025-08-08T09:32:32.509707Z","last_seen":"2025-11-10T07:43:18.490589Z","alert_count":16,"request_count":8,"received_data":273071,"sent_data":3656,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-11-09T22:13:15.598397Z","alert_count":0,"request_count":3,"received_data":98104,"sent_data":1621,"comment":"","tags":null,"fingerprints":null},{"fqdn":"preferencenail.com","ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-07-01","domain_rank":20606,"first_seen":"2025-07-08T12:55:47.271261Z","last_seen":"2025-11-12T07:12:12.984128Z","alert_count":6,"request_count":2,"received_data":171926,"sent_data":822,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"adsco.re","ip":{"addr":"162.252.214.5","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"domain_registered":"2017-02-14","domain_rank":3069,"first_seen":"2017-04-03T03:11:30Z","last_seen":"2025-11-11T15:50:52.368438Z","alert_count":0,"request_count":1,"received_data":1768,"sent_data":486,"comment":"","tags":null,"fingerprints":null},{"fqdn":"switchroms.io","ip":{"addr":"104.21.8.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-06-30","domain_rank":900326,"first_seen":"2025-05-28T10:03:17.369808Z","last_seen":"2025-11-09T18:43:52.46585Z","alert_count":0,"request_count":30,"received_data":1585346,"sent_data":17333,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Gravatar","description":"Gravatar is a service for providing globally unique avatars.","website":"https://gravatar.com","common_platform_enumeration":"","icon":"Gravatar.png","categories":["Miscellaneous"]},{"name":"Akismet","description":"Akismet is a service that filters spam from comments, trackbacks, and contact form messages.","website":"https://akismet.com","common_platform_enumeration":"","icon":"Akismet.png","categories":["WordPress plugins"]},{"name":"Google AdSense","description":"Google AdSense is a program run by Google through which website publishers serve advertisements that are targeted to the site content and audience.","website":"https://www.google.com/adsense/start/","common_platform_enumeration":"","icon":"Google AdSense.svg","categories":["Advertising"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"WordPress:6.8.3","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"ShareThis","description":"ShareThis provides free engagement and growth tools (e.g., share buttons, follow buttons, and reaction buttons) for site owners.","website":"https://sharethis.com","common_platform_enumeration":"","icon":"ShareThis.png","categories":["Widgets"]},{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"www.gstatic.com","ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2025-11-09T22:17:44.096454Z","alert_count":0,"request_count":7,"received_data":3499664,"sent_data":3342,"comment":"","tags":null,"fingerprints":null},{"fqdn":"handymanthemepumpkin.com","ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2025-10-23","domain_rank":0,"first_seen":"2025-11-12T09:00:57.799434Z","last_seen":"2025-11-12T09:00:57.799434Z","alert_count":15,"request_count":5,"received_data":18034,"sent_data":4967,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.show-sb.com","ip":{"addr":"172.67.170.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-08-20","domain_rank":187612,"first_seen":"2024-08-31T03:46:04Z","last_seen":"2025-11-10T07:43:18.574464Z","alert_count":1,"request_count":1,"received_data":2964,"sent_data":480,"comment":"","tags":null,"fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-11-09T22:13:15.523411Z","alert_count":0,"request_count":1,"received_data":17441,"sent_data":430,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.premiumvertising.com","ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"domain_registered":"2020-04-18","domain_rank":874532,"first_seen":"2020-04-18T19:54:24Z","last_seen":"2025-11-12T01:23:19.768548Z","alert_count":1,"request_count":1,"received_data":42500,"sent_data":452,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-12T21:19:36Z","timestamp":1762982376,"ip_dst":{"addr":"74.125.250.129","port":19302,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.15","port":32941,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)","source":"{\"timestamp\":\"2025-11-12T21:19:36.326445+0000\",\"flow_id\":798314059070253,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.15\",\"src_port\":32941,\"dest_ip\":\"74.125.250.129\",\"dest_port\":19302,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2033078,\"rev\":4,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2021_06_03\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_28\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-11-12T21:19:36.326445+0000\"}}"}]}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"104.21.8.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3920be68cccbf5a1ba2267498e2f5018","sha1":"465f4091d0e55ef0d36a164053e4484da0343f21","sha256":"e0231b1dbfb2e4f7e4ca2310b137673e0d76410976c2512951bef16f380d7b37","sha512":"6e93cafd885d9874a38a21e23e996bcb7ec99f184abb5369b2830be05841e360e0062106261d7d97f8bddc5c17c7b3b1c7d8986d6a19b5b5301bbc582a99a67a","ssdeep":"","tlshash":"4a01963c2c00f829328979744177d915f8564a6a8a8460a5b8ef85c05b65c872946329","size":844,"data":"","first_seen":"2025-04-14T02:23:47.161532Z","last_seen":"2026-01-26T03:36:30.117493Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"46a6fef91632b94d14252fe324c1585f","sha1":"387cebbd261b8fe947fe9805875300f2ceeb5cfd","sha256":"36d0c771f8bf310d740cb4d0ca144354c45df284e72361660448708d72f175d5","sha512":"a3aaa1b5ab1113a12793bd1085332eb257416aaa9c4a690525838b91453a281580a979bfb856b3c429c2d4243c3ce02bd318a4b7048124eef96912179836d0fd","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRL:nPncLBSUBULGVTfGpucE5fox","tlshash":"528395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","size":85386,"data":"","first_seen":"2025-07-08T10:38:39.799377Z","last_seen":"2025-11-18T17:01:51.014373Z","times_seen":15230,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"104.21.8.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"41310478a380eaf7e07dbad9b4f81a97","sha1":"1714b6ef86e90b5b23e2aaa1e7728ed9c59f4d34","sha256":"848e5342d9196c0f64861ab926a3c5aecce9294750febbd22e5d8df859bdb144","sha512":"7b93f330547524ce01b8f888a8d56c19cd4432fbee43db16aab33fc1aecd77243762c5e7dd5ce767e38c0fdf9d58bc629caf106d77689c1ef90ebeb09406580e","ssdeep":"","tlshash":"d37000000000000b203c00020a023a003003003000880800820808302ae800b802c0a0","size":23,"data":"","first_seen":"2024-02-12T20:00:21Z","last_seen":"2026-03-06T11:55:01.500018Z","times_seen":19951,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"104.21.8.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6b61c548624e1738b78d4c50791e9ded","sha1":"e62f20b33b2a16d8e860290aa51f23a5819ba606","sha256":"2f72330defdb74aa334cc705b586e2653684f08e4c4385ff265cb8de99107f90","sha512":"d4dc8659d640960167b668072108b87504d5821a87029791e72bf8d6bb9d9c0b877e6d83239e788bff0b3ab466811eaabb6f3af24c31b1b513571a359e0d67f2","ssdeep":"","tlshash":"bdc02bcc230e8cb182fb2b400f3fb504f00932009c921c320d016b0da170e5bef44830","size":159,"data":"","first_seen":"2024-08-22T17:21:44.376316Z","last_seen":"2026-01-26T03:36:30.119534Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"104.21.8.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"be6b25353280fac3960e70c9dcb6804f","sha1":"46c69609a3bb697e60644b18dc85d780c44804ea","sha256":"38be2b1c1c886666cd4ac85d71bb8b65e51d95c7c5f40b0c575f7d196a0442cd","sha512":"cfb553df29882616e097d28e643208df6aae0e005e63b7e7d9310a731135e9e33407ec268f12699208db7dd4fe2e8ba8a49de900e8b0a1a4bd83bd522f2ee953","ssdeep":"","tlshash":"10700008e08020a308380002028223222a0c282080822020002b0280288228baa88a80","size":24,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-03-06T11:55:01.486771Z","times_seen":22174,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"104.21.8.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9aa3dc35f8ba994aa0f04a42c4da5062","sha1":"a65df79b7b70e8b8d22a2db929f6598428a827e0","sha256":"89e4c05e12e12f5bdf85a4fb89bad572dd85256091add09fdb9c6e42e703e2bb","sha512":"72ec1d5aaa34463f798b2d2c5976a6221f70e51ea2afff582319f4c8b7e31f4a67ef2a2d39427b4d1cc89ca66c4d4374db662c1137380ce0aad2acfcdbed4d6c","ssdeep":"","tlshash":"ec7000080000a0308808a002882ca3803c20a820b022a008080823080000a020008e0e","size":24,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-03-06T11:55:01.493594Z","times_seen":23251,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/wp-content/plugins/kk-star-ratings/src/core/public/js/kk-star-ratings.min.js?ver=5.4.10.2","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"104.21.8.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f5e63bd61d061e63482b1d4df3768ee4","sha1":"91df0bce4537e6b65fe380f4f6db9ed9dbe95a41","sha256":"acdebf935ded5cb063dcca7c46be5bbc503af5e76e295f6d0b7093c4514ed256","sha512":"ea99e35812f3abac9b598aed7b608f8a78b342d04922fcdc775390e87fa238891728f7bfd6b8e210580fdd332786fb7fde91f0f10bacaed872bb00610e315a6e","ssdeep":"","tlshash":"8c2175dc7a0878354fcbb2b8a26f968d72751326754b4809122df4919dfdfa80322f4c","size":1359,"data":"","first_seen":"2023-03-07T01:02:48Z","last_seen":"2026-04-04T11:21:52.634626Z","times_seen":2180,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"104.21.8.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"b7d8a1a33a77fcd0328d3c709c5a9eb3","sha1":"e8ea90d66488aae87f231079141b02b04cc26f05","sha256":"3f06772f212125287a824492bf133d5fc6ef851b8478c081406f650716869cde","sha512":"b92d0879e95318270c892770db71380d6f66efbeb8e4c9a8155e82b09e66a0a90844a4d0e38ede9b6bd536d8926ab4359e3bcc5266594f04136fa66295bbc9c1","ssdeep":"","tlshash":"f37000082080000200200002020222003202203080c82002a2000a3020ea08b8020080","size":20,"data":"","first_seen":"2023-03-07T16:36:56Z","last_seen":"2026-03-06T11:55:01.489296Z","times_seen":4296,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"104.21.8.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"7145e6d4dd187b573a13f0240103f6f0","sha1":"f8e7ff7fd488f675f418011ef8ecca4a822933b5","sha256":"02665a4c106fc96e71ef5a17511cf353ec3f5cccb82ec9fce719b23967728897","sha512":"8fb980002683780ece97cb8cc6679fb9c8c97f543b927fe1efbf4073887176b68be02fd0ffbbc4bec0ebce401d04132fe4d1ab1edab9d006be9493f77bcfc736","ssdeep":"","tlshash":"0d700020000082000b2000032f83b280300a033000c8000002028f32a8e802fc020080","size":25,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-03-06T11:55:01.482966Z","times_seen":21540,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lf5HEcrAAAAAC9S0Htng-O8awd5XURMd7HB57jb\u0026co=aHR0cHM6Ly9zd2l0Y2hyb21zLmlvOjQ0Mw..\u0026hl=en\u0026v=naPR4A6FAh-yZLuCX253WaZq\u0026theme=light\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=2w0fub742pck","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.38.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"2866a4e8d4af72441ef4584cb1c14632","sha1":"0c9227095d8f3d7f4ebe3f818c60385bfabd666e","sha256":"67ffde88cafb7c24b3d5d8e1fe9380adf3dc3a26eacdcf158a19cbcea14d25df","sha512":"b041ac772499feb644d5ca82931bda5398ebedcacd1e9731b769f8bd753c7d1675dbed27149a359e59c09d69f39e82b59d6f979e9ee97c24e6ace384df693ff6","ssdeep":"","tlshash":"2a7000382c0c200822e23028000b8088c0a2000002820800000020880c32c0a0022c08","size":22,"data":"","first_seen":"2025-11-06T10:48:15.580941Z","last_seen":"2025-11-15T07:59:32.681083Z","times_seen":3226,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"bfd2a9b751a51d88c78d186a9224ad0b","sha1":"d86f4327918df8841b88a72725b388435de0cf9d","sha256":"510774d40fe649f6d899f97cd0d81d8bbd03ecc7fc99b4f515c6319047e3514e","sha512":"46a497f29ff44959959a7b385e896bbd896b95e534e0be2b211b1ef30ae51220735003a68fa1693fd0c594022fc7d87f15f72b17c7b23f3116d0c94bcd5b32e6","ssdeep":"","tlshash":"45c04c859b122825f63b348dba6a13c0a8c146477b32652d21448484b08687740de674","size":145,"data":"","first_seen":"2025-11-11T13:51:33.716778Z","last_seen":"2026-01-26T03:36:30.126114Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/notifications/utility/default/robot/3/js/jquery.min.js","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6326c600df01e3bfb9b40e1aa08176f8","sha1":"6b4fb754d29b297b539bf62ba9b4eaf0f33f314a","sha256":"df34524351c5fabc921a89183b5da5667aebd7b9e9a1c52255c76ff722935ea3","sha512":"641aaeecb9b89bcc319cabfef18f76faa9b1ba79f9de30c6d07f22d385fc78ac3f11a718fe9ec96f8a13d82e3dff4ca34944ccb449a4ef8e378ad65dfad581c0","ssdeep":"1536:oP10iSi65U/dXXeyhzeBuG+HYE0mdDuJO1z6Oy4sh3J1x72BjmN7TwpDKba98Hri:f+41hJiz6fhdlTqya98Hri","tlshash":"eb83d6d9b2c67062977734b851bf510bb17a98dab40c8c60f0a4d8e47eb4a8d517bf2c","size":84384,"data":"","first_seen":"2023-03-07T01:10:11Z","last_seen":"2026-04-04T13:36:49.343204Z","times_seen":10382,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/wp-content/plugins/wpdiscuz/assets/js/wpdiscuz-combo.min.js?ver=99997.6.25","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"104.21.8.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"47564d6b0967215a3e5af197eacb31d5","sha1":"3984e3241bc4db06d706601907cc0ae4a89a94e6","sha256":"76deb53f24708eada7fcf03f5eacf23be94b9be5a15a20922b2d833b63c451b7","sha512":"0025b413a213a5a1453106db426b0b02b5ffe498e39749ebda8d66369b2ec9a5f7f6137ba960b9f6483944dab0266ea0acbb8948eab1823030db034b2a9f8f23","ssdeep":"3072:Iv/JOJWTVh9YxSd7Z5UzhKMTBOimO8z4BHaj0ANLme:a/JT79Ygf5QT0imO8z4afNLme","tlshash":"9e64f7987291b4b212f761b5006f120bf376ad79e00a9494e2a9d8f05ebcd4e2177f3d","size":315993,"data":"","first_seen":"2024-10-17T20:45:35.352253Z","last_seen":"2026-02-24T14:12:17.635339Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"104.21.8.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3f895b6bcc854afa2364b3925263af2e","sha1":"b91af8922add122d1a58e0c74594764280ae95e7","sha256":"c10d33d52070074fe9e14c95a8a29f62ec8b44cc3dd2897c33d7ef351e731666","sha512":"e362e4082c126151419437d426033e353a26f46e559ed563f3c2b9547cb8ac7517891c6268e117f177861f33d2c53be7b8e9c7b25373d5d77bb185bd2a729e0a","ssdeep":"","tlshash":"1f61bade3775348b32b604d16a2f0e07fb7258361688d034cab6a7541cb1467d37ad5a","size":3384,"data":"","first_seen":"2025-10-14T21:42:56.79067Z","last_seen":"2025-11-12T21:20:09.08708Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"e4335b507d48cb50389dd12a2906335c","sha1":"8ef130f3a812977e87100f93f1758869e8550f22","sha256":"453113ebc43677d331c26505d578783f216e33dd948f4499ed780b9714740a40","sha512":"a3fcaebd3c90588b3b34cc01707824f9735294358e2bcffe0ce5c26ef7c7210fbcf47a0a8a7765f0b8260c1153058acd6fa2bea2f6e80ed0081e39ffd55c93d4","ssdeep":"96:xsoz+jT2GP0iYOloLGavk/yGP0iYOloLGA1jD62KCfMEDaH:xlzEsOloLRvkcOloLrv62KCkCaH","tlshash":"689109791d56601c66abb0af2a771381bd70432766a1c844fc8cd3418f54b944efae5a","size":4605,"data":"","first_seen":"2025-11-12T21:20:09.087822Z","last_seen":"2025-11-12T21:20:09.087822Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/naPR4A6FAh-yZLuCX253WaZq/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"63c498d57127fe483df232908f0fd8ca","sha1":"62e1b46be1af5f4e082e3199a7a400ae2aef0fc0","sha256":"d4883381009ff8e5c4b05722f62b60f6182b1d2a0631d12fe4075026bac1929f","sha512":"a68902be5fbb3091d71f5d720304f0ce8b516086fb0f820857faa0a2be3e405dba2184fe2ce6f76c4ceba6e541e278e1faffef01407a27dff2da69cbf65bac15","ssdeep":"12288:CY5y6bdmo2rT27K082gMSon+wt/puh2MCaxj80OQDj3Fc:r5yCdcX8K0BgMwwjuI6LOKVc","tlshash":"61053ade745176a18323b5f9502750ad973ead2ac44c089db1a4c8f02ef9809b4b6ff7","size":831371,"data":"","first_seen":"2025-11-04T19:51:16.53192Z","last_seen":"2025-12-20T15:18:51.762291Z","times_seen":17838,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/1e/e3/36/1ee3363d3f6736b5616821dca2afa5c7.js","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"26ce7791f08fb671816e8ac15c21abcc","sha1":"cd121446322214f9ee849fadd1686452f9acf3a9","sha256":"e039e804b7483aec11801d7a306db1603f9c6d5f562340f9a5dbeda753c0224d","sha512":"01af678dd36e5bcfaf95c43fee3d7ac605299c1aca9187b5b330dffac03c16910e373e8ccb57e00c66810daff06b475d561370c05abe8a3beb00f5f9f950c409","ssdeep":"96:PKheeIZELV3rtYwDxXvH9VLgjY6oB/rCKTQ3l35AcOrzYdOtkiz9u5Z4tTpfn7:Pbj6VbjxXvw8zTCKTvlSQpfn7","tlshash":"b9d185883e81f0d513a3b5779a3f6549b3ad6814549fd804e107a0d03e2ce2ae97b6a5","size":6461,"data":"","first_seen":"2025-10-22T08:34:06.793976Z","last_seen":"2025-12-01T10:40:04.095127Z","times_seen":3160,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"46a6fef91632b94d14252fe324c1585f","sha1":"387cebbd261b8fe947fe9805875300f2ceeb5cfd","sha256":"36d0c771f8bf310d740cb4d0ca144354c45df284e72361660448708d72f175d5","sha512":"a3aaa1b5ab1113a12793bd1085332eb257416aaa9c4a690525838b91453a281580a979bfb856b3c429c2d4243c3ce02bd318a4b7048124eef96912179836d0fd","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRL:nPncLBSUBULGVTfGpucE5fox","tlshash":"528395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","size":85386,"data":"","first_seen":"2025-07-08T10:38:39.799377Z","last_seen":"2025-11-18T17:01:51.014373Z","times_seen":15230,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lf5HEcrAAAAAC9S0Htng-O8awd5XURMd7HB57jb\u0026co=aHR0cHM6Ly9zd2l0Y2hyb21zLmlvOjQ0Mw..\u0026hl=en\u0026v=naPR4A6FAh-yZLuCX253WaZq\u0026theme=light\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=2w0fub742pck","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.38.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"45ecf7458f42da80ac248ad42d610372","sha1":"a5b3edf8328769bc754e6e616a957ceed4fdadd7","sha256":"75867e75b209895995014b43c3d711476e3437481e5fbec91a4da674302558bf","sha512":"e269e258cee29ed9ac04510c30517ebd77aa78e9c79b5736e5761bcbd372e38ab00a8092e2d391baf681eb4602dfb9a4ae1650628967735d94695b3d28aa4502","ssdeep":"","tlshash":"fba002f31935c4218ea2c5509953fb88e593611dfd45c1d470254edea3e19d3c100990","size":69,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-04-04T13:49:45.724096Z","times_seen":388515,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"792d8b5323bc0907ddc06b71a1e1430b","sha1":"ad941bd3e96df2bce13b21bd1651be30ba548254","sha256":"40d6c253282bfdbd9507f780dbdb3a2425ddda5ea2bafe607e66dde03c15c185","sha512":"52a9a5869b7ae92f946710f9b0ad4c8770af4587611f21595f05a543d1acc84af94cf7a1bfdafaeab95bb0acb46f06636a76d6d82f2dfa9dd391337570d45382","ssdeep":"192:e97LlcrcYmJrJsVan1oJJpvOHMk0Tw3f5czhGEhN70oz0EhnA3YED8iDehT6J:e97LVFsVanyYH4TARCN7DRW3YEPb","tlshash":"3e52610418bedd64c548a12e307e6666f72809539c76bbd8bb8a4104afce82f797513f","size":14323,"data":"","first_seen":"2025-07-13T20:24:48.809917Z","last_seen":"2025-11-12T21:20:09.08928Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"104.21.8.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"64ea5d34b829463bf0f42612661955d7","sha1":"ab4a149f07fe7b4949993ae98123b2260bb846a7","sha256":"e6177128edb0a517823a57532a33444303cb4d7f46a57bab285ff257af6ab376","sha512":"6ba09c598b1d57cf52d220809f86779e44f09a90c423d5b11affea9ce8e272c6bed39e07fcad1bb43fe1de66ab871e8f4b40b1938cb8c5e593e8e1cec3b43c16","ssdeep":"","tlshash":"00c04ce5860cb25d51a788592cbce381911dcd523a29143a25d05866429685690eb778","size":156,"data":"","first_seen":"2025-11-11T13:51:33.669268Z","last_seen":"2026-01-26T03:36:30.12333Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lf5HEcrAAAAAC9S0Htng-O8awd5XURMd7HB57jb\u0026co=aHR0cHM6Ly9zd2l0Y2hyb21zLmlvOjQ0Mw..\u0026hl=en\u0026v=naPR4A6FAh-yZLuCX253WaZq\u0026theme=light\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=2w0fub742pck","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.38.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"aaaed1f2fa2d95a8479beadbd2b6b2ac","sha1":"eae45921f2e4b00cd320305bb92f4bf3717105b8","sha256":"ec37b9644d403fd39b1eb3ecd015ac09662e53fb2a420126bb22a0e5f32d2c37","sha512":"382e1d604b58cb831ea109ed43dd158c7345d25b2a19f1af5b44723e51e3f7e05e207c48154d2a890fa867c961a55cb69f96beb3a48c425451c68a5d380cc74a","ssdeep":"","tlshash":"a07000382c0c200822e23028002b808880a2000002820800000020880c30c3a002ac08","size":22,"data":"","first_seen":"2025-11-06T10:48:15.57837Z","last_seen":"2025-11-15T07:59:32.726263Z","times_seen":3220,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"eabd7984b3d5ef4e84b116a4b8674dec","sha1":"72ae593587666f1626c7ad7610976b1cb9794c61","sha256":"9a6d9d186fd7927d5e31be7fc14e1c40dfc636f9432f55edff384bdb6d0b29ad","sha512":"aa7de16db5dafe451e6aef0ae92751a84a7462476f9cf667f777133cb2d2b210535c5952ed7dc0a64f752fe50fadb6a0b733897427ab8bf40a22c9da1edd5fa8","ssdeep":"","tlshash":"9c310a7c0206544d63e6f09e1e772196fd780335d5e2c4a4c8acc351c5d8701ab33d67","size":1554,"data":"","first_seen":"2025-11-12T21:20:09.091661Z","last_seen":"2025-11-12T21:20:09.091661Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"104.21.8.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-04-04T13:49:26.298459Z","times_seen":685383,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"compiledonatevanity.com/e7ceb8faaad184ecffaafa7e251bdb56/invoke.js","fqdn":"compiledonatevanity.com","domain":"compiledonatevanity.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"56cd1809cae25b4c8a66d1927e03f623","sha1":"db44c4609102025f2a2d266601b1c1b45e5f8b3d","sha256":"803b86d2c4754be37babef91f9ea71eb47c2a5d786629eb8e88b91d277206390","sha512":"36e018e2b897343bc8dde08a60673ae465500576b0f5f311a1f9ab4ec35d96b8c34492a2a0d1100f39e96e4d7c00b5bf5e5acf109217fdf4ed7e9186832938ae","ssdeep":"768:McMESJo4Q0ygG019lwTd+v8I6FtfPAJEOlhP45XYStbuG:YJJATdlzBViG","tlshash":"4c13b8ec7f45b2ad028b6823113f660af1399b1275cdd59cf192f1e82b9c758c93ae14","size":43296,"data":"","first_seen":"2025-11-12T21:20:09.048559Z","last_seen":"2025-11-12T21:20:09.048559Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/bframe?hl=en\u0026v=naPR4A6FAh-yZLuCX253WaZq\u0026k=6Lf5HEcrAAAAAC9S0Htng-O8awd5XURMd7HB57jb\u0026bft=0dAFcWeA7Ytr6bxccRsCSLh7wjkDlieYUJHjtEKA0FjZv6sKynNSvsORAuSiyNmvci4HyU11NpLYzlYaAaURfu5gFpakPlnJlbHg","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.38.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"45ecf7458f42da80ac248ad42d610372","sha1":"a5b3edf8328769bc754e6e616a957ceed4fdadd7","sha256":"75867e75b209895995014b43c3d711476e3437481e5fbec91a4da674302558bf","sha512":"e269e258cee29ed9ac04510c30517ebd77aa78e9c79b5736e5761bcbd372e38ab00a8092e2d391baf681eb4602dfb9a4ae1650628967735d94695b3d28aa4502","ssdeep":"","tlshash":"fba002f31935c4218ea2c5509953fb88e593611dfd45c1d470254edea3e19d3c100990","size":69,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-04-04T13:49:45.724096Z","times_seen":388515,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"104.21.8.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a9c0a59037353401cb9804866fcc9d03","sha1":"e03c38166349d158bc289efd7a074ca99165d542","sha256":"a5cf3f9ae6b138a16068b8b5e9cb2535e66f310482230718878308d6e2a259f0","sha512":"9daf585fa9785bd1d39d18908ada9c04779dae29cfd215c840f35dfbb1fef3dcb7693eca94f44eed8bab653dd46d4a654f044527dbec969d9bfebc46d4b3ddca","ssdeep":"","tlshash":"5de068793baca0b8e99b21050e2d1748309810832206fa8578acd5660f28d6330fbbf4","size":380,"data":"","first_seen":"2023-03-07T01:19:26Z","last_seen":"2026-04-01T23:48:54.5143Z","times_seen":132,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.premiumvertising.com/yUPNG.min.css","fqdn":"www.premiumvertising.com","domain":"premiumvertising.com","tld":"com"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"34ae24702febd735848ee9ae82408e7e","sha1":"97be881dd8f169528ef3b0146b98da2a48c52607","sha256":"c4b6a8d277f1ebcf2c5ab309ab27528e2a9c4c3d2117f4317d0d65860cb1bdfe","sha512":"163703349a282797325c9678f00cf4ed727dd9a0b3ea386fbae8c1d23bad1621dee7cf16cabab05018c8a60bf70be2286394aee9499ea4937c9101e0170b3fc0","ssdeep":"768:bt9rqAYKKWZzFQ9JsQU+YDngZGihfzmMzhYrTsAysncCWcf5k5sigC0LCntlqofr:bbtZzFQ9JsTgZvfzmMzhYrTscpOZR","tlshash":"88132aaab286282601e742b9503eb317b23305167912d458fcb9cdf96e3dd85117b7fc","size":41949,"data":"","first_seen":"2025-11-09T18:43:58.545323Z","last_seen":"2025-11-12T21:20:09.061459Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js?onload=onloadCallback\u0026render=explicit\u0026ver=1.0.0","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.38.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7c1cbdc6ca3465947f7f1e2010e11d7f","sha1":"c400710f528ee27596d331caaaba903274ac13a5","sha256":"43384d5af364c5ec7dbb13435d1b651b0c4b38d6a65d679365267f65061ecd2d","sha512":"89033a47e086430af198ffcb626effde7b7c9853da056749ccf4629b935c4711f10471441187a1786b08c8f8c9c9328b73111653adeb93318da6dd8d93b56fcd","ssdeep":"","tlshash":"1f1120732a04e0390b721ae1e2fbcab1e492640db01c84d8a502dac41e6accbce04444","size":1076,"data":"","first_seen":"2025-11-04T19:51:16.544277Z","last_seen":"2025-11-13T21:15:06.32666Z","times_seen":286,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/wp-includes/js/comment-reply.min.js?ver=6.8.3","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"104.21.8.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e4a49df71f8b98c1d9f9d8fce74d89e8","sha1":"b95fcda0c8c26305ad94e80343d0cfca8a048a10","sha256":"9d4687a19cab8f7442a3bda40c45be4d10e42488e091ddd706c3caed83c3ee1f","sha512":"42cd5f854779886f24c43ed14617380110c946d1b430b454060c3b391de6fbae6d0ed8ab7cdd7cfdc9726b2d6142a4e01c4448e36088dfcee7fdd00b60909f89","ssdeep":"","tlshash":"5051a7d437c95d762a83b3395efe930271712709a50805608826c86931bcfea63b67fe","size":3026,"data":"","first_seen":"2024-11-13T06:33:24.856382Z","last_seen":"2026-04-04T13:49:26.309387Z","times_seen":56989,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"104.21.8.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d720eef71edef78b948a643d5712ec07","sha1":"ea5eb334bd6ddb0f04abafb700dc2ecb30070c76","sha256":"2daa1a91b2430e9867296c9cb26d1483785954a9bdd66f79b2c754bab7092cae","sha512":"63368ff1fef849df7f849af23bc2f24698893bd3d58300282427a76665b2d5c94f097d409f93173ad9c36944b4fffc2e37fa03a91f81e4e04f3737f9b73d2d6f","ssdeep":"","tlshash":"5f6000c00000c00c0000ccc3c00300c030000030c0cc3c0003003c3300cf00ccc00033","size":15,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-03-06T11:55:01.51255Z","times_seen":24260,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"104.21.8.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"fb440b8133f21c3e5d3e39624e7bda94","sha1":"1b46d8568f9bd8a2be944d6a61924a21ec0b6e4f","sha256":"a5e2bc908c3bd3196d273564d073484f9905d13817490eca5aa249e701139cdc","sha512":"f874692932aab2be754d763a3998c5cd3c654a5bcd78c5d839fe0ba506f9a9e563d3cecba0ca71a6b0db35ff94943f6fa8bb0292f10c1aeb7df2704ea6d85fbf","ssdeep":"","tlshash":"047000000000000820200802220322083822223002cc0002220a083022ea00b80282a0","size":20,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-04-04T11:33:28.15947Z","times_seen":24288,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"compiledonatevanity.com/0e/53/6f/0e536fb8895c74d7dcf7b58fe63dae08.js","fqdn":"compiledonatevanity.com","domain":"compiledonatevanity.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"35ea146c24ebc0c982e2fce651e34988","sha1":"d4ff6a25d548a1752bfdd2670daefc4d8eed3893","sha256":"cea37bbc19ccb3417a489af6cbc6dfea040c70be755fb8a6bab296b5418ef227","sha512":"3f18e8bded019b35541331cf0aba9650a489159c6cf2832f671e0a1b66377fd94d59fcc2c50a85598bc1e38b34661dbaf34521c9823018078fe7eefdcc9f72c4","ssdeep":"1536:fhic73s72DQsjQlZKEMO2N6BLFYQPcT41PXgKkGCWUMZL:fccxkN4O2N6BLFYQZZXgKsWUM9","tlshash":"8e83f8883f81b65812a2f133723f999ae1d95e451888d054e303a8dcbf7d71ce93af65","size":85038,"data":"","first_seen":"2025-11-12T21:20:09.068083Z","last_seen":"2025-11-12T21:20:09.068083Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/bframe?hl=en\u0026v=naPR4A6FAh-yZLuCX253WaZq\u0026k=6Lf5HEcrAAAAAC9S0Htng-O8awd5XURMd7HB57jb\u0026bft=0dAFcWeA7Ytr6bxccRsCSLh7wjkDlieYUJHjtEKA0FjZv6sKynNSvsORAuSiyNmvci4HyU11NpLYzlYaAaURfu5gFpakPlnJlbHg","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.38.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"8e2fc175a9b5b881aa6179d369f2f99e","sha1":"8415191a1d09d83bea7b67a9b549c6b851cd7e15","sha256":"539481aa1284a0d52740123b809f5c69bb564dda61edd27bf173961afaa918e5","sha512":"3f9fef47ceef2bc8cea5cc2ac22341b2b96a3b38886f36c4bfc7e461e7c5fcf2dc87e5a11b4d46a8046437d8a9edd0b0642bc1a8ef697111cd05b0ab955fe9e6","ssdeep":"","tlshash":"5fd0a963a2022ce70e12acb20822006e2c888823a0238bf07fcd7c44afa0e507900aa4","size":219,"data":"","first_seen":"2025-11-07T04:54:38.723842Z","last_seen":"2026-01-26T03:36:30.169422Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"104.21.8.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2a2781f9bb6302c2f96df0d1e96ef524","sha1":"796bb90146495848c0c479533c367edadb94f1a9","sha256":"1b60af0ce49d65e8b1006457c16883d60e53a0054bb157c57c3b03a82ee9964d","sha512":"7c1a1cfea1989a16c9dadbf97f8a1366ca416aea7ba2ef4f96c263e3cf02dc17f7bbb0fb3b61d4336c222fede676f3d177cbd48e76efc46230c1b61e92042f6a","ssdeep":"","tlshash":"cf900273f0c18c7e4031b14421793508b943011d8290502076450870973708ba5044c4","size":57,"data":"","first_seen":"2023-03-07T01:06:59Z","last_seen":"2026-04-04T13:42:16.842981Z","times_seen":26504,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"compiledonatevanity.com/0c/bd/60/0cbd60ae91020949f7db0f82252e5c98.js","fqdn":"compiledonatevanity.com","domain":"compiledonatevanity.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7c563e56d2aa5229344b3215adc5c09d","sha1":"f333be0d3a6a198abc42481f46c304fed53609d8","sha256":"4ad0b975eea57485448a6595bde0e2c47fd8c1c6e2e9554aa9e82475700811cd","sha512":"c41e122e17fc7e1de259619dc015ccd3caed242cf13271e6a2221195f41310799e6ef1867187820f5d0356e916e5a27a71793fcd43d9f69123b693706fa4494a","ssdeep":"1536:om9T0jLlKHI2HTXYao6R167ET/Dei89ZHf5nMJVbzs1oopLT:oRY3LKKJJej","tlshash":"87a3b6cc3f81f06d466a68b3123f800bf12e6d55908ce9dcf913e1e99eb8b5b9539524","size":106693,"data":"","first_seen":"2025-11-12T21:20:09.065499Z","last_seen":"2025-11-12T21:20:09.065499Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"104.21.8.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2a2781f9bb6302c2f96df0d1e96ef524","sha1":"796bb90146495848c0c479533c367edadb94f1a9","sha256":"1b60af0ce49d65e8b1006457c16883d60e53a0054bb157c57c3b03a82ee9964d","sha512":"7c1a1cfea1989a16c9dadbf97f8a1366ca416aea7ba2ef4f96c263e3cf02dc17f7bbb0fb3b61d4336c222fede676f3d177cbd48e76efc46230c1b61e92042f6a","ssdeep":"","tlshash":"cf900273f0c18c7e4031b14421793508b943011d8290502076450870973708ba5044c4","size":57,"data":"","first_seen":"2023-03-07T01:06:59Z","last_seen":"2026-04-04T13:42:16.842981Z","times_seen":26504,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"104.21.8.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2a2781f9bb6302c2f96df0d1e96ef524","sha1":"796bb90146495848c0c479533c367edadb94f1a9","sha256":"1b60af0ce49d65e8b1006457c16883d60e53a0054bb157c57c3b03a82ee9964d","sha512":"7c1a1cfea1989a16c9dadbf97f8a1366ca416aea7ba2ef4f96c263e3cf02dc17f7bbb0fb3b61d4336c222fede676f3d177cbd48e76efc46230c1b61e92042f6a","ssdeep":"","tlshash":"cf900273f0c18c7e4031b14421793508b943011d8290502076450870973708ba5044c4","size":57,"data":"","first_seen":"2023-03-07T01:06:59Z","last_seen":"2026-04-04T13:42:16.842981Z","times_seen":26504,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"104.21.8.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2a2781f9bb6302c2f96df0d1e96ef524","sha1":"796bb90146495848c0c479533c367edadb94f1a9","sha256":"1b60af0ce49d65e8b1006457c16883d60e53a0054bb157c57c3b03a82ee9964d","sha512":"7c1a1cfea1989a16c9dadbf97f8a1366ca416aea7ba2ef4f96c263e3cf02dc17f7bbb0fb3b61d4336c222fede676f3d177cbd48e76efc46230c1b61e92042f6a","ssdeep":"","tlshash":"cf900273f0c18c7e4031b14421793508b943011d8290502076450870973708ba5044c4","size":57,"data":"","first_seen":"2023-03-07T01:06:59Z","last_seen":"2026-04-04T13:42:16.842981Z","times_seen":26504,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"104.21.8.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2a2781f9bb6302c2f96df0d1e96ef524","sha1":"796bb90146495848c0c479533c367edadb94f1a9","sha256":"1b60af0ce49d65e8b1006457c16883d60e53a0054bb157c57c3b03a82ee9964d","sha512":"7c1a1cfea1989a16c9dadbf97f8a1366ca416aea7ba2ef4f96c263e3cf02dc17f7bbb0fb3b61d4336c222fede676f3d177cbd48e76efc46230c1b61e92042f6a","ssdeep":"","tlshash":"cf900273f0c18c7e4031b14421793508b943011d8290502076450870973708ba5044c4","size":57,"data":"","first_seen":"2023-03-07T01:06:59Z","last_seen":"2026-04-04T13:42:16.842981Z","times_seen":26504,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"104.21.8.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"fe99bbf2987d52a27e4d042d61264b5f","sha1":"96bb68de49d3a4146142cce3f02de1ccbf8d0bf6","sha256":"cfe90e4da6c1841088b25b3582dc78b887f3239cdfde633ff426703c6ed538f5","sha512":"9dd74689d8b3460b4da7557d2797047f31cfa1b8522959d152c08f1f48989897e15f026d9b254a7ef61b99b9b18fc002054f29a12a2e30554a68d7815c53f3dd","ssdeep":"","tlshash":"d570000a20a02022082a000082022200288c0082a80800380a008b003c008032222382","size":22,"data":"","first_seen":"2025-03-02T21:04:17.177505Z","last_seen":"2026-03-06T11:55:01.511158Z","times_seen":8483,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/wp-content/themes/switch/js/functions.js?ver=2.2","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"104.21.8.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6dbdd79c06f49fc8f20583d68f40f8b5","sha1":"f0e793d6e5e53075db965ebc9fe6cf792e6d9df4","sha256":"9d7b4f9d700ef7874dc31c9daf9717af4dba59a80138f732db5f8b100d6ee62c","sha512":"c3171f7672097511f09de055a7717f379e56873b4e24139fcd9c3af3d31fea985e314c7c7b76943ff8f8354378dd96a3211b67650b551df6d2e871adc4c5111c","ssdeep":"","tlshash":"065134dafb5da63b403b30b7073e40c03a3a9517e1456822b8a7d8683fc855523e2f6d","size":2689,"data":"","first_seen":"2024-08-22T17:21:44.346395Z","last_seen":"2026-01-26T03:36:30.074521Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"104.21.8.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2a2781f9bb6302c2f96df0d1e96ef524","sha1":"796bb90146495848c0c479533c367edadb94f1a9","sha256":"1b60af0ce49d65e8b1006457c16883d60e53a0054bb157c57c3b03a82ee9964d","sha512":"7c1a1cfea1989a16c9dadbf97f8a1366ca416aea7ba2ef4f96c263e3cf02dc17f7bbb0fb3b61d4336c222fede676f3d177cbd48e76efc46230c1b61e92042f6a","ssdeep":"","tlshash":"cf900273f0c18c7e4031b14421793508b943011d8290502076450870973708ba5044c4","size":57,"data":"","first_seen":"2023-03-07T01:06:59Z","last_seen":"2026-04-04T13:42:16.842981Z","times_seen":26504,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-YR6V7LMBP0","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"aa3ac701542f26bfbed8ba3bc87bc09f","sha1":"65691b2ba02f3b7f425a0455371a0aa9f5ca2fda","sha256":"619e13c8b07a7b4d232ca1d3f66648296b302c776451f6bab66ff7f69f965f56","sha512":"a3f4a9f8e9fbdececcea47458ce2eb6a9129dd53326b07d775f4f4f3845252d8ff7fc92effa87c880e9925cab7adbcaddd46c1823abcc37506ebec00f4e65716","ssdeep":"6144:tJio7CyGOsjtxj31PC2sUOJdR+rVmIQZOBZDTQ3kLQz:j97ZGOytV1PjsmQZOH8","tlshash":"019419ce73d674265396f478502f018ba57b28a2b44cc896f1c9cde02e74a9a4277f7c","size":432323,"data":"","first_seen":"2025-11-12T21:20:09.076319Z","last_seen":"2025-11-12T21:20:09.076319Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lf5HEcrAAAAAC9S0Htng-O8awd5XURMd7HB57jb\u0026co=aHR0cHM6Ly9zd2l0Y2hyb21zLmlvOjQ0Mw..\u0026hl=en\u0026v=naPR4A6FAh-yZLuCX253WaZq\u0026theme=light\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=2w0fub742pck","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.38.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d13d78519c8c44c0f64f45d7909818ce","sha1":"9a1a0f2d52081a73a3c7841d888898c466ca8204","sha256":"f07a01d0cd540610dc03b47a780bd96ae198dd446d0ea771b4661f2e168679a1","sha512":"1acacf1ee5496963b964edf61fa51054bfadbbfeef7bd085e09260533afdb8e88be5cfb95a27b2513d2c6ca57c196e025f55678a902d874fb1102e04edb37431","ssdeep":"","tlshash":"daa0025a5dbe6c08341e2966407a61451d7510e8dfd9ce88464dc5681f3124e0253a9f","size":64,"data":"","first_seen":"2025-11-06T10:48:15.577624Z","last_seen":"2025-11-15T07:59:32.682933Z","times_seen":3226,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"4ce365ab12071b7d0cb196070539ece1","sha1":"47476690729d9e35bba3aeae547c0b12fd5a9fb0","sha256":"79e5acb63a7b341f717d9a82874eae85cd836a82adee7dd3f7f1f83f22b4d521","sha512":"97e9255774bc5db84a000196f4098685900ba5b7a339d9b7d3b3f1e20470941e638667b11da47d535cba3953912833973cb3ce09354ed784f35c72246df2b6f4","ssdeep":"","tlshash":"be310b39111735059afff0bb256b23d1fd78433216d084d48c54c3815458bda5a7bd0b","size":1818,"data":"","first_seen":"2025-11-12T21:20:09.096567Z","last_seen":"2025-11-12T21:20:09.096567Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"compiledonatevanity.com/5e7f0ff89b6ddd7a4976e11a2feacc81/invoke.js","fqdn":"compiledonatevanity.com","domain":"compiledonatevanity.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"60a7dc104e009064556ab8c8e864d8ff","sha1":"1fff36d86a67782eed85b96ceb2f0539c94b2fc7","sha256":"9f8984428f242035b0132f9979573f597262f37160a6bf027fbb17582171b531","sha512":"a99be2dc5b8112ca44997d9481f3a59156c39597267953b0ed6fc6c7ff7830ae5d068e6f7819b0f27b79dc92f136c2ebbca404fd95f8159ae5d461bcf29939bb","ssdeep":"768:+95/C6gfHBHuf0gCjEqeJMtQIHKmt2FOoS2TN:WI6gfhHuf0geEqeMQIHKVcON","tlshash":"fa23f8883fa0f66b07727437226fd11ffa6acc019888cc5cc946d5e92f68b19e536b45","size":46380,"data":"","first_seen":"2025-11-11T13:51:33.572448Z","last_seen":"2025-11-12T21:20:09.054301Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"104.21.8.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"6a88d4bd5bd93656328a2f38b4378d0b","sha1":"d2afdc9b1693f0cf62ab6e88bbcf4e20fb62844e","sha256":"3b1758c84d9df642c22e7c547795bd40ff0a9610795e44c90109fa7f9b8016ab","sha512":"c64eb8517871a1b996d76fd0d9982a9726515a003cebbbdf1639067607e2f7697c97f79fc176802c7e560f325e3f39f40c9edecb49e7c1626b95ca0cb8349424","ssdeep":"","tlshash":"687000380a2000000230202200020002008282a0c0a2a8c0222a820002020200282002","size":21,"data":"","first_seen":"2023-03-07T12:58:03Z","last_seen":"2026-03-06T11:55:01.48721Z","times_seen":8444,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"104.21.8.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-04-04T13:49:26.30716Z","times_seen":638763,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"104.21.8.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"bd5f648f4fa75f28b17faffe66049687","sha1":"c9c2791b295684a919a2bfd7b7e2ef5aab3c178a","sha256":"1a4ba4a340b3f30596d32c1b272ddcfdbf3ccb8e89c2fa917ea60469017aeee4","sha512":"b5fb5df2a220f64f8fa7daae2a42e5682c5d17b9bae13cef72067688f1d85759fd46d8ca267458a27c6009707e5bbe131a1bea5f7ed5aa4704f694c87e019da9","ssdeep":"","tlshash":"00b012b7309574334c4630eb3a340244344091202c430724140cb9040608dc14a771c0","size":87,"data":"","first_seen":"2023-03-07T01:06:26Z","last_seen":"2026-04-04T13:55:29.233637Z","times_seen":23379,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lf5HEcrAAAAAC9S0Htng-O8awd5XURMd7HB57jb\u0026co=aHR0cHM6Ly9zd2l0Y2hyb21zLmlvOjQ0Mw..\u0026hl=en\u0026v=naPR4A6FAh-yZLuCX253WaZq\u0026theme=light\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=2w0fub742pck","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.38.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"1158d4363340eb9fa152ed317a79a71c","sha1":"fdb585928ce6413de6cf48906a640d8cbb69de30","sha256":"3b708bc2d1bfeff86f8a5366a041168d7744fc5dd8cbe29ff83e0dcadd0b177e","sha512":"6952e1e0cdc118669cb8de8e1201ffc8ce5c653840579f7dbad324fa4bc0bb0506c4a6fba4c9822ba3deb2edd4e46860b2150f29bc3bc79cb4bc74c318c186c0","ssdeep":"384:g6Slv/FWmm8l7vHp9hKhdYSn6Tplu9C4gWGYnaerNGfgydWgV/:Zevomtlz0dTn39vgEaerg4yd9","tlshash":"7182c6dcb693b4386162b4b1617f1149e9bb5955bc08681cf111c6e13e34b8a807ff6f","size":18978,"data":"","first_seen":"2025-11-06T10:48:15.565003Z","last_seen":"2025-11-15T07:59:32.675282Z","times_seen":3216,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"104.21.8.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3aac713f749c28a846ca71512f718efe","sha1":"2092afddd8bb589a2f7d064c042d9da48fec27c3","sha256":"4819226a6f302e8570bbe8027c0dc59ad0edb45705e83fe9791045692e8ffa6b","sha512":"d4c1f1d58c8f9000a6cd050dc66ab86932a98adab361e8580c961ca0ac63dd152214b09583d8897674a3b1af35c20735ae00cb9062815f3fa23df51977af9bba","ssdeep":"","tlshash":"f0b0126330967433484620eb7a340244344051282c030724140d79040608dc14b779c0","size":87,"data":"","first_seen":"2023-03-07T01:06:26Z","last_seen":"2026-04-04T08:43:54.496754Z","times_seen":4438,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.adsco.re/#0.9595887437309396","fqdn":"c.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"104.16.42.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"77c8287be10ff4b66a8490ca4d999917","sha1":"7fccb364c5e22958503bcd8b92cdb648d5c4c96e","sha256":"c2d43195d015b5856873b3b0c6e717ee21599ca3f03f820b7c325f27b9b6a31d","sha512":"2007ec2f0297a0479f4507af110911f7022310f757533ba1bbd40228d9b26908758bc09afa59f09471cdc254e49b84baa61f80514a010195d288f8049dface07","ssdeep":"","tlshash":"e3f050ddb475e1e955d22580bd2fbf407876526e240361e0d20cbcc1041868e871dbca","size":486,"data":"","first_seen":"2023-03-07T01:03:03Z","last_seen":"2026-01-09T03:52:32.475699Z","times_seen":6630,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"104.21.8.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"56460f5a9a96f5af2220fb52cb364dde","sha1":"faebff0baca9dad0c603e4a59ea39f9198ae9580","sha256":"9947632930ba8be74c2779d1944f15ec0151e8dd17d1ef54ab1617205bb7fda0","sha512":"cbc98d3aa9e54e0d4a9f7ce4993ff7449122bc3235fb26e4014698dd4ab955f91fab8af015a2b8de4808c49a1a81633868140a8d6100bb0ae0fb8eba2dbff2bf","ssdeep":"","tlshash":"87017b7ca1fc62240e2766e5ca8f9840f50a102361589477be8c42cc6fc59f471b3a3a","size":795,"data":"","first_seen":"2024-08-22T17:21:44.383594Z","last_seen":"2026-01-26T03:36:30.170426Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"104.21.8.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"8b5e8699c1b76c14c38283a27772a3e0","sha1":"8e39b41dbcb6877e9b189351a2c90908abdc7754","sha256":"cfab5312f1cfff1e8162225ab27453306ff627f512bcf18225c0a305ca093e1c","sha512":"66ffa0031cc22b4eec8867f36dcf3d887b021a11ea74f51c2a2eff1ec4cf9eeb44c4e1d5a6c197f29d66546c5f42ef283c54261f6157687237e4dabe1715523d","ssdeep":"","tlshash":"cb700000000228a200fe230e8e82230822282223a28820c820220a2820003232380880","size":25,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-03-06T11:55:01.508546Z","times_seen":22393,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/1b/50/e5/1b50e57a5911fd0a5b46962ab48ca22b.js","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"26ce7791f08fb671816e8ac15c21abcc","sha1":"cd121446322214f9ee849fadd1686452f9acf3a9","sha256":"e039e804b7483aec11801d7a306db1603f9c6d5f562340f9a5dbeda753c0224d","sha512":"01af678dd36e5bcfaf95c43fee3d7ac605299c1aca9187b5b330dffac03c16910e373e8ccb57e00c66810daff06b475d561370c05abe8a3beb00f5f9f950c409","ssdeep":"96:PKheeIZELV3rtYwDxXvH9VLgjY6oB/rCKTQ3l35AcOrzYdOtkiz9u5Z4tTpfn7:Pbj6VbjxXvw8zTCKTvlSQpfn7","tlshash":"b9d185883e81f0d513a3b5779a3f6549b3ad6814549fd804e107a0d03e2ce2ae97b6a5","size":6461,"data":"","first_seen":"2025-10-22T08:34:06.793976Z","last_seen":"2025-12-01T10:40:04.095127Z","times_seen":3160,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"104.21.8.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"879c12264b74d969b0314e9a9cd1f17d","sha1":"714a5d759f4d1b7d41f8c5526451aef114b33d41","sha256":"28be88d787b6e773eaf5d0818a6c62446ce628dd8ec0659c6f78410588838337","sha512":"3547b27de7764e655bc8749fd5c1166599da57d2a76057e66923476fda692917a9e537a934374c77f361359b9fe94d739bc037044bbcf2648feb43f7ff9f1c7f","ssdeep":"","tlshash":"f7700008e0a03032203a020a228222202a0c2020800000a0080a328028882832380880","size":22,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-03-06T11:55:01.507418Z","times_seen":21973,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lf5HEcrAAAAAC9S0Htng-O8awd5XURMd7HB57jb\u0026co=aHR0cHM6Ly9zd2l0Y2hyb21zLmlvOjQ0Mw..\u0026hl=en\u0026v=naPR4A6FAh-yZLuCX253WaZq\u0026theme=light\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=2w0fub742pck","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.38.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"b6652275f99ab557949fd76277214b9f","sha1":"618a00295998ea199984ff0b88defb5e69e2ef68","sha256":"ceff72123a0ec2971be9a054d2d123e00f74f1030a32c093bee975bf1a652103","sha512":"495f0f1ee6c5f87ae93e9b42d911385890f4538b6085460adcb6dbe96681b2fde02d94c9c8c8b739a0326ee7d0ee1a71d260dc858708dabc65abb37d83e958e4","ssdeep":"1536:7e6swV6iWKWJISBDbtF4BwH0zt6yAOgmmcBSFkWlwqlEATa6zdQ6iN:7eysFEztPfwEH","tlshash":"4b63bf37e34330aadf7f9b011bf196e9227e588a259205dc06bb04d60d799c66b7e1cc","size":71017,"data":"","first_seen":"2025-11-12T21:20:09.101662Z","last_seen":"2025-11-12T21:20:09.101662Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"javascriptURL","is_inline":false,"md5":"68934a3e9455fa72420237eb05902327","sha1":"7cb6efb98ba5972a9b5090dc2e517fe14d12cb04","sha256":"fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa","sha512":"719fa67eef49c4b2a2b83f0c62bddd88c106aaadb7e21ae057c8802b700e36f81fe3f144812d8b05d66dc663d908b25645e153262cf6d457aa34e684af9e328d","ssdeep":"","tlshash":"aa3000000000000c000000000000000000000000000000000000000030000000000000","size":5,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-04-04T13:41:38.728261Z","times_seen":66178,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"104.21.8.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b4eb5407987e3e78edfe40614b03957c","sha1":"f1485176698cd44bef758e43283df615314d9c12","sha256":"be35c36d0b30d579bcc8cc314c88609a615803197798c6ad8744f34eab85dde4","sha512":"36d11615593c7d6e6e700c6aafb3e48bb5fa7ba1b0ba5dfe1e39863841a6d2ef1c68753ed610743a72015a07ff425de629f458a159544e1045f859af3a27fbd4","ssdeep":"","tlshash":"4ac022883f002b2e0a022bc0382e23e2303a20b288b00c002fcf808002afec80e28802","size":137,"data":"","first_seen":"2025-11-12T21:20:09.103015Z","last_seen":"2025-11-12T21:20:09.103015Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"104.21.8.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"7545d1da7159ca66338b4c84b69f8ae4","sha1":"0858800340ee5b8c413a1aabc50fb28d0bdf89db","sha256":"7510742fba4d25113b6124987e97cba40776bc5030a6a3678974dc8ba075bf81","sha512":"dbd944acd2868ed6eb1de313c0efe7590f715129f7ca5a9ae5a3dfb9de0035612a248441d9e6c4c1812d8ec4b3de7cd2a5973c4c71887361a2276de1d73fab94","ssdeep":"","tlshash":"af8000088820202a20be0a0e02a3e232220e3022a0020220000f0280380020bb302880","size":26,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-03-06T11:55:01.488245Z","times_seen":22614,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"104.21.8.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"56a0a54e348fa6f2bb2eda916069d299","sha1":"bfd2ba5b26757fb0c68bf3dfaab620a8b237c9ab","sha256":"51d1f84c13bbfea5dd9daa3dcbff75bd7770f8e941bbde00e244926fd751541c","sha512":"cf1d9578fbeaa2a4702ad1653c4ce6bc5afaee0d577e4071d56b71c1ae3d0549750d2d36a6fddfcc8b8fc3cf5d4697f4527e05ca020f1948866b0b1478bc9cd0","ssdeep":"96:hnTbEd8fbAvRl6MYt73a6470uoEutBueshFbVjSiO1ux7Vc+BC3OIIeewEzu4EQ9:hn3EKAvRUrtOoEuHueshFb5SiOiVc+BN","tlshash":"42b1431b539a4c7b8ab393c478ce4a1336e813f576508719bc998d7c41dce1be71b268","size":5209,"data":"","first_seen":"2025-11-12T21:20:09.104273Z","last_seen":"2025-11-12T21:20:09.104273Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"104.21.8.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"676f8c02d840db32167b0c7c343b5949","sha1":"1ed8a80107a934595a9bcb9582c0c441fe482857","sha256":"7ac396b8db83c18144b9668cb2ffff44ba6ec6c44d5baaf40365462080b3caae","sha512":"8e7413467496f19670e041c2ef247d99e9db389165148d412e577301558dc67ea1ee4b12763c4670d686643a9c14572212a6f443d631322dbc6903860e0cc5f5","ssdeep":"","tlshash":"dce0866a45fd01026493ea74b85a02743638438f6c217b5cbb8cd6902f4e9bfa2f774d","size":422,"data":"","first_seen":"2023-08-26T22:44:48Z","last_seen":"2026-03-25T07:36:18.65895Z","times_seen":444,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"104.21.8.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"a97ae6bd4dc972c26de801f868a79d5c","sha1":"cf1a46aa575a9718f8d4154813a7892317e7f8bf","sha256":"51c1083130407a8772738aa2380eb5a583240a47d98f2204b124c06fd11aabd5","sha512":"f16b7e511db0f35f83e9380c46a6173de1ca6aebbcf4aec1be6efd8d0cb669fc9a07c4e7702149f0421425109c35a9cd041347677ccaed445c978296502e78a8","ssdeep":"","tlshash":"51600003030c0000c00000030c003000fc333c0c3c0c30000c0030000000f033cccf3c","size":17,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-04-04T11:33:28.123611Z","times_seen":20796,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/naPR4A6FAh-yZLuCX253WaZq/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"63c498d57127fe483df232908f0fd8ca","sha1":"62e1b46be1af5f4e082e3199a7a400ae2aef0fc0","sha256":"d4883381009ff8e5c4b05722f62b60f6182b1d2a0631d12fe4075026bac1929f","sha512":"a68902be5fbb3091d71f5d720304f0ce8b516086fb0f820857faa0a2be3e405dba2184fe2ce6f76c4ceba6e541e278e1faffef01407a27dff2da69cbf65bac15","ssdeep":"12288:CY5y6bdmo2rT27K082gMSon+wt/puh2MCaxj80OQDj3Fc:r5yCdcX8K0BgMwwjuI6LOKVc","tlshash":"61053ade745176a18323b5f9502750ad973ead2ac44c089db1a4c8f02ef9809b4b6ff7","size":831371,"data":"","first_seen":"2025-11-04T19:51:16.53192Z","last_seen":"2025-12-20T15:18:51.762291Z","times_seen":17838,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/naPR4A6FAh-yZLuCX253WaZq/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"63c498d57127fe483df232908f0fd8ca","sha1":"62e1b46be1af5f4e082e3199a7a400ae2aef0fc0","sha256":"d4883381009ff8e5c4b05722f62b60f6182b1d2a0631d12fe4075026bac1929f","sha512":"a68902be5fbb3091d71f5d720304f0ce8b516086fb0f820857faa0a2be3e405dba2184fe2ce6f76c4ceba6e541e278e1faffef01407a27dff2da69cbf65bac15","ssdeep":"12288:CY5y6bdmo2rT27K082gMSon+wt/puh2MCaxj80OQDj3Fc:r5yCdcX8K0BgMwwjuI6LOKVc","tlshash":"61053ade745176a18323b5f9502750ad973ead2ac44c089db1a4c8f02ef9809b4b6ff7","size":831371,"data":"","first_seen":"2025-11-04T19:51:16.53192Z","last_seen":"2025-12-20T15:18:51.762291Z","times_seen":17838,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.adsco.re/","fqdn":"c.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"be67f7bfdeebb9b49dc57458448542b3","sha1":"df24037d63ce5ccecc0d4481577f3b6d550440bf","sha256":"e3d31789f5b8e7e48f1cb8201d6916d9a63a17cdef0ff256cc18dc79d039af41","sha512":"1dde47cd09f11fddab7e8d674cc9a5f759fee79d854aa8feecad30f7c20121a632e3f899dfd5d11bdde452a51f8cafed880f4805adb72acbd222e47f940dd2be","ssdeep":"768:dsh5ttElWNi3nrqwAjbz2jaYmVcZXnEQwKz9USj2U3myQjR7n6SZARbfSkH12:Oyki3nRmV4Xxz9UfU3myQjR7nLZApfNQ","tlshash":"ab533cb97661203982b219be167f931170ba5a905d46c0f2d3bd89503c38f9b533bf9e","size":63352,"data":"","first_seen":"2025-11-12T01:16:00.729065Z","last_seen":"2025-11-18T22:17:04.26325Z","times_seen":204,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"premiumvertising.com/cjztqgrrdbqfmxhymbc?EnQTUXzO=BQNyAAAAAAAACZUAAhbdA-6XpO7ad40RwYR-ge0jQcxA7U7XqEKS-2KwAgxQSpPLKDu4Q7ZpUdetn3CdH-_0kK2Oiu5PrXD7AkKCdanKnnyeZ0SUjb8OD5r2NcIbYncdxpSj7KuQDttSE0qk_GwwKi1Pv0eBzJyaDIvFe2op9js-_re52Zp8BjclyoFjk1BDqVL15rP21tONllg6f5hU-TMLU7ZnDtUffmbVr0PHoE2ZQuNfKmDlelImPn8WuC-f2yiWON2S90FYyZt2STUNsnQOpUeeiF-QcyitAptnHp2Y4NvxQoYWAO7WRgaLN3g6WwCMCS_gC6hth4vk-NZCSvIrdmkBYivtUlSUd65bKlpcDbXSTogAP6yQPEU5m9mjBMV9WocX7dmlH5Uq6vX9HeaXkNqb-6AKe0uhqtg_cMqehUaziOliPFdu4mKRTdvFrC7oXQy8oREbh0D3uNNXsRlG3VCtcESbCdmE5THtudBrSl3m0OcPhvD9qwspSWCBWfH5-hkarHPA7osGRF8eu-PJcS9Pa7B3eVNEOK1L4egLCbRpMmZmdRKemmTEpApz0DaZsJKu5vUoBmDXQVGGkp5F_W9zp5wcnsf11FBCzLEAH1r7OhjOKHYnY8pwtXeCsuQI1f8njxShE-Jl8UoOWaiZR82auI8gr_3cAvgMFCsXD7HALU8DkkpPNz76bmJam7oJcmpNqmukk6k3_4asXo2bPpElHGB1Q-V0b5ZmyTacVoTyHHYfiTU6wUU1vmjSPHiFEU9oV706L5rpGcPyIA23XJwQjGlTqNXFzoDo18LJhC3o3LTDvIaV9spT4pslsRAmpx1t4zrseqsWWy_bVADOngSPweJDyCnjCACYBP0HCgij0sYDmpbl7Qgvc-xU830q8rk2t4RmOHM_igtO6V1ORjauXh3c84yERLkItoOXZ_QfA6uoqBzK0yVfotEbrR1LCkCYFRpmtuRMKoO4_D6zoeJHnQEBvsmDorU2p9PEibbWkMNxA2-llQKM6V7O9Peg_3Dh1x-xZslHMLVSKAqT1wC9SuS5gbLN7TncRSna5PuuXSEsgPON09SJiS0xMhf8SEOcob7xVhMjUBLjqvo23yRYC-hliuSbQpLbhn6ZTv_0bnQuU-Z7DjYhV8Bx-k4SqvO9CDxlILBewNMl7BuhZpyTM72gF4iCQqA\u0026ZTnCxuXo=4\u0026xbTlgDfX=5105446\u0026yvJdqCXB=\u0026PkgIyABn=0,0\u0026roLMTtks=\u0026wqVJaZPX=\u0026JOEvqkQw=1280,1024,1,1280,1024,0","fqdn":"premiumvertising.com","domain":"premiumvertising.com","tld":"com"},"ip":{"addr":"162.252.214.11","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d5f0a25e4d3522d56d48ce7bc3e518fb","sha1":"86794caff58f7fee6e684c2ba7195f970a8d6f4c","sha256":"9d781128a8ece413b003d5612b8398bf9340ef7f5b751d12bd125ba523d3ceb5","sha512":"a3a81801f516a4eb11f00d6f56dab0ed4b8a79219e6b4f5436993479f09dae08f14cffbab3327ff66fb39201d8eba1153ae7114f7705a01cc6f0edf840ef1616","ssdeep":"","tlshash":"789002801814116115d1500b8d5159d01259b1a4540801324446ca502dc7883a415774","size":44,"data":"","first_seen":"2023-03-07T01:17:45Z","last_seen":"2026-04-04T13:41:38.679033Z","times_seen":22772,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","size":19948,"data":"","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-04-04T13:49:37.592963Z","times_seen":330185,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"104.21.8.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"476b43130f4da0758e51a26ea93e733d","sha1":"5eac9c53e9cc1410e58f6f0bdc85528acab30736","sha256":"b19d05a8d492320ab4db4d74ea0e9e90374bed47a18e805f8018ebb00af0c23c","sha512":"d7b6af5bbc8185dfa58fccd8be30e14c79aed4aba53d8824cc066465690837c5f2d173bc3bb78eda33f9ae91ac0434fbb63d4d4c906e1874cc614ecf72ac4291","ssdeep":"","tlshash":"547000088202202a003828028282a220223ca82080028020000a020228002032ba08c8","size":22,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-03-06T11:55:01.506782Z","times_seen":22784,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"104.21.8.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"67b2371a222c2dc94f01b8579fff4f4d","sha1":"0b0a5e2d11790de282055efe8b8cfd6f4378bbfd","sha256":"dfafe4f2e08c006ec277e8042267c6237512a1a93bfcf57657420d4becc0a97b","sha512":"06a32863a820cca2b2f4460c10c4dc3583687648c909c5f67c746e727ecd4ea6301db1273b40dacdaf397a585ff257eb8c3e226fc023e95d3bda257e02505dfb","ssdeep":"","tlshash":"d4700002880200a8302bc808a3022300200080802882000008888002b0000230808088","size":20,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-03-06T11:55:01.495091Z","times_seen":20840,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lf5HEcrAAAAAC9S0Htng-O8awd5XURMd7HB57jb\u0026co=aHR0cHM6Ly9zd2l0Y2hyb21zLmlvOjQ0Mw..\u0026hl=en\u0026v=naPR4A6FAh-yZLuCX253WaZq\u0026theme=light\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=2w0fub742pck","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.38.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"9a693a24d0f7fa300ba8d5171d4d1840","sha1":"40951ee97b8c7291ba04ee51a5dcab6a6e9ec8f0","sha256":"7335fc80f8b1513f499cc12d3d53b0a49834e805109bbd7b8c91d011401ba0d6","sha512":"e62aa77359b1c134675044969235cd53c73a80b2ca454025f3ffd0facfed648cf82612faa3ff107a4fc2b907b06e496d6ac6bbd51a59faf6cb21c6e9a6178f61","ssdeep":"384:tlv/FWmm8l7fHp9hKhdYSn6Tplu9C4gWGYnaerNGfgydWgVP:fvomtlD0dTn39vgEaerg4ydR","tlshash":"7082c5dcf592b4396162b4b1607f1189e9bb5915fc08681cf112c6e13e30b8a816ff6f","size":19134,"data":"","first_seen":"2025-11-12T21:20:09.107104Z","last_seen":"2025-11-14T13:57:33.224816Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"104.21.8.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d9f9b0f82813d813afe0d450e9fab4d6","sha1":"cb6ce93dd97adc3649f697ff49681f5aaf8b1671","sha256":"d204422e9d49293ab422bfabae9607635876cb30f77215f133603bac691f6f4b","sha512":"849997b396eb218b8bbc788eeb34ec3eb9ab4c809a07ac707a57a5e13baabb69d2c52795403d032f007276109c7f4476daa8255550fa236873e1eb9ba6dba3ba","ssdeep":"","tlshash":"706000c20008802002c200028820a2802832008a20022000c00800000000a0c0222808","size":17,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-03-12T13:30:56.245454Z","times_seen":23634,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"104.21.8.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e969e6981adb7ab1cb174994a5c8c627","sha1":"5f534a259a6f3754d1d392028fd4cbb344fb6563","sha256":"5cb18f9c0eebf644c0bc27e5224177984121b4c4a3f8189861a6d797a15a2e7a","sha512":"10bbe815bb6e4ade10d00a42a82dd10b668e95e275161cb0a637b2ea95785f8f7fc72b31bb48ac9c1dfad03d811912c0683941a3c09357525f164915d5b033cf","ssdeep":"","tlshash":"a380000a88a8a0222a30a0228c020200202e822080ee208083f2032020c283c022b802","size":30,"data":"","first_seen":"2024-02-12T20:00:22Z","last_seen":"2026-03-06T11:55:01.514986Z","times_seen":20053,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/wp-includes/js/wp-emoji-release.min.js?ver=6.8.3","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"104.21.8.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c4b50535f3e989a77d537d5486342d47","sha1":"2a1cc988298c022def9376bd54f608f44154071a","sha256":"db8ee8be2b2456c191fc0739f34f6ac675af8ba4782380cf233024498e0eb968","sha512":"be3b974332c4dadc30025aa911fde008442c9f4966ade014a7b8f05926688e30b9fdc32ebdbdd53fe32fc3f4d9c6ac2310b98dc6602843f2d8f00b1ded4e9b83","ssdeep":"384:WAevzW+ZTbXUH3o//bEPhXgA5H1efAJmpr:WF6UXUH3o//YpXgAGfACr","tlshash":"d782fa9bb33a4e8f343e3bd7cd968f4dc9da555321c0e078dbeeb68169a00568274c90","size":19251,"data":"","first_seen":"2025-05-09T23:23:48.206606Z","last_seen":"2026-04-04T13:47:46.943916Z","times_seen":195806,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"104.21.8.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"fb2698bdba15f928aeca6cff61fb1edd","sha1":"b2e062a54e65534123cecfae4081314d25b2bdae","sha256":"ed3b0e46a5771ecf5a0292966336f53bae365f2ffeb575897fa3cef394e012fc","sha512":"4536b36065fe0bfe7185910930fb1895827657a73aeedf1b75989858e24923a52940f05dad2b48c69558a3af7008bc7df4c41e5b1a9b4f3d45b144990cb4a940","ssdeep":"","tlshash":"02b012ed40063f53b54234d14965d308503e00000397855d21c6461d1809351104f0d8","size":89,"data":"","first_seen":"2023-03-07T01:03:32Z","last_seen":"2026-04-04T12:23:52.987365Z","times_seen":505,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"104.21.8.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"79e362235e366729632e60d6d35f8904","sha1":"69df1a1691b05442e11e2bc5825fc6297b977a92","sha256":"da82a56eb8524f5d12a2afcf2c5d0cb6184f26995167212a0ccb3bc2ba0def36","sha512":"94ca14ccb12238f547249a07134689257dd97639be34d7f466f52741df7176be982d88c5d294dd42a534a32d908533b5eaae33a13cb47ce0cf065d3098d9383d","ssdeep":"","tlshash":"fe60000000000c30000303000c30c3cc3c3f000030033030030c00000c00c003300c00","size":15,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-04-04T11:33:28.157889Z","times_seen":23588,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"104.21.8.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"7a837a4ba8ea13b8193945adf0261e19","sha1":"61428cd720ebc0f01c4c017204c313193c22c101","sha256":"28d9693460ce57dd4e01742e50a1baa10cbed3fa6c20c2a69f02424f80fb9a2e","sha512":"abe0e46d98027527a7d2567c4feaece7ad3c1ec94eed8fea59b9eec596cdd4fa39e7776e9dbc4dd6fe777d9b09300d45ba2a49fc9479e0acbdea92ebf5ef940f","ssdeep":"","tlshash":"516000000003c03300300300030f33000030003000030000000c00303003c03c0030c3","size":14,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-04-04T11:33:28.138425Z","times_seen":23237,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"104.21.8.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"aaf72876f0d5e8a677a383fd45bf938b","sha1":"d8b2ca3c238c933223f4a6313c5c0561f99e0c1c","sha256":"15eb7e222abfc64660d0f94c04053839498df20ea9ac9a13a201701a56ce3bf6","sha512":"c6bec20224539a5319a753a794c7521e7063e76b3d41bac8d7f0159880eaf3ed07c3fc1b0eb4ec285f1970f270f4b0ab68890d5a0ed01e3b1542102ad707f6d7","ssdeep":"","tlshash":"207000080820000820200802220322283822323022cc0002220a083022ea00b80282e2","size":24,"data":"","first_seen":"2023-03-07T01:03:03Z","last_seen":"2026-03-06T11:55:01.498128Z","times_seen":23956,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"104.21.8.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ab3b4884408bb0261d6b56a7d288fe80","sha1":"b0f370141ada9b591302b575434c255db51ae151","sha256":"e5a13721b456c9e090f80944728fc91767f5ae01b01f59160e73ff2c7cacc587","sha512":"e57cb5cdac6519a8a24e85d5d91f2c6492e282308a94d369619e9455cef8f22a2a6abd62023647fbfa0228b6d3e12da22c280d691cd351608aada9c284ca3a66","ssdeep":"","tlshash":"6c80008ea0803232a2fa02038a822200a2af38ea88008820000a0200288030f232ac8a","size":26,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-03-06T11:55:01.519336Z","times_seen":23027,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/watch.677621371061.js?dev=e\u0026key=5e7f0ff89b6ddd7a4976e11a2feacc81\u0026kw=%5B%22the%22%2C%22legend%22%2C%22of%22%2C%22zelda%22%2C%22echoes%22%2C%22wisdom%22%2C%22nsp%22%2C%22xci%22%2C%22switch%22%2C%22rom%22%2C%22v1%22%2C%220%22%2C%222%22%2C%22free%22%2C%22download%22%5D\u0026pst=1762982436\u0026rb=\u0026refer=https%3A%2F%2Fswitchroms.io%2Fthe-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b%2F%3Fdownload%3D8\u0026res=14.3095\u0026rmtc=t\u0026shu=5ef9af25d1d25fde1853a4b70f4d277cf538e848af60c30b45c36d36dce67941183dc19895bfcdebb2659ab02458341950a7240a1404e2bc913d8b3b69e4d1eef957aac5f5bc70a578d4ec46d8682be2ae3165e5cbf266886fe27d\u0026tz=0\u0026uuid=e6d9cfb6-1dcb-4637-a18d-7de2b13e2317%3A2%3A1","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:36.223Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Oct 2025 22:01:12 GMT","end":"Sat, 24 Jan 2026 22:01:11 GMT"},"fingerprint":{"sha1":"15:FA:E2:08:0A:F1:68:03:29:64:51:B0:FA:3B:8E:DD:DC:B7:CD:01","sha256":"F8:EA:EA:FF:5A:CA:9D:E1:82:F0:8C:3C:7C:6B:FB:06:8F:72:6C:0E:64:EF:7B:3B:2B:21:25:C2:25:7D:0C:BD"}}},"request":{"raw":"GET /watch.677621371061.js?dev=e\u0026key=5e7f0ff89b6ddd7a4976e11a2feacc81\u0026kw=%5B%22the%22%2C%22legend%22%2C%22of%22%2C%22zelda%22%2C%22echoes%22%2C%22wisdom%22%2C%22nsp%22%2C%22xci%22%2C%22switch%22%2C%22rom%22%2C%22v1%22%2C%220%22%2C%222%22%2C%22free%22%2C%22download%22%5D\u0026pst=1762982436\u0026rb=\u0026refer=https%3A%2F%2Fswitchroms.io%2Fthe-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b%2F%3Fdownload%3D8\u0026res=14.3095\u0026rmtc=t\u0026shu=5ef9af25d1d25fde1853a4b70f4d277cf538e848af60c30b45c36d36dce67941183dc19895bfcdebb2659ab02458341950a7240a1404e2bc913d8b3b69e4d1eef957aac5f5bc70a578d4ec46d8682be2ae3165e5cbf266886fe27d\u0026tz=0\u0026uuid=e6d9cfb6-1dcb-4637-a18d-7de2b13e2317%3A2%3A1 HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://switchroms.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchroms.io/\r\nCookie: ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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_ZG93bmxvYWQ9OCIsImFyIjpbXX19.oHGrbec2D3uoBV9hgp3roauagjWhSj4MWmxfPRAFU28\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 12 Nov 2025 21:19:36 GMT\r\nContent-Type: text/html\r\nContent-Length: 2202\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\naccess-control-allow-origin: https://switchroms.io\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\nset-cookie: uid_id2=e6d9cfb6-1dcb-4637-a18d-7de2b13e2317:2:1; expires=Wed, 19 Nov 2025 21:19:36 GMT; path=/; secure; SameSite=None\npdhtkv=true; expires=Thu, 13 Nov 2025 21:19:36 GMT; path=/; secure; SameSite=None\nuncs=1; expires=Thu, 13 Nov 2025 21:19:36 GMT; path=/; secure; SameSite=None\npdhtkv5=true; expires=Thu, 13 Nov 2025 21:19:36 GMT; path=/; secure; SameSite=None\nuncs5=1; expires=Thu, 13 Nov 2025 21:19:36 GMT; path=/; secure; SameSite=None\nu_pl27929006=1; expires=Thu, 13 Nov 2025 21:19:36 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 39\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: baf65fcb35b5bffb5a3e1e27480c3e4f\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4638,"size_decoded":0,"mime_type":"text/html","magic":"JavaScript source, ASCII text, with very long lines (3762)","md5":"8ad6bcf52f27509c49f85c7fe9572d8c","sha1":"6cc7699bb2584cbe5e8b21a8ce25a8cff8bdc410","sha256":"420fc67f028cfb5d8ba7aed01e883d71cb1d3cb2a4d26eb92b542ea2d34bc1ac","sha512":"8b6c62ec7ea92a4450263987c451a1c4a27a7f3caf7f77e1bb0522ddb03176b99355e0bd08c7fb0dce50c2cc9238e3d4f18360e98f2d7861d00771ff69b6fe78","ssdeep":"96:Isoz+jT2GP0iYOloLGavk/yGP0iYOloLGA1ZD62KCfMEDaH:IlzEsOloLRvkcOloLrV62KCkCaH","tlshash":"08a12a790e56601c66abb0af3a771381bc7043176650c844fc4cd3418f54b954efae9e","first_seen":"2025-11-12T21:20:09.031915Z","last_seen":"2025-11-12T21:20:09.031915Z","times_seen":1,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/wp-content/plugins/wpdiscuz/assets/css/wpdiscuz-combo.min.css?ver=6.8.3","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"104.21.8.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:33.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switchroms.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 05:25:51 GMT","end":"Tue, 03 Feb 2026 06:24:36 GMT"},"fingerprint":{"sha1":"11:CC:5E:77:C5:8A:9E:7C:E3:7B:3C:A9:00:ED:93:7A:8E:43:32:D3","sha256":"81:8A:05:E3:87:30:CE:C5:DD:1A:59:5E:40:36:ED:1C:56:08:F6:B6:6F:7A:26:73:58:A3:DC:2B:40:E1:11:B9"}}},"request":{"raw":"GET /wp-content/plugins/wpdiscuz/assets/css/wpdiscuz-combo.min.css?ver=6.8.3 HTTP/1.1\r\nHost: switchroms.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 12 Nov 2025 21:19:33 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 08 Oct 2024 02:40:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67049bb6-901c\"\r\nserver: cloudflare\r\nx-content-type-options: \"nosniff\" always\r\nx-xss-protection: \"1; mode=block\" always\r\nstrict-transport-security: \"max-age=31536000; includeSubDomains; preload\" always\r\nreferrer-policy: no-referrer-when-downgrade\r\nexpires: Wed, 04 Nov 2026 14:39:27 GMT\r\ncache-control: public, max-age=31536000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\ncontent-encoding: gzip\r\nage: 715206\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QpsJ9c4DVvZ9uxzt3wd3Z2f9tJMil9FhJo46ZhjHYHPURtKs4uHIN1mOuTe2xz8x582MICpn2rPTkeUxAFQ68Kj5EIq5rdP6WUoA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 99d911798c11b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36892,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (22067)","md5":"f86ddfbe0186ca193d2c0a2bf556c03c","sha1":"eddc4b5d1033f08f354ef11916ed2e4b6f723e35","sha256":"4ee9c91d5f66614dd7ae025c3e8115cbfe9dd0a3336b242efcd757c37c15f208","sha512":"986a247d40cd18debcec4271af4adf33bb672b4f3c5d7b33c186638b709fc34cce48c4fb8c6bc20c7a0ccafb44a3557e43a888d7a82f521d52b4363b75ad5a38","ssdeep":"768:3m5ABNHMlQbmSEld6GO/eGRyOtkWi6bNTOwF7X:qABW+bzyOt7i6b3","tlshash":"21f2962de95724bf913b943ed14422d42a8afb73f1e34baef091e65907dd1a8033661c","first_seen":"2023-04-09T12:19:31Z","last_seen":"2026-03-27T19:42:56.927769Z","times_seen":243,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/wp-content/uploads/2025/04/The-Renovator-Origins.webp","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"104.21.8.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:33.448Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switchroms.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 05:25:51 GMT","end":"Tue, 03 Feb 2026 06:24:36 GMT"},"fingerprint":{"sha1":"11:CC:5E:77:C5:8A:9E:7C:E3:7B:3C:A9:00:ED:93:7A:8E:43:32:D3","sha256":"81:8A:05:E3:87:30:CE:C5:DD:1A:59:5E:40:36:ED:1C:56:08:F6:B6:6F:7A:26:73:58:A3:DC:2B:40:E1:11:B9"}}},"request":{"raw":"GET /wp-content/uploads/2025/04/The-Renovator-Origins.webp HTTP/1.1\r\nHost: switchroms.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 12 Nov 2025 21:19:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 66618\r\nlast-modified: Sun, 13 Apr 2025 15:11:02 GMT\r\netag: \"67fbd406-1043a\"\r\nserver: cloudflare\r\nx-content-type-options: \"nosniff\" always\r\nx-xss-protection: \"1; mode=block\" always\r\nstrict-transport-security: \"max-age=31536000; includeSubDomains; preload\" always\r\nreferrer-policy: no-referrer-when-downgrade\r\nexpires: Thu, 15 Oct 2026 12:15:17 GMT\r\ncache-control: public, max-age=31536000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\naccept-ranges: bytes\r\nage: 2451855\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SJok6PaCWRfCJoGAIPFYPG2McyB%2B2CsOUL%2BE8%2FIWZtlvaaDMdu5YBWhP0czjTNe1bizqGHMXFE6BXwO5i2s4qXOynh%2F%2BVMGXid34\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 99d91179ac18b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66618,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c4eab226f01038d35c033180d070ef33","sha1":"213e0325585550d25d1f755ee36125de9363a18c","sha256":"118276b22142a00f82eb36eef8f3177a11e4f3019232b00ef61d997991e54e62","sha512":"b65e5354b9f7dcf523380cec8128c5452f40b9acc540d544d384f6c3a159a6948f4d97d848aeec73c6a5f8a1fa474fc4aecc04d5c81311d98fdb7467f1f85fa3","ssdeep":"1536:+VP3i89ZDM+V26/wBvoxDpzVNBX8x/oFJGa5yky51J:+VPB9ZD5cn6prBmoFJvgkyzJ","tlshash":"8953f1fe0ed4360453443bb54324e87c9ab5b0b683bed95c6821f6253e20bedad3d598","first_seen":"2025-05-28T10:03:28.104568Z","last_seen":"2026-01-26T03:36:30.102434Z","times_seen":13,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/wp-content/uploads/2025/04/Disney-Villains-Cursed-Cafe.webp","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"104.21.8.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:33.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switchroms.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 05:25:51 GMT","end":"Tue, 03 Feb 2026 06:24:36 GMT"},"fingerprint":{"sha1":"11:CC:5E:77:C5:8A:9E:7C:E3:7B:3C:A9:00:ED:93:7A:8E:43:32:D3","sha256":"81:8A:05:E3:87:30:CE:C5:DD:1A:59:5E:40:36:ED:1C:56:08:F6:B6:6F:7A:26:73:58:A3:DC:2B:40:E1:11:B9"}}},"request":{"raw":"GET /wp-content/uploads/2025/04/Disney-Villains-Cursed-Cafe.webp HTTP/1.1\r\nHost: switchroms.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 12 Nov 2025 21:19:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 61880\r\nlast-modified: Tue, 08 Apr 2025 16:50:01 GMT\r\netag: \"67f553b9-f1b8\"\r\nserver: cloudflare\r\nx-content-type-options: \"nosniff\" always\r\nx-xss-protection: \"1; mode=block\" always\r\nstrict-transport-security: \"max-age=31536000; includeSubDomains; preload\" always\r\nreferrer-policy: no-referrer-when-downgrade\r\nexpires: Fri, 30 Oct 2026 21:10:21 GMT\r\ncache-control: public, max-age=31536000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\naccept-ranges: bytes\r\nage: 1123752\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QnEaJODM2iJ%2FSSzn1ctVCc2wNfgyPcgu55ylBy79zKzu11i68%2F5j7SVLX%2Ff0IWzuRt0VFfM9loRmUl345h25B%2FH0rMVhQjexkoqK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 99d91179bc1bb4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61880,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"958c120abe981fa2a44d4a33735607b0","sha1":"fe3a401f08d8b6db0a5dfbfb3676892c5c4e3e70","sha256":"49ea98eebf4f7d1601fc91a273f0fb46f1254879aed28606a7fb9378e65fd73b","sha512":"a5c11b8a2655ec04737eee0f4cfdb7d2b1b67a9afaa38b623091a6032facf3fa1e45fbc642ea522fe36b8c5fd7bdd3ae3112773cbfc44229052b732ae83a04a0","ssdeep":"1536:rywlRdqn39HM1bI1CpyS4fOAmPIMN+UTjP8kODx:rlxqnhM181OyS4fmbr8kON","tlshash":"dc5302b1f9a33bd8ea91efe2f96366f275834c852ff8763828710351b004b511251d76","first_seen":"2025-06-14T08:56:20.576989Z","last_seen":"2026-01-26T03:36:30.11314Z","times_seen":7,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/naPR4A6FAh-yZLuCX253WaZq/styles__ltr.css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lf5HEcrAAAAAC9S0Htng-O8awd5XURMd7HB57jb\u0026co=aHR0cHM6Ly9zd2l0Y2hyb21zLmlvOjQ0Mw..\u0026hl=en\u0026v=naPR4A6FAh-yZLuCX253WaZq\u0026theme=light\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=2w0fub742pck","date":"2025-11-12T21:19:35.550Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:51 GMT","end":"Mon, 05 Jan 2026 08:38:50 GMT"},"fingerprint":{"sha1":"89:73:B0:EF:F1:BA:6A:DA:6C:2C:87:70:0D:17:11:82:30:E9:13:68","sha256":"96:8D:5D:62:3A:3A:D6:CD:06:9A:CE:52:F4:2D:91:F9:66:13:40:F4:5F:9B:88:3D:55:04:79:E3:14:96:51:FA"}}},"request":{"raw":"GET /recaptcha/releases/naPR4A6FAh-yZLuCX253WaZq/styles__ltr.css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 42506\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 06 Nov 2025 15:16:13 GMT\r\nexpires: Fri, 06 Nov 2026 15:16:13 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 03 Nov 2025 01:02:43 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nage: 540202\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":82951,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"04258b8c56cccf12d2812adbaa15f559","sha1":"e6a9b14b8bb9cccde986a58d10028e108930bdf3","sha256":"9ed7b552641c3004138810ee9d628ecdb90fb8b3c561eddf52da41aaea323c37","sha512":"3b07028519a309df3f78be29f310ac9c02b725e082f34ff18e787e172b8d18a74a67473bef396658c06f1678bd4ef23b97efb0c818414ff5e9cbfe78314a7359","ssdeep":"1536:1fGNbFoZJSUYOOaLnAW8+IcTOIiCdthXwW5l1Dx7:1GRFauOxLA/+IcTO2LX1","tlshash":"b7838f7338513b39fc2b9b616186b9edf22cc423e5514bfab5457a20c3db19a8253b07","first_seen":"2025-11-04T19:51:16.53286Z","last_seen":"2025-12-23T16:44:26.621458Z","times_seen":15173,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.adsco.re/#0.9595887437309396","fqdn":"c.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"104.16.42.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:36.065Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 15 Sep 2025 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EC:13:B4:EC:A8:B2:CD:2E:12:E1:84:0E:E5:64:5D:88:D5:CA:3A:59","sha256":"C9:35:54:5E:EF:18:4E:21:62:7D:1D:23:55:D2:B9:CC:68:48:01:7B:AC:A5:8B:D9:3D:71:85:DC:07:17:02:2F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: c.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchroms.io/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 12 Nov 2025 21:19:36 GMT\r\ncontent-type: text/html\r\ncontent-encoding: br\r\ncache-control: public, max-age=2678400\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR\r\ncritical-ch: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR\r\npermissions-policy: ch-ua=(self \"https://adsco.re\"),ch-ua-mobile=(self \"https://adsco.re\"),ch-ua-full-version=(self \"https://adsco.re\"),ch-ua-platform=(self \"https://adsco.re\"),ch-ua-platform-version=(self \"https://adsco.re\"),ch-ua-arch=(self \"https://adsco.re\"),ch-ua-model=(self \"https://adsco.re\"),ch-device-memory=(self \"https://adsco.re\"),ch-downlink=(self \"https://adsco.re\"),ch-ect=(self \"https://adsco.re\"),ch-rtt=(self \"https://adsco.re\"),ch-width=(self \"https://adsco.re\"),ch-viewport-width=(self \"https://adsco.re\"),ch-dpr=(self \"https://adsco.re\")\r\ntiming-allow-origin: *\r\nlink: \u003c//adsco.re/\u003e;crossorigin;rel=preconnect,\u003chttps://6.adsco.re/\u003e;rel=prefetch;crossorigin;as=fetch,\u003chttps://4.adsco.re/\u003e;rel=prefetch;crossorigin;as=fetch,\u003chttps://6.adsco.re:2087/\u003e;rel=prefetch;crossorigin;as=fetch,\u003chttps://4.adsco.re:2087/\u003e;rel=prefetch;crossorigin;as=fetch,\u003chttps://0.l.adsco.re/\u003e;rel=preconnect,\u003chttps://0.s.adsco.re/\u003e;rel=preconnect,\u003chttps://0.n.adsco.re/\u003e;rel=preconnect\r\nexpires: Sat, 13 Dec 2025 21:19:36 GMT\r\netag: W/\"vmf3v97rubSdxXRYRIVCsw==\"\r\nvary: accept-encoding\r\nage: 75854\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 99d9118a699576ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":63352,"size_decoded":0,"mime_type":"text/html","magic":"JavaScript source, ASCII text, with very long lines (3226)","md5":"be67f7bfdeebb9b49dc57458448542b3","sha1":"df24037d63ce5ccecc0d4481577f3b6d550440bf","sha256":"e3d31789f5b8e7e48f1cb8201d6916d9a63a17cdef0ff256cc18dc79d039af41","sha512":"1dde47cd09f11fddab7e8d674cc9a5f759fee79d854aa8feecad30f7c20121a632e3f899dfd5d11bdde452a51f8cafed880f4805adb72acbd222e47f940dd2be","ssdeep":"768:dsh5ttElWNi3nrqwAjbz2jaYmVcZXnEQwKz9USj2U3myQjR7n6SZARbfSkH12:Oyki3nRmV4Xxz9UfU3myQjR7nLZApfNQ","tlshash":"ab533cb97661203982b219be167f931170ba5a905d46c0f2d3bd89503c38f9b533bf9e","first_seen":"2025-11-12T01:16:00.729065Z","last_seen":"2025-11-18T22:17:04.26325Z","times_seen":204,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.show-sb.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Frobot%2F3%2Findex.html\u0026l=2218\u0026fd=457","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:37.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Oct 2025 22:01:12 GMT","end":"Sat, 24 Jan 2026 22:01:11 GMT"},"fingerprint":{"sha1":"15:FA:E2:08:0A:F1:68:03:29:64:51:B0:FA:3B:8E:DD:DC:B7:CD:01","sha256":"F8:EA:EA:FF:5A:CA:9D:E1:82:F0:8C:3C:7C:6B:FB:06:8F:72:6C:0E:64:EF:7B:3B:2B:21:25:C2:25:7D:0C:BD"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.show-sb.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Frobot%2F3%2Findex.html\u0026l=2218\u0026fd=457 HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchroms.io/\r\nCookie: ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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_ZG93bmxvYWQ9OCIsImFyIjpbXX19.oHGrbec2D3uoBV9hgp3roauagjWhSj4MWmxfPRAFU28; uid_id2=e6d9cfb6-1dcb-4637-a18d-7de2b13e2317:2:1; pdhtkv=true; uncs=1; pdhtkv5=true; uncs5=1; u_pl27929006=1; pdhtkv29=true; uncs29=1; u_pl26551100=1; slec0e536fb8895c74d7dcf7b58fe63dae08=[6233297]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 12 Nov 2025 21:19:37 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T13:49:31.916752Z","times_seen":13333799,"resource_available":true,"data":null}},"time_used":111,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":110,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/wp-content/uploads/2024/09/The-Legend-of-Zelda-Echoes-of-Wisdom.png","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"104.21.8.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:34.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switchroms.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 05:25:51 GMT","end":"Tue, 03 Feb 2026 06:24:36 GMT"},"fingerprint":{"sha1":"11:CC:5E:77:C5:8A:9E:7C:E3:7B:3C:A9:00:ED:93:7A:8E:43:32:D3","sha256":"81:8A:05:E3:87:30:CE:C5:DD:1A:59:5E:40:36:ED:1C:56:08:F6:B6:6F:7A:26:73:58:A3:DC:2B:40:E1:11:B9"}}},"request":{"raw":"GET /wp-content/uploads/2024/09/The-Legend-of-Zelda-Echoes-of-Wisdom.png HTTP/1.1\r\nHost: switchroms.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 12 Nov 2025 21:19:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 73914\r\nlast-modified: Fri, 27 Sep 2024 12:09:09 GMT\r\netag: \"66f6a065-120ba\"\r\nserver: cloudflare\r\nx-content-type-options: \"nosniff\" always\r\nx-xss-protection: \"1; mode=block\" always\r\nstrict-transport-security: \"max-age=31536000; includeSubDomains; preload\" always\r\nreferrer-policy: no-referrer-when-downgrade\r\nexpires: Thu, 05 Nov 2026 08:48:48 GMT\r\ncache-control: public, max-age=31536000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\naccept-ranges: bytes\r\nage: 649845\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M7hICxZeMLt5q4fYsFeC1BJYmEYC8Pfu1Eqoqa1ftQ8zE5N8VlsJlumCSOuPYK7azZ7IGjM%2FhRfrrB5HgJNs8Gyozlw4W0UaGvin\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 99d9117dfca0b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73914,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 355 x 575, 8-bit colormap, non-interlaced","md5":"ab1245cb82c6c26aeaba77d85b678869","sha1":"5ddf4f79f8162a0210467437ff2294c11032f82e","sha256":"0cef9eda6502b37bd42e72b4139aba9a06cfdabdc50ff9e126ede54e96e2bb59","sha512":"bef4a494f88e4b9c35cbcc2dcade6e9bf1e0d5f14da84016abd772e9cf623042fcd94d77e3bd942ceeb419f11cc2d9735a6440bb368207edc7d63c151994182a","ssdeep":"1536:3C9hpuLZ+7eaPtInfqrtMY4QPVoGlz7fWcUWduOTtPdaRvole0/N7:3CrpuLpaAfqrtMao0/WcZuORPdaRQ7/9","tlshash":"12730251ae124f4013ea95f91d04967c89cf2aaed660b866193203b16e59ff3c1f8d0c","first_seen":"2024-10-17T20:45:35.355755Z","last_seen":"2025-11-12T21:20:09.036646Z","times_seen":3,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"handymanthemepumpkin.com/ntv.json?key=e7ceb8faaad184ecffaafa7e251bdb56\u0026vstc=1\u0026rb=","fqdn":"handymanthemepumpkin.com","domain":"handymanthemepumpkin.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:34.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"handymanthemepumpkin.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Oct 2025 08:39:08 GMT","end":"Wed, 21 Jan 2026 08:39:07 GMT"},"fingerprint":{"sha1":"44:AF:00:AE:96:49:F1:00:9E:DB:4F:F1:C4:5F:92:B3:79:42:50:38","sha256":"BD:31:0D:1C:08:ED:4E:FE:4E:8C:89:EC:67:45:12:DC:0A:91:09:49:F5:66:4C:B8:B2:56:22:5F:59:F6:C8:F2"}}},"request":{"raw":"GET /ntv.json?key=e7ceb8faaad184ecffaafa7e251bdb56\u0026vstc=1\u0026rb= HTTP/1.1\r\nHost: handymanthemepumpkin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://switchroms.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchroms.io/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 12 Nov 2025 21:19:34 GMT\r\nContent-Type: application/json\r\nContent-Length: 3025\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\naccess-control-allow-origin: https://switchroms.io\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\nset-cookie: pdhtkv=true; expires=Thu, 13 Nov 2025 21:19:34 GMT; path=/; secure; SameSite=None\nuncs=1; expires=Thu, 13 Nov 2025 21:19:34 GMT; path=/; secure; SameSite=None\npdhtkv49=true; expires=Thu, 13 Nov 2025 21:19:34 GMT; path=/; secure; SameSite=None\nuncs49=1; expires=Thu, 13 Nov 2025 21:19:34 GMT; path=/; secure; SameSite=None\nu_pl26551079=1; expires=Thu, 13 Nov 2025 21:19:34 GMT; path=/; secure; SameSite=None\nnlece7ceb8faaad184ecffaafa7e251bdb56=[5941311]; expires=Wed, 12 Nov 2025 21:19:39 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 6\r\nHost: handymanthemepumpkin.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 87d668a7f18c6362419459bb43d90ea9\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3900,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"8e24abd3b7ed4c167769a4d3ecdf6199","sha1":"b80a10aff9327111798d6f6cf3ff329f484c5cb7","sha256":"90f78fa4e08d17d5892ab78a6295c5ec8b0c8a7f9a1cae5d402745ec9d1f4ea1","sha512":"378a505a3a7e885f1f315f98a5dda6f9c1966f56f19484731ea7ff30e312767d110b1037c4663c28e094451aeb15323f070d92c9001576e429d40b458e66fc15","ssdeep":"","tlshash":"60816cb92927479b2d88d0d024fba028228800d697c56f5d126f4f3538bd6ec27ba56c","first_seen":"2025-11-12T21:20:09.03774Z","last_seen":"2025-11-12T21:20:09.03774Z","times_seen":1,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":82,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"handymanthemepumpkin.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"handymanthemepumpkin.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"handymanthemepumpkin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lf5HEcrAAAAAC9S0Htng-O8awd5XURMd7HB57jb\u0026co=aHR0cHM6Ly9zd2l0Y2hyb21zLmlvOjQ0Mw..\u0026hl=en\u0026v=naPR4A6FAh-yZLuCX253WaZq\u0026theme=light\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=2w0fub742pck","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.38.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:35.407Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:37:33 GMT","end":"Mon, 05 Jan 2026 08:37:32 GMT"},"fingerprint":{"sha1":"17:9D:6B:F6:A8:18:29:EC:16:2C:3C:3D:F2:EA:93:19:C7:92:EE:AA","sha256":"AA:D4:E9:5C:D4:70:A7:86:45:DE:62:83:82:60:F9:B9:46:CF:40:73:19:FA:3B:01:A9:7E:9B:32:24:EE:57:EC"}}},"request":{"raw":"GET /recaptcha/api2/anchor?ar=1\u0026k=6Lf5HEcrAAAAAC9S0Htng-O8awd5XURMd7HB57jb\u0026co=aHR0cHM6Ly9zd2l0Y2hyb21zLmlvOjQ0Mw..\u0026hl=en\u0026v=naPR4A6FAh-yZLuCX253WaZq\u0026theme=light\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=2w0fub742pck HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchroms.io/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Wed, 12 Nov 2025 21:19:35 GMT\r\ncontent-security-policy: script-src 'nonce-FtIXKh030gMb5pgGWWHdIQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":79930,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (56645)","md5":"8d6cb0b84833a9a1c0f0871501259955","sha1":"448c1b1afd895d251c8d226ea85639211f67622e","sha256":"d92ff1b10025d7c51b85aa42c2868254d020e19d8123d39465280d24f178e532","sha512":"4ec6661f0dcc5b880ed1ff33e987aa83c13123efc2d47d3ec3397a4d11274a885ac5f7d2160734bbb2206c487144011ea588790d85213e4fb1b2a6f4f904e89f","ssdeep":"1536:mo13ie6swV6iWKWJISBDbtF4BwH0zt6yAOgmmcBSFkWlwqlEATa6zdQ6i0:mzeysFEztPfwEO","tlshash":"d373bf32d2033055dfbb4f8127e67aba627f148a2082459c5bff04d91dbad96637938c","first_seen":"2025-11-12T21:20:09.038558Z","last_seen":"2025-11-12T21:20:09.038558Z","times_seen":1,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"handymanthemepumpkin.com/ntv.json?key=e7ceb8faaad184ecffaafa7e251bdb56\u0026vstc=1\u0026rb=","fqdn":"handymanthemepumpkin.com","domain":"handymanthemepumpkin.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:34.523Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"handymanthemepumpkin.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Oct 2025 08:39:08 GMT","end":"Wed, 21 Jan 2026 08:39:07 GMT"},"fingerprint":{"sha1":"44:AF:00:AE:96:49:F1:00:9E:DB:4F:F1:C4:5F:92:B3:79:42:50:38","sha256":"BD:31:0D:1C:08:ED:4E:FE:4E:8C:89:EC:67:45:12:DC:0A:91:09:49:F5:66:4C:B8:B2:56:22:5F:59:F6:C8:F2"}}},"request":{"raw":"GET /ntv.json?key=e7ceb8faaad184ecffaafa7e251bdb56\u0026vstc=1\u0026rb= HTTP/1.1\r\nHost: handymanthemepumpkin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://switchroms.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchroms.io/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 12 Nov 2025 21:19:34 GMT\r\nContent-Type: application/json\r\nContent-Length: 3025\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\naccess-control-allow-origin: https://switchroms.io\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\nset-cookie: pdhtkv=true; expires=Thu, 13 Nov 2025 21:19:34 GMT; path=/; secure; SameSite=None\nuncs=1; expires=Thu, 13 Nov 2025 21:19:34 GMT; path=/; secure; SameSite=None\npdhtkv49=true; expires=Thu, 13 Nov 2025 21:19:34 GMT; path=/; secure; SameSite=None\nuncs49=1; expires=Thu, 13 Nov 2025 21:19:34 GMT; path=/; secure; SameSite=None\nu_pl26551079=1; expires=Thu, 13 Nov 2025 21:19:34 GMT; path=/; secure; SameSite=None\nnlece7ceb8faaad184ecffaafa7e251bdb56=[5941311]; expires=Wed, 12 Nov 2025 21:19:39 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 7\r\nHost: handymanthemepumpkin.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: eedbe7fbaef564f24d02213ca75157cf\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":3900,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"8e24abd3b7ed4c167769a4d3ecdf6199","sha1":"b80a10aff9327111798d6f6cf3ff329f484c5cb7","sha256":"90f78fa4e08d17d5892ab78a6295c5ec8b0c8a7f9a1cae5d402745ec9d1f4ea1","sha512":"378a505a3a7e885f1f315f98a5dda6f9c1966f56f19484731ea7ff30e312767d110b1037c4663c28e094451aeb15323f070d92c9001576e429d40b458e66fc15","ssdeep":"","tlshash":"60816cb92927479b2d88d0d024fba028228800d697c56f5d126f4f3538bd6ec27ba56c","first_seen":"2025-11-12T21:20:09.03774Z","last_seen":"2025-11-12T21:20:09.03774Z","times_seen":1,"resource_available":false,"data":null}},"time_used":676,"timings":{"blocked":286,"dns":4,"connect":91,"send":0,"wait":102,"receive":0,"ssl":191},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"handymanthemepumpkin.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"handymanthemepumpkin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"handymanthemepumpkin.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/pixel/pure","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:35.652Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Oct 2025 22:01:12 GMT","end":"Sat, 24 Jan 2026 22:01:11 GMT"},"fingerprint":{"sha1":"15:FA:E2:08:0A:F1:68:03:29:64:51:B0:FA:3B:8E:DD:DC:B7:CD:01","sha256":"F8:EA:EA:FF:5A:CA:9D:E1:82:F0:8C:3C:7C:6B:FB:06:8F:72:6C:0E:64:EF:7B:3B:2B:21:25:C2:25:7D:0C:BD"}}},"request":{"raw":"POST /pixel/pure HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 74\r\nOrigin: https://switchroms.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchroms.io/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 12 Nov 2025 21:19:35 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T13:49:31.916752Z","times_seen":13333799,"resource_available":true,"data":null}},"time_used":474,"timings":{"blocked":-1,"dns":1,"connect":94,"send":0,"wait":95,"receive":0,"ssl":193},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/wp-content/uploads/2024/03/Nintendo_Switch_logo.png","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"104.21.8.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:34.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switchroms.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 05:25:51 GMT","end":"Tue, 03 Feb 2026 06:24:36 GMT"},"fingerprint":{"sha1":"11:CC:5E:77:C5:8A:9E:7C:E3:7B:3C:A9:00:ED:93:7A:8E:43:32:D3","sha256":"81:8A:05:E3:87:30:CE:C5:DD:1A:59:5E:40:36:ED:1C:56:08:F6:B6:6F:7A:26:73:58:A3:DC:2B:40:E1:11:B9"}}},"request":{"raw":"GET /wp-content/uploads/2024/03/Nintendo_Switch_logo.png HTTP/1.1\r\nHost: switchroms.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_YR6V7LMBP0=GS2.1.s1762982374$o1$g0$t1762982374$j60$l0$h0; _ga=GA1.1.422467514.1762982374\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 12 Nov 2025 21:19:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 4178\r\nlast-modified: Mon, 18 Mar 2024 08:03:01 GMT\r\netag: \"65f7f535-1052\"\r\nserver: cloudflare\r\nx-content-type-options: \"nosniff\" always\r\nx-xss-protection: \"1; mode=block\" always\r\nstrict-transport-security: \"max-age=31536000; includeSubDomains; preload\" always\r\nreferrer-policy: no-referrer-when-downgrade\r\nexpires: Sat, 26 Sep 2026 16:25:49 GMT\r\ncache-control: public, max-age=31536000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\naccept-ranges: bytes\r\nage: 4078425\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TbnsG%2F97qfCWttKkWqRfIevvWY45EyOKzRGHxyw6oq1YjHnjC1RI9oAw9fVN6bAMLzCHqTrw7jiWWdUP5aBSd30NnozUnaKt%2FaCX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\ncf-ray: 99d911829ccdb4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4178,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 240, 8-bit colormap, non-interlaced","md5":"31af029cbfcfe873150af21ee4f1420e","sha1":"a7008c3599f28617dc3ca9e1736349a330abb4c9","sha256":"e2d45db6614cd6523b8eadc629340a4110eb0025971ba53c294b84e435028888","sha512":"24ef2d30942ba4ca3f7693fff21c9354710e56bd1f426801da38f539162ac45f2cd1d40d7bed4e2cdf7fa770a6bd0a75a28422e6f8c62cc5df44de78987e22f8","ssdeep":"96:oNGhPc3gsCo8qq6dV2A8uGXLTRVzIPJFjsx2yP3zvvVM:nF/+5dV18uGvfIPJFjalM","tlshash":"16817fc641527484c677018dcf6382d6eff0e30d7914574954da989b2b063e96accf82","first_seen":"2024-08-22T17:21:44.341781Z","last_seen":"2026-01-26T03:36:30.110757Z","times_seen":28,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.show-sb.com/sb/notifications/utility/default/robot/3/index.html","fqdn":"cdn.show-sb.com","domain":"show-sb.com","tld":"com"},"ip":{"addr":"172.67.170.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:36.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"show-sb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Oct 2025 15:30:46 GMT","end":"Tue, 06 Jan 2026 16:29:13 GMT"},"fingerprint":{"sha1":"CE:BB:4F:68:2C:89:90:90:9F:0D:E4:DC:37:55:B5:DC:41:49:D6:F9","sha256":"52:3F:5E:43:C5:77:DF:EF:E5:AE:11:CA:C1:74:9E:6B:A8:63:B6:7A:C9:7F:8F:58:EF:05:C6:35:2F:C7:D2:9B"}}},"request":{"raw":"GET /sb/notifications/utility/default/robot/3/index.html HTTP/1.1\r\nHost: cdn.show-sb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://switchroms.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchroms.io/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 12 Nov 2025 21:19:36 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Mon, 30 Jun 2025 11:15:06 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tSWzNuKIHfk4jAaYVfax9wpePnZAYrSkgw05ZesK%2FcTS011U%2BnoWu5%2F9OHZqC8VIvnEVodk8OazOLZI%2FlRNaBEMAYOl8g%2FlRh7Hhch8%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 99d9118ccf5c0b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2218,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"02f5dbb1330ff16517996ff3f06f9bac","sha1":"6c27e56a5d0173e4f518969906f71c1e37830a59","sha256":"ef0af1d5eb0bb2361e8ff64de642fb17e25a37cff8b0f5220eff0a1cb95c03ed","sha512":"d7e14d0083aee5f18d849e8a4db6a926b3bba035164431fdf81008d50174e40116384deb8dd429229aa2ba90a88f9d6958bd5ced41660fc48376014b97dcb0f2","ssdeep":"","tlshash":"b941365a29fcd57315c390973b312f6b6d86d68b9a0b9540b3ec4e848fd6e81ce0320b","first_seen":"2025-07-04T18:28:09.293573Z","last_seen":"2026-03-14T22:16:28.976564Z","times_seen":1415,"resource_available":false,"data":null}},"time_used":489,"timings":{"blocked":37,"dns":21,"connect":1,"send":0,"wait":412,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flushpersist.com/pxf.gif?uuid=e6d9cfb6-1dcb-4637-a18d-7de2b13e2317\u0026eb=bff3d6bf6d16c0bb5e58232c1a99ef63\u0026te=fe015aeda515c30449c87b1701cc307f\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=0cbd60ae91020949f7db0f82252e5c98\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=21","fqdn":"flushpersist.com","domain":"flushpersist.com","tld":"com"},"ip":{"addr":"172.240.127.243","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:36.441Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"flushpersist.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 22:02:45 GMT","end":"Tue, 27 Jan 2026 22:02:44 GMT"},"fingerprint":{"sha1":"F7:0F:08:42:86:24:7C:1B:49:6E:E0:01:4D:B6:85:C3:51:09:E9:4B","sha256":"57:4B:E8:D9:F8:CD:FB:C3:56:16:42:88:21:1B:6A:B3:83:F2:4E:B5:2C:AC:2C:6B:0E:46:6B:15:51:D1:3D:17"}}},"request":{"raw":"GET /pxf.gif?uuid=e6d9cfb6-1dcb-4637-a18d-7de2b13e2317\u0026eb=bff3d6bf6d16c0bb5e58232c1a99ef63\u0026te=fe015aeda515c30449c87b1701cc307f\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=0cbd60ae91020949f7db0f82252e5c98\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=21 HTTP/1.1\r\nHost: flushpersist.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchroms.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 12 Nov 2025 21:19:36 GMT\r\nContent-Type: image/gif\r\nContent-Length: 1\r\nConnection: keep-alive\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\nx-envoy-upstream-service-time: 0\r\nHost: flushpersist.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 3f78d5be2a73931254628498515ea4ec\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T13:49:31.916752Z","times_seen":13333799,"resource_available":true,"data":null}},"time_used":678,"timings":{"blocked":293,"dns":0,"connect":98,"send":0,"wait":93,"receive":0,"ssl":186},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"professionaltrafficmonitor.com/stats","fqdn":"professionaltrafficmonitor.com","domain":"professionaltrafficmonitor.com","tld":"com"},"ip":{"addr":"52.59.96.77","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:34.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"protrafficinspector.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 01 Jul 2025 00:00:00 GMT","end":"Thu, 30 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:D5:8D:EB:A4:50:13:0D:7C:33:71:82:B8:02:49:4F:D6:31:B6:E6","sha256":"49:03:4C:2C:1B:23:D8:D6:CB:AE:F0:54:61:99:C2:20:F4:FF:87:5E:0B:72:B1:6B:D8:AB:21:49:2D:F2:EC:4A"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: professionaltrafficmonitor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://switchroms.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchroms.io/\r\nCookie: uid_id2=e6d9cfb6-1dcb-4637-a18d-7de2b13e2317:2:1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 12 Nov 2025 21:19:34 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\nserver: fasthttp\r\naccess-control-allow-origin: https://switchroms.io\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"489e2f0fc30c15e2589076201e99afd2","sha1":"e18ec25a5da214a0e1bd51582f8995616ded6723","sha256":"8a719e35f79794c7b36fc660178d3157fd4c4c5fca4096a9a98161952afcb95f","sha512":"bb99582a6e327c2de57bd8280ec077f90cbc1f27d597911510a70f94e0b86952efeb3c57647d12239082c9937e25012d03c460c5150260493baa0dbc4718b218","ssdeep":"","tlshash":"059004dc50c3510040110d43110df4c14410c4715d305d444d55510f57133010c10f47","first_seen":"2025-11-12T21:20:09.040526Z","last_seen":"2025-11-12T21:20:09.040526Z","times_seen":1,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/pixel/sbs?c=1","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:38.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Oct 2025 22:01:12 GMT","end":"Sat, 24 Jan 2026 22:01:11 GMT"},"fingerprint":{"sha1":"15:FA:E2:08:0A:F1:68:03:29:64:51:B0:FA:3B:8E:DD:DC:B7:CD:01","sha256":"F8:EA:EA:FF:5A:CA:9D:E1:82:F0:8C:3C:7C:6B:FB:06:8F:72:6C:0E:64:EF:7B:3B:2B:21:25:C2:25:7D:0C:BD"}}},"request":{"raw":"GET /pixel/sbs?c=1 HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchroms.io/\r\nCookie: ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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_ZG93bmxvYWQ9OCIsImFyIjpbXX19.oHGrbec2D3uoBV9hgp3roauagjWhSj4MWmxfPRAFU28; uid_id2=e6d9cfb6-1dcb-4637-a18d-7de2b13e2317:2:1; pdhtkv=true; uncs=1; pdhtkv5=true; uncs5=1; u_pl27929006=1; pdhtkv29=true; uncs29=1; u_pl26551100=1; slec0e536fb8895c74d7dcf7b58fe63dae08=[6233297]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 12 Nov 2025 21:19:38 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T13:49:31.916752Z","times_seen":13333799,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/wp-content/uploads/2025/04/Mario-Luigi-Brothership.webp","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"104.21.8.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:33.445Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switchroms.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 05:25:51 GMT","end":"Tue, 03 Feb 2026 06:24:36 GMT"},"fingerprint":{"sha1":"11:CC:5E:77:C5:8A:9E:7C:E3:7B:3C:A9:00:ED:93:7A:8E:43:32:D3","sha256":"81:8A:05:E3:87:30:CE:C5:DD:1A:59:5E:40:36:ED:1C:56:08:F6:B6:6F:7A:26:73:58:A3:DC:2B:40:E1:11:B9"}}},"request":{"raw":"GET /wp-content/uploads/2025/04/Mario-Luigi-Brothership.webp HTTP/1.1\r\nHost: switchroms.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 12 Nov 2025 21:19:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 83698\r\nlast-modified: Tue, 15 Apr 2025 11:00:11 GMT\r\netag: \"67fe3c3b-146f2\"\r\nserver: cloudflare\r\nx-content-type-options: \"nosniff\" always\r\nx-xss-protection: \"1; mode=block\" always\r\nstrict-transport-security: \"max-age=31536000; includeSubDomains; preload\" always\r\nreferrer-policy: no-referrer-when-downgrade\r\nexpires: Wed, 11 Nov 2026 10:23:53 GMT\r\ncache-control: public, max-age=31536000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\naccept-ranges: bytes\r\nage: 125739\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sa1vI7gjtDZm2x8YvO0KM0JofIRgSjNYndmUpt3ulFuEFM7IhAFRAFrPqxJ505A4p%2FL0l1tsUeyfNWZiNk9KizfbMhGE4kFnKZkt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 99d91179ac16b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":83698,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"50db7e69439c3117e3defaa4371a87b9","sha1":"14290370ece2dc1af032297925de760fa5607c14","sha256":"10265d4b7fd402a3ebd7aa57331732684da6518cef6b063f48d39822144416d6","sha512":"7d64df5ca65f621884b8a06801e43c4eb26b8b14ff811f8c7a3e458aaacfb0e8dad19acaa659a84ff88ceb0cb48058c034259b2d3aebb343e0a5f6e2e6e16d86","ssdeep":"1536:Pk4J/umPWQWD3q03dau1AehQ7ZxYfxI51M6m4MQBX5CT8GLVqPvofVgURx9mDt48:84NuwiD3P38ueehQ7ZxYEMdwrCT8G8Px","tlshash":"c583028837a19d1807173090ca65eb8b7b9d9ffda05cdb4ff18d315e581f232116aac9","first_seen":"2025-05-28T10:03:28.187449Z","last_seen":"2026-01-26T03:36:30.068713Z","times_seen":16,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/wp-content/plugins/wpdiscuz/assets/third-party/font-awesome-5.13.0/webfonts/fa-regular-400.woff2","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"104.21.8.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:34.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switchroms.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 05:25:51 GMT","end":"Tue, 03 Feb 2026 06:24:36 GMT"},"fingerprint":{"sha1":"11:CC:5E:77:C5:8A:9E:7C:E3:7B:3C:A9:00:ED:93:7A:8E:43:32:D3","sha256":"81:8A:05:E3:87:30:CE:C5:DD:1A:59:5E:40:36:ED:1C:56:08:F6:B6:6F:7A:26:73:58:A3:DC:2B:40:E1:11:B9"}}},"request":{"raw":"GET /wp-content/plugins/wpdiscuz/assets/third-party/font-awesome-5.13.0/webfonts/fa-regular-400.woff2 HTTP/1.1\r\nHost: switchroms.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://switchroms.io/wp-content/plugins/wpdiscuz/assets/third-party/font-awesome-5.13.0/css/fa.min.css?ver=99997.6.25\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 12 Nov 2025 21:19:34 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 13584\r\nlast-modified: Tue, 08 Oct 2024 02:40:54 GMT\r\netag: \"67049bb6-3510\"\r\nserver: cloudflare\r\nx-content-type-options: \"nosniff\" always\r\nx-xss-protection: \"1; mode=block\" always\r\nstrict-transport-security: \"max-age=31536000; includeSubDomains; preload\" always\r\nreferrer-policy: no-referrer-when-downgrade\r\nexpires: Tue, 10 Nov 2026 16:30:24 GMT\r\ncache-control: public, max-age=31536000, must-revalidate, proxy-revalidate\r\naccept-ranges: bytes\r\nage: 190149\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8elQBbcZ7XqMsVmEJasVKFLbBQuNfvlZ2g0Bq4bHj4KzPhaByGvVGZH0fUTrscGNvCD23lh%2Bm%2BXY%2BZpK3rODotg9Nm5dhj%2FB6m3C\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 99d9117e4ca4b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13584,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 13584, version 331.524","md5":"c20b5b7362d8d7bb7eddf94344ace33e","sha1":"260bb01acd44d88dcb7f501a238ab968f86bef9e","sha256":"6a8c8e9e1e7f692c21af1956de163f3d026778e6449fe93a09a671847ca1ae65","sha512":"75d8799a172ae620eaa3ac889cb055fbea9a98d24eb471c826e6bb4c4de685ab3332e888853adb7a6725035edcfd3a29fe9713874c857f14b1c01825ce8164f6","ssdeep":"192:h9DS9gO2kGgdtTZjFBhJhg/5kykmeznSk5mAzH9Jpn8ShuKEzuIhvBu9vlYeT+/y:h9aOgFjHuv2IAZJprl99Ye62tN","tlshash":"9552c0e1b93d1d00aa7682ed8d59615a3642f15f9603f06dbe8fa3d0412bc3c30a771c","first_seen":"2023-04-06T22:39:57Z","last_seen":"2026-04-04T10:53:57.055951Z","times_seen":5751,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/notifications/utility/default/robot/3/img/close.png","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:37.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 20:46:36 GMT","end":"Sun, 25 Jan 2026 21:44:54 GMT"},"fingerprint":{"sha1":"17:8B:5E:32:3A:E5:9A:3D:E5:18:EF:F0:DA:DE:C3:03:E7:2E:E2:17","sha256":"65:D5:7F:0D:8E:51:6B:E8:BB:44:A1:54:79:43:73:C4:82:1D:77:6C:11:F4:C3:70:8E:0E:AC:00:AC:1D:DB:2B"}}},"request":{"raw":"GET /sb/notifications/utility/default/robot/3/img/close.png HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 12 Nov 2025 21:19:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 7005\r\nserver: cloudflare\r\nlast-modified: Mon, 30 Jun 2025 11:15:07 GMT\r\npriority: u=4,i=?0\r\netag: \"686271bb-1b5d\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\naccept-ranges: bytes\r\nage: 1698434\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pA1XJPfijibYcJBllsfjIQCVXswada7Bjygdexgb9Hydt6AejP5WVtkxmxuBlfATWMNSaFckTekkCBGgC2%2BVWZQIrVF5wRST5WIE45nc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 99d91191898a56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7005,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"5127599f81c439cb0cf21166da26e991","sha1":"a750620e45c25855fb32ede5f1adb69ad28c1eeb","sha256":"9402058e0a31e79cd70001ebb397de51144d6e638a482f33bcee9a94dc20a6ff","sha512":"4e01869e43212009dc3811b4fc2303c39ab9aa123ce034ff4df220539a1e65784835b6cb0873cea4f6de027a7dcf1dd440ac0631e6b9c9db9085804473e3a0a8","ssdeep":"192:FkknNHG5WNN4kVyitdix/Inm2I6BRvBevoIPkucZ:9nNmoN4kVyiswm2I6BFBpuI","tlshash":"dee17d19dda17e1005d57f8a2fef815243638390c2856282dced8c5237e40f1ec6e4cb","first_seen":"2025-07-04T18:28:09.283921Z","last_seen":"2026-03-23T06:05:48.044552Z","times_seen":3194,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:38.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:51 GMT","end":"Mon, 05 Jan 2026 08:38:50 GMT"},"fingerprint":{"sha1":"89:73:B0:EF:F1:BA:6A:DA:6C:2C:87:70:0D:17:11:82:30:E9:13:68","sha256":"96:8D:5D:62:3A:3A:D6:CD:06:9A:CE:52:F4:2D:91:F9:66:13:40:F4:5F:9B:88:3D:55:04:79:E3:14:96:51:FA"}}},"request":{"raw":"GET /s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://switchroms.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 06 Nov 2025 09:54:03 GMT\r\nexpires: Fri, 06 Nov 2026 09:54:03 GMT\r\ncache-control: public, max-age=31536000\r\nage: 559535\r\nlast-modified: Mon, 08 Sep 2025 18:08:05 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-04-04T13:48:50.794073Z","times_seen":714611,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/cdn-cgi/rum?","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"104.21.8.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:34.522Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switchroms.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 05:25:51 GMT","end":"Tue, 03 Feb 2026 06:24:36 GMT"},"fingerprint":{"sha1":"11:CC:5E:77:C5:8A:9E:7C:E3:7B:3C:A9:00:ED:93:7A:8E:43:32:D3","sha256":"81:8A:05:E3:87:30:CE:C5:DD:1A:59:5E:40:36:ED:1C:56:08:F6:B6:6F:7A:26:73:58:A3:DC:2B:40:E1:11:B9"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: switchroms.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8\r\ncontent-type: application/json\r\nContent-Length: 471\r\nOrigin: https://switchroms.io\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_YR6V7LMBP0=GS2.1.s1762982374$o1$g0$t1762982374$j60$l0$h0; _ga=GA1.1.422467514.1762982374\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\naccess-control-allow-origin: https://switchroms.io\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-max-age: 86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fVaXvHiu8oqgZyBPju%2FXwCNeArHnVvz6DHre3ODdvVV43c0UJPp49khrE2Cxaziwk1NCm1XVOHuwBZa%2FtnxOJmVFmGYdxts41F33\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 12 Nov 2025 21:19:34 GMT\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 99d91180ccb4b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T13:49:31.916752Z","times_seen":13333799,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:300,400,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:37.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:51 GMT","end":"Mon, 05 Jan 2026 08:38:50 GMT"},"fingerprint":{"sha1":"1D:8E:3A:85:91:AC:63:71:94:8B:0E:61:45:34:D9:86:AB:A6:E2:CE","sha256":"E6:93:4E:53:89:15:41:28:27:59:AA:84:50:96:96:1E:2A:98:7E:08:60:AE:68:62:AE:DD:86:AB:DB:0F:FE:2B"}}},"request":{"raw":"GET /css?family=Roboto:300,400,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 12 Nov 2025 21:19:37 GMT\r\ndate: Wed, 12 Nov 2025 21:19:37 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16755,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"a90fc2bf15e304ef3fa4e7f75b6a8608","sha1":"0f8c2853b49a7c206d75af99117482d80a60f869","sha256":"6e10be4b6befecf6f3d1ae34b727939e6da334a1f2d815fd325ba9c455520772","sha512":"0d1a14e11c436dadf51cc489592867eaff3cae2c4a95748d2a25614c984560ad3588fb95e2aaafd4060d4954594951d09e71ab36e9859fb8590198811f156fc4","ssdeep":"384:pwf5wgwPwrwyUw/qY4+w4wYwpwfMw1wWw6wyhw/qY4XwNwtw4wfdwkwDw3wyQw/P:pc70afUQRptmJKBLfhQE8YTYHw+fQQVl","tlshash":"b472ed91041700009b835ce223cebf35fe5f92117141d0b9abfd9b6badcbc6652693ad","first_seen":"2025-09-08T23:24:40.129975Z","last_seen":"2025-11-18T23:33:55.863403Z","times_seen":3582,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":61,"dns":2,"connect":9,"send":0,"wait":19,"receive":0,"ssl":68},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Frobot%2F3%2Fcss%2Fstyle.css\u0026l=7008\u0026fd=503","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:37.595Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Oct 2025 22:01:12 GMT","end":"Sat, 24 Jan 2026 22:01:11 GMT"},"fingerprint":{"sha1":"15:FA:E2:08:0A:F1:68:03:29:64:51:B0:FA:3B:8E:DD:DC:B7:CD:01","sha256":"F8:EA:EA:FF:5A:CA:9D:E1:82:F0:8C:3C:7C:6B:FB:06:8F:72:6C:0E:64:EF:7B:3B:2B:21:25:C2:25:7D:0C:BD"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Frobot%2F3%2Fcss%2Fstyle.css\u0026l=7008\u0026fd=503 HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchroms.io/\r\nCookie: ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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_ZG93bmxvYWQ9OCIsImFyIjpbXX19.oHGrbec2D3uoBV9hgp3roauagjWhSj4MWmxfPRAFU28; uid_id2=e6d9cfb6-1dcb-4637-a18d-7de2b13e2317:2:1; pdhtkv=true; uncs=1; pdhtkv5=true; uncs5=1; u_pl27929006=1; pdhtkv29=true; uncs29=1; u_pl26551100=1; slec0e536fb8895c74d7dcf7b58fe63dae08=[6233297]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 12 Nov 2025 21:19:37 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T13:49:31.916752Z","times_seen":13333799,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":94,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/wp-content/plugins/sharethis-share-buttons/css/mu-style.css?ver=1756634035","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"104.21.8.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:33.322Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switchroms.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 05:25:51 GMT","end":"Tue, 03 Feb 2026 06:24:36 GMT"},"fingerprint":{"sha1":"11:CC:5E:77:C5:8A:9E:7C:E3:7B:3C:A9:00:ED:93:7A:8E:43:32:D3","sha256":"81:8A:05:E3:87:30:CE:C5:DD:1A:59:5E:40:36:ED:1C:56:08:F6:B6:6F:7A:26:73:58:A3:DC:2B:40:E1:11:B9"}}},"request":{"raw":"GET /wp-content/plugins/sharethis-share-buttons/css/mu-style.css?ver=1756634035 HTTP/1.1\r\nHost: switchroms.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 12 Nov 2025 21:19:33 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\nlast-modified: Sun, 31 Aug 2025 09:53:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-content-type-options: \"nosniff\" always\r\nx-xss-protection: \"1; mode=block\" always\r\nstrict-transport-security: \"max-age=31536000; includeSubDomains; preload\" always\r\nreferrer-policy: no-referrer-when-downgrade\r\nexpires: Fri, 30 Oct 2026 06:56:16 GMT\r\ncache-control: public, max-age=31536000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\ncontent-encoding: br\r\nage: 1174996\r\ncf-cache-status: HIT\r\netag: W/\"68b41bb3-1a\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WV1lrxuvLjNeX04vWQH8odcof8gNmUmCu8sKt3fTQ79NJSv72QChIovy1PEtLolWNiG3X6TPBiRcV%2FO28TH3kVGqFDuwLm%2BZ1Yzp\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: 99d911793c0db4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"59e211863955a948e58478e522b402c4","sha1":"fb63c77d17ff41f6347ca2b25e32686f2b3c3bcc","sha256":"f85e538e44687fc0feaa2f66a67831ec9f9b03446f115dec74b996da4a0a4a52","sha512":"ca22caa4491919ed44d39e08089e7b6d9851d57a04a55e31c7827474a6d6b904428e069b51a0234a6d1ee048f0c24235bd4c03e7d567e5496cdefc9f2e66bb92","ssdeep":"","tlshash":"4a80008082080a30038282088a0200a0a38a88e003e2a00008a200800aa000020b8083","first_seen":"2023-04-11T19:00:21Z","last_seen":"2026-04-04T09:38:23.509403Z","times_seen":1079,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/wp-content/uploads/2025/04/BIOMORPH.webp","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"104.21.8.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:33.446Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switchroms.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 05:25:51 GMT","end":"Tue, 03 Feb 2026 06:24:36 GMT"},"fingerprint":{"sha1":"11:CC:5E:77:C5:8A:9E:7C:E3:7B:3C:A9:00:ED:93:7A:8E:43:32:D3","sha256":"81:8A:05:E3:87:30:CE:C5:DD:1A:59:5E:40:36:ED:1C:56:08:F6:B6:6F:7A:26:73:58:A3:DC:2B:40:E1:11:B9"}}},"request":{"raw":"GET /wp-content/uploads/2025/04/BIOMORPH.webp HTTP/1.1\r\nHost: switchroms.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 12 Nov 2025 21:19:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 58878\r\nlast-modified: Sun, 13 Apr 2025 16:25:52 GMT\r\netag: \"67fbe590-e5fe\"\r\nserver: cloudflare\r\nx-content-type-options: \"nosniff\" always\r\nx-xss-protection: \"1; mode=block\" always\r\nstrict-transport-security: \"max-age=31536000; includeSubDomains; preload\" always\r\nreferrer-policy: no-referrer-when-downgrade\r\nexpires: Thu, 22 Oct 2026 22:56:20 GMT\r\ncache-control: public, max-age=31536000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\naccept-ranges: bytes\r\nage: 1808592\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lBEMgq69UEDgHilA7fOtAytgIEdvbOI8D%2FtESsUyKvOHIMSeI%2ByvzbaD3%2Bc1BzbH6Tu72z4%2BK9zKQw4JXVuJoyTuvJODjxu%2FcHGJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 99d91179ac17b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58878,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d563ab64ef6529e11b38bfb5a73ac7b4","sha1":"e4f47619ad750172c0411152cd8ba6d41a075ad1","sha256":"68e9505ba41fec3f1db09f6937b8af2a9aa0f91a0464af87ece1e9e391309dcf","sha512":"c7b93f3ed5c71b965e866e5c88981e0f602b31423be047779adfc309b75e8bb611fc04ffb29178f227cf2fa01c019da41b679d33911043a3f851e30c9ffb366e","ssdeep":"1536:LcK/wG5MX/uZdYd6gtC9KtniOGOHGvM2kZvo1N:LP18WZdoiyiOGyWN","tlshash":"1843f298369187c004f721e6027dae9e4f3c49abc7ea0b2c98255daf40d5fd4a9c19b7","first_seen":"2025-04-14T02:23:47.102816Z","last_seen":"2026-01-26T03:36:30.073727Z","times_seen":17,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/naPR4A6FAh-yZLuCX253WaZq/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lf5HEcrAAAAAC9S0Htng-O8awd5XURMd7HB57jb\u0026co=aHR0cHM6Ly9zd2l0Y2hyb21zLmlvOjQ0Mw..\u0026hl=en\u0026v=naPR4A6FAh-yZLuCX253WaZq\u0026theme=light\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=2w0fub742pck","date":"2025-11-12T21:19:35.552Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:51 GMT","end":"Mon, 05 Jan 2026 08:38:50 GMT"},"fingerprint":{"sha1":"89:73:B0:EF:F1:BA:6A:DA:6C:2C:87:70:0D:17:11:82:30:E9:13:68","sha256":"96:8D:5D:62:3A:3A:D6:CD:06:9A:CE:52:F4:2D:91:F9:66:13:40:F4:5F:9B:88:3D:55:04:79:E3:14:96:51:FA"}}},"request":{"raw":"GET /recaptcha/releases/naPR4A6FAh-yZLuCX253WaZq/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 353816\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 06 Nov 2025 14:56:50 GMT\r\nexpires: Fri, 06 Nov 2026 14:56:50 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 03 Nov 2025 01:02:43 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 541365\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":831371,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (635)","md5":"63c498d57127fe483df232908f0fd8ca","sha1":"62e1b46be1af5f4e082e3199a7a400ae2aef0fc0","sha256":"d4883381009ff8e5c4b05722f62b60f6182b1d2a0631d12fe4075026bac1929f","sha512":"a68902be5fbb3091d71f5d720304f0ce8b516086fb0f820857faa0a2be3e405dba2184fe2ce6f76c4ceba6e541e278e1faffef01407a27dff2da69cbf65bac15","ssdeep":"12288:CY5y6bdmo2rT27K082gMSon+wt/puh2MCaxj80OQDj3Fc:r5yCdcX8K0BgMwwjuI6LOKVc","tlshash":"61053ade745176a18323b5f9502750ad973ead2ac44c089db1a4c8f02ef9809b4b6ff7","first_seen":"2025-11-04T19:51:16.53192Z","last_seen":"2025-12-20T15:18:51.762291Z","times_seen":17838,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/naPR4A6FAh-yZLuCX253WaZq/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/webworker.js?hl=en\u0026v=naPR4A6FAh-yZLuCX253WaZq","date":"2025-11-12T21:19:35.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:51 GMT","end":"Mon, 05 Jan 2026 08:38:50 GMT"},"fingerprint":{"sha1":"89:73:B0:EF:F1:BA:6A:DA:6C:2C:87:70:0D:17:11:82:30:E9:13:68","sha256":"96:8D:5D:62:3A:3A:D6:CD:06:9A:CE:52:F4:2D:91:F9:66:13:40:F4:5F:9B:88:3D:55:04:79:E3:14:96:51:FA"}}},"request":{"raw":"GET /recaptcha/releases/naPR4A6FAh-yZLuCX253WaZq/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 353816\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 06 Nov 2025 14:56:50 GMT\r\nexpires: Fri, 06 Nov 2026 14:56:50 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 03 Nov 2025 01:02:43 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 541365\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":831371,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (635)","md5":"63c498d57127fe483df232908f0fd8ca","sha1":"62e1b46be1af5f4e082e3199a7a400ae2aef0fc0","sha256":"d4883381009ff8e5c4b05722f62b60f6182b1d2a0631d12fe4075026bac1929f","sha512":"a68902be5fbb3091d71f5d720304f0ce8b516086fb0f820857faa0a2be3e405dba2184fe2ce6f76c4ceba6e541e278e1faffef01407a27dff2da69cbf65bac15","ssdeep":"12288:CY5y6bdmo2rT27K082gMSon+wt/puh2MCaxj80OQDj3Fc:r5yCdcX8K0BgMwwjuI6LOKVc","tlshash":"61053ade745176a18323b5f9502750ad973ead2ac44c089db1a4c8f02ef9809b4b6ff7","first_seen":"2025-11-04T19:51:16.53192Z","last_seen":"2025-12-20T15:18:51.762291Z","times_seen":17838,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:34.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"preferencenail.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 23:40:35 GMT","end":"Tue, 27 Jan 2026 23:40:34 GMT"},"fingerprint":{"sha1":"AA:22:33:AC:0A:FC:0D:31:C5:9F:92:99:20:7A:02:E4:46:E3:08:8C","sha256":"72:5A:79:00:74:D1:90:EF:9A:D3:3F:01:E6:E5:14:1D:41:4F:F2:28:D3:FD:4C:AA:70:DE:D8:BE:C2:15:3F:EE"}}},"request":{"raw":"GET /sfp.js HTTP/1.1\r\nHost: preferencenail.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchroms.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 12 Nov 2025 21:19:34 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nContent-Length: 32182\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nVary: Accept-Encoding\r\nHost: preferencenail.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 27d0e50e235e6115cc84d020fd639ed7\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":85386,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"46a6fef91632b94d14252fe324c1585f","sha1":"387cebbd261b8fe947fe9805875300f2ceeb5cfd","sha256":"36d0c771f8bf310d740cb4d0ca144354c45df284e72361660448708d72f175d5","sha512":"a3aaa1b5ab1113a12793bd1085332eb257416aaa9c4a690525838b91453a281580a979bfb856b3c429c2d4243c3ce02bd318a4b7048124eef96912179836d0fd","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRL:nPncLBSUBULGVTfGpucE5fox","tlshash":"528395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","first_seen":"2025-07-08T10:38:39.799377Z","last_seen":"2025-11-18T17:01:51.014373Z","times_seen":15230,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/wp-includes/css/dist/block-library/style.min.css?ver=6.8.3","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"104.21.8.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:33.317Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switchroms.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 05:25:51 GMT","end":"Tue, 03 Feb 2026 06:24:36 GMT"},"fingerprint":{"sha1":"11:CC:5E:77:C5:8A:9E:7C:E3:7B:3C:A9:00:ED:93:7A:8E:43:32:D3","sha256":"81:8A:05:E3:87:30:CE:C5:DD:1A:59:5E:40:36:ED:1C:56:08:F6:B6:6F:7A:26:73:58:A3:DC:2B:40:E1:11:B9"}}},"request":{"raw":"GET /wp-includes/css/dist/block-library/style.min.css?ver=6.8.3 HTTP/1.1\r\nHost: switchroms.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 12 Nov 2025 21:19:33 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 15 Jul 2025 21:03:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6876c224-1c679\"\r\nserver: cloudflare\r\nx-content-type-options: \"nosniff\" always\r\nx-xss-protection: \"1; mode=block\" always\r\nstrict-transport-security: \"max-age=31536000; includeSubDomains; preload\" always\r\nreferrer-policy: no-referrer-when-downgrade\r\nexpires: Thu, 01 Oct 2026 06:06:16 GMT\r\ncache-control: public, max-age=31536000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\ncontent-encoding: gzip\r\nage: 3683597\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=anvRZBEOl8N5lyxx8x9TETZpEDtiG5H9ou%2BuPVEaedODk5RTSef3E24eZdqMX%2F6VPFWplUUzSaJSk%2F9nKG5DTYS0DZKJcYvEO8Gk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 99d911793c0bb4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":116345,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (55654)","md5":"a06b3af98203ddc303997e0e0caaff83","sha1":"04c3e7de74a890d18014588c4e1f077a52d79acc","sha256":"838ede31a58a3cdb411d6dd7f13cbe65d4a26193d9fa31882854e63938f12bac","sha512":"4ce1079b8dc07043b0201dc74f5888b50aa530a4e604eecd7673e225946de62c421b290a707014ddaf4366591f8c4767737b5689bc44d57eb0a11aef905cead9","ssdeep":"3072:seeJu1iQg5MG7x+qehvP0x2pck2qkA3Pu:b1iQg5MG7x+qehvP0x2pck2lA2","tlshash":"34b3615417b4dcf935ffa73a5e4ee248a503aa41c68a57ebe066d190618ca490cf3f0f","first_seen":"2025-07-15T17:03:07.843749Z","last_seen":"2026-04-04T13:47:48.523889Z","times_seen":164222,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure.gravatar.com/avatar/fc2b727178edf6766438de74c4366884635d0fddb4faa2319875459e9abb76d6?s=64\u0026d=mm\u0026r=g","fqdn":"secure.gravatar.com","domain":"gravatar.com","tld":"com"},"ip":{"addr":"192.0.73.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:34.515Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gravatar.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Oct 2025 19:44:01 GMT","end":"Sat, 10 Jan 2026 19:44:00 GMT"},"fingerprint":{"sha1":"9A:AD:B4:0D:78:72:BD:79:3B:85:71:6E:98:21:AA:57:5D:FE:A1:D8","sha256":"23:BF:7F:44:90:FB:07:43:D0:6E:80:2E:C0:31:09:27:0E:4B:CA:85:DA:67:94:AE:FF:06:30:93:B6:78:DB:53"}}},"request":{"raw":"GET /avatar/fc2b727178edf6766438de74c4366884635d0fddb4faa2319875459e9abb76d6?s=64\u0026d=mm\u0026r=g HTTP/1.1\r\nHost: secure.gravatar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchroms.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 12 Nov 2025 21:19:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1155\r\nlast-modified: Wed, 11 Jan 1984 08:00:00 GMT\r\nlink: \u003chttps://gravatar.com/avatar/fc2b727178edf6766438de74c4366884635d0fddb4faa2319875459e9abb76d6?s=64\u0026d=mm\u0026r=g\u003e; rel=\"canonical\"\r\naccess-control-allow-origin: *\r\ncontent-disposition: inline; filename=\"fc2b727178edf6766438de74c4366884635d0fddb4faa2319875459e9abb76d6.jpg\"\r\naccept-ranges: bytes\r\nexpires: Wed, 12 Nov 2025 21:24:34 GMT\r\ncache-control: max-age=300\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 28\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1155,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 64x64, components 3","md5":"ac694afcd02cb14b08df8117fe4f36cf","sha1":"46d1a2921e3845cbf8a9a79215a39749ec51c04f","sha256":"361487daaad16e08cef978cced98d0c8e9a0823aa0b5b3a6277234ff4d5ef7c7","sha512":"1a0843257d0ce296d68ce82e645c2c7f35cf76bc5a1d1aa3615cc25696d52ac8402c2056795c7698b3fdb21b823030f6d12a86beb00f70a32b9ebadb95dc3458","ssdeep":"","tlshash":"a221b6ab9b1303d0bc3b8db6491b2cbb93ed885174c0175abbe146d1a470ec8855ca8a","first_seen":"2025-02-23T11:22:39.456281Z","last_seen":"2026-04-04T04:35:18.246907Z","times_seen":439,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":33,"dns":60,"connect":11,"send":0,"wait":9,"receive":1,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/notifications/utility/default/robot/3/css/style.css","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:37.056Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 20:46:36 GMT","end":"Sun, 25 Jan 2026 21:44:54 GMT"},"fingerprint":{"sha1":"17:8B:5E:32:3A:E5:9A:3D:E5:18:EF:F0:DA:DE:C3:03:E7:2E:E2:17","sha256":"65:D5:7F:0D:8E:51:6B:E8:BB:44:A1:54:79:43:73:C4:82:1D:77:6C:11:F4:C3:70:8E:0E:AC:00:AC:1D:DB:2B"}}},"request":{"raw":"GET /sb/notifications/utility/default/robot/3/css/style.css HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://switchroms.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchroms.io/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 12 Nov 2025 21:19:37 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Mon, 30 Jun 2025 11:33:47 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6862761b-1b60\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F9Q34p1TqEctkCH9zbBIBRZK03NPBVnxo7JTctvzZhE0kRouWuwElGNBLhUpktMWPf30Fv%2BaC95xche7zhOFQC98m5daS8k9r5n%2BU3%2FN\"}]}\r\ncf-ray: 99d91190f91056a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7008,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"fb36710663e1b1cea266cd22469df0a5","sha1":"c26947d20f845e479a729880b019b94387a7572c","sha256":"489b7a8da57bff7e1700ef24006bbb60451f933c6c12b4808b251db88355fdf2","sha512":"49de21e634ae6383567bedd988764c685f2c0dfb09b2489b453fc06c1849804d3717b2aff972c54f285573435d0334d37e0c728cdb122b8c6aabf964036be701","ssdeep":"192:fMFIn7CSiyXnMsWM0kFRxX4zb32l0QofZ:fM9TyXnMrcF7E32l0RZ","tlshash":"c6e1109617a80204b50bd86739126f5767688043ef0fdab86ed1205c9eca6ce56f378f","first_seen":"2025-07-04T18:28:09.299693Z","last_seen":"2026-03-15T18:29:56.068984Z","times_seen":1459,"resource_available":false,"data":null}},"time_used":551,"timings":{"blocked":59,"dns":22,"connect":3,"send":0,"wait":431,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/notifications/utility/default/robot/3/img/moto.jpg","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:37.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 20:46:36 GMT","end":"Sun, 25 Jan 2026 21:44:54 GMT"},"fingerprint":{"sha1":"17:8B:5E:32:3A:E5:9A:3D:E5:18:EF:F0:DA:DE:C3:03:E7:2E:E2:17","sha256":"65:D5:7F:0D:8E:51:6B:E8:BB:44:A1:54:79:43:73:C4:82:1D:77:6C:11:F4:C3:70:8E:0E:AC:00:AC:1D:DB:2B"}}},"request":{"raw":"GET /sb/notifications/utility/default/robot/3/img/moto.jpg HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 12 Nov 2025 21:19:37 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 67346\r\nserver: cloudflare\r\nlast-modified: Mon, 30 Jun 2025 11:15:07 GMT\r\npriority: u=4,i=?0\r\netag: \"686271bb-10712\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\naccept-ranges: bytes\r\nage: 1546013\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0cm7KIHbCeebu6cWDwEjhHWmR63Ub9IxjUL0kuoX%2FFpfBP8LoYNmYCnZmeSADHrh1AYMZIgeI6tOpP4syrRhZgDYi0eXODEW%2BzNCf3YW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 99d91191999956cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67346,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 979x977, components 3","md5":"9332b3326cc361a4a12bedd347c0627b","sha1":"a664493b30154627e0111431603effa83ea3501d","sha256":"3a3e2f3cbb2612be427015f9d7890a061fd43d926f3e2c5520329cd9a98caecb","sha512":"d1eac35f0c2769d9abfe98b4f0c74a00a376f272783f07993900b45401a7aa2c2c6e3d9f92f3e02754cfed0e36244a4b0f28dda9c141ad3a69d4fa97080db31c","ssdeep":"1536:4RYzKW/1uASQjsyb7b3wPbmFMexScznEZ6YTjIpxzRE2:sW/TzsyHOalxFzne6IjoRm2","tlshash":"ee63018e7e45d5dc4fc8db61bc1eaed992861936044af1e2092c7a03967d00db539ecb","first_seen":"2025-07-04T18:28:09.271582Z","last_seen":"2026-03-15T18:29:56.081599Z","times_seen":1497,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/impr.gif?sid=H4sIAAAAAAAC_1RSPWwcRRiddSwKUiDAQEPESoAUBL7s3u79ESSDCYEoIYkcIxcUaHZm9jzc3s4ysz_nqywsoZRHgQSIYv3OjkUICCQaCsA6U1iyhJSjchE3KaBEAiHRoTtbinjF932jN8X33vc-2syOiIeMHl5_W_VlFNFztYpjn12RMVeFsa8u265Tcc7bKzKu--ft3qTo_GXX8yvOC_abgnXUuarjOo7ruPZFqUWoeuemLGRyp-VWWk7Fr1bcmo-e_v_bZBYMtcDzI_IYJB8_cj98F5KNEHe_vSBMJ1XJS290s4imSiPnO-_EnVgVMboPxlBbCOOdk99QZkzIpzNQ8c6JAqh8a6IAgRyTmSfvIYh3TtZEkG8fbxpEEDECfhpFPoKIRpB0BKY2IPldAjCOq9cQd29dVbqga8csnbBjMvvPX5DFmMzem0Pc_WYxkj37hoqyVKrYoBeWkL0RZHuEJNtD2rcgiz2w9ENI_itxnjqNuHv7LZXLjp0L3YHkh8-JOm-xMKjPu5wF837da8xTt8nnG1xUA9cTVc9tTI2S4QjUzCAzFjJpIQstZImFLj-0fafpM5d69bDFWcPxqe9zETitZtVxaIs1kLGJggHSZAAWDcD0OhK9jo4cQGe7MKslDLdgUoKclygEQWEICkpQSIIiJSjycptHpmrKWzwyWeCe9OpJ98qhStubdFulbRETUD2A5uWWTD4wG2DpqWE_NHyoJoUGaTmkAS83kyPy6MRc65NnX0FHHNqOqHn1MGg2WzXW8HmDs7AR1JqhqHucCqcJI0tIMwNqLPTlmFw--zwSOSYPnYkR0D2YaA9MPgGanQEtStDVEv34a1PIlK1q1TUVqcBViSSdRbpmbUZH5PHh0vLi7vTI7z19F4IdvHrmmZ_y_e9bYLpEoku8L38haEc3h0uqIFtLqjDku2tJKruyTycBuJHSVMzevizWCqX5pQtm8OVrbEJMxjvLwqRXaMxl3Dbkq0XJudAXlWaC_HjJrIjgemZWFzMdZ8mV669fvNRNtDBGqngEKsfk4S9eBJNjMnd2YRru2t_3wZJ1mORg4YfPJvgcRhEEiYVIjok3t49IHCwMf9_fJYSABiWMeKApEAc__0mm2DQ30dYWaLqBuFsi1yXyqASNBjDZqWGa6IOF37wpEETWMIi0tRVEOvr42CsjD-3QE1XmOM1G3fWaoXA9n7Ow1vRbvE4dzxNIzVjO_fvHfwEAAP__G_DxJYMEAAA=","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:38.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Oct 2025 22:01:12 GMT","end":"Sat, 24 Jan 2026 22:01:11 GMT"},"fingerprint":{"sha1":"15:FA:E2:08:0A:F1:68:03:29:64:51:B0:FA:3B:8E:DD:DC:B7:CD:01","sha256":"F8:EA:EA:FF:5A:CA:9D:E1:82:F0:8C:3C:7C:6B:FB:06:8F:72:6C:0E:64:EF:7B:3B:2B:21:25:C2:25:7D:0C:BD"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1RSPWwcRRiddSwKUiDAQEPESoAUBL7s3u79ESSDCYEoIYkcIxcUaHZm9jzc3s4ysz_nqywsoZRHgQSIYv3OjkUICCQaCsA6U1iyhJSjchE3KaBEAiHRoTtbinjF932jN8X33vc-2syOiIeMHl5_W_VlFNFztYpjn12RMVeFsa8u265Tcc7bKzKu--ft3qTo_GXX8yvOC_abgnXUuarjOo7ruPZFqUWoeuemLGRyp-VWWk7Fr1bcmo-e_v_bZBYMtcDzI_IYJB8_cj98F5KNEHe_vSBMJ1XJS290s4imSiPnO-_EnVgVMboPxlBbCOOdk99QZkzIpzNQ8c6JAqh8a6IAgRyTmSfvIYh3TtZEkG8fbxpEEDECfhpFPoKIRpB0BKY2IPldAjCOq9cQd29dVbqga8csnbBjMvvPX5DFmMzem0Pc_WYxkj37hoqyVKrYoBeWkL0RZHuEJNtD2rcgiz2w9ENI_itxnjqNuHv7LZXLjp0L3YHkh8-JOm-xMKjPu5wF837da8xTt8nnG1xUA9cTVc9tTI2S4QjUzCAzFjJpIQstZImFLj-0fafpM5d69bDFWcPxqe9zETitZtVxaIs1kLGJggHSZAAWDcD0OhK9jo4cQGe7MKslDLdgUoKclygEQWEICkpQSIIiJSjycptHpmrKWzwyWeCe9OpJ98qhStubdFulbRETUD2A5uWWTD4wG2DpqWE_NHyoJoUGaTmkAS83kyPy6MRc65NnX0FHHNqOqHn1MGg2WzXW8HmDs7AR1JqhqHucCqcJI0tIMwNqLPTlmFw--zwSOSYPnYkR0D2YaA9MPgGanQEtStDVEv34a1PIlK1q1TUVqcBViSSdRbpmbUZH5PHh0vLi7vTI7z19F4IdvHrmmZ_y_e9bYLpEoku8L38haEc3h0uqIFtLqjDku2tJKruyTycBuJHSVMzevizWCqX5pQtm8OVrbEJMxjvLwqRXaMxl3Dbkq0XJudAXlWaC_HjJrIjgemZWFzMdZ8mV669fvNRNtDBGqngEKsfk4S9eBJNjMnd2YRru2t_3wZJ1mORg4YfPJvgcRhEEiYVIjok3t49IHCwMf9_fJYSABiWMeKApEAc__0mm2DQ30dYWaLqBuFsi1yXyqASNBjDZqWGa6IOF37wpEETWMIi0tRVEOvr42CsjD-3QE1XmOM1G3fWaoXA9n7Ow1vRbvE4dzxNIzVjO_fvHfwEAAP__G_DxJYMEAAA= HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchroms.io/\r\nCookie: ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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_ZG93bmxvYWQ9OCIsImFyIjpbXX19.oHGrbec2D3uoBV9hgp3roauagjWhSj4MWmxfPRAFU28; uid_id2=e6d9cfb6-1dcb-4637-a18d-7de2b13e2317:2:1; pdhtkv=true; uncs=1; pdhtkv5=true; uncs5=1; u_pl27929006=1; pdhtkv29=true; uncs29=1; u_pl26551100=1; slec0e536fb8895c74d7dcf7b58fe63dae08=[6233297]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 12 Nov 2025 21:19:38 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nset-cookie: iprc_l+e092ef328751c9c8d2177004735df73a=6233297; expires=Thu, 13 Nov 2025 21:19:38 GMT; path=/; secure; SameSite=None\niprc_l:6233297=1; expires=Thu, 13 Nov 2025 21:19:38 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 3\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 444734c26ae75ed1d617f303ddaf219f\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T13:49:31.916752Z","times_seen":13333799,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"compiledonatevanity.com/e7ceb8faaad184ecffaafa7e251bdb56/invoke.js","fqdn":"compiledonatevanity.com","domain":"compiledonatevanity.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:33.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"compiledonatevanity.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Oct 2025 21:24:08 GMT","end":"Tue, 06 Jan 2026 21:24:07 GMT"},"fingerprint":{"sha1":"C7:52:82:2F:DC:5D:8E:4F:1F:D6:00:5B:9F:36:43:9C:4F:44:9B:0C","sha256":"66:83:8E:9F:63:B7:31:50:15:3B:62:2C:BF:29:CB:A0:E5:72:08:60:0F:46:92:AE:53:1D:64:1A:3D:4D:A5:97"}}},"request":{"raw":"GET /e7ceb8faaad184ecffaafa7e251bdb56/invoke.js HTTP/1.1\r\nHost: compiledonatevanity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchroms.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 12 Nov 2025 21:19:33 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 15697\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 2\r\nHost: compiledonatevanity.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: d266560eada74950a7c8deafe29f9328\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43296,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (43294), with no line terminators","md5":"56cd1809cae25b4c8a66d1927e03f623","sha1":"db44c4609102025f2a2d266601b1c1b45e5f8b3d","sha256":"803b86d2c4754be37babef91f9ea71eb47c2a5d786629eb8e88b91d277206390","sha512":"36e018e2b897343bc8dde08a60673ae465500576b0f5f311a1f9ab4ec35d96b8c34492a2a0d1100f39e96e4d7c00b5bf5e5acf109217fdf4ed7e9186832938ae","ssdeep":"768:McMESJo4Q0ygG019lwTd+v8I6FtfPAJEOlhP45XYStbuG:YJJATdlzBViG","tlshash":"4c13b8ec7f45b2ad028b6823113f660af1399b1275cdd59cf192f1e82b9c758c93ae14","first_seen":"2025-11-12T21:20:09.048559Z","last_seen":"2025-11-12T21:20:09.048559Z","times_seen":1,"resource_available":true,"data":null}},"time_used":738,"timings":{"blocked":264,"dns":1,"connect":92,"send":0,"wait":100,"receive":93,"ssl":186},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"compiledonatevanity.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"compiledonatevanity.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6.adsco.re/","fqdn":"6.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:36.061Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: 6.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://switchroms.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchroms.io/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T13:49:31.916752Z","times_seen":13333799,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":0,"dns":1,"connect":1,"send":0,"wait":0,"receive":0,"ssl":-1},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/notifications/utility/default/robot/3/img/cap.png","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:37.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 20:46:36 GMT","end":"Sun, 25 Jan 2026 21:44:54 GMT"},"fingerprint":{"sha1":"17:8B:5E:32:3A:E5:9A:3D:E5:18:EF:F0:DA:DE:C3:03:E7:2E:E2:17","sha256":"65:D5:7F:0D:8E:51:6B:E8:BB:44:A1:54:79:43:73:C4:82:1D:77:6C:11:F4:C3:70:8E:0E:AC:00:AC:1D:DB:2B"}}},"request":{"raw":"GET /sb/notifications/utility/default/robot/3/img/cap.png HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 12 Nov 2025 21:19:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 9969\r\nserver: cloudflare\r\nlast-modified: Mon, 30 Jun 2025 11:15:07 GMT\r\npriority: u=4,i=?0\r\netag: \"686271bb-26f1\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\naccept-ranges: bytes\r\nage: 1868224\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t5b4QUf5gxtUeJktBeKUruDF0myqAW5D6eHwKwKUXfjckdEDoMwoTkq1iXm90o3r%2Fr0s5UCseps954sSTyQ%2BOM8JYKq4lli2Q1VtrmSd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 99d91191999b56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9969,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 413 x 104, 8-bit/color RGB, non-interlaced","md5":"cd399821f365e9b2e08a8db38a7bf686","sha1":"94a95b55d5c755df8c30f7b2a80022ad014ab2b5","sha256":"f6fe4493007eb93efc7760942585342f506295cff8ca86432bde23fe256ccdb3","sha512":"72f641b5095cb7aafce82ccd88d740d9761e8bcaac1ad845ff01ceda61c469afe7e42c0ef76b49d73d4b51c21bf2dfc85073a1d49ce0fe19f77af907d05d18d9","ssdeep":"192:wS5knGCCJeNHLR+444aBNWkUzhkeJrkyuisuDP8GQxJF:XinGC1dR+441SJrkyPNEJF","tlshash":"7a22cfd2ec402ef47a4cbcdedbd80c667a8332c4e1537867ecde7c5ac80a03a8952945","first_seen":"2025-07-04T18:28:09.289965Z","last_seen":"2026-03-15T18:29:56.084803Z","times_seen":1496,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/wp-content/uploads/2025/04/Distant-Bloom.webp","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"104.21.8.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:33.450Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switchroms.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 05:25:51 GMT","end":"Tue, 03 Feb 2026 06:24:36 GMT"},"fingerprint":{"sha1":"11:CC:5E:77:C5:8A:9E:7C:E3:7B:3C:A9:00:ED:93:7A:8E:43:32:D3","sha256":"81:8A:05:E3:87:30:CE:C5:DD:1A:59:5E:40:36:ED:1C:56:08:F6:B6:6F:7A:26:73:58:A3:DC:2B:40:E1:11:B9"}}},"request":{"raw":"GET /wp-content/uploads/2025/04/Distant-Bloom.webp HTTP/1.1\r\nHost: switchroms.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 12 Nov 2025 21:19:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 69078\r\nlast-modified: Tue, 08 Apr 2025 17:01:34 GMT\r\netag: \"67f5566e-10dd6\"\r\nserver: cloudflare\r\nx-content-type-options: \"nosniff\" always\r\nx-xss-protection: \"1; mode=block\" always\r\nstrict-transport-security: \"max-age=31536000; includeSubDomains; preload\" always\r\nreferrer-policy: no-referrer-when-downgrade\r\nexpires: Tue, 03 Nov 2026 22:10:30 GMT\r\ncache-control: public, max-age=31536000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\naccept-ranges: bytes\r\nage: 774542\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OFgaaXTQ6%2BM98I3tqrYde5mKV1OGQk58LifgW5G%2BBb0VoC%2B%2FfifOTrPHKiF89J2JI05KqMioe5iuwTho14aFLJIgZ%2Ffg61LmU6bu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 99d91179ac1ab4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":69078,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a034ee8de1adc636d768fdef9d78f74c","sha1":"890d2efec759759deb57e01913666a1fde702734","sha256":"c4c641c37127968cf4143ae653d02b658536eb83b55ff4f8f0fd4f816cd5d783","sha512":"901e33581fccf47b6e0657c0b3f1e672c294aef7fce9e3c5704bfd81fc0712ee9ba05a0d3184ccc30592a92afd3176aab52e6776a9c9ec7a367c5a746b1f218c","ssdeep":"1536:uyTFQ/aogatdQtx2ck4mkE3mqZ618u4kdQ/M0gea5hQ:uyhURZQtx3OkE3mvT4kdxVhQ","tlshash":"e36301282cb090df9e7d8674074e7dfea73a9a93f114f832972020ed453d700b4a5aad","first_seen":"2025-06-14T08:56:20.58615Z","last_seen":"2026-01-26T03:36:30.072916Z","times_seen":6,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"r03obcy2avtm.l4.adsco.re/","fqdn":"r03obcy2avtm.l4.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:36.063Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: r03obcy2avtm.l4.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://switchroms.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchroms.io/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T13:49:31.916752Z","times_seen":13333799,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"r03obcy2avtm.s4.adsco.re/","fqdn":"r03obcy2avtm.s4.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:36.065Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: r03obcy2avtm.s4.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://switchroms.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchroms.io/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T13:49:31.916752Z","times_seen":13333799,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/pixel/pure","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:36.111Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Oct 2025 22:01:12 GMT","end":"Sat, 24 Jan 2026 22:01:11 GMT"},"fingerprint":{"sha1":"15:FA:E2:08:0A:F1:68:03:29:64:51:B0:FA:3B:8E:DD:DC:B7:CD:01","sha256":"F8:EA:EA:FF:5A:CA:9D:E1:82:F0:8C:3C:7C:6B:FB:06:8F:72:6C:0E:64:EF:7B:3B:2B:21:25:C2:25:7D:0C:BD"}}},"request":{"raw":"POST /pixel/pure HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 74\r\nOrigin: https://switchroms.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchroms.io/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 12 Nov 2025 21:19:36 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T13:49:31.916752Z","times_seen":13333799,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/si/d8/b1/09/d8b109165fc0ec08002c14fd9e81f6ece67b955e786b918b73abb33e5be5188f.png","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:36.030Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:33:02 GMT","end":"Thu, 05 Feb 2026 02:33:01 GMT"},"fingerprint":{"sha1":"FF:BB:C7:F6:31:A3:EE:08:8E:72:C4:2F:A2:C8:78:1B:3C:22:C4:57","sha256":"93:BE:65:88:B5:AC:E6:69:91:EE:F6:7E:27:3F:D6:9F:59:B1:AB:46:F7:49:0D:E8:F2:1C:9E:A9:BE:F9:B6:95"}}},"request":{"raw":"GET /si/d8/b1/09/d8b109165fc0ec08002c14fd9e81f6ece67b955e786b918b73abb33e5be5188f.png HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchroms.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 12 Nov 2025 21:19:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 57237\r\nserver: nginx/1.21.6\r\nlast-modified: Sun, 11 May 2025 14:02:30 GMT\r\netag: \"6820adf6-df95\"\r\nexpires: Fri, 14 Nov 2025 21:19:36 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":57237,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 320 x 240, 8-bit/color RGBA, non-interlaced","md5":"423a240fbfb182d7805dad3bb9e822bb","sha1":"6a853689b2cc95a6c36b98e6938e598bf2a28d52","sha256":"da19475c70c6669a83473eb52dec1feb61e629e374fdd426dd02024080d0b1a6","sha512":"98e063f429420821aa55688891aa4426d16d9e7ffa44f92f8d9d7f3e3870007872a66a718185428f197db14d070b7254e92a2cc7734cc54c39034c808daa7c8f","ssdeep":"1536:BP5oFAaPeX990yL036TelNvY6lEFLXmLw2JR:FWqaPeXz0yLDe7luXyH","tlshash":"ab430224ff03e61784be24af91eae88f1f6421bfb5b092807770221445b7c6b4282463","first_seen":"2025-05-16T16:44:08.672031Z","last_seen":"2026-04-04T12:17:30.446594Z","times_seen":3526,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":52,"dns":0,"connect":19,"send":0,"wait":19,"receive":46,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"r03obcy2avtm.n4.adsco.re/","fqdn":"r03obcy2avtm.n4.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:36.064Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: r03obcy2avtm.n4.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://switchroms.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchroms.io/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T13:49:31.916752Z","times_seen":13333799,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/notifications/utility/default/robot/3/js/script.js","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:37.363Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 20:46:36 GMT","end":"Sun, 25 Jan 2026 21:44:54 GMT"},"fingerprint":{"sha1":"17:8B:5E:32:3A:E5:9A:3D:E5:18:EF:F0:DA:DE:C3:03:E7:2E:E2:17","sha256":"65:D5:7F:0D:8E:51:6B:E8:BB:44:A1:54:79:43:73:C4:82:1D:77:6C:11:F4:C3:70:8E:0E:AC:00:AC:1D:DB:2B"}}},"request":{"raw":"GET /sb/notifications/utility/default/robot/3/js/script.js HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://switchroms.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchroms.io/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 12 Nov 2025 21:19:37 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 30 Jun 2025 11:15:08 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nage: 113320\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V4ptCNh82Ho1QyCypYccouA4eL9HYvuA6lUziSK5i42Lu1E%2F%2BMBjOkkVNMPtA6JUHMTfTuuiZiMwQ3%2BhNipzikbeEnfJskKvGzr5cTk%2B\"}]}\r\netag: W/\"686271bc-371c\"\r\ncontent-encoding: br\r\ncf-ray: 99d911928a5556cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14108,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text","md5":"9ab6f30bb69bd5ed2b95ec080d6df17d","sha1":"14f144dc6c53d712be564b1eef94f53c0a6dc7fa","sha256":"81d9c53b2dbbf34093776268451edaf2081a00fe9ad13002cc2bbf687149a836","sha512":"eb4911a8994c33422a72dac9fff6f8b2b52d185f6056190cf9300f40c5f801b4b5fc60432f44812baa9a54f27f9841f1e647b7bd5e459f722b5e5a94c04dcb66","ssdeep":"192:SFFLlcrcYmJBJsVan1oJJpvOHMk0Tw3f5czhGEhN70oz0EhnA3YED8iDehT6S:SFFLVLsVanyYH4TARCN7DRW3YEP0","tlshash":"cc52610818bddd64c948a12e307e6666f72809539c76bbd4bf8a4104afce82f797513f","first_seen":"2025-07-04T18:28:09.265117Z","last_seen":"2026-03-14T22:11:04.284893Z","times_seen":1369,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/wp-content/plugins/wpdiscuz/themes/default/style.css?ver=99997.6.25","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"104.21.8.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:33.323Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switchroms.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 05:25:51 GMT","end":"Tue, 03 Feb 2026 06:24:36 GMT"},"fingerprint":{"sha1":"11:CC:5E:77:C5:8A:9E:7C:E3:7B:3C:A9:00:ED:93:7A:8E:43:32:D3","sha256":"81:8A:05:E3:87:30:CE:C5:DD:1A:59:5E:40:36:ED:1C:56:08:F6:B6:6F:7A:26:73:58:A3:DC:2B:40:E1:11:B9"}}},"request":{"raw":"GET /wp-content/plugins/wpdiscuz/themes/default/style.css?ver=99997.6.25 HTTP/1.1\r\nHost: switchroms.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 12 Nov 2025 21:19:33 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 08 Oct 2024 02:40:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67049bb6-1c7d5\"\r\nserver: cloudflare\r\nx-content-type-options: \"nosniff\" always\r\nx-xss-protection: \"1; mode=block\" always\r\nstrict-transport-security: \"max-age=31536000; includeSubDomains; preload\" always\r\nreferrer-policy: no-referrer-when-downgrade\r\nexpires: Tue, 13 Oct 2026 21:43:45 GMT\r\ncache-control: public, max-age=31536000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\ncontent-encoding: gzip\r\nage: 2590547\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bz7UgVwW1pJpvsDAsM%2FjOQ%2BBtdieUBKf1W2b9m2F8rY2fVYgv8bhT9xBPj3l3E6%2FlbVflkwC7rCF8azrjbkbEbDzXxKMKyiXM%2BVo\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 99d911793c0eb4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":116693,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1959)","md5":"9c5a4f38b18cdc8a547d7c71fc5e57e9","sha1":"2369cd6fedf901d0b89934b9e15eefa734eb2fc0","sha256":"e18b85afec8f7ee01313e713a741f72d5a6db8270fbbf880aadac3cd59340ff3","sha512":"c08404c6a9274a37cf59358b423054d85355cb819bd877c6f9853f410e537717499a6b323bdc8d46ca54f0d78a1ecd9c16d3aad84cdc292bb5bf78658d583732","ssdeep":"1536:QjFG8JAFrbIuiqSYSg5UtteLhgaoAb5p/RRtBxfiouPHHXprvH+wG0bRX:b8eFAUjs","tlshash":"47b342216181101bec3b9a55e865ebe696370eb2e7020fbed0e71529c75da7c223334f","first_seen":"2024-07-07T01:01:21Z","last_seen":"2026-02-24T14:12:17.533578Z","times_seen":138,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/wp-content/plugins/kk-star-ratings/src/core/public/js/kk-star-ratings.min.js?ver=5.4.10.2","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"104.21.8.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:33.501Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switchroms.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 05:25:51 GMT","end":"Tue, 03 Feb 2026 06:24:36 GMT"},"fingerprint":{"sha1":"11:CC:5E:77:C5:8A:9E:7C:E3:7B:3C:A9:00:ED:93:7A:8E:43:32:D3","sha256":"81:8A:05:E3:87:30:CE:C5:DD:1A:59:5E:40:36:ED:1C:56:08:F6:B6:6F:7A:26:73:58:A3:DC:2B:40:E1:11:B9"}}},"request":{"raw":"GET /wp-content/plugins/kk-star-ratings/src/core/public/js/kk-star-ratings.min.js?ver=5.4.10.2 HTTP/1.1\r\nHost: switchroms.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 12 Nov 2025 21:19:33 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 25 Mar 2025 16:15:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67e2d6af-54f\"\r\nserver: cloudflare\r\nx-content-type-options: \"nosniff\" always\r\nx-xss-protection: \"1; mode=block\" always\r\nstrict-transport-security: \"max-age=31536000; includeSubDomains; preload\" always\r\nreferrer-policy: no-referrer-when-downgrade\r\nexpires: Wed, 28 Oct 2026 18:04:49 GMT\r\ncache-control: public, max-age=31536000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\ncontent-encoding: gzip\r\nage: 1307683\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CUUBAz9Fi0MsAgVeBmgi5d8AHbqnZx%2BDmUDhRFM%2BHgMlQ8ClCM3W25cbM2%2FiSZ5%2BOX2PmZW4TPIVeiocDf92VjvFw7ia21AupjPZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 99d9117a5c20b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1359,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1278)","md5":"f5e63bd61d061e63482b1d4df3768ee4","sha1":"91df0bce4537e6b65fe380f4f6db9ed9dbe95a41","sha256":"acdebf935ded5cb063dcca7c46be5bbc503af5e76e295f6d0b7093c4514ed256","sha512":"ea99e35812f3abac9b598aed7b608f8a78b342d04922fcdc775390e87fa238891728f7bfd6b8e210580fdd332786fb7fde91f0f10bacaed872bb00610e315a6e","ssdeep":"","tlshash":"8c2175dc7a0878354fcbb2b8a26f968d72751326754b4809122df4919dfdfa80322f4c","first_seen":"2023-03-07T01:02:48Z","last_seen":"2026-04-04T11:21:52.634626Z","times_seen":2180,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"professionaltrafficmonitor.com/stats","fqdn":"professionaltrafficmonitor.com","domain":"professionaltrafficmonitor.com","tld":"com"},"ip":{"addr":"52.59.96.77","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:36.006Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"protrafficinspector.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 01 Jul 2025 00:00:00 GMT","end":"Thu, 30 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:D5:8D:EB:A4:50:13:0D:7C:33:71:82:B8:02:49:4F:D6:31:B6:E6","sha256":"49:03:4C:2C:1B:23:D8:D6:CB:AE:F0:54:61:99:C2:20:F4:FF:87:5E:0B:72:B1:6B:D8:AB:21:49:2D:F2:EC:4A"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: professionaltrafficmonitor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://switchroms.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchroms.io/\r\nCookie: uid_id2=e6d9cfb6-1dcb-4637-a18d-7de2b13e2317:2:1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 12 Nov 2025 21:19:36 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\nserver: fasthttp\r\naccess-control-allow-origin: https://switchroms.io\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"489e2f0fc30c15e2589076201e99afd2","sha1":"e18ec25a5da214a0e1bd51582f8995616ded6723","sha256":"8a719e35f79794c7b36fc660178d3157fd4c4c5fca4096a9a98161952afcb95f","sha512":"bb99582a6e327c2de57bd8280ec077f90cbc1f27d597911510a70f94e0b86952efeb3c57647d12239082c9937e25012d03c460c5150260493baa0dbc4718b218","ssdeep":"","tlshash":"059004dc50c3510040110d43110df4c14410c4715d305d444d55510f57133010c10f47","first_seen":"2025-11-12T21:20:09.040526Z","last_seen":"2025-11-12T21:20:09.040526Z","times_seen":1,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/cti/8d/07/7a/8d077a03bf40c94dc34ac4b8af9a446c/1756656412.jpg","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:36.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:33:02 GMT","end":"Thu, 05 Feb 2026 02:33:01 GMT"},"fingerprint":{"sha1":"FF:BB:C7:F6:31:A3:EE:08:8E:72:C4:2F:A2:C8:78:1B:3C:22:C4:57","sha256":"93:BE:65:88:B5:AC:E6:69:91:EE:F6:7E:27:3F:D6:9F:59:B1:AB:46:F7:49:0D:E8:F2:1C:9E:A9:BE:F9:B6:95"}}},"request":{"raw":"GET /cti/8d/07/7a/8d077a03bf40c94dc34ac4b8af9a446c/1756656412.jpg HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 12 Nov 2025 21:19:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 77354\r\nserver: nginx/1.21.6\r\nlast-modified: Sun, 31 Aug 2025 16:06:52 GMT\r\netag: \"68b4731c-12e2a\"\r\nexpires: Fri, 14 Nov 2025 21:19:36 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":77354,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 26.3 (Macintosh), datetime=2025:08:29 18:18:22], progressive, precision 8, 300x250, components 3","md5":"e4267b78fbfd9ec2cb935ff9d689393f","sha1":"80ad53e77eff7c9e2e2ec2aa782e2406bc133c72","sha256":"16b434f519fdf956da056ae83d2a8847179c3fccc2a88d1e80d886cec82ba164","sha512":"58faf0e02cf388518ee515a9b1ff2d3ec1dc9d048d4ca2b0c95ec3f66c7966f2151a8839e367b58d3b70fde29bbfaf2add06de0ad8ae2561556b1770d9f0f1cc","ssdeep":"1536:GB6pzB6p2ZYp69CExL6kGcjhulQrdcP8VXW4I+USZjGM5ndwRmxvD:GB6tB6GYp63Zjhlr71Wv/SdGuiM","tlshash":"8f73e03ffbe5af41f5d092b9bce2c243729eaf805a232b957d1c62097752190ad0d11b","first_seen":"2025-09-02T18:53:07.782432Z","last_seen":"2026-04-04T09:06:35.652387Z","times_seen":980,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"compiledonatevanity.com/5e7f0ff89b6ddd7a4976e11a2feacc81/invoke.js","fqdn":"compiledonatevanity.com","domain":"compiledonatevanity.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:33.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"compiledonatevanity.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Oct 2025 21:24:08 GMT","end":"Tue, 06 Jan 2026 21:24:07 GMT"},"fingerprint":{"sha1":"C7:52:82:2F:DC:5D:8E:4F:1F:D6:00:5B:9F:36:43:9C:4F:44:9B:0C","sha256":"66:83:8E:9F:63:B7:31:50:15:3B:62:2C:BF:29:CB:A0:E5:72:08:60:0F:46:92:AE:53:1D:64:1A:3D:4D:A5:97"}}},"request":{"raw":"GET /5e7f0ff89b6ddd7a4976e11a2feacc81/invoke.js HTTP/1.1\r\nHost: compiledonatevanity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchroms.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 12 Nov 2025 21:19:33 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 18438\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 4\r\nHost: compiledonatevanity.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: aa63148146bd02bb9b207bd36f2c96d4\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":46380,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (46380), with no line terminators","md5":"60a7dc104e009064556ab8c8e864d8ff","sha1":"1fff36d86a67782eed85b96ceb2f0539c94b2fc7","sha256":"9f8984428f242035b0132f9979573f597262f37160a6bf027fbb17582171b531","sha512":"a99be2dc5b8112ca44997d9481f3a59156c39597267953b0ed6fc6c7ff7830ae5d068e6f7819b0f27b79dc92f136c2ebbca404fd95f8159ae5d461bcf29939bb","ssdeep":"768:+95/C6gfHBHuf0gCjEqeJMtQIHKmt2FOoS2TN:WI6gfhHuf0geEqeMQIHKVcON","tlshash":"fa23f8883fa0f66b07727437226fd11ffa6acc019888cc5cc946d5e92f68b19e536b45","first_seen":"2025-11-11T13:51:33.572448Z","last_seen":"2025-11-12T21:20:09.054301Z","times_seen":2,"resource_available":true,"data":null}},"time_used":740,"timings":{"blocked":260,"dns":2,"connect":94,"send":0,"wait":99,"receive":93,"ssl":189},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"compiledonatevanity.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"compiledonatevanity.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/naPR4A6FAh-yZLuCX253WaZq/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:34.516Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:51 GMT","end":"Mon, 05 Jan 2026 08:38:50 GMT"},"fingerprint":{"sha1":"89:73:B0:EF:F1:BA:6A:DA:6C:2C:87:70:0D:17:11:82:30:E9:13:68","sha256":"96:8D:5D:62:3A:3A:D6:CD:06:9A:CE:52:F4:2D:91:F9:66:13:40:F4:5F:9B:88:3D:55:04:79:E3:14:96:51:FA"}}},"request":{"raw":"GET /recaptcha/releases/naPR4A6FAh-yZLuCX253WaZq/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://switchroms.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchroms.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 353816\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 06 Nov 2025 14:56:50 GMT\r\nexpires: Fri, 06 Nov 2026 14:56:50 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 03 Nov 2025 01:02:43 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 541364\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":831371,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (635)","md5":"63c498d57127fe483df232908f0fd8ca","sha1":"62e1b46be1af5f4e082e3199a7a400ae2aef0fc0","sha256":"d4883381009ff8e5c4b05722f62b60f6182b1d2a0631d12fe4075026bac1929f","sha512":"a68902be5fbb3091d71f5d720304f0ce8b516086fb0f820857faa0a2be3e405dba2184fe2ce6f76c4ceba6e541e278e1faffef01407a27dff2da69cbf65bac15","ssdeep":"12288:CY5y6bdmo2rT27K082gMSon+wt/puh2MCaxj80OQDj3Fc:r5yCdcX8K0BgMwwjuI6LOKVc","tlshash":"61053ade745176a18323b5f9502750ad973ead2ac44c089db1a4c8f02ef9809b4b6ff7","first_seen":"2025-11-04T19:51:16.53192Z","last_seen":"2025-12-20T15:18:51.762291Z","times_seen":17838,"resource_available":true,"data":null}},"time_used":288,"timings":{"blocked":82,"dns":2,"connect":25,"send":0,"wait":24,"receive":90,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6.adsco.re:2087/","fqdn":"6.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:36.062Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: 6.adsco.re:2087\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://switchroms.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchroms.io/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T13:49:31.916752Z","times_seen":13333799,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":3,"send":0,"wait":0,"receive":0,"ssl":-1},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:38.064Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:51 GMT","end":"Mon, 05 Jan 2026 08:38:50 GMT"},"fingerprint":{"sha1":"89:73:B0:EF:F1:BA:6A:DA:6C:2C:87:70:0D:17:11:82:30:E9:13:68","sha256":"96:8D:5D:62:3A:3A:D6:CD:06:9A:CE:52:F4:2D:91:F9:66:13:40:F4:5F:9B:88:3D:55:04:79:E3:14:96:51:FA"}}},"request":{"raw":"GET /s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://switchroms.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 06 Nov 2025 09:54:03 GMT\r\nexpires: Fri, 06 Nov 2026 09:54:03 GMT\r\ncache-control: public, max-age=31536000\r\nage: 559535\r\nlast-modified: Mon, 08 Sep 2025 18:08:05 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-04-04T13:48:50.794073Z","times_seen":714611,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":8,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/wp-content/plugins/kk-star-ratings/src/core/public/css/kk-star-ratings.min.css?ver=5.4.10.2","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"104.21.8.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:33.319Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switchroms.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 05:25:51 GMT","end":"Tue, 03 Feb 2026 06:24:36 GMT"},"fingerprint":{"sha1":"11:CC:5E:77:C5:8A:9E:7C:E3:7B:3C:A9:00:ED:93:7A:8E:43:32:D3","sha256":"81:8A:05:E3:87:30:CE:C5:DD:1A:59:5E:40:36:ED:1C:56:08:F6:B6:6F:7A:26:73:58:A3:DC:2B:40:E1:11:B9"}}},"request":{"raw":"GET /wp-content/plugins/kk-star-ratings/src/core/public/css/kk-star-ratings.min.css?ver=5.4.10.2 HTTP/1.1\r\nHost: switchroms.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 12 Nov 2025 21:19:33 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 25 Mar 2025 16:15:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67e2d6af-8d3\"\r\nserver: cloudflare\r\nx-content-type-options: \"nosniff\" always\r\nx-xss-protection: \"1; mode=block\" always\r\nstrict-transport-security: \"max-age=31536000; includeSubDomains; preload\" always\r\nreferrer-policy: no-referrer-when-downgrade\r\nexpires: Wed, 11 Nov 2026 10:23:51 GMT\r\ncache-control: public, max-age=31536000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\ncontent-encoding: gzip\r\nage: 125741\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AXXtYdL%2FpnCNf49qTFKpflN0Jji9MlQBKVgR4t0jb6DBapeKkh5PyEwKY1f4kdgHG904vjR%2BQwCh6nam6IvP4P%2B0o5v2oaobMt88\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 99d911793c0cb4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2259,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2181)","md5":"533af03c49baedabf2e6a0badf1269cf","sha1":"5837bb0d22601bc1e4fd6b610c090b7280a644be","sha256":"1cd6396792d7bfdd898dcb9f2ee195387179b30fb4cc2cdc0c57575fab655230","sha512":"d0c64d59a8b002e02378882511b3d0c2d3af3ebdbdfbe5d96cbfbdbd9c17c08da7283c1900729e36040601fa10787dddb65b8e77570103cf8e04eb2a22b96295","ssdeep":"","tlshash":"f641c1b6e84d228cdd17c8621d0793d745a7e4d68ab5f5ee01ca3518c3afec80661cde","first_seen":"2023-04-05T15:58:59Z","last_seen":"2026-04-04T11:21:52.63752Z","times_seen":1648,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/pixel/purst?dl=0\u0026th=0\u0026sc=0\u0026rs=1721\u0026rd=1721\u0026fd=537\u0026bv=25.10.3609\u0026tmpl=70","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:33.868Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Oct 2025 22:01:12 GMT","end":"Sat, 24 Jan 2026 22:01:11 GMT"},"fingerprint":{"sha1":"15:FA:E2:08:0A:F1:68:03:29:64:51:B0:FA:3B:8E:DD:DC:B7:CD:01","sha256":"F8:EA:EA:FF:5A:CA:9D:E1:82:F0:8C:3C:7C:6B:FB:06:8F:72:6C:0E:64:EF:7B:3B:2B:21:25:C2:25:7D:0C:BD"}}},"request":{"raw":"GET /pixel/purst?dl=0\u0026th=0\u0026sc=0\u0026rs=1721\u0026rd=1721\u0026fd=537\u0026bv=25.10.3609\u0026tmpl=70 HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchroms.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 12 Nov 2025 21:19:34 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T13:49:31.916752Z","times_seen":13333799,"resource_available":true,"data":null}},"time_used":672,"timings":{"blocked":287,"dns":1,"connect":93,"send":0,"wait":95,"receive":0,"ssl":193},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4.adsco.re:2087/","fqdn":"4.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:36.058Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: 4.adsco.re:2087\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://switchroms.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchroms.io/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T13:49:31.916752Z","times_seen":13333799,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/naPR4A6FAh-yZLuCX253WaZq/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/bframe?hl=en\u0026v=naPR4A6FAh-yZLuCX253WaZq\u0026k=6Lf5HEcrAAAAAC9S0Htng-O8awd5XURMd7HB57jb\u0026bft=0dAFcWeA7Ytr6bxccRsCSLh7wjkDlieYUJHjtEKA0FjZv6sKynNSvsORAuSiyNmvci4HyU11NpLYzlYaAaURfu5gFpakPlnJlbHg","date":"2025-11-12T21:19:37.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:51 GMT","end":"Mon, 05 Jan 2026 08:38:50 GMT"},"fingerprint":{"sha1":"89:73:B0:EF:F1:BA:6A:DA:6C:2C:87:70:0D:17:11:82:30:E9:13:68","sha256":"96:8D:5D:62:3A:3A:D6:CD:06:9A:CE:52:F4:2D:91:F9:66:13:40:F4:5F:9B:88:3D:55:04:79:E3:14:96:51:FA"}}},"request":{"raw":"GET /recaptcha/releases/naPR4A6FAh-yZLuCX253WaZq/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 353816\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 06 Nov 2025 14:56:50 GMT\r\nexpires: Fri, 06 Nov 2026 14:56:50 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 03 Nov 2025 01:02:43 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 541367\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":831371,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (635)","md5":"63c498d57127fe483df232908f0fd8ca","sha1":"62e1b46be1af5f4e082e3199a7a400ae2aef0fc0","sha256":"d4883381009ff8e5c4b05722f62b60f6182b1d2a0631d12fe4075026bac1929f","sha512":"a68902be5fbb3091d71f5d720304f0ce8b516086fb0f820857faa0a2be3e405dba2184fe2ce6f76c4ceba6e541e278e1faffef01407a27dff2da69cbf65bac15","ssdeep":"12288:CY5y6bdmo2rT27K082gMSon+wt/puh2MCaxj80OQDj3Fc:r5yCdcX8K0BgMwwjuI6LOKVc","tlshash":"61053ade745176a18323b5f9502750ad973ead2ac44c089db1a4c8f02ef9809b4b6ff7","first_seen":"2025-11-04T19:51:16.53192Z","last_seen":"2025-12-20T15:18:51.762291Z","times_seen":17838,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Frobot%2F3%2Fcss%2Fmagic.css\u0026l=45054\u0026fd=87","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:37.178Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Oct 2025 22:01:12 GMT","end":"Sat, 24 Jan 2026 22:01:11 GMT"},"fingerprint":{"sha1":"15:FA:E2:08:0A:F1:68:03:29:64:51:B0:FA:3B:8E:DD:DC:B7:CD:01","sha256":"F8:EA:EA:FF:5A:CA:9D:E1:82:F0:8C:3C:7C:6B:FB:06:8F:72:6C:0E:64:EF:7B:3B:2B:21:25:C2:25:7D:0C:BD"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Frobot%2F3%2Fcss%2Fmagic.css\u0026l=45054\u0026fd=87 HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchroms.io/\r\nCookie: ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJwIjp7ImlkIjoyNzkyOTAwNiwiayI6IjVlN2YwZmY4OWI2ZGRkN2E0OTc2ZTExYTJmZWFjYzgxIiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjo0OTI1NDc3LCJwaWQiOjQwMDc1MCwiYW4iOnRydWUsImxhbiI6dHJ1ZSwiY2lkIjoyMSwiYWlkIjo1LCJwdCI6NCwicGsiOiJocmsza2RlZHc3IiwidCI6MX0sInUiOnsidSI6MSwiYXUiOjEsImQiOnsiaWQiOjI2NjU2MTExNSwiaWRzIjoiIiwiaWMiOmZhbHNlLCJuIjoiRGVza3RvcCxFbXVsYXRvciIsInYiOiJVbmtub3duIiwibSI6IlVua25vd24iLCJmIjoxLCJmbiI6IkRlc2t0b3AiLCJvaWQiOjM4OTE0LCJvbiI6IldpbmRvd3MiLCJvdiI6IjEwLjAiLCJiaWQiOjEzNjkyNSwiYm4iOiJGaXJlZm94IiwiYnYiOiIxMzQuMCIsInd2IjpmYWxzZSwiZSI6dHJ1ZSwiYWIiOmZhbHNlfSwiYyI6eyJpZCI6MTYyLCJjIjoiTk8iLCJuIjoiTm9yd2F5In0sImEiOmZhbHNlLCJjciI6eyJuIjoiQmxpeCBTb2x1dGlvbnMifSwieGYiOiIiLCJpeGYiOmZhbHNlLCJpZ3hmIjpmYWxzZSwidXAiOnRydWUsInIiOiJodHRwczovL3N3aXRjaHJvbXMuaW8vdGhlLWxlZ2VuZC1vZi16ZWxkYS1lY2hvZXMtb2Ytd2lzZG9tLW5zcC14Y2ktc3dpdGNoLXJvbS0xYi8_ZG93bmxvYWQ9OCIsImFyIjpbXX19.oHGrbec2D3uoBV9hgp3roauagjWhSj4MWmxfPRAFU28; uid_id2=e6d9cfb6-1dcb-4637-a18d-7de2b13e2317:2:1; pdhtkv=true; uncs=1; pdhtkv5=true; uncs5=1; u_pl27929006=1; pdhtkv29=true; uncs29=1; u_pl26551100=1; slec0e536fb8895c74d7dcf7b58fe63dae08=[6233297]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 12 Nov 2025 21:19:37 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T13:49:31.916752Z","times_seen":13333799,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"secure.gravatar.com/avatar/105b2b67841db3c15c5036bc4f761a7472e2df8dac73c700b5ffa5d18057d674?s=56\u0026d=mm\u0026r=g","fqdn":"secure.gravatar.com","domain":"gravatar.com","tld":"com"},"ip":{"addr":"192.0.73.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:34.513Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gravatar.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Oct 2025 19:44:01 GMT","end":"Sat, 10 Jan 2026 19:44:00 GMT"},"fingerprint":{"sha1":"9A:AD:B4:0D:78:72:BD:79:3B:85:71:6E:98:21:AA:57:5D:FE:A1:D8","sha256":"23:BF:7F:44:90:FB:07:43:D0:6E:80:2E:C0:31:09:27:0E:4B:CA:85:DA:67:94:AE:FF:06:30:93:B6:78:DB:53"}}},"request":{"raw":"GET /avatar/105b2b67841db3c15c5036bc4f761a7472e2df8dac73c700b5ffa5d18057d674?s=56\u0026d=mm\u0026r=g HTTP/1.1\r\nHost: secure.gravatar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchroms.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 12 Nov 2025 21:19:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1043\r\nlast-modified: Wed, 11 Jan 1984 08:00:00 GMT\r\nlink: \u003chttps://gravatar.com/avatar/105b2b67841db3c15c5036bc4f761a7472e2df8dac73c700b5ffa5d18057d674?s=56\u0026d=mm\u0026r=g\u003e; rel=\"canonical\"\r\naccess-control-allow-origin: *\r\ncontent-disposition: inline; filename=\"105b2b67841db3c15c5036bc4f761a7472e2df8dac73c700b5ffa5d18057d674.jpg\"\r\naccept-ranges: bytes\r\nexpires: Wed, 12 Nov 2025 21:24:34 GMT\r\ncache-control: max-age=300\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: MISS arn 28\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=MISS;dur=410.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1043,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 56x56, components 3","md5":"84a3420e18b4bceb960b94e5b04209a5","sha1":"ecaa0718ae2ef18031e6be57e28486e952ba2b01","sha256":"ae149e1290ce50a611bed27895810d16bb90071cd68fd81c7db7fd6469c37a86","sha512":"c55144c267f99bdd163f1ff8aeffcee4535207c1ea231be0e8b0ee74fab20c352c7abcdf8210131e83990212272cb5689c79f47d961be8a2c207b8d2fd7574f4","ssdeep":"","tlshash":"29113e6b571303e0b81741f6896abc519bfc889032e1631b7bf411a2c5a1a9cc48c8cc","first_seen":"2025-02-23T21:34:04.199594Z","last_seen":"2026-04-04T10:53:57.063282Z","times_seen":454,"resource_available":false,"data":null}},"time_used":551,"timings":{"blocked":33,"dns":62,"connect":7,"send":0,"wait":417,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lf5HEcrAAAAAC9S0Htng-O8awd5XURMd7HB57jb\u0026co=aHR0cHM6Ly9zd2l0Y2hyb21zLmlvOjQ0Mw..\u0026hl=en\u0026v=naPR4A6FAh-yZLuCX253WaZq\u0026theme=light\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=2w0fub742pck","date":"2025-11-12T21:19:35.858Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:51 GMT","end":"Mon, 05 Jan 2026 08:38:50 GMT"},"fingerprint":{"sha1":"89:73:B0:EF:F1:BA:6A:DA:6C:2C:87:70:0D:17:11:82:30:E9:13:68","sha256":"96:8D:5D:62:3A:3A:D6:CD:06:9A:CE:52:F4:2D:91:F9:66:13:40:F4:5F:9B:88:3D:55:04:79:E3:14:96:51:FA"}}},"request":{"raw":"GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.google.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 15344\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 12 Nov 2025 17:55:22 GMT\r\nexpires: Thu, 12 Nov 2026 17:55:22 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 16 Oct 2017 17:32:55 GMT\r\ncontent-type: font/woff2\r\nage: 12253\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15344,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15344, version 1.0","md5":"5d4aeb4e5f5ef754e307d7ffaef688bd","sha1":"06db651cdf354c64a7383ea9c77024ef4fb4cef8","sha256":"3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc","sha512":"7eb7c301df79d35a6a521fae9d3dccc0a695d3480b4d34c7d262dd0c67abec8437ed40e2920625e98aaeafba1d908dec69c3b07494ec7c29307de49e91c2ef48","ssdeep":"384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw","tlshash":"5162e16aef76dc7e4f1af1361c01b45404462290ba6155eff00d6e1d4eed1aff461392","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T13:42:16.771183Z","times_seen":536072,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":33,"dns":1,"connect":7,"send":0,"wait":8,"receive":2,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/wp-content/plugins/wpdiscuz/assets/third-party/font-awesome-5.13.0/css/fa.min.css?ver=99997.6.25","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"104.21.8.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:33.362Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switchroms.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 05:25:51 GMT","end":"Tue, 03 Feb 2026 06:24:36 GMT"},"fingerprint":{"sha1":"11:CC:5E:77:C5:8A:9E:7C:E3:7B:3C:A9:00:ED:93:7A:8E:43:32:D3","sha256":"81:8A:05:E3:87:30:CE:C5:DD:1A:59:5E:40:36:ED:1C:56:08:F6:B6:6F:7A:26:73:58:A3:DC:2B:40:E1:11:B9"}}},"request":{"raw":"GET /wp-content/plugins/wpdiscuz/assets/third-party/font-awesome-5.13.0/css/fa.min.css?ver=99997.6.25 HTTP/1.1\r\nHost: switchroms.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 12 Nov 2025 21:19:33 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 08 Oct 2024 02:40:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67049bb6-2d53\"\r\nserver: cloudflare\r\nx-content-type-options: \"nosniff\" always\r\nx-xss-protection: \"1; mode=block\" always\r\nstrict-transport-security: \"max-age=31536000; includeSubDomains; preload\" always\r\nreferrer-policy: no-referrer-when-downgrade\r\nexpires: Thu, 12 Nov 2026 09:38:51 GMT\r\ncache-control: public, max-age=31536000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\ncontent-encoding: gzip\r\nage: 42041\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EmurTNDZGSPVRXn%2FYlhlaqrMxOSOLOCwMzoQ%2Fc9Kz5gfV22ptwqviwRjkYVLGZkd5LWY4Bucumld3rMBvS8%2Bvgy8uWncUBNEGZSl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 99d911797c10b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11603,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (7945)","md5":"777575d3ec305270dedc5011af2be384","sha1":"913f2a3a6a5804d982c8ef92fd980335bc994997","sha256":"2b4a75ee89ead73ab34960a31c5cc9162f5d108ae8c2ecde2b86849dd548423d","sha512":"f729475bbe1eff9844f0dc6213241a0473357a7067f85ee32773fd595e0cfa1972a6ff31d59a5d12351b5854710981839094aedf173bc42e2c9a578c1fc3678b","ssdeep":"192:O053nbiXTvnUl0g4FLfVJ35a/nzoV4ULy:qrnUlkLfs/nzoVk","tlshash":"ca32a8f8d44c11c6a731c98bbf84b32862b9f739c5805d99f11f6d0c19e16a912c9f6a","first_seen":"2023-09-22T06:19:41Z","last_seen":"2026-04-04T10:53:57.052545Z","times_seen":1346,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/wp-content/themes/switch/js/functions.js?ver=2.2","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"104.21.8.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:33.503Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switchroms.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 05:25:51 GMT","end":"Tue, 03 Feb 2026 06:24:36 GMT"},"fingerprint":{"sha1":"11:CC:5E:77:C5:8A:9E:7C:E3:7B:3C:A9:00:ED:93:7A:8E:43:32:D3","sha256":"81:8A:05:E3:87:30:CE:C5:DD:1A:59:5E:40:36:ED:1C:56:08:F6:B6:6F:7A:26:73:58:A3:DC:2B:40:E1:11:B9"}}},"request":{"raw":"GET /wp-content/themes/switch/js/functions.js?ver=2.2 HTTP/1.1\r\nHost: switchroms.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 12 Nov 2025 21:19:33 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 19 Mar 2024 08:07:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65f947d9-a81\"\r\nserver: cloudflare\r\nx-content-type-options: \"nosniff\" always\r\nx-xss-protection: \"1; mode=block\" always\r\nstrict-transport-security: \"max-age=31536000; includeSubDomains; preload\" always\r\nreferrer-policy: no-referrer-when-downgrade\r\nexpires: Tue, 10 Nov 2026 16:30:23 GMT\r\ncache-control: public, max-age=31536000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\ncontent-encoding: gzip\r\nage: 190149\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aH1r7aoMAXpQcUi50GYKzco8%2BR24sWCMWL5R0zO86c9uQS2rzCd1ja0vyTtYghqTJmjLT1uIBdTKE2cSvOv%2BZKzpXeiczHPgC8Kn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 99d9117a5c22b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2689,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"6dbdd79c06f49fc8f20583d68f40f8b5","sha1":"f0e793d6e5e53075db965ebc9fe6cf792e6d9df4","sha256":"9d7b4f9d700ef7874dc31c9daf9717af4dba59a80138f732db5f8b100d6ee62c","sha512":"c3171f7672097511f09de055a7717f379e56873b4e24139fcd9c3af3d31fea985e314c7c7b76943ff8f8354378dd96a3211b67650b551df6d2e871adc4c5111c","ssdeep":"","tlshash":"065134dafb5da63b403b30b7073e40c03a3a9517e1456822b8a7d8683fc855523e2f6d","first_seen":"2024-08-22T17:21:44.346395Z","last_seen":"2026-01-26T03:36:30.074521Z","times_seen":33,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:33.869Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"preferencenail.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 23:40:35 GMT","end":"Tue, 27 Jan 2026 23:40:34 GMT"},"fingerprint":{"sha1":"AA:22:33:AC:0A:FC:0D:31:C5:9F:92:99:20:7A:02:E4:46:E3:08:8C","sha256":"72:5A:79:00:74:D1:90:EF:9A:D3:3F:01:E6:E5:14:1D:41:4F:F2:28:D3:FD:4C:AA:70:DE:D8:BE:C2:15:3F:EE"}}},"request":{"raw":"GET /sfp.js HTTP/1.1\r\nHost: preferencenail.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchroms.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 12 Nov 2025 21:19:33 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nContent-Length: 32182\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nVary: Accept-Encoding\r\nHost: preferencenail.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 4350f702856efb4ae951e7fa66669627\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":85386,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"46a6fef91632b94d14252fe324c1585f","sha1":"387cebbd261b8fe947fe9805875300f2ceeb5cfd","sha256":"36d0c771f8bf310d740cb4d0ca144354c45df284e72361660448708d72f175d5","sha512":"a3aaa1b5ab1113a12793bd1085332eb257416aaa9c4a690525838b91453a281580a979bfb856b3c429c2d4243c3ce02bd318a4b7048124eef96912179836d0fd","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRL:nPncLBSUBULGVTfGpucE5fox","tlshash":"528395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","first_seen":"2025-07-08T10:38:39.799377Z","last_seen":"2025-11-18T17:01:51.014373Z","times_seen":15230,"resource_available":true,"data":null}},"time_used":156,"timings":{"blocked":56,"dns":0,"connect":18,"send":0,"wait":22,"receive":19,"ssl":39},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/wp-content/plugins/wpdiscuz/assets/third-party/font-awesome-5.13.0/webfonts/fa-solid-900.woff2","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"104.21.8.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:34.142Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switchroms.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 05:25:51 GMT","end":"Tue, 03 Feb 2026 06:24:36 GMT"},"fingerprint":{"sha1":"11:CC:5E:77:C5:8A:9E:7C:E3:7B:3C:A9:00:ED:93:7A:8E:43:32:D3","sha256":"81:8A:05:E3:87:30:CE:C5:DD:1A:59:5E:40:36:ED:1C:56:08:F6:B6:6F:7A:26:73:58:A3:DC:2B:40:E1:11:B9"}}},"request":{"raw":"GET /wp-content/plugins/wpdiscuz/assets/third-party/font-awesome-5.13.0/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: switchroms.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://switchroms.io/wp-content/plugins/wpdiscuz/assets/third-party/font-awesome-5.13.0/css/fa.min.css?ver=99997.6.25\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 12 Nov 2025 21:19:34 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 79444\r\nlast-modified: Tue, 08 Oct 2024 02:40:54 GMT\r\netag: \"67049bb6-13654\"\r\nserver: cloudflare\r\nx-content-type-options: \"nosniff\" always\r\nx-xss-protection: \"1; mode=block\" always\r\nstrict-transport-security: \"max-age=31536000; includeSubDomains; preload\" always\r\nreferrer-policy: no-referrer-when-downgrade\r\nexpires: Fri, 06 Nov 2026 20:17:10 GMT\r\ncache-control: public, max-age=31536000, must-revalidate, proxy-revalidate\r\naccept-ranges: bytes\r\nage: 522143\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AT3iwmrM21qasxgUd0SnbfHfkJcZXzS26fmgZf8qs42FnJAMNCg7pI48%2FK8MKBsRA%2BBKrpeRyNT4UvShaf5nVQCFktFBFkT6JVB%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 99d9117e6ca5b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":79444,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 79444, version 331.524","md5":"b15db15f746f29ffa02638cb455b8ec0","sha1":"75a88815c47a249eadb5f0edc1675957f860cca7","sha256":"7f4d3fd0a705dbf8403298aad91d5de6972e6b5d536068eba8b24954a5a0a8c7","sha512":"84e621ac534c416cf13880059d76ce842fa74bb433a274aa5d106adbda20354fa5ed751ed1d13d0c393d54ceb37fe8dbd2f653e4cb791e9f9d3d2a50a250b05f","ssdeep":"1536:ogXevisOzyu5r4HjEIe9vyJFdiTCHnegAZ64RPmF17k+GbpJ0VxZrtbz:oTvissyu5eb0ciORAZ64Qrk+0Mzbz","tlshash":"6b7302c68d4ae504c87e0daa36b5a96651be9fc5720e4df6e8700cbcf1f12dc0266d19","first_seen":"2023-04-05T14:18:50Z","last_seen":"2026-04-04T12:35:04.243324Z","times_seen":19314,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/impr.gif?sid=H4sIAAAAAAAC_1RTP4hdxReeu8kvxS-FaKJiIbxCIRH3Zebeuf9MIa4xGhKTkERSiMX83R3ffXeuM_e-u9kqGJBgtSCIdnfP22QxiUER7JTw1i4g7EvjFtnGxlYEIZ28zcLqKc75znxTfN_wzWdrzQ6KoGHbF9-3K6Yo2Im4j3vHrppS2tb3zl_pEdzHJ3tXTZnQk73lWXOjN0hE-_h4710lBvZEiAnGBJPeaeOUtssndlkw1b2c9HPcp2GfxBSW3X933wTgWQBytIOeAyOnz_yuPwQjJlAOvzul_KC21evvDJuC1dbBSG58UA5K25Yw3IfaBaDLjb3bYP0Uoa_mwJYbew7AjtZnDoCbKZp74THwcmNPJvDRradKeQGqBC4PQzuagCo2wbAJCHsDjNxCAELC-QtQDm-ft65l156ybMZO0cG__wLTTtHBx0ehHN5fKMxy77ItmtrY0sOy7sAsT8AsTqBqNqFeCcC0myDqT8HIXxF-8TCUwzvv2ZEZ9EbKDcDI7VdUInOheTJPpODzNInSeUYyOZ9KFXISqTAi6e5DGT0B5ueg8QE0JoBGB9BUAQzldo_ijArCokTnUqSYMkql4jjPQoxZLlJoxMzBKtTVKohiFYS7DpW7DgPzxRb6Yeulu1OEHj0B1zwAv7T9Y6x0znQYSyLDWEtFsjhilKdYUxmmqdBxlKmMZkwnWESY01hEiYwSKVSS5pSQLJKC5Fkecy2k4jxM4pxxHNI4iyjJY8zSkGJGKKYq5CInkcx4xJNcUUmU0nmcMiZiHXORYhanmaRK0ERmSRZyFTIVkSRWseA6TJIsS7QKUwleBuBrBCPZQasQtB5ByxC0BkFbI2hH3S1Z-NB3t2XhG072Zrg3o25s68U1dsvWi6pEwNwqONmtm-oTfwNEfWC8or0c21ljvO7GjMturdpBz87iEdw5fh8GarsXq1RjrbOcJ1LKlNE8TRQhLNSKCZER8KYD4-eA-QBWzBSdPfYqVGaKDr1cAmeb4ItNEOZ5YM3_gLXjCGNgS-MwxrBSfutbU4slZ4e-byxI20FVH4T6WrBW7KAj40tXFh7shvWj30agxEO0VyBcB5Xr4GPzC4LF4ub4km3R-iXbevT9hao2Q7PCZkG-XLNaHbpzVl1rrZNnTvnVb94SM2IG711Rvj7HSmnKRY_uLhgplTttnVDopzP-quIXG7-00Liyqc5dfPv0mWHllPfGlhNgZor-_-fnIMwUHfn5691PGr_2JYjqOvhqX6e3CHiFoDAICrV_zngH_l8738dr_iYsugBYfQPKYQcj18Go6IAVq-CbA-O6cg_ffBTtFvAiGPPCoXVeuBlvtns6UqHAOEsTEmVakYhKoeOM5jJhOIoU1H5qjj75458AAAD__3S2SGZCBQAA","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:36.509Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Oct 2025 22:01:12 GMT","end":"Sat, 24 Jan 2026 22:01:11 GMT"},"fingerprint":{"sha1":"15:FA:E2:08:0A:F1:68:03:29:64:51:B0:FA:3B:8E:DD:DC:B7:CD:01","sha256":"F8:EA:EA:FF:5A:CA:9D:E1:82:F0:8C:3C:7C:6B:FB:06:8F:72:6C:0E:64:EF:7B:3B:2B:21:25:C2:25:7D:0C:BD"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1RTP4hdxReeu8kvxS-FaKJiIbxCIRH3Zebeuf9MIa4xGhKTkERSiMX83R3ffXeuM_e-u9kqGJBgtSCIdnfP22QxiUER7JTw1i4g7EvjFtnGxlYEIZ28zcLqKc75znxTfN_wzWdrzQ6KoGHbF9-3K6Yo2Im4j3vHrppS2tb3zl_pEdzHJ3tXTZnQk73lWXOjN0hE-_h4710lBvZEiAnGBJPeaeOUtssndlkw1b2c9HPcp2GfxBSW3X933wTgWQBytIOeAyOnz_yuPwQjJlAOvzul_KC21evvDJuC1dbBSG58UA5K25Yw3IfaBaDLjb3bYP0Uoa_mwJYbew7AjtZnDoCbKZp74THwcmNPJvDRradKeQGqBC4PQzuagCo2wbAJCHsDjNxCAELC-QtQDm-ft65l156ybMZO0cG__wLTTtHBx0ehHN5fKMxy77ItmtrY0sOy7sAsT8AsTqBqNqFeCcC0myDqT8HIXxF-8TCUwzvv2ZEZ9EbKDcDI7VdUInOheTJPpODzNInSeUYyOZ9KFXISqTAi6e5DGT0B5ueg8QE0JoBGB9BUAQzldo_ijArCokTnUqSYMkql4jjPQoxZLlJoxMzBKtTVKohiFYS7DpW7DgPzxRb6Yeulu1OEHj0B1zwAv7T9Y6x0znQYSyLDWEtFsjhilKdYUxmmqdBxlKmMZkwnWESY01hEiYwSKVSS5pSQLJKC5Fkecy2k4jxM4pxxHNI4iyjJY8zSkGJGKKYq5CInkcx4xJNcUUmU0nmcMiZiHXORYhanmaRK0ERmSRZyFTIVkSRWseA6TJIsS7QKUwleBuBrBCPZQasQtB5ByxC0BkFbI2hH3S1Z-NB3t2XhG072Zrg3o25s68U1dsvWi6pEwNwqONmtm-oTfwNEfWC8or0c21ljvO7GjMturdpBz87iEdw5fh8GarsXq1RjrbOcJ1LKlNE8TRQhLNSKCZER8KYD4-eA-QBWzBSdPfYqVGaKDr1cAmeb4ItNEOZ5YM3_gLXjCGNgS-MwxrBSfutbU4slZ4e-byxI20FVH4T6WrBW7KAj40tXFh7shvWj30agxEO0VyBcB5Xr4GPzC4LF4ub4km3R-iXbevT9hao2Q7PCZkG-XLNaHbpzVl1rrZNnTvnVb94SM2IG711Rvj7HSmnKRY_uLhgplTttnVDopzP-quIXG7-00Liyqc5dfPv0mWHllPfGlhNgZor-_-fnIMwUHfn5691PGr_2JYjqOvhqX6e3CHiFoDAICrV_zngH_l8738dr_iYsugBYfQPKYQcj18Go6IAVq-CbA-O6cg_ffBTtFvAiGPPCoXVeuBlvtns6UqHAOEsTEmVakYhKoeOM5jJhOIoU1H5qjj75458AAAD__3S2SGZCBQAA HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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_ZG93bmxvYWQ9OCIsImFyIjpbXX19.oHGrbec2D3uoBV9hgp3roauagjWhSj4MWmxfPRAFU28; uid_id2=e6d9cfb6-1dcb-4637-a18d-7de2b13e2317:2:1; pdhtkv=true; uncs=1; pdhtkv5=true; uncs5=1; u_pl27929006=1; pdhtkv29=true; uncs29=1; u_pl26551100=1; slec0e536fb8895c74d7dcf7b58fe63dae08=[6233297]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 12 Nov 2025 21:19:36 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 2\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: ad3077d86a0b9900231b9a9d34b75d93\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T13:49:31.916752Z","times_seen":13333799,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/wp-content/uploads/2025/04/Twilight-Monk.webp","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"104.21.8.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:33.449Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switchroms.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 05:25:51 GMT","end":"Tue, 03 Feb 2026 06:24:36 GMT"},"fingerprint":{"sha1":"11:CC:5E:77:C5:8A:9E:7C:E3:7B:3C:A9:00:ED:93:7A:8E:43:32:D3","sha256":"81:8A:05:E3:87:30:CE:C5:DD:1A:59:5E:40:36:ED:1C:56:08:F6:B6:6F:7A:26:73:58:A3:DC:2B:40:E1:11:B9"}}},"request":{"raw":"GET /wp-content/uploads/2025/04/Twilight-Monk.webp HTTP/1.1\r\nHost: switchroms.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 12 Nov 2025 21:19:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 98192\r\nlast-modified: Wed, 09 Apr 2025 06:01:39 GMT\r\netag: \"67f60d43-17f90\"\r\nserver: cloudflare\r\nx-content-type-options: \"nosniff\" always\r\nx-xss-protection: \"1; mode=block\" always\r\nstrict-transport-security: \"max-age=31536000; includeSubDomains; preload\" always\r\nreferrer-policy: no-referrer-when-downgrade\r\nexpires: Thu, 12 Nov 2026 14:19:09 GMT\r\ncache-control: public, max-age=31536000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\naccept-ranges: bytes\r\nage: 25223\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CV5mTMKTsQfyOD%2FOegmSBEOpG9c8SMUd3g7CNj2dxQm%2FzhY6PRod2sOvGHX5pIyB3qSC%2BSfVGd1O%2BqBNpzJNMpmFAdnppZxSf3Iu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 99d91179ac19b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":98192,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"464fc59cd099c96183da4aec940858a9","sha1":"4da43e3d3c77ca64576509e3b43ff959edf82019","sha256":"16caf1ac8087f6bb1806a14a6b38303692be7fa98eaeb2e22500e7ff314af7b1","sha512":"a74b0465ce73a95997f905e3906681dd8d516dc60406e6bd6a3f3fe5bb98234893a17a6af8435d144e33b0eecf60f96961d16b175550f162a80a92474344b0e7","ssdeep":"1536:NgAXxkrNJmkxW8Ov9gf8TLOq/d0lntSkdjYK1wg01cUrOcA3fqteOZAKB3I+8m91:NgAXxk5Jmr8OafWLRFMntSkdjYKig01B","tlshash":"55a31271cd338ffdd28055b853a3259201180736d8233706aa879b79e77899660cdefa","first_seen":"2025-05-28T10:03:28.175924Z","last_seen":"2026-01-26T03:36:30.098826Z","times_seen":13,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/cdn-cgi/rum?","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"104.21.8.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:34.523Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switchroms.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 05:25:51 GMT","end":"Tue, 03 Feb 2026 06:24:36 GMT"},"fingerprint":{"sha1":"11:CC:5E:77:C5:8A:9E:7C:E3:7B:3C:A9:00:ED:93:7A:8E:43:32:D3","sha256":"81:8A:05:E3:87:30:CE:C5:DD:1A:59:5E:40:36:ED:1C:56:08:F6:B6:6F:7A:26:73:58:A3:DC:2B:40:E1:11:B9"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: switchroms.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8\r\ncontent-type: application/json\r\nContent-Length: 471\r\nOrigin: https://switchroms.io\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_YR6V7LMBP0=GS2.1.s1762982374$o1$g0$t1762982374$j60$l0$h0; _ga=GA1.1.422467514.1762982374\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\naccess-control-allow-origin: https://switchroms.io\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-max-age: 86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x4X0agKkh0HJSAGtvqSg7pRVSlOClrGc0KsUNlp2cWABvlgGNHNPHrYBrYCKX%2B04Lh%2Bk%2FIft2W4M7jF3r6DEI7YLwzehy01xhTYY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 12 Nov 2025 21:19:34 GMT\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 99d91180ccb5b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T13:49:31.916752Z","times_seen":13333799,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/api2/logo_48.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lf5HEcrAAAAAC9S0Htng-O8awd5XURMd7HB57jb\u0026co=aHR0cHM6Ly9zd2l0Y2hyb21zLmlvOjQ0Mw..\u0026hl=en\u0026v=naPR4A6FAh-yZLuCX253WaZq\u0026theme=light\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=2w0fub742pck","date":"2025-11-12T21:19:35.930Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:51 GMT","end":"Mon, 05 Jan 2026 08:38:50 GMT"},"fingerprint":{"sha1":"89:73:B0:EF:F1:BA:6A:DA:6C:2C:87:70:0D:17:11:82:30:E9:13:68","sha256":"96:8D:5D:62:3A:3A:D6:CD:06:9A:CE:52:F4:2D:91:F9:66:13:40:F4:5F:9B:88:3D:55:04:79:E3:14:96:51:FA"}}},"request":{"raw":"GET /recaptcha/api2/logo_48.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gstatic.com/recaptcha/releases/naPR4A6FAh-yZLuCX253WaZq/styles__ltr.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ncontent-length: 2228\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 06 Nov 2025 09:40:51 GMT\r\nexpires: Thu, 13 Nov 2025 09:40:51 GMT\r\ncache-control: public, max-age=604800\r\nage: 560324\r\nlast-modified: Tue, 03 Mar 2020 20:15:00 GMT\r\ncontent-type: image/png\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2228,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"ef9941290c50cd3866e2ba6b793f010d","sha1":"4736508c795667dcea21f8d864233031223b7832","sha256":"1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a","sha512":"a0c69c70117c5713caf8b12f3b6e8bbb9cdaf72768e5db9db5831a3c37541b87613c6b020dd2f9b8760064a8c7337f175e7234bfe776eee5e3588dc5662419d9","ssdeep":"","tlshash":"c34149bb68287f1be14b501d319001e4b5bb891327c8f24180bf974e4662eaad10f118","first_seen":"2023-04-05T07:17:57Z","last_seen":"2026-04-04T13:43:25.032291Z","times_seen":541494,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"premiumvertising.com/cjztqgrrdbqfmxhymbc?EnQTUXzO=BQNyAAAAAAAACZUAAhbdA-6XpO7ad40RwYR-ge0jQcxA7U7XqEKS-2KwAgxQSpPLKDu4Q7ZpUdetn3CdH-_0kK2Oiu5PrXD7AkKCdanKnnyeZ0SUjb8OD5r2NcIbYncdxpSj7KuQDttSE0qk_GwwKi1Pv0eBzJyaDIvFe2op9js-_re52Zp8BjclyoFjk1BDqVL15rP21tONllg6f5hU-TMLU7ZnDtUffmbVr0PHoE2ZQuNfKmDlelImPn8WuC-f2yiWON2S90FYyZt2STUNsnQOpUeeiF-QcyitAptnHp2Y4NvxQoYWAO7WRgaLN3g6WwCMCS_gC6hth4vk-NZCSvIrdmkBYivtUlSUd65bKlpcDbXSTogAP6yQPEU5m9mjBMV9WocX7dmlH5Uq6vX9HeaXkNqb-6AKe0uhqtg_cMqehUaziOliPFdu4mKRTdvFrC7oXQy8oREbh0D3uNNXsRlG3VCtcESbCdmE5THtudBrSl3m0OcPhvD9qwspSWCBWfH5-hkarHPA7osGRF8eu-PJcS9Pa7B3eVNEOK1L4egLCbRpMmZmdRKemmTEpApz0DaZsJKu5vUoBmDXQVGGkp5F_W9zp5wcnsf11FBCzLEAH1r7OhjOKHYnY8pwtXeCsuQI1f8njxShE-Jl8UoOWaiZR82auI8gr_3cAvgMFCsXD7HALU8DkkpPNz76bmJam7oJcmpNqmukk6k3_4asXo2bPpElHGB1Q-V0b5ZmyTacVoTyHHYfiTU6wUU1vmjSPHiFEU9oV706L5rpGcPyIA23XJwQjGlTqNXFzoDo18LJhC3o3LTDvIaV9spT4pslsRAmpx1t4zrseqsWWy_bVADOngSPweJDyCnjCACYBP0HCgij0sYDmpbl7Qgvc-xU830q8rk2t4RmOHM_igtO6V1ORjauXh3c84yERLkItoOXZ_QfA6uoqBzK0yVfotEbrR1LCkCYFRpmtuRMKoO4_D6zoeJHnQEBvsmDorU2p9PEibbWkMNxA2-llQKM6V7O9Peg_3Dh1x-xZslHMLVSKAqT1wC9SuS5gbLN7TncRSna5PuuXSEsgPON09SJiS0xMhf8SEOcob7xVhMjUBLjqvo23yRYC-hliuSbQpLbhn6ZTv_0bnQuU-Z7DjYhV8Bx-k4SqvO9CDxlILBewNMl7BuhZpyTM72gF4iCQqA\u0026ZTnCxuXo=4\u0026xbTlgDfX=5105446\u0026yvJdqCXB=\u0026PkgIyABn=0,0\u0026roLMTtks=\u0026wqVJaZPX=\u0026JOEvqkQw=1280,1024,1,1280,1024,0","fqdn":"premiumvertising.com","domain":"premiumvertising.com","tld":"com"},"ip":{"addr":"162.252.214.11","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:36.514Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"premiumvertising.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 04 Apr 2025 00:00:00 GMT","end":"Tue, 05 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"14:EB:C5:DD:7B:A9:BB:94:56:6F:8B:B5:46:83:F5:88:15:55:89:93","sha256":"DF:35:9E:6A:F2:AF:40:EC:34:91:5B:C8:79:AB:A5:7A:5E:6D:99:A4:C4:09:0B:87:0B:FE:86:AD:EC:EF:89:93"}}},"request":{"raw":"GET /cjztqgrrdbqfmxhymbc?EnQTUXzO=BQNyAAAAAAAACZUAAhbdA-6XpO7ad40RwYR-ge0jQcxA7U7XqEKS-2KwAgxQSpPLKDu4Q7ZpUdetn3CdH-_0kK2Oiu5PrXD7AkKCdanKnnyeZ0SUjb8OD5r2NcIbYncdxpSj7KuQDttSE0qk_GwwKi1Pv0eBzJyaDIvFe2op9js-_re52Zp8BjclyoFjk1BDqVL15rP21tONllg6f5hU-TMLU7ZnDtUffmbVr0PHoE2ZQuNfKmDlelImPn8WuC-f2yiWON2S90FYyZt2STUNsnQOpUeeiF-QcyitAptnHp2Y4NvxQoYWAO7WRgaLN3g6WwCMCS_gC6hth4vk-NZCSvIrdmkBYivtUlSUd65bKlpcDbXSTogAP6yQPEU5m9mjBMV9WocX7dmlH5Uq6vX9HeaXkNqb-6AKe0uhqtg_cMqehUaziOliPFdu4mKRTdvFrC7oXQy8oREbh0D3uNNXsRlG3VCtcESbCdmE5THtudBrSl3m0OcPhvD9qwspSWCBWfH5-hkarHPA7osGRF8eu-PJcS9Pa7B3eVNEOK1L4egLCbRpMmZmdRKemmTEpApz0DaZsJKu5vUoBmDXQVGGkp5F_W9zp5wcnsf11FBCzLEAH1r7OhjOKHYnY8pwtXeCsuQI1f8njxShE-Jl8UoOWaiZR82auI8gr_3cAvgMFCsXD7HALU8DkkpPNz76bmJam7oJcmpNqmukk6k3_4asXo2bPpElHGB1Q-V0b5ZmyTacVoTyHHYfiTU6wUU1vmjSPHiFEU9oV706L5rpGcPyIA23XJwQjGlTqNXFzoDo18LJhC3o3LTDvIaV9spT4pslsRAmpx1t4zrseqsWWy_bVADOngSPweJDyCnjCACYBP0HCgij0sYDmpbl7Qgvc-xU830q8rk2t4RmOHM_igtO6V1ORjauXh3c84yERLkItoOXZ_QfA6uoqBzK0yVfotEbrR1LCkCYFRpmtuRMKoO4_D6zoeJHnQEBvsmDorU2p9PEibbWkMNxA2-llQKM6V7O9Peg_3Dh1x-xZslHMLVSKAqT1wC9SuS5gbLN7TncRSna5PuuXSEsgPON09SJiS0xMhf8SEOcob7xVhMjUBLjqvo23yRYC-hliuSbQpLbhn6ZTv_0bnQuU-Z7DjYhV8Bx-k4SqvO9CDxlILBewNMl7BuhZpyTM72gF4iCQqA\u0026ZTnCxuXo=4\u0026xbTlgDfX=5105446\u0026yvJdqCXB=\u0026PkgIyABn=0,0\u0026roLMTtks=\u0026wqVJaZPX=\u0026JOEvqkQw=1280,1024,1,1280,1024,0 HTTP/1.1\r\nHost: premiumvertising.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchroms.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\npopads-node: wb11\r\naccess-control-allow-origin: *\r\nasf: 9\r\npopads-ec: ASB\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-length: 44\r\ndate: Wed, 12 Nov 2025 21:19:36 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":44,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"d5f0a25e4d3522d56d48ce7bc3e518fb","sha1":"86794caff58f7fee6e684c2ba7195f970a8d6f4c","sha256":"9d781128a8ece413b003d5612b8398bf9340ef7f5b751d12bd125ba523d3ceb5","sha512":"a3a81801f516a4eb11f00d6f56dab0ed4b8a79219e6b4f5436993479f09dae08f14cffbab3327ff66fb39201d8eba1153ae7114f7705a01cc6f0edf840ef1616","ssdeep":"","tlshash":"789002801814116115d1500b8d5159d01259b1a4540801324446ca502dc7883a415774","first_seen":"2023-03-07T01:17:45Z","last_seen":"2026-04-04T13:41:38.679033Z","times_seen":22772,"resource_available":true,"data":null}},"time_used":341,"timings":{"blocked":109,"dns":1,"connect":30,"send":0,"wait":117,"receive":0,"ssl":72},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"premiumvertising.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/bframe?hl=en\u0026v=naPR4A6FAh-yZLuCX253WaZq\u0026k=6Lf5HEcrAAAAAC9S0Htng-O8awd5XURMd7HB57jb\u0026bft=0dAFcWeA7Ytr6bxccRsCSLh7wjkDlieYUJHjtEKA0FjZv6sKynNSvsORAuSiyNmvci4HyU11NpLYzlYaAaURfu5gFpakPlnJlbHg","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.38.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:37.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:37:33 GMT","end":"Mon, 05 Jan 2026 08:37:32 GMT"},"fingerprint":{"sha1":"17:9D:6B:F6:A8:18:29:EC:16:2C:3C:3D:F2:EA:93:19:C7:92:EE:AA","sha256":"AA:D4:E9:5C:D4:70:A7:86:45:DE:62:83:82:60:F9:B9:46:CF:40:73:19:FA:3B:01:A9:7E:9B:32:24:EE:57:EC"}}},"request":{"raw":"GET /recaptcha/api2/bframe?hl=en\u0026v=naPR4A6FAh-yZLuCX253WaZq\u0026k=6Lf5HEcrAAAAAC9S0Htng-O8awd5XURMd7HB57jb\u0026bft=0dAFcWeA7Ytr6bxccRsCSLh7wjkDlieYUJHjtEKA0FjZv6sKynNSvsORAuSiyNmvci4HyU11NpLYzlYaAaURfu5gFpakPlnJlbHg HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchroms.io/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Wed, 12 Nov 2025 21:19:37 GMT\r\ncontent-security-policy: script-src 'nonce-09ZEb1z57EmRToylI_SnQA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7623,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"69b5853bfeec9fec1f4dc0b3925b983a","sha1":"2fddef67ee0f06567bffbb28e075d69fd38cba51","sha256":"5e2d10aaca976848075affaa0a363a450df043a0807e354e67850d550b409efc","sha512":"716f46a0237a77b01a90c911da470609ef3dbb1734ea430bea3f16eee72598e6810c10b38705df1cd3651c3af6d0e6a6d14b2185c9db6b156445044916d8918c","ssdeep":"192:NjK+QK9KyK03XK/KIqKI4Kn7KSKBKC3sKUKoNK8KGnKrKEKT3AKrKFpKiw6:M+tI/y6yekn+f8QZRtpGKuBjdu+iw6","tlshash":"adf19c80081a9400ab934cd273cf3e36ed4f51167146c8b6abfe68acede7d27925974d","first_seen":"2025-11-12T21:20:09.060379Z","last_seen":"2025-11-12T21:20:09.060379Z","times_seen":1,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.premiumvertising.com/yUPNG.min.css","fqdn":"www.premiumvertising.com","domain":"premiumvertising.com","tld":"com"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:33.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1258267123.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Nov 2025 16:38:54 GMT","end":"Tue, 10 Feb 2026 16:38:53 GMT"},"fingerprint":{"sha1":"02:73:95:E7:27:1A:AA:ED:DF:82:C5:96:4B:28:15:BE:63:93:22:4B","sha256":"E6:52:33:F3:E1:40:DB:7E:FC:23:0F:6A:A6:88:08:AA:CF:0D:8C:C5:9B:D7:EC:3C:1D:2C:71:F9:36:30:4F:88"}}},"request":{"raw":"GET /yUPNG.min.css HTTP/1.1\r\nHost: www.premiumvertising.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://switchroms.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchroms.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 12 Nov 2025 21:19:33 GMT\r\ncontent-type: application/x-javascript\r\npopads-node: wb11\r\nexpires: Sun, 16 Nov 2025 07:47:59 GMT\r\naccess-control-allow-origin: https://switchroms.io\r\nlink: \u003chttps://premiumvertising.com/\u003e;rel=preconnect\r\ncache-control: public, max-age=604800\r\nx-77-nzt: EwgBX63NDQFBDAG5TAoTAfdwnwQADAFZ3n0uAbdGEwAA\r\nx-77-nzt-ray: 2a494a15b31a2d460afa1469fdd82c15\r\nx-77-cache: HIT\r\nx-77-age: 302960\r\nvary: Accept-Encoding, Origin\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":41949,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (1568)","md5":"34ae24702febd735848ee9ae82408e7e","sha1":"97be881dd8f169528ef3b0146b98da2a48c52607","sha256":"c4b6a8d277f1ebcf2c5ab309ab27528e2a9c4c3d2117f4317d0d65860cb1bdfe","sha512":"163703349a282797325c9678f00cf4ed727dd9a0b3ea386fbae8c1d23bad1621dee7cf16cabab05018c8a60bf70be2286394aee9499ea4937c9101e0170b3fc0","ssdeep":"768:bt9rqAYKKWZzFQ9JsQU+YDngZGihfzmMzhYrTsAysncCWcf5k5sigC0LCntlqofr:bbtZzFQ9JsTgZvfzmMzhYrTscpOZR","tlshash":"88132aaab286282601e742b9503eb317b23305167912d458fcb9cdf96e3dd85117b7fc","first_seen":"2025-11-09T18:43:58.545323Z","last_seen":"2025-11-12T21:20:09.061459Z","times_seen":3,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":29,"dns":20,"connect":1,"send":0,"wait":24,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"www.premiumvertising.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"104.21.8.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:33.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switchroms.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 05:25:51 GMT","end":"Tue, 03 Feb 2026 06:24:36 GMT"},"fingerprint":{"sha1":"11:CC:5E:77:C5:8A:9E:7C:E3:7B:3C:A9:00:ED:93:7A:8E:43:32:D3","sha256":"81:8A:05:E3:87:30:CE:C5:DD:1A:59:5E:40:36:ED:1C:56:08:F6:B6:6F:7A:26:73:58:A3:DC:2B:40:E1:11:B9"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: switchroms.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 12 Nov 2025 21:19:33 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 14 Mar 2024 09:02:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65f2bd35-3509\"\r\nserver: cloudflare\r\nx-content-type-options: \"nosniff\" always\r\nx-xss-protection: \"1; mode=block\" always\r\nstrict-transport-security: \"max-age=31536000; includeSubDomains; preload\" always\r\nreferrer-policy: no-referrer-when-downgrade\r\nexpires: Sat, 24 Oct 2026 21:41:30 GMT\r\ncache-control: public, max-age=31536000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\ncontent-encoding: gzip\r\nage: 1640282\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ijfouXBZ0bDL7yKNgNH8qdP8OKNo1H5OrvZ9ppwKNaXbDRzAS%2Bu1nxLmS2Xf8u6jhfPYF%2F%2FLugt29HIg31RBJxg449IVTuZL7%2Fh1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 99d911799c15b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-04-04T13:49:26.30716Z","times_seen":638763,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/wp-content/plugins/wpdiscuz/assets/js/wpdiscuz-combo.min.js?ver=99997.6.25","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"104.21.8.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:33.502Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switchroms.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 05:25:51 GMT","end":"Tue, 03 Feb 2026 06:24:36 GMT"},"fingerprint":{"sha1":"11:CC:5E:77:C5:8A:9E:7C:E3:7B:3C:A9:00:ED:93:7A:8E:43:32:D3","sha256":"81:8A:05:E3:87:30:CE:C5:DD:1A:59:5E:40:36:ED:1C:56:08:F6:B6:6F:7A:26:73:58:A3:DC:2B:40:E1:11:B9"}}},"request":{"raw":"GET /wp-content/plugins/wpdiscuz/assets/js/wpdiscuz-combo.min.js?ver=99997.6.25 HTTP/1.1\r\nHost: switchroms.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 12 Nov 2025 21:19:33 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 08 Oct 2024 02:40:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67049bb6-4d259\"\r\nserver: cloudflare\r\nx-content-type-options: \"nosniff\" always\r\nx-xss-protection: \"1; mode=block\" always\r\nstrict-transport-security: \"max-age=31536000; includeSubDomains; preload\" always\r\nreferrer-policy: no-referrer-when-downgrade\r\nexpires: Wed, 04 Nov 2026 14:39:27 GMT\r\ncache-control: public, max-age=31536000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\ncontent-encoding: gzip\r\nage: 715206\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nmCuZxf33TvKjlsXm1MSvq5RuFJI11U65hMfHAfnJApS3U5OD3nIcg%2Fp6E46T3mGdWLsVrjDEwlHvjg29DSPPXMQfZbT0Fz4BlBP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 99d9117a5c21b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":315993,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (62919)","md5":"47564d6b0967215a3e5af197eacb31d5","sha1":"3984e3241bc4db06d706601907cc0ae4a89a94e6","sha256":"76deb53f24708eada7fcf03f5eacf23be94b9be5a15a20922b2d833b63c451b7","sha512":"0025b413a213a5a1453106db426b0b02b5ffe498e39749ebda8d66369b2ec9a5f7f6137ba960b9f6483944dab0266ea0acbb8948eab1823030db034b2a9f8f23","ssdeep":"3072:Iv/JOJWTVh9YxSd7Z5UzhKMTBOimO8z4BHaj0ANLme:a/JT79Ygf5QT0imO8z4afNLme","tlshash":"9e64f7987291b4b212f761b5006f120bf376ad79e00a9494e2a9d8f05ebcd4e2177f3d","first_seen":"2024-10-17T20:45:35.352253Z","last_seen":"2026-02-24T14:12:17.635339Z","times_seen":20,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"handymanthemepumpkin.com/impr.gif?sid=H4sIAAAAAAAC_1RSQWskRRSuzgYPuwdxjXoSGkRcQSbdM51kxj0E45oYds3GbCSgp-qq6kk5PV1tVXX3ZLwEA7LH8SCop843yUbjuugPEMLEiwQE5yI5bEAE_4AgepNJBuI-qPe-V18dvve9-nQ3OyM1ZPR09R3VlXFMp2cqnntjQyZcFcZdWXd9r-LddDdkMhvcdDujpPPX_VpQ8V51lwRrqemq53ue7_nuotQiUp3pcxYyfdjwKw2vElQr_kyAjn6yN5kDQx3w_Ixch-TDp_-IPoBkAyTt728J07Iqfe2tdhZTqzRyfvBe0kpUkaB9CSPtIEoOxq-hzJCQLyagkoPxBFD53mgChHJIJp5_jDA5GMtEmO9fKA1jiAQhv4YiH0DEA0g6AFM7kPxXAjCOlbtI2g9WlC7o1gVLR-yQTP79F2QxJJOPp5C0Hy3EsuPeU3FmpUoMOlEJ2RlANgdIs2PYrgNZHIPZTyD5L8R74RqS9uHbKpctNxe6BcnLcw9kNAA1DrLRkQ6yyEGWOmjzUzfw6gHzaW02anA25wU0CLgIvUa96nm0weaQsZG4HmzaA4t7YHobqd5GS_agsyOYzRKGOzB2SJx3t5HzEoUgKAxBQQkKSVBYgiIv93lsqqZ8wGOThf64Vse1VvaVbe7SfWWbIiGgugfNyz2ZfmR2wOyVfjcyvK9GiYa27NOQl7vpGXlm5J3z-UuvoCVOXTHHRFiPKKXcrweCRRGlEZ0T1Rk_5OHMLIwsIc3EuSFdOSS3b7yMVA7JUy8mCOkxTHwMJp8DzXzQogTdLNFNvjOFtGxTq7apSAWuSqR2EnbL2Y3PyLP9tfWFo_Mdvv_1PAQ7mbfd35ceTX0MpkukusSH8ieCZny_v6YKsremCkN-uJta2ZZdOtrvPUutuHJ4W2wVSvPlW6b3zRtsRIzgw3Vh7B2acJk0Dfl2QXIu9KLSTJAfl82GCFczs7mQ6SRL76y-ubjcTrUwRqpkACqH5OrRIZgckuu_7Zz_3drSP2DpNkx6QsYBowjC1EEsCWJxeU_DEuZ_fXiJd819NLUDaneQtEvkukQel6BxDya72repPpn_-ctRfIUwdvphrJ29MNbxZxc-GXnqRjVRZZ5Xn5v1a_VI-LWAs2imHjT4LPVqNQFrhnLq3z__CwAA___fhUNxXgQAAA==","fqdn":"handymanthemepumpkin.com","domain":"handymanthemepumpkin.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:36.031Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"handymanthemepumpkin.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Oct 2025 08:39:08 GMT","end":"Wed, 21 Jan 2026 08:39:07 GMT"},"fingerprint":{"sha1":"44:AF:00:AE:96:49:F1:00:9E:DB:4F:F1:C4:5F:92:B3:79:42:50:38","sha256":"BD:31:0D:1C:08:ED:4E:FE:4E:8C:89:EC:67:45:12:DC:0A:91:09:49:F5:66:4C:B8:B2:56:22:5F:59:F6:C8:F2"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1RSQWskRRSuzgYPuwdxjXoSGkRcQSbdM51kxj0E45oYds3GbCSgp-qq6kk5PV1tVXX3ZLwEA7LH8SCop843yUbjuugPEMLEiwQE5yI5bEAE_4AgepNJBuI-qPe-V18dvve9-nQ3OyM1ZPR09R3VlXFMp2cqnntjQyZcFcZdWXd9r-LddDdkMhvcdDujpPPX_VpQ8V51lwRrqemq53ue7_nuotQiUp3pcxYyfdjwKw2vElQr_kyAjn6yN5kDQx3w_Ixch-TDp_-IPoBkAyTt728J07Iqfe2tdhZTqzRyfvBe0kpUkaB9CSPtIEoOxq-hzJCQLyagkoPxBFD53mgChHJIJp5_jDA5GMtEmO9fKA1jiAQhv4YiH0DEA0g6AFM7kPxXAjCOlbtI2g9WlC7o1gVLR-yQTP79F2QxJJOPp5C0Hy3EsuPeU3FmpUoMOlEJ2RlANgdIs2PYrgNZHIPZTyD5L8R74RqS9uHbKpctNxe6BcnLcw9kNAA1DrLRkQ6yyEGWOmjzUzfw6gHzaW02anA25wU0CLgIvUa96nm0weaQsZG4HmzaA4t7YHobqd5GS_agsyOYzRKGOzB2SJx3t5HzEoUgKAxBQQkKSVBYgiIv93lsqqZ8wGOThf64Vse1VvaVbe7SfWWbIiGgugfNyz2ZfmR2wOyVfjcyvK9GiYa27NOQl7vpGXlm5J3z-UuvoCVOXTHHRFiPKKXcrweCRRGlEZ0T1Rk_5OHMLIwsIc3EuSFdOSS3b7yMVA7JUy8mCOkxTHwMJp8DzXzQogTdLNFNvjOFtGxTq7apSAWuSqR2EnbL2Y3PyLP9tfWFo_Mdvv_1PAQ7mbfd35ceTX0MpkukusSH8ieCZny_v6YKsremCkN-uJta2ZZdOtrvPUutuHJ4W2wVSvPlW6b3zRtsRIzgw3Vh7B2acJk0Dfl2QXIu9KLSTJAfl82GCFczs7mQ6SRL76y-ubjcTrUwRqpkACqH5OrRIZgckuu_7Zz_3drSP2DpNkx6QsYBowjC1EEsCWJxeU_DEuZ_fXiJd819NLUDaneQtEvkukQel6BxDya72repPpn_-ctRfIUwdvphrJ29MNbxZxc-GXnqRjVRZZ5Xn5v1a_VI-LWAs2imHjT4LPVqNQFrhnLq3z__CwAA___fhUNxXgQAAA== HTTP/1.1\r\nHost: handymanthemepumpkin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchroms.io/\r\nCookie: pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; u_pl26551079=1; nlece7ceb8faaad184ecffaafa7e251bdb56=[5941311]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 12 Nov 2025 21:19:36 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nset-cookie: iprc_l+113c1d630cc9922657aed9de7d1294ba=5941311; expires=Thu, 13 Nov 2025 21:19:36 GMT; path=/; secure; SameSite=None\niprc_l:5941311=1; expires=Thu, 13 Nov 2025 21:19:36 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 1\r\nHost: handymanthemepumpkin.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 13527c204358ed4e109afc2890df7b59\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T13:49:31.916752Z","times_seen":13333799,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"handymanthemepumpkin.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"handymanthemepumpkin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"handymanthemepumpkin.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/naPR4A6FAh-yZLuCX253WaZq/styles__ltr.css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.google.com/recaptcha/api2/bframe?hl=en\u0026v=naPR4A6FAh-yZLuCX253WaZq\u0026k=6Lf5HEcrAAAAAC9S0Htng-O8awd5XURMd7HB57jb\u0026bft=0dAFcWeA7Ytr6bxccRsCSLh7wjkDlieYUJHjtEKA0FjZv6sKynNSvsORAuSiyNmvci4HyU11NpLYzlYaAaURfu5gFpakPlnJlbHg","date":"2025-11-12T21:19:37.285Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:51 GMT","end":"Mon, 05 Jan 2026 08:38:50 GMT"},"fingerprint":{"sha1":"89:73:B0:EF:F1:BA:6A:DA:6C:2C:87:70:0D:17:11:82:30:E9:13:68","sha256":"96:8D:5D:62:3A:3A:D6:CD:06:9A:CE:52:F4:2D:91:F9:66:13:40:F4:5F:9B:88:3D:55:04:79:E3:14:96:51:FA"}}},"request":{"raw":"GET /recaptcha/releases/naPR4A6FAh-yZLuCX253WaZq/styles__ltr.css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 42506\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 06 Nov 2025 15:16:13 GMT\r\nexpires: Fri, 06 Nov 2026 15:16:13 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 03 Nov 2025 01:02:43 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nage: 540204\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":82951,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"04258b8c56cccf12d2812adbaa15f559","sha1":"e6a9b14b8bb9cccde986a58d10028e108930bdf3","sha256":"9ed7b552641c3004138810ee9d628ecdb90fb8b3c561eddf52da41aaea323c37","sha512":"3b07028519a309df3f78be29f310ac9c02b725e082f34ff18e787e172b8d18a74a67473bef396658c06f1678bd4ef23b97efb0c818414ff5e9cbfe78314a7359","ssdeep":"1536:1fGNbFoZJSUYOOaLnAW8+IcTOIiCdthXwW5l1Dx7:1GRFauOxLA/+IcTO2LX1","tlshash":"b7838f7338513b39fc2b9b616186b9edf22cc423e5514bfab5457a20c3db19a8253b07","first_seen":"2025-11-04T19:51:16.53286Z","last_seen":"2025-12-23T16:44:26.621458Z","times_seen":15173,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js?onload=onloadCallback\u0026render=explicit\u0026ver=1.0.0","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.38.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:33.503Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:39:42 GMT","end":"Mon, 05 Jan 2026 08:39:41 GMT"},"fingerprint":{"sha1":"21:9C:5C:29:E1:79:B5:ED:56:03:5A:DB:A7:59:E9:CD:8C:F7:7B:84","sha256":"B7:D9:C5:14:9E:24:2A:E0:DE:23:41:E5:B0:F0:10:5E:EB:C3:66:B3:4F:D9:14:ED:52:6C:5D:D0:7D:FC:9F:A1"}}},"request":{"raw":"GET /recaptcha/api.js?onload=onloadCallback\u0026render=explicit\u0026ver=1.0.0 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchroms.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nexpires: Wed, 12 Nov 2025 21:19:33 GMT\r\ndate: Wed, 12 Nov 2025 21:19:33 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: cross-origin\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1076,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1076), with no line terminators","md5":"7c1cbdc6ca3465947f7f1e2010e11d7f","sha1":"c400710f528ee27596d331caaaba903274ac13a5","sha256":"43384d5af364c5ec7dbb13435d1b651b0c4b38d6a65d679365267f65061ecd2d","sha512":"89033a47e086430af198ffcb626effde7b7c9853da056749ccf4629b935c4711f10471441187a1786b08c8f8c9c9328b73111653adeb93318da6dd8d93b56fcd","ssdeep":"","tlshash":"1f1120732a04e0390b721ae1e2fbcab1e492640db01c84d8a502dac41e6accbce04444","first_seen":"2025-11-04T19:51:16.544277Z","last_seen":"2025-11-13T21:15:06.32666Z","times_seen":286,"resource_available":true,"data":null}},"time_used":216,"timings":{"blocked":95,"dns":0,"connect":7,"send":0,"wait":20,"receive":0,"ssl":91},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"professionaltrafficmonitor.com/stats","fqdn":"professionaltrafficmonitor.com","domain":"professionaltrafficmonitor.com","tld":"com"},"ip":{"addr":"52.59.96.77","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:34.203Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"protrafficinspector.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 01 Jul 2025 00:00:00 GMT","end":"Thu, 30 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:D5:8D:EB:A4:50:13:0D:7C:33:71:82:B8:02:49:4F:D6:31:B6:E6","sha256":"49:03:4C:2C:1B:23:D8:D6:CB:AE:F0:54:61:99:C2:20:F4:FF:87:5E:0B:72:B1:6B:D8:AB:21:49:2D:F2:EC:4A"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: professionaltrafficmonitor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://switchroms.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchroms.io/\r\nCookie: uid_id2=e6d9cfb6-1dcb-4637-a18d-7de2b13e2317:2:1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 12 Nov 2025 21:19:34 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\nserver: fasthttp\r\naccess-control-allow-origin: https://switchroms.io\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"489e2f0fc30c15e2589076201e99afd2","sha1":"e18ec25a5da214a0e1bd51582f8995616ded6723","sha256":"8a719e35f79794c7b36fc660178d3157fd4c4c5fca4096a9a98161952afcb95f","sha512":"bb99582a6e327c2de57bd8280ec077f90cbc1f27d597911510a70f94e0b86952efeb3c57647d12239082c9937e25012d03c460c5150260493baa0dbc4718b218","ssdeep":"","tlshash":"059004dc50c3510040110d43110df4c14410c4715d305d444d55510f57133010c10f47","first_seen":"2025-11-12T21:20:09.040526Z","last_seen":"2025-11-12T21:20:09.040526Z","times_seen":1,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"104.21.8.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-12T21:19:32.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switchroms.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 05:25:51 GMT","end":"Tue, 03 Feb 2026 06:24:36 GMT"},"fingerprint":{"sha1":"11:CC:5E:77:C5:8A:9E:7C:E3:7B:3C:A9:00:ED:93:7A:8E:43:32:D3","sha256":"81:8A:05:E3:87:30:CE:C5:DD:1A:59:5E:40:36:ED:1C:56:08:F6:B6:6F:7A:26:73:58:A3:DC:2B:40:E1:11:B9"}}},"request":{"raw":"GET /the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8 HTTP/1.1\r\nHost: switchroms.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 12 Nov 2025 21:19:33 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nx-pingback: https://switchroms.io/xmlrpc.php\r\nlink: \u003chttps://switchroms.io/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://switchroms.io/wp-json/wp/v2/posts/2415\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://switchroms.io/?p=2415\u003e; rel=shortlink\r\nserver: cloudflare\r\nx-content-type-options: \"nosniff\" always\r\nx-xss-protection: \"1; mode=block\" always\r\nstrict-transport-security: \"max-age=31536000; includeSubDomains; preload\" always\r\nreferrer-policy: no-referrer-when-downgrade\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xTO3ZrTGVDAFYjEoxsHHVMGO5h4If3Ol32DHNsiXoES%2BoORCpSxN9joMfbd7MAt4ABZQJ5I662UbdFKPKQBD1wQ83RM5URPj2dJ9IvQ%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfEdge;dur=9,cfOrigin;dur=992\r\ncontent-encoding: br\r\ncf-ray: 99d9117208e9783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gravatar","description":"Gravatar is a service for providing globally unique avatars.","website":"https://gravatar.com","common_platform_enumeration":"","icon":"Gravatar.png","categories":["Miscellaneous"]},{"name":"Akismet","description":"Akismet is a service that filters spam from comments, trackbacks, and contact form messages.","website":"https://akismet.com","common_platform_enumeration":"","icon":"Akismet.png","categories":["WordPress plugins"]},{"name":"Google AdSense","description":"Google AdSense is a program run by Google through which website publishers serve advertisements that are targeted to the site content and audience.","website":"https://www.google.com/adsense/start/","common_platform_enumeration":"","icon":"Google AdSense.svg","categories":["Advertising"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress:6.8.3","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"ShareThis","description":"ShareThis provides free engagement and growth tools (e.g., share buttons, follow buttons, and reaction buttons) for site owners.","website":"https://sharethis.com","common_platform_enumeration":"","icon":"ShareThis.png","categories":["Widgets"]},{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":150302,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (10908), with CRLF, LF line terminators","md5":"1d62b1a7a87a2c67b63c3912d3ac52b4","sha1":"5f37ffc6f17ca2541cb8a5bcce3a734606817b96","sha256":"a565e5cef33a734f6a49d8b342eb2eab7b456cbcef57e76d26227ca65fa9af29","sha512":"b95bbce8768489cebc38d9be7775de82ca2818eeb4297a4472a99e767bf6d57e7b9b297bfc092c7db09c8ce1d3df9f4d1e0f271ca594a71989864cb2985cb792","ssdeep":"3072:PlQ9rjYOhCFCIMPHOBKhTU6EAPqoSWexSWTHSWTzSguMS1FXS1K+SrHbSCO/S2PF:ylCFCIMPHOBKhTU6zWsTtZuka2Pe4PDW","tlshash":"d0e31bf141e8003d857787d45c38ab0ab65e8a77ca494918f6ff0ad84fd6ee5e937208","first_seen":"2025-11-12T21:20:09.064581Z","last_seen":"2025-11-12T21:20:09.064581Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1052,"timings":{"blocked":22,"dns":0,"connect":1,"send":0,"wait":1008,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"compiledonatevanity.com/0c/bd/60/0cbd60ae91020949f7db0f82252e5c98.js","fqdn":"compiledonatevanity.com","domain":"compiledonatevanity.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:33.314Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"compiledonatevanity.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Oct 2025 21:24:08 GMT","end":"Tue, 06 Jan 2026 21:24:07 GMT"},"fingerprint":{"sha1":"C7:52:82:2F:DC:5D:8E:4F:1F:D6:00:5B:9F:36:43:9C:4F:44:9B:0C","sha256":"66:83:8E:9F:63:B7:31:50:15:3B:62:2C:BF:29:CB:A0:E5:72:08:60:0F:46:92:AE:53:1D:64:1A:3D:4D:A5:97"}}},"request":{"raw":"GET /0c/bd/60/0cbd60ae91020949f7db0f82252e5c98.js HTTP/1.1\r\nHost: compiledonatevanity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchroms.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 12 Nov 2025 21:19:33 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 37898\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 4\r\nHost: compiledonatevanity.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 9e95e71353208c17a7690108a3f0cb08\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":106693,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"7c563e56d2aa5229344b3215adc5c09d","sha1":"f333be0d3a6a198abc42481f46c304fed53609d8","sha256":"4ad0b975eea57485448a6595bde0e2c47fd8c1c6e2e9554aa9e82475700811cd","sha512":"c41e122e17fc7e1de259619dc015ccd3caed242cf13271e6a2221195f41310799e6ef1867187820f5d0356e916e5a27a71793fcd43d9f69123b693706fa4494a","ssdeep":"1536:om9T0jLlKHI2HTXYao6R167ET/Dei89ZHf5nMJVbzs1oopLT:oRY3LKKJJej","tlshash":"87a3b6cc3f81f06d466a68b3123f800bf12e6d55908ce9dcf913e1e99eb8b5b9539524","first_seen":"2025-11-12T21:20:09.065499Z","last_seen":"2025-11-12T21:20:09.065499Z","times_seen":1,"resource_available":true,"data":null}},"time_used":814,"timings":{"blocked":299,"dns":15,"connect":94,"send":0,"wait":118,"receive":94,"ssl":191},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"compiledonatevanity.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"compiledonatevanity.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/wp-content/themes/switch/style.css?ver=1.0.3","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"104.21.8.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:33.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switchroms.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 05:25:51 GMT","end":"Tue, 03 Feb 2026 06:24:36 GMT"},"fingerprint":{"sha1":"11:CC:5E:77:C5:8A:9E:7C:E3:7B:3C:A9:00:ED:93:7A:8E:43:32:D3","sha256":"81:8A:05:E3:87:30:CE:C5:DD:1A:59:5E:40:36:ED:1C:56:08:F6:B6:6F:7A:26:73:58:A3:DC:2B:40:E1:11:B9"}}},"request":{"raw":"GET /wp-content/themes/switch/style.css?ver=1.0.3 HTTP/1.1\r\nHost: switchroms.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 12 Nov 2025 21:19:33 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 23 Mar 2025 06:50:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67dfaf28-cc23\"\r\nserver: cloudflare\r\nx-content-type-options: \"nosniff\" always\r\nx-xss-protection: \"1; mode=block\" always\r\nstrict-transport-security: \"max-age=31536000; includeSubDomains; preload\" always\r\nreferrer-policy: no-referrer-when-downgrade\r\nexpires: Thu, 12 Nov 2026 09:38:51 GMT\r\ncache-control: public, max-age=31536000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\ncontent-encoding: gzip\r\nage: 42041\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AfIBRZRLF929kyF9F6DEm%2BoJ4GelvM2gPGbxnzyKWAqhjhrcwMBOTyrApynbWmU8huBL2gWjgqjPsmbTojDyOKc3BMBGqGwzj%2BYI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 99d911798c12b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52259,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, ASCII text","md5":"032974f80c5339127e2c2a88764ed4d9","sha1":"d85061be9458822438adfbd88e934d8a9e1cc3b3","sha256":"37b1ca4e6992a3e7253d5f4e60549ca8e5d6594da6e3d01ca0e13c19e29c4393","sha512":"d81b0e8e205496fc54f00a95afea49420ab594420ba0b2d0cde59cd405b21642f9a92905d7868ab25fc9a3f6aa383fda1226a24d1e1edf7998786312cc8b1cca","ssdeep":"768:KRFgFEFoIlsmHFo0g7GFKwtUbqWb8MgEegW3glBhcrfgdGij5CTi/rvi7HXjtS5R:KRKquI+dG1i/rgHXjtSeX6urW","tlshash":"7a33a6666b402801e31f0678ef59ffe4561d4566ce0f8efae891b92cc3c969502f2f49","first_seen":"2025-04-14T02:23:47.153184Z","last_seen":"2026-01-26T03:36:30.101653Z","times_seen":22,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"professionaltrafficmonitor.com/stats","fqdn":"professionaltrafficmonitor.com","domain":"professionaltrafficmonitor.com","tld":"com"},"ip":{"addr":"52.59.96.77","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:36.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"protrafficinspector.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 01 Jul 2025 00:00:00 GMT","end":"Thu, 30 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:D5:8D:EB:A4:50:13:0D:7C:33:71:82:B8:02:49:4F:D6:31:B6:E6","sha256":"49:03:4C:2C:1B:23:D8:D6:CB:AE:F0:54:61:99:C2:20:F4:FF:87:5E:0B:72:B1:6B:D8:AB:21:49:2D:F2:EC:4A"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: professionaltrafficmonitor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://switchroms.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchroms.io/\r\nCookie: uid_id2=e6d9cfb6-1dcb-4637-a18d-7de2b13e2317:2:1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 12 Nov 2025 21:19:36 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\nserver: fasthttp\r\naccess-control-allow-origin: https://switchroms.io\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"489e2f0fc30c15e2589076201e99afd2","sha1":"e18ec25a5da214a0e1bd51582f8995616ded6723","sha256":"8a719e35f79794c7b36fc660178d3157fd4c4c5fca4096a9a98161952afcb95f","sha512":"bb99582a6e327c2de57bd8280ec077f90cbc1f27d597911510a70f94e0b86952efeb3c57647d12239082c9937e25012d03c460c5150260493baa0dbc4718b218","ssdeep":"","tlshash":"059004dc50c3510040110d43110df4c14410c4715d305d444d55510f57133010c10f47","first_seen":"2025-11-12T21:20:09.040526Z","last_seen":"2025-11-12T21:20:09.040526Z","times_seen":1,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/pixel/pure","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:36.017Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Oct 2025 22:01:12 GMT","end":"Sat, 24 Jan 2026 22:01:11 GMT"},"fingerprint":{"sha1":"15:FA:E2:08:0A:F1:68:03:29:64:51:B0:FA:3B:8E:DD:DC:B7:CD:01","sha256":"F8:EA:EA:FF:5A:CA:9D:E1:82:F0:8C:3C:7C:6B:FB:06:8F:72:6C:0E:64:EF:7B:3B:2B:21:25:C2:25:7D:0C:BD"}}},"request":{"raw":"OPTIONS /pixel/pure HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://switchroms.io/\r\nOrigin: https://switchroms.io\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: nginx/1.21.6\r\nDate: Wed, 12 Nov 2025 21:19:36 GMT\r\nConnection: keep-alive\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Max-Age: 1728000\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T13:49:31.916752Z","times_seen":13333799,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"104.21.8.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:33.385Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switchroms.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 05:25:51 GMT","end":"Tue, 03 Feb 2026 06:24:36 GMT"},"fingerprint":{"sha1":"11:CC:5E:77:C5:8A:9E:7C:E3:7B:3C:A9:00:ED:93:7A:8E:43:32:D3","sha256":"81:8A:05:E3:87:30:CE:C5:DD:1A:59:5E:40:36:ED:1C:56:08:F6:B6:6F:7A:26:73:58:A3:DC:2B:40:E1:11:B9"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: switchroms.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 12 Nov 2025 21:19:33 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 14 Mar 2024 09:02:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65f2bd35-15601\"\r\nserver: cloudflare\r\nx-content-type-options: \"nosniff\" always\r\nx-xss-protection: \"1; mode=block\" always\r\nstrict-transport-security: \"max-age=31536000; includeSubDomains; preload\" always\r\nreferrer-policy: no-referrer-when-downgrade\r\nexpires: Thu, 29 Oct 2026 14:21:57 GMT\r\ncache-control: public, max-age=31536000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\ncontent-encoding: gzip\r\nage: 1234656\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zJStLESKgwx%2B5JvCGwm1RcR8EMFOHEjO%2BZUkAw%2FybDgJNs%2FJYihn%2FuJCINz3q25vvAe7diU47yVn2nYGETQ41kfVWNy9orLH%2FuAR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 99d911798c14b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-04-04T13:49:26.298459Z","times_seen":685383,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"compiledonatevanity.com/0e/53/6f/0e536fb8895c74d7dcf7b58fe63dae08.js","fqdn":"compiledonatevanity.com","domain":"compiledonatevanity.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:33.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"compiledonatevanity.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Oct 2025 21:24:08 GMT","end":"Tue, 06 Jan 2026 21:24:07 GMT"},"fingerprint":{"sha1":"C7:52:82:2F:DC:5D:8E:4F:1F:D6:00:5B:9F:36:43:9C:4F:44:9B:0C","sha256":"66:83:8E:9F:63:B7:31:50:15:3B:62:2C:BF:29:CB:A0:E5:72:08:60:0F:46:92:AE:53:1D:64:1A:3D:4D:A5:97"}}},"request":{"raw":"GET /0e/53/6f/0e536fb8895c74d7dcf7b58fe63dae08.js HTTP/1.1\r\nHost: compiledonatevanity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchroms.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 12 Nov 2025 21:19:33 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 32834\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 5\r\nHost: compiledonatevanity.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 8adbdaae8147980709337ce1b2bd3b4f\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":85038,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"35ea146c24ebc0c982e2fce651e34988","sha1":"d4ff6a25d548a1752bfdd2670daefc4d8eed3893","sha256":"cea37bbc19ccb3417a489af6cbc6dfea040c70be755fb8a6bab296b5418ef227","sha512":"3f18e8bded019b35541331cf0aba9650a489159c6cf2832f671e0a1b66377fd94d59fcc2c50a85598bc1e38b34661dbaf34521c9823018078fe7eefdcc9f72c4","ssdeep":"1536:fhic73s72DQsjQlZKEMO2N6BLFYQPcT41PXgKkGCWUMZL:fccxkN4O2N6BLFYQZZXgKsWUM9","tlshash":"8e83f8883f81b65812a2f133723f999ae1d95e451888d054e303a8dcbf7d71ce93af65","first_seen":"2025-11-12T21:20:09.068083Z","last_seen":"2025-11-12T21:20:09.068083Z","times_seen":1,"resource_available":true,"data":null}},"time_used":750,"timings":{"blocked":273,"dns":1,"connect":92,"send":0,"wait":105,"receive":92,"ssl":186},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"compiledonatevanity.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"compiledonatevanity.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"weirdopt.com/ad/advertisers.js","fqdn":"weirdopt.com","domain":"weirdopt.com","tld":"com"},"ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:34.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"weirdopt.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Oct 2025 01:14:37 GMT","end":"Wed, 28 Jan 2026 01:14:36 GMT"},"fingerprint":{"sha1":"5A:67:AA:88:D5:BE:C4:00:42:86:CC:4E:FC:E7:73:FE:CB:85:71:60","sha256":"F5:6C:A4:39:AC:04:F6:11:7E:DB:94:93:4C:93:FC:EC:A2:B4:4E:A4:FE:19:8E:22:C0:D8:D4:84:67:37:70:C0"}}},"request":{"raw":"GET /ad/advertisers.js HTTP/1.1\r\nHost: weirdopt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchroms.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 12 Nov 2025 21:19:34 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 0\r\nConnection: keep-alive\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: a24c237533181b63874833b7ec5be64b\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T13:49:31.916752Z","times_seen":13333799,"resource_available":true,"data":null}},"time_used":145,"timings":{"blocked":64,"dns":1,"connect":17,"send":0,"wait":17,"receive":0,"ssl":44},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/wp-content/uploads/2024/03/Nintendo_Switch_logo.png","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"104.21.8.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:34.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switchroms.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 05:25:51 GMT","end":"Tue, 03 Feb 2026 06:24:36 GMT"},"fingerprint":{"sha1":"11:CC:5E:77:C5:8A:9E:7C:E3:7B:3C:A9:00:ED:93:7A:8E:43:32:D3","sha256":"81:8A:05:E3:87:30:CE:C5:DD:1A:59:5E:40:36:ED:1C:56:08:F6:B6:6F:7A:26:73:58:A3:DC:2B:40:E1:11:B9"}}},"request":{"raw":"GET /wp-content/uploads/2024/03/Nintendo_Switch_logo.png HTTP/1.1\r\nHost: switchroms.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_YR6V7LMBP0=GS2.1.s1762982374$o1$g0$t1762982374$j60$l0$h0; _ga=GA1.1.422467514.1762982374\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 12 Nov 2025 21:19:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 4178\r\nlast-modified: Mon, 18 Mar 2024 08:03:01 GMT\r\netag: \"65f7f535-1052\"\r\nserver: cloudflare\r\nx-content-type-options: \"nosniff\" always\r\nx-xss-protection: \"1; mode=block\" always\r\nstrict-transport-security: \"max-age=31536000; includeSubDomains; preload\" always\r\nreferrer-policy: no-referrer-when-downgrade\r\nexpires: Sat, 26 Sep 2026 16:25:49 GMT\r\ncache-control: public, max-age=31536000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\naccept-ranges: bytes\r\nage: 4078425\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6jTO1WH9cgLydPreVKi20xqhEMN%2Bnx%2FgVE4Kml1pjCwc5mzpyj%2FEI%2B%2BjCiOxgM%2FGxXevBFzugfsuLxSx85B7y1DjJNb4cx1SkkZ7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\ncf-ray: 99d911829cceb4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4178,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 240, 8-bit colormap, non-interlaced","md5":"31af029cbfcfe873150af21ee4f1420e","sha1":"a7008c3599f28617dc3ca9e1736349a330abb4c9","sha256":"e2d45db6614cd6523b8eadc629340a4110eb0025971ba53c294b84e435028888","sha512":"24ef2d30942ba4ca3f7693fff21c9354710e56bd1f426801da38f539162ac45f2cd1d40d7bed4e2cdf7fa770a6bd0a75a28422e6f8c62cc5df44de78987e22f8","ssdeep":"96:oNGhPc3gsCo8qq6dV2A8uGXLTRVzIPJFjsx2yP3zvvVM:nF/+5dV18uGvfIPJFjalM","tlshash":"16817fc641527484c677018dcf6382d6eff0e30d7914574954da989b2b063e96accf82","first_seen":"2024-08-22T17:21:44.341781Z","last_seen":"2026-01-26T03:36:30.110757Z","times_seen":28,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/ren.gif?sid=H4sIAAAAAAAC_1RSTYgcRRit3iwezEHUVS8GG1SI6E66p3t-2gira4yGxCQkkRw8SHVV9Ww5PV1tVf9M5rS4IDmOB0HFQ--b3SzGKApePKjLrIeFBSHjaQ_ZSw56FBTBm8zsQvAdvu8rXh2-97730Xp-QDzkdP_y22og45ieatQc--R1mXBVGvviNdt1as5p-7pMmv5puz8tunjZ9fya84L9pmBddaruuI7jOq59VmoRqf6pGQuZ3gncWuDU_HrNbfjo6_-_TW7BUAu8OCCPQfLJI_ejdyHZGEnv2zPCdDOVvvRGL49ppjQKvvVO0k1UmaD3YIy0hSjZOvoNZSaEfDoHlWwdKYAqNqYKEMoJmXvyHsJk62hNhMXm4aZhDJEg5MdRFmOIeAxJx2BqDZLfJQDjuHgJSe_WRaVLeuOQpVN2Qub_-QuynJD5ewtIet8sx7JvX1VxnkmVGPSjCrI_huyMkeY7yAYWZLkDln0IyX8lzlPHkfRuv6UK2bULobuQfP850eQBi8LmostZuOg3vdYiddt8scVFPXQ9Uffc1swoGY1BzRxyYyGXFvLIQp5a6PF923faPnOp14wCzlqOT32fi9AJ2nXHoQFrIWdTBUNk6RAsHoLpVaR6FV05hM63YVYqGG7BZAQFr1AKgtIQlJSglARlRlAW1SaPTd1Ut3hs8tA96vWj7lUjlXXW6abKOiIhoHoIzasNmX5g1sCyY6NBZPhITQsNs2pEQ16tpwfk0am51ifPvoKu2Lcd0fCaUdhuBw3W8nmLs6gVNtqRaHqcCqcNIytIMwdqLAzkhJw_-TxSOSEPnUgQ0h2YeAdMPgGanwAtK9CVCoPka1PKjK1o1TM1qcBVhTSbR3bDWo8PyOOjK9eWt2dHfu_puxBs79UTz_xU7H4fgOkKqa7wvvyFoBPfHF1RJdm4okpDvruUZrInB3QagKsZzcT87fPiRqk0P3fGDL98jU2J6XjnmjDZBZpwmXQM-WpZci70WaWZID-eM9dFeDk3K8u5TvL0wuXXz57rpVoYI1UyBpUT8vAXL4LJCVk4uTQLd-Pv-2DpKky6t_TDZ1N8DqMIwtRCLCfEW9hFLPaWRr_vbhNCQMMKRjzQFIq9n_8kM6ybm-hoCzRbQ9KrUOgKRVyBxkOY_NgoS_Xe0m_eDAhjaxTG2toIYx1_fOiVkft2ox56zXa7KaImjzzu1T0eNBwR-DRo-oHfQGYmcuHfP_4LAAD__-eYYfuDBAAA","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:36.407Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Oct 2025 22:01:12 GMT","end":"Sat, 24 Jan 2026 22:01:11 GMT"},"fingerprint":{"sha1":"15:FA:E2:08:0A:F1:68:03:29:64:51:B0:FA:3B:8E:DD:DC:B7:CD:01","sha256":"F8:EA:EA:FF:5A:CA:9D:E1:82:F0:8C:3C:7C:6B:FB:06:8F:72:6C:0E:64:EF:7B:3B:2B:21:25:C2:25:7D:0C:BD"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_1RSTYgcRRit3iwezEHUVS8GG1SI6E66p3t-2gira4yGxCQkkRw8SHVV9Ww5PV1tVf9M5rS4IDmOB0HFQ--b3SzGKApePKjLrIeFBSHjaQ_ZSw56FBTBm8zsQvAdvu8rXh2-97730Xp-QDzkdP_y22og45ieatQc--R1mXBVGvviNdt1as5p-7pMmv5puz8tunjZ9fya84L9pmBddaruuI7jOq59VmoRqf6pGQuZ3gncWuDU_HrNbfjo6_-_TW7BUAu8OCCPQfLJI_ejdyHZGEnv2zPCdDOVvvRGL49ppjQKvvVO0k1UmaD3YIy0hSjZOvoNZSaEfDoHlWwdKYAqNqYKEMoJmXvyHsJk62hNhMXm4aZhDJEg5MdRFmOIeAxJx2BqDZLfJQDjuHgJSe_WRaVLeuOQpVN2Qub_-QuynJD5ewtIet8sx7JvX1VxnkmVGPSjCrI_huyMkeY7yAYWZLkDln0IyX8lzlPHkfRuv6UK2bULobuQfP850eQBi8LmostZuOg3vdYiddt8scVFPXQ9Uffc1swoGY1BzRxyYyGXFvLIQp5a6PF923faPnOp14wCzlqOT32fi9AJ2nXHoQFrIWdTBUNk6RAsHoLpVaR6FV05hM63YVYqGG7BZAQFr1AKgtIQlJSglARlRlAW1SaPTd1Ut3hs8tA96vWj7lUjlXXW6abKOiIhoHoIzasNmX5g1sCyY6NBZPhITQsNs2pEQ16tpwfk0am51ifPvoKu2Lcd0fCaUdhuBw3W8nmLs6gVNtqRaHqcCqcNIytIMwdqLAzkhJw_-TxSOSEPnUgQ0h2YeAdMPgGanwAtK9CVCoPka1PKjK1o1TM1qcBVhTSbR3bDWo8PyOOjK9eWt2dHfu_puxBs79UTz_xU7H4fgOkKqa7wvvyFoBPfHF1RJdm4okpDvruUZrInB3QagKsZzcT87fPiRqk0P3fGDL98jU2J6XjnmjDZBZpwmXQM-WpZci70WaWZID-eM9dFeDk3K8u5TvL0wuXXz57rpVoYI1UyBpUT8vAXL4LJCVk4uTQLd-Pv-2DpKky6t_TDZ1N8DqMIwtRCLCfEW9hFLPaWRr_vbhNCQMMKRjzQFIq9n_8kM6ybm-hoCzRbQ9KrUOgKRVyBxkOY_NgoS_Xe0m_eDAhjaxTG2toIYx1_fOiVkft2ox56zXa7KaImjzzu1T0eNBwR-DRo-oHfQGYmcuHfP_4LAAD__-eYYfuDBAAA HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchroms.io/\r\nCookie: ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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_ZG93bmxvYWQ9OCIsImFyIjpbXX19.oHGrbec2D3uoBV9hgp3roauagjWhSj4MWmxfPRAFU28; uid_id2=e6d9cfb6-1dcb-4637-a18d-7de2b13e2317:2:1; pdhtkv=true; uncs=1; pdhtkv5=true; uncs5=1; u_pl27929006=1; pdhtkv29=true; uncs29=1; u_pl26551100=1; slec0e536fb8895c74d7dcf7b58fe63dae08=[6233297]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 12 Nov 2025 21:19:36 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 2\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 4bf37f66bf429a553b8d0ad9c4c4bbb0\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T13:49:31.916752Z","times_seen":13333799,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"professionaltrafficmonitor.com/stats","fqdn":"professionaltrafficmonitor.com","domain":"professionaltrafficmonitor.com","tld":"com"},"ip":{"addr":"52.59.96.77","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:33.984Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"protrafficinspector.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 01 Jul 2025 00:00:00 GMT","end":"Thu, 30 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:D5:8D:EB:A4:50:13:0D:7C:33:71:82:B8:02:49:4F:D6:31:B6:E6","sha256":"49:03:4C:2C:1B:23:D8:D6:CB:AE:F0:54:61:99:C2:20:F4:FF:87:5E:0B:72:B1:6B:D8:AB:21:49:2D:F2:EC:4A"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: professionaltrafficmonitor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://switchroms.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchroms.io/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 12 Nov 2025 21:19:33 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\nserver: fasthttp\r\naccess-control-allow-origin: https://switchroms.io\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nset-cookie: uid_id2=e6d9cfb6-1dcb-4637-a18d-7de2b13e2317:2:1; expires=Sat, 10 Nov 2035 21:19:33 GMT; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"489e2f0fc30c15e2589076201e99afd2","sha1":"e18ec25a5da214a0e1bd51582f8995616ded6723","sha256":"8a719e35f79794c7b36fc660178d3157fd4c4c5fca4096a9a98161952afcb95f","sha512":"bb99582a6e327c2de57bd8280ec077f90cbc1f27d597911510a70f94e0b86952efeb3c57647d12239082c9937e25012d03c460c5150260493baa0dbc4718b218","ssdeep":"","tlshash":"059004dc50c3510040110d43110df4c14410c4715d305d444d55510f57133010c10f47","first_seen":"2025-11-12T21:20:09.040526Z","last_seen":"2025-11-12T21:20:09.040526Z","times_seen":1,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"handymanthemepumpkin.com/ntv.json?key=e7ceb8faaad184ecffaafa7e251bdb56\u0026vstc=1\u0026rb=","fqdn":"handymanthemepumpkin.com","domain":"handymanthemepumpkin.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:34.195Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"handymanthemepumpkin.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Oct 2025 08:39:08 GMT","end":"Wed, 21 Jan 2026 08:39:07 GMT"},"fingerprint":{"sha1":"44:AF:00:AE:96:49:F1:00:9E:DB:4F:F1:C4:5F:92:B3:79:42:50:38","sha256":"BD:31:0D:1C:08:ED:4E:FE:4E:8C:89:EC:67:45:12:DC:0A:91:09:49:F5:66:4C:B8:B2:56:22:5F:59:F6:C8:F2"}}},"request":{"raw":"GET /ntv.json?key=e7ceb8faaad184ecffaafa7e251bdb56\u0026vstc=1\u0026rb= HTTP/1.1\r\nHost: handymanthemepumpkin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://switchroms.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchroms.io/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 12 Nov 2025 21:19:34 GMT\r\nContent-Type: application/json\r\nContent-Length: 3025\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\naccess-control-allow-origin: https://switchroms.io\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\nset-cookie: pdhtkv=true; expires=Thu, 13 Nov 2025 21:19:34 GMT; path=/; secure; SameSite=None\nuncs=1; expires=Thu, 13 Nov 2025 21:19:34 GMT; path=/; secure; SameSite=None\npdhtkv49=true; expires=Thu, 13 Nov 2025 21:19:34 GMT; path=/; secure; SameSite=None\nuncs49=1; expires=Thu, 13 Nov 2025 21:19:34 GMT; path=/; secure; SameSite=None\nu_pl26551079=1; expires=Thu, 13 Nov 2025 21:19:34 GMT; path=/; secure; SameSite=None\nnlece7ceb8faaad184ecffaafa7e251bdb56=[5941311]; expires=Wed, 12 Nov 2025 21:19:39 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 21\r\nHost: handymanthemepumpkin.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 0b5802f8984ef6b9fa6716360bbc298f\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3900,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"8e24abd3b7ed4c167769a4d3ecdf6199","sha1":"b80a10aff9327111798d6f6cf3ff329f484c5cb7","sha256":"90f78fa4e08d17d5892ab78a6295c5ec8b0c8a7f9a1cae5d402745ec9d1f4ea1","sha512":"378a505a3a7e885f1f315f98a5dda6f9c1966f56f19484731ea7ff30e312767d110b1037c4663c28e094451aeb15323f070d92c9001576e429d40b458e66fc15","ssdeep":"","tlshash":"60816cb92927479b2d88d0d024fba028228800d697c56f5d126f4f3538bd6ec27ba56c","first_seen":"2025-11-12T21:20:09.03774Z","last_seen":"2025-11-12T21:20:09.03774Z","times_seen":1,"resource_available":false,"data":null}},"time_used":710,"timings":{"blocked":296,"dns":13,"connect":93,"send":0,"wait":114,"receive":0,"ssl":187},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"handymanthemepumpkin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"handymanthemepumpkin.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"handymanthemepumpkin.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"secure.gravatar.com/avatar/99cde586d843a381723aa9180e48ff05ef82a8ca705d5a7fcc1f8934076bca87?s=56\u0026d=mm\u0026r=g","fqdn":"secure.gravatar.com","domain":"gravatar.com","tld":"com"},"ip":{"addr":"192.0.73.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:34.515Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gravatar.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Oct 2025 19:44:01 GMT","end":"Sat, 10 Jan 2026 19:44:00 GMT"},"fingerprint":{"sha1":"9A:AD:B4:0D:78:72:BD:79:3B:85:71:6E:98:21:AA:57:5D:FE:A1:D8","sha256":"23:BF:7F:44:90:FB:07:43:D0:6E:80:2E:C0:31:09:27:0E:4B:CA:85:DA:67:94:AE:FF:06:30:93:B6:78:DB:53"}}},"request":{"raw":"GET /avatar/99cde586d843a381723aa9180e48ff05ef82a8ca705d5a7fcc1f8934076bca87?s=56\u0026d=mm\u0026r=g HTTP/1.1\r\nHost: secure.gravatar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchroms.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 12 Nov 2025 21:19:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1043\r\nlast-modified: Wed, 11 Jan 1984 08:00:00 GMT\r\nlink: \u003chttps://gravatar.com/avatar/99cde586d843a381723aa9180e48ff05ef82a8ca705d5a7fcc1f8934076bca87?s=56\u0026d=mm\u0026r=g\u003e; rel=\"canonical\"\r\naccess-control-allow-origin: *\r\ncontent-disposition: inline; filename=\"99cde586d843a381723aa9180e48ff05ef82a8ca705d5a7fcc1f8934076bca87.jpg\"\r\naccept-ranges: bytes\r\nexpires: Wed, 12 Nov 2025 21:24:34 GMT\r\ncache-control: max-age=300\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: MISS arn 28\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=MISS;dur=142.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1043,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 56x56, components 3","md5":"84a3420e18b4bceb960b94e5b04209a5","sha1":"ecaa0718ae2ef18031e6be57e28486e952ba2b01","sha256":"ae149e1290ce50a611bed27895810d16bb90071cd68fd81c7db7fd6469c37a86","sha512":"c55144c267f99bdd163f1ff8aeffcee4535207c1ea231be0e8b0ee74fab20c352c7abcdf8210131e83990212272cb5689c79f47d961be8a2c207b8d2fd7574f4","ssdeep":"","tlshash":"29113e6b571303e0b81741f6896abc519bfc889032e1631b7bf411a2c5a1a9cc48c8cc","first_seen":"2025-02-23T21:34:04.199594Z","last_seen":"2026-04-04T10:53:57.063282Z","times_seen":454,"resource_available":false,"data":null}},"time_used":290,"timings":{"blocked":36,"dns":61,"connect":10,"send":0,"wait":150,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/pixel/pure","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:35.282Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Oct 2025 22:01:12 GMT","end":"Sat, 24 Jan 2026 22:01:11 GMT"},"fingerprint":{"sha1":"15:FA:E2:08:0A:F1:68:03:29:64:51:B0:FA:3B:8E:DD:DC:B7:CD:01","sha256":"F8:EA:EA:FF:5A:CA:9D:E1:82:F0:8C:3C:7C:6B:FB:06:8F:72:6C:0E:64:EF:7B:3B:2B:21:25:C2:25:7D:0C:BD"}}},"request":{"raw":"OPTIONS /pixel/pure HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://switchroms.io/\r\nOrigin: https://switchroms.io\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: nginx/1.21.6\r\nDate: Wed, 12 Nov 2025 21:19:35 GMT\r\nConnection: keep-alive\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Max-Age: 1728000\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T13:49:31.916752Z","times_seen":13333799,"resource_available":true,"data":null}},"time_used":655,"timings":{"blocked":276,"dns":1,"connect":93,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flushpersist.com/pxf.gif?uuid=e6d9cfb6-1dcb-4637-a18d-7de2b13e2317\u0026eb=bff3d6bf6d16c0bb5e58232c1a99ef63\u0026te=fe015aeda515c30449c87b1701cc307f\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=0e536fb8895c74d7dcf7b58fe63dae08\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=21","fqdn":"flushpersist.com","domain":"flushpersist.com","tld":"com"},"ip":{"addr":"172.240.127.243","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:36.442Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"flushpersist.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 22:02:45 GMT","end":"Tue, 27 Jan 2026 22:02:44 GMT"},"fingerprint":{"sha1":"F7:0F:08:42:86:24:7C:1B:49:6E:E0:01:4D:B6:85:C3:51:09:E9:4B","sha256":"57:4B:E8:D9:F8:CD:FB:C3:56:16:42:88:21:1B:6A:B3:83:F2:4E:B5:2C:AC:2C:6B:0E:46:6B:15:51:D1:3D:17"}}},"request":{"raw":"GET /pxf.gif?uuid=e6d9cfb6-1dcb-4637-a18d-7de2b13e2317\u0026eb=bff3d6bf6d16c0bb5e58232c1a99ef63\u0026te=fe015aeda515c30449c87b1701cc307f\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=0e536fb8895c74d7dcf7b58fe63dae08\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=21 HTTP/1.1\r\nHost: flushpersist.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchroms.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 12 Nov 2025 21:19:36 GMT\r\nContent-Type: image/gif\r\nContent-Length: 1\r\nConnection: keep-alive\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\nx-envoy-upstream-service-time: 1\r\nHost: flushpersist.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 24469f7689d58c00f362ff661f0aadd7\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T13:49:31.916752Z","times_seen":13333799,"resource_available":true,"data":null}},"time_used":670,"timings":{"blocked":287,"dns":0,"connect":99,"send":0,"wait":94,"receive":0,"ssl":185},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/notifications/utility/default/robot/3/img/banner.png","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:37.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 20:46:36 GMT","end":"Sun, 25 Jan 2026 21:44:54 GMT"},"fingerprint":{"sha1":"17:8B:5E:32:3A:E5:9A:3D:E5:18:EF:F0:DA:DE:C3:03:E7:2E:E2:17","sha256":"65:D5:7F:0D:8E:51:6B:E8:BB:44:A1:54:79:43:73:C4:82:1D:77:6C:11:F4:C3:70:8E:0E:AC:00:AC:1D:DB:2B"}}},"request":{"raw":"GET /sb/notifications/utility/default/robot/3/img/banner.png HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 12 Nov 2025 21:19:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 31747\r\nserver: cloudflare\r\nlast-modified: Mon, 30 Jun 2025 11:15:06 GMT\r\npriority: u=4,i=?0\r\netag: \"686271ba-7c03\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\naccept-ranges: bytes\r\nage: 1131262\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=orWPHzvDPcf22%2BRcw0e0lu9Po6UuJ1WWdBEyykhXE6iwYCgUKKFq5wQyuvl6SpVqXTlDPDAE8CxGOo3nMB6gAHI3HjWLAPEYBpVKBVRI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 99d91191898c56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31747,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 400, 8-bit/color RGBA, non-interlaced","md5":"8b80e5aaebd2987d46dd0382da97fdc1","sha1":"bccdfd974f19600eac67f10c43a8d3cd92188aff","sha256":"41f23c36cc8dedef9d191f90f7f85c4aebba6012af7794fdfdf30331df5afe05","sha512":"dbc5a79c4e6b8cc0c1a2a20e857a399e84ff155ce6f68a6de65af23c20d57d7075bf93ba40748fa39942ce84001da19cf5dbd22ab2ab5b4bc3df63d220741e88","ssdeep":"768:oUUUUU2mxm90tQeKC4/cDQ+dexqKogEmXoYIQSR/Fiwecp8wwwwwwwwU:oUUUUU2J+s/cDx73jlp/E7+h","tlshash":"b2e2ae13c4d932371c5a9ded9b6b2b847aa225e320401f7bcf1e1078248b4b5fd27d9a","first_seen":"2025-07-04T18:28:09.276271Z","last_seen":"2026-04-04T08:33:18.487632Z","times_seen":3128,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/1e/e3/36/1ee3363d3f6736b5616821dca2afa5c7.js","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:34.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Oct 2025 22:01:12 GMT","end":"Sat, 24 Jan 2026 22:01:11 GMT"},"fingerprint":{"sha1":"15:FA:E2:08:0A:F1:68:03:29:64:51:B0:FA:3B:8E:DD:DC:B7:CD:01","sha256":"F8:EA:EA:FF:5A:CA:9D:E1:82:F0:8C:3C:7C:6B:FB:06:8F:72:6C:0E:64:EF:7B:3B:2B:21:25:C2:25:7D:0C:BD"}}},"request":{"raw":"GET /1e/e3/36/1ee3363d3f6736b5616821dca2afa5c7.js HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchroms.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 12 Nov 2025 21:19:34 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 3422\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 1\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: fddbdca3099396c26b31ec5fcd1a8427\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":6461,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6461), with no line terminators","md5":"26ce7791f08fb671816e8ac15c21abcc","sha1":"cd121446322214f9ee849fadd1686452f9acf3a9","sha256":"e039e804b7483aec11801d7a306db1603f9c6d5f562340f9a5dbeda753c0224d","sha512":"01af678dd36e5bcfaf95c43fee3d7ac605299c1aca9187b5b330dffac03c16910e373e8ccb57e00c66810daff06b475d561370c05abe8a3beb00f5f9f950c409","ssdeep":"96:PKheeIZELV3rtYwDxXvH9VLgjY6oB/rCKTQ3l35AcOrzYdOtkiz9u5Z4tTpfn7:Pbj6VbjxXvw8zTCKTvlSQpfn7","tlshash":"b9d185883e81f0d513a3b5779a3f6549b3ad6814549fd804e107a0d03e2ce2ae97b6a5","first_seen":"2025-10-22T08:34:06.793976Z","last_seen":"2025-12-01T10:40:04.095127Z","times_seen":3160,"resource_available":true,"data":null}},"time_used":136,"timings":{"blocked":40,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/webworker.js?hl=en\u0026v=naPR4A6FAh-yZLuCX253WaZq","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.38.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lf5HEcrAAAAAC9S0Htng-O8awd5XURMd7HB57jb\u0026co=aHR0cHM6Ly9zd2l0Y2hyb21zLmlvOjQ0Mw..\u0026hl=en\u0026v=naPR4A6FAh-yZLuCX253WaZq\u0026theme=light\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=2w0fub742pck","date":"2025-11-12T21:19:35.874Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:37:33 GMT","end":"Mon, 05 Jan 2026 08:37:32 GMT"},"fingerprint":{"sha1":"17:9D:6B:F6:A8:18:29:EC:16:2C:3C:3D:F2:EA:93:19:C7:92:EE:AA","sha256":"AA:D4:E9:5C:D4:70:A7:86:45:DE:62:83:82:60:F9:B9:46:CF:40:73:19:FA:3B:01:A9:7E:9B:32:24:EE:57:EC"}}},"request":{"raw":"GET /recaptcha/api2/webworker.js?hl=en\u0026v=naPR4A6FAh-yZLuCX253WaZq HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lf5HEcrAAAAAC9S0Htng-O8awd5XURMd7HB57jb\u0026co=aHR0cHM6Ly9zd2l0Y2hyb21zLmlvOjQ0Mw..\u0026hl=en\u0026v=naPR4A6FAh-yZLuCX253WaZq\u0026theme=light\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=2w0fub742pck\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\nexpires: Wed, 12 Nov 2025 21:19:35 GMT\r\ndate: Wed, 12 Nov 2025 21:19:35 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: same-site\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":102,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"d79bf9f5b0236bcbbcf1fa8db40e7f88","sha1":"8184e828c89bbbaf8402d3886f049d065eb59e7a","sha256":"161bbaf1f114c8130a1e7148f420070e02b2445d97cc7fcbf3d5237057aabe6b","sha512":"de8a6466d3161e44c2244fc99be682c8aee4865cff6e7a58aec7d3192dcb2ea224fdd13f2dde01f99ce7950357cd85fa290651038e64860b03c7023870e43aa2","ssdeep":"","tlshash":"82b0122325d0c81c1c004743d5b7d3f8e4018125d6a0c0f182641ff843100634d04400","first_seen":"2025-11-04T19:51:16.53666Z","last_seen":"2025-12-20T15:18:51.671246Z","times_seen":14530,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adsco.re/p","fqdn":"adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"162.252.214.5","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:36.097Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_RSA_WITH_AES_256_CBC_SHA","key_group_name":"none","signature_name":"none","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 15 Sep 2025 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EC:13:B4:EC:A8:B2:CD:2E:12:E1:84:0E:E5:64:5D:88:D5:CA:3A:59","sha256":"C9:35:54:5E:EF:18:4E:21:62:7D:1D:23:55:D2:B9:CC:68:48:01:7B:AC:A5:8B:D9:3D:71:85:DC:07:17:02:2F"}}},"request":{"raw":"POST /p HTTP/1.1\r\nHost: adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 6338\r\nOrigin: https://switchroms.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchroms.io/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 12 Nov 2025 21:19:36 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAS-P-1: OK lon123\r\nAS-P-2: OK\r\nAS-P-3: OK\r\nAccess-Control-Max-Age: 2592000\r\nCache-Control: no-transform\r\nAccept-CH: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR\r\nAccess-Control-Allow-Origin: https://switchroms.io\r\nAccess-Control-Allow-Credentials: true\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1191,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with very long lines (1191), with no line terminators","md5":"e2e7badc0272e4e217f346e7d4b670ef","sha1":"59efd915dc6079a8496be9c8ff736fe98b597a24","sha256":"be30e3dd9ffbcee270318f523a0a9322c1a71689cce230817986964da7c6ca53","sha512":"be86fb955bf137bb765e3801151e94eed33de4f3be6acfecff0e9c2e92a1bbca084d0a53820696bd81d4c3974da0cb2d41253914135e1fecf6706e25c99c08f0","ssdeep":"","tlshash":"0221ba6842191b673700c37ade4f3d2664a2225c7285a4a0cb4a37a14dd85dc24533d9","first_seen":"2025-11-12T21:20:09.070851Z","last_seen":"2025-11-12T21:20:09.070851Z","times_seen":1,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":88,"dns":1,"connect":29,"send":0,"wait":78,"receive":0,"ssl":58},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/notifications/utility/default/robot/3/js/jquery.min.js","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:37.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 20:46:36 GMT","end":"Sun, 25 Jan 2026 21:44:54 GMT"},"fingerprint":{"sha1":"17:8B:5E:32:3A:E5:9A:3D:E5:18:EF:F0:DA:DE:C3:03:E7:2E:E2:17","sha256":"65:D5:7F:0D:8E:51:6B:E8:BB:44:A1:54:79:43:73:C4:82:1D:77:6C:11:F4:C3:70:8E:0E:AC:00:AC:1D:DB:2B"}}},"request":{"raw":"GET /sb/notifications/utility/default/robot/3/js/jquery.min.js HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 12 Nov 2025 21:19:37 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 30 Jun 2025 11:15:08 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nage: 1866618\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mE1TfRHw7pX5H5fxoNg4VJ4ScFvwmlLHvZxl6vR2ouoZZ%2BQ6Cu5ci09R%2B1fW7XZyE8gfee61n4%2FyNC5BfZQ2rRl%2FcIf9Pc%2BUgyv2hGdz\"}]}\r\netag: W/\"686271bc-149a0\"\r\ncontent-encoding: br\r\ncf-ray: 99d91191b9b956cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84384,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32025), with CRLF line terminators","md5":"6326c600df01e3bfb9b40e1aa08176f8","sha1":"6b4fb754d29b297b539bf62ba9b4eaf0f33f314a","sha256":"df34524351c5fabc921a89183b5da5667aebd7b9e9a1c52255c76ff722935ea3","sha512":"641aaeecb9b89bcc319cabfef18f76faa9b1ba79f9de30c6d07f22d385fc78ac3f11a718fe9ec96f8a13d82e3dff4ca34944ccb449a4ef8e378ad65dfad581c0","ssdeep":"1536:oP10iSi65U/dXXeyhzeBuG+HYE0mdDuJO1z6Oy4sh3J1x72BjmN7TwpDKba98Hri:f+41hJiz6fhdlTqya98Hri","tlshash":"eb83d6d9b2c67062977734b851bf510bb17a98dab40c8c60f0a4d8e47eb4a8d517bf2c","first_seen":"2023-03-07T01:10:11Z","last_seen":"2026-04-04T13:36:49.343204Z","times_seen":10382,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/wp-content/plugins/akismet/_inc/akismet-frontend.js?ver=1756634016","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"104.21.8.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:33.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switchroms.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 05:25:51 GMT","end":"Tue, 03 Feb 2026 06:24:36 GMT"},"fingerprint":{"sha1":"11:CC:5E:77:C5:8A:9E:7C:E3:7B:3C:A9:00:ED:93:7A:8E:43:32:D3","sha256":"81:8A:05:E3:87:30:CE:C5:DD:1A:59:5E:40:36:ED:1C:56:08:F6:B6:6F:7A:26:73:58:A3:DC:2B:40:E1:11:B9"}}},"request":{"raw":"GET /wp-content/plugins/akismet/_inc/akismet-frontend.js?ver=1756634016 HTTP/1.1\r\nHost: switchroms.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 12 Nov 2025 21:19:33 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Sun, 31 Aug 2025 09:53:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b41ba0-2c7c\"\r\nserver: cloudflare\r\nx-content-type-options: \"nosniff\" always\r\nx-xss-protection: \"1; mode=block\" always\r\nstrict-transport-security: \"max-age=31536000; includeSubDomains; preload\" always\r\nreferrer-policy: no-referrer-when-downgrade\r\nexpires: Tue, 03 Nov 2026 19:49:55 GMT\r\ncache-control: public, max-age=31536000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\ncontent-encoding: gzip\r\nage: 782977\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CK59MV4%2F9S4p9ysdi%2BMQNC01pntjmI%2BMfo3FEscGOTucNITWVkoazuZR7E7PjlTJHNGjp14FEfU7kHkwwTWVBbM4D1SW7xdod7Gw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 99d9117a5c24b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11388,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"91954b488a9bfcade528d6ff5c7ce83f","sha1":"edf589eb28247c73ccc04e5b34ad107b90bd1b2e","sha256":"6bc5622bfab1a16855ad49b99a3f9ed8eb24f49da469a113f9000b866f109e2e","sha512":"d4772d5a06b400a7ec7250c85b5e5630f309b0876936de85bf3d24030fb2df55bb63ea5e4905325f41561996ebfc03bec95ae2dc48320273c894ffdca9943899","ssdeep":"192:YFRYlRfiAjGof8eGJsqSggUdgPzvi7Vp5d7Zq6:SRYlRfVjJEsKgUaPzvup5dF","tlshash":"693242a75b6c263f50b2730e695ca3c9763e9471d8005836bd7e996838c4d384336eed","first_seen":"2024-01-21T19:52:24Z","last_seen":"2026-04-04T13:47:07.614917Z","times_seen":11890,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/1b/50/e5/1b50e57a5911fd0a5b46962ab48ca22b.js","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:33.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Oct 2025 22:01:12 GMT","end":"Sat, 24 Jan 2026 22:01:11 GMT"},"fingerprint":{"sha1":"15:FA:E2:08:0A:F1:68:03:29:64:51:B0:FA:3B:8E:DD:DC:B7:CD:01","sha256":"F8:EA:EA:FF:5A:CA:9D:E1:82:F0:8C:3C:7C:6B:FB:06:8F:72:6C:0E:64:EF:7B:3B:2B:21:25:C2:25:7D:0C:BD"}}},"request":{"raw":"GET /1b/50/e5/1b50e57a5911fd0a5b46962ab48ca22b.js HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchroms.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 12 Nov 2025 21:19:34 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 3422\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 1\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 5a4f517a2bb9ee3d339dafd5817fbfbe\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6461,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6461), with no line terminators","md5":"26ce7791f08fb671816e8ac15c21abcc","sha1":"cd121446322214f9ee849fadd1686452f9acf3a9","sha256":"e039e804b7483aec11801d7a306db1603f9c6d5f562340f9a5dbeda753c0224d","sha512":"01af678dd36e5bcfaf95c43fee3d7ac605299c1aca9187b5b330dffac03c16910e373e8ccb57e00c66810daff06b475d561370c05abe8a3beb00f5f9f950c409","ssdeep":"96:PKheeIZELV3rtYwDxXvH9VLgjY6oB/rCKTQ3l35AcOrzYdOtkiz9u5Z4tTpfn7:Pbj6VbjxXvw8zTCKTvlSQpfn7","tlshash":"b9d185883e81f0d513a3b5779a3f6549b3ad6814549fd804e107a0d03e2ce2ae97b6a5","first_seen":"2025-10-22T08:34:06.793976Z","last_seen":"2025-12-01T10:40:04.095127Z","times_seen":3160,"resource_available":true,"data":null}},"time_used":700,"timings":{"blocked":296,"dns":2,"connect":93,"send":0,"wait":105,"receive":1,"ssl":201},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/wp-includes/js/wp-emoji-release.min.js?ver=6.8.3","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"104.21.8.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:34.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switchroms.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 05:25:51 GMT","end":"Tue, 03 Feb 2026 06:24:36 GMT"},"fingerprint":{"sha1":"11:CC:5E:77:C5:8A:9E:7C:E3:7B:3C:A9:00:ED:93:7A:8E:43:32:D3","sha256":"81:8A:05:E3:87:30:CE:C5:DD:1A:59:5E:40:36:ED:1C:56:08:F6:B6:6F:7A:26:73:58:A3:DC:2B:40:E1:11:B9"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=6.8.3 HTTP/1.1\r\nHost: switchroms.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 12 Nov 2025 21:19:34 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 15 Jul 2025 21:03:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6876c224-4b33\"\r\nserver: cloudflare\r\nx-content-type-options: \"nosniff\" always\r\nx-xss-protection: \"1; mode=block\" always\r\nstrict-transport-security: \"max-age=31536000; includeSubDomains; preload\" always\r\nreferrer-policy: no-referrer-when-downgrade\r\nexpires: Wed, 11 Nov 2026 13:50:54 GMT\r\ncache-control: public, max-age=31536000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\ncontent-encoding: gzip\r\nage: 113319\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i7mdY0P5du3IT4zYBAqHEnSrTXIsKckcrb17jp4PNIWXKmKZ7btJCobbEkOZ8ZuyhqBXM%2BkWqt5W8XxsCLNKQS2JRBSCjO7fOmt%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 99d9117eeca8b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19251,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (16277)","md5":"c4b50535f3e989a77d537d5486342d47","sha1":"2a1cc988298c022def9376bd54f608f44154071a","sha256":"db8ee8be2b2456c191fc0739f34f6ac675af8ba4782380cf233024498e0eb968","sha512":"be3b974332c4dadc30025aa911fde008442c9f4966ade014a7b8f05926688e30b9fdc32ebdbdd53fe32fc3f4d9c6ac2310b98dc6602843f2d8f00b1ded4e9b83","ssdeep":"384:WAevzW+ZTbXUH3o//bEPhXgA5H1efAJmpr:WF6UXUH3o//YpXgAGfACr","tlshash":"d782fa9bb33a4e8f343e3bd7cd968f4dc9da555321c0e078dbeeb68169a00568274c90","first_seen":"2025-05-09T23:23:48.206606Z","last_seen":"2026-04-04T13:47:46.943916Z","times_seen":195806,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/watch.677621371061.js?key=5e7f0ff89b6ddd7a4976e11a2feacc81\u0026kw=%5B%22the%22%2C%22legend%22%2C%22of%22%2C%22zelda%22%2C%22echoes%22%2C%22wisdom%22%2C%22nsp%22%2C%22xci%22%2C%22switch%22%2C%22rom%22%2C%22v1%22%2C%220%22%2C%222%22%2C%22free%22%2C%22download%22%5D\u0026refer=https%3A%2F%2Fswitchroms.io%2Fthe-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b%2F%3Fdownload%3D8\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=e6d9cfb6-1dcb-4637-a18d-7de2b13e2317%3A2%3A1","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:36.015Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Oct 2025 22:01:12 GMT","end":"Sat, 24 Jan 2026 22:01:11 GMT"},"fingerprint":{"sha1":"15:FA:E2:08:0A:F1:68:03:29:64:51:B0:FA:3B:8E:DD:DC:B7:CD:01","sha256":"F8:EA:EA:FF:5A:CA:9D:E1:82:F0:8C:3C:7C:6B:FB:06:8F:72:6C:0E:64:EF:7B:3B:2B:21:25:C2:25:7D:0C:BD"}}},"request":{"raw":"GET /watch.677621371061.js?key=5e7f0ff89b6ddd7a4976e11a2feacc81\u0026kw=%5B%22the%22%2C%22legend%22%2C%22of%22%2C%22zelda%22%2C%22echoes%22%2C%22wisdom%22%2C%22nsp%22%2C%22xci%22%2C%22switch%22%2C%22rom%22%2C%22v1%22%2C%220%22%2C%222%22%2C%22free%22%2C%22download%22%5D\u0026refer=https%3A%2F%2Fswitchroms.io%2Fthe-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b%2F%3Fdownload%3D8\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=e6d9cfb6-1dcb-4637-a18d-7de2b13e2317%3A2%3A1 HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://switchroms.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchroms.io/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 307 Temporary Redirect\r\nServer: nginx/1.21.6\r\nDate: Wed, 12 Nov 2025 21:19:36 GMT\r\nContent-Type: text/html\r\nContent-Length: 0\r\nConnection: keep-alive\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\naccess-control-allow-origin: https://switchroms.io\r\naccess-control-allow-credentials: true\r\nlocation: https://kettledroopingcontinuation.com/watch.677621371061.js?dev=e\u0026key=5e7f0ff89b6ddd7a4976e11a2feacc81\u0026kw=%5B%22the%22%2C%22legend%22%2C%22of%22%2C%22zelda%22%2C%22echoes%22%2C%22wisdom%22%2C%22nsp%22%2C%22xci%22%2C%22switch%22%2C%22rom%22%2C%22v1%22%2C%220%22%2C%222%22%2C%22free%22%2C%22download%22%5D\u0026pst=1762982436\u0026rb=\u0026refer=https%3A%2F%2Fswitchroms.io%2Fthe-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b%2F%3Fdownload%3D8\u0026res=14.3095\u0026rmtc=t\u0026shu=5ef9af25d1d25fde1853a4b70f4d277cf538e848af60c30b45c36d36dce67941183dc19895bfcdebb2659ab02458341950a7240a1404e2bc913d8b3b69e4d1eef957aac5f5bc70a578d4ec46d8682be2ae3165e5cbf266886fe27d\u0026tz=0\u0026uuid=e6d9cfb6-1dcb-4637-a18d-7de2b13e2317%3A2%3A1\r\nset-cookie: ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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_ZG93bmxvYWQ9OCIsImFyIjpbXX19.oHGrbec2D3uoBV9hgp3roauagjWhSj4MWmxfPRAFU28; expires=Wed, 12 Nov 2025 21:20:36 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 8\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: dbafa51d023e0795d3fef3b56306d291\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":4638,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T13:49:31.916752Z","times_seen":13333799,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4.adsco.re/","fqdn":"4.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:36.055Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: 4.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://switchroms.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchroms.io/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T13:49:31.916752Z","times_seen":13333799,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"handymanthemepumpkin.com/ren.gif?sid=H4sIAAAAAAAC_1RSQWskRRSuzgYPuwdxjXoSGkRcQSbdMz2TGfcQjGti2DUbs5GAnqq7qifl9HS1VdXdk_ESDMgex4OgnjrfJBuN66I_QAgTLxIQnIvksAER_AOC6E06GYj7oN77Xn11-N736tPd9IzUkNLT1XdkX0QRna1XHPvGhoiZzLW9sm67TsW5aW-IuOHdtHtlUtnrbs2rOK_aSzzoyNmq4zqO67j2olA8lL3ZcxYiedhyKy2n4lUrbt1DTz3Z69SCphZYdkauQ7Dx03-EH0AEI8Td729x3TEyee2tbhpRIxUydvBe3IllHqN7CUNlIYwPJq8h9ZiQL6Yg44PJBJDZXjkBfDEmU88_hh8fTGTCz_YvlPoReAyfXUOejcCjEQQdIZA7EOxXAgQMK3cRdx-sSJXTrQuWluyYTP_9F0Q-JtOPZxB3Hy1Eomffk1FqhIw1emEB0RtBtEdI0mOYvgWRHyMwn0CwX4jzwjXE3cO3ZSY6dsZVB4IV5x6IcASqLaTlERbS0EKaWOiyU9tzml7g0lojbLFgzvGo5zHuO61m1XFoK5hDGpTiBjDJAEE0QKC2kahtdMQAKj2C3iygmQVtxsR6dxsZK5BzglwT5JQgFwS5IcizYp9FuqqLByzSqe9OanVSa8VQmvYu3ZemzWMCqgZQrNgTyUd6B4G5MuyHmg1lmahviiH1WbGbnJFnSu-sz196BR1-avO5gPvNkFLK3KbHgzCkNKRzvFp3febXG9CigNBT54b0xZjcvvEyEjEmT70Yw6fH0NExAvEcaOqC5gXoZoF-_J3OhQk2lezqipBgskBipmG2rN3ojDw7XFtfODrf4ftfz4MHJ_Om__vSo5mPEagCiSrwofiJoB3dH67JnOytyVyTH-4mRnRFn5b7vWeo4VcOb_OtXCq2fEsPvnkjKIkSPlzn2tyhMRNxW5NvFwRjXC1KFXDy47Le4P5qqjcXUhWnyZ3VNxeXu4niWgsZj0DFmFw9OkQgxuT6bzvnf7e29A-CZBs6OSGTgJYEfmIhEgQRv7ynfgH9v96_xLv6PtrKAjU7iLsFMlUgiwrQaACdXh2aRJ3M__xlGV_Bj6yhHylrz49U9NmFT1qc2vWqX2s0mw0eNlhYY7VqjbXqDm95tNXwWl4dRo_FzL9__hcAAP__I-3Tr14EAAA=","fqdn":"handymanthemepumpkin.com","domain":"handymanthemepumpkin.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:36.019Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"handymanthemepumpkin.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Oct 2025 08:39:08 GMT","end":"Wed, 21 Jan 2026 08:39:07 GMT"},"fingerprint":{"sha1":"44:AF:00:AE:96:49:F1:00:9E:DB:4F:F1:C4:5F:92:B3:79:42:50:38","sha256":"BD:31:0D:1C:08:ED:4E:FE:4E:8C:89:EC:67:45:12:DC:0A:91:09:49:F5:66:4C:B8:B2:56:22:5F:59:F6:C8:F2"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_1RSQWskRRSuzgYPuwdxjXoSGkRcQSbdMz2TGfcQjGti2DUbs5GAnqq7qifl9HS1VdXdk_ESDMgex4OgnjrfJBuN66I_QAgTLxIQnIvksAER_AOC6E06GYj7oN77Xn11-N736tPd9IzUkNLT1XdkX0QRna1XHPvGhoiZzLW9sm67TsW5aW-IuOHdtHtlUtnrbs2rOK_aSzzoyNmq4zqO67j2olA8lL3ZcxYiedhyKy2n4lUrbt1DTz3Z69SCphZYdkauQ7Dx03-EH0AEI8Td729x3TEyee2tbhpRIxUydvBe3IllHqN7CUNlIYwPJq8h9ZiQL6Yg44PJBJDZXjkBfDEmU88_hh8fTGTCz_YvlPoReAyfXUOejcCjEQQdIZA7EOxXAgQMK3cRdx-sSJXTrQuWluyYTP_9F0Q-JtOPZxB3Hy1Eomffk1FqhIw1emEB0RtBtEdI0mOYvgWRHyMwn0CwX4jzwjXE3cO3ZSY6dsZVB4IV5x6IcASqLaTlERbS0EKaWOiyU9tzml7g0lojbLFgzvGo5zHuO61m1XFoK5hDGpTiBjDJAEE0QKC2kahtdMQAKj2C3iygmQVtxsR6dxsZK5BzglwT5JQgFwS5IcizYp9FuqqLByzSqe9OanVSa8VQmvYu3ZemzWMCqgZQrNgTyUd6B4G5MuyHmg1lmahviiH1WbGbnJFnSu-sz196BR1-avO5gPvNkFLK3KbHgzCkNKRzvFp3febXG9CigNBT54b0xZjcvvEyEjEmT70Yw6fH0NExAvEcaOqC5gXoZoF-_J3OhQk2lezqipBgskBipmG2rN3ojDw7XFtfODrf4ftfz4MHJ_Om__vSo5mPEagCiSrwofiJoB3dH67JnOytyVyTH-4mRnRFn5b7vWeo4VcOb_OtXCq2fEsPvnkjKIkSPlzn2tyhMRNxW5NvFwRjXC1KFXDy47Le4P5qqjcXUhWnyZ3VNxeXu4niWgsZj0DFmFw9OkQgxuT6bzvnf7e29A-CZBs6OSGTgJYEfmIhEgQRv7ynfgH9v96_xLv6PtrKAjU7iLsFMlUgiwrQaACdXh2aRJ3M__xlGV_Bj6yhHylrz49U9NmFT1qc2vWqX2s0mw0eNlhYY7VqjbXqDm95tNXwWl4dRo_FzL9__hcAAP__I-3Tr14EAAA= HTTP/1.1\r\nHost: handymanthemepumpkin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchroms.io/\r\nCookie: pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; u_pl26551079=1; nlece7ceb8faaad184ecffaafa7e251bdb56=[5941311]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 12 Nov 2025 21:19:36 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 1\r\nHost: handymanthemepumpkin.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 23f16f47d1699e92fd512b09503be8da\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T13:49:31.916752Z","times_seen":13333799,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"handymanthemepumpkin.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"handymanthemepumpkin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"handymanthemepumpkin.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/sbar.json?key=0e536fb8895c74d7dcf7b58fe63dae08\u0026uuid=e6d9cfb6-1dcb-4637-a18d-7de2b13e2317%3A2%3A1","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:36.087Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Oct 2025 22:01:12 GMT","end":"Sat, 24 Jan 2026 22:01:11 GMT"},"fingerprint":{"sha1":"15:FA:E2:08:0A:F1:68:03:29:64:51:B0:FA:3B:8E:DD:DC:B7:CD:01","sha256":"F8:EA:EA:FF:5A:CA:9D:E1:82:F0:8C:3C:7C:6B:FB:06:8F:72:6C:0E:64:EF:7B:3B:2B:21:25:C2:25:7D:0C:BD"}}},"request":{"raw":"GET /sbar.json?key=0e536fb8895c74d7dcf7b58fe63dae08\u0026uuid=e6d9cfb6-1dcb-4637-a18d-7de2b13e2317%3A2%3A1 HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://switchroms.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchroms.io/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 12 Nov 2025 21:19:36 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 3491\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\naccess-control-allow-origin: https://switchroms.io\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\nset-cookie: uid_id2=e6d9cfb6-1dcb-4637-a18d-7de2b13e2317:2:1; expires=Wed, 19 Nov 2025 21:19:36 GMT; path=/; secure; SameSite=None\npdhtkv=true; expires=Thu, 13 Nov 2025 21:19:36 GMT; path=/; secure; SameSite=None\nuncs=1; expires=Thu, 13 Nov 2025 21:19:36 GMT; path=/; secure; SameSite=None\npdhtkv29=true; expires=Thu, 13 Nov 2025 21:19:36 GMT; path=/; secure; SameSite=None\nuncs29=1; expires=Thu, 13 Nov 2025 21:19:36 GMT; path=/; secure; SameSite=None\nu_pl26551100=1; expires=Thu, 13 Nov 2025 21:19:36 GMT; path=/; secure; SameSite=None\nslec0e536fb8895c74d7dcf7b58fe63dae08=[6233297]; expires=Wed, 12 Nov 2025 21:19:41 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 215\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: ebefaeea3ee1fad4d3f682f73b9290fe\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":5909,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"JSON text data","md5":"30c8f25e71d46d4be75d703e4aebafe2","sha1":"a049c9fd3fa4367ff5f3581f40ae129736e84dac","sha256":"580909dd8324460179c84754ec4507f9d0ef7255149402e5a344c40e2c201f0d","sha512":"fe2b15f8500b1ea6b9cd97184948a3e42e2ef3fd6fe61836b04b9270a892f754271578580166786742c16431bddab62a10d3243061744c4eaef07f7ae59dfc53","ssdeep":"96:9zT0uEwwRri3Y6jFfKw21YJBZmGBAKq4GAYwNvYySHz/AijOE4gwuuEwwRri3Y6z:9zAw3YO121gmGBPqqYwQYPZ6w3YO121s","tlshash":"05c15d79e76d427656c68e18928274cc4af19f830479fc14cb5fd3ab66270c6890014b","first_seen":"2025-11-12T21:20:09.075397Z","last_seen":"2025-11-12T21:20:09.075397Z","times_seen":1,"resource_available":false,"data":null}},"time_used":311,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":310,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Frobot%2F3%2Fjs%2Fscript.js\u0026l=10920\u0026fd=38","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:37.438Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Oct 2025 22:01:12 GMT","end":"Sat, 24 Jan 2026 22:01:11 GMT"},"fingerprint":{"sha1":"15:FA:E2:08:0A:F1:68:03:29:64:51:B0:FA:3B:8E:DD:DC:B7:CD:01","sha256":"F8:EA:EA:FF:5A:CA:9D:E1:82:F0:8C:3C:7C:6B:FB:06:8F:72:6C:0E:64:EF:7B:3B:2B:21:25:C2:25:7D:0C:BD"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Frobot%2F3%2Fjs%2Fscript.js\u0026l=10920\u0026fd=38 HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchroms.io/\r\nCookie: ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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_ZG93bmxvYWQ9OCIsImFyIjpbXX19.oHGrbec2D3uoBV9hgp3roauagjWhSj4MWmxfPRAFU28; uid_id2=e6d9cfb6-1dcb-4637-a18d-7de2b13e2317:2:1; pdhtkv=true; uncs=1; pdhtkv5=true; uncs5=1; u_pl27929006=1; pdhtkv29=true; uncs29=1; u_pl26551100=1; slec0e536fb8895c74d7dcf7b58fe63dae08=[6233297]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 12 Nov 2025 21:19:37 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T13:49:31.916752Z","times_seen":13333799,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-YR6V7LMBP0","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:33.316Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:37:33 GMT","end":"Mon, 05 Jan 2026 08:37:32 GMT"},"fingerprint":{"sha1":"6D:B1:20:6C:4E:45:23:88:91:95:5C:C3:FE:0D:A8:1B:29:43:20:6A","sha256":"15:E2:87:29:F5:07:FE:12:A2:58:8F:EE:D0:AD:2A:AC:63:5D:69:08:82:23:F9:BD:90:70:9F:09:AA:7B:57:8B"}}},"request":{"raw":"GET /gtag/js?id=G-YR6V7LMBP0 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchroms.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 12 Nov 2025 21:19:33 GMT\r\nexpires: Wed, 12 Nov 2025 21:19:33 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 143445\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":432323,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"aa3ac701542f26bfbed8ba3bc87bc09f","sha1":"65691b2ba02f3b7f425a0455371a0aa9f5ca2fda","sha256":"619e13c8b07a7b4d232ca1d3f66648296b302c776451f6bab66ff7f69f965f56","sha512":"a3f4a9f8e9fbdececcea47458ce2eb6a9129dd53326b07d775f4f4f3845252d8ff7fc92effa87c880e9925cab7adbcaddd46c1823abcc37506ebec00f4e65716","ssdeep":"6144:tJio7CyGOsjtxj31PC2sUOJdR+rVmIQZOBZDTQ3kLQz:j97ZGOytV1PjsmQZOH8","tlshash":"019419ce73d674265396f478502f018ba57b28a2b44cc896f1c9cde02e74a9a4277f7c","first_seen":"2025-11-12T21:20:09.076319Z","last_seen":"2025-11-12T21:20:09.076319Z","times_seen":1,"resource_available":true,"data":null}},"time_used":428,"timings":{"blocked":159,"dns":0,"connect":21,"send":0,"wait":44,"receive":61,"ssl":140},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/wp-includes/js/comment-reply.min.js?ver=6.8.3","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"104.21.8.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:33.505Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switchroms.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 05:25:51 GMT","end":"Tue, 03 Feb 2026 06:24:36 GMT"},"fingerprint":{"sha1":"11:CC:5E:77:C5:8A:9E:7C:E3:7B:3C:A9:00:ED:93:7A:8E:43:32:D3","sha256":"81:8A:05:E3:87:30:CE:C5:DD:1A:59:5E:40:36:ED:1C:56:08:F6:B6:6F:7A:26:73:58:A3:DC:2B:40:E1:11:B9"}}},"request":{"raw":"GET /wp-includes/js/comment-reply.min.js?ver=6.8.3 HTTP/1.1\r\nHost: switchroms.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 12 Nov 2025 21:19:33 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 13 Nov 2024 09:03:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67346b68-bd2\"\r\nserver: cloudflare\r\nx-content-type-options: \"nosniff\" always\r\nx-xss-protection: \"1; mode=block\" always\r\nstrict-transport-security: \"max-age=31536000; includeSubDomains; preload\" always\r\nreferrer-policy: no-referrer-when-downgrade\r\nexpires: Wed, 11 Nov 2026 13:50:53 GMT\r\ncache-control: public, max-age=31536000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\ncontent-encoding: gzip\r\nage: 113320\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pYZSmE3EzofC9CR3lwxubP7caIhrx6JGImKGAzh%2BxXCof6YZzKOclXm1ivi6sSWLO0XUMhuo%2Fz1f1Tr0vwQRnmsJyaUc3%2FK5Y67B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 99d9117a5c23b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3026,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (2991)","md5":"e4a49df71f8b98c1d9f9d8fce74d89e8","sha1":"b95fcda0c8c26305ad94e80343d0cfca8a048a10","sha256":"9d4687a19cab8f7442a3bda40c45be4d10e42488e091ddd706c3caed83c3ee1f","sha512":"42cd5f854779886f24c43ed14617380110c946d1b430b454060c3b391de6fbae6d0ed8ab7cdd7cfdc9726b2d6142a4e01c4448e36088dfcee7fdd00b60909f89","ssdeep":"","tlshash":"5051a7d437c95d762a83b3395efe930271712709a50805608826c86931bcfea63b67fe","first_seen":"2024-11-13T06:33:24.856382Z","last_seen":"2026-04-04T13:49:26.309387Z","times_seen":56989,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:33.507Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Oct 2025 06:18:58 GMT","end":"Tue, 20 Jan 2026 07:18:54 GMT"},"fingerprint":{"sha1":"C7:F8:82:22:3E:BC:9D:F4:7B:0A:EF:A0:EE:C2:C2:D1:34:7E:55:1D","sha256":"EA:85:37:F0:6A:CB:4D:61:4B:3D:2C:58:4B:FF:E5:CE:3C:33:94:71:D8:11:77:5A:C1:99:2F:94:1F:D2:FD:F1"}}},"request":{"raw":"GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://switchroms.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchroms.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 12 Nov 2025 21:19:33 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2024.6.1\"\r\nlast-modified: Thu, 06 Jun 2024 15:52:56 GMT\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 99d9117a8edbb503-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19948,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (19948), with no line terminators","md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-04-04T13:49:37.592963Z","times_seen":330185,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":17,"dns":0,"connect":1,"send":0,"wait":16,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"professionaltrafficmonitor.com/stats","fqdn":"professionaltrafficmonitor.com","domain":"professionaltrafficmonitor.com","tld":"com"},"ip":{"addr":"52.59.96.77","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:33.872Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"protrafficinspector.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 01 Jul 2025 00:00:00 GMT","end":"Thu, 30 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:D5:8D:EB:A4:50:13:0D:7C:33:71:82:B8:02:49:4F:D6:31:B6:E6","sha256":"49:03:4C:2C:1B:23:D8:D6:CB:AE:F0:54:61:99:C2:20:F4:FF:87:5E:0B:72:B1:6B:D8:AB:21:49:2D:F2:EC:4A"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: professionaltrafficmonitor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://switchroms.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchroms.io/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 12 Nov 2025 21:19:33 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\nserver: fasthttp\r\naccess-control-allow-origin: https://switchroms.io\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nset-cookie: uid_id2=40b5806a-2cdd-4940-9a93-46cb88a5a6b8:1:1; expires=Sat, 10 Nov 2035 21:19:33 GMT; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"d16a1924d201bc8b9a369f9b87942a3c","sha1":"954ffc5974b9d392ad2fb412dd86f01ff8338e2d","sha256":"1fd24026485aeaa38d5de66d6cd0670a7676f7b1b82a44457a80aaf56270e5f8","sha512":"3a67da02fe78eba3a9d71b72683a77adca31f89901073c292470d884e9bec20dd903157ec9faa059e33821fa997f508cf01b1b359a9b301f66c629826a986343","ssdeep":"","tlshash":"589004111530455175cd11037f4504c4d133010300547fc0d077514340731117474505","first_seen":"2025-11-12T21:20:09.078735Z","last_seen":"2025-11-12T21:20:09.078735Z","times_seen":1,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":117,"dns":25,"connect":20,"send":0,"wait":21,"receive":0,"ssl":70},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/cdn-cgi/rum?","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"104.21.8.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:36.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switchroms.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 05:25:51 GMT","end":"Tue, 03 Feb 2026 06:24:36 GMT"},"fingerprint":{"sha1":"11:CC:5E:77:C5:8A:9E:7C:E3:7B:3C:A9:00:ED:93:7A:8E:43:32:D3","sha256":"81:8A:05:E3:87:30:CE:C5:DD:1A:59:5E:40:36:ED:1C:56:08:F6:B6:6F:7A:26:73:58:A3:DC:2B:40:E1:11:B9"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: switchroms.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8\r\ncontent-type: application/json\r\nContent-Length: 471\r\nOrigin: https://switchroms.io\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_YR6V7LMBP0=GS2.1.s1762982374$o1$g0$t1762982374$j60$l0$h0; _ga=GA1.1.422467514.1762982374; pp_main_0cbd60ae91020949f7db0f82252e5c98=1; dom3ic8zudi28v8lr6fgphwffqoz0j6c=e6d9cfb6-1dcb-4637-a18d-7de2b13e2317%3A2%3A1; m5a4xojbcp2nx3gptmm633qal3gzmadn=handymanthemepumpkin.com; sb_main_0e536fb8895c74d7dcf7b58fe63dae08=1; sb_count_0e536fb8895c74d7dcf7b58fe63dae08=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\naccess-control-allow-origin: https://switchroms.io\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-max-age: 86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Gq617RfLHuXnna3pT2MOV3UsSFrpGguuYWGpuZmGxqyc6JIVn22BwZ4uGHXwTmtMl%2BdQlIVsU4oPfr%2B8Fy0XZLEaNuEntOozZvjn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 12 Nov 2025 21:19:36 GMT\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 99d9118afd32b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T13:49:31.916752Z","times_seen":13333799,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/notifications/utility/default/robot/3/css/magic.css","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://switchroms.io/the-legend-of-zelda-echoes-of-wisdom-nsp-xci-switch-rom-1b/?download=8","date":"2025-11-12T21:19:37.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 20:46:36 GMT","end":"Sun, 25 Jan 2026 21:44:54 GMT"},"fingerprint":{"sha1":"17:8B:5E:32:3A:E5:9A:3D:E5:18:EF:F0:DA:DE:C3:03:E7:2E:E2:17","sha256":"65:D5:7F:0D:8E:51:6B:E8:BB:44:A1:54:79:43:73:C4:82:1D:77:6C:11:F4:C3:70:8E:0E:AC:00:AC:1D:DB:2B"}}},"request":{"raw":"GET /sb/notifications/utility/default/robot/3/css/magic.css HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://switchroms.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchroms.io/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 12 Nov 2025 21:19:37 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Mon, 30 Jun 2025 11:15:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"686271bd-affe\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: gzip\r\nage: 113320\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=66cYtrIBOF9B4KpZ0ZrY5nQkrI6sBP6%2FtdnvwJkAz7%2Fmg%2FqsbUAHBWgLcdMigv%2BsFCtWqj8Apw%2BaEQ59PCPFatsL%2BUphRzbSynHleppT\"}]}\r\ncf-ray: 99d91190f90a56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45054,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"bcd1967f8c2604f55f57197de0ae895e","sha1":"c31a10c3ecde74b50450a0a1ad21aa474ff05e7d","sha256":"787eac5d9417257a04de7b18ef21f5ec887de3aee642ceba9a7d56a8209eea2a","sha512":"b37f1a61bbe740bc29308e664227701366ac978d4fbed081f13c47200edd74a792ab980559a236cff39ae27d3fda3ffffef3f1ac2dc420612b616496b44e9df8","ssdeep":"384:lQLl1pRp0itimTKDbObwHuHXFlF7FPFSWRyYyRZZZaZjZPfbfUO3OipypE:GpRp0itiFbObwHuHXFlF7FPFSWX","tlshash":"b913276b2dd2114086564365a3fe6b2c261c85c31c6becfab3a218ce8f1567c53db61f","first_seen":"2025-06-11T18:18:27.729381Z","last_seen":"2026-04-04T12:00:46.462883Z","times_seen":5445,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":59,"dns":23,"connect":2,"send":0,"wait":16,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}