{"report_id":"34df180d-1978-4f1f-abae-3fd20dfe140c","version":6,"status":"done","tags":[],"date":"2026-04-21T04:31:51Z","url":{"schema":"https","addr":"crackblox.icu/","fqdn":"crackblox.icu","domain":"crackblox.icu","tld":"icu"},"ip":{"addr":"185.66.142.51","port":0,"asn":200514,"as":"KnownSRV Ltd.","country":"Belize","country_code":"BZ"},"final":{"url":{"schema":"https","addr":"crackblox.icu/","fqdn":"crackblox.icu","domain":"crackblox.icu","tld":"icu"},"title":"Crackblox V2.1 – Roblox Pro Toolbox","dom":{"size":14482,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (372)","md5":"e228d2a12e0d67f54a86c8442d50d1c2","sha1":"d2ceb5cf4f6371231bfa6805f4bd1e98fae56260","sha256":"0d5707ea1465080d0648113df3589058a181ae127e65d27f355a2c4a9416277a","sha512":"acfc8b94af41197500e2ddc5eda0cbae965bcaf68cfbcd5628162c11bc79f54d6f1ca3dbd3235160c6bf1cad8878190866e3a904288af0a13459edb992f7f0a2","ssdeep":"192:BvpN//omndELTJGZcibv3uzVkY4aXJX9ri+EY1:BvpN4kE3JpiL3uVJtO+X1","tlshash":"bb52a531d2f13073129200c71d9253fb7ef6810bd24a664171bca26c9fdae86de6b19e","dom_hash":"domhash00fb877dc2160db95dbcb68163f460ca","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"crackblox.icu/","fqdn":"crackblox.icu","domain":"crackblox.icu","tld":"icu"},"ip":{"addr":"185.66.142.51","port":0,"asn":200514,"as":"KnownSRV Ltd.","country":"Belize","country_code":"BZ"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-26T04:31:51Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":2,"urlquery":0,"analyzer":0}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-21T04:31:29Z","timestamp":1776745889,"ip_dst":{"addr":"185.66.142.51","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"Belize","country_code":"BZ"},"ip_src":{"addr":"Client IP","port":48534,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO Suspicious Domain (*.icu) in TLS SNI","source":"{\"timestamp\":\"2026-04-21T04:31:29.758366+0000\",\"flow_id\":124987803553855,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.3\",\"src_port\":48534,\"dest_ip\":\"185.66.142.51\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2026889,\"rev\":4,\"signature\":\"ET INFO Suspicious Domain (*.icu) in TLS SNI\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2019_02_06\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"tls\":{\"sni\":\"crackblox.icu\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"b2dc97eccde39eba0fd1fb5f2d621f35\",\"string\":\"771,49200,23-65281-11-16\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":915,\"bytes_toclient\":3346,\"start\":\"2026-04-21T04:31:29.708671+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-21T04:31:29Z","timestamp":1776745889,"ip_dst":{"addr":"Client IP","port":48534,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"185.66.142.51","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"Belize","country_code":"BZ"},"severity":"medium","alert":"ET HUNTING Observed Let's Encrypt Certificate for Suspicious TLD (.icu)","source":"{\"timestamp\":\"2026-04-21T04:31:29.782203+0000\",\"flow_id\":124987803553855,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"185.66.142.51\",\"src_port\":443,\"dest_ip\":\"172.18.0.3\",\"dest_port\":48534,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2026890,\"rev\":3,\"signature\":\"ET HUNTING Observed Let's Encrypt Certificate for Suspicious TLD (.icu)\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Medium\"],\"created_at\":[\"2019_02_06\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Minor\"],\"updated_at\":[\"2020_09_16\"]}},\"tls\":{\"subject\":\"CN=crackblox.icu\",\"issuerdn\":\"C=US, O=Let's Encrypt, CN=R12\",\"serial\":\"06:50:49:B5:76:45:01:5D:01:51:94:7B:95:B3:6E:51:C3:44\",\"fingerprint\":\"88:48:c4:53:a9:b6:44:92:8a:88:73:bf:43:48:7e:e1:5c:4c:d4:00\",\"sni\":\"crackblox.icu\",\"version\":\"TLS 1.2\",\"notbefore\":\"2026-03-05T13:25:35\",\"notafter\":\"2026-06-03T13:25:34\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"b2dc97eccde39eba0fd1fb5f2d621f35\",\"string\":\"771,49200,23-65281-11-16\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":6,\"bytes_toserver\":1206,\"bytes_toclient\":3463,\"start\":\"2026-04-21T04:31:29.708671+0000\"}}"}],"analyzer":null,"urlquery":null},"summary":[{"fqdn":"crackblox.icu","ip":{"addr":"185.66.142.51","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"Belize","country_code":"BZ"},"domain_registered":"2026-03-05","domain_rank":0,"first_seen":"2026-04-21T04:30:16.37299Z","last_seen":"2026-04-21T04:30:16.37299Z","alert_count":0,"request_count":7,"received_data":52570,"sent_data":3079,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"crackblox.icu/js/main.js","fqdn":"crackblox.icu","domain":"crackblox.icu","tld":"icu"},"ip":{"addr":"185.66.142.51","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"Belize","country_code":"BZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"db86f4ae39b0f58fb57f6e86d264fe0e","sha1":"8f5ed84ed76c3d81ad0da6297de645e715f3c498","sha256":"a407f39d2b8495f2f22c9a497a9facee6480923971cab6a16c75be9e3e049839","sha512":"ea465350246428a1641717ce02afb38a18d7fe882866935d025febfc26694bcd4dc5c215df3ff27aab104c46bf7075b46fb2cb385db5c9022922b996c3ce845b","ssdeep":"","tlshash":"6521031b61183473007363f6a3db55a0f6751047924296037daece480fb18412ee7efc","size":1214,"data":"","first_seen":"2026-04-21T04:30:21.260643Z","last_seen":"2026-04-21T04:32:02.765782Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"crackblox.icu/js/main.js","fqdn":"crackblox.icu","domain":"crackblox.icu","tld":"icu"},"ip":{"addr":"185.66.142.51","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crackblox.icu/","date":"2026-04-21T04:31:30.021Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"crackblox.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 13:25:35 GMT","end":"Wed, 03 Jun 2026 13:25:34 GMT"},"fingerprint":{"sha1":"88:48:C4:53:A9:B6:44:92:8A:88:73:BF:43:48:7E:E1:5C:4C:D4:00","sha256":"6C:02:AA:E7:29:88:6C:3F:7B:34:ED:C3:C7:3B:90:E0:BF:0A:0C:72:C4:FA:3A:16:73:0B:C3:D0:4C:B4:70:C8"}}},"request":{"raw":"GET /js/main.js HTTP/1.1\r\nHost: crackblox.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://crackblox.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 28 Apr 2026 04:31:29 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 05 Mar 2026 14:35:47 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 461\r\ndate: Tue, 21 Apr 2026 04:31:29 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1214,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"db86f4ae39b0f58fb57f6e86d264fe0e","sha1":"8f5ed84ed76c3d81ad0da6297de645e715f3c498","sha256":"a407f39d2b8495f2f22c9a497a9facee6480923971cab6a16c75be9e3e049839","sha512":"ea465350246428a1641717ce02afb38a18d7fe882866935d025febfc26694bcd4dc5c215df3ff27aab104c46bf7075b46fb2cb385db5c9022922b996c3ce845b","ssdeep":"","tlshash":"6521031b61183473007363f6a3db55a0f6751047924296037daece480fb18412ee7efc","first_seen":"2026-04-21T04:30:21.260643Z","last_seen":"2026-04-21T04:32:02.765782Z","times_seen":2,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crackblox.icu/favicon.svg","fqdn":"crackblox.icu","domain":"crackblox.icu","tld":"icu"},"ip":{"addr":"185.66.142.51","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crackblox.icu/","date":"2026-04-21T04:31:30.149Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"crackblox.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 13:25:35 GMT","end":"Wed, 03 Jun 2026 13:25:34 GMT"},"fingerprint":{"sha1":"88:48:C4:53:A9:B6:44:92:8A:88:73:BF:43:48:7E:E1:5C:4C:D4:00","sha256":"6C:02:AA:E7:29:88:6C:3F:7B:34:ED:C3:C7:3B:90:E0:BF:0A:0C:72:C4:FA:3A:16:73:0B:C3:D0:4C:B4:70:C8"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: crackblox.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://crackblox.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 28 Apr 2026 04:31:29 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 05 Mar 2026 15:21:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 126\r\ndate: Tue, 21 Apr 2026 04:31:29 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":126,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"888750843b4c5c1990b8db06aba49ac4","sha1":"48676865271e73fdb1395583151cfb5c9112c295","sha256":"681718c574d4264ef62851795742ac62d61f6fc67929e1cca1a5381ee46d6e12","sha512":"23fe649d7a602b7e6d6dbef26c199cbf3845942b7460c68208faf2d0f8d9f84db06a3d4636cb8e16edcf755bb2afdff62a704e56916b01f3a2aea0c323b74692","ssdeep":"","tlshash":"49b09bba9a6d6504a415c9103d787581516ab4c5404100d5a5d1586c12155d26455e74","first_seen":"2026-04-21T04:30:21.26186Z","last_seen":"2026-04-21T04:32:02.770271Z","times_seen":2,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crackblox.icu/","fqdn":"crackblox.icu","domain":"crackblox.icu","tld":"icu"},"ip":{"addr":"185.66.142.51","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"Belize","country_code":"BZ"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-21T04:31:29.714Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"crackblox.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 13:25:35 GMT","end":"Wed, 03 Jun 2026 13:25:34 GMT"},"fingerprint":{"sha1":"88:48:C4:53:A9:B6:44:92:8A:88:73:BF:43:48:7E:E1:5C:4C:D4:00","sha256":"6C:02:AA:E7:29:88:6C:3F:7B:34:ED:C3:C7:3B:90:E0:BF:0A:0C:72:C4:FA:3A:16:73:0B:C3:D0:4C:B4:70:C8"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: crackblox.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nlast-modified: Thu, 05 Mar 2026 15:22:49 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 4210\r\ndate: Tue, 21 Apr 2026 04:31:29 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14762,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (372), with CRLF line terminators","md5":"e49b06ba203d982013ffcf69b96addc7","sha1":"26949f8c562b5f8fd71e6033545d64239bc12990","sha256":"053baf84baa2cafbbe6eed4217675b4c9d5262a6ea0336081b019fd3fd324eda","sha512":"a44f3df7bffb64aebdc7379dc5430b322b6b02473bd1f02abfc751683f524de9258316b22a43efe615369a33682a05a3e9370edd0a9dbb4e03319e69727bb021","ssdeep":"192:sHzv64sZLeJ7+7qvZ2k+I45J7IKiEEa0Q:szuZiJ67qvZKJU3Exr","tlshash":"f4629331d3d03023127340ca1e9253eafef9814bd34a569170aea25f9ff6e45ce2b599","first_seen":"2026-04-21T04:30:21.254053Z","last_seen":"2026-04-21T04:32:02.771036Z","times_seen":2,"resource_available":true,"data":null}},"time_used":172,"timings":{"blocked":69,"dns":1,"connect":21,"send":0,"wait":27,"receive":0,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crackblox.icu/css/styles.css","fqdn":"crackblox.icu","domain":"crackblox.icu","tld":"icu"},"ip":{"addr":"185.66.142.51","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://crackblox.icu/","date":"2026-04-21T04:31:30.012Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"crackblox.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 13:25:35 GMT","end":"Wed, 03 Jun 2026 13:25:34 GMT"},"fingerprint":{"sha1":"88:48:C4:53:A9:B6:44:92:8A:88:73:BF:43:48:7E:E1:5C:4C:D4:00","sha256":"6C:02:AA:E7:29:88:6C:3F:7B:34:ED:C3:C7:3B:90:E0:BF:0A:0C:72:C4:FA:3A:16:73:0B:C3:D0:4C:B4:70:C8"}}},"request":{"raw":"GET /css/styles.css HTTP/1.1\r\nHost: crackblox.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://crackblox.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 28 Apr 2026 04:31:29 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 05 Mar 2026 15:17:21 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 2595\r\ndate: Tue, 21 Apr 2026 04:31:29 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12788,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"fab0066c46e49eb9190549f551358c75","sha1":"cecd36862500dc1511d4caa17e71f06775bb0468","sha256":"540cf6ea057fbc547ecc14019c3bfa788888f6d5f107e7ee995ddadf93164369","sha512":"5726d89207d38dfadc0b168973ab9c9499012e830a1273b91a049116bc874f960ca65c5467764aae520b9fa6ea29ec8f54b3bdf713ba42d42b0f8becad377753","ssdeep":"192:64TSbYGaLa/Fyy+AHSwcq6qDtDD6xCr0WlFyMZX1xZ5U5u92:6Jrtyw3363","tlshash":"7b42e2d85622a2bd9e3beb7177955a7c76c4a2188d0643ec7df12004b6c83fa5192f4c","first_seen":"2026-04-21T04:30:21.255085Z","last_seen":"2026-04-21T04:32:02.77313Z","times_seen":2,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crackblox.icu/crackblox/delta.png","fqdn":"crackblox.icu","domain":"crackblox.icu","tld":"icu"},"ip":{"addr":"185.66.142.51","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crackblox.icu/","date":"2026-04-21T04:31:30.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"crackblox.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 13:25:35 GMT","end":"Wed, 03 Jun 2026 13:25:34 GMT"},"fingerprint":{"sha1":"88:48:C4:53:A9:B6:44:92:8A:88:73:BF:43:48:7E:E1:5C:4C:D4:00","sha256":"6C:02:AA:E7:29:88:6C:3F:7B:34:ED:C3:C7:3B:90:E0:BF:0A:0C:72:C4:FA:3A:16:73:0B:C3:D0:4C:B4:70:C8"}}},"request":{"raw":"GET /crackblox/delta.png HTTP/1.1\r\nHost: crackblox.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://crackblox.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 28 Apr 2026 04:31:29 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 17 Dec 2025 23:41:12 GMT\r\naccept-ranges: bytes\r\ncontent-length: 11163\r\ndate: Tue, 21 Apr 2026 04:31:29 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11163,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 75 x 75, 8-bit/color RGBA, non-interlaced","md5":"47efdf981d51d3cc9e83ddb388542cb7","sha1":"cdc2a61925942b53323e26fbec6c6e4e396db6fa","sha256":"211bf568c95f48e7aa6ed2e8464a7fe3b26f2fff0773296689ce200d936574ba","sha512":"55bac6dedb649f4be044958aecf99689307a405137b9c10355763eee599cbb832c6451360bbb90b302f46147bc1fdaa8b74d3147e1f2f8ce34fdd3f2ac71909f","ssdeep":"192:PSDS0tKg9E05Tm6TEr2vo94Qaia1YonkG6IILYYpCUrriOm1BW/Im4TkJ56IGdlk:6JXE05hTErEQaia1nkNGari9Tm4T656E","tlshash":"b132c0c74e39a48509653c00865c33fed5302f949d5b755cb9e82eee0dc8f11e749a6a","first_seen":"2026-04-21T04:30:21.256263Z","last_seen":"2026-04-21T04:32:02.773819Z","times_seen":2,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crackblox.icu/crackblox/script.png","fqdn":"crackblox.icu","domain":"crackblox.icu","tld":"icu"},"ip":{"addr":"185.66.142.51","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crackblox.icu/","date":"2026-04-21T04:31:30.016Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"crackblox.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 13:25:35 GMT","end":"Wed, 03 Jun 2026 13:25:34 GMT"},"fingerprint":{"sha1":"88:48:C4:53:A9:B6:44:92:8A:88:73:BF:43:48:7E:E1:5C:4C:D4:00","sha256":"6C:02:AA:E7:29:88:6C:3F:7B:34:ED:C3:C7:3B:90:E0:BF:0A:0C:72:C4:FA:3A:16:73:0B:C3:D0:4C:B4:70:C8"}}},"request":{"raw":"GET /crackblox/script.png HTTP/1.1\r\nHost: crackblox.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://crackblox.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 28 Apr 2026 04:31:29 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 17 Dec 2025 23:41:12 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5570\r\ndate: Tue, 21 Apr 2026 04:31:29 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5570,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 75 x 75, 8-bit/color RGBA, non-interlaced","md5":"34abc8a69af63162533e95ce023feba2","sha1":"740e444285f3c126f67b623f8cec3e69d45dc82c","sha256":"39b5bb287da7cc73710474f1e10bcfe94fc23e8f0e198592ea14b57ab64f6ed3","sha512":"52b0321287c070d689abc64290ebc777a5fe0cb41ed89f7a1878f19fffefd20d1cfc1cc11a833c06c118d80cf88466b38430253147e508409388aa297ddc3dab","ssdeep":"96:PSDZ/I09Da01l+gmkyTt6Hk8nTI3YlhybTHasB1i4Ks2dGAaKH:PSDS0tKg9E05TI3YXybjasv2skv","tlshash":"4fb1afeab87091af763e78931fed6403ef143a58c51f0170b5d061ee0559c0b2be7465","first_seen":"2026-04-21T04:30:21.257681Z","last_seen":"2026-04-21T04:32:02.774456Z","times_seen":2,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crackblox.icu/crackblox/robux.png","fqdn":"crackblox.icu","domain":"crackblox.icu","tld":"icu"},"ip":{"addr":"185.66.142.51","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crackblox.icu/","date":"2026-04-21T04:31:30.019Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"crackblox.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 13:25:35 GMT","end":"Wed, 03 Jun 2026 13:25:34 GMT"},"fingerprint":{"sha1":"88:48:C4:53:A9:B6:44:92:8A:88:73:BF:43:48:7E:E1:5C:4C:D4:00","sha256":"6C:02:AA:E7:29:88:6C:3F:7B:34:ED:C3:C7:3B:90:E0:BF:0A:0C:72:C4:FA:3A:16:73:0B:C3:D0:4C:B4:70:C8"}}},"request":{"raw":"GET /crackblox/robux.png HTTP/1.1\r\nHost: crackblox.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://crackblox.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 28 Apr 2026 04:31:29 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 17 Dec 2025 23:41:12 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4584\r\ndate: Tue, 21 Apr 2026 04:31:29 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4584,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 75 x 75, 8-bit/color RGBA, non-interlaced","md5":"7eb65391f5b2423190d007194aa2b6b9","sha1":"d0302dfb76aedf4b1fdd3148081e46384cabd3c1","sha256":"f8c96296c07b32494e8de1538f7f83b056c89ee93e463fefb07cf340ce9d2ea5","sha512":"a0fe10924a39eba9f9cc840360c5b241466d4e693a607373f425327456f5a3c3ebfa7aa527af8c0a5c221a961fa3530ecc696e77dbcc2be30fb546b6f6012a49","ssdeep":"96:PSDZ/I09Da01l+gmkyTt6Hk8nTpwGmviC3cumQcj1qUrqSzby5tfeO7:PSDS0tKg9E05TppmlMdQq1Fr7sh","tlshash":"cb918dafe810e59f78dcb8a2858c8153ba4572ac88022b7871c059c95047f4fbb650be","first_seen":"2026-04-21T04:30:21.258963Z","last_seen":"2026-04-21T04:32:02.776202Z","times_seen":2,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}