{"report_id":"35152e7a-68f8-4719-80c3-6590600a6f73","version":6,"status":"done","tags":[],"date":"2026-05-03T08:40:40Z","url":{"schema":"https","addr":"roblox-custom-daily-reward-script.pages.dev","fqdn":"roblox-custom-daily-reward-script.pages.dev","domain":"roblox-custom-daily-reward-script.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.247","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"roblox-custom-daily-reward-script.pages.dev/","fqdn":"roblox-custom-daily-reward-script.pages.dev","domain":"roblox-custom-daily-reward-script.pages.dev","tld":"pages.dev"},"title":"(1) New Message!","dom":{"size":8527,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (3974)","md5":"89150d1116458207468a684f2da8feca","sha1":"016cfd0b89e53ee90ffb7e757b792b84cb0564ef","sha256":"4f161f05fa557da25674e080be4cce9a03c27bf0c5c748d4036c6ff34690da77","sha512":"723a75f7658d93d7a675eac1dfdbae7b0e56eff80a11501a73864815a3510f411cc4a21dd00f7b695faa45008cdd46c58cb8255de12f90a6de41f6db93813bba","ssdeep":"192:WcgUIf0srZT9a41k/fx59mC9t0dzrhT9a41k/fx59vSV3VCkCaO:Aprah5pEzrSh5il2","tlshash":"aa022af6cd85082c58a170eb217ff3a87d29a14e3400efc1fcacd6486b31a551eb5d99","dom_hash":"domhashdc54fbe1ae197f2d0347c91caad45e38","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"roblox-custom-daily-reward-script.pages.dev","fqdn":"roblox-custom-daily-reward-script.pages.dev","domain":"roblox-custom-daily-reward-script.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.247","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-07T08:40:40Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":16}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-05-03T08:40:18Z","timestamp":1777797618,"ip_dst":{"addr":"172.66.44.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":53388,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)","source":"{\"timestamp\":\"2026-05-03T08:40:18.149682+0000\",\"flow_id\":431994419946427,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.22\",\"src_port\":53388,\"dest_ip\":\"172.66.44.247\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2057746,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_11_20\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\"],\"updated_at\":[\"2024_11_20\"]}},\"tls\":{\"sni\":\"roblox-custom-daily-reward-script.pages.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":789,\"bytes_toclient\":2706,\"start\":\"2026-05-03T08:40:18.140219+0000\"}}"}],"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"immigrationacre.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"immigrationacre.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"immigrationacre.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"cdn.show-creative1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"cdn.show-creative1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.nightdestruct.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-30","domain_rank":0,"first_seen":"2026-03-30T18:41:21.656654Z","last_seen":"2026-04-27T21:04:33.759813Z","alert_count":0,"request_count":10,"received_data":338599,"sent_data":5162,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"preferencenail.com","ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-07-01","domain_rank":20606,"first_seen":"2025-07-08T12:55:47.271261Z","last_seen":"2026-04-30T10:40:07.827721Z","alert_count":6,"request_count":3,"received_data":257868,"sent_data":1323,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-04-26T22:16:47.246638Z","alert_count":0,"request_count":4,"received_data":175884,"sent_data":2312,"comment":"","tags":null,"fingerprints":null},{"fqdn":"protrafficinspector.com","ip":{"addr":"18.195.43.118","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2025-06-18","domain_rank":614186,"first_seen":"2025-07-25T22:45:21.95813Z","last_seen":"2026-04-29T21:12:11.35333Z","alert_count":0,"request_count":2,"received_data":1446,"sent_data":1004,"comment":"","tags":null,"fingerprints":null},{"fqdn":"realizationnewestfangs.com","ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2024-09-03","domain_rank":0,"first_seen":"2025-10-02T06:26:57.543488Z","last_seen":"2026-05-01T14:32:31.550386Z","alert_count":17,"request_count":17,"received_data":43450,"sent_data":19932,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.show-creative1.com","ip":{"addr":"104.21.15.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-08-20","domain_rank":392451,"first_seen":"2024-08-27T12:23:01Z","last_seen":"2026-04-30T15:02:10.084882Z","alert_count":2,"request_count":1,"received_data":2493,"sent_data":576,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"mtevor.com","ip":{"addr":"172.67.199.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-10-31","domain_rank":3995008,"first_seen":"2019-11-04T00:42:52Z","last_seen":"2026-04-27T10:27:56.081875Z","alert_count":0,"request_count":1,"received_data":7814,"sent_data":442,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"roblox-custom-daily-reward-script.pages.dev","ip":{"addr":"172.66.44.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-02","domain_rank":0,"first_seen":"2026-05-03T08:40:42.044118Z","last_seen":"2026-05-03T08:40:42.044119Z","alert_count":0,"request_count":4,"received_data":62590,"sent_data":2066,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"immigrationacre.com","ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2026-01-21","domain_rank":0,"first_seen":"2026-01-30T08:57:45.831225Z","last_seen":"2026-05-03T03:57:43.096954Z","alert_count":12,"request_count":4,"received_data":295048,"sent_data":1916,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"wayfarerorthodox.com","ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2024-09-03","domain_rank":0,"first_seen":"2025-08-08T11:06:50.216151Z","last_seen":"2026-05-01T11:00:58.799244Z","alert_count":8,"request_count":4,"received_data":3208,"sent_data":2376,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"tse1.mm.bing.net","ip":{"addr":"150.171.28.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"domain_registered":"1997-09-03","domain_rank":17960,"first_seen":"2014-03-13T14:42:52Z","last_seen":"2026-04-30T00:28:48.277101Z","alert_count":0,"request_count":1,"received_data":25595,"sent_data":525,"comment":"","tags":null,"fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}]},{"fqdn":"cdn.show-sb.com","ip":{"addr":"172.67.170.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-08-20","domain_rank":187612,"first_seen":"2024-08-31T03:46:04Z","last_seen":"2026-04-30T11:37:55.11212Z","alert_count":3,"request_count":1,"received_data":2301,"sent_data":552,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-04-26T22:20:29.825994Z","alert_count":0,"request_count":2,"received_data":34862,"sent_data":860,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.storageimagedisplay.com","ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2024-09-13","domain_rank":170153,"first_seen":"2024-09-13T12:56:32Z","last_seen":"2026-05-01T00:53:34.616312Z","alert_count":0,"request_count":4,"received_data":309469,"sent_data":1846,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"kettledroopingcontinuation.com","ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2024-09-01","domain_rank":196057,"first_seen":"2025-07-30T15:18:19.355595Z","last_seen":"2026-04-30T14:34:03.513143Z","alert_count":15,"request_count":5,"received_data":211391,"sent_data":6813,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"adxpy.pages.dev","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-02","domain_rank":0,"first_seen":"2025-12-08T23:25:40.439519Z","last_seen":"2026-04-27T10:27:55.96716Z","alert_count":0,"request_count":4,"received_data":13701,"sent_data":1851,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"links.mtevor.com","ip":{"addr":"104.21.21.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-10-31","domain_rank":0,"first_seen":"2026-03-10T23:35:42.996415Z","last_seen":"2026-04-30T20:02:02.018788Z","alert_count":0,"request_count":1,"received_data":735,"sent_data":497,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"d1f29cfed9643cd152afffa084680f09","sha1":"6451495578ebedc8501ebc9b15e4814366bc20d4","sha256":"844fdc2e83e2c7178242bce37065c69003a5f82c4df45aa2c0fec30c6cb222d2","sha512":"e971e1e2772d57cb0086d921676bfdcbeb4ba19679a71e8e5e7b120e164ba22d6009dc066dab71ddc7395ed9affea2d261e1d210862a15d9f5721b346374513b","ssdeep":"","tlshash":"9d21e7b00cc9d29d1110e4bf1d8fd34647a19d0ff5850639c1f44a78fe21ba4e762094","size":1270,"data":"","first_seen":"2026-05-03T08:40:46.546018Z","last_seen":"2026-05-03T08:40:46.546018Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b09482b963949d3c77e3f3c9170853f3","sha1":"fd27d5cc22bb5206efe8facf76116c110e31f291","sha256":"e2cf976dc5c4e89b9426491709a0529236baafe727173ebf16f7de68493dba0f","sha512":"94b009168e804c1f219a44c7ed1a8ac9697637867736cc4b6be69e53a92c78d553546e5b563413dc0c71a84a017be2797ffd36166d0eef37cb926be18f5c34f8","ssdeep":"","tlshash":"ac21bb5b276543f17a6af127b10a57cbd5211a8ab485520f392cc18e0ee237533f9792","size":1272,"data":"","first_seen":"2026-01-10T23:26:01.334189Z","last_seen":"2026-07-20T06:22:39.060797Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roblox-custom-daily-reward-script.pages.dev/","fqdn":"roblox-custom-daily-reward-script.pages.dev","domain":"roblox-custom-daily-reward-script.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"bca257bec8eac63b926de62f595d024c","sha1":"4aad7418eac16f04618ab6ec060b900a297f26e4","sha256":"e7efdf079afa9575c418bfce8e67a58e01ea76fa34ef1ab28a17950d143f8a10","sha512":"26c34acc0bc2a9dba2ce5ae69f408196a58f39826090a14a5a09d575623b11f15f3e3a51f22603a6db4c63411b420526b76534f9097fa8119ab5f47a47c0d75a","ssdeep":"","tlshash":"bdc02b281cb4098410a0f528cc2dc8b01fcec003c045d08458bd38c61e4438ee409cc6","size":136,"data":"","first_seen":"2026-05-03T08:40:46.547524Z","last_seen":"2026-05-03T08:40:46.547524Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roblox-custom-daily-reward-script.pages.dev/","fqdn":"roblox-custom-daily-reward-script.pages.dev","domain":"roblox-custom-daily-reward-script.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"81f04c41f8acbe1896a04adf683a5f50","sha1":"c43780b476488b7b723c6e463397263d268c0612","sha256":"d7c38975e1b16aa76895318026d67c2ca83a41ae43b9419041a898facd34720b","sha512":"f477f31fc8d52891075cc8889855386d8705476038e9d646ca0b6001cefab5bd0f438c72c4fd0d9654bf25092223c7a4dd7d25ff9419f97744adecec35990616","ssdeep":"","tlshash":"58d05b340d00021604721dec6c959fb47e367c41b3742160f9bcd91591d1947c162feb","size":258,"data":"","first_seen":"2023-03-09T05:07:28Z","last_seen":"2026-07-26T16:40:44.026518Z","times_seen":1665,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roblox-custom-daily-reward-script.pages.dev/","fqdn":"roblox-custom-daily-reward-script.pages.dev","domain":"roblox-custom-daily-reward-script.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bb27232549abd814635dde5a338cbc9e","sha1":"90b24ec16b789453aec40bcd9b3b620ac4721335","sha256":"2f136d970baa2f3c28b182172051502e723fd8ce872321a266be73da9cf97afa","sha512":"7575109e4beefb0aadde26992f1016198461e154e0a5b94d05dc718373963f73de511184d1e072acf5bbb6ccb4feef0184d2d26e61497c22f18e2abda1285bc4","ssdeep":"","tlshash":"cfc04cad5044b54830b2cdf42979c644e120cdd4354abc3526e2541155cc64e9c7677d","size":147,"data":"","first_seen":"2025-12-18T23:27:07.103769Z","last_seen":"2026-07-26T23:38:52.795601Z","times_seen":346,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"immigrationacre.com/c2/07/ec/c207ec84c2456af201cc563cadc36c46.js","fqdn":"immigrationacre.com","domain":"immigrationacre.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c192ae25bde5fa6681fe8443edd59461","sha1":"c3ac5049dfa2f55ceaa0e8924c7b5fb559b5795a","sha256":"c23ee8f38b1bbfa9f0b085e281dcc1b3c14b296770b723c144396bee02ff2497","sha512":"35f364eb2d2c8a082a73693f2ea54c2eb060c89b86a6bebf210865190e623c379ce37e3305fb459bde18b3bbbe830037d93db44e0ec8f3b74655e80d0c407f6b","ssdeep":"1536:2l2eABAdWrl7QJWX8jlv+w31PTz5Ysk5qMUP+0v2:2dSAkrdQJoYl2wlBFkLF","tlshash":"2793c78c7f92f0f5039a24b3232fac16f2ab1d5124fce444d903a9e5ae25319d57ad6c","size":92505,"data":"","first_seen":"2026-05-03T06:10:08.458616Z","last_seen":"2026-05-03T08:45:53.626253Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roblox-custom-daily-reward-script.pages.dev/","fqdn":"roblox-custom-daily-reward-script.pages.dev","domain":"roblox-custom-daily-reward-script.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"a73d26dd421e931fcd8e269f07769d64","sha1":"1a82dcc6914fcd0bde9ad067afe327f864f417ef","sha256":"dbec47c6cca1b7f4d56e8ceb1d4cfa69d78067c7480a8c04bd9b96afe74e0af9","sha512":"f02e979135efca3b320a922788bfa4647013506e61a50d0e000b576eb984bca5f399213ee9ea56ba4a33825ab8c3aaf4c212ab233d340107df27759b16a5347e","ssdeep":"","tlshash":"107000080a0ae0a8080a0a023822c00c02800082000ae0a200000a0020000088820220","size":18,"data":"","first_seen":"2025-01-05T08:04:41.550371Z","last_seen":"2026-07-26T23:38:52.796408Z","times_seen":383,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"a529894d3286d527219ac471e1cd5a47","sha1":"4ac04d024d5e097b20a2ec99493a5b40a07def7f","sha256":"de7f25c63f8aee85b80dc11ecb1878e4487e52e537205d76023746f9786aea27","sha512":"c0ac07fabc2441e29f9db33a992c001edce654c4d7341f71a75ea85824d38231a304d8463bca7c03cfaf9341c0e3104e9d73c634267a94ba30ce855ef9a6b9a2","ssdeep":"","tlshash":"e0c08ca4eb04087071ac3ebd330aa3e2e8e876123030088296948090e2b92330420c80","size":145,"data":"","first_seen":"2025-12-16T03:50:13.718611Z","last_seen":"2026-07-26T16:40:44.072912Z","times_seen":300,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roblox-custom-daily-reward-script.pages.dev/","fqdn":"roblox-custom-daily-reward-script.pages.dev","domain":"roblox-custom-daily-reward-script.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b73f73772a980d0b71c8097aeb93ba73","sha1":"dbd8ebdebe2e0f452407bb38a76deec742b80027","sha256":"496ed8b94f856087f1a4384dc7fa33b769c1c9439932825b506455b5bf4930b7","sha512":"a00b2f097b0624952e4c5ca29ba1c6fddd0187080cadb301185692695abe516a7d3c38d3a4d2d8f1357c0f6ffd80fb61519dbe59f028ee25fba80f30d19720c9","ssdeep":"","tlshash":"b9019eff24004c7448de19eeb2a8778ae8b6005b7d19142424194c7576a4b7603d2fb6","size":668,"data":"","first_seen":"2023-03-09T05:07:28Z","last_seen":"2026-07-26T16:40:44.032532Z","times_seen":1637,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roblox-custom-daily-reward-script.pages.dev/","fqdn":"roblox-custom-daily-reward-script.pages.dev","domain":"roblox-custom-daily-reward-script.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3043924babea44e8e94b0aa19f11d89d","sha1":"c6ccf78fba768952994a37ad33a8309fe9454b5f","sha256":"5f96af838dd14f1b76712ba6f84df12026e8c0431a381c5e062361d390970d36","sha512":"9c78e351a02bfcc7181420b6ec071906e24734f3421c5d1b8e4a92a9973fd5125242fb6b22d6cfa53dea13a2aa99685055b52bcc8cc4a2fe88c8e0742621b6c5","ssdeep":"","tlshash":"7dd02bb1d12c0332029da14a7423c394713434daf3423080a01f87f950c4f96d41fcbd","size":273,"data":"","first_seen":"2023-03-09T05:07:28Z","last_seen":"2026-07-26T16:40:44.037297Z","times_seen":1686,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roblox-custom-daily-reward-script.pages.dev/","fqdn":"roblox-custom-daily-reward-script.pages.dev","domain":"roblox-custom-daily-reward-script.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fb73c9c1f5ecb08f9a0205a14e2841e0","sha1":"dd5807b9d4c32d9dff08f8f14c726804f49bfd5e","sha256":"63578fe671a2d9eeff56bb7df57695eb7728b49bfb50db91bf2cf74430df93c9","sha512":"b18875be5353ae7972e16617a0eadc0adbe806c68cd098cd54f462b4308c7dff48e7ce73da68968f66d9dcc00ac1cc891e8d1b1312298a75990eeecdbc8187ca","ssdeep":"","tlshash":"7fc08cf68004b21820e7caf02028c0c0a324ec20300a383166e0081082ac50d0cb2bb8","size":146,"data":"","first_seen":"2025-12-16T03:50:13.724775Z","last_seen":"2026-07-26T23:38:52.793259Z","times_seen":322,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adxpy.pages.dev/magic.js","fqdn":"adxpy.pages.dev","domain":"adxpy.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9bcbb02a6bf94ae8762ddcda5d1c80d3","sha1":"fade830681bb5b7b138db5482e7a495c1c9b296a","sha256":"b26277e44f2fe29283a55a632166f8a45dd1407a0970c13e08287406f94a0772","sha512":"54914b0f4d7625f4e40e13b11bb2bfd47c87dc6a14714c427c48c75e955980826d6605abbac7b3ca6c043356f1b91618b6f16abaf6be339be38d8ffa825e71e5","ssdeep":"","tlshash":"c101fe6e229200a84d7a509803a3fa0cfda832577160c0e1bacedb602f35f20419e4d8","size":671,"data":"","first_seen":"2025-12-08T23:25:47.209165Z","last_seen":"2026-07-26T23:38:52.775926Z","times_seen":387,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/af/25/da/af25da8381e0bd0494ba4018c76898a2.js","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bf0132d950a826f23669acc55a5ff7b8","sha1":"d10b81e4a9b3c7086d3c2ba4f3c3d586514d90f5","sha256":"0f18cf836362f2a63f1ee97267662e6b0cdf6d7903cea01424b3ac6f90829bf9","sha512":"5bd73b81573388a59cf75c8b3159e03420b940e53c877ba26eecca5e6b734cbfab8d6381f9de2fc3249cc84fd4a34cfc4d0f3b2fe4a3c977decc5ae94d75da00","ssdeep":"1536:2l2eABAdWrl7QJWX8jlvdwF1PTz5Ysk5qMUPKLOB:2dSAkrdQJoYlVwfBFkhO","tlshash":"ad93c78c7f92f0f5039a24b3232f9c16f2ab1d5124fce444d903a9e5ae25319d57ad6c","size":92486,"data":"","first_seen":"2026-05-03T08:40:46.537551Z","last_seen":"2026-05-03T08:40:46.537551Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"f625dc2ad5c5e8d5ec6310146c41ba73","sha1":"a912ff6d2081796ff60906e6b2f83d5a5fc9dc34","sha256":"204092ac427e06c3c6083aa270d602ae2a4aa4f57d90f683f6cff77cf45484a9","sha512":"e524689727479e86c09b0e6bb5825a353f776f755d2c6c3beeccb62c4b649347b133a3a9d76f30658b636574cb3ee17a5d197c7a1ea3979f163819d88886c418","ssdeep":"","tlshash":"702108fa84030c9e5500a5c201bfb3747dbc22ad7820e6e18590b8086142808afa5cfa","size":1394,"data":"","first_seen":"2026-05-03T08:40:46.552338Z","last_seen":"2026-05-03T08:40:46.552338Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roblox-custom-daily-reward-script.pages.dev/","fqdn":"roblox-custom-daily-reward-script.pages.dev","domain":"roblox-custom-daily-reward-script.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"349edacf65d0ff272bf6fd11233c1ead","sha1":"34b1fdbc95156d9d6b499a739a7ce1f8b57926b4","sha256":"82eb474cb30703539541a5d27d13890cc5d5af5633f642fb4d24666b4ff98848","sha512":"c474a12003f50e2206febb6e7d8fd2ca37e5dfee3b949c9fdbf5288207c1932bcfb5b78ed46706ea8675c34ed493dca4c05e3886a5685a6826f82307630581a3","ssdeep":"","tlshash":"2ed0c23a1d110b7104c619ea38d8a6987a3d384577293450e47ed900a0a4a898063ff7","size":276,"data":"","first_seen":"2023-03-09T05:07:28Z","last_seen":"2026-07-26T16:40:44.042341Z","times_seen":1626,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"immigrationacre.com/c6/4a/a1/c64aa11db612c16c65959b87a44dac81.js","fqdn":"immigrationacre.com","domain":"immigrationacre.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5d368b57340101ad9c97677aec1864e8","sha1":"0644d086ff9453d94a9a44f9cd0c25bfe1a35d4a","sha256":"647146921d4c2fdf05a6e9a043fddad8eff95f15d14eafde2614f704164a4595","sha512":"310a2192cd3541fbbee04ea6c5296c36120bb416bd0bbd5bb17409b85f7bf9eea981d7dfa88f9c86514f7362ab7caa80e0330fc5412a9691c0c5694ce313ace8","ssdeep":"1536:8G6g/qn/325q6EWa8oN39IRnG1VDpN6CwkMDCF9q+hjxx84Y:vIeZB0mdc5pSgqP","tlshash":"d893e8c8bf80f16443f26836222f501ff0a90c5552ddd18de9a2b8af7fb9b48e635594","size":96864,"data":"","first_seen":"2026-05-03T08:40:46.528691Z","last_seen":"2026-05-03T08:40:46.528691Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b95f4dd12cb47f93177bf025a73da4e5","sha1":"c5e4d2cc995383934df9d1719aaab748ef9b363d","sha256":"d15f6018b95e316e3f09e5d4a9f054654dc4cd1e837e4505e8e580ec74b8a874","sha512":"e07c4d2dbfcdcdf60d3a054e4ace30331731595aa9e10b79962b797d4e68348c287abc2e783760fd660710211d7cacfb84ece9db4d3187162dc588e8afcd28e2","ssdeep":"","tlshash":"bb014704e22627f8d13b2b646f7f638a19a3020dc5c9c51e21ec7be73c3345656d6c29","size":693,"data":"","first_seen":"2026-03-08T14:06:21.503706Z","last_seen":"2026-07-20T06:22:39.058294Z","times_seen":44,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"41152c2477f6efeab24497f9a053e49c","sha1":"357715b1a3bc22bef7abdab374fcb7d642f27835","sha256":"b820fb2c7026fc6421adb8a348d15bb662aa8f78ff7145b8c45ec19e1d58aa49","sha512":"64ce0beab6eacf36d36852447000eabdab8af266974f5bc9829985b003cb0a8fc0a30d81d60677290a60a1e5e5ffbddb52dfa39e532b226fd9789c60e9c1aa84","ssdeep":"96:LC9t0kozyoTjBC49CrxyFpR1k/EIBNBl5pmjnm5f1jDSV3VCfMEDaH:LC9t0dzrhT9a41k/fx59vSV3VCkCaH","tlshash":"0e9118b6cd85083c64a270af227ff2987d25a14a2400ef81fcace6446b31a945eb5d89","size":4543,"data":"","first_seen":"2026-05-03T08:40:46.554408Z","last_seen":"2026-05-03T08:40:46.554408Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"b8d8d37e9abf39fc18f7e8b8550ff58f","sha1":"86c875e238525966224f0600412669e8efa0340f","sha256":"1a0b28f55a4e58f3352b563e1250788dd37fcd9e338b304fcbd6a675362117a8","sha512":"6763afd4ae093b217345780f9e105dfb949485708c99b424532078c0b7ec11d3ec9e3ba2317911a3b92cc10323ecb82ea60f3f176f3ecae66468199bf64f1462","ssdeep":"","tlshash":"7a31faa6d19c19188cf0b1f7631ff3ad3d3be88a2508afc09c709644252196642b6c49","size":1664,"data":"","first_seen":"2026-05-03T08:40:46.555633Z","last_seen":"2026-05-03T08:40:46.555633Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mtevor.com/hg/pages-dev.js","fqdn":"mtevor.com","domain":"mtevor.com","tld":"com"},"ip":{"addr":"172.67.199.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"63f71502fe125358818a0825aae4ee16","sha1":"98934593ae75876db5a51fbb4a0d6f990576a2c9","sha256":"5dedd670c8604a3b077f14aac976a0b91441afe370ecc449c9e3df2cf077027b","sha512":"d426126273d42b38f24bd9b8d1780346cc1b6cee83468b887e0eaeecaff19e4a89a0636620ab41efc977e6c2b559e88e55b670f3dfd5b7c7205f848a55e2ebdc","ssdeep":"192:c4Mpsto0LV8YteZbDVj/poiPqpyj4ZYzwIxpsQkhHC:/++j8YteZfJ/ptPqcj46zNxpsQ8C","tlshash":"0ee1d6a9bc8f89390bf2f758d6358519fd3cc0221602505af0c8525b8a69f1e471ffd8","size":7180,"data":"","first_seen":"2026-03-10T23:35:48.093011Z","last_seen":"2026-07-26T16:40:43.756916Z","times_seen":130,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adxpy.pages.dev/ads.js","fqdn":"adxpy.pages.dev","domain":"adxpy.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"28a8ee5b231d6993efeaeb288506fba6","sha1":"185e282511210752916a8d4fcc28642f02e4dc5e","sha256":"81496c62f33c7090e09cd8ea1d016980fc4432fb6ca00450ccea59b926daa7e1","sha512":"b1cf24abc589692314ada61a5a266b280ce2ad1297f5be58b94ececb90e2d718021795ca3998cb142e5937cff260d4aaeaffe5759bb8e67dff20e76bec939658","ssdeep":"","tlshash":"cb81011920a100651eb7236a7be3625dfba43053b81281a4bdccdb185fb9d1091f7fed","size":4034,"data":"","first_seen":"2025-10-25T03:17:17.993778Z","last_seen":"2026-07-26T23:38:52.758855Z","times_seen":407,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"immigrationacre.com/6dd5e3d7ac37d33b5abc87810f6ac7f3/invoke.js","fqdn":"immigrationacre.com","domain":"immigrationacre.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e609339b8123b13519ef68ccf94d74da","sha1":"fa23bc1ae1cc5ee0881ad97627ea1605f3d3c359","sha256":"063f54e22a5cc8ad214b853463aeb8ec14dcf1a3eabd3157ab6afb0b4a5ad99d","sha512":"f4254a4b675bc0a95d151165d4afcc4e64dd2832c0097db7bc7d8a95bde6e3b0f1840e093b5e327d969c6e6d561b28448fdafa0b940f40c61e27fb6a0e160030","ssdeep":"768:Uj7jxeEGWHp9GAuNWlpBCHpDBRKO8doFtXj9H6sgT:8xeEGWHp9AA7BCHpDBcV+fz9H6sS","tlshash":"6b3317887fa1b0b503b67473623f9046f25c0d0955ecd8dcd087a8a87ea87e9d1b7b25","size":51186,"data":"","first_seen":"2026-05-03T08:40:46.541175Z","last_seen":"2026-05-03T08:44:19.127862Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/d0/89/ea/d089ea049f0f7b1eacfa2b5bb99d3bdc.js","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5f8ea8defe31ce845a807fc911725a4a","sha1":"b701d9452ef641853d2806e107613fb8596d33f3","sha256":"ce361e8187784021fe08ee14854ee5b41982c46e44d56b6592c66665ef73fa82","sha512":"4c55a59c934767a93fa47786c8bbe7912b64cf054f3eb5c30b6d2d179e8d99ee37fb1dafba2245d0351827379d7bfe73c5ad82a691f1965cc349cad44d6fedcb","ssdeep":"1536:kHLBN82ttARd5zkYcWZ+u9DJvDWaBBl2qcQt7MrHYeCz6Q3d3icPS6iBBJ7o:cBQ8u91v7Hl1cQt7MrHysxq","tlshash":"33a3c68cbf50f55853f62432222f940af0e90c5641dcd198fa52b8ea7f7cf48e9769a4","size":103365,"data":"","first_seen":"2026-05-03T08:40:46.542147Z","last_seen":"2026-05-03T08:40:46.542147Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","size":85379,"data":"","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-07-27T20:35:09.544129Z","times_seen":25068,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roblox-custom-daily-reward-script.pages.dev/","fqdn":"roblox-custom-daily-reward-script.pages.dev","domain":"roblox-custom-daily-reward-script.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"a73d26dd421e931fcd8e269f07769d64","sha1":"1a82dcc6914fcd0bde9ad067afe327f864f417ef","sha256":"dbec47c6cca1b7f4d56e8ceb1d4cfa69d78067c7480a8c04bd9b96afe74e0af9","sha512":"f02e979135efca3b320a922788bfa4647013506e61a50d0e000b576eb984bca5f399213ee9ea56ba4a33825ab8c3aaf4c212ab233d340107df27759b16a5347e","ssdeep":"","tlshash":"107000080a0ae0a8080a0a023822c00c02800082000ae0a200000a0020000088820220","size":18,"data":"","first_seen":"2025-01-05T08:04:41.550371Z","last_seen":"2026-07-26T23:38:52.796408Z","times_seen":383,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","size":85379,"data":"","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-07-27T20:35:09.544129Z","times_seen":25068,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","size":85379,"data":"","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-07-27T20:35:09.544129Z","times_seen":25068,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roblox-custom-daily-reward-script.pages.dev/","fqdn":"roblox-custom-daily-reward-script.pages.dev","domain":"roblox-custom-daily-reward-script.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"558c3779ce5aac4481c86687cd8f15c3","sha1":"474fa56198ee722ebad4041dce2dcfc716fd923d","sha256":"7b2515a2c400be25e6daa78e4c6f35f43d67d244acb76818f1599f815b1995a8","sha512":"280f5da312b232e8638235a1b6094abc4abf38d94b8c327c668a848d830d0fe94d2b2830fb53be53076a724286b3c5b3f290f0e240267a71a57bddf00c8cd6e2","ssdeep":"","tlshash":"e1019c3d326407bb22ee0e3b23779e5476732844b40210b05e2d9da86410df112afabe","size":797,"data":"","first_seen":"2023-10-28T10:41:14Z","last_seen":"2026-07-26T16:40:44.04741Z","times_seen":414,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"d6c61116072a3aed150693303749f3a3","sha1":"5ffb5b5427225efd2d592d1bf4bf3613027e69e8","sha256":"7f098ee0db613906e057c8814237ba1a33c352d04c1fd2b72ab5235d24082287","sha512":"f3498eb18f02a60e53e802581e42658f2d0b280610791645ebcd50374bc951aeab13f30e244c6167f3bfd1c1c38eb3aa52ec2f0aba865742abeadf817bffc8d8","ssdeep":"","tlshash":"0dc09b8c9f00185575327cdd7b261384fcd542dbb836dd555297c04265cd36bf04157c","size":145,"data":"","first_seen":"2025-12-18T23:27:07.113909Z","last_seen":"2026-07-26T23:38:52.798108Z","times_seen":303,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"f1bdc679adff6731aeb7013467d2f679","sha1":"b4f9d2c2303d638fa7d808da680724c35343459c","sha256":"67b97a3ede5b6527f06e50a8e516444329843102d75617aa52e89f7985c3dd83","sha512":"f7525faef69c47688a5b43c4d2fb288ca006db0e5bf9b2e34ecb0f6f9a76a8d3eb32f2512d70bbd484953626b1dc31cd5675c8a099ee4f811e9519841dc10c06","ssdeep":"","tlshash":"8531e7f020ac251268bfbcd3208c31a43dac92df486497801c3c4b850a1d9d909b6c58","size":1540,"data":"","first_seen":"2026-05-03T08:40:46.557561Z","last_seen":"2026-05-03T08:40:46.557561Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"immigrationacre.com/52f212bca95373aed7ead32398143db7/invoke.js","fqdn":"immigrationacre.com","domain":"immigrationacre.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a5807249e5339e1041e4c304a292cbd6","sha1":"3d3a7c7925aae1b5539a1cca96e286190f2c9151","sha256":"23a5bce3e4176860321bc68f890d42b40932c6906b531cc6ac9831e89ddee41b","sha512":"869a89ac6eba73ecb9f8fcc185b848eebf03e47fe4c2971f8fa90318a62d54a59d50b56f8062ef57774e87803b2f38f9ce183c3da18bd34d28f524c09fab60e6","ssdeep":"768:Uu7O2x7hMHp9GzuNWlpBCHpDBRKO8doFtXj9H6sgT:q2x7hMHp9zA7BCHpDBcV+fz9H6sS","tlshash":"303317887fa1b07503b67473622f9046f25c0d0956ecd8dcd087a8a87ea87e9d1b7b25","size":51111,"data":"","first_seen":"2026-04-30T20:02:51.271243Z","last_seen":"2026-05-03T08:42:10.106244Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"realizationnewestfangs.com/1b/50/e5/1b50e57a5911fd0a5b46962ab48ca22b.js","fqdn":"realizationnewestfangs.com","domain":"realizationnewestfangs.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a141d4cc0ea62b7e58f726a49c7b649e","sha1":"ca9a28b3d7e06f192f20989c96c710bd243d512e","sha256":"42554c0284cc374e33e51ba1c2980fad64bd7600955788facf38b137a1668c80","sha512":"148f99f86db9534dc360f8b266d2d648f7554e616703ff93c369a32f2540eb4d3fad86b449b34e9c19e0805d1aa38dd2cf00412d5569df4fb92a018f70fbbfe4","ssdeep":"96:ctGAdiByQnKauwtTMpX8TxnOgV27JBrHVtH41:c4fycnsgUDpl41","tlshash":"8db1858c3f81f2d407b270af2f2f1509f16d5c20ba89d498d01b95d03e5862adaa7f71","size":5146,"data":"","first_seen":"2026-04-30T15:37:40.418293Z","last_seen":"2026-05-04T13:42:54.864213Z","times_seen":154,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"7cc5fa7ca88cf437a2516309e6174d20","sha1":"877aa7ec9af70f7e64a3456adc05758c89b4678d","sha256":"87ee1139f17db004724af49bc89ac89c2e74cabfe3673de7c9bc1b2c69f380e2","sha512":"dc190d94d7bc60595d7701d154747f5823ea438fdc81143a461b50f3ea5c720f0179be2a2f8bf432e16b90031caace99af2d76d6ede6e0a18d5d7157f6a81df4","ssdeep":"96:V98wxuozwCNj6MUAQ5tk/ZN+YtyjGb/bI1jDUCfMEDaH:V98wxzwGQPkhAPjGQvUCkCaH","tlshash":"d89119b40cc845793473f4ff39ae61047e54928fa804de05f8adc7955f24be89ea6c98","size":4296,"data":"","first_seen":"2026-05-03T08:40:46.558486Z","last_seen":"2026-05-03T08:40:46.558486Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.nightdestruct.com/sb/ssp/vpn/classic-push/big1/js/jquery.min.js","fqdn":"cdn.nightdestruct.com","domain":"nightdestruct.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4a356126b9573eb7bd1e9a7494737410","sha1":"8258d046f17dd3c15a5d3984e1868b7b5d1db329","sha256":"22642f202577f0ba2f22cbe56b6cf291a09374487567cd3563e0d2a29f75c0c5","sha512":"005c3102459dbf145df6a858629d6a6de4598fafe24cd989d86170731b0c3b3c304da470cf66bfd935f6db911b723df0857b5ed561906f7f1c5c4e63ed9430de","ssdeep":"1536:/P10iSi65U/dXXeyhzeBuG+HYE0mdkuJO1z6Oy4sh3J1A72BjmN7TwpDKba98HrZ:++414Jiz6fh6lTqya98HrZ","tlshash":"dc83d6d9b2c67062977734b851bf510bb17a98dab40c8c60f0a4d8e47eb4a8d517bf2c","size":84380,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-07-27T19:06:11.864744Z","times_seen":19986,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"mtevor.com/hg/pages-dev.js","fqdn":"mtevor.com","domain":"mtevor.com","tld":"com"},"ip":{"addr":"172.67.199.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://roblox-custom-daily-reward-script.pages.dev/","date":"2026-05-03T08:40:18.595Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mtevor.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 16:10:55 GMT","end":"Thu, 25 Jun 2026 17:08:44 GMT"},"fingerprint":{"sha1":"1D:90:33:9C:3D:4D:50:02:77:2C:32:67:1E:87:33:CC:BD:89:04:6D","sha256":"72:55:21:53:6A:A2:E9:F9:08:9D:13:A1:4F:FC:E2:CD:E9:5C:53:05:B8:B0:36:72:24:AB:FD:DA:7A:F9:7C:C4"}}},"request":{"raw":"GET /hg/pages-dev.js HTTP/1.1\r\nHost: mtevor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://roblox-custom-daily-reward-script.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 08:40:18 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 466392\r\nlast-modified: Tue, 28 Apr 2026 05:33:37 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HmyG7Iq8B2k34PvakupqaMl1l7LtW1mEqbMf8iDq2kpYWqTPuF%2B4IYYu1VjNJvmi5BCh3Ui8IpjXVPX4A34X98e36kzz87yK4URmv7YWFwHGwDkdgaia3chZG8ZQ\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9f5df5cc7a3a5685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7180,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"63f71502fe125358818a0825aae4ee16","sha1":"98934593ae75876db5a51fbb4a0d6f990576a2c9","sha256":"5dedd670c8604a3b077f14aac976a0b91441afe370ecc449c9e3df2cf077027b","sha512":"d426126273d42b38f24bd9b8d1780346cc1b6cee83468b887e0eaeecaff19e4a89a0636620ab41efc977e6c2b559e88e55b670f3dfd5b7c7205f848a55e2ebdc","ssdeep":"192:c4Mpsto0LV8YteZbDVj/poiPqpyj4ZYzwIxpsQkhHC:/++j8YteZfJ/ptPqcj46zNxpsQ8C","tlshash":"0ee1d6a9bc8f89390bf2f758d6358519fd3cc0221602505af0c8525b8a69f1e471ffd8","first_seen":"2026-03-10T23:35:48.093011Z","last_seen":"2026-07-26T16:40:43.756916Z","times_seen":130,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":43,"dns":22,"connect":1,"send":0,"wait":16,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roblox-custom-daily-reward-script.pages.dev/favicon.svg","fqdn":"roblox-custom-daily-reward-script.pages.dev","domain":"roblox-custom-daily-reward-script.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roblox-custom-daily-reward-script.pages.dev/","date":"2026-05-03T08:40:18.904Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roblox-custom-daily-reward-script.pages.dev","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 19:15:58 GMT","end":"Thu, 23 Jul 2026 19:15:57 GMT"},"fingerprint":{"sha1":"51:46:56:EF:BA:8D:E0:25:30:40:C3:C1:F7:B5:BF:30:42:81:FF:DC","sha256":"43:60:CA:66:7E:22:83:3B:61:14:89:8E:AC:54:6E:24:4C:C5:90:6A:95:59:44:A3:0B:6E:73:1F:6A:0B:37:84"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: roblox-custom-daily-reward-script.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://roblox-custom-daily-reward-script.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 03 May 2026 08:40:18 GMT\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=6,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GtQHKKqQAyt9Oq21858gb%2BLUgawy0jJXqSQjUoHrgI5ZTqYJgv%2Bdx0VlO99kr%2BlWk1q1R05tJjgBrwi8NXNqZRHBA4KlFj6eB7fCXmBVXpxOlbvBjz53Gg%2Bq8pSfTinp3KRrmxALxSBAVu5V8sFjRGraYk6dxrjESOCPYHiG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"c32bf1839a02c28417636e2fbfe32b83\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f5df5ce292156bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1039,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3e5eb335b0265fa668f3b7a8bb83dd62","sha1":"3a7497bfe01d5f0dd7f93b25400ff8dd4410b033","sha256":"4183fc50d0ecbe4f28d32f897b93b712a6e90df092b0b5d921b51ce9da6931ee","sha512":"b3fb01f8dce34190449c733e25a5818ce09b3957fbe5088be6877f89d0f32ed35e793a245ae2d736cd17031d8183183d0e4188b2d93f7faaa286b5b88f8179e6","ssdeep":"","tlshash":"bf11ef5fc341983af23ed341eab4da49863568cb91f523d8fed06d29b43a5d61409788","first_seen":"2025-05-31T11:23:43.744066Z","last_seen":"2026-07-26T16:40:43.935518Z","times_seen":490,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.nightdestruct.com/sb/notifications/utility/default/us/blog/Progamer/flip_icon/oct2024/3/js/script.js","fqdn":"cdn.nightdestruct.com","domain":"nightdestruct.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://roblox-custom-daily-reward-script.pages.dev/","date":"2026-05-03T08:40:21.184Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nightdestruct.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 16:21:26 GMT","end":"Sun, 28 Jun 2026 16:21:25 GMT"},"fingerprint":{"sha1":"77:BA:39:E3:87:1C:89:74:C5:36:C2:0F:E9:4C:0E:35:C4:92:A6:BA","sha256":"5F:17:E6:F7:42:E9:5F:B9:9E:03:47:36:9F:79:03:3B:E2:C2:66:ED:E9:3D:14:AB:29:B0:52:4A:62:57:C4:91"}}},"request":{"raw":"GET /sb/notifications/utility/default/us/blog/Progamer/flip_icon/oct2024/3/js/script.js HTTP/1.1\r\nHost: cdn.nightdestruct.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://roblox-custom-daily-reward-script.pages.dev/\r\nOrigin: https://roblox-custom-daily-reward-script.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 08:40:21 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 15 May 2025 09:23:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KSDU%2FIGiJJTBgGVjTlEszbCffE7ONTHt7lx0xVjj9UHy1WePQLHcCijWwRn3WK0oN7fVDZLUl4SrGElLt9W%2FhoydNpirmivSnIs6b%2B0qSNrct%2FnKtxVymrSS6Zf%2FAbg5Ru6%2FxXPRlqQ%3D\"}]}\r\ncf-cache-status: MISS\r\netag: W/\"6825b296-1bd\"\r\ncontent-encoding: br\r\ncf-ray: 9f5df5dcb8d056b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":445,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"aaea974c4b82bbc952ae3de1d6302425","sha1":"8fe1d7928b3b0d234e22d1f7a83c2fa611ceab77","sha256":"0652d9a42ce8605bbf9e3e88d0f533cefc3e74f90448f9e00d960bd26a52cdce","sha512":"8f5c6c0155645a8a091c064e68ade1af77c59f7f8561eea80185c44434b844787b3eca6b6368e8009c283d861a0290b9758a0d6411027662f598151230e351b1","ssdeep":"","tlshash":"43f02714d16d513486bb52a3739b07ef29b102aed40a809e311c874f18b1da226c196f","first_seen":"2023-12-22T12:44:21Z","last_seen":"2026-07-22T02:48:25.189561Z","times_seen":665,"resource_available":false,"data":null}},"time_used":603,"timings":{"blocked":47,"dns":13,"connect":5,"send":0,"wait":508,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://roblox-custom-daily-reward-script.pages.dev/","date":"2026-05-03T08:40:22.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"preferencenail.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 01:34:17 GMT","end":"Mon, 27 Jul 2026 01:34:16 GMT"},"fingerprint":{"sha1":"95:86:03:59:0E:03:98:91:87:F0:07:36:44:10:95:8E:67:97:47:D8","sha256":"51:F3:91:79:18:08:9A:FD:A7:80:AD:AA:80:FB:C8:8B:AE:27:FD:79:25:B6:37:2F:1B:C5:60:67:25:A8:A7:02"}}},"request":{"raw":"GET /sfp.js HTTP/1.1\r\nHost: preferencenail.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://roblox-custom-daily-reward-script.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:40:22 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nContent-Length: 32181\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nVary: Accept-Encoding\r\nHost: preferencenail.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 491778eccfac7c0e46348c1955462094\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":85379,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-07-27T20:35:09.544129Z","times_seen":25068,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/si/71/36/d9/7136d9d7eb7ce81a8bf8a865955ce95d/1680149780.png","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roblox-custom-daily-reward-script.pages.dev/","date":"2026-05-03T08:40:23.542Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 02:33:25 GMT","end":"Fri, 05 Jun 2026 02:33:24 GMT"},"fingerprint":{"sha1":"4A:66:11:51:1F:1F:F3:84:B6:E4:4F:81:C1:03:83:9F:01:17:7E:82","sha256":"DA:55:E3:02:D5:3C:4E:3A:51:ED:21:0D:F4:32:52:C2:C5:31:87:50:DC:AB:13:D9:93:4A:15:0C:D9:8C:D6:4F"}}},"request":{"raw":"GET /si/71/36/d9/7136d9d7eb7ce81a8bf8a865955ce95d/1680149780.png HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 08:40:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 126360\r\nserver: nginx/1.21.6\r\nlast-modified: Thu, 30 Mar 2023 04:16:29 GMT\r\netag: \"64250d1d-1ed98\"\r\nexpires: Tue, 05 May 2026 08:40:23 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":126360,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 320 x 180, 8-bit/color RGBA, non-interlaced","md5":"41f4b2ca195f511c887edd41139628b2","sha1":"e5d89c34cd328a03dff19ea3e4dac96d46dcccad","sha256":"68643d88434bb202c0a963a1330d3bfb7679fd3bc177f2f64d3ac76fded15eb7","sha512":"e852323c5190d9e721ebfdd687169ce71ed866085d0d2593fdfa73f63ecfa6a1cb038c210651628696ba48568e0084f375d7e5716525dd742337cd88c342a6a9","ssdeep":"3072:tdoVkGljQsodkkuIsC2tphyGTlIeSmV9x4/pY7LSCq0BLO:noSGF2dkzIsC2tpht+eSii/pWY","tlshash":"48c312cdf46973d54c29cdcc8b6e60a8dfeb9d81502c6d03992554c5e2bd8fea88078e","first_seen":"2023-06-24T15:48:47Z","last_seen":"2026-07-24T10:21:47.810995Z","times_seen":1214,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://roblox-custom-daily-reward-script.pages.dev/","date":"2026-05-03T08:40:24.447Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 05:19:27 GMT","end":"Wed, 01 Jul 2026 05:19:26 GMT"},"fingerprint":{"sha1":"BF:D8:14:32:18:86:B9:95:54:75:8D:F9:5F:29:DE:4E:F8:F8:F7:13","sha256":"0E:FA:80:0B:F4:13:81:81:4D:CF:50:35:5A:DD:DB:FA:00:0B:34:B2:2D:5D:28:08:E4:45:1F:2C:EF:D2:21:C2"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://roblox-custom-daily-reward-script.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 29 Apr 2026 22:40:32 GMT\r\nexpires: Thu, 29 Apr 2027 22:40:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 295192\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-07-27T21:18:37.265704Z","times_seen":246647,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":9,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/cti/1b/99/2d/1b992db9bb069d97dd26f898003dfc5e/1716369575.jpg","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roblox-custom-daily-reward-script.pages.dev/","date":"2026-05-03T08:40:24.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 02:33:25 GMT","end":"Fri, 05 Jun 2026 02:33:24 GMT"},"fingerprint":{"sha1":"4A:66:11:51:1F:1F:F3:84:B6:E4:4F:81:C1:03:83:9F:01:17:7E:82","sha256":"DA:55:E3:02:D5:3C:4E:3A:51:ED:21:0D:F4:32:52:C2:C5:31:87:50:DC:AB:13:D9:93:4A:15:0C:D9:8C:D6:4F"}}},"request":{"raw":"GET /cti/1b/99/2d/1b992db9bb069d97dd26f898003dfc5e/1716369575.jpg HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 08:40:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 19495\r\nserver: nginx/1.21.6\r\nlast-modified: Wed, 22 May 2024 09:19:43 GMT\r\netag: \"664db8af-4c27\"\r\nexpires: Tue, 05 May 2026 08:40:24 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19495,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 320x50, components 3","md5":"156a6598429d32bc2f310cc00e23687b","sha1":"71f4bed70341afce64b1c4f766007155663c4fce","sha256":"288c6739b91b0dac22e2b7c187fa2b0345921a4c8a34d5b2a70750692bdb3c0a","sha512":"c2785547733375e4ca240a4587539b09ff3edcbb0a12ba9a762893b4bbb0a9c9c0eea63c80626c0fb7f4bbab5584aaf79dc4d5a58d706b9dfc9554cfe512f313","ssdeep":"384:nLBykQ8ZiFfQvV4QRwYPjAwfc74uenRtQc7uXiDSKWniJKppQHgfWgE:LBY8kFfQvNdPjvvuykc7uQWikpOF","tlshash":"f992d07b543b235253a8bcc43aeba51f2eb5cfc197512ace273c30b4de210b64d41526","first_seen":"2024-08-20T20:54:57Z","last_seen":"2026-05-25T14:13:43.525292Z","times_seen":112,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adxpy.pages.dev/magic.js","fqdn":"adxpy.pages.dev","domain":"adxpy.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://roblox-custom-daily-reward-script.pages.dev/","date":"2026-05-03T08:40:19.247Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adxpy.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 00:44:54 GMT","end":"Sat, 04 Jul 2026 01:43:34 GMT"},"fingerprint":{"sha1":"B9:0E:27:18:36:32:2C:B8:F2:E5:2F:50:96:88:4F:CF:54:4C:10:3C","sha256":"ED:9F:40:13:F5:DC:3F:FE:75:A2:AF:61:F4:2D:D7:17:14:E2:C8:D4:C5:19:DB:9E:88:D1:73:59:BF:13:F7:D1"}}},"request":{"raw":"GET /magic.js HTTP/1.1\r\nHost: adxpy.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://roblox-custom-daily-reward-script.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 03 May 2026 08:40:19 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=en5isHQviZ%2FfdOqf6nwFzPbYEKYOYmIGHqWgt8GFw0R50OyfhfpM8s7tj%2FvyuYaAk4HQS7JJ6dcu7EABt2fRfDemuDHeStKmmB5R3hEsiucwNjHkkp0C7iKxlEY3f1UQkCE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"c49d59185af245830cb91e4818c56238\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f5df5d0496b569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":671,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"9bcbb02a6bf94ae8762ddcda5d1c80d3","sha1":"fade830681bb5b7b138db5482e7a495c1c9b296a","sha256":"b26277e44f2fe29283a55a632166f8a45dd1407a0970c13e08287406f94a0772","sha512":"54914b0f4d7625f4e40e13b11bb2bfd47c87dc6a14714c427c48c75e955980826d6605abbac7b3ca6c043356f1b91618b6f16abaf6be339be38d8ffa825e71e5","ssdeep":"","tlshash":"c101fe6e229200a84d7a509803a3fa0cfda832577160c0e1bacedb602f35f20419e4d8","first_seen":"2025-12-08T23:25:47.209165Z","last_seen":"2026-07-26T23:38:52.775926Z","times_seen":387,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"immigrationacre.com/c2/07/ec/c207ec84c2456af201cc563cadc36c46.js","fqdn":"immigrationacre.com","domain":"immigrationacre.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://roblox-custom-daily-reward-script.pages.dev/","date":"2026-05-03T08:40:19.305Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"immigrationacre.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 22:44:59 GMT","end":"Sat, 20 Jun 2026 22:44:58 GMT"},"fingerprint":{"sha1":"C5:C0:F1:09:DF:66:79:21:CE:6B:25:C3:DC:5A:3B:4E:6C:24:00:FD","sha256":"14:5E:A4:DE:46:F2:FF:8F:7D:14:D8:7C:E6:33:BC:41:57:AD:BF:24:AC:C4:3C:0F:A7:EE:34:BE:D3:48:56:5B"}}},"request":{"raw":"GET /c2/07/ec/c207ec84c2456af201cc563cadc36c46.js HTTP/1.1\r\nHost: immigrationacre.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://roblox-custom-daily-reward-script.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:40:19 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 34777\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: X-Device-User-Agent,X-OperaMini-Phone-UA,Sec-CH-UA-Platform-Version,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Platform,Device-Stock-UA,X-UCBrowser-Device-UA,User-Agent,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-UA-Mobile\r\nx-envoy-upstream-service-time: 12\r\nHost: immigrationacre.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 3e94998dd9ea3f92c104cb65e44e1675\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":92505,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"c192ae25bde5fa6681fe8443edd59461","sha1":"c3ac5049dfa2f55ceaa0e8924c7b5fb559b5795a","sha256":"c23ee8f38b1bbfa9f0b085e281dcc1b3c14b296770b723c144396bee02ff2497","sha512":"35f364eb2d2c8a082a73693f2ea54c2eb060c89b86a6bebf210865190e623c379ce37e3305fb459bde18b3bbbe830037d93db44e0ec8f3b74655e80d0c407f6b","ssdeep":"1536:2l2eABAdWrl7QJWX8jlv+w31PTz5Ysk5qMUP+0v2:2dSAkrdQJoYl2wlBFkLF","tlshash":"2793c78c7f92f0f5039a24b3232fac16f2ab1d5124fce444d903a9e5ae25319d57ad6c","first_seen":"2026-05-03T06:10:08.458616Z","last_seen":"2026-05-03T08:45:53.626253Z","times_seen":4,"resource_available":true,"data":null}},"time_used":888,"timings":{"blocked":343,"dns":41,"connect":96,"send":0,"wait":109,"receive":95,"ssl":193},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"immigrationacre.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"immigrationacre.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"immigrationacre.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"protrafficinspector.com/stats","fqdn":"protrafficinspector.com","domain":"protrafficinspector.com","tld":"com"},"ip":{"addr":"18.195.43.118","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://roblox-custom-daily-reward-script.pages.dev/","date":"2026-05-03T08:40:19.904Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"statistics.it.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 14 Apr 2026 00:00:00 GMT","end":"Wed, 28 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:66:77:D7:9E:99:80:D4:C4:22:4B:79:2F:16:2B:49:2C:08:07:99","sha256":"54:26:39:E0:45:11:B3:20:EE:6C:3E:B3:C0:57:5D:F2:28:8C:E0:E1:C4:F0:BD:56:E7:8C:91:6B:40:CC:0E:0D"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: protrafficinspector.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://roblox-custom-daily-reward-script.pages.dev/\r\nOrigin: https://roblox-custom-daily-reward-script.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 08:40:20 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\nserver: fasthttp\r\naccept-ch: Sec-CH-UA-Platform,Sec-CH-UA-Model,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA,Sec-CH-UA-Platform-Version,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Mobile,Device-Stock-UA,User-Agent,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Full-Version-List\r\naccess-control-allow-origin: https://roblox-custom-daily-reward-script.pages.dev\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nset-cookie: uid_id2=3b204e8f-85a0-4ad8-92c8-058fb07c1b91:2:1; expires=Wed, 30 Apr 2036 08:40:20 GMT; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"dfac55e675fa26ed7a0e04cf1580175d","sha1":"3f5f67cacdbf812beae561aa08aa48776d05631e","sha256":"1d3e612423da92350277af9515063e4c5313a2516441018aab481a5af54b4071","sha512":"97bbe6fe0640ced69f1142a104d59c835cb94a0ff54a8672129aa468eb931bd762e8f5dc1d447b101535b04b995a323c956d36e10db43cf39342de2e6a7fcd65","ssdeep":"","tlshash":"86900457145dc1141140355703004475043cc7533c554444dc53f33c570073d4735300","first_seen":"2026-05-03T08:40:46.51955Z","last_seen":"2026-05-03T08:40:46.51955Z","times_seen":1,"resource_available":false,"data":null}},"time_used":598,"timings":{"blocked":286,"dns":0,"connect":24,"send":0,"wait":21,"receive":0,"ssl":263},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://roblox-custom-daily-reward-script.pages.dev/","date":"2026-05-03T08:40:19.902Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"preferencenail.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 01:34:17 GMT","end":"Mon, 27 Jul 2026 01:34:16 GMT"},"fingerprint":{"sha1":"95:86:03:59:0E:03:98:91:87:F0:07:36:44:10:95:8E:67:97:47:D8","sha256":"51:F3:91:79:18:08:9A:FD:A7:80:AD:AA:80:FB:C8:8B:AE:27:FD:79:25:B6:37:2F:1B:C5:60:67:25:A8:A7:02"}}},"request":{"raw":"GET /sfp.js HTTP/1.1\r\nHost: preferencenail.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://roblox-custom-daily-reward-script.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:40:19 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nContent-Length: 32181\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nVary: Accept-Encoding\r\nHost: preferencenail.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: e1d05371bdbfbcfd97211bc9594c45d3\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":85379,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-07-27T20:35:09.544129Z","times_seen":25068,"resource_available":true,"data":null}},"time_used":175,"timings":{"blocked":67,"dns":1,"connect":19,"send":0,"wait":20,"receive":19,"ssl":46},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"realizationnewestfangs.com/ren.gif?sid=H4sIAAAAAAAC_1RSy4scRRyuXoMgHsT4uCkN5mDAma1-zEx3cgs-DppdMZEgnuq5ltvT1enqnpmMl42RnKMgiCD0fjObvQTR_0BmBQ-KkL7NIXvQk2c1XmV2B1br8HvUVxTf7_t9d_frY9JFzZbvXrVTk2Vss9el_qs3TC7t2Plb1_2Adull_4bJ-_Flf7IK5ehSEMVdetF_S4lduxnSgNKABv6bplTaTjZPUJjiQRp0U9qNw27QizEp_9-72oNjHuTomJyHke0zv-sPYcQC-fC715XbrWzx2hvDOmOVLTGSh-_nu7kd5xielbr0oPPD9WtY1xLy1QZsfrieAHY0X00Ablqy8eIj8PxwTRN8dHDKlGdQObh8GuPRAipbwLAFhL0DIx8SQEhsbSMf3t-y5ZjdOkXZCm3Jucd_woxbcu7R88iH317JzMS_ZrO6MjZ3mOgGZrKA2VmgqI9QTTdgxkcQ1acw8ley-fgd5MP5tsssjFxeiHhIY5XoTtJjtBMzmXTSUCQd2ks0pwMR8DQ4kcjoBZjbQO081MZDrT3UhYehXPoxTWIRsKivUykGNGZxLBWnaRJSylIxQC1uw8h7EOUeinIPu-aLlngvXG0J-fsTOOnBVQQj2RzIzIWuuS8zV_NgncN1jpqZrXb22YGtdlROwMp7KGUzN8VNdweiemI21U7O7CowXjUzxmUzM7IiKG8uL9AglUpo1VFRMOgMaEI7LNC6M6A9yZiQirNgrl1VN_vFMXl2Jbb35Tc_YVctfRHSgRJJLMK412c6pIEQvX4kmBRRX8R9ONPAuA0w52FqWvK2vojCtOTlu3-AsyO47AjCeGD1S2DjBuyjBtP8gTa5HBmhusIOIW2DojqH6pa3nx2T52bvXb_yw8nOP_jNgxI_k_WBKBsUZYOPzY8EO9nt77eLygzNlK1McK1ilXoSzDx8JYQwLTn_tTpxY_jLJYhiD644-8lZAl54yAxBps7uGW_g_tPzs3rffYad0gPPvBnPSm_OszL7_JSkM0u_F_KonyR9pftSRzIKI5n2qEpjlvbjNO6hcq3556m__g0AAP__z93dMgsEAAA=","fqdn":"realizationnewestfangs.com","domain":"realizationnewestfangs.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roblox-custom-daily-reward-script.pages.dev/","date":"2026-05-03T08:40:20.615Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"realizationnewestfangs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 23:41:18 GMT","end":"Sun, 26 Jul 2026 23:41:17 GMT"},"fingerprint":{"sha1":"A3:A7:19:A7:E1:1E:FA:B7:D5:D2:AB:89:E2:E5:2D:BA:31:4C:DC:31","sha256":"9B:B1:9D:73:D4:D6:68:DF:63:E8:A6:F5:27:EB:47:26:AA:6F:52:E3:A6:56:1C:FF:EE:AC:3E:F6:06:CE:09:CA"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_1RSy4scRRyuXoMgHsT4uCkN5mDAma1-zEx3cgs-DppdMZEgnuq5ltvT1enqnpmMl42RnKMgiCD0fjObvQTR_0BmBQ-KkL7NIXvQk2c1XmV2B1br8HvUVxTf7_t9d_frY9JFzZbvXrVTk2Vss9el_qs3TC7t2Plb1_2Adull_4bJ-_Flf7IK5ehSEMVdetF_S4lduxnSgNKABv6bplTaTjZPUJjiQRp0U9qNw27QizEp_9-72oNjHuTomJyHke0zv-sPYcQC-fC715XbrWzx2hvDOmOVLTGSh-_nu7kd5xielbr0oPPD9WtY1xLy1QZsfrieAHY0X00Ablqy8eIj8PxwTRN8dHDKlGdQObh8GuPRAipbwLAFhL0DIx8SQEhsbSMf3t-y5ZjdOkXZCm3Jucd_woxbcu7R88iH317JzMS_ZrO6MjZ3mOgGZrKA2VmgqI9QTTdgxkcQ1acw8ley-fgd5MP5tsssjFxeiHhIY5XoTtJjtBMzmXTSUCQd2ks0pwMR8DQ4kcjoBZjbQO081MZDrT3UhYehXPoxTWIRsKivUykGNGZxLBWnaRJSylIxQC1uw8h7EOUeinIPu-aLlngvXG0J-fsTOOnBVQQj2RzIzIWuuS8zV_NgncN1jpqZrXb22YGtdlROwMp7KGUzN8VNdweiemI21U7O7CowXjUzxmUzM7IiKG8uL9AglUpo1VFRMOgMaEI7LNC6M6A9yZiQirNgrl1VN_vFMXl2Jbb35Tc_YVctfRHSgRJJLMK412c6pIEQvX4kmBRRX8R9ONPAuA0w52FqWvK2vojCtOTlu3-AsyO47AjCeGD1S2DjBuyjBtP8gTa5HBmhusIOIW2DojqH6pa3nx2T52bvXb_yw8nOP_jNgxI_k_WBKBsUZYOPzY8EO9nt77eLygzNlK1McK1ilXoSzDx8JYQwLTn_tTpxY_jLJYhiD644-8lZAl54yAxBps7uGW_g_tPzs3rffYad0gPPvBnPSm_OszL7_JSkM0u_F_KonyR9pftSRzIKI5n2qEpjlvbjNO6hcq3556m__g0AAP__z93dMgsEAAA= HTTP/1.1\r\nHost: realizationnewestfangs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://roblox-custom-daily-reward-script.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=3b204e8f-85a0-4ad8-92c8-058fb07c1b91:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl26582471=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:40:20 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Sec-CH-UA-Platform-Version,Sec-CH-UA,Sec-CH-UA-Platform,X-UCBrowser-Device-UA,User-Agent,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-UA-Mobile,Device-Stock-UA,X-Device-User-Agent,X-OperaMini-Phone-UA\r\nx-envoy-upstream-service-time: 4\r\nHost: realizationnewestfangs.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 670ed30a94e6fc6bb517b7d61d67b41d\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T21:21:08.536412Z","times_seen":17569395,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":101,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.nightdestruct.com/sb/ssp/vpn/classic-push/big1/js/jquery.min.js","fqdn":"cdn.nightdestruct.com","domain":"nightdestruct.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://roblox-custom-daily-reward-script.pages.dev/","date":"2026-05-03T08:40:23.544Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nightdestruct.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 16:21:26 GMT","end":"Sun, 28 Jun 2026 16:21:25 GMT"},"fingerprint":{"sha1":"77:BA:39:E3:87:1C:89:74:C5:36:C2:0F:E9:4C:0E:35:C4:92:A6:BA","sha256":"5F:17:E6:F7:42:E9:5F:B9:9E:03:47:36:9F:79:03:3B:E2:C2:66:ED:E9:3D:14:AB:29:B0:52:4A:62:57:C4:91"}}},"request":{"raw":"GET /sb/ssp/vpn/classic-push/big1/js/jquery.min.js HTTP/1.1\r\nHost: cdn.nightdestruct.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 03 May 2026 08:40:23 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:19:42 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nage: 2902547\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jI8YI%2FZMd4NUYyJHWSlAhU7OZooCPr81Y3LKwVUwVYvdVW5c8HeTJt%2F%2BnjjyQDyFp7sUHbDmM5wMVjz1pr9BsHD6bPYeWC1W4J%2Bn4GbXoFykQc4EEK%2BPSXEg%2FG5UI4%2FLnlAcCrfDG30%3D\"}]}\r\netag: W/\"65aa84fe-1499c\"\r\ncontent-encoding: br\r\ncf-ray: 9f5df5eb2a3e5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84380,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32025)","md5":"4a356126b9573eb7bd1e9a7494737410","sha1":"8258d046f17dd3c15a5d3984e1868b7b5d1db329","sha256":"22642f202577f0ba2f22cbe56b6cf291a09374487567cd3563e0d2a29f75c0c5","sha512":"005c3102459dbf145df6a858629d6a6de4598fafe24cd989d86170731b0c3b3c304da470cf66bfd935f6db911b723df0857b5ed561906f7f1c5c4e63ed9430de","ssdeep":"1536:/P10iSi65U/dXXeyhzeBuG+HYE0mdkuJO1z6Oy4sh3J1A72BjmN7TwpDKba98HrZ:++414Jiz6fh6lTqya98HrZ","tlshash":"dc83d6d9b2c67062977734b851bf510bb17a98dab40c8c60f0a4d8e47eb4a8d517bf2c","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-07-27T19:06:11.864744Z","times_seen":19986,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roblox-custom-daily-reward-script.pages.dev/","fqdn":"roblox-custom-daily-reward-script.pages.dev","domain":"roblox-custom-daily-reward-script.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-03T08:40:18.117Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roblox-custom-daily-reward-script.pages.dev","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 19:15:58 GMT","end":"Thu, 23 Jul 2026 19:15:57 GMT"},"fingerprint":{"sha1":"51:46:56:EF:BA:8D:E0:25:30:40:C3:C1:F7:B5:BF:30:42:81:FF:DC","sha256":"43:60:CA:66:7E:22:83:3B:61:14:89:8E:AC:54:6E:24:4C:C5:90:6A:95:59:44:A3:0B:6E:73:1F:6A:0B:37:84"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: roblox-custom-daily-reward-script.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 08:40:18 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aPJLKRJPRzwVPhpVlnbxuN4jIuSCuzXPRdjljCERwryEc7bXlzA5iwS%2FvVQX9GE024dL4tBPP6R2llnLYWembkQDCCAmZJQuEpzeKEV09vAjzggXslnvlTGX%2FaOSOhcSSBKiYGgGVCNmkqlIjSDIzrraKm6k%2FdF0g57HRcKl\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f5df5c98fa2b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37322,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (19890)","md5":"6fa5db05758eb37278fd8f90fe72b0dd","sha1":"034db9076fec0f373f828e5f9af0705d5a5729ab","sha256":"f6f1134d835887f712d85d17df1ab60d317d5c94a54d7071eaab50a30b746ee8","sha512":"87ce125409f210837c7f6dca31da830a00e503baaa99835c0ab66934dadbeba975f67e520bf19bbf514f2bd0fa55356f22d0f1366ecfdd4b67c1ed58901e2072","ssdeep":"768:JPOqkftHoHZTO1rlVLSbBx/+qgDtg2KHWZbuxbVtSFC/++9g+L7rRWxtzdz3Jm/J:WHo5TO1rnLS9xW67HW1uxhtSFCW+Gp+J","tlshash":"e6f23b5fdf30033901d13a75932efebda357806b8255d0a0f4aea59c208979fa1378e5","first_seen":"2026-05-03T08:40:46.521631Z","last_seen":"2026-05-03T08:40:46.521631Z","times_seen":1,"resource_available":false,"data":null}},"time_used":336,"timings":{"blocked":46,"dns":30,"connect":1,"send":0,"wait":237,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adxpy.pages.dev/adx-mainstream.json","fqdn":"adxpy.pages.dev","domain":"adxpy.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://roblox-custom-daily-reward-script.pages.dev/","date":"2026-05-03T08:40:19.134Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adxpy.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 00:44:54 GMT","end":"Sat, 04 Jul 2026 01:43:34 GMT"},"fingerprint":{"sha1":"B9:0E:27:18:36:32:2C:B8:F2:E5:2F:50:96:88:4F:CF:54:4C:10:3C","sha256":"ED:9F:40:13:F5:DC:3F:FE:75:A2:AF:61:F4:2D:D7:17:14:E2:C8:D4:C5:19:DB:9E:88:D1:73:59:BF:13:F7:D1"}}},"request":{"raw":"GET /adx-mainstream.json HTTP/1.1\r\nHost: adxpy.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://roblox-custom-daily-reward-script.pages.dev/\r\nOrigin: https://roblox-custom-daily-reward-script.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 08:40:19 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k9FQc%2FjMtTxZ2r5yOY3gUonUCsi%2FUOEgdgVsHfR%2Bd43wZRPJ%2FnDbFawWQBSIcK6bvQgPU4G%2BPgPwMEEDx8mbcmIM2EjhNaCzWqB%2FS2GC0mIxOEu%2FaKT%2FbmB%2BUWkClxqAdM4%3D\"}]}\r\netag: W/\"7b49849f40013f93e7f062a5ea9f812c\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f5df5cffb2c5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1453,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"6ffbb69834723feb9c7113271b1c2ea2","sha1":"8bfa604b64d94fad6bbeaf5c580175e4001d4dc5","sha256":"46498f749be8fd2b102eb3563d490c7890b94ed1d0b5b133e2cc3c444ed048c2","sha512":"7b15f328c00533c83fa7c65fff45e5fff27b012955d49affd579a7c7eb14a66839822b50b7947d609d53e08419128bef2773fcb5bc6f95b77731662acf7cb001","ssdeep":"","tlshash":"f9319e999f1cf29410b24ad23c33e0bef598be063908dc9551dc9c6ac2a43e04d57666","first_seen":"2026-01-30T08:57:52.033645Z","last_seen":"2026-07-26T23:38:52.770972Z","times_seen":290,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":58,"dns":30,"connect":4,"send":0,"wait":23,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.show-creative1.com/sb/notifications/utility/default/us/blog/Progamer/flip_icon/oct2024/3/index.html","fqdn":"cdn.show-creative1.com","domain":"show-creative1.com","tld":"com"},"ip":{"addr":"104.21.15.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://roblox-custom-daily-reward-script.pages.dev/","date":"2026-05-03T08:40:20.617Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"show-creative1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Apr 2026 01:42:43 GMT","end":"Thu, 02 Jul 2026 02:41:28 GMT"},"fingerprint":{"sha1":"E5:DE:57:6E:2B:86:96:31:27:7E:74:48:4B:76:32:AA:86:9A:48:06","sha256":"9A:F1:DF:30:DB:8E:88:16:44:D7:78:1A:9B:36:AB:CD:11:72:FF:FC:89:21:83:88:2D:A7:D7:CF:92:F1:49:CB"}}},"request":{"raw":"GET /sb/notifications/utility/default/us/blog/Progamer/flip_icon/oct2024/3/index.html HTTP/1.1\r\nHost: cdn.show-creative1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://roblox-custom-daily-reward-script.pages.dev/\r\nOrigin: https://roblox-custom-daily-reward-script.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 08:40:21 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Thu, 05 Jun 2025 16:29:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JwakGGx03%2BuxUM5%2BE21u0uFNGZQIvwLMoGSARXOQEhJdmIYLuh%2FUkB1QCGthmYqd%2BsLY3d2GE1VSfWe28dWduNYBIdkEO%2BqGbTArW%2BovEl0wDgHSjQFvvrDYJP98KyeEeiaKIKY1dJaM\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9f5df5d93d685690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1711,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"ff393717030c83258188be56d47bb367","sha1":"d5a6a58ba15a35e986f8508b91388653a155ba4a","sha256":"eb38157ffd457dd5bf0d01310f6514cfbfe3e1fafa98a4fda80c9ed7791a508c","sha512":"184886e529b52030296b0ee0f989ac81d4d242811c01842291ccecf1ee2f85f7579f0a75c005d14f4d9ea4a7f00e16ab4e84836834005009ea27819628ead3ee","ssdeep":"","tlshash":"d331588a3ae8e47102d24697bf317f1add83e44b9d0a201073ed4a59afd5e90ca1330b","first_seen":"2025-06-13T16:42:44.076375Z","last_seen":"2026-07-06T14:19:55.87085Z","times_seen":153,"resource_available":false,"data":null}},"time_used":574,"timings":{"blocked":59,"dns":35,"connect":1,"send":0,"wait":454,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"cdn.show-creative1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"cdn.show-creative1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"realizationnewestfangs.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.nightdestruct.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2FProgamer%2Fflip_icon%2Foct2024%2F3%2Fcss%2Fstyle.css\u0026l=10008\u0026fd=643","fqdn":"realizationnewestfangs.com","domain":"realizationnewestfangs.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roblox-custom-daily-reward-script.pages.dev/","date":"2026-05-03T08:40:21.832Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"realizationnewestfangs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 23:41:18 GMT","end":"Sun, 26 Jul 2026 23:41:17 GMT"},"fingerprint":{"sha1":"A3:A7:19:A7:E1:1E:FA:B7:D5:D2:AB:89:E2:E5:2D:BA:31:4C:DC:31","sha256":"9B:B1:9D:73:D4:D6:68:DF:63:E8:A6:F5:27:EB:47:26:AA:6F:52:E3:A6:56:1C:FF:EE:AC:3E:F6:06:CE:09:CA"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.nightdestruct.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2FProgamer%2Fflip_icon%2Foct2024%2F3%2Fcss%2Fstyle.css\u0026l=10008\u0026fd=643 HTTP/1.1\r\nHost: realizationnewestfangs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://roblox-custom-daily-reward-script.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=3b204e8f-85a0-4ad8-92c8-058fb07c1b91:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl26582471=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:40:21 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: X-Device-User-Agent, X-UCBrowser-Device-UA, User-Agent, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Mobile, X-OperaMini-Phone-UA, Sec-CH-UA, Sec-CH-UA-PlatformUser-Agent, Device-Stock-UA\r\nHost: realizationnewestfangs.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T21:21:08.536412Z","times_seen":17569395,"resource_available":true,"data":null}},"time_used":127,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://roblox-custom-daily-reward-script.pages.dev/","date":"2026-05-03T08:40:22.204Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 05:19:27 GMT","end":"Wed, 01 Jul 2026 05:19:26 GMT"},"fingerprint":{"sha1":"BF:D8:14:32:18:86:B9:95:54:75:8D:F9:5F:29:DE:4E:F8:F8:F7:13","sha256":"0E:FA:80:0B:F4:13:81:81:4D:CF:50:35:5A:DD:DB:FA:00:0B:34:B2:2D:5D:28:08:E4:45:1F:2C:EF:D2:21:C2"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://roblox-custom-daily-reward-script.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 29 Apr 2026 22:40:32 GMT\r\nexpires: Thu, 29 Apr 2027 22:40:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 295190\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-07-27T21:18:37.265704Z","times_seen":246647,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":61,"dns":6,"connect":9,"send":0,"wait":11,"receive":9,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.nightdestruct.com/sb/ssp/vpn/classic-push/big1/css/style.css","fqdn":"cdn.nightdestruct.com","domain":"nightdestruct.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://roblox-custom-daily-reward-script.pages.dev/","date":"2026-05-03T08:40:23.431Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nightdestruct.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 16:21:26 GMT","end":"Sun, 28 Jun 2026 16:21:25 GMT"},"fingerprint":{"sha1":"77:BA:39:E3:87:1C:89:74:C5:36:C2:0F:E9:4C:0E:35:C4:92:A6:BA","sha256":"5F:17:E6:F7:42:E9:5F:B9:9E:03:47:36:9F:79:03:3B:E2:C2:66:ED:E9:3D:14:AB:29:B0:52:4A:62:57:C4:91"}}},"request":{"raw":"GET /sb/ssp/vpn/classic-push/big1/css/style.css HTTP/1.1\r\nHost: cdn.nightdestruct.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://roblox-custom-daily-reward-script.pages.dev/\r\nOrigin: https://roblox-custom-daily-reward-script.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 08:40:23 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:19:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"65aa84fe-102f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oikJRYq9tA6ECpv7fkJle9zWbzEbVaFyP1N5XRUzvY76vZL98LpUi6QBeCVJS3R8Lf46b%2BjyzQXSEp5ncUkPm7ki6Gg0k6izg0LguFW50FHQ%2Fc5vfctesSfoP9iNSB4k8nCIHdaJdAo%3D\"}]}\r\ncf-ray: 9f5df5ea6c1a56b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4143,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"42edbe7ea0d50c15a58bcf3cd1f43df2","sha1":"5a96da3c26cc968e5d1e60959aaaf5bad7e69e0c","sha256":"e12dbbf55a5eca972392177c56db92c2d803a1f3d3052caed3fb8d48a1eb45ae","sha512":"3fedfc13ddece3079276d608e54e48e96cf1111800c0c3a89e7ada26676ece61e6454103e8f00d573f6853ee34fec799e4c2211f3d2361b9cedc9a3611d020d4","ssdeep":"96:iTMXPnMbz7yHP/qmJxMX5fivTMXEtsBxkTMG2bCIbkOWfQbkOWfAbkO3oYQD9ytP:IMXUXg3JxMX5oMXEt+x/nbP3T3D3jV","tlshash":"7381315367230e40b506c9a63fa57b4323284523864be9793fc1674c8fca69dd2d238f","first_seen":"2024-03-15T10:41:13Z","last_seen":"2026-07-24T10:21:47.831392Z","times_seen":1207,"resource_available":false,"data":null}},"time_used":541,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":541,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.nightdestruct.com/sb/ssp/vpn/classic-push/big1/js/script.js","fqdn":"cdn.nightdestruct.com","domain":"nightdestruct.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://roblox-custom-daily-reward-script.pages.dev/","date":"2026-05-03T08:40:23.584Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nightdestruct.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 16:21:26 GMT","end":"Sun, 28 Jun 2026 16:21:25 GMT"},"fingerprint":{"sha1":"77:BA:39:E3:87:1C:89:74:C5:36:C2:0F:E9:4C:0E:35:C4:92:A6:BA","sha256":"5F:17:E6:F7:42:E9:5F:B9:9E:03:47:36:9F:79:03:3B:E2:C2:66:ED:E9:3D:14:AB:29:B0:52:4A:62:57:C4:91"}}},"request":{"raw":"GET /sb/ssp/vpn/classic-push/big1/js/script.js HTTP/1.1\r\nHost: cdn.nightdestruct.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://roblox-custom-daily-reward-script.pages.dev/\r\nOrigin: https://roblox-custom-daily-reward-script.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 03 May 2026 08:40:24 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:19:42 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sxGIFZ2p5nWFV6DYY7fp6cqYRB4GPHhtY54pXOCHvf4WAHzeqoqAWutIO9iI6o2aGQ%2Fqpa7oPzX0yfoZJUlfyw9xQh%2Ba%2Bet0igDJ6%2B1Nt52Ri7ffXEC2tdZzUhDngbnYk3PxwPjkg24%3D\"}]}\r\netag: W/\"65aa84fe-3be\"\r\ncontent-encoding: br\r\ncf-ray: 9f5df5eb6db1568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":958,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"89918681df9f363bb293cb027c2f1113","sha1":"cf7dca97b09ed3d03e821b407286539519a9f037","sha256":"6648e7501f858c8ffaf2b35736dbd37f2d22afb2c781ee552d7c113d77413b9e","sha512":"f8e40eb5727465e78b1f20b08e6d22f07be52165043b01566c12f1022bea70e63cda516588ea504c7e927a63c9680f439b014b72d9a88b518956e2dc5474be67","ssdeep":"","tlshash":"1a117a27156883f06257f027a1572adaea32029fe81a9717721c06cd0ec47b913fa6e7","first_seen":"2023-04-05T07:51:04Z","last_seen":"2026-07-24T10:21:47.775886Z","times_seen":1558,"resource_available":false,"data":null}},"time_used":537,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":536,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roblox-custom-daily-reward-script.pages.dev/favicon-96x96.png","fqdn":"roblox-custom-daily-reward-script.pages.dev","domain":"roblox-custom-daily-reward-script.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roblox-custom-daily-reward-script.pages.dev/","date":"2026-05-03T08:40:18.902Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roblox-custom-daily-reward-script.pages.dev","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 19:15:58 GMT","end":"Thu, 23 Jul 2026 19:15:57 GMT"},"fingerprint":{"sha1":"51:46:56:EF:BA:8D:E0:25:30:40:C3:C1:F7:B5:BF:30:42:81:FF:DC","sha256":"43:60:CA:66:7E:22:83:3B:61:14:89:8E:AC:54:6E:24:4C:C5:90:6A:95:59:44:A3:0B:6E:73:1F:6A:0B:37:84"}}},"request":{"raw":"GET /favicon-96x96.png HTTP/1.1\r\nHost: roblox-custom-daily-reward-script.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://roblox-custom-daily-reward-script.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 03 May 2026 08:40:18 GMT\r\ncontent-type: image/png\r\ncontent-length: 3415\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"207249c5b01c104202965011f95037dc\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YVLwm6mrCSWKZZilkSE%2F6u2VeQtf25vgjY%2BhB4w%2BBd9GSESPp6BP3qtjlHDVU6P5sk1DJy%2Fn%2BjD93wvZd%2F7oN8rUk57khG%2B2ZS%2BYELpkNjn7rZprjFIz3Wp9MrAz%2F2kOu8AStxpT9dTNkSuBGl8gdrM7Tj59cqwyBlZLoP7r\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\ncf-ray: 9f5df5ce291f56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3415,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"18432ea15c0c7b7ef50ee1b42b9b29e3","sha1":"2b656e7a76d7a8d11ff020bd8bac15c6780c39ec","sha256":"27a2d2727b2c93679c945f8107ce5bd270d8dfc426c7abca1e975e46ac0d78e9","sha512":"0d9dfdd5af753545acac4819105170d4358fa8a619ee99f9754eaec45b48cbc8875409744d35d10676843b635bf1b065c0129e1ffdac68d921a39bd7e4632f87","ssdeep":"","tlshash":"0d615be0818b9c3abc969201820ac603fb35a0ce0e5a1a7e54f717c87f133bbb52c157","first_seen":"2025-10-29T04:02:15.906591Z","last_seen":"2026-07-26T16:40:43.763167Z","times_seen":402,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"realizationnewestfangs.com/impr.gif?sid=H4sIAAAAAAAC_1RSy4scRRyuXoMgHsT4uCkN5mDAma1-zExPcgs-DppdMZEgnuq5ltPT1enqnpmMl42RnKMgiCD0fDObvQTR_0BmBQ-KkL7NIXvQk2c1XmV2B1br8HvUVxTf7_t9d2fVMWmjYqt3r9qpSVO23WlT_9UbJpN27Pyd635A2_Syf8Nk3fiyP1mHYnQpiOI2vei_pcTAboc0oDSggf-mKZS2k-0TFCZ_0A_afdqOw3bQiTEp_t-7yoNjHuTomJyHkc0zv-sPYcQS2fC715UblDZ_7Y1hlbLSFhjJw_ezQWbHGYZnpS486Oxw8xrWNYR8tQWbHW4mgB0t1hOAm4ZsvfgIPDvc0AQfHZwy5SlUBi6fxni0hEqXMGwJYe_AyIcEEBI7u8iG93dsMWa3TlG2Rhty7vGfMOOGnHv0PLLht1dSM_Gv2bQqjc0cJrqGmSxh9pbIqyOU0y2Y8RFE-SmM_JVsP34H2XCx61ILI1cXIh7SWCW6lXQYbcVMJq1-KJIW7SSa054IeD84kcjoJZjbQuU8VMZDpT1UuYehXPkxTWIRsKir-1L0aMziWCpO-0lIKeuLHipxG0begyj2kRf7GJgvGuK9cLUh5O9P4KQHVxKMZH0gUxe6-r5MXcWDTQ43OarnttybsQNb7qmMgBX3UMh6YfKb7g5E-cR8qp2c23VgvKznjMt6bmRJUNxcXaBBXyqhVUtFQa_VowltsUDrVo92JGNCKs6ChXZlVc_yY_LsWmzvy29-wkCtfBHSnhJJLMK402U6pIEQnW4kmBRRV8RdOFPDuC0w52FqGvK2vojcNOTlu3-AsyO49AjCeGDVS2DjGuyjGtPsgTaZHBmh2sIOIW2NvDyH8pY3S4_Jc_P3rl_54WTnH_zmQYmfyeZAFDXyosbH5keCvfT297t5aYZmytYmuFayUj0JZh6-EkKYhpz_Wp24MfzlEkS-D5ef_eQsAc89pIYgVWf3jNdw_-n5WT1zn2Gv8MBTb87TwlvwtEg_PyXpzMrXkQoFpUmvG0SJVkEUS6E7SdyXXUajSKF0jfnnqb_-DQAA__8ztU3sCwQAAA==","fqdn":"realizationnewestfangs.com","domain":"realizationnewestfangs.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roblox-custom-daily-reward-script.pages.dev/","date":"2026-05-03T08:40:22.184Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"realizationnewestfangs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 23:41:18 GMT","end":"Sun, 26 Jul 2026 23:41:17 GMT"},"fingerprint":{"sha1":"A3:A7:19:A7:E1:1E:FA:B7:D5:D2:AB:89:E2:E5:2D:BA:31:4C:DC:31","sha256":"9B:B1:9D:73:D4:D6:68:DF:63:E8:A6:F5:27:EB:47:26:AA:6F:52:E3:A6:56:1C:FF:EE:AC:3E:F6:06:CE:09:CA"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1RSy4scRRyuXoMgHsT4uCkN5mDAma1-zExPcgs-DppdMZEgnuq5ltPT1enqnpmMl42RnKMgiCD0fDObvQTR_0BmBQ-KkL7NIXvQk2c1XmV2B1br8HvUVxTf7_t9d2fVMWmjYqt3r9qpSVO23WlT_9UbJpN27Pyd635A2_Syf8Nk3fiyP1mHYnQpiOI2vei_pcTAboc0oDSggf-mKZS2k-0TFCZ_0A_afdqOw3bQiTEp_t-7yoNjHuTomJyHkc0zv-sPYcQS2fC715UblDZ_7Y1hlbLSFhjJw_ezQWbHGYZnpS486Oxw8xrWNYR8tQWbHW4mgB0t1hOAm4ZsvfgIPDvc0AQfHZwy5SlUBi6fxni0hEqXMGwJYe_AyIcEEBI7u8iG93dsMWa3TlG2Rhty7vGfMOOGnHv0PLLht1dSM_Gv2bQqjc0cJrqGmSxh9pbIqyOU0y2Y8RFE-SmM_JVsP34H2XCx61ILI1cXIh7SWCW6lXQYbcVMJq1-KJIW7SSa054IeD84kcjoJZjbQuU8VMZDpT1UuYehXPkxTWIRsKir-1L0aMziWCpO-0lIKeuLHipxG0begyj2kRf7GJgvGuK9cLUh5O9P4KQHVxKMZH0gUxe6-r5MXcWDTQ43OarnttybsQNb7qmMgBX3UMh6YfKb7g5E-cR8qp2c23VgvKznjMt6bmRJUNxcXaBBXyqhVUtFQa_VowltsUDrVo92JGNCKs6ChXZlVc_yY_LsWmzvy29-wkCtfBHSnhJJLMK402U6pIEQnW4kmBRRV8RdOFPDuC0w52FqGvK2vojcNOTlu3-AsyO49AjCeGDVS2DjGuyjGtPsgTaZHBmh2sIOIW2NvDyH8pY3S4_Jc_P3rl_54WTnH_zmQYmfyeZAFDXyosbH5keCvfT297t5aYZmytYmuFayUj0JZh6-EkKYhpz_Wp24MfzlEkS-D5ef_eQsAc89pIYgVWf3jNdw_-n5WT1zn2Gv8MBTb87TwlvwtEg_PyXpzMrXkQoFpUmvG0SJVkEUS6E7SdyXXUajSKF0jfnnqb_-DQAA__8ztU3sCwQAAA== HTTP/1.1\r\nHost: realizationnewestfangs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://roblox-custom-daily-reward-script.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=3b204e8f-85a0-4ad8-92c8-058fb07c1b91:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl26582471=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:40:22 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Mobile,X-Device-User-Agent,User-Agent,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,Device-Stock-UA,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA,Sec-CH-UA\r\nx-envoy-upstream-service-time: 2\r\nHost: realizationnewestfangs.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 65dfeab71d0b27dbca94ab1d59edad26\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T21:21:08.536412Z","times_seen":17569395,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://roblox-custom-daily-reward-script.pages.dev/","date":"2026-05-03T08:40:22.209Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 05:19:27 GMT","end":"Wed, 01 Jul 2026 05:19:26 GMT"},"fingerprint":{"sha1":"BF:D8:14:32:18:86:B9:95:54:75:8D:F9:5F:29:DE:4E:F8:F8:F7:13","sha256":"0E:FA:80:0B:F4:13:81:81:4D:CF:50:35:5A:DD:DB:FA:00:0B:34:B2:2D:5D:28:08:E4:45:1F:2C:EF:D2:21:C2"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://roblox-custom-daily-reward-script.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 29 Apr 2026 22:40:32 GMT\r\nexpires: Thu, 29 Apr 2027 22:40:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 295190\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-07-27T21:18:37.265704Z","times_seen":246647,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":57,"dns":0,"connect":0,"send":0,"wait":19,"receive":6,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wayfarerorthodox.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.nightdestruct.com%2Fsb%2Fssp%2Fvpn%2Fclassic-push%2Fbig1%2Fcss%2Fstyle.css\u0026l=4143\u0026fd=553","fqdn":"wayfarerorthodox.com","domain":"wayfarerorthodox.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roblox-custom-daily-reward-script.pages.dev/","date":"2026-05-03T08:40:23.974Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"wayfarerorthodox.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 00:39:42 GMT","end":"Mon, 27 Jul 2026 00:39:41 GMT"},"fingerprint":{"sha1":"72:D3:68:BC:A4:4E:55:26:DB:11:49:E2:96:21:2A:F6:6D:D9:43:08","sha256":"32:C2:2C:23:81:37:C1:17:20:76:3E:3A:3C:7A:DB:DC:43:10:FE:F6:F2:BA:21:05:A6:7F:B0:88:91:D5:10:02"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.nightdestruct.com%2Fsb%2Fssp%2Fvpn%2Fclassic-push%2Fbig1%2Fcss%2Fstyle.css\u0026l=4143\u0026fd=553 HTTP/1.1\r\nHost: wayfarerorthodox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://roblox-custom-daily-reward-script.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:40:24 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: Sec-CH-UA-Platform-Version, Device-Stock-UA, Sec-CH-UA, Sec-CH-UA-PlatformUser-Agent, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Mobile, X-Device-User-Agent, X-OperaMini-Phone-UA, X-UCBrowser-Device-UA, User-Agent\r\nHost: wayfarerorthodox.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T21:21:08.536412Z","times_seen":17569395,"resource_available":true,"data":null}},"time_used":173,"timings":{"blocked":77,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"realizationnewestfangs.com/pixel/sbs?c=1","fqdn":"realizationnewestfangs.com","domain":"realizationnewestfangs.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roblox-custom-daily-reward-script.pages.dev/","date":"2026-05-03T08:40:24.439Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"realizationnewestfangs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 23:41:18 GMT","end":"Sun, 26 Jul 2026 23:41:17 GMT"},"fingerprint":{"sha1":"A3:A7:19:A7:E1:1E:FA:B7:D5:D2:AB:89:E2:E5:2D:BA:31:4C:DC:31","sha256":"9B:B1:9D:73:D4:D6:68:DF:63:E8:A6:F5:27:EB:47:26:AA:6F:52:E3:A6:56:1C:FF:EE:AC:3E:F6:06:CE:09:CA"}}},"request":{"raw":"GET /pixel/sbs?c=1 HTTP/1.1\r\nHost: realizationnewestfangs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://roblox-custom-daily-reward-script.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=3b204e8f-85a0-4ad8-92c8-058fb07c1b91:2:1; pdhtkv=true; uncs=2; pdhtkv29=true; uncs29=2; u_pl26582471=1; u_pl28216845=1; slecaf25da8381e0bd0494ba4018c76898a2=[4323736]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:40:24 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: Device-Stock-UA, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Mobile, X-Device-User-Agent, X-OperaMini-Phone-UA, X-UCBrowser-Device-UA, User-Agent, Sec-CH-UA, Sec-CH-UA-PlatformUser-Agent, Sec-CH-UA-Platform\r\nHost: realizationnewestfangs.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T21:21:08.536412Z","times_seen":17569395,"resource_available":true,"data":null}},"time_used":679,"timings":{"blocked":289,"dns":1,"connect":94,"send":0,"wait":98,"receive":1,"ssl":193},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://roblox-custom-daily-reward-script.pages.dev/","date":"2026-05-03T08:40:24.454Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 05:19:27 GMT","end":"Wed, 01 Jul 2026 05:19:26 GMT"},"fingerprint":{"sha1":"BF:D8:14:32:18:86:B9:95:54:75:8D:F9:5F:29:DE:4E:F8:F8:F7:13","sha256":"0E:FA:80:0B:F4:13:81:81:4D:CF:50:35:5A:DD:DB:FA:00:0B:34:B2:2D:5D:28:08:E4:45:1F:2C:EF:D2:21:C2"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://roblox-custom-daily-reward-script.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 29 Apr 2026 22:40:32 GMT\r\nexpires: Thu, 29 Apr 2027 22:40:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 295192\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-07-27T21:18:37.265704Z","times_seen":246647,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"realizationnewestfangs.com/watch.1346022592540.js?key=52f212bca95373aed7ead32398143db7\u0026kw=%5B%221%22%2C%22new%22%2C%22message%22%5D\u0026refer=https%3A%2F%2Froblox-custom-daily-reward-script.pages.dev%2F\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=3b204e8f-85a0-4ad8-92c8-058fb07c1b91%3A2%3A1\u0026rmtc=t\u0026shv=2\u0026sht=GtyEDNDukCCN4CIQwNJzx1sQSTs94guwsNrArc6Dwm4\u0026fstu=019decfe-f2a2-7a69-b4fd-9292c71fc924\u0026st1=a5ed25b98bd0b6f95b6626e2b5bf10fd\u0026ps1=1777797624","fqdn":"realizationnewestfangs.com","domain":"realizationnewestfangs.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://roblox-custom-daily-reward-script.pages.dev/","date":"2026-05-03T08:40:24.549Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"realizationnewestfangs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 23:41:18 GMT","end":"Sun, 26 Jul 2026 23:41:17 GMT"},"fingerprint":{"sha1":"A3:A7:19:A7:E1:1E:FA:B7:D5:D2:AB:89:E2:E5:2D:BA:31:4C:DC:31","sha256":"9B:B1:9D:73:D4:D6:68:DF:63:E8:A6:F5:27:EB:47:26:AA:6F:52:E3:A6:56:1C:FF:EE:AC:3E:F6:06:CE:09:CA"}}},"request":{"raw":"GET /watch.1346022592540.js?key=52f212bca95373aed7ead32398143db7\u0026kw=%5B%221%22%2C%22new%22%2C%22message%22%5D\u0026refer=https%3A%2F%2Froblox-custom-daily-reward-script.pages.dev%2F\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=3b204e8f-85a0-4ad8-92c8-058fb07c1b91%3A2%3A1\u0026rmtc=t\u0026shv=2\u0026sht=GtyEDNDukCCN4CIQwNJzx1sQSTs94guwsNrArc6Dwm4\u0026fstu=019decfe-f2a2-7a69-b4fd-9292c71fc924\u0026st1=a5ed25b98bd0b6f95b6626e2b5bf10fd\u0026ps1=1777797624 HTTP/1.1\r\nHost: realizationnewestfangs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://roblox-custom-daily-reward-script.pages.dev\r\nReferer: https://roblox-custom-daily-reward-script.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=3b204e8f-85a0-4ad8-92c8-058fb07c1b91:2:1; pdhtkv=true; uncs=2; pdhtkv29=true; uncs29=2; u_pl26582471=1; u_pl28216845=1; slecaf25da8381e0bd0494ba4018c76898a2=[4323736]; ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.EcBVOtbK8gKtvFNoGvHsAi2yDZHIN3ZuRM2iAXnR5VI; iprc_l+be87a5f18859e484117a658d4dd9a389=4323736; iprc_l:4323736=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:40:24 GMT\r\nContent-Type: text/html\r\nContent-Length: 3155\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Sec-CH-UA-Mobile,Device-Stock-UA,X-UCBrowser-Device-UA,User-Agent,Sec-CH-UA-Platform-Version,Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform,Sec-CH-UA-Model,X-Device-User-Agent,X-OperaMini-Phone-UA,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Full-Version\r\naccess-control-allow-origin: https://roblox-custom-daily-reward-script.pages.dev\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\nset-cookie: uid_id2=3b204e8f-85a0-4ad8-92c8-058fb07c1b91:2:1; expires=Sun, 10 May 2026 08:40:24 GMT; path=/; secure; SameSite=None\nuncs=3; expires=Mon, 04 May 2026 08:40:24 GMT; path=/; secure; SameSite=None\npdhtkv32=true; expires=Mon, 04 May 2026 08:40:24 GMT; path=/; secure; SameSite=None\nuncs32=1; expires=Mon, 04 May 2026 08:40:24 GMT; path=/; secure; SameSite=None\nu_pl26582436=1; expires=Mon, 04 May 2026 08:40:24 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 49\r\nHost: realizationnewestfangs.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: f2a80f9349bad1d10d4007ca61d216cb\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4575,"size_decoded":0,"mime_type":"text/html","magic":"JavaScript source, ASCII text, with very long lines (3699)","md5":"d174fadd7f6b3e3cf64cfa0f0e357cfe","sha1":"e87cc0f80eef4c51fcb986998b886fa65482cfcf","sha256":"0e27c0fa98d811c2cafe730a8d7aa2b68e599acae9126927c9c80ef6b4b49ada","sha512":"8b096998116a936f60da7d4c18c7dab4abaadd9fe8d4feeaa33f7703fbbe6407f0a627cd5c6d6f5a489c678cc8172fa49f16e158cd903761214caa6b291c8bed","ssdeep":"96:QC9t0kozyoTjBC49CrxyFpR1k/EIBNBl5pmjnm5f1ZDSV3VCfMEDaH:QC9t0dzrhT9a41k/fx59VSV3VCkCaH","tlshash":"019119b6cd85083c64a230af223ff3a87d25a14a3400ef81fc9ce6446b31a551eb5dc9","first_seen":"2026-05-03T08:40:46.525351Z","last_seen":"2026-05-03T08:40:46.525351Z","times_seen":1,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":147,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roblox-custom-daily-reward-script.pages.dev/assets/css/stylesheet.a482bf00fa5c046040ef7973ad5fdf5657890cacb596c93f1382f664ca542074.css","fqdn":"roblox-custom-daily-reward-script.pages.dev","domain":"roblox-custom-daily-reward-script.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://roblox-custom-daily-reward-script.pages.dev/","date":"2026-05-03T08:40:18.599Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roblox-custom-daily-reward-script.pages.dev","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 19:15:58 GMT","end":"Thu, 23 Jul 2026 19:15:57 GMT"},"fingerprint":{"sha1":"51:46:56:EF:BA:8D:E0:25:30:40:C3:C1:F7:B5:BF:30:42:81:FF:DC","sha256":"43:60:CA:66:7E:22:83:3B:61:14:89:8E:AC:54:6E:24:4C:C5:90:6A:95:59:44:A3:0B:6E:73:1F:6A:0B:37:84"}}},"request":{"raw":"GET /assets/css/stylesheet.a482bf00fa5c046040ef7973ad5fdf5657890cacb596c93f1382f664ca542074.css HTTP/1.1\r\nHost: roblox-custom-daily-reward-script.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://roblox-custom-daily-reward-script.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 03 May 2026 08:40:18 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oP0tUMW3oLctfAqcrdhwaEMQAonzuvIduqm76s8mMQzLVRkHYzyqoKeoumPE10FWCQPUc5mC%2BAuN%2BUIx6ZrtNr3E1jW3VJL0pJTCFQSivc4jf6ZNADOGSHY86Vy22leaAygFP7qc8d5ByevrX8x0FiLMH3UsCTjAyrOX8jVE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"53e05fd175c1632d3f6826cdf1c8006d\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f5df5cc3f0856bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17668,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (17469), with CRLF line terminators","md5":"189fdafdfba1b07922505146944ac218","sha1":"e593713c0ec16032efdad79024e07b769cf999d7","sha256":"a482bf00fa5c046040ef7973ad5fdf5657890cacb596c93f1382f664ca542074","sha512":"78e5dfa85fe07a10600f8e1f0060db0b5aff6482bcd25850bdae13ff5579b248d15119e5fa200b836f5f0abc2fe0b9cb5bff43ee26bca7e40a9d96494bdf6a82","ssdeep":"192:pgLxsLb4X3I1fG2pmOTq7zSeyf5rTZFsGR57Vpvj82p7Y97F+QNBARfWiVWo6yyT:KyLb4eEbzSDBP9R5lKmRD723FRdZ","tlshash":"7e82757e9220263cfb33cc026689755d3614f963da5247f9fa99a3a885c2ff71171a0c","first_seen":"2025-10-29T04:02:15.901982Z","last_seen":"2026-07-26T16:40:43.825937Z","times_seen":403,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"links.mtevor.com/api.php","fqdn":"links.mtevor.com","domain":"mtevor.com","tld":"com"},"ip":{"addr":"104.21.21.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://roblox-custom-daily-reward-script.pages.dev/","date":"2026-05-03T08:40:18.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mtevor.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 16:10:55 GMT","end":"Thu, 25 Jun 2026 17:08:44 GMT"},"fingerprint":{"sha1":"1D:90:33:9C:3D:4D:50:02:77:2C:32:67:1E:87:33:CC:BD:89:04:6D","sha256":"72:55:21:53:6A:A2:E9:F9:08:9D:13:A1:4F:FC:E2:CD:E9:5C:53:05:B8:B0:36:72:24:AB:FD:DA:7A:F9:7C:C4"}}},"request":{"raw":"GET /api.php HTTP/1.1\r\nHost: links.mtevor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://roblox-custom-daily-reward-script.pages.dev/\r\nOrigin: https://roblox-custom-daily-reward-script.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 08:40:19 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SwPURlzsHtWl3CHukH34jIbUj6NVXOlgEF%2FOx9st87sdwFLy0L%2BPkKXSWufGlFlFcfF7yoeE1EdlCDkVKPRXCI6GNjQ%2Bn%2F0dUiKZtwRbTjJW8d3JhXbj1eb%2B0WrFfRWhs24f\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9f5df5cdd8b50afe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":144,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f66b0b41446a6623d0c7debda8c1fa60","sha1":"1479370e76d01c7bf984577e6cbdfc8e47f30f92","sha256":"4d5f6723e2eaf770de8c440c249dcb76ceab99beeb0be3ac0f830f34c0b711d1","sha512":"84d53a6985ae2de2258875d3bb9aa8260eff4f91ae639934b47b0ea41fd5d0a4f08217869a34ef5ba92c56c02acc463def2d6ef748f232a1f60d12720159d7fc","ssdeep":"","tlshash":"b2c08c6ee2e8080d339c4ac2a90a2eb8680e78067b4280182b59611959008698059106","first_seen":"2026-05-03T08:40:46.527096Z","last_seen":"2026-05-03T08:40:46.527096Z","times_seen":1,"resource_available":false,"data":null}},"time_used":351,"timings":{"blocked":43,"dns":30,"connect":1,"send":0,"wait":258,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adxpy.pages.dev/ads.js","fqdn":"adxpy.pages.dev","domain":"adxpy.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://roblox-custom-daily-reward-script.pages.dev/","date":"2026-05-03T08:40:19.278Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adxpy.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 00:44:54 GMT","end":"Sat, 04 Jul 2026 01:43:34 GMT"},"fingerprint":{"sha1":"B9:0E:27:18:36:32:2C:B8:F2:E5:2F:50:96:88:4F:CF:54:4C:10:3C","sha256":"ED:9F:40:13:F5:DC:3F:FE:75:A2:AF:61:F4:2D:D7:17:14:E2:C8:D4:C5:19:DB:9E:88:D1:73:59:BF:13:F7:D1"}}},"request":{"raw":"GET /ads.js HTTP/1.1\r\nHost: adxpy.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://roblox-custom-daily-reward-script.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 03 May 2026 08:40:19 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=haJAgTG0vHuqHCiPKp27YVilDS06%2BJ4Iow0tLsF9x31shAhYxHD9h1duLRl0LsfX9dZ5eTfwH%2FdAHl%2BAaweTxY5cL4Vg2xafnft5IUencxcrpImURHYI%2BkrFbTGxqA8ib9s%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"1bc4a8b41519c6fae69917cf3ea9f576\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f5df5d0798f569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4034,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"28a8ee5b231d6993efeaeb288506fba6","sha1":"185e282511210752916a8d4fcc28642f02e4dc5e","sha256":"81496c62f33c7090e09cd8ea1d016980fc4432fb6ca00450ccea59b926daa7e1","sha512":"b1cf24abc589692314ada61a5a266b280ce2ad1297f5be58b94ececb90e2d718021795ca3998cb142e5937cff260d4aaeaffe5759bb8e67dff20e76bec939658","ssdeep":"","tlshash":"cb81011920a100651eb7236a7be3625dfba43053b81281a4bdccdb185fb9d1091f7fed","first_seen":"2025-10-25T03:17:17.993778Z","last_seen":"2026-07-26T23:38:52.758855Z","times_seen":407,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"immigrationacre.com/c6/4a/a1/c64aa11db612c16c65959b87a44dac81.js","fqdn":"immigrationacre.com","domain":"immigrationacre.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://roblox-custom-daily-reward-script.pages.dev/","date":"2026-05-03T08:40:19.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"immigrationacre.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 22:44:59 GMT","end":"Sat, 20 Jun 2026 22:44:58 GMT"},"fingerprint":{"sha1":"C5:C0:F1:09:DF:66:79:21:CE:6B:25:C3:DC:5A:3B:4E:6C:24:00:FD","sha256":"14:5E:A4:DE:46:F2:FF:8F:7D:14:D8:7C:E6:33:BC:41:57:AD:BF:24:AC:C4:3C:0F:A7:EE:34:BE:D3:48:56:5B"}}},"request":{"raw":"GET /c6/4a/a1/c64aa11db612c16c65959b87a44dac81.js HTTP/1.1\r\nHost: immigrationacre.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://roblox-custom-daily-reward-script.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:40:19 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 34786\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Sec-CH-UA-Platform,Device-Stock-UA,Sec-CH-UA-Platform-Version,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Model,Sec-CH-UA-Mobile,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA,User-Agent,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Full-Version-List\r\nx-envoy-upstream-service-time: 4\r\nHost: immigrationacre.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 2ce1b5ca4dacdc998f87cc1ac23849dc\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":96864,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"5d368b57340101ad9c97677aec1864e8","sha1":"0644d086ff9453d94a9a44f9cd0c25bfe1a35d4a","sha256":"647146921d4c2fdf05a6e9a043fddad8eff95f15d14eafde2614f704164a4595","sha512":"310a2192cd3541fbbee04ea6c5296c36120bb416bd0bbd5bb17409b85f7bf9eea981d7dfa88f9c86514f7362ab7caa80e0330fc5412a9691c0c5694ce313ace8","ssdeep":"1536:8G6g/qn/325q6EWa8oN39IRnG1VDpN6CwkMDCF9q+hjxx84Y:vIeZB0mdc5pSgqP","tlshash":"d893e8c8bf80f16443f26836222f501ff0a90c5552ddd18de9a2b8af7fb9b48e635594","first_seen":"2026-05-03T08:40:46.528691Z","last_seen":"2026-05-03T08:40:46.528691Z","times_seen":1,"resource_available":true,"data":null}},"time_used":853,"timings":{"blocked":332,"dns":43,"connect":92,"send":0,"wait":99,"receive":93,"ssl":190},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"immigrationacre.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"immigrationacre.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"immigrationacre.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/watch.1123570811749.js?key=6dd5e3d7ac37d33b5abc87810f6ac7f3\u0026kw=%5B%22build%22%2C%22a%22%2C%22better%22%2C%22roblox%22%2C%22custom%22%2C%22daily%22%2C%22reward%22%2C%22script%22%2C%22fast%22%5D\u0026refer=https%3A%2F%2Froblox-custom-daily-reward-script.pages.dev%2F\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=3b204e8f-85a0-4ad8-92c8-058fb07c1b91%3A2%3A1\u0026rmtc=t\u0026shv=2\u0026sht=d4sMeJ1smW81iXG_axJHaREXwSKWPA5FGWPQ8jhkbJc\u0026fstu=019decfe-e884-71c4-8e51-b26fe4c2ccce\u0026st1=d0d5f2e2d1e3a86b57b5cbfaff1233f3\u0026ps1=1777797621","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://roblox-custom-daily-reward-script.pages.dev/","date":"2026-05-03T08:40:22.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 21:50:47 GMT","end":"Thu, 23 Jul 2026 21:50:46 GMT"},"fingerprint":{"sha1":"23:74:93:25:BB:94:6A:F0:09:05:7F:57:73:50:14:CD:19:AA:AF:20","sha256":"13:12:D4:15:47:A9:32:60:B9:69:04:44:B0:1C:A6:FF:80:89:A8:57:85:61:DB:5D:BC:87:06:24:86:84:51:44"}}},"request":{"raw":"GET /watch.1123570811749.js?key=6dd5e3d7ac37d33b5abc87810f6ac7f3\u0026kw=%5B%22build%22%2C%22a%22%2C%22better%22%2C%22roblox%22%2C%22custom%22%2C%22daily%22%2C%22reward%22%2C%22script%22%2C%22fast%22%5D\u0026refer=https%3A%2F%2Froblox-custom-daily-reward-script.pages.dev%2F\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=3b204e8f-85a0-4ad8-92c8-058fb07c1b91%3A2%3A1\u0026rmtc=t\u0026shv=2\u0026sht=d4sMeJ1smW81iXG_axJHaREXwSKWPA5FGWPQ8jhkbJc\u0026fstu=019decfe-e884-71c4-8e51-b26fe4c2ccce\u0026st1=d0d5f2e2d1e3a86b57b5cbfaff1233f3\u0026ps1=1777797621 HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://roblox-custom-daily-reward-script.pages.dev\r\nReferer: https://roblox-custom-daily-reward-script.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=3b204e8f-85a0-4ad8-92c8-058fb07c1b91:2:1; ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.fFOGoY_5jURiHLVPbK8iOwTHsR2uzxjOMh44Pu007CU\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:40:22 GMT\r\nContent-Type: text/html\r\nContent-Length: 2981\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: X-OperaMini-Phone-UA,User-Agent,Sec-CH-UA,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Full-Version,Sec-CH-UA-Model,Sec-CH-UA-Mobile,X-Device-User-Agent,X-UCBrowser-Device-UA,Sec-CH-UA-Platform-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform,Device-Stock-UA\r\naccess-control-allow-origin: https://roblox-custom-daily-reward-script.pages.dev\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\nset-cookie: uid_id2=3b204e8f-85a0-4ad8-92c8-058fb07c1b91:2:1; expires=Sun, 10 May 2026 08:40:22 GMT; path=/; secure; SameSite=None\npdhtkv=true; expires=Mon, 04 May 2026 08:40:22 GMT; path=/; secure; SameSite=None\nuncs=1; expires=Mon, 04 May 2026 08:40:22 GMT; path=/; secure; SameSite=None\npdhtkv5=true; expires=Mon, 04 May 2026 08:40:22 GMT; path=/; secure; SameSite=None\nuncs5=1; expires=Mon, 04 May 2026 08:40:22 GMT; path=/; secure; SameSite=None\nu_pl26582443=1; expires=Mon, 04 May 2026 08:40:22 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 160\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 13198cf16e647abc3e8675f6713acee8\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4329,"size_decoded":0,"mime_type":"text/html","magic":"JavaScript source, ASCII text, with very long lines (3453)","md5":"a1732e70b60a8f489558e0dbf13623ea","sha1":"2fe3d1cb4ead78603e8f91d7d323fca3a982ae4f","sha256":"db8e8ae78aa553ba0a37c06c98a64e484e36569541585af18e3777cc87f2a921","sha512":"af13824f5e8229834f45e985000c06939ec1640ef2021c373a624344a344fb31b21398670f907fb208a889b09ac0dc60e4286f23ee10bbc9d7f8812340aceb8f","ssdeep":"96:y98wxuozwCNj6MUAQ5tk/ZN+YtyjGb/bI1ZDUCfMEDaH:y98wxzwGQPkhAPjGQVUCkCaH","tlshash":"fa911ab40cc845787423b4bf396e61047d50d24f7400de01b8adc7a55f24be89eb6c9c","first_seen":"2026-05-03T08:40:46.529685Z","last_seen":"2026-05-03T08:40:46.529685Z","times_seen":1,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":262,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://roblox-custom-daily-reward-script.pages.dev/","date":"2026-05-03T08:40:19.877Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"preferencenail.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 01:34:17 GMT","end":"Mon, 27 Jul 2026 01:34:16 GMT"},"fingerprint":{"sha1":"95:86:03:59:0E:03:98:91:87:F0:07:36:44:10:95:8E:67:97:47:D8","sha256":"51:F3:91:79:18:08:9A:FD:A7:80:AD:AA:80:FB:C8:8B:AE:27:FD:79:25:B6:37:2F:1B:C5:60:67:25:A8:A7:02"}}},"request":{"raw":"GET /sfp.js HTTP/1.1\r\nHost: preferencenail.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://roblox-custom-daily-reward-script.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:40:19 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nContent-Length: 32181\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nVary: Accept-Encoding\r\nHost: preferencenail.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 519f289242c5f9666ea121f692a72c3c\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":85379,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-07-27T20:35:09.544129Z","times_seen":25068,"resource_available":true,"data":null}},"time_used":171,"timings":{"blocked":61,"dns":0,"connect":19,"send":0,"wait":25,"receive":21,"ssl":42},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.nightdestruct.com/sb/notifications/utility/default/us/blog/Progamer/flip_icon/oct2024/3/css/style.css","fqdn":"cdn.nightdestruct.com","domain":"nightdestruct.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://roblox-custom-daily-reward-script.pages.dev/","date":"2026-05-03T08:40:21.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nightdestruct.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 16:21:26 GMT","end":"Sun, 28 Jun 2026 16:21:25 GMT"},"fingerprint":{"sha1":"77:BA:39:E3:87:1C:89:74:C5:36:C2:0F:E9:4C:0E:35:C4:92:A6:BA","sha256":"5F:17:E6:F7:42:E9:5F:B9:9E:03:47:36:9F:79:03:3B:E2:C2:66:ED:E9:3D:14:AB:29:B0:52:4A:62:57:C4:91"}}},"request":{"raw":"GET /sb/notifications/utility/default/us/blog/Progamer/flip_icon/oct2024/3/css/style.css HTTP/1.1\r\nHost: cdn.nightdestruct.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://roblox-custom-daily-reward-script.pages.dev/\r\nOrigin: https://roblox-custom-daily-reward-script.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 08:40:21 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 15 May 2025 09:23:31 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6825b293-2718\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hifMIxp0sVbkyFdPPLZX3pLrgEHmVMw0%2BdhBTfPC95Ox9swh%2FE3uGS7NwOLy0bgWtorRe9uSW%2F7i%2BZjTI8zRHaR3A8YmBIhcAweFHQbKjHAPKuyZw6dXin1BpY3nUx%2BsWA9eBN4KmJ0%3D\"}]}\r\ncf-ray: 9f5df5dcb8d556b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10008,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"8e2b823b6de6509e79ba3d1e1ef6ef55","sha1":"b937a4666fe32721cac699123ea78872acc839a0","sha256":"6a0a6ae471e19a24f9f9a463718deb8570927f2c4ff9f0e292b2e44186d54a6a","sha512":"53e6fcdc3ac2bd5f34db6cf73deede4c889175d13078d9e0d92c61340a40c07f21b4c4ac1939338d4e142a3975bd17cb761dce2cd88c99cf03feb8a5266c0595","ssdeep":"192:qcl/O9UHhyTFH5jQvsymvaJxMX5/+0p0AF5zFzDa49wF5F33SAHhZtBFQF5ntoHw:4jFjanMX1FdFzDbwF5F33/tBFQFxtoD8","tlshash":"6a220e825ab70d09740fe15b3f66a74726180043be1fc8297fc972588f851a8d6a3f9f","first_seen":"2025-04-13T04:21:39.853055Z","last_seen":"2026-07-22T02:48:25.210064Z","times_seen":657,"resource_available":false,"data":null}},"time_used":691,"timings":{"blocked":58,"dns":22,"connect":1,"send":0,"wait":574,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"realizationnewestfangs.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.nightdestruct.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2FProgamer%2Fflip_icon%2Foct2024%2F3%2Fcss%2Fanimate.css\u0026l=79245\u0026fd=558","fqdn":"realizationnewestfangs.com","domain":"realizationnewestfangs.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roblox-custom-daily-reward-script.pages.dev/","date":"2026-05-03T08:40:21.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"realizationnewestfangs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 23:41:18 GMT","end":"Sun, 26 Jul 2026 23:41:17 GMT"},"fingerprint":{"sha1":"A3:A7:19:A7:E1:1E:FA:B7:D5:D2:AB:89:E2:E5:2D:BA:31:4C:DC:31","sha256":"9B:B1:9D:73:D4:D6:68:DF:63:E8:A6:F5:27:EB:47:26:AA:6F:52:E3:A6:56:1C:FF:EE:AC:3E:F6:06:CE:09:CA"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.nightdestruct.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2FProgamer%2Fflip_icon%2Foct2024%2F3%2Fcss%2Fanimate.css\u0026l=79245\u0026fd=558 HTTP/1.1\r\nHost: realizationnewestfangs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://roblox-custom-daily-reward-script.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=3b204e8f-85a0-4ad8-92c8-058fb07c1b91:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl26582471=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:40:21 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Mobile, Device-Stock-UA, X-UCBrowser-Device-UA, User-Agent, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-PlatformUser-Agent, Sec-CH-UA-Platform, X-Device-User-Agent, X-OperaMini-Phone-UA, Sec-CH-UA-Full-Version\r\nHost: realizationnewestfangs.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T21:21:08.536412Z","times_seen":17569395,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"realizationnewestfangs.com/pixel/sbs?c=1","fqdn":"realizationnewestfangs.com","domain":"realizationnewestfangs.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roblox-custom-daily-reward-script.pages.dev/","date":"2026-05-03T08:40:22.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"realizationnewestfangs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 23:41:18 GMT","end":"Sun, 26 Jul 2026 23:41:17 GMT"},"fingerprint":{"sha1":"A3:A7:19:A7:E1:1E:FA:B7:D5:D2:AB:89:E2:E5:2D:BA:31:4C:DC:31","sha256":"9B:B1:9D:73:D4:D6:68:DF:63:E8:A6:F5:27:EB:47:26:AA:6F:52:E3:A6:56:1C:FF:EE:AC:3E:F6:06:CE:09:CA"}}},"request":{"raw":"GET /pixel/sbs?c=1 HTTP/1.1\r\nHost: realizationnewestfangs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://roblox-custom-daily-reward-script.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=3b204e8f-85a0-4ad8-92c8-058fb07c1b91:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl26582471=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:40:22 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: X-Device-User-Agent, X-UCBrowser-Device-UA, User-Agent, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Mobile, X-OperaMini-Phone-UA, Sec-CH-UA, Sec-CH-UA-PlatformUser-Agent, Device-Stock-UA\r\nHost: realizationnewestfangs.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T21:21:08.536412Z","times_seen":17569395,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"realizationnewestfangs.com/watch.1346022592540.js?key=52f212bca95373aed7ead32398143db7\u0026kw=%5B%221%22%2C%22new%22%2C%22message%22%5D\u0026refer=https%3A%2F%2Froblox-custom-daily-reward-script.pages.dev%2F\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=3b204e8f-85a0-4ad8-92c8-058fb07c1b91%3A2%3A1","fqdn":"realizationnewestfangs.com","domain":"realizationnewestfangs.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://roblox-custom-daily-reward-script.pages.dev/","date":"2026-05-03T08:40:24.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"realizationnewestfangs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 23:41:18 GMT","end":"Sun, 26 Jul 2026 23:41:17 GMT"},"fingerprint":{"sha1":"A3:A7:19:A7:E1:1E:FA:B7:D5:D2:AB:89:E2:E5:2D:BA:31:4C:DC:31","sha256":"9B:B1:9D:73:D4:D6:68:DF:63:E8:A6:F5:27:EB:47:26:AA:6F:52:E3:A6:56:1C:FF:EE:AC:3E:F6:06:CE:09:CA"}}},"request":{"raw":"GET /watch.1346022592540.js?key=52f212bca95373aed7ead32398143db7\u0026kw=%5B%221%22%2C%22new%22%2C%22message%22%5D\u0026refer=https%3A%2F%2Froblox-custom-daily-reward-script.pages.dev%2F\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=3b204e8f-85a0-4ad8-92c8-058fb07c1b91%3A2%3A1 HTTP/1.1\r\nHost: realizationnewestfangs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://roblox-custom-daily-reward-script.pages.dev/\r\nOrigin: https://roblox-custom-daily-reward-script.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=3b204e8f-85a0-4ad8-92c8-058fb07c1b91:2:1; pdhtkv=true; uncs=2; pdhtkv29=true; uncs29=2; u_pl26582471=1; u_pl28216845=1; slecaf25da8381e0bd0494ba4018c76898a2=[4323736]\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 307 Temporary Redirect\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:40:24 GMT\r\nContent-Type: text/html\r\nContent-Length: 0\r\nConnection: keep-alive\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,X-Device-User-Agent,X-UCBrowser-Device-UA,Sec-CH-UA-Platform-Version,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Platform,Sec-CH-UA-Model,X-OperaMini-Phone-UA,User-Agent,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile\r\naccess-control-allow-origin: https://roblox-custom-daily-reward-script.pages.dev\r\naccess-control-allow-credentials: true\r\nlocation: https://realizationnewestfangs.com/watch.1346022592540.js?key=52f212bca95373aed7ead32398143db7\u0026kw=%5B%221%22%2C%22new%22%2C%22message%22%5D\u0026refer=https%3A%2F%2Froblox-custom-daily-reward-script.pages.dev%2F\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=3b204e8f-85a0-4ad8-92c8-058fb07c1b91%3A2%3A1\u0026rmtc=t\u0026shv=2\u0026sht=GtyEDNDukCCN4CIQwNJzx1sQSTs94guwsNrArc6Dwm4\u0026fstu=019decfe-f2a2-7a69-b4fd-9292c71fc924\u0026st1=a5ed25b98bd0b6f95b6626e2b5bf10fd\u0026ps1=1777797624\r\nset-cookie: uid_id2=3b204e8f-85a0-4ad8-92c8-058fb07c1b91:2:1; expires=Sun, 10 May 2026 08:40:24 GMT; path=/; secure; SameSite=None\nain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJwIjp7ImlkIjoyNjU4MjQzNiwiayI6IjUyZjIxMmJjYTk1MzczYWVkN2VhZDMyMzk4MTQzZGI3Iiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjo0OTQxMzUzLCJwaWQiOjIwMDA2MTcsImFuIjp0cnVlLCJsYW4iOnRydWUsImNpZCI6MSwiYWlkIjozMiwicHQiOjQsInBrIjoienZlNHhhcmlwciIsInQiOjF9LCJ1Ijp7InUiOjMsImF1IjoxLCJkIjp7ImlkIjoyNjY1NjExMTUsImlkcyI6IiIsImljIjpmYWxzZSwibiI6IkRlc2t0b3AsRW11bGF0b3IiLCJ2IjoiVW5rbm93biIsIm0iOiJVbmtub3duIiwiZiI6MSwiZm4iOiJEZXNrdG9wIiwib2lkIjozODkxNCwib24iOiJXaW5kb3dzIiwib3YiOiIxMC4wIiwiYmlkIjoxMzY5MjUsImJuIjoiRmlyZWZveCIsImJ2IjoiMTM0LjAiLCJ3diI6ZmFsc2UsImUiOnRydWUsImFiIjpmYWxzZX0sImMiOnsiaWQiOjE2MiwiYyI6Ik5PIiwibiI6Ik5vcndheSJ9LCJjdCI6eyJpZCI6MzE0MzI0NCwibiI6Ik9zbG8ifSwicmciOnsiaWQiOjE4NDQsIm4iOiJPc2xvIENvdW50eSJ9LCJhIjpmYWxzZSwiY3IiOnsibiI6IkJsaXggU29sdXRpb25zIn0sInhmIjoiIiwiaXhmIjpmYWxzZSwiaWd4ZiI6ZmFsc2UsIml3ZiI6dHJ1ZSwidXAiOnRydWUsInIiOiJodHRwczovL3JvYmxveC1jdXN0b20tZGFpbHktcmV3YXJkLXNjcmlwdC5wYWdlcy5kZXYvIiwidHoiOjIsImlkdWMiOjAsImFyIjpbXX19.EcBVOtbK8gKtvFNoGvHsAi2yDZHIN3ZuRM2iAXnR5VI; expires=Sun, 03 May 2026 08:41:24 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 2\r\nHost: realizationnewestfangs.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 90c3febe455cfe9501caa43d4f0878c0\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4575,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T21:21:08.536412Z","times_seen":17569395,"resource_available":true,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"realizationnewestfangs.com/impr.gif?sid=H4sIAAAAAAAC_1RTzYscxRuu3iw_-OEh-HmUPuRgIDNbVV093W1uwehB86GJ5BBE6nNTTk93p6t7ZjJeEiPxGhDRi9DzzmRXYRH9D2TWk4Kw7WnA7MWTFy9i9CizO7CxDu_H87xUvW_xvA-m9SHqQs2XVy_lE5umfCvsYv-VGzZT-cj5l6_7BHfxef-GzXrsvD9emXL4KglYF5_139Cyn29RTDAmmPiv21KbfLx1xIIt9hLSTXCX0S4JGYzL_-auPgWOe6CGh-g5sKo9_Zu5CVYuIBt8-5p2_Sovzl0c1Cmv8hKGavfdrJ_lowwGJ6EpPTDZ7roactci9MUG5NnuegLIh_PVBCBsizZeegwi2123CWL46LhTkYLOQKhnYDRcgE73wfIFyPw-WHWAAKSCy1cgG-xczssRv3PM8hXbos0nf4IdtWjz8QuQDb65kNqxfy1P68rmmYOxacCOF2C3F1DU-1BNNsCO9kFWH4FVP6OtJ29BNphfcWkOVi3PBIJipmPTiUOOO4yruJNQGXdwGBuBI0lEQo6-yJoFcLcBtfOgth7UxoO68GCglj7DMZOEBz2TKBlhxhlTWuAkphjzREZQy3tg1UOQ5Sd79ftFSmNKejELp2R5xqVackNDxeMgJhoLhVnCBGeYxDLqxUnM6dc3WUCDKOi9t1OoW1V_OK_KWs_rTLop_eoYoskRuLMCaTKlxw_1wpiyiEwJFOVd6NtPD8JJi7wXL7UI_fUhOLUJrmqR9_ZdGKrmkUoddc2OSl0tyNrTtQ-aWV5tT_mjvNrWGQJePoRSNXNb3Hb3QVanZhPj1CxfGS6qZsaFamZWVQjK28szmCRKS6M7JiBBJ4pj3REmijqU6oTRQBCZ8LlxVf10KeW0E_Fe0hHMqE5CEyojYmRC2bQ4RM-uBOF99uUc-nrph9RQQoXkSRhEAdcq0lwFNEhiwgIlInC2Aes2gDsPJrZFb5qzUNgWvfzgdxB8H1y6D9J6wGsf-GgWUAz8FoQYJtmesZkaWqm7Mh-Ayhsoqk2o7njT9BA9P3vn-oXvj8R59eLnoOVPaH1Alg0UZQMf2B8QbKf3vrtSVHZgJ3yl1msVr_T_gNsD_SNI26LTf_x6tDbnfiEgi7vgipObXI5AFAhSiyDVJzgXDbincnEST93HsF16IFJvJtISzUVapg_B2aVvAk0lxnHUI0FsNAmYkiaMWaJ6HAeBhsq19u____NvAAAA__9iP3sIrwQAAA==","fqdn":"realizationnewestfangs.com","domain":"realizationnewestfangs.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roblox-custom-daily-reward-script.pages.dev/","date":"2026-05-03T08:40:24.753Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"realizationnewestfangs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 23:41:18 GMT","end":"Sun, 26 Jul 2026 23:41:17 GMT"},"fingerprint":{"sha1":"A3:A7:19:A7:E1:1E:FA:B7:D5:D2:AB:89:E2:E5:2D:BA:31:4C:DC:31","sha256":"9B:B1:9D:73:D4:D6:68:DF:63:E8:A6:F5:27:EB:47:26:AA:6F:52:E3:A6:56:1C:FF:EE:AC:3E:F6:06:CE:09:CA"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1RTzYscxRuu3iw_-OEh-HmUPuRgIDNbVV093W1uwehB86GJ5BBE6nNTTk93p6t7ZjJeEiPxGhDRi9DzzmRXYRH9D2TWk4Kw7WnA7MWTFy9i9CizO7CxDu_H87xUvW_xvA-m9SHqQs2XVy_lE5umfCvsYv-VGzZT-cj5l6_7BHfxef-GzXrsvD9emXL4KglYF5_139Cyn29RTDAmmPiv21KbfLx1xIIt9hLSTXCX0S4JGYzL_-auPgWOe6CGh-g5sKo9_Zu5CVYuIBt8-5p2_Sovzl0c1Cmv8hKGavfdrJ_lowwGJ6EpPTDZ7roactci9MUG5NnuegLIh_PVBCBsizZeegwi2123CWL46LhTkYLOQKhnYDRcgE73wfIFyPw-WHWAAKSCy1cgG-xczssRv3PM8hXbos0nf4IdtWjz8QuQDb65kNqxfy1P68rmmYOxacCOF2C3F1DU-1BNNsCO9kFWH4FVP6OtJ29BNphfcWkOVi3PBIJipmPTiUOOO4yruJNQGXdwGBuBI0lEQo6-yJoFcLcBtfOgth7UxoO68GCglj7DMZOEBz2TKBlhxhlTWuAkphjzREZQy3tg1UOQ5Sd79ftFSmNKejELp2R5xqVackNDxeMgJhoLhVnCBGeYxDLqxUnM6dc3WUCDKOi9t1OoW1V_OK_KWs_rTLop_eoYoskRuLMCaTKlxw_1wpiyiEwJFOVd6NtPD8JJi7wXL7UI_fUhOLUJrmqR9_ZdGKrmkUoddc2OSl0tyNrTtQ-aWV5tT_mjvNrWGQJePoRSNXNb3Hb3QVanZhPj1CxfGS6qZsaFamZWVQjK28szmCRKS6M7JiBBJ4pj3REmijqU6oTRQBCZ8LlxVf10KeW0E_Fe0hHMqE5CEyojYmRC2bQ4RM-uBOF99uUc-nrph9RQQoXkSRhEAdcq0lwFNEhiwgIlInC2Aes2gDsPJrZFb5qzUNgWvfzgdxB8H1y6D9J6wGsf-GgWUAz8FoQYJtmesZkaWqm7Mh-Ayhsoqk2o7njT9BA9P3vn-oXvj8R59eLnoOVPaH1Alg0UZQMf2B8QbKf3vrtSVHZgJ3yl1msVr_T_gNsD_SNI26LTf_x6tDbnfiEgi7vgipObXI5AFAhSiyDVJzgXDbincnEST93HsF16IFJvJtISzUVapg_B2aVvAk0lxnHUI0FsNAmYkiaMWaJ6HAeBhsq19u____NvAAAA__9iP3sIrwQAAA== HTTP/1.1\r\nHost: realizationnewestfangs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=3b204e8f-85a0-4ad8-92c8-058fb07c1b91:2:1; pdhtkv=true; uncs=3; pdhtkv29=true; uncs29=2; u_pl26582471=1; u_pl28216845=1; slecaf25da8381e0bd0494ba4018c76898a2=[4323736]; ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.EcBVOtbK8gKtvFNoGvHsAi2yDZHIN3ZuRM2iAXnR5VI; iprc_l+be87a5f18859e484117a658d4dd9a389=4323736; iprc_l:4323736=1; pdhtkv32=true; uncs32=1; u_pl26582436=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:40:24 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: X-UCBrowser-Device-UA,User-Agent,Sec-CH-UA-Platform-Version,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform,Sec-CH-UA-Model,X-Device-User-Agent,Sec-CH-UA,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Mobile,Device-Stock-UA,X-OperaMini-Phone-UA\r\nx-envoy-upstream-service-time: 3\r\nHost: realizationnewestfangs.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: f1d7fc2416c00ec0cf979b26f507d0b3\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T21:21:08.536412Z","times_seen":17569395,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.nightdestruct.com/sb/notifications/utility/default/us/blog/Progamer/flip_icon/oct2024/3/css/animate.css","fqdn":"cdn.nightdestruct.com","domain":"nightdestruct.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://roblox-custom-daily-reward-script.pages.dev/","date":"2026-05-03T08:40:21.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nightdestruct.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 16:21:26 GMT","end":"Sun, 28 Jun 2026 16:21:25 GMT"},"fingerprint":{"sha1":"77:BA:39:E3:87:1C:89:74:C5:36:C2:0F:E9:4C:0E:35:C4:92:A6:BA","sha256":"5F:17:E6:F7:42:E9:5F:B9:9E:03:47:36:9F:79:03:3B:E2:C2:66:ED:E9:3D:14:AB:29:B0:52:4A:62:57:C4:91"}}},"request":{"raw":"GET /sb/notifications/utility/default/us/blog/Progamer/flip_icon/oct2024/3/css/animate.css HTTP/1.1\r\nHost: cdn.nightdestruct.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://roblox-custom-daily-reward-script.pages.dev/\r\nOrigin: https://roblox-custom-daily-reward-script.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 08:40:21 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 15 May 2025 09:23:30 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6825b292-1358d\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JDcKU9OeHyO29jur49dOkH8CIbl5p5xx8EZtSYNN7%2FBH5%2F8wzkGt713J4og0snDSCZ1zfyToW0ZjmBTTINK3OrAr388iO956WTZt3kFOZ7MkJ0YppxJmY81K6Wv4c5poqkUfD1wAPvc%3D\"}]}\r\ncf-ray: 9f5df5dcb8db56b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":79245,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"80047eaa13ebd50c50e8a9753621e430","sha1":"9c503e07d130572a0eaf51f7c02cbd4cf6213fe3","sha256":"3f831a59615f8d5d40b4340b2836f91438c876f8dbce75f78e38360d6fe0f429","sha512":"79e76248a0afa1c1b4ee00dbe3cb6958d332ea2bc6247f9f15348c2d137cddc82d1b4aa1ff16b945d200b393ac25a75925ba5bb376b54157870e228b0ab77922","ssdeep":"384:ZFu8uVWgnu5uplFlH/O/Qu7u/sjzbg/jxXlIPfL4jKgZQMkL0Vvaj7Z:ZFu8uEgnu5uru7uhKgZQMkL0Vvaj7Z","tlshash":"12731fad2991148452638a1d83df8e68673ce573181a9cef73c2488bcf8bf9c67c9147","first_seen":"2023-04-05T09:22:06Z","last_seen":"2026-07-22T02:48:25.242857Z","times_seen":4296,"resource_available":false,"data":null}},"time_used":605,"timings":{"blocked":58,"dns":21,"connect":5,"send":0,"wait":488,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"realizationnewestfangs.com/sbar.json?key=af25da8381e0bd0494ba4018c76898a2\u0026uuid=3b204e8f-85a0-4ad8-92c8-058fb07c1b91%3A2%3A1","fqdn":"realizationnewestfangs.com","domain":"realizationnewestfangs.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://roblox-custom-daily-reward-script.pages.dev/","date":"2026-05-03T08:40:22.564Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"realizationnewestfangs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 23:41:18 GMT","end":"Sun, 26 Jul 2026 23:41:17 GMT"},"fingerprint":{"sha1":"A3:A7:19:A7:E1:1E:FA:B7:D5:D2:AB:89:E2:E5:2D:BA:31:4C:DC:31","sha256":"9B:B1:9D:73:D4:D6:68:DF:63:E8:A6:F5:27:EB:47:26:AA:6F:52:E3:A6:56:1C:FF:EE:AC:3E:F6:06:CE:09:CA"}}},"request":{"raw":"GET /sbar.json?key=af25da8381e0bd0494ba4018c76898a2\u0026uuid=3b204e8f-85a0-4ad8-92c8-058fb07c1b91%3A2%3A1 HTTP/1.1\r\nHost: realizationnewestfangs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://roblox-custom-daily-reward-script.pages.dev/\r\nOrigin: https://roblox-custom-daily-reward-script.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=3b204e8f-85a0-4ad8-92c8-058fb07c1b91:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl26582471=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:40:22 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 4104\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: User-Agent,Sec-CH-UA,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Full-Version,Sec-CH-UA-Platform,X-Device-User-Agent,X-UCBrowser-Device-UA,Sec-CH-UA-Platform-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-UA-Mobile,Device-Stock-UA,X-OperaMini-Phone-UA\r\naccess-control-allow-origin: https://roblox-custom-daily-reward-script.pages.dev\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\nset-cookie: uid_id2=3b204e8f-85a0-4ad8-92c8-058fb07c1b91:2:1; expires=Sun, 10 May 2026 08:40:22 GMT; path=/; secure; SameSite=None\nuncs=2; expires=Mon, 04 May 2026 08:40:22 GMT; path=/; secure; SameSite=None\nuncs29=2; expires=Mon, 04 May 2026 08:40:22 GMT; path=/; secure; SameSite=None\nu_pl28216845=1; expires=Mon, 04 May 2026 08:40:22 GMT; path=/; secure; SameSite=None\nslecaf25da8381e0bd0494ba4018c76898a2=[4323736]; expires=Sun, 03 May 2026 08:40:27 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 214\r\nHost: realizationnewestfangs.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: d23b94a46d082da7bd287aa1051bf318\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":5904,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"JSON text data","md5":"bbf0981ad5cc6f621e4b6b57a5e853d4","sha1":"f755719f21e3db1068a0e62e83a1b171596082c3","sha256":"048e5cd11b4afb75a997c6292fbf02e3918672a7113a9fd73c4a997381c4771c","sha512":"cf08843b4fd686efda678cab613e9c9491eb43528000e9f99443f4a303953f6b7af08330364e1d6dda25fbc2cda6f8ff203a0a1771302f40010bb87f26ef06b2","ssdeep":"96:9z+S+uraLvWsY1wjLH4pAkh2I/yYwe6JS9/rI2AK/q/z1fk4dQ3u3lFZily4ojRx:9z+SBIZY1wjkXhtyYwujIr2qr1igHZGM","tlshash":"7ec17defc290362d8f634c3cdd1f0fbc2ca40d166d95984bd67e93bf656a9846488d14","first_seen":"2026-05-03T08:40:46.531774Z","last_seen":"2026-05-03T08:40:46.531774Z","times_seen":1,"resource_available":false,"data":null}},"time_used":311,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":310,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/si/2f/d2/30/2fd230184f9add96378a4e3b877096dc/1680149814.png","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roblox-custom-daily-reward-script.pages.dev/","date":"2026-05-03T08:40:23.536Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 02:33:25 GMT","end":"Fri, 05 Jun 2026 02:33:24 GMT"},"fingerprint":{"sha1":"4A:66:11:51:1F:1F:F3:84:B6:E4:4F:81:C1:03:83:9F:01:17:7E:82","sha256":"DA:55:E3:02:D5:3C:4E:3A:51:ED:21:0D:F4:32:52:C2:C5:31:87:50:DC:AB:13:D9:93:4A:15:0C:D9:8C:D6:4F"}}},"request":{"raw":"GET /si/2f/d2/30/2fd230184f9add96378a4e3b877096dc/1680149814.png HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 08:40:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 90423\r\nserver: nginx/1.21.6\r\nlast-modified: Thu, 30 Mar 2023 04:17:03 GMT\r\netag: \"64250d3f-16137\"\r\nexpires: Tue, 05 May 2026 08:40:23 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":90423,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"b94ddc39cf647a5388cb1de541a2a069","sha1":"8e26ee8b4f0524f8aed42f40c6f1b27bcb4b1f14","sha256":"44086e75b8415c02b421630e1d39698d72dbc015718f499f0e1bfeab9fd79d91","sha512":"1ccd5d961861bf7daf5abade81061240677585a1829d45e6d67dcbb3bd1193efdadabb5298f703417c41d54aebb2da69656cf3e02d27bde74512a6ccac73250e","ssdeep":"1536:88M4ztR5y8kYp5nIe2/gWF0LVXxdO9kdaZjvYALzjhPvPB8hnRJ3lEViCbcZb83j:bI8kze2hFCBA9k0hvYoFPhCT3aAqcZoT","tlshash":"17931233ac1f149a437881a55a0975d2cc9c72f80b6b898f531cecb5bcb279c5178376","first_seen":"2023-06-24T15:48:47Z","last_seen":"2026-07-24T10:21:47.786134Z","times_seen":1217,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wayfarerorthodox.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.nightdestruct.com%2Fsb%2Fssp%2Fvpn%2Fclassic-push%2Fbig1%2Fcss%2Fanimate.css\u0026l=78693\u0026fd=526","fqdn":"wayfarerorthodox.com","domain":"wayfarerorthodox.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roblox-custom-daily-reward-script.pages.dev/","date":"2026-05-03T08:40:23.948Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"wayfarerorthodox.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 00:39:42 GMT","end":"Mon, 27 Jul 2026 00:39:41 GMT"},"fingerprint":{"sha1":"72:D3:68:BC:A4:4E:55:26:DB:11:49:E2:96:21:2A:F6:6D:D9:43:08","sha256":"32:C2:2C:23:81:37:C1:17:20:76:3E:3A:3C:7A:DB:DC:43:10:FE:F6:F2:BA:21:05:A6:7F:B0:88:91:D5:10:02"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.nightdestruct.com%2Fsb%2Fssp%2Fvpn%2Fclassic-push%2Fbig1%2Fcss%2Fanimate.css\u0026l=78693\u0026fd=526 HTTP/1.1\r\nHost: wayfarerorthodox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://roblox-custom-daily-reward-script.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:40:24 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: Sec-CH-UA-Platform-Version, Device-Stock-UA, Sec-CH-UA, Sec-CH-UA-PlatformUser-Agent, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Mobile, X-Device-User-Agent, X-OperaMini-Phone-UA, X-UCBrowser-Device-UA, User-Agent\r\nHost: wayfarerorthodox.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T21:21:08.536412Z","times_seen":17569395,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tse1.mm.bing.net/th?q=roblox%20custom%20daily%20reward%20script\u0026w=720\u0026h=405\u0026c=5\u0026rs=1\u0026p=0","fqdn":"tse1.mm.bing.net","domain":"bing.net","tld":"net"},"ip":{"addr":"150.171.28.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roblox-custom-daily-reward-script.pages.dev/","date":"2026-05-03T08:40:18.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mm.bing.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft TLS G2 RSA CA OCSP 02","organization":"Microsoft Corporation"},"validity":{"start":"Thu, 16 Apr 2026 05:53:02 GMT","end":"Tue, 13 Oct 2026 05:53:02 GMT"},"fingerprint":{"sha1":"24:F3:B1:CE:29:AF:66:D1:5D:3B:14:70:5D:E2:07:95:7C:41:70:E7","sha256":"F8:C7:F0:64:A9:0F:66:DB:B5:45:C8:CA:A8:72:A1:0A:8A:68:92:9D:6F:46:02:47:A2:2D:24:45:61:F5:C8:2E"}}},"request":{"raw":"GET /th?q=roblox%20custom%20daily%20reward%20script\u0026w=720\u0026h=405\u0026c=5\u0026rs=1\u0026p=0 HTTP/1.1\r\nHost: tse1.mm.bing.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://roblox-custom-daily-reward-script.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=5184000\r\ncontent-length: 24630\r\ncontent-type: image/jpeg\r\nhttpcacheability: 4\r\nx-resolved-thumbnail-id: OIP.hefzr5seqNZGAwhwMmEJNwHaEU\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ntiming-allow-origin: *\r\nreport-to: {\"group\":\"network-errors\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://aefd.nelreports.net/api/report?cat=bingth\u0026ndcParam=nadatio\"}]}\r\nnel: {\"report_to\":\"network-errors\",\"max_age\":604800,\"success_fraction\":0.001,\"failure_fraction\":1.0}\r\nx-powered-by: ASP.NET\r\nx-cache: CONFIG_NOCACHE\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nx-msedge-ref: Ref A: AB5EC55A8AF34FB08507BB61B2BDDC51 Ref B: OSL231050212054 Ref C: 2026-05-03T08:40:18Z\r\ndate: Sun, 03 May 2026 08:40:18 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":24630,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 719x405, components 3","md5":"f50e362a599dd1185d03d4913f62ed42","sha1":"9f56c02df84885a01d7a16736d046c58a89db7c0","sha256":"9db129342a03e6c5805ef905d5b49cea777c709b5834bc0b653ca113f6bc3b61","sha512":"ed6d5e4d50d692c8bb535c2469889f3f7cf737136cd27f8b41ec87c83352cf64a37fceeeab03708efbec457f95d7cf8dc9eedde6e52dc1a8696e5d3531618372","ssdeep":"768:HaNzzWo44xy8+ectsDZG8svwuQBsmFRbFc:6NV4B5t2GfvBQGmFRbFc","tlshash":"fbb2e137af66f7d6b091b3b51c037a1ca31af20f161638d606b146da1eb034d20cad1c","first_seen":"2026-05-03T08:40:46.533311Z","last_seen":"2026-05-03T08:40:46.533311Z","times_seen":1,"resource_available":false,"data":null}},"time_used":232,"timings":{"blocked":93,"dns":72,"connect":1,"send":0,"wait":39,"receive":2,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adxpy.pages.dev/arrow-up.gif","fqdn":"adxpy.pages.dev","domain":"adxpy.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roblox-custom-daily-reward-script.pages.dev/","date":"2026-05-03T08:40:19.245Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adxpy.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 00:44:54 GMT","end":"Sat, 04 Jul 2026 01:43:34 GMT"},"fingerprint":{"sha1":"B9:0E:27:18:36:32:2C:B8:F2:E5:2F:50:96:88:4F:CF:54:4C:10:3C","sha256":"ED:9F:40:13:F5:DC:3F:FE:75:A2:AF:61:F4:2D:D7:17:14:E2:C8:D4:C5:19:DB:9E:88:D1:73:59:BF:13:F7:D1"}}},"request":{"raw":"GET /arrow-up.gif HTTP/1.1\r\nHost: adxpy.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://roblox-custom-daily-reward-script.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 03 May 2026 08:40:19 GMT\r\ncontent-type: image/gif\r\ncontent-length: 4491\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"abc38753b71c3201854a4e8b3ffdce52\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Up4T9GtzbQAwfROws0iGjDy4fUQ9nODpy%2B2dVsZs7WGhDyvE%2FK7CZB8IeQ134vfkn2YLl9jPoROycCQTazrFmbXfqnNBygBHYrwgHsoCubqnxxU5eTg5zFaVGIHHDsBjfUQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9f5df5d04969569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4491,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 28 x 150","md5":"8b78a541eaa521c8bd946b84a46feb92","sha1":"31a6411c7051332a4aff0d338cf721f513bd1f8b","sha256":"8794063dced5ec3d5035d4fd6e7cce885671224284469fe85e7b392a0fabf0a8","sha512":"ca4f07b46c061bcc141b763e32da638e835f207106f8d5ea90dfab473487114081fbd3e12768cfe3d374c0eecba53e2a085fd0af4cb068f4efed559fbd9fa26d","ssdeep":"96:kRXW9wwXp9lM6jb7xLD3hFG2G/3dtGSQp60NfzpAMK:kVW9Jp9JjbBDRFG2G/3mjrpAMK","tlshash":"c791e7121a798d4cf0335934c9a8ac5f332a5da2811183db29d4329ee93c4bd596e67c","first_seen":"2025-05-30T17:14:42.053302Z","last_seen":"2026-07-26T23:38:52.771527Z","times_seen":494,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"realizationnewestfangs.com/sbar.json?key=c207ec84c2456af201cc563cadc36c46\u0026uuid=3b204e8f-85a0-4ad8-92c8-058fb07c1b91%3A2%3A1","fqdn":"realizationnewestfangs.com","domain":"realizationnewestfangs.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://roblox-custom-daily-reward-script.pages.dev/","date":"2026-05-03T08:40:20.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"realizationnewestfangs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 23:41:18 GMT","end":"Sun, 26 Jul 2026 23:41:17 GMT"},"fingerprint":{"sha1":"A3:A7:19:A7:E1:1E:FA:B7:D5:D2:AB:89:E2:E5:2D:BA:31:4C:DC:31","sha256":"9B:B1:9D:73:D4:D6:68:DF:63:E8:A6:F5:27:EB:47:26:AA:6F:52:E3:A6:56:1C:FF:EE:AC:3E:F6:06:CE:09:CA"}}},"request":{"raw":"GET /sbar.json?key=c207ec84c2456af201cc563cadc36c46\u0026uuid=3b204e8f-85a0-4ad8-92c8-058fb07c1b91%3A2%3A1 HTTP/1.1\r\nHost: realizationnewestfangs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://roblox-custom-daily-reward-script.pages.dev/\r\nOrigin: https://roblox-custom-daily-reward-script.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:40:20 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 3203\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Full-Version,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Mobile,Device-Stock-UA,X-Device-User-Agent,Sec-CH-UA-Full-Version-List,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA,User-Agent,Sec-CH-UA-Platform-Version,Sec-CH-UA\r\naccess-control-allow-origin: https://roblox-custom-daily-reward-script.pages.dev\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\nset-cookie: uid_id2=3b204e8f-85a0-4ad8-92c8-058fb07c1b91:2:1; expires=Sun, 10 May 2026 08:40:20 GMT; path=/; secure; SameSite=None\npdhtkv=true; expires=Mon, 04 May 2026 08:40:20 GMT; path=/; secure; SameSite=None\nuncs=1; expires=Mon, 04 May 2026 08:40:20 GMT; path=/; secure; SameSite=None\npdhtkv29=true; expires=Mon, 04 May 2026 08:40:20 GMT; path=/; secure; SameSite=None\nuncs29=1; expires=Mon, 04 May 2026 08:40:20 GMT; path=/; secure; SameSite=None\nu_pl26582471=1; expires=Mon, 04 May 2026 08:40:20 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 51\r\nHost: realizationnewestfangs.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 918b82a502a02e3fb65b8aed19ef6454\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5235,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"JSON text data","md5":"05937dc3811836b02385934ef13ed14c","sha1":"7ed7d77881ad24dabf707e54914382178c5e195e","sha256":"1113da606c56a169398e94984af29244b7eddcb2ad5c00fc57640ded903242ef","sha512":"71861aa87203004715361d6611944b668193fb32f540bcebb9f565d0f12a72b3d5a716c12bf6b0fe9ab4d3b9e4338e451c5231d872604bd4f5f97644d653a338","ssdeep":"96:9qRAv3gY4pvhwjfRisnomLobJr/4vp2W6QYUatYVQK/4vp2W6QYUatYV8wNpA:993apvhwjfRSmkmMQYZ4QpMQYZ4w","tlshash":"c0b15c9dd10253197dd76c3e89ab94bcd81c9c0b709976a0d62386cfaec265afb86430","first_seen":"2026-05-03T08:40:46.534864Z","last_seen":"2026-05-03T08:40:46.534864Z","times_seen":1,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":43,"dns":0,"connect":0,"send":0,"wait":161,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.show-sb.com/sb/au/48/48/eb/4848ebd6f7295875a5d388ec2488aba3/1648542421.html","fqdn":"cdn.show-sb.com","domain":"show-sb.com","tld":"com"},"ip":{"addr":"172.67.170.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://roblox-custom-daily-reward-script.pages.dev/","date":"2026-05-03T08:40:22.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"show-sb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Apr 2026 00:48:28 GMT","end":"Fri, 03 Jul 2026 01:44:30 GMT"},"fingerprint":{"sha1":"21:8F:F6:2A:0C:60:8F:CF:6C:90:BD:69:DB:F8:82:BF:D5:02:9E:2A","sha256":"20:0D:6D:8F:30:A5:C6:F8:45:FA:9B:D0:D8:76:12:30:CC:08:8F:44:47:0D:A2:CA:80:14:E3:AA:E1:AF:EA:5F"}}},"request":{"raw":"GET /sb/au/48/48/eb/4848ebd6f7295875a5d388ec2488aba3/1648542421.html HTTP/1.1\r\nHost: cdn.show-sb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://roblox-custom-daily-reward-script.pages.dev/\r\nOrigin: https://roblox-custom-daily-reward-script.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 08:40:23 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Tue, 29 Mar 2022 08:27:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aSBukY3B3QThS5lw9BISK6zFzsSzLxR7BbxH4eUs8tofVuOspa7FPmQqzrU2ianI1VgwcmD4clowk1q8e5OkkqTQthe33HVz2QosdW8a4DXcLJuoV3jo8obPszaotjje%2FtM%3D\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9f5df5e74e4856a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":1538,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"5a7df8dcac4cde2aeadb9f07a622d3fa","sha1":"4044f12fce935458c93ef71de58ac6bf97b28bba","sha256":"ccec003eccd7e299f825c7e48ba721d529f1c110bb5b60c60a18dca61cb6b45a","sha512":"4d075a467bec7bf6b68a5da10f2547cb101bf9ed75390e2d0629f7f35430a67b850253fb6b4c5381a1dfeaa642299088afce7a6d65e76ef173705c40a34fbc8f","ssdeep":"","tlshash":"6531055a2ee9c57701e35484bb342f2bed91aa83880a690173fc59a48f96dd1ce63407","first_seen":"2023-04-07T07:09:28Z","last_seen":"2026-07-24T10:21:47.797062Z","times_seen":1435,"resource_available":false,"data":null}},"time_used":548,"timings":{"blocked":41,"dns":22,"connect":1,"send":0,"wait":465,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:300,400,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://roblox-custom-daily-reward-script.pages.dev/","date":"2026-05-03T08:40:23.532Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 05:19:34 GMT","end":"Wed, 01 Jul 2026 05:19:33 GMT"},"fingerprint":{"sha1":"21:64:07:B1:AB:C9:F8:BB:E3:DA:F8:1A:C2:71:8D:C1:5F:BB:C8:5F","sha256":"C9:6D:F4:6C:D4:D4:BA:AB:16:C1:57:05:B3:FD:F7:74:8C:83:CB:18:D2:21:81:4D:F6:97:96:5A:A4:4C:ED:44"}}},"request":{"raw":"GET /css?family=Roboto:300,400,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 03 May 2026 08:40:23 GMT\r\ndate: Sun, 03 May 2026 08:40:23 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16755,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"1936a90eef3ebd4c6b40eb59d72e164d","sha1":"4c698f8dc97e2e6186d46215e209aca1b1194a5d","sha256":"412d98c2f4410a048131a7d9362fb38456ce2ff67cd4731ea411708a7996a021","sha512":"07ad2431175e5566ae435738d94d4da3e96e4856a1fe1d5917c52474cab28808cd940fec0e8f75eb2f3d573e6fe8497fc12636ef4738d1b67e9144725192b580","ssdeep":"384:p9f59g9P9r9yU9/qY4+949Y9p9fM919W969yh9/qY4X9N9t949fd9k9D939yQ9/O:pDS99YURRuWDyjooYhREHPWP2ZZYQRVs","tlshash":"48721091041704009b834ce223cebf35fe1f52117142d0b5abfd9b6b9ddbca6526939d","first_seen":"2026-02-19T22:28:01.752187Z","last_seen":"2026-07-27T19:10:43.411229Z","times_seen":10176,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"realizationnewestfangs.com/pixel/purst?dl=0\u0026th=0\u0026sc=0\u0026rs=1732\u0026rd=1732\u0026fd=528\u0026bv=2026.4.2\u0026tmpl=70","fqdn":"realizationnewestfangs.com","domain":"realizationnewestfangs.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roblox-custom-daily-reward-script.pages.dev/","date":"2026-05-03T08:40:19.875Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"realizationnewestfangs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 23:41:18 GMT","end":"Sun, 26 Jul 2026 23:41:17 GMT"},"fingerprint":{"sha1":"A3:A7:19:A7:E1:1E:FA:B7:D5:D2:AB:89:E2:E5:2D:BA:31:4C:DC:31","sha256":"9B:B1:9D:73:D4:D6:68:DF:63:E8:A6:F5:27:EB:47:26:AA:6F:52:E3:A6:56:1C:FF:EE:AC:3E:F6:06:CE:09:CA"}}},"request":{"raw":"GET /pixel/purst?dl=0\u0026th=0\u0026sc=0\u0026rs=1732\u0026rd=1732\u0026fd=528\u0026bv=2026.4.2\u0026tmpl=70 HTTP/1.1\r\nHost: realizationnewestfangs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://roblox-custom-daily-reward-script.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:40:20 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: Sec-CH-UA-Platform-Version, Device-Stock-UA, Sec-CH-UA, Sec-CH-UA-PlatformUser-Agent, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Mobile, X-Device-User-Agent, X-OperaMini-Phone-UA, X-UCBrowser-Device-UA, User-Agent\r\nHost: realizationnewestfangs.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T21:21:08.536412Z","times_seen":17569395,"resource_available":true,"data":null}},"time_used":915,"timings":{"blocked":346,"dns":59,"connect":95,"send":0,"wait":222,"receive":0,"ssl":190},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.nightdestruct.com/sb/notifications/utility/default/us/blog/Progamer/flip_icon/oct2024/3/img/icon.jpg","fqdn":"cdn.nightdestruct.com","domain":"nightdestruct.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roblox-custom-daily-reward-script.pages.dev/","date":"2026-05-03T08:40:21.291Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nightdestruct.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 16:21:26 GMT","end":"Sun, 28 Jun 2026 16:21:25 GMT"},"fingerprint":{"sha1":"77:BA:39:E3:87:1C:89:74:C5:36:C2:0F:E9:4C:0E:35:C4:92:A6:BA","sha256":"5F:17:E6:F7:42:E9:5F:B9:9E:03:47:36:9F:79:03:3B:E2:C2:66:ED:E9:3D:14:AB:29:B0:52:4A:62:57:C4:91"}}},"request":{"raw":"GET /sb/notifications/utility/default/us/blog/Progamer/flip_icon/oct2024/3/img/icon.jpg HTTP/1.1\r\nHost: cdn.nightdestruct.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 08:40:21 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 71004\r\nserver: cloudflare\r\nlast-modified: Thu, 15 May 2025 09:23:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"6825b294-1155c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\naccept-ranges: bytes\r\nage: 2902226\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NawhuPRsIs5GsLfjUw1UPKKflYe3GThMZk5WFp8neijogtPkoc3HuFWG8DYBkIs6O181bHBTEcrRqmPg0t4EVJAksGZxDQXq2QCtvflTHYZT3lfcPFSJSyFztlI8D3XGd4Fv0c3Yowg%3D\"}]}\r\ncf-ray: 9f5df5dd193f56b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":71004,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 24.5 (Windows), datetime=2024:10:08 12:50:38], progressive, precision 8, 300x250, components 3","md5":"7c4ef61da9a1b31964e978f85f0822c5","sha1":"74b0f0eeafb15241274671b1199c8eb4e21ab181","sha256":"99225a61cd24642b3467e77a6e23eda7cdd6273f898451e71e4bb9a9eebd262f","sha512":"cd0d387879d62c7aea3cb003267f4fb376e11822367ad4cf53084c13833a6f863ba11235fec44e99296f5ace2f51cd2a193829d57e2f6264e3f459efebd3f9ab","ssdeep":"1536:SvSXF00vSXF0pr5xQIHcSK/toSXJCKeg6CYxMEtjuJb:yS10AS10jxzcDpfuu3Jb","tlshash":"9363f119bf50dca6fdfc803ae062970b5a114ba419b77b283ccf61a5bf341e29d19187","first_seen":"2025-04-13T08:19:34.710818Z","last_seen":"2026-07-06T14:19:55.865974Z","times_seen":590,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/af/25/da/af25da8381e0bd0494ba4018c76898a2.js","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://roblox-custom-daily-reward-script.pages.dev/","date":"2026-05-03T08:40:21.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 21:50:47 GMT","end":"Thu, 23 Jul 2026 21:50:46 GMT"},"fingerprint":{"sha1":"23:74:93:25:BB:94:6A:F0:09:05:7F:57:73:50:14:CD:19:AA:AF:20","sha256":"13:12:D4:15:47:A9:32:60:B9:69:04:44:B0:1C:A6:FF:80:89:A8:57:85:61:DB:5D:BC:87:06:24:86:84:51:44"}}},"request":{"raw":"GET /af/25/da/af25da8381e0bd0494ba4018c76898a2.js HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://roblox-custom-daily-reward-script.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:40:21 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 34790\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-UA-Mobile,Device-Stock-UA,X-OperaMini-Phone-UA,User-Agent,Sec-CH-UA,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Platform,X-Device-User-Agent,X-UCBrowser-Device-UA,Sec-CH-UA-Platform-Version,Sec-CH-UA-Full-Version\r\nx-envoy-upstream-service-time: 8\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 59e0c676032f08d4bc176d719d74cd58\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":92486,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"bf0132d950a826f23669acc55a5ff7b8","sha1":"d10b81e4a9b3c7086d3c2ba4f3c3d586514d90f5","sha256":"0f18cf836362f2a63f1ee97267662e6b0cdf6d7903cea01424b3ac6f90829bf9","sha512":"5bd73b81573388a59cf75c8b3159e03420b940e53c877ba26eecca5e6b734cbfab8d6381f9de2fc3249cc84fd4a34cfc4d0f3b2fe4a3c977decc5ae94d75da00","ssdeep":"1536:2l2eABAdWrl7QJWX8jlvdwF1PTz5Ysk5qMUPKLOB:2dSAkrdQJoYlVwfBFkhO","tlshash":"ad93c78c7f92f0f5039a24b3232f9c16f2ab1d5124fce444d903a9e5ae25319d57ad6c","first_seen":"2026-05-03T08:40:46.537551Z","last_seen":"2026-05-03T08:40:46.537551Z","times_seen":1,"resource_available":true,"data":null}},"time_used":851,"timings":{"blocked":323,"dns":41,"connect":92,"send":0,"wait":110,"receive":93,"ssl":188},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/cti/67/b9/26/67b9261beabf93b934779ff7e369e0de/1716369473.jpg","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roblox-custom-daily-reward-script.pages.dev/","date":"2026-05-03T08:40:22.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 02:33:25 GMT","end":"Fri, 05 Jun 2026 02:33:24 GMT"},"fingerprint":{"sha1":"4A:66:11:51:1F:1F:F3:84:B6:E4:4F:81:C1:03:83:9F:01:17:7E:82","sha256":"DA:55:E3:02:D5:3C:4E:3A:51:ED:21:0D:F4:32:52:C2:C5:31:87:50:DC:AB:13:D9:93:4A:15:0C:D9:8C:D6:4F"}}},"request":{"raw":"GET /cti/67/b9/26/67b9261beabf93b934779ff7e369e0de/1716369473.jpg HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 08:40:22 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 71789\r\nserver: nginx/1.21.6\r\nlast-modified: Wed, 22 May 2024 09:18:01 GMT\r\netag: \"664db849-1186d\"\r\nexpires: Tue, 05 May 2026 08:40:22 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":71789,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 300x250, components 3","md5":"2d281de4129fb09c0e095c5b9beeb115","sha1":"bf238757cb5055f99aeb9911d422850a56fe2c39","sha256":"c8d22cd8ebf01584785595b2ef4f82c1b677742241f562a0aca5c775a4229980","sha512":"691449a4121ac939c8bbb0577b088db9e73847ceef1272bdf9185af214c8fe6e3059567b1106e3e578aac81c8955e8c6c41d4297905c94a41557c87183a56599","ssdeep":"1536:avFROnLOIPttKlCp/vWtTmvx8QTWiC+up1Enc36bVnzZ:av6xKlC3O7D3++36bht","tlshash":"616301bbf9438d8894a878fe76669a17895f2dc8cfc70677304c4aa4bd5012977a40cd","first_seen":"2024-04-07T20:29:01Z","last_seen":"2026-05-15T22:56:44.203028Z","times_seen":310,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":96,"dns":48,"connect":19,"send":0,"wait":38,"receive":29,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"realizationnewestfangs.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.show-creative1.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2FProgamer%2Fflip_icon%2Foct2024%2F3%2Findex.html\u0026l=1711\u0026fd=521","fqdn":"realizationnewestfangs.com","domain":"realizationnewestfangs.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roblox-custom-daily-reward-script.pages.dev/","date":"2026-05-03T08:40:21.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"realizationnewestfangs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 23:41:18 GMT","end":"Sun, 26 Jul 2026 23:41:17 GMT"},"fingerprint":{"sha1":"A3:A7:19:A7:E1:1E:FA:B7:D5:D2:AB:89:E2:E5:2D:BA:31:4C:DC:31","sha256":"9B:B1:9D:73:D4:D6:68:DF:63:E8:A6:F5:27:EB:47:26:AA:6F:52:E3:A6:56:1C:FF:EE:AC:3E:F6:06:CE:09:CA"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.show-creative1.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2FProgamer%2Fflip_icon%2Foct2024%2F3%2Findex.html\u0026l=1711\u0026fd=521 HTTP/1.1\r\nHost: realizationnewestfangs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://roblox-custom-daily-reward-script.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=3b204e8f-85a0-4ad8-92c8-058fb07c1b91:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl26582471=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:40:21 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Mobile, Device-Stock-UA, X-UCBrowser-Device-UA, User-Agent, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-PlatformUser-Agent, Sec-CH-UA-Platform, X-Device-User-Agent, X-OperaMini-Phone-UA, Sec-CH-UA-Full-Version\r\nHost: realizationnewestfangs.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T21:21:08.536412Z","times_seen":17569395,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"protrafficinspector.com/stats","fqdn":"protrafficinspector.com","domain":"protrafficinspector.com","tld":"com"},"ip":{"addr":"18.195.43.118","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://roblox-custom-daily-reward-script.pages.dev/","date":"2026-05-03T08:40:19.879Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"statistics.it.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 14 Apr 2026 00:00:00 GMT","end":"Wed, 28 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:66:77:D7:9E:99:80:D4:C4:22:4B:79:2F:16:2B:49:2C:08:07:99","sha256":"54:26:39:E0:45:11:B3:20:EE:6C:3E:B3:C0:57:5D:F2:28:8C:E0:E1:C4:F0:BD:56:E7:8C:91:6B:40:CC:0E:0D"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: protrafficinspector.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://roblox-custom-daily-reward-script.pages.dev/\r\nOrigin: https://roblox-custom-daily-reward-script.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 08:40:20 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\nserver: fasthttp\r\naccept-ch: Sec-CH-UA,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA,Sec-CH-UA-Platform-Version,Sec-CH-UA-Full-Version,Sec-CH-UA-Platform,Sec-CH-UA-Mobile,Device-Stock-UA,User-Agent\r\naccess-control-allow-origin: https://roblox-custom-daily-reward-script.pages.dev\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nset-cookie: uid_id2=f998f7a5-fd4b-493d-9c5d-1e86a20bb7bf:1:1; expires=Wed, 30 Apr 2036 08:40:20 GMT; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"6579ffa9b84fe979047ee4fd6fc15a31","sha1":"ebfa6148315cdf636c5f3ca363892ca0508104f1","sha256":"6b8dfd7cd65de1348a05f9a5db33960ff8ff56e472332afc30f899ade0589d9c","sha512":"aadda5279f86aca826d16c546d65de461a2507cf8b59df783c126565c2f0dbb5c15169221c9892d4f4d0f7e89f328fd45cb491b37738386f3890c7063aa70882","ssdeep":"","tlshash":"529004c00134700c5cd07100fc310c1d5551c731017f3055d731c0154111110c15574c","first_seen":"2026-05-03T08:40:46.540188Z","last_seen":"2026-05-03T08:40:46.540188Z","times_seen":1,"resource_available":false,"data":null}},"time_used":424,"timings":{"blocked":212,"dns":0,"connect":25,"send":0,"wait":22,"receive":1,"ssl":161},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:300,400,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://roblox-custom-daily-reward-script.pages.dev/","date":"2026-05-03T08:40:21.285Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 05:19:34 GMT","end":"Wed, 01 Jul 2026 05:19:33 GMT"},"fingerprint":{"sha1":"21:64:07:B1:AB:C9:F8:BB:E3:DA:F8:1A:C2:71:8D:C1:5F:BB:C8:5F","sha256":"C9:6D:F4:6C:D4:D4:BA:AB:16:C1:57:05:B3:FD:F7:74:8C:83:CB:18:D2:21:81:4D:F6:97:96:5A:A4:4C:ED:44"}}},"request":{"raw":"GET /css?family=Roboto:300,400,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 03 May 2026 08:40:21 GMT\r\ndate: Sun, 03 May 2026 08:40:21 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16755,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"1936a90eef3ebd4c6b40eb59d72e164d","sha1":"4c698f8dc97e2e6186d46215e209aca1b1194a5d","sha256":"412d98c2f4410a048131a7d9362fb38456ce2ff67cd4731ea411708a7996a021","sha512":"07ad2431175e5566ae435738d94d4da3e96e4856a1fe1d5917c52474cab28808cd940fec0e8f75eb2f3d573e6fe8497fc12636ef4738d1b67e9144725192b580","ssdeep":"384:p9f59g9P9r9yU9/qY4+949Y9p9fM919W969yh9/qY4X9N9t949fd9k9D939yQ9/O:pDS99YURRuWDyjooYhREHPWP2ZZYQRVs","tlshash":"48721091041704009b834ce223cebf35fe1f52117142d0b5abfd9b6b9ddbca6526939d","first_seen":"2026-02-19T22:28:01.752187Z","last_seen":"2026-07-27T19:10:43.411229Z","times_seen":10176,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":98,"dns":2,"connect":27,"send":0,"wait":34,"receive":0,"ssl":66},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"immigrationacre.com/6dd5e3d7ac37d33b5abc87810f6ac7f3/invoke.js","fqdn":"immigrationacre.com","domain":"immigrationacre.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://roblox-custom-daily-reward-script.pages.dev/","date":"2026-05-03T08:40:21.355Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"immigrationacre.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 22:44:59 GMT","end":"Sat, 20 Jun 2026 22:44:58 GMT"},"fingerprint":{"sha1":"C5:C0:F1:09:DF:66:79:21:CE:6B:25:C3:DC:5A:3B:4E:6C:24:00:FD","sha256":"14:5E:A4:DE:46:F2:FF:8F:7D:14:D8:7C:E6:33:BC:41:57:AD:BF:24:AC:C4:3C:0F:A7:EE:34:BE:D3:48:56:5B"}}},"request":{"raw":"GET /6dd5e3d7ac37d33b5abc87810f6ac7f3/invoke.js HTTP/1.1\r\nHost: immigrationacre.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://roblox-custom-daily-reward-script.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:40:21 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 20229\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Mobile,Device-Stock-UA,User-Agent,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA,Sec-CH-UA,Sec-CH-UA-Full-Version\r\nx-envoy-upstream-service-time: 11\r\nHost: immigrationacre.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: f9feb2772f53239073369a4a2a0315be\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":51186,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (51186), with no line terminators","md5":"e609339b8123b13519ef68ccf94d74da","sha1":"fa23bc1ae1cc5ee0881ad97627ea1605f3d3c359","sha256":"063f54e22a5cc8ad214b853463aeb8ec14dcf1a3eabd3157ab6afb0b4a5ad99d","sha512":"f4254a4b675bc0a95d151165d4afcc4e64dd2832c0097db7bc7d8a95bde6e3b0f1840e093b5e327d969c6e6d561b28448fdafa0b940f40c61e27fb6a0e160030","ssdeep":"768:Uj7jxeEGWHp9GAuNWlpBCHpDBRKO8doFtXj9H6sgT:8xeEGWHp9AA7BCHpDBcV+fz9H6sS","tlshash":"6b3317887fa1b0b503b67473623f9046f25c0d0955ecd8dcd087a8a87ea87e9d1b7b25","first_seen":"2026-05-03T08:40:46.541175Z","last_seen":"2026-05-03T08:44:19.127862Z","times_seen":4,"resource_available":true,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"immigrationacre.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"immigrationacre.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"immigrationacre.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/d0/89/ea/d089ea049f0f7b1eacfa2b5bb99d3bdc.js","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://roblox-custom-daily-reward-script.pages.dev/","date":"2026-05-03T08:40:21.505Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 21:50:47 GMT","end":"Thu, 23 Jul 2026 21:50:46 GMT"},"fingerprint":{"sha1":"23:74:93:25:BB:94:6A:F0:09:05:7F:57:73:50:14:CD:19:AA:AF:20","sha256":"13:12:D4:15:47:A9:32:60:B9:69:04:44:B0:1C:A6:FF:80:89:A8:57:85:61:DB:5D:BC:87:06:24:86:84:51:44"}}},"request":{"raw":"GET /d0/89/ea/d089ea049f0f7b1eacfa2b5bb99d3bdc.js HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://roblox-custom-daily-reward-script.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:40:21 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 37597\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: User-Agent,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform,Sec-CH-UA-Model,Device-Stock-UA,X-Device-User-Agent,X-OperaMini-Phone-UA,Sec-CH-UA-Platform-Version,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Mobile,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 2\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 33f3d6ce55f774580857acec04c15466\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":103365,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"5f8ea8defe31ce845a807fc911725a4a","sha1":"b701d9452ef641853d2806e107613fb8596d33f3","sha256":"ce361e8187784021fe08ee14854ee5b41982c46e44d56b6592c66665ef73fa82","sha512":"4c55a59c934767a93fa47786c8bbe7912b64cf054f3eb5c30b6d2d179e8d99ee37fb1dafba2245d0351827379d7bfe73c5ad82a691f1965cc349cad44d6fedcb","ssdeep":"1536:kHLBN82ttARd5zkYcWZ+u9DJvDWaBBl2qcQt7MrHYeCz6Q3d3icPS6iBBJ7o:cBQ8u91v7Hl1cQt7MrHysxq","tlshash":"33a3c68cbf50f55853f62432222f940af0e90c5641dcd198fa52b8ea7f7cf48e9769a4","first_seen":"2026-05-03T08:40:46.542147Z","last_seen":"2026-05-03T08:40:46.542147Z","times_seen":1,"resource_available":true,"data":null}},"time_used":885,"timings":{"blocked":344,"dns":43,"connect":96,"send":0,"wait":99,"receive":95,"ssl":202},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/impr.gif?sid=H4sIAAAAAAAC_1RSvW8cRRyddQwSooj4LNEWKbCUPc9-3N0u6SICBcSOSFAKqvk0g_d2Nzu7d5ejcQgKrYWERIO0fmfHBRGC_wDdUYGElKU6ibihoqFBmBadc5LDFL-PeT-N3pvfe3BQn5AOara4cT2fmDRlm90Odd-8bTKZj6y7dcv1aYdecW-brBddccfLUA7f8sOoQzfcd5XYzTcD6lPqU999x5RK5-PNMxSmeJT4nYR2oqDjdyOMy__3tnZgmQM5PCEvw8j24h_6IxgxQzb4_m1ld6u8uHxtUKesyksM5fGH2W6WjzIMzktdOtDZ8WoauW0J-XoNeXa8UoB8eLhUAG5asvb6E_DseEUTfHj0lClPoTJw-SJGwxlUOodhM4j8Pox8TAAhsbWNbPBwKy9H7O5TlC3Rlqyf_g0zasn6k1eRDb67mpqxezNP68rkmcVYNzDjGczODEU9RzVZgxnNIarPYOSvZPP0fWSDw22b5jBycSnkAY1UrL24y6gXMRl7SSBij3ZjzWlf-Dzxz77I6BmYXUNtHdTGQa0d1IWDgVy4EY0j4bOwpxMp-jRiUSQVp0kcUMoS0Uct7sHIfYhyD0W5h13zZUuc1663hPzzKax0YCuCoWyOZGoD2zyUqa25v8rBKofNNK92DthRXu2ojICV-yhlc2iKO_Y-RHVhOtFWTvNlYLxqpozLZmpkRVDeWVyifiKV0MpTSRB7fU6llwQh9wJf-IGOE94Le4faVvWzo3EceX1fRF6sur7Hg55WkQiEEOqgOCEvLTfifPXNt9hVC7cnZVeFss9E2JdhyLuMi7gf-1T3mOjrENY0MHYNzDqYmJa8pzdQmJa88eBPcDaHTecQ5gJY_RzYaBpSCvbxNOhSTLJH2mRyaITqiHwAmTcoqnVUd52D9IS8Mv3g1tUfz-xx49oXUOIXsjoQZYOibPCJ-YlgJ733w3ZRmYGZsKVfblasUs-DmcfqZwjTkot__X5m3Mu_bUAUe7DF-Us2J-AFQWoIUnV-z3gD-0zPz-sD-zl2Sgc8daY8LckhT8t0H9YsXB2qQFAa93t-GGvlh5EUuhtHiewxGoYKlW3Nvy-c_hcAAP__UHnkmTEEAAA=","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roblox-custom-daily-reward-script.pages.dev/","date":"2026-05-03T08:40:22.351Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 21:50:47 GMT","end":"Thu, 23 Jul 2026 21:50:46 GMT"},"fingerprint":{"sha1":"23:74:93:25:BB:94:6A:F0:09:05:7F:57:73:50:14:CD:19:AA:AF:20","sha256":"13:12:D4:15:47:A9:32:60:B9:69:04:44:B0:1C:A6:FF:80:89:A8:57:85:61:DB:5D:BC:87:06:24:86:84:51:44"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1RSvW8cRRyddQwSooj4LNEWKbCUPc9-3N0u6SICBcSOSFAKqvk0g_d2Nzu7d5ejcQgKrYWERIO0fmfHBRGC_wDdUYGElKU6ibihoqFBmBadc5LDFL-PeT-N3pvfe3BQn5AOara4cT2fmDRlm90Odd-8bTKZj6y7dcv1aYdecW-brBddccfLUA7f8sOoQzfcd5XYzTcD6lPqU999x5RK5-PNMxSmeJT4nYR2oqDjdyOMy__3tnZgmQM5PCEvw8j24h_6IxgxQzb4_m1ld6u8uHxtUKesyksM5fGH2W6WjzIMzktdOtDZ8WoauW0J-XoNeXa8UoB8eLhUAG5asvb6E_DseEUTfHj0lClPoTJw-SJGwxlUOodhM4j8Pox8TAAhsbWNbPBwKy9H7O5TlC3Rlqyf_g0zasn6k1eRDb67mpqxezNP68rkmcVYNzDjGczODEU9RzVZgxnNIarPYOSvZPP0fWSDw22b5jBycSnkAY1UrL24y6gXMRl7SSBij3ZjzWlf-Dzxz77I6BmYXUNtHdTGQa0d1IWDgVy4EY0j4bOwpxMp-jRiUSQVp0kcUMoS0Uct7sHIfYhyD0W5h13zZUuc1663hPzzKax0YCuCoWyOZGoD2zyUqa25v8rBKofNNK92DthRXu2ojICV-yhlc2iKO_Y-RHVhOtFWTvNlYLxqpozLZmpkRVDeWVyifiKV0MpTSRB7fU6llwQh9wJf-IGOE94Le4faVvWzo3EceX1fRF6sur7Hg55WkQiEEOqgOCEvLTfifPXNt9hVC7cnZVeFss9E2JdhyLuMi7gf-1T3mOjrENY0MHYNzDqYmJa8pzdQmJa88eBPcDaHTecQ5gJY_RzYaBpSCvbxNOhSTLJH2mRyaITqiHwAmTcoqnVUd52D9IS8Mv3g1tUfz-xx49oXUOIXsjoQZYOibPCJ-YlgJ733w3ZRmYGZsKVfblasUs-DmcfqZwjTkot__X5m3Mu_bUAUe7DF-Us2J-AFQWoIUnV-z3gD-0zPz-sD-zl2Sgc8daY8LckhT8t0H9YsXB2qQFAa93t-GGvlh5EUuhtHiewxGoYKlW3Nvy-c_hcAAP__UHnkmTEEAAA= HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=3b204e8f-85a0-4ad8-92c8-058fb07c1b91:2:1; ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.fFOGoY_5jURiHLVPbK8iOwTHsR2uzxjOMh44Pu007CU; pdhtkv=true; uncs=1; pdhtkv5=true; uncs5=1; u_pl26582443=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:40:22 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Mobile,X-Device-User-Agent,User-Agent,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,Device-Stock-UA,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA,Sec-CH-UA\r\nx-envoy-upstream-service-time: 2\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 179ff0a267c622f74f1095119eea47f0\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T21:21:08.536412Z","times_seen":17569395,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.nightdestruct.com/sb/ssp/vpn/classic-push/big1/img/close.png","fqdn":"cdn.nightdestruct.com","domain":"nightdestruct.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roblox-custom-daily-reward-script.pages.dev/","date":"2026-05-03T08:40:23.541Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nightdestruct.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 16:21:26 GMT","end":"Sun, 28 Jun 2026 16:21:25 GMT"},"fingerprint":{"sha1":"77:BA:39:E3:87:1C:89:74:C5:36:C2:0F:E9:4C:0E:35:C4:92:A6:BA","sha256":"5F:17:E6:F7:42:E9:5F:B9:9E:03:47:36:9F:79:03:3B:E2:C2:66:ED:E9:3D:14:AB:29:B0:52:4A:62:57:C4:91"}}},"request":{"raw":"GET /sb/ssp/vpn/classic-push/big1/img/close.png HTTP/1.1\r\nHost: cdn.nightdestruct.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 03 May 2026 08:40:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 591\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:19:42 GMT\r\npriority: u=4,i=?0\r\netag: \"65aa84fe-24f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\naccept-ranges: bytes\r\nage: 2082391\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iREZWVrxxMsRsuaOlg1LiDqmYtdjAW8dTW15JPQoLTZv%2FMn4pM36kzWsfd2nwiUHzqWhYWa2uajqVDOvsYUARR7Rytb2YmkbSzChGjAYPDaod7VFvlkRpzsc4%2B3z5mCBIomf7ttKSJk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f5df5eb1a385ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":591,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 12 x 12, 8-bit/color RGBA, non-interlaced","md5":"9fd5bcb6103d86e317bd1eb019bcbe71","sha1":"6b5a52ea669dcb74946f2bed4bdd7ec985026113","sha256":"0ddd3be104ac7945fb062096df62034a6a24ecc76ba92493c35c62c3c25982ae","sha512":"e244a8842c009fa83e8d9d1088ec5b76ca2a42660568b7886e01724977b9ebd4e43690e0c651e25287c64dcc4826391b34cae6a106e2148139450dd05fc5a562","ssdeep":"","tlshash":"b0f0414e7c5903a1874caf3b18dd00119c27898077c82e0db689eed20e008e215471da","first_seen":"2023-04-11T11:09:41Z","last_seen":"2026-07-26T11:17:48.178868Z","times_seen":6385,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wayfarerorthodox.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.nightdestruct.com%2Fsb%2Fssp%2Fvpn%2Fclassic-push%2Fbig1%2Fjs%2Fscript.js\u0026l=958\u0026fd=544","fqdn":"wayfarerorthodox.com","domain":"wayfarerorthodox.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roblox-custom-daily-reward-script.pages.dev/","date":"2026-05-03T08:40:24.127Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"wayfarerorthodox.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 00:39:42 GMT","end":"Mon, 27 Jul 2026 00:39:41 GMT"},"fingerprint":{"sha1":"72:D3:68:BC:A4:4E:55:26:DB:11:49:E2:96:21:2A:F6:6D:D9:43:08","sha256":"32:C2:2C:23:81:37:C1:17:20:76:3E:3A:3C:7A:DB:DC:43:10:FE:F6:F2:BA:21:05:A6:7F:B0:88:91:D5:10:02"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.nightdestruct.com%2Fsb%2Fssp%2Fvpn%2Fclassic-push%2Fbig1%2Fjs%2Fscript.js\u0026l=958\u0026fd=544 HTTP/1.1\r\nHost: wayfarerorthodox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://roblox-custom-daily-reward-script.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:40:24 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: Device-Stock-UA, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Mobile, X-Device-User-Agent, X-OperaMini-Phone-UA, X-UCBrowser-Device-UA, User-Agent, Sec-CH-UA, Sec-CH-UA-PlatformUser-Agent, Sec-CH-UA-Platform\r\nHost: wayfarerorthodox.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T21:21:08.536412Z","times_seen":17569395,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"immigrationacre.com/52f212bca95373aed7ead32398143db7/invoke.js","fqdn":"immigrationacre.com","domain":"immigrationacre.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://roblox-custom-daily-reward-script.pages.dev/","date":"2026-05-03T08:40:24.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"immigrationacre.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 22:44:59 GMT","end":"Sat, 20 Jun 2026 22:44:58 GMT"},"fingerprint":{"sha1":"C5:C0:F1:09:DF:66:79:21:CE:6B:25:C3:DC:5A:3B:4E:6C:24:00:FD","sha256":"14:5E:A4:DE:46:F2:FF:8F:7D:14:D8:7C:E6:33:BC:41:57:AD:BF:24:AC:C4:3C:0F:A7:EE:34:BE:D3:48:56:5B"}}},"request":{"raw":"GET /52f212bca95373aed7ead32398143db7/invoke.js HTTP/1.1\r\nHost: immigrationacre.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://roblox-custom-daily-reward-script.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:40:24 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 20152\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-UA-Mobile,Device-Stock-UA,X-OperaMini-Phone-UA,User-Agent,Sec-CH-UA,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Platform,X-Device-User-Agent,X-UCBrowser-Device-UA,Sec-CH-UA-Platform-Version,Sec-CH-UA-Full-Version\r\nx-envoy-upstream-service-time: 3\r\nHost: immigrationacre.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 3b138c34a9044ff73dd3b9140972e73e\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":51111,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (51111), with no line terminators","md5":"a5807249e5339e1041e4c304a292cbd6","sha1":"3d3a7c7925aae1b5539a1cca96e286190f2c9151","sha256":"23a5bce3e4176860321bc68f890d42b40932c6906b531cc6ac9831e89ddee41b","sha512":"869a89ac6eba73ecb9f8fcc185b848eebf03e47fe4c2971f8fa90318a62d54a59d50b56f8062ef57774e87803b2f38f9ce183c3da18bd34d28f524c09fab60e6","ssdeep":"768:Uu7O2x7hMHp9GzuNWlpBCHpDBRKO8doFtXj9H6sgT:q2x7hMHp9zA7BCHpDBcV+fz9H6sS","tlshash":"303317887fa1b07503b67473622f9046f25c0d0956ecd8dcd087a8a87ea87e9d1b7b25","first_seen":"2026-04-30T20:02:51.271243Z","last_seen":"2026-05-03T08:42:10.106244Z","times_seen":4,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":97,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"immigrationacre.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"immigrationacre.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"immigrationacre.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"realizationnewestfangs.com/impr.gif?sid=H4sIAAAAAAAC_1RSO48bVRi9490GAUI8O5CLLYiEvXcetmdIEREREI_sAglKQYHuazYXj2cmc2dsx2k2BFJQoEAVqMbH3l2KVQT_AHnpViAxnYtsQ0WNWESH7LUUcorvcc4U55t77o6LE9JEweYfXE5GOorYZqtJ669e07FMBqa-dbVu0yY9X7-m47Z3vj5clKz_uu16TXqu_rYS3WTToTalNrXrb-lMhclwc6lCp4eB3Qxo03OadsvDMHt8N0UNhtUg-yfkOWhZPfNH-Am0mCHu_fimMt08SV-71CsilicZ-vLg47gbJ4MYvUdjmFkI44PV10hMRcj9GpL4YHUBkv50cQG4rkjtpYfg8cHKJnh_78wpj6BicPkkBv0ZVDSDZjOI5A60_J0AQmJrG3FvfyvJBuzmmcoWakXWT_-CHlRk_eELiHsPLkZ6WL-SREWuk9hgGJbQwxn0zgxpcYR8VIMeHEHkn0PL38jm6fuIe9NtEyXQcr7hcod6yg8bfovRhsek3wgc4Tdoyw857QibB_byF-lwBmZqKIyFQlsoQgtFaqEn53WP-p6wmdsOAyk61GOeJxWnge9QygLRQSFuQ8t7ENmX-6m8nnf70zwr1LSIhRnbP5xRTrAk9xekE4ztw-LTNHLaLd_xOvbYRprtoqu_rYj14uWKkL9vwcg1mLwi1oe76MtyT0bGMeW-jEzB7VV3Vt0tJ0m-M2Z7Sb6jYgKW3UMmy6lOb5g7EPnaZBQaOUkWhfG8nDAuy4mWOUF2Y75B7UAqEaqG4i2n0QlDuxGoDm9Ip9X225QFjhLT0ORFOU5PyLOLl7IefP00umpeZ6HTksx3fVtRLqkXeJx51PZFp-0HPnNgdAltamDGwkhX5L3wHFJdkVfu_gnOjmCiIwhtgRUvgw1KsOslRvFhqGPZ10I1RdKDTEqk-Trym9Y4OiHPTz66evHnZWDe-Pc-lDi-MP9uge8hshJpVuIz_QvBTnT7p-001z09YosEXclZrtbAdEWsW79C6Io89e6lZZg33vkKIt2FSY8vHLlLwCQEPLUQaYJIHZMVwHgJ87-dP5rH5gvsZBZ4ZE14lFlTHmXRN2c2jZ7XQ1c5glK_07ZdP1S260kRtnwvkG1GXVchN5X-54nT_wIAAP__zM4mQUoEAAA=","fqdn":"realizationnewestfangs.com","domain":"realizationnewestfangs.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roblox-custom-daily-reward-script.pages.dev/","date":"2026-05-03T08:40:24.437Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"realizationnewestfangs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 23:41:18 GMT","end":"Sun, 26 Jul 2026 23:41:17 GMT"},"fingerprint":{"sha1":"A3:A7:19:A7:E1:1E:FA:B7:D5:D2:AB:89:E2:E5:2D:BA:31:4C:DC:31","sha256":"9B:B1:9D:73:D4:D6:68:DF:63:E8:A6:F5:27:EB:47:26:AA:6F:52:E3:A6:56:1C:FF:EE:AC:3E:F6:06:CE:09:CA"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1RSO48bVRi9490GAUI8O5CLLYiEvXcetmdIEREREI_sAglKQYHuazYXj2cmc2dsx2k2BFJQoEAVqMbH3l2KVQT_AHnpViAxnYtsQ0WNWESH7LUUcorvcc4U55t77o6LE9JEweYfXE5GOorYZqtJ669e07FMBqa-dbVu0yY9X7-m47Z3vj5clKz_uu16TXqu_rYS3WTToTalNrXrb-lMhclwc6lCp4eB3Qxo03OadsvDMHt8N0UNhtUg-yfkOWhZPfNH-Am0mCHu_fimMt08SV-71CsilicZ-vLg47gbJ4MYvUdjmFkI44PV10hMRcj9GpL4YHUBkv50cQG4rkjtpYfg8cHKJnh_78wpj6BicPkkBv0ZVDSDZjOI5A60_J0AQmJrG3FvfyvJBuzmmcoWakXWT_-CHlRk_eELiHsPLkZ6WL-SREWuk9hgGJbQwxn0zgxpcYR8VIMeHEHkn0PL38jm6fuIe9NtEyXQcr7hcod6yg8bfovRhsek3wgc4Tdoyw857QibB_byF-lwBmZqKIyFQlsoQgtFaqEn53WP-p6wmdsOAyk61GOeJxWnge9QygLRQSFuQ8t7ENmX-6m8nnf70zwr1LSIhRnbP5xRTrAk9xekE4ztw-LTNHLaLd_xOvbYRprtoqu_rYj14uWKkL9vwcg1mLwi1oe76MtyT0bGMeW-jEzB7VV3Vt0tJ0m-M2Z7Sb6jYgKW3UMmy6lOb5g7EPnaZBQaOUkWhfG8nDAuy4mWOUF2Y75B7UAqEaqG4i2n0QlDuxGoDm9Ip9X225QFjhLT0ORFOU5PyLOLl7IefP00umpeZ6HTksx3fVtRLqkXeJx51PZFp-0HPnNgdAltamDGwkhX5L3wHFJdkVfu_gnOjmCiIwhtgRUvgw1KsOslRvFhqGPZ10I1RdKDTEqk-Trym9Y4OiHPTz66evHnZWDe-Pc-lDi-MP9uge8hshJpVuIz_QvBTnT7p-001z09YosEXclZrtbAdEWsW79C6Io89e6lZZg33vkKIt2FSY8vHLlLwCQEPLUQaYJIHZMVwHgJ87-dP5rH5gvsZBZ4ZE14lFlTHmXRN2c2jZ7XQ1c5glK_07ZdP1S260kRtnwvkG1GXVchN5X-54nT_wIAAP__zM4mQUoEAAA= HTTP/1.1\r\nHost: realizationnewestfangs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://roblox-custom-daily-reward-script.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=3b204e8f-85a0-4ad8-92c8-058fb07c1b91:2:1; pdhtkv=true; uncs=2; pdhtkv29=true; uncs29=2; u_pl26582471=1; u_pl28216845=1; slecaf25da8381e0bd0494ba4018c76898a2=[4323736]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:40:24 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: User-Agent,Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-UA-Mobile,Device-Stock-UA,X-Device-User-Agent,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Full-Version,Sec-CH-UA-Platform,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nset-cookie: iprc_l+be87a5f18859e484117a658d4dd9a389=4323736; expires=Mon, 04 May 2026 08:40:24 GMT; path=/; secure; SameSite=None\niprc_l:4323736=1; expires=Mon, 04 May 2026 08:40:24 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 7\r\nHost: realizationnewestfangs.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: a342894f0ec122ca9ac98de2df4d9dfc\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T21:21:08.536412Z","times_seen":17569395,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/watch.1123570811749.js?key=6dd5e3d7ac37d33b5abc87810f6ac7f3\u0026kw=%5B%22build%22%2C%22a%22%2C%22better%22%2C%22roblox%22%2C%22custom%22%2C%22daily%22%2C%22reward%22%2C%22script%22%2C%22fast%22%5D\u0026refer=https%3A%2F%2Froblox-custom-daily-reward-script.pages.dev%2F\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=3b204e8f-85a0-4ad8-92c8-058fb07c1b91%3A2%3A1","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://roblox-custom-daily-reward-script.pages.dev/","date":"2026-05-03T08:40:21.502Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 21:50:47 GMT","end":"Thu, 23 Jul 2026 21:50:46 GMT"},"fingerprint":{"sha1":"23:74:93:25:BB:94:6A:F0:09:05:7F:57:73:50:14:CD:19:AA:AF:20","sha256":"13:12:D4:15:47:A9:32:60:B9:69:04:44:B0:1C:A6:FF:80:89:A8:57:85:61:DB:5D:BC:87:06:24:86:84:51:44"}}},"request":{"raw":"GET /watch.1123570811749.js?key=6dd5e3d7ac37d33b5abc87810f6ac7f3\u0026kw=%5B%22build%22%2C%22a%22%2C%22better%22%2C%22roblox%22%2C%22custom%22%2C%22daily%22%2C%22reward%22%2C%22script%22%2C%22fast%22%5D\u0026refer=https%3A%2F%2Froblox-custom-daily-reward-script.pages.dev%2F\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=3b204e8f-85a0-4ad8-92c8-058fb07c1b91%3A2%3A1 HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://roblox-custom-daily-reward-script.pages.dev/\r\nOrigin: https://roblox-custom-daily-reward-script.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 307 Temporary Redirect\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:40:21 GMT\r\nContent-Type: text/html\r\nContent-Length: 0\r\nConnection: keep-alive\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Model,Sec-CH-UA-Mobile,X-Device-User-Agent,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform,Device-Stock-UA,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA,User-Agent,Sec-CH-UA-Platform-Version\r\naccess-control-allow-origin: https://roblox-custom-daily-reward-script.pages.dev\r\naccess-control-allow-credentials: true\r\nlocation: https://kettledroopingcontinuation.com/watch.1123570811749.js?key=6dd5e3d7ac37d33b5abc87810f6ac7f3\u0026kw=%5B%22build%22%2C%22a%22%2C%22better%22%2C%22roblox%22%2C%22custom%22%2C%22daily%22%2C%22reward%22%2C%22script%22%2C%22fast%22%5D\u0026refer=https%3A%2F%2Froblox-custom-daily-reward-script.pages.dev%2F\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=3b204e8f-85a0-4ad8-92c8-058fb07c1b91%3A2%3A1\u0026rmtc=t\u0026shv=2\u0026sht=d4sMeJ1smW81iXG_axJHaREXwSKWPA5FGWPQ8jhkbJc\u0026fstu=019decfe-e884-71c4-8e51-b26fe4c2ccce\u0026st1=d0d5f2e2d1e3a86b57b5cbfaff1233f3\u0026ps1=1777797621\r\nset-cookie: uid_id2=3b204e8f-85a0-4ad8-92c8-058fb07c1b91:2:1; expires=Sun, 10 May 2026 08:40:21 GMT; path=/; secure; SameSite=None\nain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.fFOGoY_5jURiHLVPbK8iOwTHsR2uzxjOMh44Pu007CU; expires=Sun, 03 May 2026 08:41:21 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 2\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 05f546e58d8e2b8a99e110be3ce9ca70\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4329,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T21:21:08.536412Z","times_seen":17569395,"resource_available":true,"data":null}},"time_used":784,"timings":{"blocked":341,"dns":43,"connect":96,"send":0,"wait":101,"receive":1,"ssl":199},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"realizationnewestfangs.com/ren.gif?sid=H4sIAAAAAAAC_1RSvY_bZBx-nbsFAUJ8bqAMN1CJ5F47dmLToaKiID56B7SoAwN6v3x9iWO7fu0kTZcrhQ4MqDAVJudJ7o7hVMF_gHJsJ5DwlqG3MDEjDrGh5CKVPsPv43k8PD-_z91xcUKaKNj8g8vJSEcR2_SatP7qNR3LZGDqW1frNm3S8_VrOm675-vDRcn6r9stt0nP1d9WoptsOtSm1KZ2_S2dqTAZbi5V6PQwsJsBbbpO0_ZcDLPHd1PUYFgNsn9CnoOW1TN_hJ9Aixni3o9vKtPNk_S1S70iYnmSoS8PPo67cTKI0Xs0hpmFMD5YfY3EVITcryGJD1YXIOlPFxeA64rUXnoIHh-sbIL3986c8ggqBpdPYtCfQUUzaDaDSO5Ay98JICS2thH39reSbMBunqlsoVZk_fQv6EFF1h--gLj34GKkh_UrSVTkOokNhmEJPZxB78yQFkfIRzXowRFE_jm0_I1snr6PuDfdNlECLecbLe5QV_lhw_cYbbhM-o3AEX6Den7IaUfYPLCXv0iHMzBTQ2EsFNpCEVooUgs9Oa-71HeFzVrtMJCiQ13mulJxGvgOpSwQHRTiNrS8B5F9uZ_K63m3P82zQk2LWJix_cMZ5QRLcn9BOsHYPiw-TSOn7fmO27HHNtJsF139bUWsFy9XhPx9C0auweQVsT7cRV-WezIyjin3ZWQKbq-6s-qtcpLkO2O2l-Q7KiZg2T1kspzq9Ia5A5GvTUahkZNkURjPywnjspxomRNkN-Yb1A6kEqFqKO45jU4Y2o1AdXhDOl7bb1MWOEpMQ5MX5Tg9Ic8uXsp68PXT6Kp5nYWOJ5nf8m1FuaRu4HLmUtsXnbYf-MyB0SW0qYEZCyNdkffCc0h1RV65-yc4O4KJjiC0BVa8DDYowa6XGMWHoY5lXwvVFEkPMimR5uvIb1rj6IQ8P_no6sWfl4F549_7UOL4wvy7Bb6HyEqkWYnP9C8EO9Htn7bTXPf0iC0SdCVnuVoD0xWxbv0KoSvy1LuXlmHeeOcriHQXJj2-cNRaAiYh4KmFSBNE6pisAMZLmP_t_NE8Nl9gJ7PAI2vCo8ya8iiLvjmzafS87jm81fb9tgrbMmzJltOSgUdV4LKg7Qauh9xU-p8nTv8LAAD__zCmtp9KBAAA","fqdn":"realizationnewestfangs.com","domain":"realizationnewestfangs.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roblox-custom-daily-reward-script.pages.dev/","date":"2026-05-03T08:40:22.883Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"realizationnewestfangs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 23:41:18 GMT","end":"Sun, 26 Jul 2026 23:41:17 GMT"},"fingerprint":{"sha1":"A3:A7:19:A7:E1:1E:FA:B7:D5:D2:AB:89:E2:E5:2D:BA:31:4C:DC:31","sha256":"9B:B1:9D:73:D4:D6:68:DF:63:E8:A6:F5:27:EB:47:26:AA:6F:52:E3:A6:56:1C:FF:EE:AC:3E:F6:06:CE:09:CA"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_1RSvY_bZBx-nbsFAUJ8bqAMN1CJ5F47dmLToaKiID56B7SoAwN6v3x9iWO7fu0kTZcrhQ4MqDAVJudJ7o7hVMF_gHJsJ5DwlqG3MDEjDrGh5CKVPsPv43k8PD-_z91xcUKaKNj8g8vJSEcR2_SatP7qNR3LZGDqW1frNm3S8_VrOm675-vDRcn6r9stt0nP1d9WoptsOtSm1KZ2_S2dqTAZbi5V6PQwsJsBbbpO0_ZcDLPHd1PUYFgNsn9CnoOW1TN_hJ9Aixni3o9vKtPNk_S1S70iYnmSoS8PPo67cTKI0Xs0hpmFMD5YfY3EVITcryGJD1YXIOlPFxeA64rUXnoIHh-sbIL3986c8ggqBpdPYtCfQUUzaDaDSO5Ay98JICS2thH39reSbMBunqlsoVZk_fQv6EFF1h--gLj34GKkh_UrSVTkOokNhmEJPZxB78yQFkfIRzXowRFE_jm0_I1snr6PuDfdNlECLecbLe5QV_lhw_cYbbhM-o3AEX6Den7IaUfYPLCXv0iHMzBTQ2EsFNpCEVooUgs9Oa-71HeFzVrtMJCiQ13mulJxGvgOpSwQHRTiNrS8B5F9uZ_K63m3P82zQk2LWJix_cMZ5QRLcn9BOsHYPiw-TSOn7fmO27HHNtJsF139bUWsFy9XhPx9C0auweQVsT7cRV-WezIyjin3ZWQKbq-6s-qtcpLkO2O2l-Q7KiZg2T1kspzq9Ia5A5GvTUahkZNkURjPywnjspxomRNkN-Yb1A6kEqFqKO45jU4Y2o1AdXhDOl7bb1MWOEpMQ5MX5Tg9Ic8uXsp68PXT6Kp5nYWOJ5nf8m1FuaRu4HLmUtsXnbYf-MyB0SW0qYEZCyNdkffCc0h1RV65-yc4O4KJjiC0BVa8DDYowa6XGMWHoY5lXwvVFEkPMimR5uvIb1rj6IQ8P_no6sWfl4F549_7UOL4wvy7Bb6HyEqkWYnP9C8EO9Htn7bTXPf0iC0SdCVnuVoD0xWxbv0KoSvy1LuXlmHeeOcriHQXJj2-cNRaAiYh4KmFSBNE6pisAMZLmP_t_NE8Nl9gJ7PAI2vCo8ya8iiLvjmzafS87jm81fb9tgrbMmzJltOSgUdV4LKg7Qauh9xU-p8nTv8LAAD__zCmtp9KBAAA HTTP/1.1\r\nHost: realizationnewestfangs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://roblox-custom-daily-reward-script.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=3b204e8f-85a0-4ad8-92c8-058fb07c1b91:2:1; pdhtkv=true; uncs=2; pdhtkv29=true; uncs29=2; u_pl26582471=1; u_pl28216845=1; slecaf25da8381e0bd0494ba4018c76898a2=[4323736]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:40:22 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: User-Agent,Sec-CH-UA,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Full-Version,Sec-CH-UA-Platform,X-Device-User-Agent,X-UCBrowser-Device-UA,Sec-CH-UA-Platform-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-UA-Mobile,Device-Stock-UA,X-OperaMini-Phone-UA\r\nx-envoy-upstream-service-time: 3\r\nHost: realizationnewestfangs.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: c8312c8a33bf3885cf7ce0873791d0c0\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T21:21:08.536412Z","times_seen":17569395,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wayfarerorthodox.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.show-sb.com%2Fsb%2Fau%2F48%2F48%2Feb%2F4848ebd6f7295875a5d388ec2488aba3%2F1648542421.html\u0026l=1538\u0026fd=513","fqdn":"wayfarerorthodox.com","domain":"wayfarerorthodox.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roblox-custom-daily-reward-script.pages.dev/","date":"2026-05-03T08:40:23.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"wayfarerorthodox.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 00:39:42 GMT","end":"Mon, 27 Jul 2026 00:39:41 GMT"},"fingerprint":{"sha1":"72:D3:68:BC:A4:4E:55:26:DB:11:49:E2:96:21:2A:F6:6D:D9:43:08","sha256":"32:C2:2C:23:81:37:C1:17:20:76:3E:3A:3C:7A:DB:DC:43:10:FE:F6:F2:BA:21:05:A6:7F:B0:88:91:D5:10:02"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.show-sb.com%2Fsb%2Fau%2F48%2F48%2Feb%2F4848ebd6f7295875a5d388ec2488aba3%2F1648542421.html\u0026l=1538\u0026fd=513 HTTP/1.1\r\nHost: wayfarerorthodox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://roblox-custom-daily-reward-script.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:40:23 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: Device-Stock-UA, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Mobile, X-Device-User-Agent, X-OperaMini-Phone-UA, X-UCBrowser-Device-UA, User-Agent, Sec-CH-UA, Sec-CH-UA-PlatformUser-Agent, Sec-CH-UA-Platform\r\nHost: wayfarerorthodox.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T21:21:08.536412Z","times_seen":17569395,"resource_available":true,"data":null}},"time_used":760,"timings":{"blocked":327,"dns":43,"connect":93,"send":0,"wait":103,"receive":0,"ssl":191},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"realizationnewestfangs.com/1b/50/e5/1b50e57a5911fd0a5b46962ab48ca22b.js","fqdn":"realizationnewestfangs.com","domain":"realizationnewestfangs.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://roblox-custom-daily-reward-script.pages.dev/","date":"2026-05-03T08:40:24.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"realizationnewestfangs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 23:41:18 GMT","end":"Sun, 26 Jul 2026 23:41:17 GMT"},"fingerprint":{"sha1":"A3:A7:19:A7:E1:1E:FA:B7:D5:D2:AB:89:E2:E5:2D:BA:31:4C:DC:31","sha256":"9B:B1:9D:73:D4:D6:68:DF:63:E8:A6:F5:27:EB:47:26:AA:6F:52:E3:A6:56:1C:FF:EE:AC:3E:F6:06:CE:09:CA"}}},"request":{"raw":"GET /1b/50/e5/1b50e57a5911fd0a5b46962ab48ca22b.js HTTP/1.1\r\nHost: realizationnewestfangs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://roblox-custom-daily-reward-script.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=3b204e8f-85a0-4ad8-92c8-058fb07c1b91:2:1; pdhtkv=true; uncs=2; pdhtkv29=true; uncs29=2; u_pl26582471=1; u_pl28216845=1; slecaf25da8381e0bd0494ba4018c76898a2=[4323736]\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:40:24 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 2574\r\nConnection: close\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Mobile,Device-Stock-UA,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA,User-Agent,Sec-CH-UA-Platform-Version,Sec-CH-UA,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List\r\nx-envoy-upstream-service-time: 2\r\nHost: realizationnewestfangs.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 98a308304387bf7f4f088c67941a01fc\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":5146,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5146), with no line terminators","md5":"a141d4cc0ea62b7e58f726a49c7b649e","sha1":"ca9a28b3d7e06f192f20989c96c710bd243d512e","sha256":"42554c0284cc374e33e51ba1c2980fad64bd7600955788facf38b137a1668c80","sha512":"148f99f86db9534dc360f8b266d2d648f7554e616703ff93c369a32f2540eb4d3fad86b449b34e9c19e0805d1aa38dd2cf00412d5569df4fb92a018f70fbbfe4","ssdeep":"96:ctGAdiByQnKauwtTMpX8TxnOgV27JBrHVtH41:c4fycnsgUDpl41","tlshash":"8db1858c3f81f2d407b270af2f2f1509f16d5c20ba89d498d01b95d03e5862adaa7f71","first_seen":"2026-04-30T15:37:40.418293Z","last_seen":"2026-05-04T13:42:54.864213Z","times_seen":154,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.nightdestruct.com/sb/notifications/utility/default/us/blog/Progamer/flip_icon/oct2024/3/img/close.svg","fqdn":"cdn.nightdestruct.com","domain":"nightdestruct.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roblox-custom-daily-reward-script.pages.dev/","date":"2026-05-03T08:40:21.290Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nightdestruct.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 16:21:26 GMT","end":"Sun, 28 Jun 2026 16:21:25 GMT"},"fingerprint":{"sha1":"77:BA:39:E3:87:1C:89:74:C5:36:C2:0F:E9:4C:0E:35:C4:92:A6:BA","sha256":"5F:17:E6:F7:42:E9:5F:B9:9E:03:47:36:9F:79:03:3B:E2:C2:66:ED:E9:3D:14:AB:29:B0:52:4A:62:57:C4:91"}}},"request":{"raw":"GET /sb/notifications/utility/default/us/blog/Progamer/flip_icon/oct2024/3/img/close.svg HTTP/1.1\r\nHost: cdn.nightdestruct.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 08:40:21 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 15 May 2025 09:23:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FDBV49Qcfzxln0jF77MPuMhGiaApYKwzsCNi99OENmuamKDPsmRpEcUaLBDjA%2Boq9CBF9U9n8VtnL9Y4dCbME0OAf4UCYI1kAVGEL8Df5%2B1CKqZEyDUM4Sf%2BOtOA9my8oC4iDG1Kqdg%3D\"}]}\r\nage: 2902226\r\ncf-cache-status: HIT\r\netag: W/\"6825b294-415\"\r\ncontent-encoding: br\r\ncf-ray: 9f5df5dd093c56b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1045,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"26dd89033221449321cb8c527a691faf","sha1":"983f7411316deafd84c8cd91fae81b54b583771a","sha256":"f753b8837c88daa22f91f3fa6d73148ec95ae850b821e0d21c86dcbe30be6733","sha512":"35e67782deb6b4c8d55e26035f7dbbcc7285503b72816475010b48f7c85eeb5ecc6f8d344e1ffe93b80784265febe939199571a9f2edae2cac332e7b7949b05c","ssdeep":"","tlshash":"b311cccc416f061e29713e28deeb808297a882f5e0bc87f4f905c86ebd0bf8518d1664","first_seen":"2023-12-07T20:21:44Z","last_seen":"2026-07-22T02:48:25.240926Z","times_seen":678,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"realizationnewestfangs.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.nightdestruct.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2FProgamer%2Fflip_icon%2Foct2024%2F3%2Fjs%2Fscript.js\u0026l=445\u0026fd=563","fqdn":"realizationnewestfangs.com","domain":"realizationnewestfangs.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roblox-custom-daily-reward-script.pages.dev/","date":"2026-05-03T08:40:21.809Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"realizationnewestfangs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 23:41:18 GMT","end":"Sun, 26 Jul 2026 23:41:17 GMT"},"fingerprint":{"sha1":"A3:A7:19:A7:E1:1E:FA:B7:D5:D2:AB:89:E2:E5:2D:BA:31:4C:DC:31","sha256":"9B:B1:9D:73:D4:D6:68:DF:63:E8:A6:F5:27:EB:47:26:AA:6F:52:E3:A6:56:1C:FF:EE:AC:3E:F6:06:CE:09:CA"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.nightdestruct.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2FProgamer%2Fflip_icon%2Foct2024%2F3%2Fjs%2Fscript.js\u0026l=445\u0026fd=563 HTTP/1.1\r\nHost: realizationnewestfangs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://roblox-custom-daily-reward-script.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=3b204e8f-85a0-4ad8-92c8-058fb07c1b91:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl26582471=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:40:21 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: Sec-CH-UA-PlatformUser-Agent, Sec-CH-UA-Platform, Sec-CH-UA-Model, Device-Stock-UA, X-Device-User-Agent, X-OperaMini-Phone-UA, X-UCBrowser-Device-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, User-Agent, Sec-CH-UA-Platform-Version, Sec-CH-UA\r\nHost: realizationnewestfangs.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T21:21:08.536412Z","times_seen":17569395,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.nightdestruct.com/sb/ssp/vpn/classic-push/big1/css/animate.css","fqdn":"cdn.nightdestruct.com","domain":"nightdestruct.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://roblox-custom-daily-reward-script.pages.dev/","date":"2026-05-03T08:40:23.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nightdestruct.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 16:21:26 GMT","end":"Sun, 28 Jun 2026 16:21:25 GMT"},"fingerprint":{"sha1":"77:BA:39:E3:87:1C:89:74:C5:36:C2:0F:E9:4C:0E:35:C4:92:A6:BA","sha256":"5F:17:E6:F7:42:E9:5F:B9:9E:03:47:36:9F:79:03:3B:E2:C2:66:ED:E9:3D:14:AB:29:B0:52:4A:62:57:C4:91"}}},"request":{"raw":"GET /sb/ssp/vpn/classic-push/big1/css/animate.css HTTP/1.1\r\nHost: cdn.nightdestruct.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://roblox-custom-daily-reward-script.pages.dev/\r\nOrigin: https://roblox-custom-daily-reward-script.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 08:40:23 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:19:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"65aa84fe-13365\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3xwvIHjVSYoUZx3l8drctKutrhEgB%2FYwg4w7%2FXk8l4L6dLSMzZxbK%2BQYxuS6PG3nq53d3CnkDd7qIRA3pku2aAvKjsv1dQ4twO85jcGg4WJrkRU8YIGk52Ml7wGOiUeaE6uwhBMNpAg%3D\"}]}\r\ncf-ray: 9f5df5ea6c1756b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78693,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"5982c5377696d20476871062646b253f","sha1":"8bf2c93fa9ccc908f7df0fb7abb911bbac3e4242","sha256":"4e23a6449e6ef4614f0107cecf5c9eda75d2041c7c71f4a55d45f2a7e75450f4","sha512":"92592dac2a817293e8ec1d94bf99df639626a90d524420b01a12210398927c0650cc26fa8e730300096b29961563aa02efb707478c6d51ac8616bb1bde5a0cb2","ssdeep":"384:jvuAuF81dghu3uFlZlX/m/Gu7uNUtrL4VrbZJgBhLYNKwZiMUL6Vpaj7F:jvuAu21dghu3uhu7uNKwZiMUL6Vpaj7F","tlshash":"1d731bad399115845263861d83df9e68273ce5731826acef73c2488bcf8bf9867c9147","first_seen":"2024-02-12T20:28:38Z","last_seen":"2026-07-27T19:10:43.429534Z","times_seen":9747,"resource_available":false,"data":null}},"time_used":515,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":514,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}