{"report_id":"3d0ae1a4-ef36-4b01-be13-5053d5260fef","version":6,"status":"done","tags":[],"date":"2026-03-02T15:22:14Z","url":{"schema":"http","addr":"www.apkguide.online/TileFlip-Free-Robux.php","fqdn":"www.apkguide.online","domain":"apkguide.online","tld":"online"},"ip":{"addr":"93.127.179.200","port":0,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"ugc4free.com/redeem.php","fqdn":"ugc4free.com","domain":"ugc4free.com","tld":"com"},"title":"ROBUX4FREE","dom":{"size":39749,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8062)","md5":"c498079464fe64c2b2da814ef08f773f","sha1":"6ea27e255654eefacfa5b90a67b443bc8af09a91","sha256":"1b3603ce78449243f5739ec3a32a588b2b3f931c771b3bb3552e0d57689776b4","sha512":"4bed7abab68c3def8a91ee3cb9aaa0140ca9fe8ca33f75a6af7d4b96c4822b35d971c1d8d53b50adbf471b009ecd0ae9de0f46abac6edd8475f43a521b20c238","ssdeep":"384:frRtcykhfcg9zz1hkYAAw9jZ1FS9jEJ5932LjSdMPBOKGae/XyDMzP77iFY+:NEKQzzdA5WU730juj/Xb2FY+","tlshash":"7a03e82174ba223b6137c0b1a11afd847545c207a905efe5faec37b8bfc4d265ca3295","dom_hash":"domhash57bad55cdc0983462a902fb402b2ffee","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"www.apkguide.online/TileFlip-Free-Robux.php","fqdn":"www.apkguide.online","domain":"apkguide.online","tld":"online"},"ip":{"addr":"93.127.179.200","port":0,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-06T15:22:14Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"www.apkguide.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"ugc4free.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-03-01T22:32:56.293355Z","alert_count":0,"request_count":1,"received_data":2522,"sent_data":440,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.apkguide.online","ip":{"addr":"93.127.179.54","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"domain_registered":"2019-05-01","domain_rank":0,"first_seen":"2026-01-11T13:04:00.140578Z","last_seen":"2026-01-11T13:04:00.140578Z","alert_count":1,"request_count":1,"received_data":15593,"sent_data":511,"comment":"","tags":null,"fingerprints":[{"name":"Google AdSense","description":"Google AdSense is a program run by Google through which website publishers serve advertisements that are targeted to the site content and audience.","website":"https://www.google.com/adsense/start/","common_platform_enumeration":"","icon":"Google AdSense.svg","categories":["Advertising"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"PHP:8.1.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"i.ibb.co","ip":{"addr":"45.43.142.2","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"domain_registered":"2010-07-20","domain_rank":21643,"first_seen":"2018-11-25T10:13:48Z","last_seen":"2026-02-25T19:31:52.588429Z","alert_count":0,"request_count":4,"received_data":2637818,"sent_data":1857,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"ugc4free.com","ip":{"addr":"77.37.53.24","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"domain_registered":"2024-11-28","domain_rank":3866275,"first_seen":"2024-12-22T08:07:19.283825Z","last_seen":"2024-12-22T08:07:19.283825Z","alert_count":6,"request_count":6,"received_data":663200,"sent_data":2949,"comment":"","tags":null,"fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"PHP:8.2.28","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Google Sign-in","description":"Google Sign-In is a secure authentication system that reduces the burden of login for users, by enabling them to sign in with their Google account.","website":"https://developers.google.com/identity/sign-in/web","common_platform_enumeration":"","icon":"Google.svg","categories":["Authentication"]},{"name":"Bootstrap:3.3.7","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}]},{"fqdn":"rocheap.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-05-29","domain_rank":0,"first_seen":"2026-03-02T15:22:15.720595Z","last_seen":"2026-03-02T15:22:15.720595Z","alert_count":0,"request_count":1,"received_data":570,"sent_data":449,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"accounts.google.com","ip":{"addr":"173.194.221.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":103,"first_seen":"2012-05-23T06:57:57Z","last_seen":"2026-03-02T00:29:11.783321Z","alert_count":0,"request_count":1,"received_data":252646,"sent_data":415,"comment":"","tags":null,"fingerprints":null},{"fqdn":"i.imgur.com","ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2009-01-09","domain_rank":3309,"first_seen":"2012-05-21T08:09:36Z","last_seen":"2026-02-25T20:21:23.167429Z","alert_count":0,"request_count":2,"received_data":876417,"sent_data":921,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.130.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2026-03-01T22:48:56.265504Z","alert_count":0,"request_count":2,"received_data":180273,"sent_data":847,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.130.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-07-22T07:15:48.665012Z","times_seen":492903,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ugc4free.com/redeem.php","fqdn":"ugc4free.com","domain":"ugc4free.com","tld":"com"},"ip":{"addr":"77.37.53.24","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"635d37802a7160c67d7f694a09e0232b","sha1":"5eaca5451a1491e678b250e843b07b03d4268a62","sha256":"9506200e6c71515ea9f109ee4fd67ecd5453e7ed2a5c01c0e3519803dc346097","sha512":"2a11cb78270fcfe31b21d9245df81561e3d8b692d0d6e6b89c5c30ffba26e69d15d1422e6472e44cfe1fdcb84043b1debf252956269ce713fe2490e120ffa32a","ssdeep":"192:CwNMAO7QUY1AQ39orkRKatCl41puDUcVbYwC5dPyDM33:TMPBOKGae/XyDMH","tlshash":"c132a30475ed153b1037a0ba922bbc802a99a1035105ef51f63d63e42f44a3f9df3be9","size":10997,"data":"","first_seen":"2026-03-02T15:22:20.079711Z","last_seen":"2026-03-02T15:22:20.079711Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.130.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-07-22T07:15:48.665012Z","times_seen":492903,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/jwt-decode/build/jwt-decode.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"cacd76a8a97c5f9c83c5083263d2be81","sha1":"d16e118945b5f8a8d59bea09a0a2bddc60bdf110","sha256":"5235580cffd51dd08703a9b655c92ec7c88389f753c1b99bfaac5a46e0f705f0","sha512":"3d8f02ba75c7a8c188422eb9c99124b3d1723053f5c54381c2052d8740348e6f200b9f1f0f41654069ae4bcf538e18b5d40105706b2eacae18d396c43aa4d2b1","ssdeep":"","tlshash":"7b31a5ec75913441063315a2215f710bb3b9e77a542d10e0a884e6e57cf8027ca9bf88","size":1752,"data":"","first_seen":"2025-03-14T09:57:38.637044Z","last_seen":"2026-06-13T13:00:22.751629Z","times_seen":131,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ugc4free.com/RobloxItems/bootstrap.bundle.min.js","fqdn":"ugc4free.com","domain":"ugc4free.com","tld":"com"},"ip":{"addr":"77.37.53.24","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"b70d61b244f8886800cd55491be21f52","sha1":"108bf5b5e6e2bbb745354e715de164df57cd0960","sha256":"f5ae8f599f28fb11affea9a68b755b6b3f27d763500bea6242919f1ef6b49389","sha512":"c1f5cad914b5a1fce6c33b71afa14728abc7f86f60023ac1f02933e48c51a19bf218118f7afd87bb69ddea8664dcfb42ebffb736349c809b8c57739cd05665ef","ssdeep":"1536:Wtif7R2qTTR2t4iYniNw+inreQURwTLBAF+27wXiYE3Yjr/In:NR2cpXLBl27wXit3YA","tlshash":"fe73b7593254b4730ade85b68037420bf2265994b24b802cb5bcadde2a7dcc67277f7c","size":80427,"data":"","first_seen":"2023-08-11T03:54:42Z","last_seen":"2026-07-21T06:12:37.779729Z","times_seen":1203,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/gsi/client","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"173.194.221.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bd5eebf59591b1367f683f4037ab5770","sha1":"60cba42bc54ca33d35b4c8cba7703e406b03d04c","sha256":"2b32d0846b64071766aefeee4a7a5b95c8d48013743f6a2c91cec4d2f29896de","sha512":"0212f579b2170c3b3698cf793e4c5cd8014f5ff42aade212b22286e286269ee12290b3c07a89f12a1f94e2a13d7c75c6bdbd9a50c30e57759f17f9f49ea3fff1","ssdeep":"6144:YdmL7hxy5VhtJytS/w/oAkwnR8AiuBayxho+qRIAQ:YvhPH/w/o5sybuBayxrqXQ","tlshash":"32345bdcb6e270355212f9b5d43f410ab07aa679f0498cacf684c6f5acb0d890167f7a","size":251544,"data":"","first_seen":"2026-02-25T22:55:24.549035Z","last_seen":"2026-03-05T05:56:00.718265Z","times_seen":559,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.apkguide.online/TileFlip-Free-Robux.php","fqdn":"www.apkguide.online","domain":"apkguide.online","tld":"online"},"ip":{"addr":"93.127.179.54","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"bd65d2a6d3dae06245ca6f53c9294733","sha1":"d01d9fc5ce1ffec1e378194a38bd2352e3ec2a4b","sha256":"5b5ab5fde9c0e02518d5dd14633c37b3a2576103ced0543b438bde9f7101877a","sha512":"8d1f990aba8b7a499c78a41f22738497bb1319c44a1b271f4f1cb405af823e1a81ca5338c4141f9f7e53ccdb3699257b8433ca495fa03d2306de8631ffc54263","ssdeep":"","tlshash":"8980045d450070305440c7c431131cc011d43140701140d0f33441041101d4441415cf","size":33,"data":"","first_seen":"2026-03-02T15:22:20.081945Z","last_seen":"2026-03-02T15:22:20.081945Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.apkguide.online/TileFlip-Free-Robux.php","fqdn":"www.apkguide.online","domain":"apkguide.online","tld":"online"},"ip":{"addr":"93.127.179.54","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"2a2781f9bb6302c2f96df0d1e96ef524","sha1":"796bb90146495848c0c479533c367edadb94f1a9","sha256":"1b60af0ce49d65e8b1006457c16883d60e53a0054bb157c57c3b03a82ee9964d","sha512":"7c1a1cfea1989a16c9dadbf97f8a1366ca416aea7ba2ef4f96c263e3cf02dc17f7bbb0fb3b61d4336c222fede676f3d177cbd48e76efc46230c1b61e92042f6a","ssdeep":"","tlshash":"cf900273f0c18c7e4031b14421793508b943011d8290502076450870973708ba5044c4","size":57,"data":"","first_seen":"2023-03-07T01:06:59Z","last_seen":"2026-07-22T05:56:45.917909Z","times_seen":33456,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ugc4free.com/redeem.php","fqdn":"ugc4free.com","domain":"ugc4free.com","tld":"com"},"ip":{"addr":"77.37.53.24","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"cc1a44bdedfca92c9b0f1682b0e381f5","sha1":"0b9eaaecac83c7247084cf7b2c56f8c4dea20542","sha256":"9a6cdd8d4ee63c09381eed6d079f88553b323e7b16e83fac93ecb615c1a2b421","sha512":"de2c774f87bb880dd38b1a13d0fa958d3243c4faf98be2d35e535264999409c576ecd7488ea8a9bd99e6527da6ee2faf737ca284545889ab28dd7a8d49c21e9c","ssdeep":"96:cChWS5mtkW8s88vX+BOB8zForNyC58kbrfYQ+k:RgFWorMc77+k","tlshash":"7db14135bcfa11322533a079a76f7c802adad5072500ef95b8be77841f48b265da63c7","size":5441,"data":"","first_seen":"2026-03-02T15:22:20.092234Z","last_seen":"2026-03-02T15:22:20.092234Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.apkguide.online/TileFlip-Free-Robux.php","fqdn":"www.apkguide.online","domain":"apkguide.online","tld":"online"},"ip":{"addr":"93.127.179.54","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"5354fb8b701412d962de815d306cf0ed","sha1":"8095428df849bf732c6873820d9a712ce3d3f6b9","sha256":"254b3cf60543a510aad1d431b32ee8b9fa4dd8cc5ac9e8c1212254601950c0dd","sha512":"bee98728f8fc1a1f370e751744ce5823301bf4a76d4f86e10303d25fc0eb13a7a2ac94aed0333b3cee7b6bb47453bc51fc0a9502ec73bd9d54d5ea30f16865ab","ssdeep":"192:TJO80dtxcuCkoDu0uBcXFmHsjbivi7ifiLXbrW1ip8W9UE1/G:TQzzqhtDckosjbivi7ifiLG1ix9rG","tlshash":"ded1b6897ce62871419bd1bf7bdf25a9f63d04077e84c84438dc41591fa0e3099beae8","size":6598,"data":"","first_seen":"2026-03-02T15:22:20.094828Z","last_seen":"2026-03-02T15:22:20.094828Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ugc4free.com/redeem.php","fqdn":"ugc4free.com","domain":"ugc4free.com","tld":"com"},"ip":{"addr":"77.37.53.24","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"9a2178b8342bce8885b37ae2c688c640","sha1":"dac5fc68abb24ba8fc6ec63fc5a8733eb84d595a","sha256":"600b66c5212a46d1fdf9da1e7fdab9d674e8d7c9b038eef5bc33dcf579389f89","sha512":"56dd2d5046dcd84380d612263a6b10a43fc5a69930df9e22e50ff65127bd6507efdcef6cc7d6a920f478460de014f6b3ebff14be0e4dc5915dc9a9046d2b65d7","ssdeep":"","tlshash":"d2e095d77542093109f760783247b208321340475c088d843c4cc7524f1c797d0366ec","size":297,"data":"","first_seen":"2026-03-02T15:22:20.097284Z","last_seen":"2026-03-02T15:22:20.097284Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.apkguide.online/TileFlip-Free-Robux.php","fqdn":"www.apkguide.online","domain":"apkguide.online","tld":"online"},"ip":{"addr":"93.127.179.54","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"b6a15b2bfa128655a46a947d0a89ce76","sha1":"5da82578c03847fe954ca7f33f427b6e3d378a80","sha256":"0968b16f6e0ee674fc9ae4aa31995f6cd16ea9f3c23f6bfe3a6e076fe31930c4","sha512":"2655f045aa293122cea8eecd98f102b4798101a6c1834a6f715c9df82a63404a3df1efaf571ef44c245563b5c6054d2c9cf7b80651c0869321f69467ab986865","ssdeep":"","tlshash":"2421dc1812f61273123791aa6f47a29561b550133b0cca4c7daec2967fced6042f56d6","size":1413,"data":"","first_seen":"2026-03-02T15:22:20.099413Z","last_seen":"2026-03-02T15:22:20.099413Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.130.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.apkguide.online/TileFlip-Free-Robux.php","date":"2026-03-02T15:21:52.548Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 26 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"56:36:FB:D3:E0:9E:71:88:98:A4:C9:34:94:9B:43:3A:C4:C5:1E:BE","sha256":"9A:64:20:6F:F5:DC:F1:8A:D6:B2:D0:93:C2:7E:62:86:0B:1A:D5:24:CF:CE:4A:9F:4C:0D:F1:FB:F2:A0:A8:1E"}}},"request":{"raw":"GET /jquery-3.6.0.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.apkguide.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-15d9d\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Mon, 02 Mar 2026 15:21:52 GMT\r\nage: 2358659\r\nx-served-by: cache-lga21931-LGA, cache-hel1410028-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 71, 628648\r\nx-timer: S1772464913.629572,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30875\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":89501,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-07-22T07:15:48.665012Z","times_seen":492903,"resource_available":true,"data":null}},"time_used":172,"timings":{"blocked":73,"dns":20,"connect":17,"send":0,"wait":14,"receive":5,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/jwt-decode/build/jwt-decode.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ugc4free.com/redeem.php","date":"2026-03-02T15:21:56.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/jwt-decode/build/jwt-decode.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ugc4free.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 3.1.2\r\nx-jsd-version-type: version\r\netag: W/\"6d8-0W4RiUW1+KjVm+oJoKK93GC98RA\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 32185\r\ndate: Mon, 02 Mar 2026 15:21:56 GMT\r\nx-served-by: cache-fra-eddf8230122-FRA, cache-hel1410032-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 977\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1752,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1417)","md5":"cacd76a8a97c5f9c83c5083263d2be81","sha1":"d16e118945b5f8a8d59bea09a0a2bddc60bdf110","sha256":"5235580cffd51dd08703a9b655c92ec7c88389f753c1b99bfaac5a46e0f705f0","sha512":"3d8f02ba75c7a8c188422eb9c99124b3d1723053f5c54381c2052d8740348e6f200b9f1f0f41654069ae4bcf538e18b5d40105706b2eacae18d396c43aa4d2b1","ssdeep":"","tlshash":"7b31a5ec75913441063315a2215f710bb3b9e77a542d10e0a884e6e57cf8027ca9bf88","first_seen":"2025-03-14T09:57:38.637044Z","last_seen":"2026-06-13T13:00:22.751629Z","times_seen":131,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":37,"dns":1,"connect":15,"send":0,"wait":22,"receive":1,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.apkguide.online/TileFlip-Free-Robux.php","fqdn":"www.apkguide.online","domain":"apkguide.online","tld":"online"},"ip":{"addr":"93.127.179.54","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-02T15:21:51.381Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apkguide.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 07:09:53 GMT","end":"Sun, 12 Apr 2026 07:09:52 GMT"},"fingerprint":{"sha1":"39:7F:C3:F9:81:FD:F3:98:C1:3E:12:1F:79:8E:F9:2F:60:92:B7:CA","sha256":"EC:CE:28:F1:A5:A8:3C:D6:F8:B9:D8:63:56:67:D3:0F:EA:F7:DD:EA:1E:9C:94:7A:9F:D5:95:DE:F4:C0:76:4B"}}},"request":{"raw":"GET /TileFlip-Free-Robux.php HTTP/1.1\r\nHost: www.apkguide.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Mar 2026 15:21:52 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-powered-by: PHP/8.1.32\r\ncache-control: public, max-age=0\r\nexpires: Mon, 02 Mar 2026 15:21:52 GMT\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\nretry-after: 60\r\ncontent-security-policy: upgrade-insecure-requests\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 52609000d8b9b889623912291b78cd50-srv-edge3\r\nx-hcdn-cache-status: DYNAMIC\r\nx-hcdn-upstream-rt: 0.657\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google AdSense","description":"Google AdSense is a program run by Google through which website publishers serve advertisements that are targeted to the site content and audience.","website":"https://www.google.com/adsense/start/","common_platform_enumeration":"","icon":"Google AdSense.svg","categories":["Advertising"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"PHP:8.1.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":15088,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"7aed9a4ba33368157124cb3b9aa4d87e","sha1":"96cddf041ebd68a40abe3433db65055aa1e5ae51","sha256":"0ed5ee71a557c6a5782be19190a8585f6d5b377ae24b757eb6385f618ba79752","sha512":"04fef915f066942b45d788309385c9d4c9b1c039b3f60fe050c99455d4fdd9048e2d65cc1503282bc94a3df1cecce3832bfd79ca53caa43747db28ac96d0b5de","ssdeep":"384:sNCTvZoTEeu77qpD+5VIcOMTRiQii4i0iikiUfCyitYLPF96WV4icT4iat:sNCTvZoT5u77qpDbc5RisV0LZhbtcPFH","tlshash":"d662e7916c4528255173c3babfe212cef77a4003eb42864939dc81162fb4a6489bffdc","first_seen":"2026-03-02T15:22:20.052852Z","last_seen":"2026-03-02T15:22:20.052852Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1118,"timings":{"blocked":206,"dns":126,"connect":32,"send":0,"wait":706,"receive":0,"ssl":45},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"www.apkguide.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/yGH05mT/Non-Copy-Right-Robux.png","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.2","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.apkguide.online/TileFlip-Free-Robux.php","date":"2026-03-02T15:21:52.552Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Feb 2026 07:06:34 GMT","end":"Fri, 15 May 2026 07:06:33 GMT"},"fingerprint":{"sha1":"48:08:17:3C:24:BE:AF:E3:A7:15:95:2B:10:C7:81:6D:71:75:A1:79","sha256":"5C:C2:85:75:C7:FB:D5:BF:48:B2:53:D1:3F:41:4C:33:F4:A5:D7:7F:D0:00:DA:48:50:93:31:14:32:70:1F:0E"}}},"request":{"raw":"GET /yGH05mT/Non-Copy-Right-Robux.png HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.apkguide.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 02 Mar 2026 15:21:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 157174\r\nlast-modified: Wed, 03 Dec 2025 09:46:07 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":157174,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"e37fd512886448474c5bab3dc0a3bcd4","sha1":"ff056797a0d5570602c97b326772fb1eb952567f","sha256":"a8960381cc286d31584cd19df53266c4073eb2a1d92b1e92dc672c1942c6b3f6","sha512":"40eef5015b1da6c059a94f405a7f59832e96ee173f317ac4ea56e3e5b1719cc95b144844a572320c53191c19d24b52eb3d3aeb8d38397d8faff19eac29b623f1","ssdeep":"3072:6iSlwMEjDhDWQZwUsQcCx2RUBSsEHPRCXIIGHladWBKkY5N7Mh:6XlEDhDWuvsQcCx2RUBSvWW+yp0Yh","tlshash":"04e31285bafdc8b141be50890cc7a3bb47ce5c942b2dccae986bf1c4015539bc916bd9","first_seen":"2026-03-02T15:22:20.054976Z","last_seen":"2026-03-02T15:22:20.054976Z","times_seen":1,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":65,"dns":0,"connect":0,"send":0,"wait":28,"receive":100,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/8D5svb66/Gemini-Generated-Image-7d338k7d338k7d33.png","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.2","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.apkguide.online/TileFlip-Free-Robux.php","date":"2026-03-02T15:21:52.554Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Feb 2026 07:06:34 GMT","end":"Fri, 15 May 2026 07:06:33 GMT"},"fingerprint":{"sha1":"48:08:17:3C:24:BE:AF:E3:A7:15:95:2B:10:C7:81:6D:71:75:A1:79","sha256":"5C:C2:85:75:C7:FB:D5:BF:48:B2:53:D1:3F:41:4C:33:F4:A5:D7:7F:D0:00:DA:48:50:93:31:14:32:70:1F:0E"}}},"request":{"raw":"GET /8D5svb66/Gemini-Generated-Image-7d338k7d338k7d33.png HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.apkguide.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 02 Mar 2026 15:21:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 1166437\r\nlast-modified: Wed, 03 Dec 2025 10:13:22 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":1166437,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1792 x 576, 8-bit/color RGB, non-interlaced","md5":"b665d9c2d083e26df9041e99fe99ffec","sha1":"6ff9ff716d789f8e95d9f7ddb189416aa04f5956","sha256":"15ce8b223abf9eb8de1a12ac8f3bc0f284b2602c121ac611cc2740cdc1e96b9c","sha512":"b4f14eff8c31ec241fd33d100acd9a26dc282c7b6072a512d41a852415d58ed3162d69de1212f28b1a33874cd255e679df2083a003ec29c363f812077149fedd","ssdeep":"24576:2z0S7UQQcWsIobVYQ5THCOgeQwo6RCkuyR2yIFuCQG9BdHzi5lr6Cj:K0ibWsXbVxHLgeQwoDfBNFOGrdHO5FB","tlshash":"c12523f1bb578bb460b3e6981d31625bbb6e3d036c55741065a1c0ca3f90b32b88db5e","first_seen":"2026-03-02T15:22:20.057116Z","last_seen":"2026-03-02T15:22:20.057116Z","times_seen":1,"resource_available":false,"data":null}},"time_used":359,"timings":{"blocked":63,"dns":1,"connect":21,"send":0,"wait":28,"receive":195,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.194.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ugc4free.com/redeem.php","date":"2026-03-02T15:21:56.051Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 26 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"56:36:FB:D3:E0:9E:71:88:98:A4:C9:34:94:9B:43:3A:C4:C5:1E:BE","sha256":"9A:64:20:6F:F5:DC:F1:8A:D6:B2:D0:93:C2:7E:62:86:0B:1A:D5:24:CF:CE:4A:9F:4C:0D:F1:FB:F2:A0:A8:1E"}}},"request":{"raw":"GET /jquery-3.6.0.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ugc4free.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-15d9d\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Mon, 02 Mar 2026 15:21:56 GMT\r\nage: 760201\r\nx-served-by: cache-lga21931-LGA, cache-hel1410034-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 71, 183409\r\nx-timer: S1772464916.107712,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30875\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":89501,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-07-22T07:15:48.665012Z","times_seen":492903,"resource_available":true,"data":null}},"time_used":123,"timings":{"blocked":48,"dns":0,"connect":18,"send":0,"wait":14,"receive":7,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ugc4free.com/RobloxItems/bootstrap.css","fqdn":"ugc4free.com","domain":"ugc4free.com","tld":"com"},"ip":{"addr":"77.37.53.24","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ugc4free.com/redeem.php","date":"2026-03-02T15:21:56.053Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ugc4free.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 23 Jan 2026 00:13:28 GMT","end":"Thu, 23 Apr 2026 00:13:27 GMT"},"fingerprint":{"sha1":"5A:12:43:14:F6:A4:A3:9F:90:C6:8A:A9:E1:ED:4E:DA:BF:D3:6C:86","sha256":"A7:F6:E1:3A:F5:7F:BD:36:34:5D:62:6A:B5:17:67:69:FB:89:06:C1:62:29:AA:6F:01:43:3C:5A:D2:78:B5:B1"}}},"request":{"raw":"GET /RobloxItems/bootstrap.css HTTP/1.1\r\nHost: ugc4free.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ugc4free.com/redeem.php\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 15:21:56 GMT\r\ncontent-type: text/css\r\ncontent-length: 27218\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 09 Mar 2026 15:21:56 GMT\r\nlast-modified: Sat, 22 Mar 2025 10:43:15 GMT\r\netag: \"38dd6-67de9443-cbbc86a6d5ec62fd;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\nretry-after: 60\r\ncontent-security-policy: upgrade-insecure-requests\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 2992e2629ee7c17f564435824de39227-srv-edge4\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.659\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":232918,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65339), with CRLF line terminators","md5":"4188edd9a0d38e6203a942261b2a04e3","sha1":"37df24f63d4659965ca4a823256603264fe6af4f","sha256":"914322efa9b40aca51b4839fcf6d69b7c4828f4815bb384e579dc9c68b70d08d","sha512":"1909b34812231a3726e7ffb21d44f83ee0716c31ca29820bf24dab9a53829abaee8d32a3756e733d42de46f463ff87c786e8399fb7b7916b07c99c74b58f290f","ssdeep":"1536:VYOtjsbf98fOdBfvO5wlP7Qy9A374298wsY/ElV6V6pz600I41q:5tj898fo298uI6V6pz600I41q","tlshash":"d13481d6f590317d9ca7c1499681fefd896fa985cb120aa6f003776807cabd30962dcc","first_seen":"2024-03-04T20:38:57Z","last_seen":"2026-07-18T10:06:59.393231Z","times_seen":74,"resource_available":false,"data":null}},"time_used":1043,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":996,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"ugc4free.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/gsi/client","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"173.194.221.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ugc4free.com/redeem.php","date":"2026-03-02T15:21:57.279Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:54 GMT","end":"Mon, 27 Apr 2026 08:38:53 GMT"},"fingerprint":{"sha1":"07:1E:D2:0D:5F:A5:AF:E8:26:91:FD:C3:DE:5B:BB:4D:68:90:1F:3A","sha256":"22:A1:18:EB:6B:19:59:23:4F:FF:AF:80:D6:ED:5C:1C:70:98:29:15:03:70:96:71:FF:A9:7A:45:6C:E8:1F:1A"}}},"request":{"raw":"GET /gsi/client HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ugc4free.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\nexpires: Mon, 02 Mar 2026 15:21:57 GMT\r\ndate: Mon, 02 Mar 2026 15:21:57 GMT\r\ncache-control: private, max-age=1800\r\nreport-to: {\"group\":\"coop_dd7de8473bddc59c6b748810a67a39b1\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/dd7de8473bddc59c6b748810a67a39b1\"}]}\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_dd7de8473bddc59c6b748810a67a39b1\"\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http, script-src 'nonce-j7LLVd56yDJjaxnANYP5EA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":251544,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2653)","md5":"bd5eebf59591b1367f683f4037ab5770","sha1":"60cba42bc54ca33d35b4c8cba7703e406b03d04c","sha256":"2b32d0846b64071766aefeee4a7a5b95c8d48013743f6a2c91cec4d2f29896de","sha512":"0212f579b2170c3b3698cf793e4c5cd8014f5ff42aade212b22286e286269ee12290b3c07a89f12a1f94e2a13d7c75c6bdbd9a50c30e57759f17f9f49ea3fff1","ssdeep":"6144:YdmL7hxy5VhtJytS/w/oAkwnR8AiuBayxho+qRIAQ:YvhPH/w/o5sybuBayxrqXQ","tlshash":"32345bdcb6e270355212f9b5d43f410ab07aa679f0498cacf684c6f5acb0d890167f7a","first_seen":"2026-02-25T22:55:24.549035Z","last_seen":"2026-03-05T05:56:00.718265Z","times_seen":559,"resource_available":true,"data":null}},"time_used":314,"timings":{"blocked":132,"dns":9,"connect":30,"send":0,"wait":41,"receive":0,"ssl":99},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/3yNf6Csf/Gemini-Generated-Image-mulmcvmulmcvmulm.png","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.2","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.apkguide.online/TileFlip-Free-Robux.php","date":"2026-03-02T15:21:52.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Feb 2026 07:06:34 GMT","end":"Fri, 15 May 2026 07:06:33 GMT"},"fingerprint":{"sha1":"48:08:17:3C:24:BE:AF:E3:A7:15:95:2B:10:C7:81:6D:71:75:A1:79","sha256":"5C:C2:85:75:C7:FB:D5:BF:48:B2:53:D1:3F:41:4C:33:F4:A5:D7:7F:D0:00:DA:48:50:93:31:14:32:70:1F:0E"}}},"request":{"raw":"GET /3yNf6Csf/Gemini-Generated-Image-mulmcvmulmcvmulm.png HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.apkguide.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 02 Mar 2026 15:21:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 1155559\r\nlast-modified: Wed, 03 Dec 2025 10:05:02 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1155559,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1792 x 576, 8-bit/color RGB, non-interlaced","md5":"83cd1adb7257cac831bab93fb217d98f","sha1":"a33c50014e33cf3267ab4e2fb0ffc98cfb99d4df","sha256":"cfa38a606cd287ee6248c8568040fdff8c1ccbc95b03a244bcbdd8be723fa03e","sha512":"6929ddd76a07ee96781395c45d0bc0e23dadfa5ea86b38fce8e8cd7ca1efd53e02fc7543dc326f135ad3ff6296684357ee0dd78e005190ef12dd6a5a1532f154","ssdeep":"24576:ifaUOtr5YPBodHv7bnA2zgBaCDaFIBmPR1kr8L0Zydd+QvuLEN9:4dOl5wQHv/A2zgrS/kr8LGydd+QrX","tlshash":"fa2523b2b1750320aca7c0391d904e8f6b6c339553fe80e8f2a6d49b1b5bfa4d56d784","first_seen":"2026-03-02T15:22:20.061686Z","last_seen":"2026-03-02T15:22:20.061686Z","times_seen":1,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":64,"dns":0,"connect":0,"send":0,"wait":28,"receive":176,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ugc4free.com/redeem.php","fqdn":"ugc4free.com","domain":"ugc4free.com","tld":"com"},"ip":{"addr":"77.37.53.24","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-02T15:21:55.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ugc4free.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 23 Jan 2026 00:13:28 GMT","end":"Thu, 23 Apr 2026 00:13:27 GMT"},"fingerprint":{"sha1":"5A:12:43:14:F6:A4:A3:9F:90:C6:8A:A9:E1:ED:4E:DA:BF:D3:6C:86","sha256":"A7:F6:E1:3A:F5:7F:BD:36:34:5D:62:6A:B5:17:67:69:FB:89:06:C1:62:29:AA:6F:01:43:3C:5A:D2:78:B5:B1"}}},"request":{"raw":"POST /redeem.php HTTP/1.1\r\nHost: ugc4free.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 9\r\nOrigin: https://www.apkguide.online\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.apkguide.online/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":9,"data":"hash=1234"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Mar 2026 15:21:55 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-powered-by: PHP/8.2.28\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\nretry-after: 60\r\ncontent-security-policy: upgrade-insecure-requests\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 6e458064fc30e4928927ec6895207b84-srv-edge3\r\nx-hcdn-cache-status: DYNAMIC\r\nx-hcdn-upstream-rt: 0.695\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"PHP:8.2.28","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Google Sign-in","description":"Google Sign-In is a secure authentication system that reduces the burden of login for users, by enabling them to sign in with their Google account.","website":"https://developers.google.com/identity/sign-in/web","common_platform_enumeration":"","icon":"Google.svg","categories":["Authentication"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":32135,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (383), with CRLF line terminators","md5":"614af37ac0257a7628f8fd03732a918e","sha1":"59cf717dfbbd2a549b89d3101234ec3c96e564f0","sha256":"3b249aa731dc190942e91ea39c5cea3f4c0ca25fea8e95445341b3be6352b5f9","sha512":"9fa7b675d97d4e48bbcc796b56d15c159c9dc0bfcc958ce3fdfc85c66d2a4d6ca697297dc95d5d9851a5f33f370e0436da47277d2a747925c7b7c2f14872f255","ssdeep":"384:t7l9gzTH+A/t3f9acyuR9jVSQ9y2d5jke5UJrHMRs2/7yiqZDbyJFdCgBkjYjKnq:t73gzj1BDkgymGo+2z0Zix","tlshash":"28e2d721748c052b2137d3b9a621fe84fa99c10792015795b5fc33e72fb5c269ca3ed9","first_seen":"2026-03-02T15:22:20.063697Z","last_seen":"2026-03-02T15:22:20.063697Z","times_seen":1,"resource_available":false,"data":null}},"time_used":986,"timings":{"blocked":125,"dns":46,"connect":33,"send":0,"wait":736,"receive":0,"ssl":44},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"ugc4free.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ugc4free.com/RobloxItems/landing.css?flush=3","fqdn":"ugc4free.com","domain":"ugc4free.com","tld":"com"},"ip":{"addr":"77.37.53.24","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ugc4free.com/redeem.php","date":"2026-03-02T15:21:56.052Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ugc4free.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 23 Jan 2026 00:13:28 GMT","end":"Thu, 23 Apr 2026 00:13:27 GMT"},"fingerprint":{"sha1":"5A:12:43:14:F6:A4:A3:9F:90:C6:8A:A9:E1:ED:4E:DA:BF:D3:6C:86","sha256":"A7:F6:E1:3A:F5:7F:BD:36:34:5D:62:6A:B5:17:67:69:FB:89:06:C1:62:29:AA:6F:01:43:3C:5A:D2:78:B5:B1"}}},"request":{"raw":"GET /RobloxItems/landing.css?flush=3 HTTP/1.1\r\nHost: ugc4free.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ugc4free.com/redeem.php\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 15:21:56 GMT\r\ncontent-type: text/css\r\ncontent-length: 1835\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 09 Mar 2026 15:21:56 GMT\r\nlast-modified: Sat, 22 Mar 2025 11:17:51 GMT\r\netag: \"3596-67de9c5f-619f5e0f13e6525e;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\nretry-after: 60\r\ncontent-security-policy: upgrade-insecure-requests\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 0a29211ac5a2958f4b353491cecd79c9-srv-edge4\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.690\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":13718,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"7ba5575e73e35915985a0426c89e75d8","sha1":"8210e64beb9af18de45eb1d7630a66fb2429183d","sha256":"56d4f9ac47fe0f7cee03a1a93a065624cdb416e4361c7ec5784805b79144401b","sha512":"a5aa3e4f552476d9cdc619d799c5913c681f35e6f0ec88ca78d8fd4780c0ab99aad8f8cfe33a8e09f85f5e6ab913f934f2edda81627bec065551e9d243c40c37","ssdeep":"192:8xhqPgLZLF7KP8fToPsPQPQqPtALymkmRNAK:avayLymkmRNAK","tlshash":"44520d29d906448a3232e77867f39695fbb78053c6065b393fecb2a0dfb56c84421f85","first_seen":"2026-03-02T15:22:20.06563Z","last_seen":"2026-03-02T15:22:20.06563Z","times_seen":1,"resource_available":false,"data":null}},"time_used":742,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":741,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"ugc4free.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rocheap.com/img/roblox_createpassbutton.png","fqdn":"rocheap.com","domain":"rocheap.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ugc4free.com/redeem.php","date":"2026-03-02T15:21:56.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rocheap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 20:08:17 GMT","end":"Sun, 26 Apr 2026 21:07:06 GMT"},"fingerprint":{"sha1":"B8:3A:86:4D:B2:03:A4:54:A7:09:AA:57:D6:83:ED:59:AF:A2:A7:DB","sha256":"BE:87:7F:EE:DE:A1:C0:A8:DF:77:29:8F:2C:69:24:18:F4:6C:C2:28:56:D8:19:95:A7:35:7D:3B:34:CC:28:26"}}},"request":{"raw":"GET /img/roblox_createpassbutton.png HTTP/1.1\r\nHost: rocheap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ugc4free.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Mon, 02 Mar 2026 15:21:56 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BUy2HqMYnPQMY3R5VRTyFtNCp19NgDbgM5wn6rpoCy9c644gp0ng%2F9pTpxjY0CY2ZfvAKHeeDyDMefMzbAn0H2Ui09NNRVytBPY6\"}]}\r\nvary: accept-encoding\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9d6164dddca8a618-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T07:24:30.341438Z","times_seen":17443886,"resource_available":true,"data":null}},"time_used":339,"timings":{"blocked":74,"dns":43,"connect":8,"send":0,"wait":181,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ugc4free.com/RobloxItems/bootstrap.bundle.min.js","fqdn":"ugc4free.com","domain":"ugc4free.com","tld":"com"},"ip":{"addr":"77.37.53.24","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ugc4free.com/redeem.php","date":"2026-03-02T15:21:56.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ugc4free.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 23 Jan 2026 00:13:28 GMT","end":"Thu, 23 Apr 2026 00:13:27 GMT"},"fingerprint":{"sha1":"5A:12:43:14:F6:A4:A3:9F:90:C6:8A:A9:E1:ED:4E:DA:BF:D3:6C:86","sha256":"A7:F6:E1:3A:F5:7F:BD:36:34:5D:62:6A:B5:17:67:69:FB:89:06:C1:62:29:AA:6F:01:43:3C:5A:D2:78:B5:B1"}}},"request":{"raw":"GET /RobloxItems/bootstrap.bundle.min.js HTTP/1.1\r\nHost: ugc4free.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ugc4free.com/redeem.php\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 15:21:56 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 22229\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 09 Mar 2026 15:21:56 GMT\r\nlast-modified: Sat, 22 Mar 2025 10:43:19 GMT\r\netag: \"13a2b-67de9447-ce5923db79676f0d;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\nretry-after: 60\r\ncontent-security-policy: upgrade-insecure-requests\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 9d093af09c0c82848021616086d3ab0d-srv-edge4\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.673\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":80427,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (65294), with CRLF line terminators","md5":"b70d61b244f8886800cd55491be21f52","sha1":"108bf5b5e6e2bbb745354e715de164df57cd0960","sha256":"f5ae8f599f28fb11affea9a68b755b6b3f27d763500bea6242919f1ef6b49389","sha512":"c1f5cad914b5a1fce6c33b71afa14728abc7f86f60023ac1f02933e48c51a19bf218118f7afd87bb69ddea8664dcfb42ebffb736349c809b8c57739cd05665ef","ssdeep":"1536:Wtif7R2qTTR2t4iYniNw+inreQURwTLBAF+27wXiYE3Yjr/In:NR2cpXLBl27wXit3YA","tlshash":"fe73b7593254b4730ade85b68037420bf2265994b24b802cb5bcadde2a7dcc67277f7c","first_seen":"2023-08-11T03:54:42Z","last_seen":"2026-07-21T06:12:37.779729Z","times_seen":1203,"resource_available":true,"data":null}},"time_used":993,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":946,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"ugc4free.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.imgur.com/atzmc4O.mp4","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://ugc4free.com/redeem.php","date":"2026-03-02T15:21:56.252Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 13 Feb 2026 00:00:00 GMT","end":"Mon, 15 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"D4:9A:34:EF:13:3D:45:98:6B:98:4B:9D:CD:FC:74:9C:06:42:A0:7A","sha256":"90:50:0F:E4:90:40:B5:50:04:7E:E1:6E:55:14:FE:7B:38:BB:79:2B:70:83:78:AC:16:E0:F7:1E:3D:ED:92:9A"}}},"request":{"raw":"GET /atzmc4O.mp4 HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ugc4free.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ncontent-type: video/mp4\r\nlast-modified: Fri, 07 Jul 2023 01:36:50 GMT\r\netag: \"76aaac1206f1c973b1cc80e86fb92eed\"\r\nx-amz-storage-class: STANDARD_IA\r\nx-amz-server-side-encryption: AES256\r\nx-amz-cf-pop: IAD89-P1\r\nx-amz-cf-id: 0DVPszdvg5qln2V_8HJaKyODiDfxSpxmJLa2Qr_PnkHkbnneGi6FFQ==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 572544\r\ndate: Mon, 02 Mar 2026 15:21:56 GMT\r\nx-served-by: cache-iad-kcgs7200070-IAD, cache-hel1410034-HEL\r\nx-cache: Miss from cloudfront, HIT, HIT\r\nx-cache-hits: 4, 0\r\nx-timer: S1772464916.273727,VS0,VE1\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-range: bytes 0-437928/437929\r\ncontent-length: 437929\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":437929,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"76aaac1206f1c973b1cc80e86fb92eed","sha1":"54826d5aa9f7cc58f7993a837452720730594dfe","sha256":"2e9004c80ab9c08f3e56615477616c16952e5aa3b223fde40ca8df9ad30bed42","sha512":"42ee2d30decf3397912c39f1fb90bc057695efadc42e324b13211fbd7752c04f54ee97521a6ecfbca8310a52ac3916a5621ab5bed671c1b64d8afdab520c9aa3","ssdeep":"12288:Vzv1SoaVInsVlJg0wLD7CgHUMisNtxRu2wRaZjS95sSvWUtf9fgWfm0jBN8hfc2u:VT1SDInsVKnuEisNjRFwRaZjS9mSvWUf","tlshash":"4594adb2af1a895be56eb5b5865444bb037989607b1f620fe0207d6338d78c33e33d85","first_seen":"2026-03-02T15:22:20.069671Z","last_seen":"2026-03-02T15:22:20.069671Z","times_seen":1,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":45,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/gLwBMtzW/Non-Copy-Right-Robux.png","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.2","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.apkguide.online/TileFlip-Free-Robux.php","date":"2026-03-02T15:21:52.870Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Feb 2026 07:06:34 GMT","end":"Fri, 15 May 2026 07:06:33 GMT"},"fingerprint":{"sha1":"48:08:17:3C:24:BE:AF:E3:A7:15:95:2B:10:C7:81:6D:71:75:A1:79","sha256":"5C:C2:85:75:C7:FB:D5:BF:48:B2:53:D1:3F:41:4C:33:F4:A5:D7:7F:D0:00:DA:48:50:93:31:14:32:70:1F:0E"}}},"request":{"raw":"GET /gLwBMtzW/Non-Copy-Right-Robux.png HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.apkguide.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 02 Mar 2026 15:21:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 157174\r\nlast-modified: Thu, 04 Dec 2025 10:26:35 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":157174,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"e37fd512886448474c5bab3dc0a3bcd4","sha1":"ff056797a0d5570602c97b326772fb1eb952567f","sha256":"a8960381cc286d31584cd19df53266c4073eb2a1d92b1e92dc672c1942c6b3f6","sha512":"40eef5015b1da6c059a94f405a7f59832e96ee173f317ac4ea56e3e5b1719cc95b144844a572320c53191c19d24b52eb3d3aeb8d38397d8faff19eac29b623f1","ssdeep":"3072:6iSlwMEjDhDWQZwUsQcCx2RUBSsEHPRCXIIGHladWBKkY5N7Mh:6XlEDhDWuvsQcCx2RUBSvWW+yp0Yh","tlshash":"04e31285bafdc8b141be50890cc7a3bb47ce5c942b2dccae986bf1c4015539bc916bd9","first_seen":"2026-03-02T15:22:20.054976Z","last_seen":"2026-03-02T15:22:20.054976Z","times_seen":1,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.imgur.com/lu1gyME.png","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ugc4free.com/redeem.php","date":"2026-03-02T15:21:56.056Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 13 Feb 2026 00:00:00 GMT","end":"Mon, 15 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"D4:9A:34:EF:13:3D:45:98:6B:98:4B:9D:CD:FC:74:9C:06:42:A0:7A","sha256":"90:50:0F:E4:90:40:B5:50:04:7E:E1:6E:55:14:FE:7B:38:BB:79:2B:70:83:78:AC:16:E0:F7:1E:3D:ED:92:9A"}}},"request":{"raw":"GET /lu1gyME.png HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ugc4free.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nlast-modified: Tue, 04 Jul 2023 02:09:14 GMT\r\netag: \"ed3a19c8011af29df94453d304389e99\"\r\nx-amz-storage-class: STANDARD_IA\r\nx-amz-server-side-encryption: AES256\r\nx-amz-cf-pop: PHL51-P1\r\nx-amz-cf-id: Y50WGeYyOnNH4cHs8hF_FUKIyTzpa3jVa0X6owyewTEzoOtvzzkiTg==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 1467687\r\ndate: Mon, 02 Mar 2026 15:21:56 GMT\r\nx-served-by: cache-iad-kcgs7200119-IAD, cache-hel1410034-HEL\r\nx-cache: Miss from cloudfront, HIT, HIT\r\nx-cache-hits: 136, 0\r\nx-timer: S1772464916.179192,VS0,VE1\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-length: 436858\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":436858,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 840 x 540, 8-bit/color RGBA, non-interlaced","md5":"ed3a19c8011af29df94453d304389e99","sha1":"9f521315a59fb119eb2629ca7059eebce9fdbe8f","sha256":"47cac59d6e722fbaf6096c98cf3b3ee87355c8078f4a004b26b572935961419f","sha512":"ebe2efc59e9475a446f1ddd1743c72cf2ed5d41c7e88c84e22b29b90f654eb5e805534b745db4f0cdf0f6ef0acbf564f23b83707df7579bda4cdaab1c39eb985","ssdeep":"6144:5B6dHMluAfEJf385OIBltZbtuH7U8LvXH67SsrFhFTdpTdFldUPuMHWW577gl3K6:36alJfsEjBltZbgHX4rDFTXoP6W5v9s","tlshash":"04942348d3a9c230d3a2b5fdc5442506e0e23f593fdaf363e414d26ccaee99b627514a","first_seen":"2026-03-02T15:22:20.071891Z","last_seen":"2026-03-02T15:22:20.071891Z","times_seen":1,"resource_available":false,"data":null}},"time_used":349,"timings":{"blocked":102,"dns":17,"connect":27,"send":0,"wait":27,"receive":112,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ugc4free.com/RobloxItems/fonts/cocogoose-new.ttf","fqdn":"ugc4free.com","domain":"ugc4free.com","tld":"com"},"ip":{"addr":"77.37.53.24","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ugc4free.com/redeem.php","date":"2026-03-02T15:21:57.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ugc4free.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 23 Jan 2026 00:13:28 GMT","end":"Thu, 23 Apr 2026 00:13:27 GMT"},"fingerprint":{"sha1":"5A:12:43:14:F6:A4:A3:9F:90:C6:8A:A9:E1:ED:4E:DA:BF:D3:6C:86","sha256":"A7:F6:E1:3A:F5:7F:BD:36:34:5D:62:6A:B5:17:67:69:FB:89:06:C1:62:29:AA:6F:01:43:3C:5A:D2:78:B5:B1"}}},"request":{"raw":"GET /RobloxItems/fonts/cocogoose-new.ttf HTTP/1.1\r\nHost: ugc4free.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ugc4free.com/RobloxItems/landing.css?flush=3\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 15:21:57 GMT\r\ncontent-type: application/x-font-ttf\r\ncontent-length: 115751\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 09 Mar 2026 15:21:57 GMT\r\nlast-modified: Sat, 22 Mar 2025 10:43:47 GMT\r\netag: \"48558-67de9463-eec878953010aae6;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\nretry-after: 60\r\ncontent-security-policy: upgrade-insecure-requests\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 8ff6966fe3aadcd7479d5f5a8472d9b5-srv-edge4\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.695\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":296280,"size_decoded":0,"mime_type":"application/x-font-ttf","magic":"TrueType Font data, digitally signed, 18 tables, 1st \"DSIG\", 30 names, Macintosh, Copyright (c) 2020 Ligature SRLCocogooseProRegular1.000;ZTFN;CocogoosePro-RegularCocogoosePro Re","md5":"21aca96f3d05f98a40f6579466b01dca","sha1":"24f8c2fdf340c009ab753d90f59eceb23edca210","sha256":"f2ea9f7a215cf1cd71e478d813a7db372ec4532dae62cd67f0605249ab13d903","sha512":"8d711b49bf0240961320274f1d72b41a7261c1e8e1a55fba0d55e7bbba38f13907a595e63b42850bc4bd33f100c94ec99a1607fca11bc04579fd4a18572f26d3","ssdeep":"6144:LTMdvWYFtNgTi2ctIB22406cxfTeH5ZwMJc:fMdvii2ce54/mfTeH5Zfc","tlshash":"75546d0be742c64ced291e349576479a3399fc51bb25438fa4862e37addb1d80cca3c9","first_seen":"2025-09-09T00:27:26.476046Z","last_seen":"2026-07-07T03:33:27.767683Z","times_seen":10,"resource_available":false,"data":null}},"time_used":1411,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1252,"receive":159,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"ugc4free.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ugc4free.com/ROBUX4FREE.ico","fqdn":"ugc4free.com","domain":"ugc4free.com","tld":"com"},"ip":{"addr":"77.37.53.24","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ugc4free.com/redeem.php","date":"2026-03-02T15:21:57.282Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ugc4free.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 23 Jan 2026 00:13:28 GMT","end":"Thu, 23 Apr 2026 00:13:27 GMT"},"fingerprint":{"sha1":"5A:12:43:14:F6:A4:A3:9F:90:C6:8A:A9:E1:ED:4E:DA:BF:D3:6C:86","sha256":"A7:F6:E1:3A:F5:7F:BD:36:34:5D:62:6A:B5:17:67:69:FB:89:06:C1:62:29:AA:6F:01:43:3C:5A:D2:78:B5:B1"}}},"request":{"raw":"GET /ROBUX4FREE.ico HTTP/1.1\r\nHost: ugc4free.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ugc4free.com/redeem.php\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Mon, 02 Mar 2026 15:21:57 GMT\r\ncontent-type: text/html\r\ncontent-length: 1626\r\nlast-modified: Tue, 22 Apr 2025 07:57:10 GMT\r\netag: \"119f-68074bd6-a4335b6f66975eed;br\"\r\ncontent-encoding: br\r\ncontent-security-policy: upgrade-insecure-requests\r\nplatform: hostinger\r\npanel: hpanel\r\nretry-after: 60\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 6491982e9411518a8927bff18485ca7a-srv-edge4\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Bootstrap:3.3.7","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":4511,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (371)","md5":"b16e9097fc7d3af8ebfcfce7aba0a42d","sha1":"2af3c8408b8445fe81d9a7c8d7cc8e8a05bf80f5","sha256":"e7db95c97a5d45787cc3e40cbcb93b748fefc65bc14e162c746e37f979861729","sha512":"53a7a2c276fbc5159231c162eb863504448515f1a078832b81f1bffeedb1c82932810b66748fd4111d1b8fb866622a5cc63e79e497227b611c90886ba45d3f3b","ssdeep":"96:tr+ulojsBwJG8YqVcqHL/GSrrLc1VhrJuzeK:tyoasBwJG8nVjaSeVhrJgeK","tlshash":"0891f88f25f381452603c99037f9b61499554007f685eca8bdee9228cfc4b8a41e3bdc","first_seen":"2025-04-22T08:45:29.599713Z","last_seen":"2026-07-22T06:36:39.814936Z","times_seen":37352,"resource_available":true,"data":null}},"time_used":727,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":726,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"ugc4free.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}