{"report_id":"4256befd-ad63-40e0-ab0a-3ed53bfb27c9","version":0,"status":"done","tags":[],"date":"2026-07-22T10:19:51Z","url":{"schema":"http","addr":"theshoebill.xyz","fqdn":"theshoebill.xyz","domain":"theshoebill.xyz","tld":"xyz"},"ip":{"addr":"2.24.198.130","port":0,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"final":{"url":{"schema":"https","addr":"theshoebill.xyz/","fqdn":"theshoebill.xyz","domain":"theshoebill.xyz","tld":"xyz"},"title":"$SHOEBILL — He's Watching","dom":{"size":42912,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (31893)","md5":"4beb8c7c806599a80cbc8945557fdece","sha1":"fbb3d1d80ff9b4c9d1e925be2b34c65ca49475ad","sha256":"0c164b14ba46e43c2694a8437d25bdc63327e34c6b0b2054f21f6b4e5c0fb42d","sha512":"1a454c3208da9bdd912225c029067047a5f6289dc6df9348cd2e5ad7747d6381c1c06de19feefaad08c9e48fbf525077280fd9115f1005306584dc86fad12e88","ssdeep":"768:9jruu12G7oj4D42S7+yyPOq6hvvM50CH2E/2/6oPe2MEAWbBhfjCI2WzWGXKFTYw:9D12so242S7xyPOq6hvC0CH2E/2/6oPG","tlshash":"1613a592d841de02643bd466b4ba4f6fb076823bc71a048c73bdd596778e871de930e2","dom_hash":"domhash695c2c2fa07556c6f731da2cd5fb9ed4","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"theshoebill.xyz","fqdn":"theshoebill.xyz","domain":"theshoebill.xyz","tld":"xyz"},"ip":{"addr":"2.24.198.130","port":0,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-26T10:19:51Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"theshoebill.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-07-19T22:23:13.155676Z","alert_count":0,"request_count":1,"received_data":11648,"sent_data":549,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"theshoebill.xyz","ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2026-03-31","domain_rank":0,"first_seen":"2026-07-22T10:10:39.921691Z","last_seen":"2026-07-22T10:10:39.921691Z","alert_count":45,"request_count":45,"received_data":60660320,"sent_data":23885,"comment":"","tags":null,"fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-07-19T22:19:42.520021Z","alert_count":0,"request_count":3,"received_data":113271,"sent_data":1708,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"theshoebill.xyz/","fqdn":"theshoebill.xyz","domain":"theshoebill.xyz","tld":"xyz"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a6e1178e4bbf5730bd664a49dd3bc24","sha1":"17c3ae3273f9de6afbbdedf2e413dbb3a6722792","sha256":"3814cddd18b2095e01abb745a99e5ada90178e709c09879324c3b623f2d829ea","sha512":"cfb1aab0bf589e33fd12906f448ddbbf7163420a088de513b174304c9ba3a7abcd9b41c98bc4dd51edd0206c1fe4660db9857e3c6163d1bf50c670cefddee509","ssdeep":"","tlshash":"de9002b090c39c5890264186687100160b6c040c01080141132184d810115048e40d8e","size":43,"data":"","first_seen":"2023-03-13T01:07:12Z","last_seen":"2026-07-23T10:27:32.475337Z","times_seen":199088,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"theshoebill.xyz/","fqdn":"theshoebill.xyz","domain":"theshoebill.xyz","tld":"xyz"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"73b2daac201c99cc1aba7aaebbb30fda","sha1":"8cac11a0cf6bb4ff5a2d8fe1c65a86cd362f19c0","sha256":"5efc6b443ebeb96c2a3d425982767956af96314a4029d0b892c9fb3fb416c8f8","sha512":"279074a90fdde126482e8a50b55b7244853d12073f4e89c135eb0fb20068b54f35128f3806ab350a0d3065b6192c9cde61ad26cb6c708118ce9fe2f9c5d2edd6","ssdeep":"","tlshash":"1c21965bf819fd822c31cd5f002f1f2678d1e87b84b4125eb24dde9e421683b0748c81","size":1218,"data":"","first_seen":"2026-07-22T10:10:48.463675Z","last_seen":"2026-07-22T10:20:05.333255Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"theshoebill.xyz/","fqdn":"theshoebill.xyz","domain":"theshoebill.xyz","tld":"xyz"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"13f3b5b66df0ece2b44415d53e2f4ad3","sha1":"dbcb0cf094f64590b91f45cafe338b55f867e299","sha256":"e0f178b2cb3053293fa0d2c0a8c658240dd5f7e5b8594a51a2de4000a66eba3c","sha512":"8ad6bafdf2d9dc4b5eb8a34648e812a45913f2965d90a50872f20e32658ade9b30528db83ca54a69eaf979b1a5ed2e256a1c67eb793e2c02cf72d96b329f3df8","ssdeep":"","tlshash":"0a71ab2e7405dd4bec7e7c69123ead3a24cd497b4790deb8868dce140a464ba37d6dc0","size":3796,"data":"","first_seen":"2026-07-22T10:10:48.464594Z","last_seen":"2026-07-22T10:20:05.333969Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"theshoebill.xyz/","fqdn":"theshoebill.xyz","domain":"theshoebill.xyz","tld":"xyz"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"8c371a1b23c199d7ac65ccb8390f8ab8","sha1":"44e8ed0f13885c921a759ebd7643ea3a95f96eff","sha256":"c7653a63eeff58621c1f9e0e84f8ba6f6f92efd3ede1b3290167936907d51d49","sha512":"c1fa31579ef3b8f388f72307d96d63ea5aa1d9aaaf60536f7d237cf42f9f2e6514b8dc5d99561f5dc4bf9d04bd6d3e50af20fc7ddb72ebb61c9cb2e83dcce8ec","ssdeep":"","tlshash":"59b09b64e015fda555b545616525e445226f504d29581450111791551609d141717dc0","size":112,"data":"","first_seen":"2025-10-26T14:54:28.298694Z","last_seen":"2026-07-23T02:41:18.997936Z","times_seen":2535,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"theshoebill.xyz/","fqdn":"theshoebill.xyz","domain":"theshoebill.xyz","tld":"xyz"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"ead1170c9dfbf7532937baba62fa5960","sha1":"257de8a3449dba9cf75d12f22dd599eb1918daba","sha256":"a02adeac656735dc917fa4ff254de086511dec279a4898e554ef22a308af0ead","sha512":"607a993ca2896b8cfccb41ceb33f318ba2535d8f92b191f7c51b24f2477728654abcd002cd7b2d64c5e41eafca6342802b5342c8d2e0df0550e47d7ebfd765fe","ssdeep":"","tlshash":"8fc08090cc42cc1dc6660f361c3b1c3521ddd9b4074555469dd5d9381985b3105b5d9d","size":177,"data":"","first_seen":"2023-08-13T20:19:29Z","last_seen":"2026-07-23T10:48:04.728393Z","times_seen":4263,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"theshoebill.xyz/","fqdn":"theshoebill.xyz","domain":"theshoebill.xyz","tld":"xyz"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"9006873512e1319fc6c24093262e4e27","sha1":"82484d0e4f7962d5b588a81b27902572d37399a2","sha256":"009d1cfdff6ed9b4ae25d8de52dbd44751c4ec00d93d3653152560e0ed7d1f6f","sha512":"b5fc2d0666ffc63dadb58268c77bf2839af6306494aacb82d51517940150d195cd9c4e85af5d346a4e6c1fe989ce2afcca88e34fe1b33d2eef7bcfd00b5307bf","ssdeep":"","tlshash":"86c09b56f859fc41d431c85e002e1f165595d43b40644f45b65cde8a81528175758cc5","size":146,"data":"","first_seen":"2026-03-28T06:17:45.054149Z","last_seen":"2026-07-22T10:20:05.335792Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"theshoebill.xyz/","fqdn":"theshoebill.xyz","domain":"theshoebill.xyz","tld":"xyz"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"fba81f298045ce422d26e6163916c374","sha1":"3688b58ee2f84a6a62b689bb6850e1a70d0bcdc2","sha256":"a8d3c5f35d42856ab7ada1c05056ae41851adc9c7aee585c83a22eaa2e260bae","sha512":"98a4d260feaa19cd7c57a7ddd15743cea2b6c6ac6b321ae6c2fc50e0fd3246c4b207c3b00f98f20c3ef9d0cf8d2e77aa1ceb5c031956b29e2a571824b9e84b2c","ssdeep":"","tlshash":"a4315af2ae1ddc05c7d66e08193e3cad00c8c7d6c256e08f92ecdd2880979b46af1626","size":1657,"data":"","first_seen":"2026-07-22T10:10:48.467448Z","last_seen":"2026-07-22T10:20:05.33643Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"theshoebill.xyz/_next/static/chunks/turbopack-13ofksh9ag-rt.js","fqdn":"theshoebill.xyz","domain":"theshoebill.xyz","tld":"xyz"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"4cd47eede1474cd9c80360054b41f72e","sha1":"857e7e48ca764adaf4660cc91424e71bb37cf7cc","sha256":"27b015440337ae9fc7585b6ce2ebbf51c077b9fe920562d4b75b547ab709b84a","sha512":"8ddc59d1e4ec21b852ece8f01921e0ceb43467b00c5855264cd5a2ec7fb8785f94f64a1af54032919368442a24eadc8db6181f2f0ca6daa253470644662f1cff","ssdeep":"192:sl4gMFA68PEsg6d2hEryBly6yD+03sBT4fCT2cXX6ufH2:sl4gMFYQZlky+sqCTPG","tlshash":"1622d8da33a6f07343afa1ebd07f4004f17944a9145e141c93aca8eb28354ae45e7f76","size":10508,"data":"","first_seen":"2026-03-21T08:02:19.990202Z","last_seen":"2026-07-22T10:20:05.313852Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"theshoebill.xyz/_next/static/chunks/0257pdz1-imal.js","fqdn":"theshoebill.xyz","domain":"theshoebill.xyz","tld":"xyz"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"bcd237b85d571f5accb316fb293d4542","sha1":"90213d4a5044267fd43fb17d005b8e7cb4c38421","sha256":"ad09de164a125738fcdd0e64b980a00055427f88d760d279a4e75fa233a14187","sha512":"51df5cea0a003c01f020c13b3af67ceefe1324b9c0dcd2fdb435bbd3c2e85fbb2e6a4bbc6a67ec65630a447f889b5a5ab87f250e5cb881dcb3f7b84ae7d77f03","ssdeep":"3072:6D0JgzlSo2HZWTsGIO0yVA9zEycNv4Z1ba1JjK75B:6D0JgzlSoCZgIO0eA9gyc94W1JjKB","tlshash":"f1e3f8f935d1f48207ab50aac03f0006f22c4db7189e6860e3e5ddda756465de1b3faa","size":149533,"data":"","first_seen":"2026-03-21T01:08:02.25906Z","last_seen":"2026-07-22T10:20:05.305256Z","times_seen":617,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"theshoebill.xyz/_next/static/chunks/0ht900cau6_ur.js","fqdn":"theshoebill.xyz","domain":"theshoebill.xyz","tld":"xyz"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"7dc6da5c31828ba9812b433129a805fa","sha1":"08785ff61957064e03ce08b4a2a60ef9e0486c09","sha256":"b2b0fb9dbb3e38abc0110efd9dc4c5ec29e2e7c6cff449d61c95f354b4014f5b","sha512":"336ace9d3010cb1f560acfd7449d4478a891024372917fd9724ac7ded5bc8c54b4204889846b17c52bcd6928042e545b3da28d879dfb222dde02c8039efdc87f","ssdeep":"384:fy7jBRxWAOvk1llGXFpyl+vT3mrxKHHwyUaZgDdkmKDUEbIMbh:fy7j4LvGlsXSl+vT3mrxKHHwyUaZgDdQ","tlshash":"11721998b195f04127b360a9903f600bf23928752c6cd4b0b396d8f56de04ade937fda","size":17474,"data":"","first_seen":"2026-03-20T21:03:58.57204Z","last_seen":"2026-07-23T09:47:47.626884Z","times_seen":832,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"theshoebill.xyz/_next/static/chunks/0d3shmwh5_nmn.js","fqdn":"theshoebill.xyz","domain":"theshoebill.xyz","tld":"xyz"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c6890538a7dca3df0f031d8acf1bf06","sha1":"c516eec44b0e1d433f4bb380271297e7eaf3ca15","sha256":"a3ac200f3ab8bfa57cf78882057741ddb5c0fbc9e2490c5d951c099b37484206","sha512":"ca54d71ce89709406d40dcbf86d9425bc74cbf7127291992d2b3f974300009b3f372f6a806ac2bc44e7f30d9ba6e2b6442754814e20dbff8fc4928cb992aa693","ssdeep":"384:2sUWst5gWTnrYV3uXeqbkJdeUtdaVmzlhjuNf9zXYpDuYNb4x2pk81FZTDxJRiGD:vUWstOoS3HSqD95hdFQcCDFZ1dqFY+V","tlshash":"b333ea753295faa303db91d9c0370012f2780d7130ad64b4b395d8af399dd8a92faf69","size":54646,"data":"","first_seen":"2026-03-18T18:55:57.692711Z","last_seen":"2026-07-23T11:00:23.238888Z","times_seen":11298,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"theshoebill.xyz/_next/static/chunks/0jsnxocc-vu01.js","fqdn":"theshoebill.xyz","domain":"theshoebill.xyz","tld":"xyz"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"04a318e5ae9e136ba8a963bb2101024f","sha1":"035ac404a94be4fe46179e77b3c208c1d456f595","sha256":"69e2d8bb22ab98ec0d5655444a0aa0d0b4148d55afdb449e75151d18ee571297","sha512":"a6754e00a2b91c49e1baf1245eac3aff57dd13b6761bcdefdfc25772ff5ec63fe978c1b260c474855e1b330afa6e751342055ad150e52b130bf8f3742aae9cd9","ssdeep":"1536:VPI/ZdgDD7tu77Vq7Q03i24gAoIM/ZWk+Yxym+tPTw8UqqyAnoRQ+0S79OMulT6a:VlR5M03irgr3hWk3nnr+02OMuq7dOhD","tlshash":"97e3f8a673517125c3db819ac0af4705b33a19d4240a403cb77eacdb696058ab2fbf7d","size":144574,"data":"","first_seen":"2026-07-22T10:10:48.413869Z","last_seen":"2026-07-22T10:20:05.300205Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"theshoebill.xyz/_next/static/chunks/01xlw8hd842-c.js","fqdn":"theshoebill.xyz","domain":"theshoebill.xyz","tld":"xyz"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"c7ccf6943f2bdccb995fe5bb7d242b8a","sha1":"c9277a94258757e99759c5669e26390a63cc16a9","sha256":"aee2d073d2a1157cfe5c98907f90b3967de4c3625f9ffb154bd1979ae2b917b0","sha512":"376272243a92205856c2ae832c447172b5cefff730f0850cb0b805d286c5f1feb3be07b6817febda67cc2ecb6c38ef6027b0581f86bbe3617f7251ab9051f9f7","ssdeep":"","tlshash":"716161c9b2e2f8bb83675091407f205bf37e4cf1185d9194e7a5a4dbb82061d81f2fa8","size":3377,"data":"","first_seen":"2026-03-19T19:09:12.486153Z","last_seen":"2026-07-23T10:06:50.451667Z","times_seen":6467,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"theshoebill.xyz/_next/static/chunks/16g.ca89g7fib.js","fqdn":"theshoebill.xyz","domain":"theshoebill.xyz","tld":"xyz"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"153af39331ee55d7019ce3211d57896c","sha1":"a4604cf7eefb25333dbdc30b7d97b41e55d2863b","sha256":"68130dbc97e75518d5c7abcb08ce0b18f94156b0153ccb03ef52308dd8a10e0b","sha512":"d81cfc5ed1eb3f81826ea42bdd4a10ae1c08d7325a410bef181af9041a6c64825668395b5d2afb72abcfc438f8e128a75893a623977c2c1173a36dbe46fff738","ssdeep":"3072:UFLtaNMDfGWY7V70PTIt6h+8BibKNn0ZJGXjFMAL98nwdH++z:UFLtKOfGWYpyI9vGzD58nwdH++z","tlshash":"fb24fbe83995f6626ab302b710af18037338252b280d4d60a251fdddb57845eb17bf9e","size":227537,"data":"","first_seen":"2026-03-21T03:20:29.84472Z","last_seen":"2026-07-23T10:40:19.402222Z","times_seen":673,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"theshoebill.xyz/_next/static/chunks/0dgq26a5_oy.a.js","fqdn":"theshoebill.xyz","domain":"theshoebill.xyz","tld":"xyz"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"5f5191b9f61efd6a4f63c5ac7f5c6c41","sha1":"a2b647221f67abacb4a57c79b01575f565cca4eb","sha256":"69a6bb99c3ffab75664c38bcf12faabd4bb9dc7e300605c030168809b21bc0b9","sha512":"eb580a3267a16fea1f40c5b8ac5b596c45ebfc32268d4f7028e6dc3d97218133370ec6ea1771d0a384eeac3e08dbfbedf73333f8de4f5d6188b102d63982eebf","ssdeep":"384:57/ZdkTd93jnTUYqSGUFT32IIIq4emi0B/d+3W16DvXxqpkKM8wjn0ieI+wQhNoT:V+qSNl3gId1B/d+m1mvxqml1jn0iP5","tlshash":"a633d7b232d4faa2539341e0d43f2017f2690c75206d6474b7e89cdb754c88da6bafe5","size":50702,"data":"","first_seen":"2026-03-21T01:08:02.265897Z","last_seen":"2026-07-23T08:01:57.768658Z","times_seen":1624,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"theshoebill.xyz/_next/static/chunks/0jsnxocc-vu01.js","fqdn":"theshoebill.xyz","domain":"theshoebill.xyz","tld":"xyz"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://theshoebill.xyz/","date":"2026-07-22T10:19:04.612Z","timestamp":1784715544612,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theshoebill.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 19:09:45 GMT","end":"Mon, 28 Sep 2026 19:09:44 GMT"},"fingerprint":{"sha1":"77:1F:2A:91:72:1D:39:8F:02:0C:5E:7A:6C:AA:6A:39:CE:17:1C:4F","sha256":"95:CA:D4:BD:F8:E4:C6:C2:F7:68:6D:76:1F:91:CE:72:E4:2E:75:2A:72:04:FC:7A:BE:B5:34:66:5F:74:6B:E8"}}},"request":{"raw":"GET /_next/static/chunks/0jsnxocc-vu01.js HTTP/1.1\r\nHost: theshoebill.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://theshoebill.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 22 Jul 2026 10:19:04 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Thu, 28 May 2026 21:48:21 GMT\r\nETag: W/\"234be-19e708f5162\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":144574,"size_decoded":47770,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"04a318e5ae9e136ba8a963bb2101024f","sha1":"035ac404a94be4fe46179e77b3c208c1d456f595","sha256":"69e2d8bb22ab98ec0d5655444a0aa0d0b4148d55afdb449e75151d18ee571297","sha512":"a6754e00a2b91c49e1baf1245eac3aff57dd13b6761bcdefdfc25772ff5ec63fe978c1b260c474855e1b330afa6e751342055ad150e52b130bf8f3742aae9cd9","ssdeep":"1536:VPI/ZdgDD7tu77Vq7Q03i24gAoIM/ZWk+Yxym+tPTw8UqqyAnoRQ+0S79OMulT6a:VlR5M03irgr3hWk3nnr+02OMuq7dOhD","tlshash":"97e3f8a673517125c3db819ac0af4705b33a19d4240a403cb77eacdb696058ab2fbf7d","first_seen":"2026-07-22T10:10:48.413869Z","last_seen":"2026-07-22T10:20:05.300205Z","times_seen":2,"resource_available":true,"data":null}},"time_used":380,"timings":{"blocked":80,"dns":0,"connect":0,"send":0,"wait":200,"receive":100,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"theshoebill.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"theshoebill.xyz/api/file/1776297263714-f4d380a1-8e4c-4a06-90a6-db90d96f4a6a.png","fqdn":"theshoebill.xyz","domain":"theshoebill.xyz","tld":"xyz"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://theshoebill.xyz/","date":"2026-07-22T10:19:05.233Z","timestamp":1784715545233,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theshoebill.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 19:09:45 GMT","end":"Mon, 28 Sep 2026 19:09:44 GMT"},"fingerprint":{"sha1":"77:1F:2A:91:72:1D:39:8F:02:0C:5E:7A:6C:AA:6A:39:CE:17:1C:4F","sha256":"95:CA:D4:BD:F8:E4:C6:C2:F7:68:6D:76:1F:91:CE:72:E4:2E:75:2A:72:04:FC:7A:BE:B5:34:66:5F:74:6B:E8"}}},"request":{"raw":"GET /api/file/1776297263714-f4d380a1-8e4c-4a06-90a6-db90d96f4a6a.png HTTP/1.1\r\nHost: theshoebill.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://theshoebill.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 22 Jul 2026 10:19:05 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\ncache-control: public, max-age=31536000\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1518056,"size_decoded":1518586,"mime_type":"image/png","magic":"PNG image data, 1536 x 1024, 8-bit/color RGB, non-interlaced","md5":"6cae1920991aca69a5bd5bfd327af863","sha1":"c0a9e466e044a64ffce850d74f5304aeb86d034a","sha256":"26f9532942063b1dc83995266130c17c55001e78f655b9c60fe04ace6d090513","sha512":"c27b11420ed9aae557b8ccb77982bdfcd732de106ed108095f746e5f4a41f77f499ed6e1f67a8f1ff8241f1cfa81c55c019cd7e2c0b1d9d0aa56b5176fefdb9b","ssdeep":"24576:g/cqWj1f8BwqoqeSARNSogbqe7j0JXExvX7G:gjWO+4+JRp2rG","tlshash":"fb2533bcd0631673fb03e031935c3147cad8c2796ed57d08b15ad505b7e4b6a3ba268a","first_seen":"2026-07-22T10:10:48.427018Z","last_seen":"2026-07-22T10:20:05.3012Z","times_seen":2,"resource_available":false,"data":null}},"time_used":720,"timings":{"blocked":176,"dns":0,"connect":0,"send":0,"wait":105,"receive":439,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"theshoebill.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"theshoebill.xyz/api/file/1776297263637-7ab4d7d3-bd84-471c-91b7-d85d5dfad55e.png","fqdn":"theshoebill.xyz","domain":"theshoebill.xyz","tld":"xyz"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://theshoebill.xyz/","date":"2026-07-22T10:19:05.260Z","timestamp":1784715545260,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theshoebill.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 19:09:45 GMT","end":"Mon, 28 Sep 2026 19:09:44 GMT"},"fingerprint":{"sha1":"77:1F:2A:91:72:1D:39:8F:02:0C:5E:7A:6C:AA:6A:39:CE:17:1C:4F","sha256":"95:CA:D4:BD:F8:E4:C6:C2:F7:68:6D:76:1F:91:CE:72:E4:2E:75:2A:72:04:FC:7A:BE:B5:34:66:5F:74:6B:E8"}}},"request":{"raw":"GET /api/file/1776297263637-7ab4d7d3-bd84-471c-91b7-d85d5dfad55e.png HTTP/1.1\r\nHost: theshoebill.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://theshoebill.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 22 Jul 2026 10:19:07 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\ncache-control: public, max-age=31536000\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1158670,"size_decoded":1159200,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGB, non-interlaced","md5":"dbeea09a2156a936f9e664fe127a3d0e","sha1":"69f89a6a093de3c7a0eeb0021d27d34654a2bc7b","sha256":"ed248ec2800021ed95b3302a352c77d0e08d2711c0d46c46c31e11f09f2610c0","sha512":"92eff3864ffd535b540c613edcb05cce90a88173d5c4450c1db0d33ea05e9040d0a2c4fe6b87265bda3d6001cab1bec055df29ee90ece08a6dd8d415de04f5f5","ssdeep":"24576:LXn76iU2v3EGNSsOgVu5mF+CgwyQxxojo/:yYv3YrgVugFXgljo/","tlshash":"ec2523d2b2241d86e596b3f185fd408233b268d454e2063e86bdc0e57fc1d5a36fbae4","first_seen":"2026-07-22T10:10:48.420734Z","last_seen":"2026-07-22T10:20:05.301902Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2681,"timings":{"blocked":2469,"dns":0,"connect":0,"send":0,"wait":103,"receive":109,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"theshoebill.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"theshoebill.xyz/api/file/1776297263630-2a941f67-388f-4cbc-845c-2ef754dd42f7.png","fqdn":"theshoebill.xyz","domain":"theshoebill.xyz","tld":"xyz"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://theshoebill.xyz/","date":"2026-07-22T10:19:05.262Z","timestamp":1784715545262,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theshoebill.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 19:09:45 GMT","end":"Mon, 28 Sep 2026 19:09:44 GMT"},"fingerprint":{"sha1":"77:1F:2A:91:72:1D:39:8F:02:0C:5E:7A:6C:AA:6A:39:CE:17:1C:4F","sha256":"95:CA:D4:BD:F8:E4:C6:C2:F7:68:6D:76:1F:91:CE:72:E4:2E:75:2A:72:04:FC:7A:BE:B5:34:66:5F:74:6B:E8"}}},"request":{"raw":"GET /api/file/1776297263630-2a941f67-388f-4cbc-845c-2ef754dd42f7.png HTTP/1.1\r\nHost: theshoebill.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://theshoebill.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 22 Jul 2026 10:19:07 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\ncache-control: public, max-age=31536000\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":2325025,"size_decoded":2325555,"mime_type":"image/png","magic":"PNG image data, 1024 x 1536, 8-bit/color RGB, non-interlaced","md5":"f7189a173eeb1ee099047aa27b3d0d4e","sha1":"2bfa9f0a9a87ddcf127dc7baf005a2d73d2c12da","sha256":"e3676a1beefbcf0097533f8b065d3775820542c89fff69b95ad55d0a2db40c7e","sha512":"7eaf0d64970f5d048828812943c758e409b538d9e5b26dbab54fa4e3f2709010781a81a2fa308f52f59a97c69a207c7bdb17bd5380d9d55bf7bfec3558bae879","ssdeep":"24576:l6xhCK+s/iCg30JUxX38l3fn736+8M/8BQbwBhlnnYKasFIooRAk1oB:l6HPH9g3aqH8l/7QA8+bwrlYUIdAk12","tlshash":"de253368346c84b3ec07443e54ccb2c24ea1f5ea7a5ba509733e50889c6f96536771fe","first_seen":"2026-07-22T10:10:48.459896Z","last_seen":"2026-07-22T10:20:05.302564Z","times_seen":2,"resource_available":false,"data":null}},"time_used":3205,"timings":{"blocked":2641,"dns":0,"connect":0,"send":0,"wait":131,"receive":433,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"theshoebill.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"theshoebill.xyz/api/file/1776297263713-e5893f2d-1854-465d-b8fb-8f0cff799926.png","fqdn":"theshoebill.xyz","domain":"theshoebill.xyz","tld":"xyz"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://theshoebill.xyz/","date":"2026-07-22T10:19:05.237Z","timestamp":1784715545237,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theshoebill.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 19:09:45 GMT","end":"Mon, 28 Sep 2026 19:09:44 GMT"},"fingerprint":{"sha1":"77:1F:2A:91:72:1D:39:8F:02:0C:5E:7A:6C:AA:6A:39:CE:17:1C:4F","sha256":"95:CA:D4:BD:F8:E4:C6:C2:F7:68:6D:76:1F:91:CE:72:E4:2E:75:2A:72:04:FC:7A:BE:B5:34:66:5F:74:6B:E8"}}},"request":{"raw":"GET /api/file/1776297263713-e5893f2d-1854-465d-b8fb-8f0cff799926.png HTTP/1.1\r\nHost: theshoebill.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://theshoebill.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 22 Jul 2026 10:19:05 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\ncache-control: public, max-age=31536000\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1171591,"size_decoded":1172121,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGB, non-interlaced","md5":"17d471cf2e8d9e490bd07c7195c622b1","sha1":"799885674ae916ac2d5ce2636bd3a9bc0b1e452c","sha256":"411530d3d58c044ffe7fe5bf747c5ebddc5181008b3d0d9f4cf3bf344666fccd","sha512":"cb185f757109481c77c68c407f2e3e3973255501d2f6773ce59a2326bac5158e88afb82cca099f95c293327e594c9c6df313ddc77f83a19eb19367e9e6275476","ssdeep":"24576:k87MDEpvodl+zThPpegHuCPdJrmsLHg55sUlsELQ:koMGoXwTa0uUJrmsLgMIs/","tlshash":"1c2523e5ce10f136da0b06f1611ef4975810206128ec42af34f2a466df647395afafaf","first_seen":"2026-07-22T10:10:48.403941Z","last_seen":"2026-07-22T10:20:05.3038Z","times_seen":2,"resource_available":false,"data":null}},"time_used":774,"timings":{"blocked":270,"dns":0,"connect":0,"send":0,"wait":130,"receive":374,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"theshoebill.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"theshoebill.xyz/_next/static/chunks/0ht900cau6_ur.js","fqdn":"theshoebill.xyz","domain":"theshoebill.xyz","tld":"xyz"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://theshoebill.xyz/","date":"2026-07-22T10:19:04.392Z","timestamp":1784715544392,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theshoebill.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 19:09:45 GMT","end":"Mon, 28 Sep 2026 19:09:44 GMT"},"fingerprint":{"sha1":"77:1F:2A:91:72:1D:39:8F:02:0C:5E:7A:6C:AA:6A:39:CE:17:1C:4F","sha256":"95:CA:D4:BD:F8:E4:C6:C2:F7:68:6D:76:1F:91:CE:72:E4:2E:75:2A:72:04:FC:7A:BE:B5:34:66:5F:74:6B:E8"}}},"request":{"raw":"GET /_next/static/chunks/0ht900cau6_ur.js HTTP/1.1\r\nHost: theshoebill.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://theshoebill.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 22 Jul 2026 10:19:04 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Thu, 28 May 2026 21:48:21 GMT\r\nETag: W/\"4442-19e708f5162\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17474,"size_decoded":6724,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (14040)","md5":"7dc6da5c31828ba9812b433129a805fa","sha1":"08785ff61957064e03ce08b4a2a60ef9e0486c09","sha256":"b2b0fb9dbb3e38abc0110efd9dc4c5ec29e2e7c6cff449d61c95f354b4014f5b","sha512":"336ace9d3010cb1f560acfd7449d4478a891024372917fd9724ac7ded5bc8c54b4204889846b17c52bcd6928042e545b3da28d879dfb222dde02c8039efdc87f","ssdeep":"384:fy7jBRxWAOvk1llGXFpyl+vT3mrxKHHwyUaZgDdkmKDUEbIMbh:fy7j4LvGlsXSl+vT3mrxKHHwyUaZgDdQ","tlshash":"11721998b195f04127b360a9903f600bf23928752c6cd4b0b396d8f56de04ade937fda","first_seen":"2026-03-20T21:03:58.57204Z","last_seen":"2026-07-23T09:47:47.626884Z","times_seen":832,"resource_available":true,"data":null}},"time_used":307,"timings":{"blocked":-1,"dns":0,"connect":98,"send":0,"wait":104,"receive":0,"ssl":105},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"theshoebill.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"theshoebill.xyz/_next/static/chunks/0257pdz1-imal.js","fqdn":"theshoebill.xyz","domain":"theshoebill.xyz","tld":"xyz"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://theshoebill.xyz/","date":"2026-07-22T10:19:04.400Z","timestamp":1784715544400,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theshoebill.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 19:09:45 GMT","end":"Mon, 28 Sep 2026 19:09:44 GMT"},"fingerprint":{"sha1":"77:1F:2A:91:72:1D:39:8F:02:0C:5E:7A:6C:AA:6A:39:CE:17:1C:4F","sha256":"95:CA:D4:BD:F8:E4:C6:C2:F7:68:6D:76:1F:91:CE:72:E4:2E:75:2A:72:04:FC:7A:BE:B5:34:66:5F:74:6B:E8"}}},"request":{"raw":"GET /_next/static/chunks/0257pdz1-imal.js HTTP/1.1\r\nHost: theshoebill.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://theshoebill.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 22 Jul 2026 10:19:04 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Thu, 28 May 2026 21:48:21 GMT\r\nETag: W/\"2481d-19e708f5184\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":149533,"size_decoded":40857,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"bcd237b85d571f5accb316fb293d4542","sha1":"90213d4a5044267fd43fb17d005b8e7cb4c38421","sha256":"ad09de164a125738fcdd0e64b980a00055427f88d760d279a4e75fa233a14187","sha512":"51df5cea0a003c01f020c13b3af67ceefe1324b9c0dcd2fdb435bbd3c2e85fbb2e6a4bbc6a67ec65630a447f889b5a5ab87f250e5cb881dcb3f7b84ae7d77f03","ssdeep":"3072:6D0JgzlSo2HZWTsGIO0yVA9zEycNv4Z1ba1JjK75B:6D0JgzlSoCZgIO0eA9gyc94W1JjKB","tlshash":"f1e3f8f935d1f48207ab50aac03f0006f22c4db7189e6860e3e5ddda756465de1b3faa","first_seen":"2026-03-21T01:08:02.25906Z","last_seen":"2026-07-22T10:20:05.305256Z","times_seen":617,"resource_available":true,"data":null}},"time_used":308,"timings":{"blocked":-1,"dns":0,"connect":98,"send":0,"wait":108,"receive":104,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"theshoebill.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://theshoebill.xyz/","date":"2026-07-22T10:19:04.753Z","timestamp":1784715544753,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://theshoebill.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Jul 2026 01:48:42 GMT\r\nexpires: Fri, 16 Jul 2027 01:48:42 GMT\r\ncache-control: public, max-age=31536000\r\nage: 549022\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-23T10:27:26.256125Z","times_seen":243582,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":27,"dns":0,"connect":0,"send":0,"wait":28,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"theshoebill.xyz/api/file/1776297263671-337d9850-32e4-401d-9324-e70525925f53.png","fqdn":"theshoebill.xyz","domain":"theshoebill.xyz","tld":"xyz"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://theshoebill.xyz/","date":"2026-07-22T10:19:05.253Z","timestamp":1784715545253,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theshoebill.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 19:09:45 GMT","end":"Mon, 28 Sep 2026 19:09:44 GMT"},"fingerprint":{"sha1":"77:1F:2A:91:72:1D:39:8F:02:0C:5E:7A:6C:AA:6A:39:CE:17:1C:4F","sha256":"95:CA:D4:BD:F8:E4:C6:C2:F7:68:6D:76:1F:91:CE:72:E4:2E:75:2A:72:04:FC:7A:BE:B5:34:66:5F:74:6B:E8"}}},"request":{"raw":"GET /api/file/1776297263671-337d9850-32e4-401d-9324-e70525925f53.png HTTP/1.1\r\nHost: theshoebill.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://theshoebill.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 22 Jul 2026 10:19:07 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\ncache-control: public, max-age=31536000\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1382298,"size_decoded":1382828,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGB, non-interlaced","md5":"80601e5ba640c390ed14430d1d71ef5a","sha1":"442bb28f438ec09cf6895d30683a84fdc3d7dd57","sha256":"26ca46d590eb10d9e8927525e7135be3ca560f09e0e380764cd9e6816395d748","sha512":"254774905fdc2ff1c5c2d1a6f8626b57fe8168c78f5be8d22c826185c61deca9c884ccfb4bf9df5d9d5fdaeb1dfcbaf355cfec312dde1befee272327206ffb96","ssdeep":"24576:s71sLi9RcCjMvIxrDQVnQBidMgIjhI072MYhyNH:s7nRcCjMvItKldbIjh52MYs","tlshash":"4c2523387e450a2ddb03e73a2759c887f415c6426eab01edb235c4fcb3647b43ba1666","first_seen":"2026-07-22T10:10:48.453839Z","last_seen":"2026-07-22T10:20:05.30643Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2151,"timings":{"blocked":1846,"dns":0,"connect":0,"send":0,"wait":103,"receive":202,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"theshoebill.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"theshoebill.xyz/api/file/1776297263660-38de6077-2125-4669-a77d-270f4adfe782.png","fqdn":"theshoebill.xyz","domain":"theshoebill.xyz","tld":"xyz"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://theshoebill.xyz/","date":"2026-07-22T10:19:05.259Z","timestamp":1784715545259,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theshoebill.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 19:09:45 GMT","end":"Mon, 28 Sep 2026 19:09:44 GMT"},"fingerprint":{"sha1":"77:1F:2A:91:72:1D:39:8F:02:0C:5E:7A:6C:AA:6A:39:CE:17:1C:4F","sha256":"95:CA:D4:BD:F8:E4:C6:C2:F7:68:6D:76:1F:91:CE:72:E4:2E:75:2A:72:04:FC:7A:BE:B5:34:66:5F:74:6B:E8"}}},"request":{"raw":"GET /api/file/1776297263660-38de6077-2125-4669-a77d-270f4adfe782.png HTTP/1.1\r\nHost: theshoebill.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://theshoebill.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 22 Jul 2026 10:19:07 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\ncache-control: public, max-age=31536000\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2082752,"size_decoded":2083282,"mime_type":"image/png","magic":"PNG image data, 1024 x 1536, 8-bit/color RGB, non-interlaced","md5":"459144156fd0d660e96ca1eabc67832d","sha1":"b9f8d72e6f17b2348a0433d05fb30955eac586af","sha256":"a55fcd5952247417afdb5da99762dd11304ecac52d5fcc4f2a469079b4fb30d9","sha512":"159730a42fe775b8e21f92abbfb1baa6bd287dce21a4cb94ef5971a01dc8a690e4b5133e12a7b2cc749382b27475192a290fed6d17a9727481c01ac151afa409","ssdeep":"12288:LRvROT53zqR8+ZsvuNRWSen1IS/KaoTLUjdN/oObcvqbbrLwc/q8768/tE4F+vZX:3OdsMiw7/oOYwbrLB/q876q+vZvLz","tlshash":"2225334cf822c811cfefb4b1dae6169d3e143bc652e9022579cafca69a3db0543474d9","first_seen":"2026-07-22T10:10:48.447985Z","last_seen":"2026-07-22T10:20:05.307425Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2720,"timings":{"blocked":2405,"dns":0,"connect":0,"send":0,"wait":102,"receive":213,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"theshoebill.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"theshoebill.xyz/api/file/1776297263706-cb4024f7-7bc1-43b9-94eb-88e3f1d21745.png","fqdn":"theshoebill.xyz","domain":"theshoebill.xyz","tld":"xyz"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://theshoebill.xyz/","date":"2026-07-22T10:19:05.242Z","timestamp":1784715545242,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theshoebill.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 19:09:45 GMT","end":"Mon, 28 Sep 2026 19:09:44 GMT"},"fingerprint":{"sha1":"77:1F:2A:91:72:1D:39:8F:02:0C:5E:7A:6C:AA:6A:39:CE:17:1C:4F","sha256":"95:CA:D4:BD:F8:E4:C6:C2:F7:68:6D:76:1F:91:CE:72:E4:2E:75:2A:72:04:FC:7A:BE:B5:34:66:5F:74:6B:E8"}}},"request":{"raw":"GET /api/file/1776297263706-cb4024f7-7bc1-43b9-94eb-88e3f1d21745.png HTTP/1.1\r\nHost: theshoebill.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://theshoebill.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 22 Jul 2026 10:19:06 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\ncache-control: public, max-age=31536000\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":2339463,"size_decoded":2339993,"mime_type":"image/png","magic":"PNG image data, 1536 x 1024, 8-bit/color RGB, non-interlaced","md5":"1d052fb9784b7b9d64d2cda05a6c6c67","sha1":"f07341d870ed6f9afd71a6a51e12f3be03c2e9cd","sha256":"52d9ac8aa1b6e4cc86b5e90f6206af5fd90fd60231f382cb9a06927b6cb621de","sha512":"ae1f1bebe95473a569d6eae8fa05be126eccb5968c8693b7bafbcadacedb9b4516bb0599817104ee20cb20be94e45f4552b8170e650995de9c95a26b0bbb2089","ssdeep":"24576:Xs5Qqp+n92GtZoB0GVdXOrCHrDEkP/quHBhR7:XOP42iouGVdXOrcUA71","tlshash":"e12533f53834863af1277eb8ce264b119c1e7361186995dc26fe8b8a734b31432a535f","first_seen":"2026-07-22T10:10:48.405606Z","last_seen":"2026-07-22T10:20:05.308006Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1012,"timings":{"blocked":772,"dns":0,"connect":0,"send":0,"wait":121,"receive":119,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"theshoebill.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"theshoebill.xyz/api/file/1776297263737-HAWIGMfX0AI25Zg.jpg","fqdn":"theshoebill.xyz","domain":"theshoebill.xyz","tld":"xyz"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://theshoebill.xyz/","date":"2026-07-22T10:19:05.221Z","timestamp":1784715545221,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theshoebill.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 19:09:45 GMT","end":"Mon, 28 Sep 2026 19:09:44 GMT"},"fingerprint":{"sha1":"77:1F:2A:91:72:1D:39:8F:02:0C:5E:7A:6C:AA:6A:39:CE:17:1C:4F","sha256":"95:CA:D4:BD:F8:E4:C6:C2:F7:68:6D:76:1F:91:CE:72:E4:2E:75:2A:72:04:FC:7A:BE:B5:34:66:5F:74:6B:E8"}}},"request":{"raw":"GET /api/file/1776297263737-HAWIGMfX0AI25Zg.jpg HTTP/1.1\r\nHost: theshoebill.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://theshoebill.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 22 Jul 2026 10:19:05 GMT\r\nContent-Type: image/jpeg\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\ncache-control: public, max-age=31536000\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":52890,"size_decoded":53421,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 680x579, components 3","md5":"83525f9b1b85538d73f2d11cdf215851","sha1":"6c33b21602f0ff27aa6a4ff39b18dc4bf675d3eb","sha256":"bb33df8d16820d8403a0043e2bf62dddd049dd68b615bcf6d9f54c1c92a4658d","sha512":"68a28dbac2946fce17cc04a26fc3700815e1eaddd9b02d63e873e041f587fa686d42d8fed1807725edb205eebf37ec87d57d7a17cdeeac142f57271d04b827ec","ssdeep":"1536:ICnkh/FI3agbHJv6uKBjl37ecHcIXvZTxFQdCL:ICkcHJvLKfrHfZ/L","tlshash":"c23302dda8cd9b04ec9fba36a5493d38ba5168b504b804cd23210ee977fc6059193bd7","first_seen":"2026-07-22T10:10:48.414918Z","last_seen":"2026-07-22T10:20:05.308698Z","times_seen":2,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":100,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"theshoebill.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"theshoebill.xyz/api/file/1776297263736-G_2sjeBbUAA8KWb.jpg","fqdn":"theshoebill.xyz","domain":"theshoebill.xyz","tld":"xyz"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://theshoebill.xyz/","date":"2026-07-22T10:19:05.227Z","timestamp":1784715545227,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theshoebill.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 19:09:45 GMT","end":"Mon, 28 Sep 2026 19:09:44 GMT"},"fingerprint":{"sha1":"77:1F:2A:91:72:1D:39:8F:02:0C:5E:7A:6C:AA:6A:39:CE:17:1C:4F","sha256":"95:CA:D4:BD:F8:E4:C6:C2:F7:68:6D:76:1F:91:CE:72:E4:2E:75:2A:72:04:FC:7A:BE:B5:34:66:5F:74:6B:E8"}}},"request":{"raw":"GET /api/file/1776297263736-G_2sjeBbUAA8KWb.jpg HTTP/1.1\r\nHost: theshoebill.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://theshoebill.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 22 Jul 2026 10:19:05 GMT\r\nContent-Type: image/jpeg\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\ncache-control: public, max-age=31536000\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":78517,"size_decoded":79048,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 900x900, components 3","md5":"98a454bafca948e676591e0e25e93355","sha1":"7f5337a834eff7d4c876636cc0ee9a6a86d1a01a","sha256":"23944cd9109ef72c444d264193df43cb6f1b0f7a1b8dcef3b6a39209556165c5","sha512":"fac1d5404938132851035bb41a8efcfa542066d92600765cbd1ec30fae436f7d0f5397d1c1176cee48a91a9688b229364ec3546c2912cecd421377c65f9e26b1","ssdeep":"1536:HuIg9Tvtxf06yYvc1qDndOQZfe6uqovhdExZDSD171TWaN0+:HeJ0n4c1MndLpewovQHDA17pl","tlshash":"0573023c0eca554d549d2b83b4b79971af804cf18eec0957c4a05e7069ba8ae3077af6","first_seen":"2026-07-22T10:10:48.446839Z","last_seen":"2026-07-22T10:20:05.309321Z","times_seen":2,"resource_available":false,"data":null}},"time_used":302,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":101,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"theshoebill.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"theshoebill.xyz/api/file/1776297263700-b2d0d592-965c-4dd5-8266-8239d7fbea4e.png","fqdn":"theshoebill.xyz","domain":"theshoebill.xyz","tld":"xyz"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://theshoebill.xyz/","date":"2026-07-22T10:19:05.246Z","timestamp":1784715545246,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theshoebill.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 19:09:45 GMT","end":"Mon, 28 Sep 2026 19:09:44 GMT"},"fingerprint":{"sha1":"77:1F:2A:91:72:1D:39:8F:02:0C:5E:7A:6C:AA:6A:39:CE:17:1C:4F","sha256":"95:CA:D4:BD:F8:E4:C6:C2:F7:68:6D:76:1F:91:CE:72:E4:2E:75:2A:72:04:FC:7A:BE:B5:34:66:5F:74:6B:E8"}}},"request":{"raw":"GET /api/file/1776297263700-b2d0d592-965c-4dd5-8266-8239d7fbea4e.png HTTP/1.1\r\nHost: theshoebill.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://theshoebill.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 22 Jul 2026 10:19:06 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\ncache-control: public, max-age=31536000\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":841295,"size_decoded":841825,"mime_type":"image/png","magic":"PNG image data, 672 x 650, 8-bit/color RGBA, non-interlaced","md5":"60f77f3c59072267c8d4d4510944f947","sha1":"76dc2abc6bf775355841463ef10af2d9a35c981c","sha256":"3b9db13f74fc0793cb5250deb0020e9628ac4419f15a8353bb6cc800dd73d890","sha512":"e04a08a68a25b183a523ef2b1de8b84f5f68ec3b93c936b0e7cee54a0893551d50c044f06442d1c01197506862e127045958d8ee83cc84e9bdceb17ca1c31d04","ssdeep":"24576:p5EI9CytJ/MTS+0oHMdXTywv+I4jlbXQWKdCEp:p5EItMd0oHi+jZ8pp","tlshash":"950533e70a7e167abdbf1904c90f8be959bd80f9c6568873232d17e6050afb16d349c0","first_seen":"2026-07-22T10:10:48.41699Z","last_seen":"2026-07-22T10:20:05.309896Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1431,"timings":{"blocked":1216,"dns":0,"connect":0,"send":0,"wait":107,"receive":108,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"theshoebill.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"theshoebill.xyz/api/file/1776297263699-799463bb-d347-4d3f-843d-47e15ccd8489.png","fqdn":"theshoebill.xyz","domain":"theshoebill.xyz","tld":"xyz"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://theshoebill.xyz/","date":"2026-07-22T10:19:05.247Z","timestamp":1784715545247,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theshoebill.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 19:09:45 GMT","end":"Mon, 28 Sep 2026 19:09:44 GMT"},"fingerprint":{"sha1":"77:1F:2A:91:72:1D:39:8F:02:0C:5E:7A:6C:AA:6A:39:CE:17:1C:4F","sha256":"95:CA:D4:BD:F8:E4:C6:C2:F7:68:6D:76:1F:91:CE:72:E4:2E:75:2A:72:04:FC:7A:BE:B5:34:66:5F:74:6B:E8"}}},"request":{"raw":"GET /api/file/1776297263699-799463bb-d347-4d3f-843d-47e15ccd8489.png HTTP/1.1\r\nHost: theshoebill.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://theshoebill.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 22 Jul 2026 10:19:06 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\ncache-control: public, max-age=31536000\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":973601,"size_decoded":974131,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGB, non-interlaced","md5":"9b2214ae7b5c8deefb9eb863feed8e38","sha1":"95745333203c61f556ea01dbb944b12510e3804b","sha256":"8f61a3c165bbb1a991312a85e4cf37144a6b5698b9e15d200340781a8d464696","sha512":"994b7bfc2d16d323542f8f790ab185877625bfa7e73887956e0ae25820046872272c26f8bd76159790461d9da79bc00fd7ed9d4f21e8f1c7b04087855b3062be","ssdeep":"24576:Ub1/Gi66GxWJeX11sfI/fXXjkQV9hk+CkL1F9RD:UxGicuf4/jkQVHk+b7","tlshash":"fb25233474f26ca9f59eb0f10b29934d3f42b8a13629d4d0b1bd6c294f6e6647c9a313","first_seen":"2026-07-22T10:10:48.452192Z","last_seen":"2026-07-22T10:20:05.310502Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1825,"timings":{"blocked":1419,"dns":0,"connect":0,"send":0,"wait":102,"receive":304,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"theshoebill.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"theshoebill.xyz/api/file/1776297263672-403ee836-3978-41ac-9602-8bda08fa07cd.png","fqdn":"theshoebill.xyz","domain":"theshoebill.xyz","tld":"xyz"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://theshoebill.xyz/","date":"2026-07-22T10:19:05.252Z","timestamp":1784715545252,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theshoebill.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 19:09:45 GMT","end":"Mon, 28 Sep 2026 19:09:44 GMT"},"fingerprint":{"sha1":"77:1F:2A:91:72:1D:39:8F:02:0C:5E:7A:6C:AA:6A:39:CE:17:1C:4F","sha256":"95:CA:D4:BD:F8:E4:C6:C2:F7:68:6D:76:1F:91:CE:72:E4:2E:75:2A:72:04:FC:7A:BE:B5:34:66:5F:74:6B:E8"}}},"request":{"raw":"GET /api/file/1776297263672-403ee836-3978-41ac-9602-8bda08fa07cd.png HTTP/1.1\r\nHost: theshoebill.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://theshoebill.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 22 Jul 2026 10:19:07 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\ncache-control: public, max-age=31536000\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1165899,"size_decoded":1166429,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGB, non-interlaced","md5":"f6bde3986e977e6e26bd49fc5bc5ee32","sha1":"d1c638034175c4d23c6cec194f43c5f8ac6559ce","sha256":"431ed97cc7a2eedbd06df9af10aed5eb4f19d106bfcf9473aeb783674116814a","sha512":"8c425a9249319d5eb1616e22087d2c57f100bab311919e4254273e5897bd4762e31b9495f1f61fa4dd0d06479c042c9ee635ba8ffb366a60782b2d2e7a67e61e","ssdeep":"24576:H3Fo6M0qKMWhtQk6he0ZIOdG+qsDs/DwHMEC5fT+:H3Fo7Uzj0ZlYD/EHMECs","tlshash":"0b25332288541637f198987578891d18371db588b3c26f9413f6c06c6b2a77afec1fe7","first_seen":"2026-07-22T10:10:48.417984Z","last_seen":"2026-07-22T10:20:05.311052Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2233,"timings":{"blocked":1825,"dns":0,"connect":0,"send":0,"wait":104,"receive":304,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"theshoebill.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"theshoebill.xyz/api/file/1776297263668-77cc8918-b6e3-48bc-8a03-70589ec47d0b.png","fqdn":"theshoebill.xyz","domain":"theshoebill.xyz","tld":"xyz"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://theshoebill.xyz/","date":"2026-07-22T10:19:05.255Z","timestamp":1784715545255,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theshoebill.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 19:09:45 GMT","end":"Mon, 28 Sep 2026 19:09:44 GMT"},"fingerprint":{"sha1":"77:1F:2A:91:72:1D:39:8F:02:0C:5E:7A:6C:AA:6A:39:CE:17:1C:4F","sha256":"95:CA:D4:BD:F8:E4:C6:C2:F7:68:6D:76:1F:91:CE:72:E4:2E:75:2A:72:04:FC:7A:BE:B5:34:66:5F:74:6B:E8"}}},"request":{"raw":"GET /api/file/1776297263668-77cc8918-b6e3-48bc-8a03-70589ec47d0b.png HTTP/1.1\r\nHost: theshoebill.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://theshoebill.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 22 Jul 2026 10:19:07 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\ncache-control: public, max-age=31536000\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1900915,"size_decoded":1901445,"mime_type":"image/png","magic":"PNG image data, 1536 x 1024, 8-bit/color RGB, non-interlaced","md5":"c32e0e351b6ac3a741e54c5f6ae103fb","sha1":"5ce88257ef216b885ead2de5aa6f99a43e15978c","sha256":"a2258f6f0b2b6940b6fd084734ab55329c8c63f00bc94c70fcc75480335d11e6","sha512":"d93487b306a823502c717e031efcafe742dc1ef11b34fa1a83ac95ee145d484d0cbb02e69ae8abcf9ea0a5c5ab782513cbf4291dac075af7ccd471e7503c08a0","ssdeep":"24576:wa2bE6m6KvvGw0JBuNP9Z74JBRh+D8Eyx2379xQdo5:wyvG7sd7YBj+D8S7XQdo5","tlshash":"432533c042191186c1dffb7e1985c1b18ed2e98823b1459f0fb5be1793eb1919db36ca","first_seen":"2026-07-22T10:10:48.438882Z","last_seen":"2026-07-22T10:20:05.311933Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2643,"timings":{"blocked":2097,"dns":0,"connect":0,"send":0,"wait":113,"receive":433,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"theshoebill.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"theshoebill.xyz/apple-touch-icon.png","fqdn":"theshoebill.xyz","domain":"theshoebill.xyz","tld":"xyz"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://theshoebill.xyz/","date":"2026-07-22T10:19:08.382Z","timestamp":1784715548382,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theshoebill.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 19:09:45 GMT","end":"Mon, 28 Sep 2026 19:09:44 GMT"},"fingerprint":{"sha1":"77:1F:2A:91:72:1D:39:8F:02:0C:5E:7A:6C:AA:6A:39:CE:17:1C:4F","sha256":"95:CA:D4:BD:F8:E4:C6:C2:F7:68:6D:76:1F:91:CE:72:E4:2E:75:2A:72:04:FC:7A:BE:B5:34:66:5F:74:6B:E8"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: theshoebill.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://theshoebill.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 22 Jul 2026 10:19:08 GMT\r\nContent-Type: image/png\r\nContent-Length: 9630\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=0\r\nLast-Modified: Tue, 31 Mar 2026 14:24:59 GMT\r\nETag: W/\"259e-19d444891b9\"\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9630,"size_decoded":10156,"mime_type":"image/png","magic":"PNG image data, 135 x 180, 8-bit/color RGBA, non-interlaced","md5":"a2e232dcf132e0f8e5c529401efbd4fa","sha1":"b08484ab20689c5cd425e0bb6fe718d03521a44e","sha256":"c98b5618a0d15cee7a7b352a214a10dbed0d39625e251778ed6aeda56a1bf9fb","sha512":"6200017c4d9ec020d8982fbc9207ad9638bf6ee583292ec84d633c0f099af0d5a473b0168e0b37cc8a273e5f9f68ca4ef413abc3a460a2eb3a11e2779f7c3c26","ssdeep":"192:XffxsnVknGV+aMpO57Y4PkPMtrvrBUBXjGqUR/ykQ4L+455fx6:CVLl5MMtrWxZn4Lb5H6","tlshash":"9f12bf599e303ebbf01d6aa0068474ec29890d3174a94f987a2c57472d9f25917418f3","first_seen":"2026-07-22T10:10:48.441301Z","last_seen":"2026-07-22T10:20:05.312525Z","times_seen":2,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"theshoebill.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"theshoebill.xyz/api/file/1776297263664-59ec23b2-550e-4f32-8b40-d8fc33095a6b.png","fqdn":"theshoebill.xyz","domain":"theshoebill.xyz","tld":"xyz"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://theshoebill.xyz/","date":"2026-07-22T10:19:05.257Z","timestamp":1784715545257,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theshoebill.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 19:09:45 GMT","end":"Mon, 28 Sep 2026 19:09:44 GMT"},"fingerprint":{"sha1":"77:1F:2A:91:72:1D:39:8F:02:0C:5E:7A:6C:AA:6A:39:CE:17:1C:4F","sha256":"95:CA:D4:BD:F8:E4:C6:C2:F7:68:6D:76:1F:91:CE:72:E4:2E:75:2A:72:04:FC:7A:BE:B5:34:66:5F:74:6B:E8"}}},"request":{"raw":"GET /api/file/1776297263664-59ec23b2-550e-4f32-8b40-d8fc33095a6b.png HTTP/1.1\r\nHost: theshoebill.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://theshoebill.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 22 Jul 2026 10:19:07 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\ncache-control: public, max-age=31536000\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1790871,"size_decoded":1791401,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGB, non-interlaced","md5":"67f883b32f0156ec83d4b0c504410d70","sha1":"a402a755e5ac411f2dde63e41f322b85c4213fff","sha256":"2d172d4aaccbde63e05e3d76e479eb4308b1fdf5723af4cf4fa64a3f43a3a4af","sha512":"12e18b508d3079f2119c3562cc85830349e68bf203c3ac9108c43c34be3ed151bcce015ae0a67e080f47dfd34f26860683cfb45394c68dc41ff65a93b051e482","ssdeep":"24576:ufQ95yk51tKJ9kYl5lwcWfyMjXykFDAZ7YfhLS3ykwZtYeD:aAdavhCfFDKZYJSHKYs","tlshash":"9a2523af3db3330bd8176cb224671cc53ba75b92a6e8f1d00d664860f685770792936e","first_seen":"2026-07-22T10:10:48.462025Z","last_seen":"2026-07-22T10:20:05.313158Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2598,"timings":{"blocked":2175,"dns":0,"connect":0,"send":0,"wait":105,"receive":318,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"theshoebill.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"theshoebill.xyz/_next/static/chunks/turbopack-13ofksh9ag-rt.js","fqdn":"theshoebill.xyz","domain":"theshoebill.xyz","tld":"xyz"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://theshoebill.xyz/","date":"2026-07-22T10:19:04.403Z","timestamp":1784715544403,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theshoebill.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 19:09:45 GMT","end":"Mon, 28 Sep 2026 19:09:44 GMT"},"fingerprint":{"sha1":"77:1F:2A:91:72:1D:39:8F:02:0C:5E:7A:6C:AA:6A:39:CE:17:1C:4F","sha256":"95:CA:D4:BD:F8:E4:C6:C2:F7:68:6D:76:1F:91:CE:72:E4:2E:75:2A:72:04:FC:7A:BE:B5:34:66:5F:74:6B:E8"}}},"request":{"raw":"GET /_next/static/chunks/turbopack-13ofksh9ag-rt.js HTTP/1.1\r\nHost: theshoebill.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://theshoebill.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 22 Jul 2026 10:19:04 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Thu, 28 May 2026 21:48:21 GMT\r\nETag: W/\"290c-19e708f517c\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10508,"size_decoded":4768,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (10508), with no line terminators","md5":"4cd47eede1474cd9c80360054b41f72e","sha1":"857e7e48ca764adaf4660cc91424e71bb37cf7cc","sha256":"27b015440337ae9fc7585b6ce2ebbf51c077b9fe920562d4b75b547ab709b84a","sha512":"8ddc59d1e4ec21b852ece8f01921e0ceb43467b00c5855264cd5a2ec7fb8785f94f64a1af54032919368442a24eadc8db6181f2f0ca6daa253470644662f1cff","ssdeep":"192:sl4gMFA68PEsg6d2hEryBly6yD+03sBT4fCT2cXX6ufH2:sl4gMFYQZlky+sqCTPG","tlshash":"1622d8da33a6f07343afa1ebd07f4004f17944a9145e141c93aca8eb28354ae45e7f76","first_seen":"2026-03-21T08:02:19.990202Z","last_seen":"2026-07-22T10:20:05.313852Z","times_seen":20,"resource_available":true,"data":null}},"time_used":303,"timings":{"blocked":-1,"dns":0,"connect":97,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"theshoebill.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"theshoebill.xyz/_next/static/chunks/01xlw8hd842-c.js","fqdn":"theshoebill.xyz","domain":"theshoebill.xyz","tld":"xyz"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://theshoebill.xyz/","date":"2026-07-22T10:19:04.405Z","timestamp":1784715544405,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theshoebill.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 19:09:45 GMT","end":"Mon, 28 Sep 2026 19:09:44 GMT"},"fingerprint":{"sha1":"77:1F:2A:91:72:1D:39:8F:02:0C:5E:7A:6C:AA:6A:39:CE:17:1C:4F","sha256":"95:CA:D4:BD:F8:E4:C6:C2:F7:68:6D:76:1F:91:CE:72:E4:2E:75:2A:72:04:FC:7A:BE:B5:34:66:5F:74:6B:E8"}}},"request":{"raw":"GET /_next/static/chunks/01xlw8hd842-c.js HTTP/1.1\r\nHost: theshoebill.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://theshoebill.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 22 Jul 2026 10:19:04 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Thu, 28 May 2026 21:48:21 GMT\r\nETag: W/\"d31-19e708f517f\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3377,"size_decoded":2076,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3377), with no line terminators","md5":"c7ccf6943f2bdccb995fe5bb7d242b8a","sha1":"c9277a94258757e99759c5669e26390a63cc16a9","sha256":"aee2d073d2a1157cfe5c98907f90b3967de4c3625f9ffb154bd1979ae2b917b0","sha512":"376272243a92205856c2ae832c447172b5cefff730f0850cb0b805d286c5f1feb3be07b6817febda67cc2ecb6c38ef6027b0581f86bbe3617f7251ab9051f9f7","ssdeep":"","tlshash":"716161c9b2e2f8bb83675091407f205bf37e4cf1185d9194e7a5a4dbb82061d81f2fa8","first_seen":"2026-03-19T19:09:12.486153Z","last_seen":"2026-07-23T10:06:50.451667Z","times_seen":6467,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"theshoebill.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"theshoebill.xyz/api/file/1776297263737-HCqm6aCaUAQOcjt.jpg","fqdn":"theshoebill.xyz","domain":"theshoebill.xyz","tld":"xyz"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://theshoebill.xyz/","date":"2026-07-22T10:19:05.219Z","timestamp":1784715545219,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theshoebill.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 19:09:45 GMT","end":"Mon, 28 Sep 2026 19:09:44 GMT"},"fingerprint":{"sha1":"77:1F:2A:91:72:1D:39:8F:02:0C:5E:7A:6C:AA:6A:39:CE:17:1C:4F","sha256":"95:CA:D4:BD:F8:E4:C6:C2:F7:68:6D:76:1F:91:CE:72:E4:2E:75:2A:72:04:FC:7A:BE:B5:34:66:5F:74:6B:E8"}}},"request":{"raw":"GET /api/file/1776297263737-HCqm6aCaUAQOcjt.jpg HTTP/1.1\r\nHost: theshoebill.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://theshoebill.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 22 Jul 2026 10:19:05 GMT\r\nContent-Type: image/jpeg\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\ncache-control: public, max-age=31536000\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":124127,"size_decoded":124658,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 664x680, components 3","md5":"54d9a23687daa1f4e91af066b332fae3","sha1":"74db472d76c39668975ffef86a88d4ded399e846","sha256":"badc4f2dbfa0499173fd7db17023bc4597f03e6f6761aef0f9a45b183add9e00","sha512":"da81984d0929fb05b19b0e56c85482a7c60fa3743f777f1ca7bcf6d303babce82e53dede18b8fd2f7022b2c84ab8a7284d427171dd2167f1e31beb0b9d1746f8","ssdeep":"3072:bLK9xabgbo5iqMXDbWm2/YhlEB1UtDtziE:bL6abgboYBW/QhrJtd","tlshash":"77c3125dfa345149e5afa0bcac5e6f99053892094227e3318ea18cfedbf64ef05402d9","first_seen":"2026-07-22T10:10:48.451224Z","last_seen":"2026-07-22T10:20:05.315045Z","times_seen":2,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":100,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"theshoebill.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"theshoebill.xyz/api/file/1776297263732-f5a5c68a-106c-4eef-bffe-d61f59497659.png","fqdn":"theshoebill.xyz","domain":"theshoebill.xyz","tld":"xyz"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://theshoebill.xyz/","date":"2026-07-22T10:19:05.231Z","timestamp":1784715545231,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theshoebill.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 19:09:45 GMT","end":"Mon, 28 Sep 2026 19:09:44 GMT"},"fingerprint":{"sha1":"77:1F:2A:91:72:1D:39:8F:02:0C:5E:7A:6C:AA:6A:39:CE:17:1C:4F","sha256":"95:CA:D4:BD:F8:E4:C6:C2:F7:68:6D:76:1F:91:CE:72:E4:2E:75:2A:72:04:FC:7A:BE:B5:34:66:5F:74:6B:E8"}}},"request":{"raw":"GET /api/file/1776297263732-f5a5c68a-106c-4eef-bffe-d61f59497659.png HTTP/1.1\r\nHost: theshoebill.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://theshoebill.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 22 Jul 2026 10:19:05 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\ncache-control: public, max-age=31536000\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":2796667,"size_decoded":2797197,"mime_type":"image/png","magic":"PNG image data, 1024 x 1536, 8-bit/color RGB, non-interlaced","md5":"a5cf45ddf86d763dcb52005cda23746c","sha1":"50543fc2169312b5e2c44734bf715b0a8e270b09","sha256":"6229ec87f17d9739cbea22d24968399a81e18eb399a4ef59cd2b89c93867d702","sha512":"be7c0d487f3e68329d48d6c76d1eae7be936a8d9b795133318cf3e4312c0cad29001f00ae36d37f15deef8fb6808c4fe07ce3d484bef1622c5bdce654f9bbe02","ssdeep":"24576:fJXar+9Pk1WFbH/i1XWnS8Htga9T0Cfjmk6KcIgtmwI85Z2tI+4AIUsg:hXm2kUMXWnSeZ7jmRIgmwI8L2tITAIUN","tlshash":"0925337974050142e8c375fb4818aa336c4d25df68ff93a5006da4086876eebbf97376","first_seen":"2026-07-22T10:10:48.444271Z","last_seen":"2026-07-22T10:20:05.315767Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1451,"timings":{"blocked":179,"dns":0,"connect":0,"send":0,"wait":111,"receive":1161,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"theshoebill.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"theshoebill.xyz/api/file/1776297263702-c97b3984-595d-4775-9b9b-a8dfaa511e4d.png","fqdn":"theshoebill.xyz","domain":"theshoebill.xyz","tld":"xyz"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://theshoebill.xyz/","date":"2026-07-22T10:19:05.245Z","timestamp":1784715545245,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theshoebill.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 19:09:45 GMT","end":"Mon, 28 Sep 2026 19:09:44 GMT"},"fingerprint":{"sha1":"77:1F:2A:91:72:1D:39:8F:02:0C:5E:7A:6C:AA:6A:39:CE:17:1C:4F","sha256":"95:CA:D4:BD:F8:E4:C6:C2:F7:68:6D:76:1F:91:CE:72:E4:2E:75:2A:72:04:FC:7A:BE:B5:34:66:5F:74:6B:E8"}}},"request":{"raw":"GET /api/file/1776297263702-c97b3984-595d-4775-9b9b-a8dfaa511e4d.png HTTP/1.1\r\nHost: theshoebill.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://theshoebill.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 22 Jul 2026 10:19:06 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\ncache-control: public, max-age=31536000\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1549586,"size_decoded":1550116,"mime_type":"image/png","magic":"PNG image data, 1536 x 1024, 8-bit/color RGB, non-interlaced","md5":"29b3893af2f55bcbf9b9d579cf57042a","sha1":"d09db77b7ed9340eb960e2fc63b1e1a3911eb6ae","sha256":"dc8f6c5130822d97e2e697d0316303ee18b5c1066cdfb5135910562f3a866135","sha512":"c2377e4a163010481716d7bba79704a1cd5a241611dd735b499d571a70f4c4bbab498df35fdc49ea1f74181079fc61f4495f93fd71c647c977e29a201a450b9e","ssdeep":"24576:GjYN0QSXo0nu/aLP9dqBDr1BWBQvHqJ5ezOvqbK:GjHQOnuyfqFZBWyvecKp","tlshash":"0e253336b8d612b9eb8321f0a44dd571ae8215f1fca68498313e73143beaef6b144b45","first_seen":"2026-07-22T10:10:48.427914Z","last_seen":"2026-07-22T10:20:05.316336Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1764,"timings":{"blocked":1011,"dns":0,"connect":0,"send":0,"wait":117,"receive":636,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"theshoebill.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"theshoebill.xyz/api/file/1776297263678-5165f14f-75f2-4f91-a165-1b5f2478e116.png","fqdn":"theshoebill.xyz","domain":"theshoebill.xyz","tld":"xyz"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://theshoebill.xyz/","date":"2026-07-22T10:19:05.249Z","timestamp":1784715545249,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theshoebill.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 19:09:45 GMT","end":"Mon, 28 Sep 2026 19:09:44 GMT"},"fingerprint":{"sha1":"77:1F:2A:91:72:1D:39:8F:02:0C:5E:7A:6C:AA:6A:39:CE:17:1C:4F","sha256":"95:CA:D4:BD:F8:E4:C6:C2:F7:68:6D:76:1F:91:CE:72:E4:2E:75:2A:72:04:FC:7A:BE:B5:34:66:5F:74:6B:E8"}}},"request":{"raw":"GET /api/file/1776297263678-5165f14f-75f2-4f91-a165-1b5f2478e116.png HTTP/1.1\r\nHost: theshoebill.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://theshoebill.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 22 Jul 2026 10:19:06 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\ncache-control: public, max-age=31536000\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1390694,"size_decoded":1391224,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGB, non-interlaced","md5":"abe81dbbca29f3f8614bf8b7408b743b","sha1":"b971dbbf8c109a63a737f2bb89a26032445959d2","sha256":"ee4113a4cb804ebb88038695a4606bd74a6797d435fb12f03c52a12e7ea862c0","sha512":"d02bcfb43e5bc7f78eb9c8ab6b9ac133f9ab026ed8bcf00cd6e4840dd166ba058b1e91a7d9a805198fbd8e7a9bdd4fc94a1d2e14507b5024576c29c7ffbf6b5f","ssdeep":"24576:IbExkH8fjfGF6e9VqrFx9wp43VTXRO/PEAtrHTbBqVuKG6RfuQ:2Ca87fM6kscp+VTcXDrzAVuKG6RfuQ","tlshash":"912533881881ccd5da92f93a5012c446cefad5667dafe00f547c0a237aef745b7e2b06","first_seen":"2026-07-22T10:10:48.434987Z","last_seen":"2026-07-22T10:20:05.316942Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1861,"timings":{"blocked":1431,"dns":0,"connect":0,"send":0,"wait":113,"receive":317,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"theshoebill.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"theshoebill.xyz/api/file/1776297263676-4643c07f-3fef-496f-8e4e-bd9c22008d38.png","fqdn":"theshoebill.xyz","domain":"theshoebill.xyz","tld":"xyz"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://theshoebill.xyz/","date":"2026-07-22T10:19:05.250Z","timestamp":1784715545250,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theshoebill.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 19:09:45 GMT","end":"Mon, 28 Sep 2026 19:09:44 GMT"},"fingerprint":{"sha1":"77:1F:2A:91:72:1D:39:8F:02:0C:5E:7A:6C:AA:6A:39:CE:17:1C:4F","sha256":"95:CA:D4:BD:F8:E4:C6:C2:F7:68:6D:76:1F:91:CE:72:E4:2E:75:2A:72:04:FC:7A:BE:B5:34:66:5F:74:6B:E8"}}},"request":{"raw":"GET /api/file/1776297263676-4643c07f-3fef-496f-8e4e-bd9c22008d38.png HTTP/1.1\r\nHost: theshoebill.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://theshoebill.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 22 Jul 2026 10:19:06 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\ncache-control: public, max-age=31536000\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1349730,"size_decoded":1350260,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGB, non-interlaced","md5":"dda0b46cd8309b179a88935ed7a4bcd5","sha1":"1ea07a37e1f73a539680bf23b56a7e33412e9d4a","sha256":"0231f6ef0455358db3c5799e49a55b3b3a14f6dce0827ea4384bb959b3e0e581","sha512":"018abb08c75907bc24dff3484d72c4a26cdc47fcf1cb4f131f76c92c2c58dfaf2d785c523604a9c86e582cce965d6a544ae19b56d121d8db7e96341211b29e58","ssdeep":"24576:gJCDGXNQtwmg9HVwSfUK2oPZTpPEqKx+k:GOOdVDRPlKxx","tlshash":"4a2533902e7105e9c932fb705c11a7c3b0695982f72f844a78e5405fb39affa9b86c61","first_seen":"2026-07-22T10:10:48.429389Z","last_seen":"2026-07-22T10:20:05.317723Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2097,"timings":{"blocked":1567,"dns":0,"connect":0,"send":0,"wait":108,"receive":422,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"theshoebill.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"theshoebill.xyz/api/file/1776297263663-57fdfac2-fdae-4f2e-af99-d810faba3139.png","fqdn":"theshoebill.xyz","domain":"theshoebill.xyz","tld":"xyz"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://theshoebill.xyz/","date":"2026-07-22T10:19:05.258Z","timestamp":1784715545258,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theshoebill.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 19:09:45 GMT","end":"Mon, 28 Sep 2026 19:09:44 GMT"},"fingerprint":{"sha1":"77:1F:2A:91:72:1D:39:8F:02:0C:5E:7A:6C:AA:6A:39:CE:17:1C:4F","sha256":"95:CA:D4:BD:F8:E4:C6:C2:F7:68:6D:76:1F:91:CE:72:E4:2E:75:2A:72:04:FC:7A:BE:B5:34:66:5F:74:6B:E8"}}},"request":{"raw":"GET /api/file/1776297263663-57fdfac2-fdae-4f2e-af99-d810faba3139.png HTTP/1.1\r\nHost: theshoebill.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://theshoebill.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 22 Jul 2026 10:19:07 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\ncache-control: public, max-age=31536000\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1202589,"size_decoded":1203119,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGB, non-interlaced","md5":"a4bbf4020f0d7216807b7cc506183ae9","sha1":"374ab8e9ec77f9612ca701b400e8d451f10b9ff8","sha256":"d9883a19e7188b5ce5136488afb02cc4340ff865cd1ad7bb7a8521ac16a65386","sha512":"06dbc1b84ad8d98fa33b18f8eb5b9e0a12397d0c8d0881680a4f7b01c72fcc7a865dc84cadaafe05b7a0d9e047e2fb72f566224551f9960e4811a0130742cb85","ssdeep":"24576:/+0Nf3rN5QGdhshKPDiMfGhvDTRSGevvgbhddTHM1m4Rg0q3:JNvR5FH5fWHMGeHETHj4W0q3","tlshash":"432533487973e9f9d502b6b3d1ab04abc3741fa791681410beb8c5e32331ad2c991f5b","first_seen":"2026-07-22T10:10:48.458887Z","last_seen":"2026-07-22T10:20:05.318246Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2646,"timings":{"blocked":2234,"dns":0,"connect":0,"send":0,"wait":108,"receive":304,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"theshoebill.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"theshoebill.xyz/api/file/1776297263708-d0d8c121-38c9-425a-ae1d-554b52e227e7.png","fqdn":"theshoebill.xyz","domain":"theshoebill.xyz","tld":"xyz"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://theshoebill.xyz/","date":"2026-07-22T10:19:05.241Z","timestamp":1784715545241,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theshoebill.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 19:09:45 GMT","end":"Mon, 28 Sep 2026 19:09:44 GMT"},"fingerprint":{"sha1":"77:1F:2A:91:72:1D:39:8F:02:0C:5E:7A:6C:AA:6A:39:CE:17:1C:4F","sha256":"95:CA:D4:BD:F8:E4:C6:C2:F7:68:6D:76:1F:91:CE:72:E4:2E:75:2A:72:04:FC:7A:BE:B5:34:66:5F:74:6B:E8"}}},"request":{"raw":"GET /api/file/1776297263708-d0d8c121-38c9-425a-ae1d-554b52e227e7.png HTTP/1.1\r\nHost: theshoebill.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://theshoebill.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 22 Jul 2026 10:19:06 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\ncache-control: public, max-age=31536000\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1842978,"size_decoded":1843508,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGB, non-interlaced","md5":"725c29c8198b2df2dd57b37b6f8e17c9","sha1":"274208ed2770bdc2a2f798ce103440a3a6139300","sha256":"2e437fb659a2701ea6d29fef15a417d45cd8fc9da2e0fca6e257d51c9d49bf5d","sha512":"604ad0eba4475d6fac5cd75ca0dcb23b2100bd3784fcef54718711ba745a053a8cf5238bda829279d05eca53347a8f8bf2f0a424068c9e011a5c512ad79c9468","ssdeep":"24576:j869Ldio97RR8m4wTY3nZIsD/NwUN0q8WUK67JUZE:ddIuYX+6NMWUKUd","tlshash":"822533fa756374ede786b0390195639308e33fa94cce03ce79b94820a7235d15bb166e","first_seen":"2026-07-22T10:10:48.433789Z","last_seen":"2026-07-22T10:20:05.318842Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1217,"timings":{"blocked":705,"dns":0,"connect":0,"send":0,"wait":107,"receive":405,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"theshoebill.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"theshoebill.xyz/api/file/1776297263710-d97c9e0d-de3b-449a-9fc9-d1dbb1874d27.png","fqdn":"theshoebill.xyz","domain":"theshoebill.xyz","tld":"xyz"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://theshoebill.xyz/","date":"2026-07-22T10:19:05.240Z","timestamp":1784715545240,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theshoebill.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 19:09:45 GMT","end":"Mon, 28 Sep 2026 19:09:44 GMT"},"fingerprint":{"sha1":"77:1F:2A:91:72:1D:39:8F:02:0C:5E:7A:6C:AA:6A:39:CE:17:1C:4F","sha256":"95:CA:D4:BD:F8:E4:C6:C2:F7:68:6D:76:1F:91:CE:72:E4:2E:75:2A:72:04:FC:7A:BE:B5:34:66:5F:74:6B:E8"}}},"request":{"raw":"GET /api/file/1776297263710-d97c9e0d-de3b-449a-9fc9-d1dbb1874d27.png HTTP/1.1\r\nHost: theshoebill.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://theshoebill.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 22 Jul 2026 10:19:05 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\ncache-control: public, max-age=31536000\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":2306272,"size_decoded":2306802,"mime_type":"image/png","magic":"PNG image data, 1536 x 1024, 8-bit/color RGB, non-interlaced","md5":"36728807cdcec1997c78eca7f96ace0b","sha1":"fcf325bff6ebb02b54bfb5471681b4472a7913e3","sha256":"f29b04bb44b47a8d31f67f42e6f9edf3e598cfc2b6f652462d7eb8f9db4d11ab","sha512":"f08906e61bb5dd7b2645453b55c3b427a441fbc71b09c19b53a0be434e35313d0739916b01275020ac8dff84dd97737707fbfb5abe601d3d6f4d69d70643bd08","ssdeep":"24576:R+huxAWW6mmbRzLGr081vO8c1blXwZkNxOj4tjU3y:R6UAL6LGrj1O8c1hX6kbOj4lt","tlshash":"262533dd24806f72cd8b56b249bc490c4ab18b61399e3fb004de05c7ea6bf959fc05da","first_seen":"2026-07-22T10:10:48.456842Z","last_seen":"2026-07-22T10:20:05.319464Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1567,"timings":{"blocked":276,"dns":0,"connect":0,"send":0,"wait":126,"receive":1165,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"theshoebill.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"theshoebill.xyz/_next/static/chunks/0d3shmwh5_nmn.js","fqdn":"theshoebill.xyz","domain":"theshoebill.xyz","tld":"xyz"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://theshoebill.xyz/","date":"2026-07-22T10:19:04.407Z","timestamp":1784715544407,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theshoebill.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 19:09:45 GMT","end":"Mon, 28 Sep 2026 19:09:44 GMT"},"fingerprint":{"sha1":"77:1F:2A:91:72:1D:39:8F:02:0C:5E:7A:6C:AA:6A:39:CE:17:1C:4F","sha256":"95:CA:D4:BD:F8:E4:C6:C2:F7:68:6D:76:1F:91:CE:72:E4:2E:75:2A:72:04:FC:7A:BE:B5:34:66:5F:74:6B:E8"}}},"request":{"raw":"GET /_next/static/chunks/0d3shmwh5_nmn.js HTTP/1.1\r\nHost: theshoebill.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://theshoebill.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 22 Jul 2026 10:19:04 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Thu, 28 May 2026 21:48:21 GMT\r\nETag: W/\"d576-19e708f5181\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":54646,"size_decoded":13500,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (54644), with no line terminators","md5":"2c6890538a7dca3df0f031d8acf1bf06","sha1":"c516eec44b0e1d433f4bb380271297e7eaf3ca15","sha256":"a3ac200f3ab8bfa57cf78882057741ddb5c0fbc9e2490c5d951c099b37484206","sha512":"ca54d71ce89709406d40dcbf86d9425bc74cbf7127291992d2b3f974300009b3f372f6a806ac2bc44e7f30d9ba6e2b6442754814e20dbff8fc4928cb992aa693","ssdeep":"384:2sUWst5gWTnrYV3uXeqbkJdeUtdaVmzlhjuNf9zXYpDuYNb4x2pk81FZTDxJRiGD:vUWstOoS3HSqD95hdFQcCDFZ1dqFY+V","tlshash":"b333ea753295faa303db91d9c0370012f2780d7130ad64b4b395d8af399dd8a92faf69","first_seen":"2026-03-18T18:55:57.692711Z","last_seen":"2026-07-23T11:00:23.238888Z","times_seen":11298,"resource_available":true,"data":null}},"time_used":180,"timings":{"blocked":78,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"theshoebill.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@300;400;500;600\u0026family=Bebas+Neue\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://theshoebill.xyz/","date":"2026-07-22T10:19:04.615Z","timestamp":1784715544615,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:27 GMT","end":"Mon, 21 Sep 2026 08:39:26 GMT"},"fingerprint":{"sha1":"50:37:CF:61:33:A1:EE:47:D9:3D:A6:5E:07:BA:4C:FF:F7:25:9F:76","sha256":"7D:4D:21:06:63:E2:5E:F0:8C:59:8E:EB:B7:94:2B:81:70:11:D3:F4:C0:A0:81:A6:1B:E7:27:FD:56:10:1A:11"}}},"request":{"raw":"GET /css2?family=Inter:wght@300;400;500;600\u0026family=Bebas+Neue\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://theshoebill.xyz/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 22 Jul 2026 10:19:04 GMT\r\ndate: Wed, 22 Jul 2026 10:19:04 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10964,"size_decoded":1514,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"feca752e942db4f918feae720230fed2","sha1":"92d9e5800c456889414e33a9c79e49509aaddfd9","sha256":"0cdf6f4786189fcd83752e52b991acd78d33a884e0714cdfe31c238bd7d3f1c3","sha512":"d4ba685db88760a8ca203032451f8d69ab89a7050feeee16ed110cb8fd0df9bdb20acdd8207803007b5ce706584b3b6ec47bbe369c52e1b6b0d45bb0ac0a7826","ssdeep":"192:K1/mNA1cO3lnxirNNIxO34OxDENOPCO3/Nx8NNryfO3iExlx:DKYXuM0pR","tlshash":"00328992002ba400ab971dc233cf7f3aae8e50856485d1b95ffd0dc59ceed66436876e","first_seen":"2025-09-23T11:51:23.021413Z","last_seen":"2026-07-22T11:05:20.582971Z","times_seen":19,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":36,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"theshoebill.xyz/images/shoebill-rain.gif","fqdn":"theshoebill.xyz","domain":"theshoebill.xyz","tld":"xyz"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://theshoebill.xyz/","date":"2026-07-22T10:19:04.620Z","timestamp":1784715544620,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theshoebill.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 19:09:45 GMT","end":"Mon, 28 Sep 2026 19:09:44 GMT"},"fingerprint":{"sha1":"77:1F:2A:91:72:1D:39:8F:02:0C:5E:7A:6C:AA:6A:39:CE:17:1C:4F","sha256":"95:CA:D4:BD:F8:E4:C6:C2:F7:68:6D:76:1F:91:CE:72:E4:2E:75:2A:72:04:FC:7A:BE:B5:34:66:5F:74:6B:E8"}}},"request":{"raw":"GET /images/shoebill-rain.gif HTTP/1.1\r\nHost: theshoebill.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://theshoebill.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 22 Jul 2026 10:19:04 GMT\r\nContent-Type: image/gif\r\nContent-Length: 16664025\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=0\r\nLast-Modified: Tue, 31 Mar 2026 13:50:23 GMT\r\nETag: W/\"fe45d9-19d4428e328\"\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":16664025,"size_decoded":16664557,"mime_type":"image/gif","magic":"GIF image data, version 89a, 640 x 640","md5":"da558cb82faae6e6ca1634c6e4ed7b18","sha1":"a37127a6c5c2219dda4e2dfb799f0f8819483aac","sha256":"deb1c9eb1c687611aba178fc120dfa1ad89fceb975534236a5635f2633ac1671","sha512":"5e6fcb462ab5b72b54415b77890c879bc32203e5ab4a5ab552df0a97536d270326b20c9f2afcdc7e1adb82d6ebd8e594a4d96aed2c8dc05dc0166eb6e6ec2852","ssdeep":"24576:UmGqDZUqq6foX1zolVgJHZbSh5g9fYPPSkwf7gWtQvLdblBcpVbn/5N2mxjw:UmHDDNfe2VgJZggVUwf7FQvLdboby6w","tlshash":"2c253388d26f50bfcd23da77f09aad164ac545d55689e8a8c7ecc920f2c070d7da90d3","first_seen":"2026-07-22T10:10:48.421676Z","last_seen":"2026-07-22T10:20:05.321647Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1616,"timings":{"blocked":79,"dns":0,"connect":0,"send":0,"wait":198,"receive":1339,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"theshoebill.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://theshoebill.xyz/","date":"2026-07-22T10:19:04.751Z","timestamp":1784715544751,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://theshoebill.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Jul 2026 01:48:42 GMT\r\nexpires: Fri, 16 Jul 2027 01:48:42 GMT\r\ncache-control: public, max-age=31536000\r\nage: 549022\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-23T10:27:26.256125Z","times_seen":243582,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":27,"dns":0,"connect":0,"send":0,"wait":22,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"theshoebill.xyz/api/file/1776297263736-G__hVoyXcAAs6oB.jpg","fqdn":"theshoebill.xyz","domain":"theshoebill.xyz","tld":"xyz"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://theshoebill.xyz/","date":"2026-07-22T10:19:05.223Z","timestamp":1784715545223,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theshoebill.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 19:09:45 GMT","end":"Mon, 28 Sep 2026 19:09:44 GMT"},"fingerprint":{"sha1":"77:1F:2A:91:72:1D:39:8F:02:0C:5E:7A:6C:AA:6A:39:CE:17:1C:4F","sha256":"95:CA:D4:BD:F8:E4:C6:C2:F7:68:6D:76:1F:91:CE:72:E4:2E:75:2A:72:04:FC:7A:BE:B5:34:66:5F:74:6B:E8"}}},"request":{"raw":"GET /api/file/1776297263736-G__hVoyXcAAs6oB.jpg HTTP/1.1\r\nHost: theshoebill.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://theshoebill.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 22 Jul 2026 10:19:05 GMT\r\nContent-Type: image/jpeg\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\ncache-control: public, max-age=31536000\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":80942,"size_decoded":81473,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 680x680, components 3","md5":"345eaa07e525dbdc450cae91a5dd544e","sha1":"7486ac2e2abf8b31dd7313c6315f1d336dc21b52","sha256":"fae71c53cb765f58c59f53d2bd88ab6e20c006c5ae65812df4fe4476c4bb15ed","sha512":"f29623237395b1abaf1052e69406f1dfa32f2132a3d288e2b62ec537f69469f2aa878d8bc8cecdd95bc45cd208ad74a7d0cbfdc93afe5701474934d82a8c9026","ssdeep":"1536:J0yFSonNglkifSX+6/TiJuut3c99VUy/Pgd2LR+JK6M/67KY1IkQNXhgH:eQIkq++6Wsut3c99eaA0+rQ+J1Z","tlshash":"fe8302b36f7969d0b5580aa006d12f37e6d92f3374879bbb6831589673e83af084c161","first_seen":"2026-07-22T10:10:48.425958Z","last_seen":"2026-07-22T10:20:05.322396Z","times_seen":2,"resource_available":false,"data":null}},"time_used":316,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":210,"receive":106,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"theshoebill.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"theshoebill.xyz/api/file/1776297263698-36911e4f-9032-48db-9482-ef531c79269c.png","fqdn":"theshoebill.xyz","domain":"theshoebill.xyz","tld":"xyz"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://theshoebill.xyz/","date":"2026-07-22T10:19:05.248Z","timestamp":1784715545248,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theshoebill.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 19:09:45 GMT","end":"Mon, 28 Sep 2026 19:09:44 GMT"},"fingerprint":{"sha1":"77:1F:2A:91:72:1D:39:8F:02:0C:5E:7A:6C:AA:6A:39:CE:17:1C:4F","sha256":"95:CA:D4:BD:F8:E4:C6:C2:F7:68:6D:76:1F:91:CE:72:E4:2E:75:2A:72:04:FC:7A:BE:B5:34:66:5F:74:6B:E8"}}},"request":{"raw":"GET /api/file/1776297263698-36911e4f-9032-48db-9482-ef531c79269c.png HTTP/1.1\r\nHost: theshoebill.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://theshoebill.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 22 Jul 2026 10:19:06 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\ncache-control: public, max-age=31536000\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1893231,"size_decoded":1893761,"mime_type":"image/png","magic":"PNG image data, 1536 x 1024, 8-bit/color RGB, non-interlaced","md5":"72929af63c40e83ade07b10ac33530f5","sha1":"07bf93ca6e0c5b95fe3b334ff994583560945be0","sha256":"d612895b2b38bd22488d9e3e25e90ecd14a68d5ea25829cf11dc208ff4d982e4","sha512":"b6f7db4bf07cb2ddf97513cf8b6df01a2f6d8b669acf2cda0f4a4fa77b3739c14f9e320c267319d605f1ac1ea66cf6e541ecb3aa194e5a97369ca4e58ef001d9","ssdeep":"24576:pZcwFwn6BraNnGf95UxFXBiPEDwnM/s+L97zVQLub:rcwFpBrMnGUxB4ewYsM7xQLub","tlshash":"0e2533da3b02a15ffe17127812ad081d2a75eee459cea05b29f35894155ffc03a73e43","first_seen":"2026-07-22T10:10:48.458003Z","last_seen":"2026-07-22T10:20:05.323112Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1846,"timings":{"blocked":1431,"dns":0,"connect":0,"send":0,"wait":107,"receive":308,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"theshoebill.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"theshoebill.xyz/api/file/1776297263703-cacf14f1-0ff0-4866-9eae-57783a79b8fd.png","fqdn":"theshoebill.xyz","domain":"theshoebill.xyz","tld":"xyz"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://theshoebill.xyz/","date":"2026-07-22T10:19:05.243Z","timestamp":1784715545243,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theshoebill.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 19:09:45 GMT","end":"Mon, 28 Sep 2026 19:09:44 GMT"},"fingerprint":{"sha1":"77:1F:2A:91:72:1D:39:8F:02:0C:5E:7A:6C:AA:6A:39:CE:17:1C:4F","sha256":"95:CA:D4:BD:F8:E4:C6:C2:F7:68:6D:76:1F:91:CE:72:E4:2E:75:2A:72:04:FC:7A:BE:B5:34:66:5F:74:6B:E8"}}},"request":{"raw":"GET /api/file/1776297263703-cacf14f1-0ff0-4866-9eae-57783a79b8fd.png HTTP/1.1\r\nHost: theshoebill.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://theshoebill.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 22 Jul 2026 10:19:06 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\ncache-control: public, max-age=31536000\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1916294,"size_decoded":1916824,"mime_type":"image/png","magic":"PNG image data, 1536 x 1024, 8-bit/color RGB, non-interlaced","md5":"56604afd865c252045f85e93bd248208","sha1":"7792db56f08c30f0d595003b6893d5aa9d142d9a","sha256":"13d24ac77fbc0bd9201fed4ca3f3addeb235f65e7bbce7d8bbbdec7319ed583e","sha512":"48beb0ce4d8410a82b4df73fa41e5ea200a5fbd49d1d40981e9460d8f619852d87e6f7d220999c9399686e76b737557c6740f721ab019d947183f8c8c560a36d","ssdeep":"24576:bXD85XtUZneXZpezwX/7eOruUn/2ZALVXNC4MQ0qQCni:bXw5XtUxeXZ4kP7ere/wALV1/09Cni","tlshash":"f02533ed72255ba7f529db7137bb224bed2e6e30b02b610f57e6b368768cd01041143a","first_seen":"2026-07-22T10:10:48.415847Z","last_seen":"2026-07-22T10:20:05.323767Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2406,"timings":{"blocked":981,"dns":0,"connect":0,"send":0,"wait":106,"receive":1319,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"theshoebill.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"theshoebill.xyz/","fqdn":"theshoebill.xyz","domain":"theshoebill.xyz","tld":"xyz"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-22T10:19:03.842Z","timestamp":1784715543842,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theshoebill.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 19:09:45 GMT","end":"Mon, 28 Sep 2026 19:09:44 GMT"},"fingerprint":{"sha1":"77:1F:2A:91:72:1D:39:8F:02:0C:5E:7A:6C:AA:6A:39:CE:17:1C:4F","sha256":"95:CA:D4:BD:F8:E4:C6:C2:F7:68:6D:76:1F:91:CE:72:E4:2E:75:2A:72:04:FC:7A:BE:B5:34:66:5F:74:6B:E8"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: theshoebill.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 22 Jul 2026 10:19:04 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1, 1\r\nx-nextjs-stale-time: 300\r\nX-Powered-By: Next.js\r\nCache-Control: s-maxage=31536000\r\nETag: \"eu3nb6fvrmeyl\"\r\nContent-Encoding: gzip\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19409,"size_decoded":5833,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (16258)","md5":"36af9cdc1a7bd4a639437eb96eb5f3a4","sha1":"272383c32ed24354141b0204f478efb840bdf79d","sha256":"d62cb6a2cfb92fcd2c6248ba67ee59032a37e08f1bcc1c3aee98787bd314828d","sha512":"a78bc7e10b9563140659f2b1529c18c6dcc6d4726405f6886d1efd2108df9b3736987341571256b461344c506c7934f38d1dd2edfa07c679d02484a098b8361f","ssdeep":"384:j0+OX17vE7bMW4IyJxMqJ0IEw7+ibcXbcIbc+sftcDBOf+uCYg1x1P1D121P1f1m:j0+OX1787oW4lH2E7+vYVoBYg1x1P1Dp","tlshash":"9f92b7b3f908dc099532dd19503fae2e6099c07bc7668c5ca3eece5999420ff97929c4","first_seen":"2026-07-22T10:10:48.408289Z","last_seen":"2026-07-22T10:20:05.324583Z","times_seen":2,"resource_available":true,"data":null}},"time_used":353,"timings":{"blocked":-1,"dns":22,"connect":105,"send":0,"wait":108,"receive":0,"ssl":118},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"theshoebill.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"theshoebill.xyz/_next/static/chunks/0dgq26a5_oy.a.js","fqdn":"theshoebill.xyz","domain":"theshoebill.xyz","tld":"xyz"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://theshoebill.xyz/","date":"2026-07-22T10:19:04.394Z","timestamp":1784715544394,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theshoebill.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 19:09:45 GMT","end":"Mon, 28 Sep 2026 19:09:44 GMT"},"fingerprint":{"sha1":"77:1F:2A:91:72:1D:39:8F:02:0C:5E:7A:6C:AA:6A:39:CE:17:1C:4F","sha256":"95:CA:D4:BD:F8:E4:C6:C2:F7:68:6D:76:1F:91:CE:72:E4:2E:75:2A:72:04:FC:7A:BE:B5:34:66:5F:74:6B:E8"}}},"request":{"raw":"GET /_next/static/chunks/0dgq26a5_oy.a.js HTTP/1.1\r\nHost: theshoebill.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://theshoebill.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 22 Jul 2026 10:19:04 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Thu, 28 May 2026 21:48:21 GMT\r\nETag: W/\"c60e-19e708f5185\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":50702,"size_decoded":11184,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (27708)","md5":"5f5191b9f61efd6a4f63c5ac7f5c6c41","sha1":"a2b647221f67abacb4a57c79b01575f565cca4eb","sha256":"69a6bb99c3ffab75664c38bcf12faabd4bb9dc7e300605c030168809b21bc0b9","sha512":"eb580a3267a16fea1f40c5b8ac5b596c45ebfc32268d4f7028e6dc3d97218133370ec6ea1771d0a384eeac3e08dbfbedf73333f8de4f5d6188b102d63982eebf","ssdeep":"384:57/ZdkTd93jnTUYqSGUFT32IIIq4emi0B/d+3W16DvXxqpkKM8wjn0ieI+wQhNoT:V+qSNl3gId1B/d+m1mvxqml1jn0iP5","tlshash":"a633d7b232d4faa2539341e0d43f2017f2690c75206d6474b7e89cdb754c88da6bafe5","first_seen":"2026-03-21T01:08:02.265897Z","last_seen":"2026-07-23T08:01:57.768658Z","times_seen":1624,"resource_available":true,"data":null}},"time_used":394,"timings":{"blocked":-1,"dns":0,"connect":98,"send":0,"wait":193,"receive":0,"ssl":103},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"theshoebill.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"theshoebill.xyz/_next/static/chunks/16g.ca89g7fib.js","fqdn":"theshoebill.xyz","domain":"theshoebill.xyz","tld":"xyz"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://theshoebill.xyz/","date":"2026-07-22T10:19:04.395Z","timestamp":1784715544395,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theshoebill.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 19:09:45 GMT","end":"Mon, 28 Sep 2026 19:09:44 GMT"},"fingerprint":{"sha1":"77:1F:2A:91:72:1D:39:8F:02:0C:5E:7A:6C:AA:6A:39:CE:17:1C:4F","sha256":"95:CA:D4:BD:F8:E4:C6:C2:F7:68:6D:76:1F:91:CE:72:E4:2E:75:2A:72:04:FC:7A:BE:B5:34:66:5F:74:6B:E8"}}},"request":{"raw":"GET /_next/static/chunks/16g.ca89g7fib.js HTTP/1.1\r\nHost: theshoebill.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://theshoebill.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 22 Jul 2026 10:19:04 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Thu, 28 May 2026 21:48:21 GMT\r\nETag: W/\"378d1-19e708f5164\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":227537,"size_decoded":71638,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"153af39331ee55d7019ce3211d57896c","sha1":"a4604cf7eefb25333dbdc30b7d97b41e55d2863b","sha256":"68130dbc97e75518d5c7abcb08ce0b18f94156b0153ccb03ef52308dd8a10e0b","sha512":"d81cfc5ed1eb3f81826ea42bdd4a10ae1c08d7325a410bef181af9041a6c64825668395b5d2afb72abcfc438f8e128a75893a623977c2c1173a36dbe46fff738","ssdeep":"3072:UFLtaNMDfGWY7V70PTIt6h+8BibKNn0ZJGXjFMAL98nwdH++z:UFLtKOfGWYpyI9vGzD58nwdH++z","tlshash":"fb24fbe83995f6626ab302b710af18037338252b280d4d60a251fdddb57845eb17bf9e","first_seen":"2026-03-21T03:20:29.84472Z","last_seen":"2026-07-23T10:40:19.402222Z","times_seen":673,"resource_available":true,"data":null}},"time_used":502,"timings":{"blocked":-1,"dns":0,"connect":98,"send":0,"wait":203,"receive":99,"ssl":102},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"theshoebill.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/bebasneue/v16/JTUSjIg69CK48gW7PXoo9Wlhyw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://theshoebill.xyz/","date":"2026-07-22T10:19:04.748Z","timestamp":1784715544748,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/bebasneue/v16/JTUSjIg69CK48gW7PXoo9Wlhyw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://theshoebill.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 13768\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Jul 2026 07:44:26 GMT\r\nexpires: Fri, 16 Jul 2027 07:44:26 GMT\r\ncache-control: public, max-age=31536000\r\nage: 527678\r\nlast-modified: Tue, 16 Sep 2025 13:27:24 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":13768,"size_decoded":14581,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 13768, version 1.0","md5":"5853435d21b13022c663f99f2bd76107","sha1":"1f063bd9a3dfa8dfd04e071c0a18369a971f8351","sha256":"a7c90c89240c134f7fdd33d40c000ec90b79d675ea53e8cc5a6d423c073de412","sha512":"7b7ea49e16c5255394872c346ea109b6687101c03e6c69ff634f3e835d8f5fc87a6e9846e1dd95e9b4e54592a2a26ed139db16c35958c6abd6e877fd5bb2f9ad","ssdeep":"384:CEEvtXmScTc9b7/kB++WPXP7kRU7+YTSagBj+q11Q:bEpn7skjkA+YTSagBS81Q","tlshash":"d052c0b8d5df2408c784e2b5ab7c2559c8ca1691d078bfb91a3235069f62d2180bccfd","first_seen":"2025-09-17T05:43:28.937898Z","last_seen":"2026-07-23T10:15:23.287664Z","times_seen":11594,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":31,"send":0,"wait":18,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"theshoebill.xyz/api/submit","fqdn":"theshoebill.xyz","domain":"theshoebill.xyz","tld":"xyz"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://theshoebill.xyz/","date":"2026-07-22T10:19:05.048Z","timestamp":1784715545048,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theshoebill.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 19:09:45 GMT","end":"Mon, 28 Sep 2026 19:09:44 GMT"},"fingerprint":{"sha1":"77:1F:2A:91:72:1D:39:8F:02:0C:5E:7A:6C:AA:6A:39:CE:17:1C:4F","sha256":"95:CA:D4:BD:F8:E4:C6:C2:F7:68:6D:76:1F:91:CE:72:E4:2E:75:2A:72:04:FC:7A:BE:B5:34:66:5F:74:6B:E8"}}},"request":{"raw":"GET /api/submit HTTP/1.1\r\nHost: theshoebill.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://theshoebill.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 22 Jul 2026 10:19:05 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4692,"size_decoded":5188,"mime_type":"application/json","magic":"JSON text data","md5":"f558a754096bf7a043527a3e3334c144","sha1":"05a157cc99c749f053ef53d7874058a283fb8ed2","sha256":"bc73b06c963330c88bac2c08f103672da50acac9fe8f355a918e51ea1f1f1ce9","sha512":"f26aabc750910f9e9c9b4ca9393b7b3986d5ab71bcc8d0e56dd9a19a874a33e14087c5485ea9fb499513da29af44300e9aa8f598dbf89f9d266b49943d7a45b5","ssdeep":"96:rnX/t1nMiM6vKY7QBiaQrlx1H6eVLL4EHH1HLxzR7HTLNNq:rnvMiMCKnQJ6eVP4UHpLHLW","tlshash":"23a16caa93ca5eca68d328a325835f99311e5836decf3548b305df1cdf68b1182c31d9","first_seen":"2026-07-22T10:10:48.424239Z","last_seen":"2026-07-22T10:20:05.326835Z","times_seen":2,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"theshoebill.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"theshoebill.xyz/api/file/1776297263734-fb37fa72-b25a-4926-aa86-54a39efba787.png","fqdn":"theshoebill.xyz","domain":"theshoebill.xyz","tld":"xyz"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://theshoebill.xyz/","date":"2026-07-22T10:19:05.229Z","timestamp":1784715545229,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theshoebill.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 19:09:45 GMT","end":"Mon, 28 Sep 2026 19:09:44 GMT"},"fingerprint":{"sha1":"77:1F:2A:91:72:1D:39:8F:02:0C:5E:7A:6C:AA:6A:39:CE:17:1C:4F","sha256":"95:CA:D4:BD:F8:E4:C6:C2:F7:68:6D:76:1F:91:CE:72:E4:2E:75:2A:72:04:FC:7A:BE:B5:34:66:5F:74:6B:E8"}}},"request":{"raw":"GET /api/file/1776297263734-fb37fa72-b25a-4926-aa86-54a39efba787.png HTTP/1.1\r\nHost: theshoebill.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://theshoebill.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 22 Jul 2026 10:19:05 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\ncache-control: public, max-age=31536000\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2021811,"size_decoded":2022341,"mime_type":"image/png","magic":"PNG image data, 1024 x 1536, 8-bit/color RGB, non-interlaced","md5":"6afd22980ee3eb279ebccac0a2bf85b4","sha1":"61625d6b3aef5cb5ef433eaa3f39308d5fe3780c","sha256":"ecdbc991d13e74f7d4d1e0a7d596a6e03418e6c29a555d00260dd526c7eb23ef","sha512":"81c3b9460a097bbe7aa349a3d518abea66925a3b40004d9988cc83426e4e107b47f97f6bf37dcf3db3c24b873035fd5fe1413e1c0dd7b6c5e9e3512be1e5e301","ssdeep":"24576:A3o97o4JZ04O43ObnCuD7sVlwtSScUiibSxV4rzE:Ko97oGxl3O227tcxib4J","tlshash":"982533f59a163f17c4f2abf90864b941a01852b0f1d8628fa4f71d54fb97e3213b9b09","first_seen":"2026-07-22T10:10:48.461066Z","last_seen":"2026-07-22T10:20:05.327455Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1452,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":1251,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"theshoebill.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"theshoebill.xyz/api/file/1776297263666-61d22854-9b6a-4977-9377-104e291443ea.png","fqdn":"theshoebill.xyz","domain":"theshoebill.xyz","tld":"xyz"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://theshoebill.xyz/","date":"2026-07-22T10:19:05.256Z","timestamp":1784715545256,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theshoebill.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 19:09:45 GMT","end":"Mon, 28 Sep 2026 19:09:44 GMT"},"fingerprint":{"sha1":"77:1F:2A:91:72:1D:39:8F:02:0C:5E:7A:6C:AA:6A:39:CE:17:1C:4F","sha256":"95:CA:D4:BD:F8:E4:C6:C2:F7:68:6D:76:1F:91:CE:72:E4:2E:75:2A:72:04:FC:7A:BE:B5:34:66:5F:74:6B:E8"}}},"request":{"raw":"GET /api/file/1776297263666-61d22854-9b6a-4977-9377-104e291443ea.png HTTP/1.1\r\nHost: theshoebill.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://theshoebill.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 22 Jul 2026 10:19:07 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\ncache-control: public, max-age=31536000\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1833781,"size_decoded":1834311,"mime_type":"image/png","magic":"PNG image data, 1024 x 1536, 8-bit/color RGB, non-interlaced","md5":"da4d628a4687fd6d43f0677fa41bf1b5","sha1":"4793705d348dc986f71c411fee5552eb01e4051a","sha256":"402c7d3d309e43c932ad8f21e76b88b533cab5beb2057527fa4007acfd8a53f5","sha512":"77a2c0ce3cf0e75e8ecfe1a50b435b019abac31208e7d7649b278c2c8df0cf4d7b611ad09874e9ed3b8f6874f38ed63ad364a823ddc3728c88f57f8df319f374","ssdeep":"24576:GCs3sMlO/Kph8CtNZw2s8+PKlNcYN3NM6vdHLF:GCs3sMlOipN9DYKVvdx","tlshash":"462533a035c52329fde9933484b10b147b25ff7931227a4dd8a2188936f95bf31772ad","first_seen":"2026-07-22T10:10:48.419164Z","last_seen":"2026-07-22T10:20:05.32808Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2469,"timings":{"blocked":2151,"dns":0,"connect":0,"send":0,"wait":106,"receive":212,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"theshoebill.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"theshoebill.xyz/_next/static/chunks/07xqh8rfegk5u.css","fqdn":"theshoebill.xyz","domain":"theshoebill.xyz","tld":"xyz"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://theshoebill.xyz/","date":"2026-07-22T10:19:04.390Z","timestamp":1784715544390,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theshoebill.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 19:09:45 GMT","end":"Mon, 28 Sep 2026 19:09:44 GMT"},"fingerprint":{"sha1":"77:1F:2A:91:72:1D:39:8F:02:0C:5E:7A:6C:AA:6A:39:CE:17:1C:4F","sha256":"95:CA:D4:BD:F8:E4:C6:C2:F7:68:6D:76:1F:91:CE:72:E4:2E:75:2A:72:04:FC:7A:BE:B5:34:66:5F:74:6B:E8"}}},"request":{"raw":"GET /_next/static/chunks/07xqh8rfegk5u.css HTTP/1.1\r\nHost: theshoebill.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://theshoebill.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 22 Jul 2026 10:19:04 GMT\r\nContent-Type: text/css; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Thu, 28 May 2026 21:48:21 GMT\r\nETag: W/\"21c4-19e708f5164\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":8644,"size_decoded":3081,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (8643)","md5":"2633dc84d953565a30e627e79c300244","sha1":"872798581e2083759b33616d341f09cfd8f79cda","sha256":"baa491346e14c91e8fa2e26ee017e0a04ce3e19fc83231a0b26f658c1219736d","sha512":"e9db67b48df9465d3dc5bf3a8d9cf8a12c29c7e1c3fe9ce6f2a6c3c95166dee730b1e1b99eb97ff77dbffd9caa54a6e271bc56f6397b357dd502fd7931fd4049","ssdeep":"96:LgKqzfGc2RkVqfqveifS2fOeieuOFR7I4uf0qKHLRA3OlO/Jw+LOvUpoY1EedNMz:nqzOBRkVwTI22HR4/e+yS1HPcH5","tlshash":"0802b626f306ceba5cd3cce3f39d7618671825968a7065dcff832b029ac7560124af16","first_seen":"2026-07-22T10:10:48.412906Z","last_seen":"2026-07-22T10:20:05.328696Z","times_seen":2,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"theshoebill.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"theshoebill.xyz/api/file/1776297263674-772b477c-5a85-446f-8894-1caff6bb3c6b.png","fqdn":"theshoebill.xyz","domain":"theshoebill.xyz","tld":"xyz"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://theshoebill.xyz/","date":"2026-07-22T10:19:05.251Z","timestamp":1784715545251,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theshoebill.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 19:09:45 GMT","end":"Mon, 28 Sep 2026 19:09:44 GMT"},"fingerprint":{"sha1":"77:1F:2A:91:72:1D:39:8F:02:0C:5E:7A:6C:AA:6A:39:CE:17:1C:4F","sha256":"95:CA:D4:BD:F8:E4:C6:C2:F7:68:6D:76:1F:91:CE:72:E4:2E:75:2A:72:04:FC:7A:BE:B5:34:66:5F:74:6B:E8"}}},"request":{"raw":"GET /api/file/1776297263674-772b477c-5a85-446f-8894-1caff6bb3c6b.png HTTP/1.1\r\nHost: theshoebill.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://theshoebill.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 22 Jul 2026 10:19:07 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\ncache-control: public, max-age=31536000\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1641567,"size_decoded":1642097,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGB, non-interlaced","md5":"fbe804bde552e7b41fbe9a191efe7348","sha1":"915de4ff0d71562d064ccc0fe57af4363aac9897","sha256":"38feb2b1b7605bed6fa6ad5ef45a5c666f488f92683a31c89b0dd21926c271b3","sha512":"8b06e1018890d028858944d824161c117c73d115d1267a1858c6f100211bed9d274f9193035986e6309b197c92b25d77b3e0cfd931506ea78896791934ebe35a","ssdeep":"24576:YIcLdIEspXbhAG4Fl6EwD1zYsrnBPwVFvbY8/CSxiE1zD9q38AX6:PcLWnaG4Fl6EG8sr5aFvbY8/CSxVhD95","tlshash":"332533e5a020ba11cb446bb734f965c5b37bb22678c564b89b4841071bc53f4ba335ef","first_seen":"2026-07-22T10:10:48.430515Z","last_seen":"2026-07-22T10:20:05.329337Z","times_seen":2,"resource_available":false,"data":null}},"time_used":3400,"timings":{"blocked":1764,"dns":0,"connect":0,"send":0,"wait":107,"receive":1529,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"theshoebill.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"theshoebill.xyz/api/file/1776297263670-123bd6d3-d0d1-4cfd-8473-fd388375b343.png","fqdn":"theshoebill.xyz","domain":"theshoebill.xyz","tld":"xyz"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://theshoebill.xyz/","date":"2026-07-22T10:19:05.254Z","timestamp":1784715545254,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theshoebill.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 19:09:45 GMT","end":"Mon, 28 Sep 2026 19:09:44 GMT"},"fingerprint":{"sha1":"77:1F:2A:91:72:1D:39:8F:02:0C:5E:7A:6C:AA:6A:39:CE:17:1C:4F","sha256":"95:CA:D4:BD:F8:E4:C6:C2:F7:68:6D:76:1F:91:CE:72:E4:2E:75:2A:72:04:FC:7A:BE:B5:34:66:5F:74:6B:E8"}}},"request":{"raw":"GET /api/file/1776297263670-123bd6d3-d0d1-4cfd-8473-fd388375b343.png HTTP/1.1\r\nHost: theshoebill.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://theshoebill.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 22 Jul 2026 10:19:07 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\ncache-control: public, max-age=31536000\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1043264,"size_decoded":1043794,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGB, non-interlaced","md5":"b11379a05870c321f4e173379911a69a","sha1":"8575a30864322a8fd0ff005a40e035246c7455e0","sha256":"e7abbd673693bb4f7dbb273dfe87d409f439ee9e93eefd999c83c6549e811141","sha512":"5ba1a4a53ec8d6f6d44eddab03147fe8fa9853696c7eb9f68ed1fe80fe04e6ff5418667f933ee2574a5de66546a1046ce05166b3d7f806c6453977420b30b18c","ssdeep":"24576:vb7yKer0gwSrtKIW8DPVmReXSeDweXOkJAJPMzdpJVPP0r/sujXl72iejdRQq:DGKXgwSrtKIW4bXS6J+6CPMhLVP8Dnli","tlshash":"ad25335d3c803711fc40a9b504f31f3bdaeabee86c441a1fe07958581eed2119ab5a9f","first_seen":"2026-07-22T10:10:48.454814Z","last_seen":"2026-07-22T10:20:05.329967Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2175,"timings":{"blocked":1861,"dns":0,"connect":0,"send":0,"wait":106,"receive":208,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"theshoebill.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"theshoebill.xyz/api/file/1776297263634-3e50b39a-d8cc-459d-af9e-3b76ffd175b8.png","fqdn":"theshoebill.xyz","domain":"theshoebill.xyz","tld":"xyz"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://theshoebill.xyz/","date":"2026-07-22T10:19:05.261Z","timestamp":1784715545261,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theshoebill.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 19:09:45 GMT","end":"Mon, 28 Sep 2026 19:09:44 GMT"},"fingerprint":{"sha1":"77:1F:2A:91:72:1D:39:8F:02:0C:5E:7A:6C:AA:6A:39:CE:17:1C:4F","sha256":"95:CA:D4:BD:F8:E4:C6:C2:F7:68:6D:76:1F:91:CE:72:E4:2E:75:2A:72:04:FC:7A:BE:B5:34:66:5F:74:6B:E8"}}},"request":{"raw":"GET /api/file/1776297263634-3e50b39a-d8cc-459d-af9e-3b76ffd175b8.png HTTP/1.1\r\nHost: theshoebill.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://theshoebill.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 22 Jul 2026 10:19:07 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\ncache-control: public, max-age=31536000\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1404147,"size_decoded":1404677,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGB, non-interlaced","md5":"62f249b41b5e379a292cc0f5f368d66f","sha1":"bc5e93071534b70aee761674f83d78a1e225a548","sha256":"92fc688be3f5dad32f78c3075e903edc51a392c9043f4436d46016f0594407c3","sha512":"f45d10e07d6e2d7f435bda14b047da2d0552fa4fc86d00e5ab1d628c654a4db62e5cdfbb9dc83681831d6a2d506d03ea67875318d72951919fb82cc94ffd6052","ssdeep":"24576:n9iqejHk51RCDW6Vr59tNjKaCNMkm2PFrltbN:n9i/7kP0a6caCn5B","tlshash":"5f2533fafc1496e1cac99438eb6606d46bb581e04385528ba53f7201a3e5701d84beff","first_seen":"2026-07-22T10:10:48.440112Z","last_seen":"2026-07-22T10:20:05.330646Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2906,"timings":{"blocked":2596,"dns":0,"connect":0,"send":0,"wait":103,"receive":207,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"theshoebill.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"theshoebill.xyz/api/file/1776296676021-6d6e3100-e3d5-4a2e-ae51-d0554efa17f5.jpeg","fqdn":"theshoebill.xyz","domain":"theshoebill.xyz","tld":"xyz"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://theshoebill.xyz/","date":"2026-07-22T10:19:05.263Z","timestamp":1784715545263,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theshoebill.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 19:09:45 GMT","end":"Mon, 28 Sep 2026 19:09:44 GMT"},"fingerprint":{"sha1":"77:1F:2A:91:72:1D:39:8F:02:0C:5E:7A:6C:AA:6A:39:CE:17:1C:4F","sha256":"95:CA:D4:BD:F8:E4:C6:C2:F7:68:6D:76:1F:91:CE:72:E4:2E:75:2A:72:04:FC:7A:BE:B5:34:66:5F:74:6B:E8"}}},"request":{"raw":"GET /api/file/1776296676021-6d6e3100-e3d5-4a2e-ae51-d0554efa17f5.jpeg HTTP/1.1\r\nHost: theshoebill.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://theshoebill.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 22 Jul 2026 10:19:07 GMT\r\nContent-Type: image/jpeg\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\ncache-control: public, max-age=31536000\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":87903,"size_decoded":88434,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=2, orientation=upper-left], baseline, precision 8, 1024x1024, components 3","md5":"91bc2199f244f06f21837774e335af48","sha1":"7eae9976a5638ec0f5b07b9033cb9e4da2fdbde0","sha256":"47684b00333006f3ef8de5c3d135b659804987e435863b370f9786e97ac2ae31","sha512":"e25e4b8a2f1e19c1a52af2f21b41d58da099e60d78316383bdc3a84f57df3354b5b389436ccebd971d8a40769ffbf471d93262a1ce9d9198964e0b2570f3e615","ssdeep":"1536:KlVxgqy8WNX4DFN2g9Nm4hKtqL7D+awEhR7XBwtYeAL/alsvM:Exgqy8iMFNV9NmlULGathR7Zew/alf","tlshash":"91836b57ce058f53e128d3f4bf530eac1f592a5ca4923afe01670d8b7b256220c8e42e","first_seen":"2026-07-22T10:10:48.449099Z","last_seen":"2026-07-22T10:20:05.331301Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2758,"timings":{"blocked":2643,"dns":0,"connect":0,"send":0,"wait":114,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"theshoebill.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"theshoebill.xyz/favicon.ico","fqdn":"theshoebill.xyz","domain":"theshoebill.xyz","tld":"xyz"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://theshoebill.xyz/","date":"2026-07-22T10:19:08.384Z","timestamp":1784715548384,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theshoebill.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 19:09:45 GMT","end":"Mon, 28 Sep 2026 19:09:44 GMT"},"fingerprint":{"sha1":"77:1F:2A:91:72:1D:39:8F:02:0C:5E:7A:6C:AA:6A:39:CE:17:1C:4F","sha256":"95:CA:D4:BD:F8:E4:C6:C2:F7:68:6D:76:1F:91:CE:72:E4:2E:75:2A:72:04:FC:7A:BE:B5:34:66:5F:74:6B:E8"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: theshoebill.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://theshoebill.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 22 Jul 2026 10:19:08 GMT\r\nContent-Type: image/x-icon\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=0\r\nLast-Modified: Tue, 31 Mar 2026 14:24:59 GMT\r\nETag: W/\"cbe-19d44489191\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3262,"size_decoded":1658,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 24x32, 32 bits/pixel","md5":"85834eb1e8598a19cbee64071ceeaef1","sha1":"2800bae4f7e80b06bdf522b48d3d2b070e6aaf74","sha256":"08b7aee9b2a31d19cbc9e0d7fdcf8d80568b11f808b2f7390dbd52d4c6d81ce1","sha512":"5b955187ea13f35833bc9b0e95191078b7eca6aea4313397945045ec8f30fc1d2a3e9f0b9b1df019cb99d433fb5d3ee3345821e3a4a3c501214cd62b44af9ac5","ssdeep":"","tlshash":"9261664830e17dd5d401a23b889d52b60b584f1ede85e22a9ed5bd4a7b9c733c588909","first_seen":"2026-07-22T10:10:48.45016Z","last_seen":"2026-07-22T10:20:05.332015Z","times_seen":2,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"theshoebill.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}