{"report_id":"4cd0c94a-486d-4f84-90e1-ef7e5c4b7286","version":6,"status":"done","tags":[],"date":"2025-08-25T11:21:09Z","url":{"schema":"http","addr":"www.1377x.is/","fqdn":"www.1377x.is","domain":"1377x.is","tld":"is"},"ip":{"addr":"172.67.153.230","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"www.1377x.is/","fqdn":"www.1377x.is","domain":"1377x.is","tld":"is"},"title":"1337x.to | 1337x.is - Free Movies, TV Series, Music, Games and Software"},"submit":{"url":{"schema":"http","addr":"www.1377x.is/","fqdn":"www.1377x.is","domain":"1377x.is","tld":"is"},"ip":{"addr":"172.67.153.230","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-09-29T11:21:09Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kennethlawfullyconveniences.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"rashcolonizeexpand.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"torchfriendlypay.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.1377x.is","ip":{"addr":"104.21.4.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-10-01","domain_rank":322625,"first_seen":"2020-04-20T13:02:08Z","last_seen":"2025-08-16T03:46:54.691325Z","alert_count":0,"request_count":15,"received_data":501232,"sent_data":6988,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"ShareThis","description":"ShareThis provides free engagement and growth tools (e.g., share buttons, follow buttons, and reaction buttons) for site owners.","website":"https://sharethis.com","common_platform_enumeration":"","icon":"ShareThis.png","categories":["Widgets"]}]},{"fqdn":"creative-sb1.com","ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-07-01","domain_rank":22211,"first_seen":"2025-08-08T09:32:32.509707Z","last_seen":"2025-08-22T09:38:58.27174Z","alert_count":0,"request_count":5,"received_data":183733,"sent_data":2204,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"flushpersist.com","ip":{"addr":"192.243.59.13","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"domain_registered":"2025-07-01","domain_rank":23810,"first_seen":"2025-07-08T10:43:12.76905Z","last_seen":"2025-08-19T21:48:17.550909Z","alert_count":0,"request_count":2,"received_data":992,"sent_data":1528,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.19.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-08-20T15:10:53.071671Z","alert_count":0,"request_count":2,"received_data":81926,"sent_data":1094,"comment":"","tags":null,"fingerprints":null},{"fqdn":"torchfriendlypay.com","ip":{"addr":"192.243.59.20","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"domain_registered":"2024-09-01","domain_rank":191479,"first_seen":"2025-07-30T13:31:49.539518Z","last_seen":"2025-08-20T16:09:43.322745Z","alert_count":1,"request_count":1,"received_data":497,"sent_data":497,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.19.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"weirdopt.com","ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-07-01","domain_rank":37519,"first_seen":"2025-07-08T12:55:47.272157Z","last_seen":"2025-08-20T04:32:20.993418Z","alert_count":1,"request_count":1,"received_data":377,"sent_data":415,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.storageimagedisplay.com","ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2024-09-13","domain_rank":170153,"first_seen":"2024-09-13T12:56:32Z","last_seen":"2025-08-22T06:18:22.747826Z","alert_count":0,"request_count":1,"received_data":6771,"sent_data":482,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"kennethlawfullyconveniences.com","ip":{"addr":"192.243.61.227","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":6,"request_count":6,"received_data":190554,"sent_data":5813,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"rashcolonizeexpand.com","ip":{"addr":"192.243.59.12","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"domain_registered":"2024-09-01","domain_rank":31106,"first_seen":"2025-06-27T17:12:36.133274Z","last_seen":"2025-08-23T10:19:23.785243Z","alert_count":4,"request_count":4,"received_data":1996,"sent_data":2211,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.19.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"preferencenail.com","ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-07-01","domain_rank":20606,"first_seen":"2025-07-08T12:55:47.271261Z","last_seen":"2025-08-19T21:48:17.555582Z","alert_count":0,"request_count":2,"received_data":171926,"sent_data":820,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"professionaltrafficmonitor.com","ip":{"addr":"18.157.201.33","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2025-01-23","domain_rank":16376,"first_seen":"2025-01-25T08:56:07.448138Z","last_seen":"2025-08-22T14:31:34.988902Z","alert_count":0,"request_count":2,"received_data":842,"sent_data":894,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.show-sb.com","ip":{"addr":"172.67.170.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-08-20","domain_rank":187612,"first_seen":"2024-08-31T03:46:04Z","last_seen":"2025-08-23T06:25:22.651006Z","alert_count":0,"request_count":1,"received_data":3729,"sent_data":490,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-08-20T15:14:21.137874Z","alert_count":0,"request_count":1,"received_data":17441,"sent_data":430,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"46a6fef91632b94d14252fe324c1585f","sha1":"387cebbd261b8fe947fe9805875300f2ceeb5cfd","sha256":"36d0c771f8bf310d740cb4d0ca144354c45df284e72361660448708d72f175d5","sha512":"a3aaa1b5ab1113a12793bd1085332eb257416aaa9c4a690525838b91453a281580a979bfb856b3c429c2d4243c3ce02bd318a4b7048124eef96912179836d0fd","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRL:nPncLBSUBULGVTfGpucE5fox","tlshash":"528395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","size":85386,"data":"","first_seen":"2025-07-08T10:38:39.799377Z","last_seen":"2025-11-18T17:01:51.014373Z","times_seen":15230,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"46a6fef91632b94d14252fe324c1585f","sha1":"387cebbd261b8fe947fe9805875300f2ceeb5cfd","sha256":"36d0c771f8bf310d740cb4d0ca144354c45df284e72361660448708d72f175d5","sha512":"a3aaa1b5ab1113a12793bd1085332eb257416aaa9c4a690525838b91453a281580a979bfb856b3c429c2d4243c3ce02bd318a4b7048124eef96912179836d0fd","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRL:nPncLBSUBULGVTfGpucE5fox","tlshash":"528395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","size":85386,"data":"","first_seen":"2025-07-08T10:38:39.799377Z","last_seen":"2025-11-18T17:01:51.014373Z","times_seen":15230,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/chat/mob/ssp/1/js/jquery.min.js","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"561acb3e541133bbdd2c0c19f8ee35a1","sha1":"ffd1353cf3f77d25f801c84d8208613eb0d3d548","sha256":"9fde6da568db31801e29243a903bf24f342256b41e3c01e7d018ff7c566ce7fc","sha512":"8a647ed6f56b4da93c7a034609060991cc8080350f057f4f2af2c369f18af066db3b4e77701fc017027fd774264a6d0f84927239d7d2f693edc6f7d6a0917be3","ssdeep":"1536:YjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h5cApwEjOPrBeU6QLiTFbc0QlQvakV:YYh8eip3hXuf6IidlrvakdtQ47GKl","tlshash":"f993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","size":89492,"data":"","first_seen":"2023-03-07T01:04:00Z","last_seen":"2026-05-01T13:16:01.727162Z","times_seen":6600,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"a99ae2ebbdcbf70ae73a8f1b1fce94ed","sha1":"0d83d17032b5c253454a9e3edadbc16d84267658","sha256":"419faa4d213cb752f742e865a5eea41ca73440ae1dce2bfe9a54c36d7d65a23c","sha512":"f44a331d25e8450ee160017f5f4e343c83f54082c0cdf68a0151c31dd2dacf717ed1cda28b53317ac2323bc6db3fc724c9b26ae2da0ad49806eec97406e880f3","ssdeep":"","tlshash":"3af02de4b15452b1a35fc069964f364f1634c44ad20a010d6c38159724b36ba8df999f","size":564,"data":"","first_seen":"2025-08-25T11:21:15.390339Z","last_seen":"2025-08-25T11:21:15.390339Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.1377x.is/","fqdn":"www.1377x.is","domain":"1377x.is","tld":"is"},"ip":{"addr":"104.21.4.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4e425951d42828d695250e9ed66d5d90","sha1":"f23ab5d64f9e405cfaabb5af29e496c581cf7dcd","sha256":"b8d175df85cf376c2d17415b31fcc785f03a8f921cbaefbcff278bc1c2e7e206","sha512":"4b1aa76065f7dbbbcd565349f1929699fd22a323d25c902e91feb5150f9c4f58ac197484aa10d765388d3c6a1e06885440fd3b8d5c8c9d2fd2f7e1740af1772a","ssdeep":"","tlshash":"8ae0ab0a98e70a388cf53d441039da7930f878709aa3d02b605cc82cca39fc40c04aec","size":428,"data":"","first_seen":"2025-08-16T03:46:55.959043Z","last_seen":"2025-08-25T11:21:15.39224Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kennethlawfullyconveniences.com/69/cf/e3/69cfe3f61eb1212ad17512e51c527133.js","fqdn":"kennethlawfullyconveniences.com","domain":"kennethlawfullyconveniences.com","tld":"com"},"ip":{"addr":"192.243.61.227","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"introduction_type":"scriptElement","is_inline":false,"md5":"1f76975cf4e049ce9e8b5a63012a83e9","sha1":"e6f19aadccb9c675e00cc26ea9174b17187f58c0","sha256":"7c06cd3a25f13054f8917905f11c16cd8f530a66458ed13679b4934ded33d942","sha512":"a98a2cbb14b0fda813abb9652ce27d39f0c673333a9783d693c70614eb93bc43764f90689356953110e8f0b0ad6927ada17c932fb46aedc6d6144d595b209a37","ssdeep":"768:Y2bmYbmux2qw648+QhS8u+Jcj/XcdFjN4mOdY08kUbTehzbcepwPf:Y2bmKf4x5O+jvcidY0U3fX","tlshash":"9563c7483f51b27802e6b8fa712fa61af0265c0195d8e4d8f503f4deae66719f035f25","size":72628,"data":"","first_seen":"2025-08-25T11:21:15.380793Z","last_seen":"2025-08-25T11:21:15.380793Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kennethlawfullyconveniences.com/88/37/65/8837658487085b799326b984798a6ec9.js","fqdn":"kennethlawfullyconveniences.com","domain":"kennethlawfullyconveniences.com","tld":"com"},"ip":{"addr":"192.243.61.227","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"introduction_type":"scriptElement","is_inline":false,"md5":"96cd179052480079fcd372acf9d478cd","sha1":"7c1d37d7c7b0bb4a09fa120ff7935280980bfdf2","sha256":"723f748da95dcf16457a33cc09179c2d24c628f34eef310d6e26c3b43582a9af","sha512":"432d5de447bf5fe7fabfa04b3c352e42e92312f13088ddd9d4db707ecacd4358968cd1b3d0144b005e139d04b77a2fac7eab73460bae499edfe279c020b29310","ssdeep":"1536:dxIN1GSGVJiUsbaeBvat/xp1P2PNrdMCC2cevmiwB/BDMCIuu5Y:FjVJiUs7ahxp521rcuZwH2u3","tlshash":"0ba3a8487f90fcbe02566033663f951bf1aa0e415958c988d11afdb42a3c31bfa3da75","size":105898,"data":"","first_seen":"2025-08-25T11:21:15.359612Z","last_seen":"2025-08-25T11:21:15.359612Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.1377x.is/css/fonts/opensans-bold.woff","fqdn":"www.1377x.is","domain":"1377x.is","tld":"is"},"ip":{"addr":"104.21.4.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.1377x.is/","date":"2025-08-25T11:20:47.226Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1377x.is","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Jul 2025 00:31:50 GMT","end":"Thu, 02 Oct 2025 01:30:36 GMT"},"fingerprint":{"sha1":"5F:EA:95:09:E1:C4:74:F5:5A:A9:68:9E:F7:57:E3:EB:78:7B:10:FE","sha256":"A2:F9:AF:9C:78:49:CB:83:47:E1:6E:8C:88:10:BF:9C:94:A9:09:3B:95:FC:46:61:BC:BB:8F:85:74:2C:81:90"}}},"request":{"raw":"GET /css/fonts/opensans-bold.woff HTTP/1.1\r\nHost: www.1377x.is\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.1377x.is/css/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 11:20:47 GMT\r\ncontent-type: font/woff\r\ncontent-length: 22432\r\nserver: cloudflare\r\nlast-modified: Tue, 05 Mar 2024 04:39:21 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"65e6a1f9-57a0\"\r\naccept-ranges: bytes\r\nage: 4080\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2nua5IUD6ufJUTOXCGkwP5gaV2NN9B31Kwgs5vFXx%2BRK0XibkJ3d%2BPLuFkd9eCIMZZQuVepB%2B7YFqHZdF2pOnYXXc6ZcLmfY9lhwFA%3D%3D\"}]}\r\ncf-ray: 974ab3bf3ae3d86c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22432,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 22432, version 1.0","md5":"2e90d5152ce92858b62ba053c7b9d2cb","sha1":"8cf65f42a2a8c349ccd6ab63b6cbd17c96fd665c","sha256":"a0357cb694b5284870c77c0dbcaf33f238004800419288afde313317b0dbd0b7","sha512":"5f452b4ab3e3ff3a8225d092fbf7e147595b398742dec5abce787e54cef471c0bc29044e0e00142cc09af7ea1e2f6fbf6da5d5a8b476c86b71594ad68d30858a","ssdeep":"384:UiXG5Jd1G0Fr+9DY1NpS1pYQDO6kd5Tnd2rL6vhMB4liNPwFxDwlH:yJGGRNU/vDtU5TnG65T2ohwlH","tlshash":"68a2e068eb42fa27edb889773bb051fac154d928b570fbe3877a30d8108474fc460865","first_seen":"2023-04-06T15:25:07Z","last_seen":"2026-05-01T14:58:48.527794Z","times_seen":9768,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kennethlawfullyconveniences.com/ren.gif?sid=H4sIAAAAAAAC_1RST2gkxReuTvZ3-OFB3RUFQZyDBwUz6b8zGfewGNcswWwSdiM5iIfqqupJmZ6utqp7ejKnYED2OAuCepHON8lm1SCKN0GQibeAkBGEOWwue_Xkwh5FZjIQfdDvfV1fVfG979Wn-_k58ZDT0fpt1ZVxTOeDql15fVMmXBWmsrpRceyqfb2yKZOaf73SGSfdfsvx_Kr9RuWWYNtq3rUd23Zsp7IktYhUZ37CQqbHDafasKu-W3UCHx3933-TWzDUAm-fk6uQfPjs4-gDSDZA0vr-pjDbmUrffLeVxzRTGm1-9H6ynagiQesSRtpClBxNd0OZISFfzEAlR9MOoNoH4w4QyiGZefERwuRoKhNh-_BCaRhDJAj5MyjaA4h4AEkHYGoPkp8RgHGsriFpPVhVuqA7Fywds0Ny5ekTyGJIrjx6AUnru8VYdip3VZxnUiUGnaiE7AwgmwOk-Qmy7gxkcQKWfQLJfyPzT1eQtA7WTKwg-eg1n_lCBD6do07UmPOZ78-FtF6fqwULTlATImRufWKRjAagxkI-_qSFPLKQpxZafFTx7QWfOdSrRQ3O6rZPfZ-L0G4suLZNG6yOnI2195ClPbC4B6Z3kepdbMv7Z8FV6PwXmK0ShlswGUGblygEQWEICkpQSIIiIyja5SGPjWvKBzw2eehMqzutXtlXWXOfHqqsKRICqnvQvDyQ6cdmDyyb7Xcjw_tqnGiYlX0a8nI_PSfPj521On_OYluMKrUGi4QX1RwROq7jUu7UA8cVgcMCt-54HowsIc3MxI-uHJLF_7-KVA7J_z7_GyE9gYlPwORV0PwV0KIE3SrRTR46Xr3eqWZtcFUiza4g27H243Py8mSuH26cQbDTG0-8SYDpEqku8ZH8laAZ3-vfUQU5uKMKQ35YSzPZkl06nvndjGZi9pv3xE6hNF--aXpfv83GxBgebwiTrdCEy6RpyLeLknOhl5Rmgvy8bDZFuJ6brcVcJ3m6sv7O0nIr1cIYqZIBqBwS6y8NJofk2pcvTd6z_8djSD2Azku08lMyDbB0Fya91G4UgY4v-TC1UORlX7vh5WIsh-T2Zw8Ri9MbX_147adREYCGJYz418FL3Nd0fAOV5b65h6a2QLM9JK0SbV2iHZegcQ8mn-1nqT698ftUShhb_TDW1kEY6_j-hc1GjiqBG3q1hYWaiGo88rjnerwR2KLh00bNb_gBMjPcOr713D8BAAD__-HHWDuxBAAA","fqdn":"kennethlawfullyconveniences.com","domain":"kennethlawfullyconveniences.com","tld":"com"},"ip":{"addr":"192.243.61.227","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.1377x.is/","date":"2025-08-25T11:20:48.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kennethlawfullyconveniences.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 Aug 2025 08:56:54 GMT","end":"Wed, 19 Nov 2025 08:56:53 GMT"},"fingerprint":{"sha1":"BF:FF:F5:7D:28:8E:6F:E0:B7:8D:CE:E2:08:84:8E:8B:91:83:8B:EE","sha256":"DA:60:A5:7E:C8:62:6A:F9:9F:A5:0B:1B:D0:0E:DE:4C:05:E3:D4:67:6C:CA:12:8E:5D:1E:E1:39:FD:5C:39:9C"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_1RST2gkxReuTvZ3-OFB3RUFQZyDBwUz6b8zGfewGNcswWwSdiM5iIfqqupJmZ6utqp7ejKnYED2OAuCepHON8lm1SCKN0GQibeAkBGEOWwue_Xkwh5FZjIQfdDvfV1fVfG979Wn-_k58ZDT0fpt1ZVxTOeDql15fVMmXBWmsrpRceyqfb2yKZOaf73SGSfdfsvx_Kr9RuWWYNtq3rUd23Zsp7IktYhUZ37CQqbHDafasKu-W3UCHx3933-TWzDUAm-fk6uQfPjs4-gDSDZA0vr-pjDbmUrffLeVxzRTGm1-9H6ynagiQesSRtpClBxNd0OZISFfzEAlR9MOoNoH4w4QyiGZefERwuRoKhNh-_BCaRhDJAj5MyjaA4h4AEkHYGoPkp8RgHGsriFpPVhVuqA7Fywds0Ny5ekTyGJIrjx6AUnru8VYdip3VZxnUiUGnaiE7AwgmwOk-Qmy7gxkcQKWfQLJfyPzT1eQtA7WTKwg-eg1n_lCBD6do07UmPOZ78-FtF6fqwULTlATImRufWKRjAagxkI-_qSFPLKQpxZafFTx7QWfOdSrRQ3O6rZPfZ-L0G4suLZNG6yOnI2195ClPbC4B6Z3kepdbMv7Z8FV6PwXmK0ShlswGUGblygEQWEICkpQSIIiIyja5SGPjWvKBzw2eehMqzutXtlXWXOfHqqsKRICqnvQvDyQ6cdmDyyb7Xcjw_tqnGiYlX0a8nI_PSfPj521On_OYluMKrUGi4QX1RwROq7jUu7UA8cVgcMCt-54HowsIc3MxI-uHJLF_7-KVA7J_z7_GyE9gYlPwORV0PwV0KIE3SrRTR46Xr3eqWZtcFUiza4g27H243Py8mSuH26cQbDTG0-8SYDpEqku8ZH8laAZ3-vfUQU5uKMKQ35YSzPZkl06nvndjGZi9pv3xE6hNF--aXpfv83GxBgebwiTrdCEy6RpyLeLknOhl5Rmgvy8bDZFuJ6brcVcJ3m6sv7O0nIr1cIYqZIBqBwS6y8NJofk2pcvTd6z_8djSD2Azku08lMyDbB0Fya91G4UgY4v-TC1UORlX7vh5WIsh-T2Zw8Ri9MbX_147adREYCGJYz418FL3Nd0fAOV5b65h6a2QLM9JK0SbV2iHZegcQ8mn-1nqT698ftUShhb_TDW1kEY6_j-hc1GjiqBG3q1hYWaiGo88rjnerwR2KLh00bNb_gBMjPcOr713D8BAAD__-HHWDuxBAAA HTTP/1.1\r\nHost: kennethlawfullyconveniences.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.1377x.is/\r\nCookie: uid_id2=4c4ee54a-a1f9-4c44-ba77-658156eebc27:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl24701955=1; slec69cfe3f61eb1212ad17512e51c527133=[6116561]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Mon, 25 Aug 2025 11:20:48 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Credentials: true\r\nVary: Origin\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nHost: kennethlawfullyconveniences.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 7c2c8bb2c78cbe49361f292925ff366a\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-01T15:39:35.508929Z","times_seen":14478573,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kennethlawfullyconveniences.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.1377x.is/","fqdn":"www.1377x.is","domain":"1377x.is","tld":"is"},"ip":{"addr":"104.21.4.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-25T11:20:46.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1377x.is","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Jul 2025 00:31:50 GMT","end":"Thu, 02 Oct 2025 01:30:36 GMT"},"fingerprint":{"sha1":"5F:EA:95:09:E1:C4:74:F5:5A:A9:68:9E:F7:57:E3:EB:78:7B:10:FE","sha256":"A2:F9:AF:9C:78:49:CB:83:47:E1:6E:8C:88:10:BF:9C:94:A9:09:3B:95:FC:46:61:BC:BB:8F:85:74:2C:81:90"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.1377x.is\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 11:20:46 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nlast-modified: Mon, 25 Aug 2025 02:36:13 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pC%2BHiZT0RgfafNNTIZlD3TsDSc7N%2BysKAEGGcGJxVinBYHnzSA%2Fi440ZL00O9Jl6wTXAqAoWZ3G9NMXb4y%2F1X2ZbfqjA2a5EDqN0%2Bg%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 974ab3ba7f0fd86c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"ShareThis","description":"ShareThis provides free engagement and growth tools (e.g., share buttons, follow buttons, and reaction buttons) for site owners.","website":"https://sharethis.com","common_platform_enumeration":"","icon":"ShareThis.png","categories":["Widgets"]}],"data":{"size":9176,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (302), with CRLF line terminators","md5":"3da8ba397ac917e6f25c38f360a9e66a","sha1":"fe9b4cfc6ca79de98fdf366c4a435b748230b36d","sha256":"70ac8e585dea2c9b29e4825db3f2393e43a30bb63d405bd2f9fd63696e90491f","sha512":"5e092d4c0712d2a2242236bebaed67bf671e65030ae3dc1e81443347da078db1fd2e0a1c14c8faccb7715db29675c4cca51e28803b7b4146cd6b4275a556c5f7","ssdeep":"192:Y445a3Xo/HhekoEw/IWmuHi86L4q5u78p/pSypQ4K7mI:Yb5ano/HhTFw/IWmuHi86L4q5u78p0yG","tlshash":"2f12132357c2682702bbd1d85a7ea36af59b910faa874cd2b0dd02df5fb2dd48c07049","first_seen":"2025-08-25T11:21:15.349445Z","last_seen":"2025-08-25T11:21:15.349445Z","times_seen":1,"resource_available":false,"data":null}},"time_used":485,"timings":{"blocked":55,"dns":22,"connect":8,"send":0,"wait":375,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.1377x.is/css/jquery-ui.css","fqdn":"www.1377x.is","domain":"1377x.is","tld":"is"},"ip":{"addr":"104.21.4.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.1377x.is/","date":"2025-08-25T11:20:47.122Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1377x.is","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Jul 2025 00:31:50 GMT","end":"Thu, 02 Oct 2025 01:30:36 GMT"},"fingerprint":{"sha1":"5F:EA:95:09:E1:C4:74:F5:5A:A9:68:9E:F7:57:E3:EB:78:7B:10:FE","sha256":"A2:F9:AF:9C:78:49:CB:83:47:E1:6E:8C:88:10:BF:9C:94:A9:09:3B:95:FC:46:61:BC:BB:8F:85:74:2C:81:90"}}},"request":{"raw":"GET /css/jquery-ui.css HTTP/1.1\r\nHost: www.1377x.is\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.1377x.is/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 11:20:47 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Tue, 05 Mar 2024 04:38:52 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: \"65e6a1dc-6c7e\"\r\nexpires: Mon, 25 Aug 2025 12:32:50 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 38876\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sFCbxFg3ql1L0T2zc%2FviYWp4DZ5bjJ9i8ojgA9UC91FxJx9K3jpEMNlNvl1MpndMm6ORjDu64zY38PQUfd4gEAREaP6PIDJQmzCOcw%3D%3D\"}]}\r\ncf-ray: 974ab3be8924d86c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27774,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (27774), with no line terminators","md5":"dd726950f54a13d35212a130f9220ea2","sha1":"300c6f24ba35fe7b0435f4e9cc2c578e90f6d955","sha256":"f195fa7f513817ac06094b158b93126bac82738021babd5e95b2f10a2367615b","sha512":"88d53a4626f73c34719886a6ac8fc5e5440ac7775b5dc422c2ca9dc14fe649aef475818a82883c9a34365cbdc69b2155fc2a7e89419c43410f0abc8e167ac6cc","ssdeep":"384:hYFLzBWz3V4D1ekeP07E7uxeFFRt+5eeQg0U:SFLzBWz3VKeixe7eQfU","tlshash":"2ac23330a582281dff23db2260e11ff5533a8043dd666ebdf05a35595feb8e4846b872","first_seen":"2023-04-16T02:54:31Z","last_seen":"2026-01-21T08:43:35.535761Z","times_seen":28,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.1377x.is/images/body-bg.jpg","fqdn":"www.1377x.is","domain":"1377x.is","tld":"is"},"ip":{"addr":"104.21.4.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.1377x.is/","date":"2025-08-25T11:20:47.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1377x.is","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Jul 2025 00:31:50 GMT","end":"Thu, 02 Oct 2025 01:30:36 GMT"},"fingerprint":{"sha1":"5F:EA:95:09:E1:C4:74:F5:5A:A9:68:9E:F7:57:E3:EB:78:7B:10:FE","sha256":"A2:F9:AF:9C:78:49:CB:83:47:E1:6E:8C:88:10:BF:9C:94:A9:09:3B:95:FC:46:61:BC:BB:8F:85:74:2C:81:90"}}},"request":{"raw":"GET /images/body-bg.jpg HTTP/1.1\r\nHost: www.1377x.is\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.1377x.is/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 11:20:47 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 2454\r\nserver: cloudflare\r\nlast-modified: Tue, 05 Mar 2024 04:38:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"65e6a1e0-996\"\r\nexpires: Sun, 21 Sep 2025 04:09:43 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 285063\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7AcCL%2FTz%2F1vKY4Ugywy0jVQXb6gKM0uL8%2FHyUZw39tGPjGW8lSCTNskz2GyJ4H75mUxvz5spceoyHsa5BGa1LZCZztOKGmLhDqzILA%3D%3D\"}]}\r\ncf-ray: 974ab3befa56d86c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2454,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 100x100, components 3","md5":"57176455b267a90c419d442f311cab4a","sha1":"8ce7305a8e73bf2cea887b1b011c349e41b426d3","sha256":"44411fdbd6a244c923866126c233c854cae07718591506d315a86e34e159f20b","sha512":"caf340e92aad56d8d1ce1f78d85232f3e3b77830c97ef00bb9f6f16eb8a870dd78938704da543e81ade576222da5f42ffbdb55b817444e3d58dda46e234f891a","ssdeep":"","tlshash":"72513b887bb0fc91e8c8b6b221e7502756125cc05ec89b6e9cc9ed5fdc5c3b0251115f","first_seen":"2023-05-02T22:51:04Z","last_seen":"2026-04-30T18:41:30.369869Z","times_seen":493,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.1377x.is/images/main-bg.png","fqdn":"www.1377x.is","domain":"1377x.is","tld":"is"},"ip":{"addr":"104.21.4.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.1377x.is/","date":"2025-08-25T11:20:47.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1377x.is","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Jul 2025 00:31:50 GMT","end":"Thu, 02 Oct 2025 01:30:36 GMT"},"fingerprint":{"sha1":"5F:EA:95:09:E1:C4:74:F5:5A:A9:68:9E:F7:57:E3:EB:78:7B:10:FE","sha256":"A2:F9:AF:9C:78:49:CB:83:47:E1:6E:8C:88:10:BF:9C:94:A9:09:3B:95:FC:46:61:BC:BB:8F:85:74:2C:81:90"}}},"request":{"raw":"GET /images/main-bg.png HTTP/1.1\r\nHost: www.1377x.is\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.1377x.is/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 11:20:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 129988\r\nserver: cloudflare\r\nlast-modified: Tue, 05 Mar 2024 04:38:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"65e6a1e1-1fbc4\"\r\nexpires: Sat, 06 Sep 2025 06:07:14 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 1574012\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mK6ktOBPuE4n2ymjKSywQGva9%2B%2FMuNuaAHhOqnT33qfgcxaRjlADZGRvnuHKew%2Fy3NxIWD367hXCbcySYJ272k3Y6p8ohu90%2BlYn7g%3D%3D\"}]}\r\ncf-ray: 974ab3befa6dd86c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":129988,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 935 x 788, 8-bit/color RGBA, non-interlaced","md5":"8fc059a7e1758ad0c0e17be4b0575b93","sha1":"df3d910563829c3b2e6fb0767038f75af4d4fcbd","sha256":"6be2d61547095ffeb30a1fd03fd7d6aba9009edc719144812c5610bd2e27fb97","sha512":"9d08e40a15305b3a60214a0c2faaec5612d3f7506e7a08bf786600ae8aeae8b71c511666babd95d63e16aa4616b310dbd8cffe7a115f216a5e5755afa949b5f0","ssdeep":"3072:UcPxliBBSljhZKPR9hzb8sY3EDnBYvSoFhVq4Qq3gO6ig:UdyJ7KP/xAPUBYvSoF5QqQvh","tlshash":"1bc31201eff815265de4539eb9f480cfba611562957fb0bb970b4c9824b0c1e2f3296b","first_seen":"2023-05-03T12:24:32Z","last_seen":"2026-04-30T18:41:30.373809Z","times_seen":388,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/chat/mob/ssp/1/js/jquery.min.js","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.1377x.is/","date":"2025-08-25T11:20:49.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Jul 2025 14:01:22 GMT","end":"Mon, 29 Sep 2025 14:59:36 GMT"},"fingerprint":{"sha1":"CD:76:E0:2A:28:09:08:24:2D:4C:A1:14:B2:AE:6C:39:A4:CC:2F:6B","sha256":"8B:98:84:C0:8D:47:7C:1B:A7:26:4B:E4:9E:6E:FD:8E:E1:6D:6E:41:1D:E7:91:B7:70:A3:C1:D0:C0:85:6B:31"}}},"request":{"raw":"GET /sb/chat/mob/ssp/1/js/jquery.min.js HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 11:20:49 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sat, 07 May 2022 05:43:05 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EzJpeLGGjesp4sim6ow%2FroneSQpaS8d6hKDpBUb0QUIPrsgfRPVuX%2BpTv3UzequQw7hyk7FBaK6CGI37wLtDAlL5xbsr12ZlmfVbkOXhSmg%3D\"}]}\r\nage: 1477441\r\ncf-cache-status: HIT\r\netag: W/\"627606e9-15d94\"\r\ncontent-encoding: br\r\ncf-ray: 974ab3cc1cdf5571-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89492,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"561acb3e541133bbdd2c0c19f8ee35a1","sha1":"ffd1353cf3f77d25f801c84d8208613eb0d3d548","sha256":"9fde6da568db31801e29243a903bf24f342256b41e3c01e7d018ff7c566ce7fc","sha512":"8a647ed6f56b4da93c7a034609060991cc8080350f057f4f2af2c369f18af066db3b4e77701fc017027fd774264a6d0f84927239d7d2f693edc6f7d6a0917be3","ssdeep":"1536:YjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h5cApwEjOPrBeU6QLiTFbc0QlQvakV:YYh8eip3hXuf6IidlrvakdtQ47GKl","tlshash":"f993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","first_seen":"2023-03-07T01:04:00Z","last_seen":"2026-05-01T13:16:01.727162Z","times_seen":6600,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rashcolonizeexpand.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fchat%2Fmob%2Fssp%2F1%2Fcss%2Fstyle.css\u0026l=4617\u0026fd=101","fqdn":"rashcolonizeexpand.com","domain":"rashcolonizeexpand.com","tld":"com"},"ip":{"addr":"192.243.59.12","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.1377x.is/","date":"2025-08-25T11:20:49.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rashcolonizeexpand.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 22:10:41 GMT","end":"Fri, 26 Sep 2025 22:10:40 GMT"},"fingerprint":{"sha1":"C7:75:50:5C:D3:7C:BF:A1:34:3E:61:33:FC:D6:81:21:2E:31:1D:92","sha256":"CB:A9:18:8B:DD:56:71:B4:C1:61:A7:9F:5C:50:7F:22:BB:83:72:BC:0F:B3:14:19:C4:E9:F9:59:6A:0F:95:EC"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fchat%2Fmob%2Fssp%2F1%2Fcss%2Fstyle.css\u0026l=4617\u0026fd=101 HTTP/1.1\r\nHost: rashcolonizeexpand.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.1377x.is/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.19.5\r\nDate: Mon, 25 Aug 2025 11:20:49 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: rashcolonizeexpand.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.19.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-01T15:39:35.508929Z","times_seen":14478573,"resource_available":true,"data":null}},"time_used":701,"timings":{"blocked":282,"dns":1,"connect":91,"send":0,"wait":131,"receive":0,"ssl":193},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"rashcolonizeexpand.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kennethlawfullyconveniences.com/88/37/65/8837658487085b799326b984798a6ec9.js","fqdn":"kennethlawfullyconveniences.com","domain":"kennethlawfullyconveniences.com","tld":"com"},"ip":{"addr":"192.243.61.227","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.1377x.is/","date":"2025-08-25T11:20:47.134Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kennethlawfullyconveniences.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 Aug 2025 08:56:54 GMT","end":"Wed, 19 Nov 2025 08:56:53 GMT"},"fingerprint":{"sha1":"BF:FF:F5:7D:28:8E:6F:E0:B7:8D:CE:E2:08:84:8E:8B:91:83:8B:EE","sha256":"DA:60:A5:7E:C8:62:6A:F9:9F:A5:0B:1B:D0:0E:DE:4C:05:E3:D4:67:6C:CA:12:8E:5D:1E:E1:39:FD:5C:39:9C"}}},"request":{"raw":"GET /88/37/65/8837658487085b799326b984798a6ec9.js HTTP/1.1\r\nHost: kennethlawfullyconveniences.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.1377x.is/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Mon, 25 Aug 2025 11:20:47 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 32838\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nHost: kennethlawfullyconveniences.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 0847134aad43b6fbd5260e764373e9d9\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":105898,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"96cd179052480079fcd372acf9d478cd","sha1":"7c1d37d7c7b0bb4a09fa120ff7935280980bfdf2","sha256":"723f748da95dcf16457a33cc09179c2d24c628f34eef310d6e26c3b43582a9af","sha512":"432d5de447bf5fe7fabfa04b3c352e42e92312f13088ddd9d4db707ecacd4358968cd1b3d0144b005e139d04b77a2fac7eab73460bae499edfe279c020b29310","ssdeep":"1536:dxIN1GSGVJiUsbaeBvat/xp1P2PNrdMCC2cevmiwB/BDMCIuu5Y:FjVJiUs7ahxp521rcuZwH2u3","tlshash":"0ba3a8487f90fcbe02566033663f951bf1aa0e415958c988d11afdb42a3c31bfa3da75","first_seen":"2025-08-25T11:21:15.359612Z","last_seen":"2025-08-25T11:21:15.359612Z","times_seen":1,"resource_available":true,"data":null}},"time_used":787,"timings":{"blocked":293,"dns":14,"connect":95,"send":0,"wait":97,"receive":91,"ssl":185},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kennethlawfullyconveniences.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.1377x.is/css/fonts/Flaticon.woff","fqdn":"www.1377x.is","domain":"1377x.is","tld":"is"},"ip":{"addr":"104.21.4.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.1377x.is/","date":"2025-08-25T11:20:47.206Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1377x.is","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Jul 2025 00:31:50 GMT","end":"Thu, 02 Oct 2025 01:30:36 GMT"},"fingerprint":{"sha1":"5F:EA:95:09:E1:C4:74:F5:5A:A9:68:9E:F7:57:E3:EB:78:7B:10:FE","sha256":"A2:F9:AF:9C:78:49:CB:83:47:E1:6E:8C:88:10:BF:9C:94:A9:09:3B:95:FC:46:61:BC:BB:8F:85:74:2C:81:90"}}},"request":{"raw":"GET /css/fonts/Flaticon.woff HTTP/1.1\r\nHost: www.1377x.is\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.1377x.is/css/icons.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 11:20:47 GMT\r\ncontent-type: font/woff\r\ncontent-length: 27404\r\nserver: cloudflare\r\nlast-modified: Tue, 05 Mar 2024 04:39:21 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"65e6a1f9-6b0c\"\r\naccept-ranges: bytes\r\nage: 4080\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZVGze1N%2B3IVGM9tt%2BC8Bjdc27629UODhZb09pj7mUYtr4%2FReItGwP4uEL6h2Qjpwwtz%2BWfqYUa1IVLc3CzGyQEilGn4sCPRkhXTyTg%3D%3D\"}]}\r\ncf-ray: 974ab3bf1aa9d86c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27404,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 27404, version 0.0","md5":"1dbab8d47aa2e11c55216ab3286d6f69","sha1":"c7a7f3ddf37063ac02273eb4fe7ebc98e9cf97bf","sha256":"ef35a8d776774a5fba83f188738af52b85e278c4bf7c5695700161febdc36b05","sha512":"2883bd3468780d7e5a0b2c444b4aba51cfeb84adcd3a0816e0b061b459d2e6c15cd5dbaa039ef09accb224600ec423818033aec34c74172cb4027e23b9f80ae4","ssdeep":"768:iSReE3iP8wJG60uxxB1ZcFivRGTTKKq4U:io7VwUu5KivRGTTKp4U","tlshash":"b2c2e02a66631da9f433ae297dc6825e4f32132700294d7f05db3bb9481e2fbd772111","first_seen":"2023-04-07T15:29:17Z","last_seen":"2026-04-30T18:41:30.353607Z","times_seen":475,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":22,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.1377x.is/css/fonts/opensans-light.woff","fqdn":"www.1377x.is","domain":"1377x.is","tld":"is"},"ip":{"addr":"104.21.4.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.1377x.is/","date":"2025-08-25T11:20:47.232Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1377x.is","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Jul 2025 00:31:50 GMT","end":"Thu, 02 Oct 2025 01:30:36 GMT"},"fingerprint":{"sha1":"5F:EA:95:09:E1:C4:74:F5:5A:A9:68:9E:F7:57:E3:EB:78:7B:10:FE","sha256":"A2:F9:AF:9C:78:49:CB:83:47:E1:6E:8C:88:10:BF:9C:94:A9:09:3B:95:FC:46:61:BC:BB:8F:85:74:2C:81:90"}}},"request":{"raw":"GET /css/fonts/opensans-light.woff HTTP/1.1\r\nHost: www.1377x.is\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.1377x.is/css/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 11:20:47 GMT\r\ncontent-type: font/woff\r\ncontent-length: 22248\r\nserver: cloudflare\r\nlast-modified: Tue, 05 Mar 2024 04:39:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"65e6a1fa-56e8\"\r\naccept-ranges: bytes\r\nage: 4080\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YWEz103bAfG899uQ386aGPHEPuUfgqbG3AbMwDwV2IHF1QkZiMOdI7vMd3MkKRxSkcCZQM7TpWm7z0ENs%2F8HyBeFPlfdHeav9D29dg%3D%3D\"}]}\r\ncf-ray: 974ab3bf3ae8d86c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22248,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 22248, version 1.0","md5":"45b47f3e9c7d74b80f5c6e0a3c513b23","sha1":"523f9403d934ba017bfe924cdc40f1bb0e5d97e2","sha256":"a1cb81c9f07f1f399db66ec188c02a1c74bc382df9a8550ab8091aac93dff8a2","sha512":"ff5e16bb510106306fa98474149227685f502d730f95541c257f72eb33195cf3f45a91bdd5a599fb6720f434ce88b01f598ae1b73e025c6c33f49832268f1ed6","ssdeep":"384:/MXxTd1G0FXt5s72y0IZLi0krvP71OQG7wjc3ZIZgHy+5Z7iLYnJe3veDiIIbHPP:oGGXthIZijZOQP43ZIZw/iLSe8YH9JX","tlshash":"4fa2e1007d1f3709e2aea75043073ba982567941e49c16ebcffb1577d0ea32de960583","first_seen":"2023-04-13T20:56:31Z","last_seen":"2026-05-01T16:06:32.679786Z","times_seen":627,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rashcolonizeexpand.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.show-sb.com%2Fsb%2Fau%2F2f%2F33%2F17%2F2f3317da28d2a6ed09610d2d267aa136%2F1648542458.html\u0026l=2977\u0026fd=482","fqdn":"rashcolonizeexpand.com","domain":"rashcolonizeexpand.com","tld":"com"},"ip":{"addr":"192.243.59.20","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.1377x.is/","date":"2025-08-25T11:20:49.125Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rashcolonizeexpand.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 22:10:41 GMT","end":"Fri, 26 Sep 2025 22:10:40 GMT"},"fingerprint":{"sha1":"C7:75:50:5C:D3:7C:BF:A1:34:3E:61:33:FC:D6:81:21:2E:31:1D:92","sha256":"CB:A9:18:8B:DD:56:71:B4:C1:61:A7:9F:5C:50:7F:22:BB:83:72:BC:0F:B3:14:19:C4:E9:F9:59:6A:0F:95:EC"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.show-sb.com%2Fsb%2Fau%2F2f%2F33%2F17%2F2f3317da28d2a6ed09610d2d267aa136%2F1648542458.html\u0026l=2977\u0026fd=482 HTTP/1.1\r\nHost: rashcolonizeexpand.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.1377x.is/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.19.5\r\nDate: Mon, 25 Aug 2025 11:20:49 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: rashcolonizeexpand.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.19.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-01T15:39:35.508929Z","times_seen":14478573,"resource_available":true,"data":null}},"time_used":721,"timings":{"blocked":312,"dns":27,"connect":93,"send":0,"wait":95,"receive":1,"ssl":190},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"rashcolonizeexpand.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/chat/mob/ssp/1/css/animate.css","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.1377x.is/","date":"2025-08-25T11:20:49.136Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Jul 2025 14:01:22 GMT","end":"Mon, 29 Sep 2025 14:59:36 GMT"},"fingerprint":{"sha1":"CD:76:E0:2A:28:09:08:24:2D:4C:A1:14:B2:AE:6C:39:A4:CC:2F:6B","sha256":"8B:98:84:C0:8D:47:7C:1B:A7:26:4B:E4:9E:6E:FD:8E:E1:6D:6E:41:1D:E7:91:B7:70:A3:C1:D0:C0:85:6B:31"}}},"request":{"raw":"GET /sb/chat/mob/ssp/1/css/animate.css HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.1377x.is\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.1377x.is/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 11:20:49 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Sat, 07 May 2022 03:21:31 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6275e5bb-135d1\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: gzip\r\nage: 777325\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Vq%2BB7Dsrux3RFWbkgVAK4SAT1LTssNeXF4ivXvwNuMxMXosbtQyBNJvfzDhi4eulOjCBd6ZAjKxOQ1MVHQ421o6oPcht5BptZNaLaPA7tvw%3D\"}]}\r\ncf-ray: 974ab3cb9bc15571-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":79313,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"fc638645a938f69e69360c75335ffd1a","sha1":"143132fb8361c3ad0acf88cb70bf0b07c0ecc2d4","sha256":"7ef76aab275d0221c68602d18f81b4285b280756f0f71d535ed8b5b889bc2f90","sha512":"53aa35f68eede2f65b272821573513db8d2505a051c8af7fbf2350eee39d0103b8536740f5c0815dd4004bd82f7493276ad362f6f87715e281cbb1dd6297fa34","ssdeep":"384:ZNFu8uVWgnu5uLlFlH/O/Qu7u/sjzbg/jxXlIPfL4jKgZQMkL0Vvaj7Z:ZNFu8uEgnu5uBu7uhKgZQMkL0Vvaj7Z","tlshash":"27731fad2991148456638a1d83df8e68673ce573181a9cef73c2488bcf8bf9c67c9147","first_seen":"2023-04-05T09:47:15Z","last_seen":"2026-01-17T18:50:06.222826Z","times_seen":1884,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":72,"dns":34,"connect":8,"send":0,"wait":18,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.1377x.is/css/style.css","fqdn":"www.1377x.is","domain":"1377x.is","tld":"is"},"ip":{"addr":"104.21.4.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.1377x.is/","date":"2025-08-25T11:20:47.127Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1377x.is","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Jul 2025 00:31:50 GMT","end":"Thu, 02 Oct 2025 01:30:36 GMT"},"fingerprint":{"sha1":"5F:EA:95:09:E1:C4:74:F5:5A:A9:68:9E:F7:57:E3:EB:78:7B:10:FE","sha256":"A2:F9:AF:9C:78:49:CB:83:47:E1:6E:8C:88:10:BF:9C:94:A9:09:3B:95:FC:46:61:BC:BB:8F:85:74:2C:81:90"}}},"request":{"raw":"GET /css/style.css HTTP/1.1\r\nHost: www.1377x.is\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.1377x.is/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 11:20:47 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Tue, 05 Mar 2024 04:38:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: \"65e6a1dd-1dd36\"\r\nexpires: Mon, 25 Aug 2025 14:49:04 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 30702\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Db9dsWbHL9cr7%2FfHn5ws%2BuifOze5LqAFOzqQBqqb6U2So%2BdKxYff66JIjytXSy9ZGSt1%2BwUjgqwDD7p5k2cKYhQWajfa7k4DIrflIA%3D%3D\"}]}\r\ncf-ray: 974ab3be8931d86c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":122166,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"37b55fad8be7af59d25bee765d4eae21","sha1":"23229bcea62d849e9c53c6114211c92baabf2217","sha256":"9c46f5b18009bd6ff597acba5376fbef95d1c5aaa4c610e5ce49f517ec923ef6","sha512":"a830ce9b3134d5a62b4075139a77ee372d65ac70ca75ce631701f4c381330096a124649239f7b418df49920021a8ae11a0fecc838257500d2c962c9a2a0f3ba3","ssdeep":"768:J2M5z7MZSohAZC9VFtdsGSum1qTxbCbTk/33LZrCPx91Aj7nRCfD8pWksMOFzM55:1odWno/rBs+Qu5FdjE4N","tlshash":"b5c3c661aa98300e717bc22bf4d6bae330369013e4335ffaf551b570cd4b5a9672274a","first_seen":"2023-09-19T19:06:15Z","last_seen":"2026-01-21T08:43:35.539729Z","times_seen":15,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.1377x.is/images/logo.svg","fqdn":"www.1377x.is","domain":"1377x.is","tld":"is"},"ip":{"addr":"104.21.4.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.1377x.is/","date":"2025-08-25T11:20:47.132Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1377x.is","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Jul 2025 00:31:50 GMT","end":"Thu, 02 Oct 2025 01:30:36 GMT"},"fingerprint":{"sha1":"5F:EA:95:09:E1:C4:74:F5:5A:A9:68:9E:F7:57:E3:EB:78:7B:10:FE","sha256":"A2:F9:AF:9C:78:49:CB:83:47:E1:6E:8C:88:10:BF:9C:94:A9:09:3B:95:FC:46:61:BC:BB:8F:85:74:2C:81:90"}}},"request":{"raw":"GET /images/logo.svg HTTP/1.1\r\nHost: www.1377x.is\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.1377x.is/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 11:20:47 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 05 Mar 2024 04:38:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I3zXZ%2FAfmiJWgxbVEcXXolWq18ufmFibhrpTLbmWZRF0gJSRzEt5c9ZHCXo9ZKjFKm0WTyg%2B%2BGWKpKejZpQnFRxr59RYQXq2aSVPlQ%3D%3D\"}]}\r\nage: 2206\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"65e6a1e1-f94\"\r\ncontent-encoding: br\r\ncf-ray: 974ab3be893ed86c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3988,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4c0fa201642007f3e76abdda20900070","sha1":"798caabbbc90a5e23970312a14cfd1d9ffb23521","sha256":"c15260e312333f246afb6421f825168bc850caca363e53dce0c2e1f308918b41","sha512":"82feb65ba92cd6460ebc2d64a41ecd421038fe6140f27ae69b265194ed8d4e81f2fd3a74e48abb583f216950608c615b1644feea5c57db2eefc8b7a22ab29774","ssdeep":"","tlshash":"3981878e2339c7e4b5d529b8de383ac73b682499a573c1e0d3577d47a8436fa5608e30","first_seen":"2023-05-07T16:20:16Z","last_seen":"2026-04-10T22:31:56.499022Z","times_seen":201,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.1377x.is/","date":"2025-08-25T11:20:47.660Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"preferencenail.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 01 Jul 2025 15:11:38 GMT","end":"Mon, 29 Sep 2025 15:11:37 GMT"},"fingerprint":{"sha1":"F9:52:70:4B:81:A8:F8:39:E6:E7:96:8F:EA:FE:17:FD:96:C5:32:E3","sha256":"D8:C9:87:B5:89:5E:D4:F4:8D:FD:98:3C:31:39:42:67:D3:20:27:14:A9:AD:F2:AB:97:A4:48:0F:94:F0:FF:A2"}}},"request":{"raw":"GET /sfp.js HTTP/1.1\r\nHost: preferencenail.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.1377x.is/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Mon, 25 Aug 2025 11:20:47 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nContent-Length: 28254\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nVary: Accept-Encoding\r\nHost: preferencenail.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: f3669d931a9b3f0741d44f770ac082e3\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":85386,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"46a6fef91632b94d14252fe324c1585f","sha1":"387cebbd261b8fe947fe9805875300f2ceeb5cfd","sha256":"36d0c771f8bf310d740cb4d0ca144354c45df284e72361660448708d72f175d5","sha512":"a3aaa1b5ab1113a12793bd1085332eb257416aaa9c4a690525838b91453a281580a979bfb856b3c429c2d4243c3ce02bd318a4b7048124eef96912179836d0fd","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRL:nPncLBSUBULGVTfGpucE5fox","tlshash":"528395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","first_seen":"2025-07-08T10:38:39.799377Z","last_seen":"2025-11-18T17:01:51.014373Z","times_seen":15230,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":59,"dns":1,"connect":17,"send":0,"wait":25,"receive":18,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flushpersist.com/pxf.gif?uuid=4c4ee54a-a1f9-4c44-ba77-658156eebc27\u0026eb=bff3d6bf6d16c0bb5e58232c1a99ef63\u0026te=fe015aeda515c30449c87b1701cc307f\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=69cfe3f61eb1212ad17512e51c527133\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=11","fqdn":"flushpersist.com","domain":"flushpersist.com","tld":"com"},"ip":{"addr":"192.243.59.13","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.1377x.is/","date":"2025-08-25T11:20:48.346Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"flushpersist.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 01 Jul 2025 15:12:33 GMT","end":"Mon, 29 Sep 2025 15:12:32 GMT"},"fingerprint":{"sha1":"9E:08:20:A0:75:ED:21:51:E0:3D:DE:29:CD:B0:11:01:4D:04:77:0A","sha256":"FB:D4:A2:1D:0F:F1:FB:A8:D9:5E:88:03:1F:BB:94:D2:32:5C:CC:49:11:11:FC:04:7B:C6:43:40:CF:1E:A2:BA"}}},"request":{"raw":"GET /pxf.gif?uuid=4c4ee54a-a1f9-4c44-ba77-658156eebc27\u0026eb=bff3d6bf6d16c0bb5e58232c1a99ef63\u0026te=fe015aeda515c30449c87b1701cc307f\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=69cfe3f61eb1212ad17512e51c527133\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=11 HTTP/1.1\r\nHost: flushpersist.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.1377x.is/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.19.5\r\nDate: Mon, 25 Aug 2025 11:20:48 GMT\r\nContent-Type: image/gif\r\nContent-Length: 1\r\nConnection: keep-alive\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nHost: flushpersist.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: e01c51ea2c1c4cc3812adde8991b0e7e\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.19.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-01T15:39:35.508929Z","times_seen":14478573,"resource_available":true,"data":null}},"time_used":671,"timings":{"blocked":283,"dns":1,"connect":92,"send":0,"wait":102,"receive":1,"ssl":190},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kennethlawfullyconveniences.com/impr.gif?sid=H4sIAAAAAAAC_1RST2gkxReuTvZ3-OFBzYqCIM7Bg4KZ9L_55x6Ccc0SzCZhN5KDeKiuqp6U6elqq7qnJ3MKBmSPsyCoF-l8k2xWDaJ4EwSZeAsIGUGYw-ayV08u7FFkJgPRB_3e1_VVFd_7Xn16kF0QDxkdbdxWXRlFdKFStkuvb8mYq9yU1jZLjl22b5S2ZFz1b5Q646TbbzmeX7bfKN0SbEctuLZj247tlJalFqHqLExYyOSk4ZQbdtl3y07FR0f_999kFgy1wNsXZA6SD599HH4AyQaIW9_fFGYnVcmb77ayiKZKo82P3493YpXHaF3BUFsI4-PpbigzJOSLGaj4eNoBVPtw3AECOSQzLz5CEB9PZSJoH10qDSKIGAF_Bnl7ABENIOkATO1D8nMCMI61dcStB2tK53T3kqVjdkiuPX0CmQ_JtUcvIG59txTJTumuirJUqtigExaQnQFkc4AkO0XanYHMT8HSTyD5b2Th6Sri1uG6iRQkH73mM1-Iik_nqRM25n3m-_MBrdXmq5W6U6kKETC3NrFIhgNQYyEbf9JCFlrIEgstPir5dt1nDvWqYYOzmu1T3-cisBt117Zpg9WQsbH2HtKkBxb1wPQeEr2HHXn_vDIHnf0Cs13AcAsmJWjzArkgyA1BTglySZCnBHm7OOKRcU3xgEcmC5xpdafVK_oqbR7QI5U2RUxAdQ-aF4cy-djsg6Wz_W5oeF-NEw3Sok8DXhwkF-T5sbNW589Z7IhRqdpgofDCqiMCx3Vcyp1axXFFxWEVt-Z4HowsIM3MxI-uHJKl_7-KRA7J_z7_GwE9hYlOweQcaPYKaF6Abhfoxg8dr1brlNM2uCqQpNeQ7loH0QV5eTLXDzfPIdjZ4hNvEmC6QKILfCR_JWhG9_p3VE4O76jckB_Wk1S2ZJeOZ343pamY_eY9sZsrzVdumt7Xb7MxMYYnm8KkqzTmMm4a8u2S5FzoZaWZID-vmC0RbGRmeynTcZasbryzvNJKtDBGqngAKofE-kuDySG5_uVLk_fs__EYUg-gswKt7IxMAyzZg0mutBtFoKMrPkgs5FnR125wtRjJIbn92UNE4mzxqx-v_zTKK6BBASP-dfAK9zUd30BlcWDuoakt0HQfcatAWxdoRwVo1IPJZvtpos8Wf59KCSKrH0TaOgwiHd2_tNnIUSn0hMtsu16rOl49FI7ncxZW6n6DV6nteQKpGW6f3HrunwAAAP__Ha_I5bEEAAA=","fqdn":"kennethlawfullyconveniences.com","domain":"kennethlawfullyconveniences.com","tld":"com"},"ip":{"addr":"192.243.61.227","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.1377x.is/","date":"2025-08-25T11:20:49.642Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kennethlawfullyconveniences.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 Aug 2025 08:56:54 GMT","end":"Wed, 19 Nov 2025 08:56:53 GMT"},"fingerprint":{"sha1":"BF:FF:F5:7D:28:8E:6F:E0:B7:8D:CE:E2:08:84:8E:8B:91:83:8B:EE","sha256":"DA:60:A5:7E:C8:62:6A:F9:9F:A5:0B:1B:D0:0E:DE:4C:05:E3:D4:67:6C:CA:12:8E:5D:1E:E1:39:FD:5C:39:9C"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1RST2gkxReuTvZ3-OFBzYqCIM7Bg4KZ9L_55x6Ccc0SzCZhN5KDeKiuqp6U6elqq7qnJ3MKBmSPsyCoF-l8k2xWDaJ4EwSZeAsIGUGYw-ayV08u7FFkJgPRB_3e1_VVFd_7Xn16kF0QDxkdbdxWXRlFdKFStkuvb8mYq9yU1jZLjl22b5S2ZFz1b5Q646TbbzmeX7bfKN0SbEctuLZj247tlJalFqHqLExYyOSk4ZQbdtl3y07FR0f_999kFgy1wNsXZA6SD599HH4AyQaIW9_fFGYnVcmb77ayiKZKo82P3493YpXHaF3BUFsI4-PpbigzJOSLGaj4eNoBVPtw3AECOSQzLz5CEB9PZSJoH10qDSKIGAF_Bnl7ABENIOkATO1D8nMCMI61dcStB2tK53T3kqVjdkiuPX0CmQ_JtUcvIG59txTJTumuirJUqtigExaQnQFkc4AkO0XanYHMT8HSTyD5b2Th6Sri1uG6iRQkH73mM1-Iik_nqRM25n3m-_MBrdXmq5W6U6kKETC3NrFIhgNQYyEbf9JCFlrIEgstPir5dt1nDvWqYYOzmu1T3-cisBt117Zpg9WQsbH2HtKkBxb1wPQeEr2HHXn_vDIHnf0Cs13AcAsmJWjzArkgyA1BTglySZCnBHm7OOKRcU3xgEcmC5xpdafVK_oqbR7QI5U2RUxAdQ-aF4cy-djsg6Wz_W5oeF-NEw3Sok8DXhwkF-T5sbNW589Z7IhRqdpgofDCqiMCx3Vcyp1axXFFxWEVt-Z4HowsIM3MxI-uHJKl_7-KRA7J_z7_GwE9hYlOweQcaPYKaF6Abhfoxg8dr1brlNM2uCqQpNeQ7loH0QV5eTLXDzfPIdjZ4hNvEmC6QKILfCR_JWhG9_p3VE4O76jckB_Wk1S2ZJeOZ343pamY_eY9sZsrzVdumt7Xb7MxMYYnm8KkqzTmMm4a8u2S5FzoZaWZID-vmC0RbGRmeynTcZasbryzvNJKtDBGqngAKofE-kuDySG5_uVLk_fs__EYUg-gswKt7IxMAyzZg0mutBtFoKMrPkgs5FnR125wtRjJIbn92UNE4mzxqx-v_zTKK6BBASP-dfAK9zUd30BlcWDuoakt0HQfcatAWxdoRwVo1IPJZvtpos8Wf59KCSKrH0TaOgwiHd2_tNnIUSn0hMtsu16rOl49FI7ncxZW6n6DV6nteQKpGW6f3HrunwAAAP__Ha_I5bEEAAA= HTTP/1.1\r\nHost: kennethlawfullyconveniences.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.1377x.is/\r\nCookie: uid_id2=4c4ee54a-a1f9-4c44-ba77-658156eebc27:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl24701955=1; slec69cfe3f61eb1212ad17512e51c527133=[6116561]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Mon, 25 Aug 2025 11:20:49 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nVary: Origin\r\nAccess-Control-Allow-Credentials: true\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nSet-Cookie: iprc_l+79a3e47261390b35cf90c4ecd258ca12=6116561; expires=Tue, 26 Aug 2025 11:20:49 GMT; path=/; secure; SameSite=None\niprc_l:6116561=3; expires=Tue, 26 Aug 2025 11:20:49 GMT; path=/; secure; SameSite=None\niprc_a+e17f8618fbdf4c12797ffc01a3092de0=127602; expires=Tue, 26 Aug 2025 11:20:49 GMT; path=/; secure; SameSite=None\niprc_a:127602=1; expires=Tue, 26 Aug 2025 11:20:49 GMT; path=/; secure; SameSite=None\r\nHost: kennethlawfullyconveniences.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 9c89d0165b37d4fbf47a37ee7d553629\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-01T15:39:35.508929Z","times_seen":14478573,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kennethlawfullyconveniences.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.1377x.is/css/icons.css","fqdn":"www.1377x.is","domain":"1377x.is","tld":"is"},"ip":{"addr":"104.21.4.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.1377x.is/","date":"2025-08-25T11:20:47.124Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1377x.is","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Jul 2025 00:31:50 GMT","end":"Thu, 02 Oct 2025 01:30:36 GMT"},"fingerprint":{"sha1":"5F:EA:95:09:E1:C4:74:F5:5A:A9:68:9E:F7:57:E3:EB:78:7B:10:FE","sha256":"A2:F9:AF:9C:78:49:CB:83:47:E1:6E:8C:88:10:BF:9C:94:A9:09:3B:95:FC:46:61:BC:BB:8F:85:74:2C:81:90"}}},"request":{"raw":"GET /css/icons.css HTTP/1.1\r\nHost: www.1377x.is\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.1377x.is/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 11:20:47 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Tue, 05 Mar 2024 04:38:52 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: \"65e6a1dc-214e\"\r\nexpires: Mon, 25 Aug 2025 19:46:35 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 12851\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M0B6F7Ams19kqE0q%2BJm68G2LpQ7HnbSLtn8tAUjXehnpYXXp73Rxg%2BJgwYQ%2Feq2LpkNhR5ncbtsFi46nOlQ7GgWbT4Ay5IIkvYkpHw%3D%3D\"}]}\r\ncf-ray: 974ab3be8928d86c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8526,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (8526), with no line terminators","md5":"ee611c0cbb7511f578409ed536582ddc","sha1":"85ed976c40006027c6d84637061e922f273ea8d9","sha256":"919e92e44e28bd9cf5be73ee77fdf02606977a056c5233fce2f2e8dde4d31dbe","sha512":"33b83d7301c1072d93a019aaf0ed161e0e153396edc68fd6067b8a40800fba8672239c530225d677498cc36ac648c3e7d4c4cfce5201c63d28fb1a3ce7e6f5d0","ssdeep":"96:lNYWU2lZbzIQuSzTMy2sGygQcJtCQ0mZD03:XYWjpIeCNQGCQ0P","tlshash":"2b02ceb4e72f00d09371ca53afa96298e395b12c98c19c94f14a5e1dbff1b1493c1bb8","first_seen":"2025-08-16T03:21:32.66222Z","last_seen":"2026-01-21T08:43:35.503165Z","times_seen":12,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.1377x.is/css/scrollbar.css","fqdn":"www.1377x.is","domain":"1377x.is","tld":"is"},"ip":{"addr":"104.21.4.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.1377x.is/","date":"2025-08-25T11:20:47.125Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1377x.is","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Jul 2025 00:31:50 GMT","end":"Thu, 02 Oct 2025 01:30:36 GMT"},"fingerprint":{"sha1":"5F:EA:95:09:E1:C4:74:F5:5A:A9:68:9E:F7:57:E3:EB:78:7B:10:FE","sha256":"A2:F9:AF:9C:78:49:CB:83:47:E1:6E:8C:88:10:BF:9C:94:A9:09:3B:95:FC:46:61:BC:BB:8F:85:74:2C:81:90"}}},"request":{"raw":"GET /css/scrollbar.css HTTP/1.1\r\nHost: www.1377x.is\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.1377x.is/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 11:20:47 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Tue, 05 Mar 2024 04:38:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: \"65e6a1dd-a925\"\r\nexpires: Mon, 25 Aug 2025 21:14:39 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 7567\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kzFGOTSOnNSIuywDjXBe8dC6rGEMasjYC1d9naNoPp7Vtc7Jfe8q4ZJZKOsMzmM4kfoG%2BB1XeJ8SKnyyeXzm2Y2Ak86T74HedfC%2BXw%3D%3D\"}]}\r\ncf-ray: 974ab3be892cd86c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43301,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (43301), with no line terminators","md5":"44973731340d4a80449aed7e8ede3147","sha1":"b63264e58aa20ca4c69d00916a057d0761615d55","sha256":"aa14bc793b8a9d735f5eb8b504189f5bfc1c0062e498614b088dc75815823547","sha512":"57a00aff09d357a0b44b34f1c2862a11cb7a46f7a9c45d62f1cda98cb0706a23a752534e1b90db638eff4fd54c648e97616412375183a134edc9e32acefe652a","ssdeep":"768:zStSnjNCxYdFZnzE2SZCC0hve9rgRyCV3fM+ubKyrEFUmCUNfo:zStSnQxYdFZnRSn","tlshash":"7d1317992a0336dffa4f457dbb81379a11fc378345521a6cf0d758a4ab88bf7a439402","first_seen":"2023-09-19T19:06:15Z","last_seen":"2026-01-21T08:43:35.511075Z","times_seen":15,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.1377x.is/images/favicon.ico","fqdn":"www.1377x.is","domain":"1377x.is","tld":"is"},"ip":{"addr":"104.21.4.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.1377x.is/","date":"2025-08-25T11:20:47.983Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1377x.is","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Jul 2025 00:31:50 GMT","end":"Thu, 02 Oct 2025 01:30:36 GMT"},"fingerprint":{"sha1":"5F:EA:95:09:E1:C4:74:F5:5A:A9:68:9E:F7:57:E3:EB:78:7B:10:FE","sha256":"A2:F9:AF:9C:78:49:CB:83:47:E1:6E:8C:88:10:BF:9C:94:A9:09:3B:95:FC:46:61:BC:BB:8F:85:74:2C:81:90"}}},"request":{"raw":"GET /images/favicon.ico HTTP/1.1\r\nHost: www.1377x.is\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.1377x.is/\r\nCookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=4c4ee54a-a1f9-4c44-ba77-658156eebc27%3A1%3A1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 25 Aug 2025 11:20:48 GMT\r\ncontent-type: image/x-icon\r\nvary: accept-encoding\r\nlast-modified: Tue, 05 Mar 2024 04:38:56 GMT\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XBexkllfnHnB9m8tPK7PFI7C0BwMOvtAXjWKU3uvx2pI1FwVtXXIByBsvb4l74M8Ao3ITEhbAb5EJYyeMak0tbijUP0ypmspuFxGFQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"65e6a1e0-47e\"\r\ncf-ray: 974ab3c3efaa38b7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1150,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"769362362d52b0cfc3271ecb6dec43fb","sha1":"9df2439bce4e08d28c14c37cd2f74fc678465b23","sha256":"7d524db2f0ca2d20b89f7f197110cb9a5bbaea45b19939dc6e30dc366d20eb61","sha512":"62c7afcbc6499babcd062345d95c845818d68645f82f7b19c553a28af906e47b944b591c90797ffd13d0a508dcefd230ad7cc7c23ec3d00af30df2b9c1b1d9ff","ssdeep":"","tlshash":"5d21658635d4c814c85ccd33fa8072f2426a4f74e5e16b27cc14bee93c355408da1d4c","first_seen":"2023-05-02T22:51:04Z","last_seen":"2026-04-30T18:41:30.356669Z","times_seen":638,"resource_available":false,"data":null}},"time_used":372,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":372,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/chat/mob/ssp/1/js/script.js","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.1377x.is/","date":"2025-08-25T11:20:49.355Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Jul 2025 14:01:22 GMT","end":"Mon, 29 Sep 2025 14:59:36 GMT"},"fingerprint":{"sha1":"CD:76:E0:2A:28:09:08:24:2D:4C:A1:14:B2:AE:6C:39:A4:CC:2F:6B","sha256":"8B:98:84:C0:8D:47:7C:1B:A7:26:4B:E4:9E:6E:FD:8E:E1:6D:6E:41:1D:E7:91:B7:70:A3:C1:D0:C0:85:6B:31"}}},"request":{"raw":"GET /sb/chat/mob/ssp/1/js/script.js HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.1377x.is\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.1377x.is/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 11:20:49 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sat, 07 May 2022 03:21:31 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NfJQ8OCTv7VF46PMyMYQ1AEZM2xy0thES0MPBXcrrzY168F8uMQfgZY03fzRHsPyEqfMztlZda7Ukv8vZK9KiSNCV9ZPuX%2Fo9JiiM0uDQXg%3D\"}]}\r\nage: 867162\r\ncf-cache-status: HIT\r\netag: W/\"6275e5bb-17e\"\r\ncontent-encoding: br\r\ncf-ray: 974ab3cc8e2b5571-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":382,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"4f5f05ab032dd8fc0db448fcf51a35e2","sha1":"78f94f93fdb792d95ea3ac293ac1b8e3bc13d609","sha256":"7fd8e9c0e5ca0c7123954a109fa8b7e8368c7e1262880925e2ac7b8c877a9e38","sha512":"66a1f6a4996b8a21631d4bbbe85654ee1a47562b478ebd97bac584e7efe9a9d431f59c52a495876295a1e59760f12adb083e299dc302bd15080e559e1adae206","ssdeep":"","tlshash":"f4e02b2052540234c3bbc19691cb6bcb6270451ad009050e641c575b1df2bb612c9e97","first_seen":"2023-05-19T20:45:50Z","last_seen":"2026-01-17T18:50:06.236167Z","times_seen":1120,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.1377x.is/","date":"2025-08-25T11:20:49.652Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.1377x.is\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 21 Aug 2025 10:09:08 GMT\r\nexpires: Fri, 21 Aug 2026 10:09:08 GMT\r\ncache-control: public, max-age=31536000\r\nage: 349901\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-05-01T15:39:27.831126Z","times_seen":778880,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":75,"dns":4,"connect":7,"send":0,"wait":8,"receive":18,"ssl":61},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"professionaltrafficmonitor.com/stats","fqdn":"professionaltrafficmonitor.com","domain":"professionaltrafficmonitor.com","tld":"com"},"ip":{"addr":"18.157.201.33","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.1377x.is/","date":"2025-08-25T11:20:47.673Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"protrafficinspector.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 01 Jul 2025 00:00:00 GMT","end":"Thu, 30 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:D5:8D:EB:A4:50:13:0D:7C:33:71:82:B8:02:49:4F:D6:31:B6:E6","sha256":"49:03:4C:2C:1B:23:D8:D6:CB:AE:F0:54:61:99:C2:20:F4:FF:87:5E:0B:72:B1:6B:D8:AB:21:49:2D:F2:EC:4A"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: professionaltrafficmonitor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.1377x.is\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.1377x.is/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 11:20:47 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\nserver: fasthttp\r\naccess-control-allow-origin: https://www.1377x.is\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nset-cookie: uid_id2=4c4ee54a-a1f9-4c44-ba77-658156eebc27:1:1; expires=Thu, 23 Aug 2035 11:20:47 GMT; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"95dc6d4503c9451047963067e008780d","sha1":"f2887a212016868cdb3924de7a3d6c2c8bd3a25f","sha256":"84d92ed706288418ebc8175b30df567b225ef9c80e81f01407734067b5961029","sha512":"1a4088a8cac734aeca768a364dfea6635787bf2db3e181e84b4b3711b6c65455998c77a221c01e511c0479ad54c92a784485d0c7923aec28c26f56aa74ab994a","ssdeep":"","tlshash":"a190041174113310407534f4045415571507d11c01d11015c443cc7f131050d15517c1","first_seen":"2025-08-25T11:21:15.376393Z","last_seen":"2025-08-25T11:21:15.376393Z","times_seen":1,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":103,"dns":0,"connect":24,"send":0,"wait":22,"receive":0,"ssl":68},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.show-sb.com/sb/au/2f/33/17/2f3317da28d2a6ed09610d2d267aa136/1648542458.html","fqdn":"cdn.show-sb.com","domain":"show-sb.com","tld":"com"},"ip":{"addr":"172.67.170.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.1377x.is/","date":"2025-08-25T11:20:48.628Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"show-sb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 10 Aug 2025 11:11:15 GMT","end":"Sat, 08 Nov 2025 12:08:40 GMT"},"fingerprint":{"sha1":"46:26:78:BD:18:7A:95:15:D4:B3:89:73:FE:7E:99:33:18:7F:21:3E","sha256":"AD:6B:6A:10:54:38:33:B9:BB:A6:FD:B7:B0:1B:2E:9D:62:B8:47:35:C4:E6:7B:F6:4A:92:AA:75:B0:29:F7:F3"}}},"request":{"raw":"GET /sb/au/2f/33/17/2f3317da28d2a6ed09610d2d267aa136/1648542458.html HTTP/1.1\r\nHost: cdn.show-sb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.1377x.is\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.1377x.is/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 11:20:49 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Tue, 29 Mar 2022 08:27:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QNfQM7tpq%2BzgtNNBpEcycp89I06Uan7psVDSnfbam%2BDfvKptbRSj2GdT1ZdAPjZciAxXPO523kzetv4E2iR%2ByF9zr2GGTfUo%2F63oCgu%2B1Q%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 974ab3c87ea2323b-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2977,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"027fddd0d322239ada2f2b8b93934fda","sha1":"6f99560bca5c6d8d747c802f26058344eb179cec","sha256":"a5b2073d8f57ef0469b777f73d6c3f4a85cc17b4c2ed2a53aa3f1acb2273dbd5","sha512":"2c2eff668f38734b17c8847dfe11b5b40027948a1ebf24d6a763c44ab0b0fc63d260f69f9b3e0eefd8d82646223d88df36a256155ab3b7c21078a697e052afc8","ssdeep":"","tlshash":"26517d101fa8cc3670b08128a7233e2a7b9f6083931a6764317d5c255f949ea777f6f1","first_seen":"2023-05-18T23:46:38Z","last_seen":"2026-01-17T18:50:06.211937Z","times_seen":1108,"resource_available":false,"data":null}},"time_used":554,"timings":{"blocked":80,"dns":24,"connect":8,"send":0,"wait":391,"receive":0,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/chat/mob/ssp/1/css/style.css","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.1377x.is/","date":"2025-08-25T11:20:49.134Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Jul 2025 14:01:22 GMT","end":"Mon, 29 Sep 2025 14:59:36 GMT"},"fingerprint":{"sha1":"CD:76:E0:2A:28:09:08:24:2D:4C:A1:14:B2:AE:6C:39:A4:CC:2F:6B","sha256":"8B:98:84:C0:8D:47:7C:1B:A7:26:4B:E4:9E:6E:FD:8E:E1:6D:6E:41:1D:E7:91:B7:70:A3:C1:D0:C0:85:6B:31"}}},"request":{"raw":"GET /sb/chat/mob/ssp/1/css/style.css HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.1377x.is\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.1377x.is/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 11:20:49 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Mon, 21 Feb 2022 08:25:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"62134c60-1209\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: gzip\r\nage: 867163\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cG%2Bfsd5lJFFZM0zCg75WrJJetEilyVmYAbNG3kFFSC%2BUhAHQiQ4MSwNLAAZmFsL1DFU%2FhxgLHJKiJ8lejw%2BLfaOlFhHh1xDYeKgEFKPh%2Bic%3D\"}]}\r\ncf-ray: 974ab3cb9bd05571-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4617,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"630f303dfe147dec2c4a226287393b69","sha1":"3e9f8270b84e09595181bd55de6785a89f53ba10","sha256":"967d085a33a12064d83cb38f582c3e418e021a2d523dd9597bb75dc00589fec7","sha512":"aa41feb60ccd79d5e3499f58fcdee9d8b14312a885901990af21f8b15cc21e84e57edf843c9dc69e8146b7151c4d010d0c2d2b4cf8dd46a312266bf73d88359d","ssdeep":"96:ynjK1CQxCqyjG+6VE1VOCXYAX5yIvcMpzsFuTOKoMGMp9h815/SgarZnA3AG5Nbd:QjK1C1qiG+6VE1VOib5yIvdpzsFuTOK+","tlshash":"a491eea202e70a40ea0bd5631bec4b027b7504c32e0ace59badd194c9fc197893d39b2","first_seen":"2023-05-18T19:42:30Z","last_seen":"2026-01-17T18:50:06.19479Z","times_seen":1110,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":76,"dns":35,"connect":10,"send":0,"wait":17,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:300,400,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.1377x.is/","date":"2025-08-25T11:20:49.291Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"DF:A1:DB:1F:BC:5E:31:D7:F8:FE:26:E3:B9:B3:02:98:B1:C8:50:EC","sha256":"A2:57:20:B6:AE:46:89:B9:39:C7:57:9B:1E:43:96:E3:5A:BC:7E:3F:1D:18:10:34:CC:53:3D:DB:78:4E:5C:21"}}},"request":{"raw":"GET /css?family=Roboto:300,400,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 25 Aug 2025 11:20:49 GMT\r\ndate: Mon, 25 Aug 2025 11:20:49 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16755,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"e9d2e14beb088f37fae98294940a9dcd","sha1":"1dafc3c55550249c8c2d782d5616c7b445c8e005","sha256":"f2e491cc46d3fcba81f729065d622bd722751d4a2e7f80b479aa64a92c17b5c7","sha512":"64025ea9b660d5e1d45a593a27345e152ba6b5ef95daceee5e43201319a555eb5457cfe1ecdcc725202063a22c5f406f3ba4607863d5b714c378f144bcdea5f7","ssdeep":"384:pjf5jgjPjrjyUj/qY4+j4jYjpjfMj1jWj6jyhj/qY4XjNjtj4jfdjkjDj3jyQj/E:p90DXOU/R08toBy+Oh/EBpcZwPLOQ/VK","tlshash":"e5722291041740009b835ce223cebf35fe1f92117152d0b5abfd9b6badcbc66526939d","first_seen":"2025-06-02T17:27:24.212334Z","last_seen":"2026-01-19T16:22:17.33804Z","times_seen":5482,"resource_available":false,"data":null}},"time_used":297,"timings":{"blocked":123,"dns":0,"connect":28,"send":0,"wait":47,"receive":0,"ssl":95},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.1377x.is/","date":"2025-08-25T11:20:49.656Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.1377x.is\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 21 Aug 2025 10:09:08 GMT\r\nexpires: Fri, 21 Aug 2026 10:09:08 GMT\r\ncache-control: public, max-age=31536000\r\nage: 349901\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-05-01T15:39:27.831126Z","times_seen":778880,"resource_available":false,"data":null}},"time_used":301,"timings":{"blocked":142,"dns":1,"connect":20,"send":0,"wait":8,"receive":5,"ssl":121},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kennethlawfullyconveniences.com/69/cf/e3/69cfe3f61eb1212ad17512e51c527133.js","fqdn":"kennethlawfullyconveniences.com","domain":"kennethlawfullyconveniences.com","tld":"com"},"ip":{"addr":"192.243.61.227","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.1377x.is/","date":"2025-08-25T11:20:47.136Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kennethlawfullyconveniences.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 Aug 2025 08:56:54 GMT","end":"Wed, 19 Nov 2025 08:56:53 GMT"},"fingerprint":{"sha1":"BF:FF:F5:7D:28:8E:6F:E0:B7:8D:CE:E2:08:84:8E:8B:91:83:8B:EE","sha256":"DA:60:A5:7E:C8:62:6A:F9:9F:A5:0B:1B:D0:0E:DE:4C:05:E3:D4:67:6C:CA:12:8E:5D:1E:E1:39:FD:5C:39:9C"}}},"request":{"raw":"GET /69/cf/e3/69cfe3f61eb1212ad17512e51c527133.js HTTP/1.1\r\nHost: kennethlawfullyconveniences.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.1377x.is/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Mon, 25 Aug 2025 11:20:47 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 25615\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nHost: kennethlawfullyconveniences.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 530f7901ad61c3037e68a1052f21b6fd\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":72628,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"1f76975cf4e049ce9e8b5a63012a83e9","sha1":"e6f19aadccb9c675e00cc26ea9174b17187f58c0","sha256":"7c06cd3a25f13054f8917905f11c16cd8f530a66458ed13679b4934ded33d942","sha512":"a98a2cbb14b0fda813abb9652ce27d39f0c673333a9783d693c70614eb93bc43764f90689356953110e8f0b0ad6927ada17c932fb46aedc6d6144d595b209a37","ssdeep":"768:Y2bmYbmux2qw648+QhS8u+Jcj/XcdFjN4mOdY08kUbTehzbcepwPf:Y2bmKf4x5O+jvcidY0U3fX","tlshash":"9563c7483f51b27802e6b8fa712fa61af0265c0195d8e4d8f503f4deae66719f035f25","first_seen":"2025-08-25T11:21:15.380793Z","last_seen":"2025-08-25T11:21:15.380793Z","times_seen":1,"resource_available":true,"data":null}},"time_used":772,"timings":{"blocked":287,"dns":13,"connect":95,"send":0,"wait":94,"receive":91,"ssl":184},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kennethlawfullyconveniences.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.1377x.is/css/fonts/oswald-regular.woff","fqdn":"www.1377x.is","domain":"1377x.is","tld":"is"},"ip":{"addr":"104.21.4.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.1377x.is/","date":"2025-08-25T11:20:47.203Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1377x.is","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Jul 2025 00:31:50 GMT","end":"Thu, 02 Oct 2025 01:30:36 GMT"},"fingerprint":{"sha1":"5F:EA:95:09:E1:C4:74:F5:5A:A9:68:9E:F7:57:E3:EB:78:7B:10:FE","sha256":"A2:F9:AF:9C:78:49:CB:83:47:E1:6E:8C:88:10:BF:9C:94:A9:09:3B:95:FC:46:61:BC:BB:8F:85:74:2C:81:90"}}},"request":{"raw":"GET /css/fonts/oswald-regular.woff HTTP/1.1\r\nHost: www.1377x.is\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.1377x.is/css/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 11:20:47 GMT\r\ncontent-type: font/woff\r\ncontent-length: 25248\r\nserver: cloudflare\r\nlast-modified: Tue, 05 Mar 2024 04:39:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"65e6a1fa-62a0\"\r\naccept-ranges: bytes\r\nage: 4080\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vAgGzFTEI8a7NqwTtJKN9JJDxplwzXao8n4gHBM6bqrns3V4kAYHTnrfO2QIxwrwyUsXImccmwO%2BEk6G%2FWwVXqsMAEUYLjtWVKp9vQ%3D%3D\"}]}\r\ncf-ray: 974ab3bf0a8dd86c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25248,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 25248, version 1.0","md5":"77f9ec053e5256b45207e37effb5a1b1","sha1":"b881bffa5a7dd80494d621ec6f72c3f5545448f3","sha256":"c5bccac5053a0089da4fb1a1693579ed4893a75b8fdc1c4f43a9151a2a9fb754","sha512":"8a80658c195422eaf85a4b10828c533bca4e544dfd87cbe22223c555b0339e523f8c2aae0b9af57917542810a726f34b457ccdbfe44f35368238f84a25610d88","ssdeep":"768:44DjwzV6M2DzeXC7fVBaONZcwMlLBSv0j2:NjwzV6M06yhnU79fC","tlshash":"64b2f1eb9586968cd6002ab0c491efc0d596c37b2cdec7f6ed04b10fbf28989906603d","first_seen":"2023-04-07T15:29:12Z","last_seen":"2026-04-30T18:41:30.372117Z","times_seen":456,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.1377x.is/","date":"2025-08-25T11:20:47.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"preferencenail.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 01 Jul 2025 15:11:38 GMT","end":"Mon, 29 Sep 2025 15:11:37 GMT"},"fingerprint":{"sha1":"F9:52:70:4B:81:A8:F8:39:E6:E7:96:8F:EA:FE:17:FD:96:C5:32:E3","sha256":"D8:C9:87:B5:89:5E:D4:F4:8D:FD:98:3C:31:39:42:67:D3:20:27:14:A9:AD:F2:AB:97:A4:48:0F:94:F0:FF:A2"}}},"request":{"raw":"GET /sfp.js HTTP/1.1\r\nHost: preferencenail.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.1377x.is/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Mon, 25 Aug 2025 11:20:47 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nContent-Length: 28254\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nVary: Accept-Encoding\r\nHost: preferencenail.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: eb64b45c26620ed4d3a0de87b44d0c2d\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":85386,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"46a6fef91632b94d14252fe324c1585f","sha1":"387cebbd261b8fe947fe9805875300f2ceeb5cfd","sha256":"36d0c771f8bf310d740cb4d0ca144354c45df284e72361660448708d72f175d5","sha512":"a3aaa1b5ab1113a12793bd1085332eb257416aaa9c4a690525838b91453a281580a979bfb856b3c429c2d4243c3ce02bd318a4b7048124eef96912179836d0fd","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRL:nPncLBSUBULGVTfGpucE5fox","tlshash":"528395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","first_seen":"2025-07-08T10:38:39.799377Z","last_seen":"2025-11-18T17:01:51.014373Z","times_seen":15230,"resource_available":true,"data":null}},"time_used":167,"timings":{"blocked":58,"dns":1,"connect":17,"send":0,"wait":32,"receive":18,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/chat/mob/ssp/1/img/close.png","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.1377x.is/","date":"2025-08-25T11:20:49.293Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Jul 2025 14:01:22 GMT","end":"Mon, 29 Sep 2025 14:59:36 GMT"},"fingerprint":{"sha1":"CD:76:E0:2A:28:09:08:24:2D:4C:A1:14:B2:AE:6C:39:A4:CC:2F:6B","sha256":"8B:98:84:C0:8D:47:7C:1B:A7:26:4B:E4:9E:6E:FD:8E:E1:6D:6E:41:1D:E7:91:B7:70:A3:C1:D0:C0:85:6B:31"}}},"request":{"raw":"GET /sb/chat/mob/ssp/1/img/close.png HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 11:20:49 GMT\r\ncontent-type: image/png\r\ncontent-length: 5982\r\nserver: cloudflare\r\nlast-modified: Sat, 07 May 2022 04:02:16 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"6275ef48-175e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\naccept-ranges: bytes\r\nage: 1477441\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CCCh9oucUdZFFlrW00mO2zxKhnlvylkXxx2PeiivJmh%2BKxoBCnzLxOQ5IIrt5sCXslvWT%2BMFtRa%2ByfpNXW7mjGS37M1WwodU6%2F79hj7qr9k%3D\"}]}\r\ncf-ray: 974ab3cc1ccf5571-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5982,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 522 x 391, 8-bit/color RGBA, non-interlaced","md5":"c489ce2c491a22ee37a55e26a92dfd73","sha1":"2fa588ab09e94dd902e5bd24b48f98ad1949c9d6","sha256":"1eed147c7d5de6291c25fbc5274830c12d5549262fb144271576d4e15966e5bd","sha512":"fe6a53296238283eac984b1912bfe7fbbdf5f0692f59f86e7e1ca989555a81be786ff29b9f8644443b2ace8137d412b6d9a92b0edf7f595ddf36058702a2d0d0","ssdeep":"96:FSDZ/I09Da01l+gmkyTt6Hk8nTbo5GZNKEBX97O+co2RF9JNssCgSSiiFr4uolec:FSDS0tKg9E05TAYwEBPwF9JNsTgSSL3C","tlshash":"80c1afeff8a058cf4566b7021c8e4080fbaa713d835536b4d4a092dc958be4a0fd7475","first_seen":"2023-04-05T23:50:36Z","last_seen":"2026-05-01T16:25:20.680851Z","times_seen":4101,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rashcolonizeexpand.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fchat%2Fmob%2Fssp%2F1%2Fcss%2Fanimate.css\u0026l=79313\u0026fd=101","fqdn":"rashcolonizeexpand.com","domain":"rashcolonizeexpand.com","tld":"com"},"ip":{"addr":"192.243.59.12","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.1377x.is/","date":"2025-08-25T11:20:49.296Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rashcolonizeexpand.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 22:10:41 GMT","end":"Fri, 26 Sep 2025 22:10:40 GMT"},"fingerprint":{"sha1":"C7:75:50:5C:D3:7C:BF:A1:34:3E:61:33:FC:D6:81:21:2E:31:1D:92","sha256":"CB:A9:18:8B:DD:56:71:B4:C1:61:A7:9F:5C:50:7F:22:BB:83:72:BC:0F:B3:14:19:C4:E9:F9:59:6A:0F:95:EC"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fchat%2Fmob%2Fssp%2F1%2Fcss%2Fanimate.css\u0026l=79313\u0026fd=101 HTTP/1.1\r\nHost: rashcolonizeexpand.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.1377x.is/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.19.5\r\nDate: Mon, 25 Aug 2025 11:20:49 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: rashcolonizeexpand.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.19.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-01T15:39:35.508929Z","times_seen":14478573,"resource_available":true,"data":null}},"time_used":673,"timings":{"blocked":286,"dns":1,"connect":94,"send":0,"wait":94,"receive":1,"ssl":194},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"rashcolonizeexpand.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rashcolonizeexpand.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fchat%2Fmob%2Fssp%2F1%2Fjs%2Fscript.js\u0026l=382\u0026fd=23","fqdn":"rashcolonizeexpand.com","domain":"rashcolonizeexpand.com","tld":"com"},"ip":{"addr":"192.243.59.12","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.1377x.is/","date":"2025-08-25T11:20:49.402Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rashcolonizeexpand.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 22:10:41 GMT","end":"Fri, 26 Sep 2025 22:10:40 GMT"},"fingerprint":{"sha1":"C7:75:50:5C:D3:7C:BF:A1:34:3E:61:33:FC:D6:81:21:2E:31:1D:92","sha256":"CB:A9:18:8B:DD:56:71:B4:C1:61:A7:9F:5C:50:7F:22:BB:83:72:BC:0F:B3:14:19:C4:E9:F9:59:6A:0F:95:EC"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fchat%2Fmob%2Fssp%2F1%2Fjs%2Fscript.js\u0026l=382\u0026fd=23 HTTP/1.1\r\nHost: rashcolonizeexpand.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.1377x.is/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.19.5\r\nDate: Mon, 25 Aug 2025 11:20:49 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: rashcolonizeexpand.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.19.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-01T15:39:35.508929Z","times_seen":14478573,"resource_available":true,"data":null}},"time_used":688,"timings":{"blocked":290,"dns":5,"connect":93,"send":0,"wait":109,"receive":0,"ssl":189},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"rashcolonizeexpand.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kennethlawfullyconveniences.com/pixel/sbs?c=1","fqdn":"kennethlawfullyconveniences.com","domain":"kennethlawfullyconveniences.com","tld":"com"},"ip":{"addr":"192.243.61.227","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.1377x.is/","date":"2025-08-25T11:20:49.645Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kennethlawfullyconveniences.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 Aug 2025 08:56:54 GMT","end":"Wed, 19 Nov 2025 08:56:53 GMT"},"fingerprint":{"sha1":"BF:FF:F5:7D:28:8E:6F:E0:B7:8D:CE:E2:08:84:8E:8B:91:83:8B:EE","sha256":"DA:60:A5:7E:C8:62:6A:F9:9F:A5:0B:1B:D0:0E:DE:4C:05:E3:D4:67:6C:CA:12:8E:5D:1E:E1:39:FD:5C:39:9C"}}},"request":{"raw":"GET /pixel/sbs?c=1 HTTP/1.1\r\nHost: kennethlawfullyconveniences.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.1377x.is/\r\nCookie: uid_id2=4c4ee54a-a1f9-4c44-ba77-658156eebc27:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl24701955=1; slec69cfe3f61eb1212ad17512e51c527133=[6116561]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Mon, 25 Aug 2025 11:20:49 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: kennethlawfullyconveniences.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-01T15:39:35.508929Z","times_seen":14478573,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kennethlawfullyconveniences.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.1377x.is/css/fonts/opensans-regular.woff","fqdn":"www.1377x.is","domain":"1377x.is","tld":"is"},"ip":{"addr":"104.21.4.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.1377x.is/","date":"2025-08-25T11:20:47.199Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1377x.is","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Jul 2025 00:31:50 GMT","end":"Thu, 02 Oct 2025 01:30:36 GMT"},"fingerprint":{"sha1":"5F:EA:95:09:E1:C4:74:F5:5A:A9:68:9E:F7:57:E3:EB:78:7B:10:FE","sha256":"A2:F9:AF:9C:78:49:CB:83:47:E1:6E:8C:88:10:BF:9C:94:A9:09:3B:95:FC:46:61:BC:BB:8F:85:74:2C:81:90"}}},"request":{"raw":"GET /css/fonts/opensans-regular.woff HTTP/1.1\r\nHost: www.1377x.is\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.1377x.is/css/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 11:20:47 GMT\r\ncontent-type: font/woff\r\ncontent-length: 22660\r\nserver: cloudflare\r\nlast-modified: Tue, 05 Mar 2024 04:39:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"65e6a1fa-5884\"\r\naccept-ranges: bytes\r\nage: 4080\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WUxOiOfxKzDWS6drW47q9NMgzzP%2BoWpGCXbsnJ6vi159iuIh1FIqqLrCx3sxG5bo50r0zHAIddbtURR5BBrFMu8E%2BRMrkkNVBwztyQ%3D%3D\"}]}\r\ncf-ray: 974ab3bf0a7bd86c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22660,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 22660, version 1.0","md5":"79515ad0788973c533405f7012dfeccd","sha1":"5092881fad2caffdc6bf71bdab1ea547b73d3564","sha256":"22e7a1b10c110072f5a0bfd16e2197a76b279ec879bcce8978fada1dc9ee5d40","sha512":"a0f8bc1917ff69550fb6e27671345acbbfdefb22423274c8876e0ba291feaca65240260e64b236ca76f10448b7a938fe27aeb388eba3a8462acd43d54b352346","ssdeep":"384:4ZnXPbd1G0FEDf+rm7QFcBUZvOZmFZDAbZjIBS1Z3BqH48AmgxQS1ZhY3uyJ+:4pGGPryhMv6mFOiBU40Xp1X4J+","tlshash":"e8a2d0dede0ae80aee99323263d77a4ecb0b1d3ae4319117f52c610933d35972ed0158","first_seen":"2023-04-06T15:25:07Z","last_seen":"2026-05-01T15:25:14.604896Z","times_seen":11320,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"torchfriendlypay.com/pixel/purst?dl=0\u0026th=0\u0026sc=0\u0026rs=1234\u0026rd=1234\u0026fd=538\u0026bv=25.8.5278\u0026tmpl=70","fqdn":"torchfriendlypay.com","domain":"torchfriendlypay.com","tld":"com"},"ip":{"addr":"192.243.59.20","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.1377x.is/","date":"2025-08-25T11:20:47.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"torchfriendlypay.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 22:31:57 GMT","end":"Fri, 26 Sep 2025 22:31:56 GMT"},"fingerprint":{"sha1":"C1:1A:8F:9D:C9:3D:22:4D:0E:AA:D9:B9:1C:98:E3:DC:41:83:82:4F","sha256":"B2:2E:9D:A4:0D:D7:A4:C2:A4:C1:7F:A9:E3:2A:AF:DE:7B:7F:BF:6A:1D:DC:6A:9C:AB:BF:98:D7:C2:A6:40:2E"}}},"request":{"raw":"GET /pixel/purst?dl=0\u0026th=0\u0026sc=0\u0026rs=1234\u0026rd=1234\u0026fd=538\u0026bv=25.8.5278\u0026tmpl=70 HTTP/1.1\r\nHost: torchfriendlypay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.1377x.is/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.19.5\r\nDate: Mon, 25 Aug 2025 11:20:47 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: torchfriendlypay.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.19.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-01T15:39:35.508929Z","times_seen":14478573,"resource_available":true,"data":null}},"time_used":658,"timings":{"blocked":282,"dns":2,"connect":92,"send":0,"wait":93,"receive":0,"ssl":185},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"torchfriendlypay.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"professionaltrafficmonitor.com/stats","fqdn":"professionaltrafficmonitor.com","domain":"professionaltrafficmonitor.com","tld":"com"},"ip":{"addr":"18.157.201.33","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.1377x.is/","date":"2025-08-25T11:20:47.661Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"protrafficinspector.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 01 Jul 2025 00:00:00 GMT","end":"Thu, 30 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:D5:8D:EB:A4:50:13:0D:7C:33:71:82:B8:02:49:4F:D6:31:B6:E6","sha256":"49:03:4C:2C:1B:23:D8:D6:CB:AE:F0:54:61:99:C2:20:F4:FF:87:5E:0B:72:B1:6B:D8:AB:21:49:2D:F2:EC:4A"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: professionaltrafficmonitor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.1377x.is\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.1377x.is/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 11:20:47 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\nserver: fasthttp\r\naccess-control-allow-origin: https://www.1377x.is\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nset-cookie: uid_id2=a019899b-7a44-4b4e-8931-2ffcb00f7a6b:1:1; expires=Thu, 23 Aug 2035 11:20:47 GMT; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"f61ab40c07df0a78222dd76e405de8c4","sha1":"a22244294bf1860436114abdb7f324c61d5e0aa6","sha256":"3f6ef63ac31d906bc05d77512625ef803ea4126c221870564ac9fe3d3c023eca","sha512":"b60f50d0c6f317fdb020178413288909d2e78a192a5eab18e63776855b5c5ca4938ba1d956a1e4a061fe27ea33996d99bdd775c8590391b8dd5b7522ffcdde20","ssdeep":"","tlshash":"f0900455001f03c0d77014cc305733c01551744c0d7155f417c4c01030503350031133","first_seen":"2025-08-25T11:21:15.385116Z","last_seen":"2025-08-25T11:21:15.385116Z","times_seen":1,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":114,"dns":7,"connect":23,"send":0,"wait":22,"receive":0,"ssl":70},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flushpersist.com/pxf.gif?uuid=4c4ee54a-a1f9-4c44-ba77-658156eebc27\u0026eb=bff3d6bf6d16c0bb5e58232c1a99ef63\u0026te=fe015aeda515c30449c87b1701cc307f\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=8837658487085b799326b984798a6ec9\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=11","fqdn":"flushpersist.com","domain":"flushpersist.com","tld":"com"},"ip":{"addr":"192.243.59.13","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.1377x.is/","date":"2025-08-25T11:20:48.344Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"flushpersist.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 01 Jul 2025 15:12:33 GMT","end":"Mon, 29 Sep 2025 15:12:32 GMT"},"fingerprint":{"sha1":"9E:08:20:A0:75:ED:21:51:E0:3D:DE:29:CD:B0:11:01:4D:04:77:0A","sha256":"FB:D4:A2:1D:0F:F1:FB:A8:D9:5E:88:03:1F:BB:94:D2:32:5C:CC:49:11:11:FC:04:7B:C6:43:40:CF:1E:A2:BA"}}},"request":{"raw":"GET /pxf.gif?uuid=4c4ee54a-a1f9-4c44-ba77-658156eebc27\u0026eb=bff3d6bf6d16c0bb5e58232c1a99ef63\u0026te=fe015aeda515c30449c87b1701cc307f\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=8837658487085b799326b984798a6ec9\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=11 HTTP/1.1\r\nHost: flushpersist.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.1377x.is/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.19.5\r\nDate: Mon, 25 Aug 2025 11:20:48 GMT\r\nContent-Type: image/gif\r\nContent-Length: 1\r\nConnection: keep-alive\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nHost: flushpersist.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 8890d2956684f2775fff085de6e69c7b\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.19.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-01T15:39:35.508929Z","times_seen":14478573,"resource_available":true,"data":null}},"time_used":660,"timings":{"blocked":283,"dns":1,"connect":91,"send":0,"wait":93,"receive":0,"ssl":190},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.1377x.is/css/fonts/oswald-light.woff","fqdn":"www.1377x.is","domain":"1377x.is","tld":"is"},"ip":{"addr":"104.21.4.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.1377x.is/","date":"2025-08-25T11:20:47.228Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1377x.is","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Jul 2025 00:31:50 GMT","end":"Thu, 02 Oct 2025 01:30:36 GMT"},"fingerprint":{"sha1":"5F:EA:95:09:E1:C4:74:F5:5A:A9:68:9E:F7:57:E3:EB:78:7B:10:FE","sha256":"A2:F9:AF:9C:78:49:CB:83:47:E1:6E:8C:88:10:BF:9C:94:A9:09:3B:95:FC:46:61:BC:BB:8F:85:74:2C:81:90"}}},"request":{"raw":"GET /css/fonts/oswald-light.woff HTTP/1.1\r\nHost: www.1377x.is\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.1377x.is/css/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 11:20:47 GMT\r\ncontent-type: font/woff\r\ncontent-length: 22568\r\nserver: cloudflare\r\nlast-modified: Tue, 05 Mar 2024 04:39:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"65e6a1fa-5828\"\r\naccept-ranges: bytes\r\nage: 4080\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3SGm2V9lhEzLAFqpmNsKbYTogXWxXd9gWTUjOLZDRxzjebaVJV1WuFdXrJoUi%2FGkiM6FTo8LmrmgaWUo62Z8tKbeTpHENoHLJnkyxA%3D%3D\"}]}\r\ncf-ray: 974ab3bf3ae7d86c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22568,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 22568, version 1.0","md5":"a4d5b8f448ec86ddb2e57a2912a3fcd6","sha1":"579df89a925a4e5e46d63fe5ad84492a810ed3be","sha256":"dc1e478c0ada70ebba3817df17ad49d0b288351d777cf6582dba4a5390be73e3","sha512":"23176bf6d89b34048f4735c24b3dd792bf8d1d08f3395f68eb7781500b769bdb5f32068ae6eb44cf8eff5a7c21278efe63a8c0d9c49fca317ff065671420457e","ssdeep":"384:BHW2KWhh/IKpgxi3hKCnqIg1YbAXFNtW114GeVlpnRd62c7nAKGUmVEuaRVF:B2dWhXpgxUcCjy7Y1CVltWnAkmRuF","tlshash":"bea2e040ae33574de50be87961a44bbab81af29f12db72cc14b6584de693ab9c4840f1","first_seen":"2023-04-07T15:29:13Z","last_seen":"2026-04-30T18:41:30.376061Z","times_seen":460,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"weirdopt.com/ad/advertisers.js","fqdn":"weirdopt.com","domain":"weirdopt.com","tld":"com"},"ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.1377x.is/","date":"2025-08-25T11:20:47.676Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"weirdopt.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 01 Jul 2025 15:18:37 GMT","end":"Mon, 29 Sep 2025 15:18:36 GMT"},"fingerprint":{"sha1":"1A:27:71:C0:8E:44:D4:6B:F5:AA:49:F0:F1:AF:E5:5F:30:23:A4:D4","sha256":"84:6C:2E:D6:ED:8A:2F:33:05:CC:E9:F2:24:E5:5C:E0:80:C2:04:2D:C3:21:06:64:E1:0D:14:81:A1:9A:00:1B"}}},"request":{"raw":"GET /ad/advertisers.js HTTP/1.1\r\nHost: weirdopt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.1377x.is/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Mon, 25 Aug 2025 11:20:47 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 0\r\nConnection: keep-alive\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 1aede646b61929d953842c996a548309\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-01T15:39:35.508929Z","times_seen":14478573,"resource_available":true,"data":null}},"time_used":142,"timings":{"blocked":63,"dns":1,"connect":17,"send":0,"wait":18,"receive":1,"ssl":39},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kennethlawfullyconveniences.com/sbar.json?key=69cfe3f61eb1212ad17512e51c527133\u0026uuid=4c4ee54a-a1f9-4c44-ba77-658156eebc27%3A1%3A1","fqdn":"kennethlawfullyconveniences.com","domain":"kennethlawfullyconveniences.com","tld":"com"},"ip":{"addr":"192.243.61.227","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.1377x.is/","date":"2025-08-25T11:20:48.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kennethlawfullyconveniences.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 Aug 2025 08:56:54 GMT","end":"Wed, 19 Nov 2025 08:56:53 GMT"},"fingerprint":{"sha1":"BF:FF:F5:7D:28:8E:6F:E0:B7:8D:CE:E2:08:84:8E:8B:91:83:8B:EE","sha256":"DA:60:A5:7E:C8:62:6A:F9:9F:A5:0B:1B:D0:0E:DE:4C:05:E3:D4:67:6C:CA:12:8E:5D:1E:E1:39:FD:5C:39:9C"}}},"request":{"raw":"GET /sbar.json?key=69cfe3f61eb1212ad17512e51c527133\u0026uuid=4c4ee54a-a1f9-4c44-ba77-658156eebc27%3A1%3A1 HTTP/1.1\r\nHost: kennethlawfullyconveniences.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.1377x.is\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.1377x.is/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Mon, 25 Aug 2025 11:20:48 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nAccess-Control-Allow-Origin: https://www.1377x.is\r\nAccess-Control-Allow-Credentials: true\r\nSet-Cookie: uid_id2=4c4ee54a-a1f9-4c44-ba77-658156eebc27:1:1; expires=Mon, 01 Sep 2025 11:20:48 GMT; path=/; secure; SameSite=None\npdhtkv=true; expires=Tue, 26 Aug 2025 11:20:48 GMT; path=/; secure; SameSite=None\nuncs=1; expires=Tue, 26 Aug 2025 11:20:48 GMT; path=/; secure; SameSite=None\npdhtkv29=true; expires=Tue, 26 Aug 2025 11:20:48 GMT; path=/; secure; SameSite=None\nuncs29=1; expires=Tue, 26 Aug 2025 11:20:48 GMT; path=/; secure; SameSite=None\nu_pl24701955=1; expires=Tue, 26 Aug 2025 11:20:48 GMT; path=/; secure; SameSite=None\nslec69cfe3f61eb1212ad17512e51c527133=[6116561]; expires=Mon, 25 Aug 2025 11:20:53 GMT; path=/; secure; SameSite=None\r\nHost: kennethlawfullyconveniences.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 29a96976db869549b2b0e69fa3ff1a58\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6235,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"JSON text data","md5":"5bcc558a547104300f2eaa9fe1ae3c9a","sha1":"fb5986dd190acc96b9109b5e75dfcf26e80f0b1b","sha256":"bd0e57277a956e277b4f242421fb09bdd7f9b5b8cb9dfa9583299c06978810e8","sha512":"199cfd37dfedfba7aad2fefc2487a8b4d9cf7f9caa8396032122ddc93a8b01e448ba0d1c79385e240305447baa17e2510a0d2a07c23b792f047e5206fa4137f7","ssdeep":"192:9zGLjjuFqOZCNbyax2ufQAwExnrg4CKWBcDyT3:9zGL3POZm0ufxrg4C9wE3","tlshash":"7bd17c3f41c455951d814e44188bfebc3ae5cca3c1a976acdc93abd8800c9fe6025daf","first_seen":"2025-08-25T11:21:15.387798Z","last_seen":"2025-08-25T11:21:15.387798Z","times_seen":1,"resource_available":false,"data":null}},"time_used":374,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":369,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kennethlawfullyconveniences.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/si/7e/c0/ce/7ec0cee9c9eddc0313c7224f4bb9c235dcceed35221c66d90032359ec2e4b6ab.png","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.1377x.is/","date":"2025-08-25T11:20:49.294Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Jul 2025 02:33:11 GMT","end":"Wed, 08 Oct 2025 02:33:10 GMT"},"fingerprint":{"sha1":"06:D8:07:0F:AB:BF:D8:7F:C5:38:82:AC:A7:8A:20:4D:83:6C:EA:C9","sha256":"CF:05:58:46:C3:07:3F:B6:A6:8D:42:F2:3B:3D:91:36:93:10:CB:D5:89:47:A3:62:26:D2:F3:BA:AC:51:0E:B7"}}},"request":{"raw":"GET /si/7e/c0/ce/7ec0cee9c9eddc0313c7224f4bb9c235dcceed35221c66d90032359ec2e4b6ab.png HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 11:20:49 GMT\r\ncontent-type: image/png\r\ncontent-length: 6423\r\nserver: nginx/1.21.6\r\nlast-modified: Fri, 15 Aug 2025 01:09:57 GMT\r\netag: \"689e88e5-1917\"\r\nexpires: Wed, 27 Aug 2025 11:20:49 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: ah0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6423,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 192x192, components 3","md5":"d8f143c53ef89fe568fb4f86eaaadd76","sha1":"57435a41ae46252e83eaa425e86c8d004fc82287","sha256":"2939c9713939fc59e054d5101edbb46015515ea52bd362372aeb6475d0a67a26","sha512":"1344497a4e548bea8882be8acbb9384fa7dcc15e31194cc670622945ba95d60825d069dffb2d3cd3a659c21df65909b3780e377c55202560be35db2aec41b680","ssdeep":"96:IElbw+iukgvhR4EpfmZe4iM/B+bNpqt9TJu5FY67pz97OPhk7fIOA+e1vRvzo:9wtwRfunBKMt9eY2pz9qa6RZvE","tlshash":"73d18e4a94192ba1ee9a49f8e8d73f03d22876716e66b63420830cfdbb12dfc4144741","first_seen":"2025-08-15T07:53:25.315072Z","last_seen":"2025-12-22T04:22:03.419479Z","times_seen":1333,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":49,"dns":1,"connect":22,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}