{"report_id":"5b5dcd5b-165f-4beb-93e1-43dded744e97","version":0,"status":"done","tags":[],"date":"2026-09-27T06:27:35Z","url":{"schema":"http","addr":"ads.alterhub.site/","fqdn":"ads.alterhub.site","domain":"alterhub.site","tld":"site"},"ip":{"addr":"172.67.212.166","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"ads.alterhub.site/","fqdn":"ads.alterhub.site","domain":"alterhub.site","tld":"site"},"title":"ALTER | Roblox Script Hub","dom":{"size":36326,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (11646)","md5":"7a29b4c83767d856d1a2dd9a658ca08a","sha1":"7d88465772681dd19d4f50f6acec5581e7097306","sha256":"69d347eaaf050912f1e15e803b7c7617c9a3897083e16db7c3302be485e855d7","sha512":"65c5ffe47d0e83d5ad5bc973e77fd5b440d63fc75676a185a5a8273865b12ffd68951c14b146eb0975607bef284dc956515b7d828f60545e4cc73360b4239e87","ssdeep":"384:UQgZq0NEBQfXB7JVXYLGIDFueZT2itPQE/enx/GU:uZqeFXB3Xx8FjQE/0x/GU","tlshash":"0df27672a9e29137117381c671a6f71a39f2810bd9066250b2fc83784fdfda6bd2354d","dom_hash":"domhash04a52c05b2100492163d837f002bc1bc","first_seen":"2026-09-27T06:27:52.377251Z","last_seen":"2026-09-27T06:27:52.377251Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"ads.alterhub.site/","fqdn":"ads.alterhub.site","domain":"alterhub.site","tld":"site"},"ip":{"addr":"172.67.212.166","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-01T06:27:35Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"31pu2ilhjrkmwpf"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"www.highperformanceformat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"www.highperformanceformat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"pl27873862.effectivecpmnetwork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"pl28128394.effectivecpmnetwork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.highperformanceformat.com","ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2024-10-15","domain_rank":366864,"first_seen":"2024-10-23T18:32:34.138968Z","last_seen":"2026-09-23T10:55:38.157488Z","alert_count":2,"request_count":1,"received_data":50015,"sent_data":486,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"tr.rbxcdn.com","ip":{"addr":"23.36.76.203","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2013-07-17","domain_rank":26027,"first_seen":"2019-05-23T12:45:13Z","last_seen":"2026-09-20T14:23:44.384237Z","alert_count":0,"request_count":12,"received_data":1187554,"sent_data":7140,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-20T22:43:34.841753Z","alert_count":0,"request_count":1,"received_data":15834,"sent_data":592,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"pl27873862.effectivecpmnetwork.com","ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":1,"request_count":1,"received_data":46984,"sent_data":491,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"pl28128394.effectivecpmnetwork.com","ip":{"addr":"172.255.141.4","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":1,"request_count":1,"received_data":47047,"sent_data":491,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ads.alterhub.site","ip":{"addr":"104.21.42.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":31,"received_data":296493,"sent_data":24680,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-20T22:43:37.149177Z","alert_count":0,"request_count":6,"received_data":235998,"sent_data":3520,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-09-20T23:08:06.309324Z","alert_count":0,"request_count":1,"received_data":73230,"sent_data":468,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ads.alterhub.site/ads/bait.js?cb=1790490425596","fqdn":"ads.alterhub.site","domain":"alterhub.site","tld":"site"},"ip":{"addr":"104.21.42.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"424ecc5f56c732e7d4a70f6347b22b66","sha1":"d237bbc96e1195864ccb33d82d9105a26e4d5d27","sha256":"e5fe7eefd70de736455dfe99ef279f0e452d07a52d27fc2c41ef522e054872bb","sha512":"42427e14e5191e949a5a02b44e7a4e2c7b7dd4d146387a6262b48e7f980f5f37ae7280e483a99f87fe05085d111b87877aa6913f31b418ef2dbda7d8c6576ffa","ssdeep":"","tlshash":"34c022024aa844f2bc75004cad12e8c26ba6c4fa42a230c0304cd008620f1db41b2fa3","size":179,"data":"","first_seen":"2026-09-27T06:27:52.427549Z","last_seen":"2026-09-27T06:30:56.9271Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"5976771bd29b3fd671cd1e9ea8833688","sha1":"08a6b6d6a680bc55f4d0e981fd57e23c89cb9714","sha256":"7a541bb0115eb5714e2360c03bb60a18d9be8c0888864ae15ea5218c5ccf6f2e","sha512":"029a2eb78bb290f0dfdd28c2c02248507e2e67b3fa04e83cbb58bda8c9a0d4715a0c59184a7ac8d551bc4e9e689cfe75795fd6d6cf4a6d78fcf7118033e1c9d1","ssdeep":"","tlshash":"31d023951c75853073dc03467175e3e8756031757711d514c1edcc1f6e10dd348b195c","size":217,"data":"","first_seen":"2026-09-27T06:27:52.456376Z","last_seen":"2026-09-27T06:27:52.456376Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ads.alterhub.site/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"ads.alterhub.site","domain":"alterhub.site","tld":"site"},"ip":{"addr":"104.21.42.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6219e582123f4c1082348b7a03f1e50b","sha1":"9e7ee99041842a98e0f5cbe2f310d042f1bb2a49","sha256":"dd7135c13c744a676e9ea9715191a989d79e6b37860b152613efa2f9355e2571","sha512":"67569b6f582b24292e03774e883d74f2166100f595440057ab681f45e4b1c457c65e918b5c789b483624a79ae73b891c8458e2019ce8d65d7a505b818597e033","ssdeep":"384:K07U/nVQ/TxW6NOlOSEVDrEyIu1QxeLGR20O5RUeOf:97qK/lZNOlOSEZNIgHzrrOf","tlshash":"a792b8c77ec5f1d9c21a3075105fb5caa67e6c8050bc0d4acdb290e8bf757a6892be48","size":20428,"data":"","first_seen":"2026-09-27T06:25:54.141638Z","last_seen":"2026-09-27T06:57:54.883812Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ads.alterhub.site/games.js?v=932f0e44","fqdn":"ads.alterhub.site","domain":"alterhub.site","tld":"site"},"ip":{"addr":"104.21.42.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cf2241c109c5d7991ead1d98db007d3f","sha1":"932f0e440418088411a23244cedfd6dce0cb129c","sha256":"9b7c9091c2a71fac6392b5f0261f10641e4f70abd332f89a0168a71abd815603","sha512":"554141208b3e8634a750a7d468773e331a2096340111d92a846d6e4a17f3973bb0c95a4221bdefb5f750cb1449d87d6eb9546272e77bcfb1847ad76f5d271e3a","ssdeep":"","tlshash":"7c41aeab71330de40ca0933d5892bf750eb447f4935b29a435cfd468234d896913af7a","size":2165,"data":"","first_seen":"2026-09-27T06:27:52.382228Z","last_seen":"2026-09-27T06:30:57.008233Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ads.alterhub.site/script.js?v=00169b4e","fqdn":"ads.alterhub.site","domain":"alterhub.site","tld":"site"},"ip":{"addr":"104.21.42.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cb5c166bc7c1c3f6589020fd4fcd7626","sha1":"00169b4e391441097b7fb19636b051e75f7a58be","sha256":"90543170866792d8582a3e25dc3fb4f387f8c800512733cb8f09f877402abfc2","sha512":"c5a4515defcc9d7326654bab04d59efa4b3e9d53df5b2d41c1d832254c33833514b1868f3b9041fd4874a8cd26b84d971c48476d4daebbb1d043655c19e4e1de","ssdeep":"384:CLXZSB7EAhCGum6tvErS2E1y08gZyZCZSZeQZ7qt0xIWkBf:k64x/DpErS2E174of","tlshash":"8a42c5bd720839b703a310b5657fb70ab37235119c4b80a099b9d9c82dbddad9233d9d","size":12557,"data":"","first_seen":"2026-09-27T06:27:52.429032Z","last_seen":"2026-09-27T06:30:57.012574Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ads.alterhub.site/promo.js?v=bde7b733","fqdn":"ads.alterhub.site","domain":"alterhub.site","tld":"site"},"ip":{"addr":"104.21.42.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"38d86265a4b4326b95d78c020856ac95","sha1":"bde7b7335e0a8daccd73cf41d16032eb738a8a71","sha256":"37e82370908b191d43c5a406379435ccd01331dc4d13b0725e1c18b3a0a15881","sha512":"537ee0ddff8bc542822445a42a5071101a972bdb0a8a7e20042eea9d6bd91cbc6c092b9e63be7c6431fb6129cbbccc941ec3acd762a6258218fc893151119f7a","ssdeep":"192:eUBnUiUhowQv4+jZX/zfDM2xyRyzNYROmby2xXF/O76BZMPpstrJaLFi:eU6iUhgvTjdz3yRyzNibL/O76BMpstdD","tlshash":"6922e9797610643752e709ba79ffb389b5313410bd87844082b4c8e83abcd1e4a67f9e","size":9921,"data":"","first_seen":"2026-09-27T06:27:52.431056Z","last_seen":"2026-09-27T06:30:56.911017Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ads.alterhub.site/chat.js?v=74f0a8af","fqdn":"ads.alterhub.site","domain":"alterhub.site","tld":"site"},"ip":{"addr":"104.21.42.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"35c00278d383d7e9f8597ebb22fdb6da","sha1":"74f0a8af31e4d77872bc6d6ffac0207c483c2a8e","sha256":"4ebd5c7cb0b95dbc29fe0f78cacf8aa9705c9ea1a4dc505ebba0ed9736083898","sha512":"8ec85afb7aca12326b6a609c9b887de95c15c05cc91974dbc03ec44d3b0869c2901d5a5a17d662037483fc9ef27dd548fcc3c2b6ac96c3f12c27693331ffc7f1","ssdeep":"384:QhItqFGroHf5oeAq8XhvuzSOBq61K5ms8mbQ0jkR8zszuGEIIxn4IGM:5+Gk8QzSOBqtp8mMZlEIIKIGM","tlshash":"7892086f568527332fb7029fb91b69cae75310357381802194f8c4ac1aadfa0193b9ce","size":20117,"data":"","first_seen":"2026-09-27T06:27:52.383623Z","last_seen":"2026-09-27T06:30:56.983306Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ads.alterhub.site/promoframe.html#k=70b7658cf770f889af09e1d33eabf363\u0026w=728\u0026h=90\u0026i=u7_9l2l13","fqdn":"ads.alterhub.site","domain":"alterhub.site","tld":"site"},"ip":{"addr":"104.21.42.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ads.alterhub.site/","date":"2026-09-27T06:27:18.879Z","timestamp":1790490438879,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alterhub.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 00:28:34 GMT","end":"Sat, 07 Nov 2026 01:28:30 GMT"},"fingerprint":{"sha1":"CC:30:2C:31:6D:59:8D:61:CD:11:F9:93:CE:16:C0:86:EE:F5:4A:5A","sha256":"FD:96:F8:0E:8C:08:48:55:A0:F2:69:BB:EA:8B:3A:98:9A:71:49:5F:30:C6:90:E1:9F:D3:7F:54:A3:38:1A:B6"}}},"request":{"raw":"GET /promoframe.html HTTP/1.1\r\nHost: ads.alterhub.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=cUPxGHX3J7dS20wMVOqgxutUGcytGbqXuq6AuboDOj4-1790490425-1.2.1.1-vQ8raaAFa5D8uXCYUxip_7065fQ5BngNItyCYK1ylXQI9tBYYGoyHSjhRqri6TZgUtRXj8kUZiodg9T1XBP4QIjBX5kAs0Eh_gZQjSL3e0cNRtOsd81hi1bxU9JS8A3xWKESiuJTZZ265fZCB6sTG_b7tIuiDL9gIouFKbL3pxzk1ETxcM1z40WrC9rcFVQq6OPxQxVEQ9opljv5_LIllJhvQkrxHAiOPJOchp.bkC2LQMULTFBIzUUhPKFVMpIxKoWe6kcM4PHOL2YRlj4T5JC76oKHSE5sZBJ24h5nouWEgEBWA2I2e5HqtQD9nAYpG1FVw6SI0ck3iiscHDJnnYz2Alt79nAj0Q5uk6MeGp0sJb48Ae2OH67i.GVDY8M7yoV.JjiPWibjFELPFWYxDVSBjcEOjx0BiF67iUorbuE\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 308 \r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/html\r\ndate: Sun, 27 Sep 2026 06:27:18 GMT\r\nlocation: /promoframe\r\nrefresh: 0;url=/promoframe\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-id: arn1::s6tdd-1790490438890-5968f489e24e\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YZPn8ppQNP70CAv6js0bAhFQPQ9YRocQqnvMC3uBJsVcNxK3GiNZNQMtSfmhG0TM6LsMw1L802d6boNSVsTNnWpcVGqhFni%2Bf%2B%2FZyTZW5yEwPXw4YbKj7S8a7%2BBxNRfP9lHtHQ%3D%3D\"}]}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a418711b08d756a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"308","status_text":"Permanent Redirect","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T20:43:33.933419Z","times_seen":19037193,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ads.alterhub.site/games.js?v=932f0e44","fqdn":"ads.alterhub.site","domain":"alterhub.site","tld":"site"},"ip":{"addr":"104.21.42.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ads.alterhub.site/","date":"2026-09-27T06:27:05.383Z","timestamp":1790490425383,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alterhub.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 00:28:34 GMT","end":"Sat, 07 Nov 2026 01:28:30 GMT"},"fingerprint":{"sha1":"CC:30:2C:31:6D:59:8D:61:CD:11:F9:93:CE:16:C0:86:EE:F5:4A:5A","sha256":"FD:96:F8:0E:8C:08:48:55:A0:F2:69:BB:EA:8B:3A:98:9A:71:49:5F:30:C6:90:E1:9F:D3:7F:54:A3:38:1A:B6"}}},"request":{"raw":"GET /games.js?v=932f0e44 HTTP/1.1\r\nHost: ads.alterhub.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\nage: 681351\r\ncache-control: public, max-age=14400, stale-while-revalidate=604800\r\ncontent-disposition: inline; filename=\"games.js\"\r\ncontent-encoding: br\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; frame-src 'self' https: data: blob:; media-src 'self' https: data: blob:; connect-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self' https:;\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sun, 27 Sep 2026 06:27:05 GMT\r\netag: W/\"cf2241c109c5d7991ead1d98db007d3f\"\r\nlast-modified: Sat, 19 Sep 2026 09:11:14 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::prszb-1790490425434-67921f02b76a\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gHVt7b906kUSlHtIn%2B%2Fwe9sU7kwwLi0ly0WPxtueTNA9ATdGFCFKiI4NrC%2Fh9i1WX815oIVLicJYeRISURJM7kMvGb6Kn9rIuvXNvy6zOIVACOhe%2FZGIxBdCVw8wwIWVbn5Rrw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncf-ray: a41870c6a9b356a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2165,"size_decoded":2522,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"cf2241c109c5d7991ead1d98db007d3f","sha1":"932f0e440418088411a23244cedfd6dce0cb129c","sha256":"9b7c9091c2a71fac6392b5f0261f10641e4f70abd332f89a0168a71abd815603","sha512":"554141208b3e8634a750a7d468773e331a2096340111d92a846d6e4a17f3973bb0c95a4221bdefb5f750cb1449d87d6eb9546272e77bcfb1847ad76f5d271e3a","ssdeep":"","tlshash":"7c41aeab71330de40ca0933d5892bf750eb447f4935b29a435cfd468234d896913af7a","first_seen":"2026-09-27T06:27:52.382228Z","last_seen":"2026-09-27T06:30:57.008233Z","times_seen":4,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ads.alterhub.site/chat.js?v=74f0a8af","fqdn":"ads.alterhub.site","domain":"alterhub.site","tld":"site"},"ip":{"addr":"104.21.42.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ads.alterhub.site/","date":"2026-09-27T06:27:05.386Z","timestamp":1790490425386,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alterhub.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 00:28:34 GMT","end":"Sat, 07 Nov 2026 01:28:30 GMT"},"fingerprint":{"sha1":"CC:30:2C:31:6D:59:8D:61:CD:11:F9:93:CE:16:C0:86:EE:F5:4A:5A","sha256":"FD:96:F8:0E:8C:08:48:55:A0:F2:69:BB:EA:8B:3A:98:9A:71:49:5F:30:C6:90:E1:9F:D3:7F:54:A3:38:1A:B6"}}},"request":{"raw":"GET /chat.js?v=74f0a8af HTTP/1.1\r\nHost: ads.alterhub.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\nage: 753871\r\ncache-control: public, max-age=14400, stale-while-revalidate=604800\r\ncontent-disposition: inline; filename=\"chat.js\"\r\ncontent-encoding: br\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; frame-src 'self' https: data: blob:; media-src 'self' https: data: blob:; connect-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self' https:;\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sun, 27 Sep 2026 06:27:05 GMT\r\netag: W/\"35c00278d383d7e9f8597ebb22fdb6da\"\r\nlast-modified: Fri, 18 Sep 2026 13:02:34 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::mqv8d-1790490425452-3f3274da2eee\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=McmuYYhX89MoHzXMZa%2FQWzuXK%2FiSDe8NWcdgHbk23XppUq1n4n7ABC1%2FhotdNs8hV98H4p7dLom6TQV6td0zm%2BTSdQhvlzpFJw%2BlYYhMpArYPNJkxJ0JOqczTwclW5HgT7HAYQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncf-ray: a41870c6a9b656a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20117,"size_decoded":9174,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (20116)","md5":"35c00278d383d7e9f8597ebb22fdb6da","sha1":"74f0a8af31e4d77872bc6d6ffac0207c483c2a8e","sha256":"4ebd5c7cb0b95dbc29fe0f78cacf8aa9705c9ea1a4dc505ebba0ed9736083898","sha512":"8ec85afb7aca12326b6a609c9b887de95c15c05cc91974dbc03ec44d3b0869c2901d5a5a17d662037483fc9ef27dd548fcc3c2b6ac96c3f12c27693331ffc7f1","ssdeep":"384:QhItqFGroHf5oeAq8XhvuzSOBq61K5ms8mbQ0jkR8zszuGEIIxn4IGM:5+Gk8QzSOBqtp8mMZlEIIKIGM","tlshash":"7892086f568527332fb7029fb91b69cae75310357381802194f8c4ac1aadfa0193b9ce","first_seen":"2026-09-27T06:27:52.383623Z","last_seen":"2026-09-27T06:30:56.983306Z","times_seen":4,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/jetbrainsmono/v24/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxDcwg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ads.alterhub.site/","date":"2026-09-27T06:27:05.571Z","timestamp":1790490425571,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/jetbrainsmono/v24/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxDcwg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://ads.alterhub.site\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 31432\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 16:00:42 GMT\r\nexpires: Tue, 21 Sep 2027 16:00:42 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:52:37 GMT\r\ncontent-type: font/woff2\r\nage: 483983\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31432,"size_decoded":32245,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31432, version 1.0","md5":"b636a65da4f00129f08c7df6e5dd75ac","sha1":"4f27206c4b1caf8b7805597fcbc6922ff5805daa","sha256":"83c005d49d8a6a50474c73a5a36ac0468076e9c4a29da7bdb14995d80560a5be","sha512":"77ad92edddd5fc9ce47b8b329cf41b2fec895ea01a97b9122df3766163998fadcbe47c868631208636c4e587136ddd390d38e3e9da2743758c9da2c77a66f859","ssdeep":"768:a8+AGQwBrw24YHLKRG5lBF260n1e5vhjJKWWAD95I9Puggtx:B+AiBrw2fHL+GyvYtYADM9Pug0x","tlshash":"52e2f274ea41ca57676335ed4203e99d015fa318ebf6fd40869ccad2a506bcb7c4033a","first_seen":"2024-10-21T03:03:54.505463Z","last_seen":"2026-10-11T20:59:16.148527Z","times_seen":20964,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":44,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/gsap/3.12.5/gsap.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ads.alterhub.site/","date":"2026-09-27T06:27:05.606Z","timestamp":1790490425606,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/gsap/3.12.5/gsap.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 06:27:05 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=6,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 288185\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Thu, 18 Jan 2024 23:33:45 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5mDvS%2FOra0z7gUIeMOb5u6RfH9ZhIOeheR85kd9ex8u3LTdSAKEXvIDxLb7%2FkhV0OuEjJpaJTIY8FkLdHXVCWfwB0gte7tunMRp1awJluGVcXU1cU6CwUZifSYBBtfLsht1bxjWd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a41870c9cd130b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 25515\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":72214,"size_decoded":26531,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65255)","md5":"47da594cbece0e34a656e6bf2490b7c3","sha1":"2d26f4c060491ac980d09ca687388d3610256eb7","sha256":"28033e449a31ebcc396e5be8b13b63152bf03094288fb5867034321927bce087","sha512":"ede1d1c1c6d890ae1df60ffab43fe68647fef9ea131f0a4d33dc28071b4f5015a6ebbcde01f142f87adda04d866a729ea1c972fd5c5e2ef22ac2f09d93ba9272","ssdeep":"1536:auJ29KBROpgAEQ9a1tgwA6NSZW3ytdKTdIwEp28Ywz7CDE:f29CakgwdNSQ3yt8eNp28YqCA","tlshash":"d063e8d93292f423039a51a1447f094bf337a958640f0918f269e4ce7d3c9ad52bbe7a","first_seen":"2024-01-19T15:55:20Z","last_seen":"2026-10-11T20:19:44.219988Z","times_seen":13667,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":3,"connect":9,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ads.alterhub.site/promoframe#k=fdfdd92a59e588025342002253695a24\u0026w=468\u0026h=60\u0026i=u2_746rpa","fqdn":"ads.alterhub.site","domain":"alterhub.site","tld":"site"},"ip":{"addr":"104.21.42.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ads.alterhub.site/","date":"2026-09-27T06:27:05.846Z","timestamp":1790490425846,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alterhub.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 00:28:34 GMT","end":"Sat, 07 Nov 2026 01:28:30 GMT"},"fingerprint":{"sha1":"CC:30:2C:31:6D:59:8D:61:CD:11:F9:93:CE:16:C0:86:EE:F5:4A:5A","sha256":"FD:96:F8:0E:8C:08:48:55:A0:F2:69:BB:EA:8B:3A:98:9A:71:49:5F:30:C6:90:E1:9F:D3:7F:54:A3:38:1A:B6"}}},"request":{"raw":"GET /promoframe HTTP/1.1\r\nHost: ads.alterhub.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=cUPxGHX3J7dS20wMVOqgxutUGcytGbqXuq6AuboDOj4-1790490425-1.2.1.1-vQ8raaAFa5D8uXCYUxip_7065fQ5BngNItyCYK1ylXQI9tBYYGoyHSjhRqri6TZgUtRXj8kUZiodg9T1XBP4QIjBX5kAs0Eh_gZQjSL3e0cNRtOsd81hi1bxU9JS8A3xWKESiuJTZZ265fZCB6sTG_b7tIuiDL9gIouFKbL3pxzk1ETxcM1z40WrC9rcFVQq6OPxQxVEQ9opljv5_LIllJhvQkrxHAiOPJOchp.bkC2LQMULTFBIzUUhPKFVMpIxKoWe6kcM4PHOL2YRlj4T5JC76oKHSE5sZBJ24h5nouWEgEBWA2I2e5HqtQD9nAYpG1FVw6SI0ck3iiscHDJnnYz2Alt79nAj0Q5uk6MeGp0sJb48Ae2OH67i.GVDY8M7yoV.JjiPWibjFELPFWYxDVSBjcEOjx0BiF67iUorbuE\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\nage: 753869\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"promoframe\"\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; frame-src 'self' https: data: blob:; media-src 'self' https: data: blob:; connect-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self' https:; frame-ancestors https://alterhub.site https://www.alterhub.site;\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sun, 27 Sep 2026 06:27:05 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 18 Sep 2026 13:02:35 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::zmdcw-1790490425899-38600f985d6b\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AXNX9zIKZjnlFJPOrtiLFGdcQ%2BLpmwJrTErm79YwpFQdDblYHIsI3XUtk%2B68asYLlyHMzwlWejKtPZN5QyCbUEEWefRBVOC0qShEom7uZSb3SJYofIl5nk4uUnt0PdJrbvfphg%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: a41870c98a0a56a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T20:43:33.933419Z","times_seen":19037193,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ads.alterhub.site/logo.png","fqdn":"ads.alterhub.site","domain":"alterhub.site","tld":"site"},"ip":{"addr":"104.21.42.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ads.alterhub.site/","date":"2026-09-27T06:27:05.877Z","timestamp":1790490425877,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alterhub.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 00:28:34 GMT","end":"Sat, 07 Nov 2026 01:28:30 GMT"},"fingerprint":{"sha1":"CC:30:2C:31:6D:59:8D:61:CD:11:F9:93:CE:16:C0:86:EE:F5:4A:5A","sha256":"FD:96:F8:0E:8C:08:48:55:A0:F2:69:BB:EA:8B:3A:98:9A:71:49:5F:30:C6:90:E1:9F:D3:7F:54:A3:38:1A:B6"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: ads.alterhub.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=cUPxGHX3J7dS20wMVOqgxutUGcytGbqXuq6AuboDOj4-1790490425-1.2.1.1-vQ8raaAFa5D8uXCYUxip_7065fQ5BngNItyCYK1ylXQI9tBYYGoyHSjhRqri6TZgUtRXj8kUZiodg9T1XBP4QIjBX5kAs0Eh_gZQjSL3e0cNRtOsd81hi1bxU9JS8A3xWKESiuJTZZ265fZCB6sTG_b7tIuiDL9gIouFKbL3pxzk1ETxcM1z40WrC9rcFVQq6OPxQxVEQ9opljv5_LIllJhvQkrxHAiOPJOchp.bkC2LQMULTFBIzUUhPKFVMpIxKoWe6kcM4PHOL2YRlj4T5JC76oKHSE5sZBJ24h5nouWEgEBWA2I2e5HqtQD9nAYpG1FVw6SI0ck3iiscHDJnnYz2Alt79nAj0Q5uk6MeGp0sJb48Ae2OH67i.GVDY8M7yoV.JjiPWibjFELPFWYxDVSBjcEOjx0BiF67iUorbuE\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=86400, stale-while-revalidate=3600\r\ncontent-disposition: inline; filename=\"logo.png\"\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; frame-src 'self' https: data: blob:; media-src 'self' https: data: blob:; connect-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self' https:;\r\ncontent-type: image/png\r\ndate: Sun, 27 Sep 2026 06:27:05 GMT\r\netag: \"b30492cf7dcd04f149fdf83974f64f66\"\r\nlast-modified: Fri, 18 Sep 2026 13:02:35 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::7h8q7-1790490425458-7c0d1b7b4495\r\nserver-timing: cfExtPri\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8EtpfPTWGuIUEk%2FISiZe8WDUn%2BD2o4RURcr4AdUab31W3Ul7ZGD3Mx0dFHTRnOeDxFkXkVXjzUxKY9W%2FgjbV8W65T3yrSLufELCnXA7lSGdU1qmThZtUEnZ2VTP8vzqrhZqKuw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a41870c9ba0e56a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 36775\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":36775,"size_decoded":38264,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"b30492cf7dcd04f149fdf83974f64f66","sha1":"697f8116ae7258f96fdc8e575d9217d0561a819e","sha256":"48714eead8381395628a7730a417d2d60c7afa2cb7eb48f00cee45ee364115c0","sha512":"7af92369e8b331e67936405d19a9df86bfbccb6b8e76b172edc1697df844dd2e1bd69ce5f02e6ca9ff7e7a0619b2fa300d99582980cf3731e7e9c601da027aa6","ssdeep":"768:O8QZ/xPVFsTJEkZjQZl8CVGOEGFkxQLoXm7pc9lLt+2jf38T6hWze0Xua:O8QTw6CjDCUDLOctPzQea","tlshash":"9af2e1477874607668a308ef34b65b2957a664c0a4a11f355b33bf1a77343f83c9de09","first_seen":"2026-09-27T06:27:52.386786Z","last_seen":"2026-09-27T06:30:56.855844Z","times_seen":4,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tr.rbxcdn.com/180DAY-cb38b3527d1aac1088342cb5c901828a/256/256/Image/Png/noFilter","fqdn":"tr.rbxcdn.com","domain":"rbxcdn.com","tld":"com"},"ip":{"addr":"23.36.76.203","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ads.alterhub.site/","date":"2026-09-27T06:27:06.191Z","timestamp":1790490426191,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rbxcdn.com","organization":""},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 28 May 2026 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"27:09:A3:4D:E5:89:81:97:71:5C:DA:6E:A1:15:02:B9:81:53:59:9D","sha256":"E2:A0:F7:C3:A0:D8:F6:BF:94:31:82:25:B0:5B:5F:FF:B2:E8:DE:3E:58:CD:AA:E2:D6:5A:A0:5E:68:04:7E:EC"}}},"request":{"raw":"GET /180DAY-cb38b3527d1aac1088342cb5c901828a/256/256/Image/Png/noFilter HTTP/1.1\r\nHost: tr.rbxcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/Png\r\nserver: public-gateway\r\ncontent-length: 131879\r\nstrict-transport-security: max-age=31536000\r\nx-frame-options: SAMEORIGIN\r\nroblox-machine-id: 7842159e-5a9e-db92-a7c4-19ba14f143b3\r\nx-envoy-upstream-service-time: 396\r\nx-terms-message: Terms apply https://rblx.co/TOU.\r\nx-ratelimit-limit: 300000, 300000;w=60, 70000\r\nx-ratelimit-remaining: 299938, 70000\r\nx-ratelimit-reset: 33, 0\r\nx-ingress-proxy: true\r\nx-roblox-edge: c080\r\nreport-to: {\"group\":\"network-errors\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://ncs.roblox.com/upload\"}]}\r\nnel: {\"report_to\":\"network-errors\",\"max_age\":604800,\"success_fraction\":0.001,\"failure_fraction\":1}\r\ncache-control: max-age=31536000\r\nexpires: Mon, 27 Sep 2027 06:27:06 GMT\r\ndate: Sun, 27 Sep 2026 06:27:06 GMT\r\nakamai-request-bc: [a=23.36.76.199,b=1572784680,c=g,n=NO__OSLO,o=20940],[c=c,n=SE_AB_STOCKHOLM,o=20940]\r\naccess-control-allow-methods: GET\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":131879,"size_decoded":132852,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGB, non-interlaced","md5":"4642f3783377b1438e8870b67415a6f1","sha1":"1e14b203a5569bd1f598530afc6691f79290e129","sha256":"d13e4611e193fdc0417672e45f099aa107b31eaabffec3474f6a0679b573abd9","sha512":"de40423d05d0919e94e916d9b6660e51343b50d331addc4b6acab5da6ab47f4579cb20c7df22d0774f7b812332498cfbe0d4aa7e6763fc9b4fed5c5705efd130","ssdeep":"3072:1pDmxAzw/ALLyTcxjKKNWosYajHDmZfv6:11mxAhLLyQoKNhWHK1C","tlshash":"14d3121f9ec5758bb6195d255c22bb31acf6f482c1288f65974abf46f52cce43d0082b","first_seen":"2026-09-27T06:27:52.388653Z","last_seen":"2026-09-27T06:28:09.498893Z","times_seen":2,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":17,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ads.alterhub.site/promoframe#k=172caf16811db1ade9ccf7006c7a98e4\u0026w=728\u0026h=90\u0026i=u8_2uuvvk","fqdn":"ads.alterhub.site","domain":"alterhub.site","tld":"site"},"ip":{"addr":"104.21.42.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ads.alterhub.site/","date":"2026-09-27T06:27:18.915Z","timestamp":1790490438915,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alterhub.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 00:28:34 GMT","end":"Sat, 07 Nov 2026 01:28:30 GMT"},"fingerprint":{"sha1":"CC:30:2C:31:6D:59:8D:61:CD:11:F9:93:CE:16:C0:86:EE:F5:4A:5A","sha256":"FD:96:F8:0E:8C:08:48:55:A0:F2:69:BB:EA:8B:3A:98:9A:71:49:5F:30:C6:90:E1:9F:D3:7F:54:A3:38:1A:B6"}}},"request":{"raw":"GET /promoframe HTTP/1.1\r\nHost: ads.alterhub.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=cUPxGHX3J7dS20wMVOqgxutUGcytGbqXuq6AuboDOj4-1790490425-1.2.1.1-vQ8raaAFa5D8uXCYUxip_7065fQ5BngNItyCYK1ylXQI9tBYYGoyHSjhRqri6TZgUtRXj8kUZiodg9T1XBP4QIjBX5kAs0Eh_gZQjSL3e0cNRtOsd81hi1bxU9JS8A3xWKESiuJTZZ265fZCB6sTG_b7tIuiDL9gIouFKbL3pxzk1ETxcM1z40WrC9rcFVQq6OPxQxVEQ9opljv5_LIllJhvQkrxHAiOPJOchp.bkC2LQMULTFBIzUUhPKFVMpIxKoWe6kcM4PHOL2YRlj4T5JC76oKHSE5sZBJ24h5nouWEgEBWA2I2e5HqtQD9nAYpG1FVw6SI0ck3iiscHDJnnYz2Alt79nAj0Q5uk6MeGp0sJb48Ae2OH67i.GVDY8M7yoV.JjiPWibjFELPFWYxDVSBjcEOjx0BiF67iUorbuE\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\nage: 753781\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"promoframe\"\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; frame-src 'self' https: data: blob:; media-src 'self' https: data: blob:; connect-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self' https:; frame-ancestors https://alterhub.site https://www.alterhub.site;\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sun, 27 Sep 2026 06:27:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 18 Sep 2026 13:02:35 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::h9768-1790490438925-e38f5ff4eaca\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9I%2FKiOlsgNxWQoy2yvWPHPQRqZd3GPp7qLLE5o4IyFpVfM%2BADHrkzbD%2BB3eNxTuOsluJs1cDQbLg04n4osWcMBm6U34wwY%2Fq3%2BFS68ogkt4i1rFS4%2F4aMb3q1BFAtYeBDvQqxQ%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: a418711b38da56a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T20:43:33.933419Z","times_seen":19037193,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/intertight/v9/NGSnv5HMAFg6IuGlBNMjxJEL2VmU3NS7Z2mj0QiaWy5S.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ads.alterhub.site/","date":"2026-09-27T06:27:05.537Z","timestamp":1790490425537,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/intertight/v9/NGSnv5HMAFg6IuGlBNMjxJEL2VmU3NS7Z2mj0QiaWy5S.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://ads.alterhub.site\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22660\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 25 Sep 2026 00:24:57 GMT\r\nexpires: Sat, 25 Sep 2027 00:24:57 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:28:09 GMT\r\ncontent-type: font/woff2\r\nage: 194528\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22660,"size_decoded":23473,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22660, version 1.0","md5":"62121ba6ea2742fb24ae38eb26d47c76","sha1":"e40dc7ea466c4cae0140e2a599064d867bca4bee","sha256":"db1a039d03ed646ef6a899f9ff92bf2f6fe382a49f1b0992066e85caf88b5be9","sha512":"a0ac5fe744f4a41c6897c09e0fd872fe4efb0dba28b4cdbb855f2564a779cddee30dba2822665f4fab925ee32f4d2e7307fd7dc4b6a73f4ce49ceaa1fa00af7d","ssdeep":"384:WCqxxJcfEOEG+49NbByk6X9zlK6C+XmkMXzH81FU/0ecAqqyP4LjZEE2eUfY:dqZ38rB56X9zlDlmkizH81Fwig2pw","tlshash":"b1a2e0eb1b13603ed1c528b2a318dfad253037ea45f4b57320f89787d5a55232fa8299","first_seen":"2025-06-04T21:11:52.160537Z","last_seen":"2026-10-11T17:28:20.594589Z","times_seen":790,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":41,"dns":0,"connect":0,"send":0,"wait":87,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ads.alterhub.site/api/games?ids=84575720768520%2C128736949265057%2C112233638491976%2C119031147890918%2C120700541929930%2C83038462357724%2C130960835358983%2C100293509865504%2C73613510857111%2C105767799784652%2C119427438574114%2C110668201954727%2C103883942725157%2C94640181989498%2C96425088123775%2C126870639873289%2C78724109436030%2C124293095895786","fqdn":"ads.alterhub.site","domain":"alterhub.site","tld":"site"},"ip":{"addr":"104.21.42.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ads.alterhub.site/","date":"2026-09-27T06:27:05.600Z","timestamp":1790490425600,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alterhub.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 00:28:34 GMT","end":"Sat, 07 Nov 2026 01:28:30 GMT"},"fingerprint":{"sha1":"CC:30:2C:31:6D:59:8D:61:CD:11:F9:93:CE:16:C0:86:EE:F5:4A:5A","sha256":"FD:96:F8:0E:8C:08:48:55:A0:F2:69:BB:EA:8B:3A:98:9A:71:49:5F:30:C6:90:E1:9F:D3:7F:54:A3:38:1A:B6"}}},"request":{"raw":"GET /api/games?ids=84575720768520%2C128736949265057%2C112233638491976%2C119031147890918%2C120700541929930%2C83038462357724%2C130960835358983%2C100293509865504%2C73613510857111%2C105767799784652%2C119427438574114%2C110668201954727%2C103883942725157%2C94640181989498%2C96425088123775%2C126870639873289%2C78724109436030%2C124293095895786 HTTP/1.1\r\nHost: ads.alterhub.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-encoding: br\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; frame-src 'self' https: data: blob:; media-src 'self' https: data: blob:; connect-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self' https:;\r\ncontent-type: application/json; charset=utf-8\r\ndate: Sun, 27 Sep 2026 06:27:05 GMT\r\netag: W/\"c37-mGDJm84kvbhbjv7MAhpsuj5ZwBY\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::q2h79-1790490425625-455783097ea5\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4d5YAM0wy1gVbMs5TjrNnp%2BdDDnoc6Dv8my5rPdigtgwW9MIEdk98JdUusEvXjH4zFDfnkWXZjHj2YhYbU6hPDCtQGY8FBc%2FMQAcY0jIEdMuletWXnFQu2t8RmpFrc8kh5%2FahA%3D%3D\"}]}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncf-ray: a41870c809df56a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3127,"size_decoded":2497,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f4e5e77eb91a8bb017fb6312708357b4","sha1":"9860c99bce24bdb85b8efecc021a6cba3e59c016","sha256":"55252e7802cf41cdb2860a9f9baf5e12c4c5433d4e1258fbd5f556ca61d9a6ff","sha512":"fc83fe85d886ad6974e0ebd72a6a3c487c1811eab8d4283dc971025654709d4cbc5abaf67dede3f0ff0be3db3128c7d5244b1442ce7bfe3256d696f591aab3bb","ssdeep":"","tlshash":"8a51d197236315dd4b64273cf1cde48e057261d7ca80bb93445e999014f2a976d3f273","first_seen":"2026-09-27T06:27:52.392919Z","last_seen":"2026-09-27T06:28:09.49235Z","times_seen":2,"resource_available":true,"data":null}},"time_used":384,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":384,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ads.alterhub.site/promoframe.html#k=d99b65ef2f1e54f34f14ebb6236adcad\u0026w=468\u0026h=60\u0026i=u5_4uxmyi","fqdn":"ads.alterhub.site","domain":"alterhub.site","tld":"site"},"ip":{"addr":"104.21.42.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ads.alterhub.site/","date":"2026-09-27T06:27:12.370Z","timestamp":1790490432370,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alterhub.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 00:28:34 GMT","end":"Sat, 07 Nov 2026 01:28:30 GMT"},"fingerprint":{"sha1":"CC:30:2C:31:6D:59:8D:61:CD:11:F9:93:CE:16:C0:86:EE:F5:4A:5A","sha256":"FD:96:F8:0E:8C:08:48:55:A0:F2:69:BB:EA:8B:3A:98:9A:71:49:5F:30:C6:90:E1:9F:D3:7F:54:A3:38:1A:B6"}}},"request":{"raw":"GET /promoframe.html HTTP/1.1\r\nHost: ads.alterhub.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=cUPxGHX3J7dS20wMVOqgxutUGcytGbqXuq6AuboDOj4-1790490425-1.2.1.1-vQ8raaAFa5D8uXCYUxip_7065fQ5BngNItyCYK1ylXQI9tBYYGoyHSjhRqri6TZgUtRXj8kUZiodg9T1XBP4QIjBX5kAs0Eh_gZQjSL3e0cNRtOsd81hi1bxU9JS8A3xWKESiuJTZZ265fZCB6sTG_b7tIuiDL9gIouFKbL3pxzk1ETxcM1z40WrC9rcFVQq6OPxQxVEQ9opljv5_LIllJhvQkrxHAiOPJOchp.bkC2LQMULTFBIzUUhPKFVMpIxKoWe6kcM4PHOL2YRlj4T5JC76oKHSE5sZBJ24h5nouWEgEBWA2I2e5HqtQD9nAYpG1FVw6SI0ck3iiscHDJnnYz2Alt79nAj0Q5uk6MeGp0sJb48Ae2OH67i.GVDY8M7yoV.JjiPWibjFELPFWYxDVSBjcEOjx0BiF67iUorbuE\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 308 \r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/html\r\ndate: Sun, 27 Sep 2026 06:27:12 GMT\r\nlocation: /promoframe\r\nrefresh: 0;url=/promoframe\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-id: arn1::gr27x-1790490432395-a41d9030b199\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J7rHoR6vRlGBF3ajf0AMcy4I55fR6Y8O8enyNVk%2FVlTgR3lraDFkidDXKfBtbhzfTwUqEOwxufkh7JAP%2BSMob1kuBJAMmXvnguDFlXhQecME2BvYb0LkNtqOrZJ5d60cc3KcOA%3D%3D\"}]}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a41870f25d4956a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"308","status_text":"Permanent Redirect","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T20:43:33.933419Z","times_seen":19037193,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ads.alterhub.site/promoframe#k=fdfdd92a59e588025342002253695a24\u0026w=468\u0026h=60\u0026i=u6_nii3nv","fqdn":"ads.alterhub.site","domain":"alterhub.site","tld":"site"},"ip":{"addr":"104.21.42.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ads.alterhub.site/","date":"2026-09-27T06:27:12.404Z","timestamp":1790490432404,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alterhub.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 00:28:34 GMT","end":"Sat, 07 Nov 2026 01:28:30 GMT"},"fingerprint":{"sha1":"CC:30:2C:31:6D:59:8D:61:CD:11:F9:93:CE:16:C0:86:EE:F5:4A:5A","sha256":"FD:96:F8:0E:8C:08:48:55:A0:F2:69:BB:EA:8B:3A:98:9A:71:49:5F:30:C6:90:E1:9F:D3:7F:54:A3:38:1A:B6"}}},"request":{"raw":"GET /promoframe HTTP/1.1\r\nHost: ads.alterhub.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=cUPxGHX3J7dS20wMVOqgxutUGcytGbqXuq6AuboDOj4-1790490425-1.2.1.1-vQ8raaAFa5D8uXCYUxip_7065fQ5BngNItyCYK1ylXQI9tBYYGoyHSjhRqri6TZgUtRXj8kUZiodg9T1XBP4QIjBX5kAs0Eh_gZQjSL3e0cNRtOsd81hi1bxU9JS8A3xWKESiuJTZZ265fZCB6sTG_b7tIuiDL9gIouFKbL3pxzk1ETxcM1z40WrC9rcFVQq6OPxQxVEQ9opljv5_LIllJhvQkrxHAiOPJOchp.bkC2LQMULTFBIzUUhPKFVMpIxKoWe6kcM4PHOL2YRlj4T5JC76oKHSE5sZBJ24h5nouWEgEBWA2I2e5HqtQD9nAYpG1FVw6SI0ck3iiscHDJnnYz2Alt79nAj0Q5uk6MeGp0sJb48Ae2OH67i.GVDY8M7yoV.JjiPWibjFELPFWYxDVSBjcEOjx0BiF67iUorbuE\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\nage: 753876\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"promoframe\"\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; frame-src 'self' https: data: blob:; media-src 'self' https: data: blob:; connect-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self' https:; frame-ancestors https://alterhub.site https://www.alterhub.site;\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sun, 27 Sep 2026 06:27:12 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 18 Sep 2026 13:02:35 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::gr27x-1790490432413-98bda66e9279\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7KugPIATpcgAGrz4%2BC3YeT9LLu6emGsFPbCbDLlDlvT4Mhl5n6fRyMnT1SCF0aJ1paz7O74wbd40E7VDb3iCmzbDVqEhxfnpwHdldfJSOlKNrXOsxzuDfmk6suMluW9x9RJMog%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: a41870f28d4d56a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T20:43:33.933419Z","times_seen":19037193,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ads.alterhub.site/","fqdn":"ads.alterhub.site","domain":"alterhub.site","tld":"site"},"ip":{"addr":"104.21.42.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-27T06:27:04.739Z","timestamp":1790490424739,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alterhub.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 00:28:34 GMT","end":"Sat, 07 Nov 2026 01:28:30 GMT"},"fingerprint":{"sha1":"CC:30:2C:31:6D:59:8D:61:CD:11:F9:93:CE:16:C0:86:EE:F5:4A:5A","sha256":"FD:96:F8:0E:8C:08:48:55:A0:F2:69:BB:EA:8B:3A:98:9A:71:49:5F:30:C6:90:E1:9F:D3:7F:54:A3:38:1A:B6"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ads.alterhub.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\nage: 752065\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; frame-src 'self' https: data: blob:; media-src 'self' https: data: blob:; connect-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self' https:;\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sun, 27 Sep 2026 06:27:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 18 Sep 2026 13:32:39 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::n7lbc-1790490424875-56d1073cb3bc\r\ncf-cache-status: DYNAMIC\r\npriority: u=0,i\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3NixHiWP6RWVmZVTxPnMTl2zBk9xxfyxmnWMuEvhH62sakEHJ32uVdtAx9AedfNGOdE5NaTyT5%2Fw64BSPYSUEng%2FzUK3KdS0iuTQC4hRY8OtWf2mulw787b4uVcOMBAOK996jw%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: a41870c2e98256a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":21659,"size_decoded":7246,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (947)","md5":"4d16425e14d094b666ef3dbd077a8474","sha1":"296042b986157bb86c5daf968cd941424a6e202c","sha256":"5f7c52d213a745454b0afcf2321e981b9ecf78782bcc78940c221a091d984166","sha512":"d7afb6b85f282019a9f113ba0b52033a6432ac8ca19abfba23bc3d2133e669562bc4c0dafb7ac69809336f77224c19a274543c4ce62d58aee69b482cbd0d03c2","ssdeep":"192:AOZ0pBjwhcqPzstDz8u10FJ0x9Eedzn2RNbDFuGvcTQDikYCPVibWkrnx/k:bGgFq0KE2IDFuGvcTQDikYC4Vnx/k","tlshash":"7da293a3adf0817310a380da71e6bb277ea28057c646200472bc47ac4fdbd95d9736cd","first_seen":"2026-09-27T06:27:52.395708Z","last_seen":"2026-09-27T06:27:52.395708Z","times_seen":1,"resource_available":true,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":23,"connect":17,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.highperformanceformat.com/70b7658cf770f889af09e1d33eabf363/invoke.js","fqdn":"www.highperformanceformat.com","domain":"highperformanceformat.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ads.alterhub.site/","date":"2026-09-27T06:27:05.941Z","timestamp":1790490425941,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"highperformanceformat.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 23:52:39 GMT","end":"Wed, 04 Nov 2026 23:52:38 GMT"},"fingerprint":{"sha1":"B8:83:42:30:01:F1:50:DF:BA:43:AD:F5:FF:7C:75:43:E4:F3:14:B8","sha256":"06:90:24:D1:9F:9A:3E:F1:28:CC:2D:B9:77:E8:06:2F:0D:9E:37:96:BE:CB:04:A2:6B:68:B2:4A:66:04:FE:87"}}},"request":{"raw":"GET /70b7658cf770f889af09e1d33eabf363/invoke.js HTTP/1.1\r\nHost: www.highperformanceformat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 27 Sep 2026 06:27:06 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\naccept-ch: Sec-Ch-Ua-Platform,Sec-Ch-Ua-Model,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Mobile,Device-Stock-Ua,X-Device-User-Agent,User-Agent,Sec-Ch-Ua-Full-Version-List\r\naccess-control-allow-origin: *\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\nx-envoy-upstream-service-time: 6\r\nHost: www.highperformanceformat.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: e623a33c26bd57211fb63c1573d8d7aa\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":49208,"size_decoded":21338,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (49208), with no line terminators","md5":"bad281012611c5539565cd47a2625167","sha1":"afc742a44ac1048223f6b212684a70a14ea4156f","sha256":"f68543bd1cbc7102e66063316194d26e1518525985d17bc51340ec76f7ae4bdc","sha512":"41db313ecd0dc53ecb5c523d3ed15fc3d15c0b2b832fe280497a58ceef5bdcf3ce2bfd33df5c38a2f74a19c4cc085f626950890e4356c7f509d47221749cf766","ssdeep":"1536:zxD5bKBL9x2qTq1MAdf4kvj8c5NR1c7l9WEII0Nf:lD5bGL9xED/Tvc73WEc","tlshash":"4923e7d86f60e25247f0a8ff32269535f4691e54384cd4d8e06f3cc4aea7706ea7a478","first_seen":"2026-09-27T06:27:52.408785Z","last_seen":"2026-09-27T06:30:15.05566Z","times_seen":3,"resource_available":true,"data":null}},"time_used":514,"timings":{"blocked":-1,"dns":2,"connect":99,"send":0,"wait":111,"receive":99,"ssl":202},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"www.highperformanceformat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"www.highperformanceformat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tr.rbxcdn.com/180DAY-7d77e7ea0d8cbe538ce786e111f2be71/256/256/Image/Png/noFilter","fqdn":"tr.rbxcdn.com","domain":"rbxcdn.com","tld":"com"},"ip":{"addr":"23.36.76.203","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ads.alterhub.site/","date":"2026-09-27T06:27:06.192Z","timestamp":1790490426192,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rbxcdn.com","organization":""},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 28 May 2026 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"27:09:A3:4D:E5:89:81:97:71:5C:DA:6E:A1:15:02:B9:81:53:59:9D","sha256":"E2:A0:F7:C3:A0:D8:F6:BF:94:31:82:25:B0:5B:5F:FF:B2:E8:DE:3E:58:CD:AA:E2:D6:5A:A0:5E:68:04:7E:EC"}}},"request":{"raw":"GET /180DAY-7d77e7ea0d8cbe538ce786e111f2be71/256/256/Image/Png/noFilter HTTP/1.1\r\nHost: tr.rbxcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/Png\r\nserver: public-gateway\r\ncontent-length: 87124\r\nstrict-transport-security: max-age=31536000\r\nx-frame-options: SAMEORIGIN\r\nroblox-machine-id: 9a18c3e4-6e5a-9513-1436-5685a35bd368\r\nx-envoy-attempt-count: 1\r\nx-envoy-upstream-service-time: 267\r\nx-terms-message: Terms apply https://rblx.co/TOU.\r\nx-ratelimit-limit: 300000, 300000;w=60\r\nx-ratelimit-remaining: 299930\r\nx-ratelimit-reset: 3\r\nx-ingress-proxy: true\r\nx-roblox-edge: c086\r\nreport-to: {\"group\":\"network-errors\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://ncs.roblox.com/upload\"}]}\r\nnel: {\"report_to\":\"network-errors\",\"max_age\":604800,\"success_fraction\":0.001,\"failure_fraction\":1}\r\ncache-control: max-age=31536000\r\nexpires: Mon, 27 Sep 2027 06:27:06 GMT\r\ndate: Sun, 27 Sep 2026 06:27:06 GMT\r\nakamai-request-bc: [a=23.36.76.199,b=1572784681,c=g,n=NO__OSLO,o=20940],[c=c,n=SE_AB_STOCKHOLM,o=20940]\r\naccess-control-allow-methods: GET\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":87124,"size_decoded":88104,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGB, non-interlaced","md5":"7d3c6088f05833294cec1f496f1fd439","sha1":"4aba94b946cdeb6f6cbca27885623437aa09f54b","sha256":"f0a8750dd742347ef9d52bcd5cb27c9b7959b19fdb25879f4b2efc4e3e48ac80","sha512":"2d426147ff03369d707b90f706d56fc8d91e823dae5b71c9eda617f92c053149613a416e0fc169235fe952884c931e95f6ce3330bc36717e5e4debe37a23511c","ssdeep":"1536:C+4N+T4TOH9s3D6Kt8lUk4ygV+LlJKDxcgilFMF0y2TB1ySnuYvzHCYe:2N+T4623DZilri+3EygeH0YvOT","tlshash":"008312702d7ca1d04a5f3630be504b7e5961a0861f0ffd6748ecb8d9f0ae69a91c49f8","first_seen":"2026-09-27T06:27:52.411097Z","last_seen":"2026-09-27T06:28:09.49968Z","times_seen":2,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":17,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600\u0026family=Inter+Tight:wght@600\u0026family=JetBrains+Mono:wght@400;500\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ads.alterhub.site/","date":"2026-09-27T06:27:05.379Z","timestamp":1790490425379,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:29 GMT","end":"Thu, 03 Dec 2026 19:23:28 GMT"},"fingerprint":{"sha1":"6C:5B:26:B8:8E:09:56:23:73:54:AC:B4:B3:91:75:07:31:24:4F:2D","sha256":"83:FB:4A:3F:88:06:C6:06:CC:A5:92:12:C8:C2:89:BD:56:6A:F9:0D:8F:49:3D:A0:83:3B:7E:53:A1:2C:69:05"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600\u0026family=Inter+Tight:wght@600\u0026family=JetBrains+Mono:wght@400;500\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 27 Sep 2026 06:27:05 GMT\r\ndate: Sun, 27 Sep 2026 06:27:05 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15150,"size_decoded":1694,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"1ed52a530cc5b1e5fc28b60a6f929907","sha1":"eabb8502de851c171e4a31657a41cee59cb3807c","sha256":"58c028dd9fcac2fc7af733220529648802bebfdea88a688567dc60df516f464d","sha512":"a24600613c6d251acdc1054e511dd228e28395170828df3321f965a58ff32e9622ee00440fe3c7f4e0cb7ed4d36cc05fd844f413649a89e33ea44934b9f2b9f3","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlVtXGjI3CsWTNKG+7p3ZAXYjG9Up3qnt:vXuM0pbfQOGCE","tlshash":"d762cb91002ba400ab831cc673cf7e3aad8e51466085d5b99ffe0d89aceec66537875d","first_seen":"2026-09-27T06:27:52.41365Z","last_seen":"2026-09-27T06:30:56.974658Z","times_seen":4,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":28,"send":0,"wait":45,"receive":0,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ads.alterhub.site/api/weao","fqdn":"ads.alterhub.site","domain":"alterhub.site","tld":"site"},"ip":{"addr":"104.21.42.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ads.alterhub.site/","date":"2026-09-27T06:27:05.602Z","timestamp":1790490425602,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alterhub.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 00:28:34 GMT","end":"Sat, 07 Nov 2026 01:28:30 GMT"},"fingerprint":{"sha1":"CC:30:2C:31:6D:59:8D:61:CD:11:F9:93:CE:16:C0:86:EE:F5:4A:5A","sha256":"FD:96:F8:0E:8C:08:48:55:A0:F2:69:BB:EA:8B:3A:98:9A:71:49:5F:30:C6:90:E1:9F:D3:7F:54:A3:38:1A:B6"}}},"request":{"raw":"GET /api/weao HTTP/1.1\r\nHost: ads.alterhub.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nage: 0\r\ncache-control: public\r\ncontent-encoding: br\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; frame-src 'self' https: data: blob:; media-src 'self' https: data: blob:; connect-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self' https:;\r\ncontent-type: application/json; charset=utf-8\r\ndate: Sun, 27 Sep 2026 06:27:05 GMT\r\netag: W/\"23e8-X7ks4fvb7OblJlOK6+pkR+zlzWA\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::f28r2-1790490425631-78b61c3a0ffb\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=06X%2Fv%2FCcNsi6EyMzZalWJE3kkgpZB6aBr9zzXYGvwfidXFJIO%2F0EYSMwwFHMAiMiPxeTpuiWAw6c17uuUUBW%2BYbINGGWKaecjnMFsN3DyEP7F2UT033u4oWSLZWpugHSmN4q7w%3D%3D\"}]}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncf-ray: a41870c809e156a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9192,"size_decoded":3169,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b622e24f3e511575b163d21d14bce590","sha1":"5fb92ce1fbdbece6e526538aebea6447ece5cd60","sha256":"5e4b20dad5bdb793f940c75d9622ce5826ff6744d7a0c565c61e8e250c33297b","sha512":"eb64b2600f05a60c99e77bd51335b5bf737a10871da3e806e406b521d3bd430048cea7244285948adf96ffa3e1e5d822da18ab77cac99cfd0adf10206b419a5d","ssdeep":"192:MEwOXQt9hqj6YPsYhVexVIiZn1iFBpe1C8KJ:M+XO9hqjlPsYhVkVIiZnwFBpOC8KJ","tlshash":"ed12be7f06b49dbd87281f94c18b3d88f31f71bfd5c9694ae28a490961fd0bb2125127","first_seen":"2026-09-27T06:27:52.415644Z","last_seen":"2026-09-27T06:30:56.944749Z","times_seen":4,"resource_available":true,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ads.alterhub.site/cdn-cgi/challenge-platform/h/b/jsd/oneshot/d76008a69eab/0.9264352749421071:1790488826:y8DHsLbh9yAPDSfWTL9TGd2nW_3eWITLCgy9T2faj_I/a41870c2e98256a9","fqdn":"ads.alterhub.site","domain":"alterhub.site","tld":"site"},"ip":{"addr":"104.21.42.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ads.alterhub.site/","date":"2026-09-27T06:27:05.759Z","timestamp":1790490425759,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alterhub.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 00:28:34 GMT","end":"Sat, 07 Nov 2026 01:28:30 GMT"},"fingerprint":{"sha1":"CC:30:2C:31:6D:59:8D:61:CD:11:F9:93:CE:16:C0:86:EE:F5:4A:5A","sha256":"FD:96:F8:0E:8C:08:48:55:A0:F2:69:BB:EA:8B:3A:98:9A:71:49:5F:30:C6:90:E1:9F:D3:7F:54:A3:38:1A:B6"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/jsd/oneshot/d76008a69eab/0.9264352749421071:1790488826:y8DHsLbh9yAPDSfWTL9TGd2nW_3eWITLCgy9T2faj_I/a41870c2e98256a9 HTTP/1.1\r\nHost: ads.alterhub.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 13823\r\nOrigin: https://ads.alterhub.site\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ads.alterhub.site/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":13823,"data":"le9h5bvtXd55Cyv3tXSpFsguuVErmoq1AcSeH$rjySqzTuQmXoSsmAlEg96hygRGPHp4nUC1EKyiNTRJT0JMdkr7E$g0yHt1dgrFEVUyxneFX49zN7+D4AH$U80E$NkerNnzzaZwalG+fN9dvE4FP1NFk6tVImnghIzhobP3jR0COQD3V4IjSIxbm4yBAYVa3Q6L9mh-IbbxtrLooGwivvwhB43umCuy9T+wVsgq+0ppFYMJ2Z$9Dy4wu+cdOEKgLH0HkuTIVCu7tCNCHZu5Af-rESk+z+0y8sBbBZ2zl3HTDhJg8Fc5ECyNDex0cpydrYllewX8ZOM+3oSiz3ZKSVwepn+AebtAzuZFpXneoZUamjv48QLGXc3fnC8wbS+akoiHrpP-+szlsFsjjYIomrFXj1bs-FAnL-CjuQAd-QQzV5QEmgPRGpegnCEx9m1yL6bxMM34SivU$5lK4BORGEKHro0ppktNY43ddehMwZx5Gv3perZIsaYq6UJ2B8djLrZgZS2sztxLncCj3RtyRf9VGu4xLA1LAVandbawy61zDAXwT4cT7LvQXJ5mfqHoG4A5UAsXdpr-bxMg9$vFgAZonHDjH-+VpeQChI$fDYLYBB5hXVwvoRUOljdGmcDc$ugq4woHeAllZxyKjAifKMSY3Vl9VZGEQKiSbS9qKAmxp7rkZVPx3n95s9lKo45MHGfk3epobKdb5qD6YXtf$ZDXzcsNVfZ9+4lfnSrsgAMwjDkQvM5fYrjsS8a+ZUSjotNDIIEEGtZbSMda23-cTyt7fQsVyP53Hum713i+P89t0QR+a$7sS5Cku83chlhXgke9M7Mnob1o6$TLZQxI6CCRCgKlwK5Ub4NfPVeUD0YGT8pd1+hhblc-oNN+c-moh4$0U-M0nivxplxu-MNzYkDOGhkiVu4d-u9l4YrpsPwFQBj7-kXbmoRe$jdVGQcOp+kRCQRDon0rzd$cEa1Il6$4z0sBM8xELm0tRfl+mMX2G+5EF5vx6VGFggRm-kCSd9w2nzFLErqizyxHD4j8LmNYP8SRfwDFub79sFPwF2KmUGU4+Ahh8edO9HZr8SiXjgCv-DGvIGIB2aV1n0pzNZ5A4Tyvbx0K2rV8RS7hC+74lC9fZ2eoIdkfApT4Zhi25mqCMn0nxSVVUbCfpU3kiq$bv9+rpNRvtKCLeQjuZhKvFI2OHlcGNFUCa9Jj4pQwNzUbpOr7EbNuj+Vs0PkYYF0+$3QMnV7EJAiSPDEQdeLqi36cp4JiMf418eXxxkK0GQ7DV$P$cz26axVaqzEkKUG$kXuhqT6kuYp1w+jHfOVQ+8oktEfblKkDINhrOnx6tPBCPg4aBZwP3irt0rGTrkk-xLAL6kZQwtmhUbk8sx4bCy2J0xBnHa+hjOFddhpkb6FpQHe5Va30A-gZr-c+autD663Zd8mU1i$E+MD-VjVhYkOl-iqHZNhgzQ53ionLC1QdG2bvoMShi$OJBucheG9wH+iqgwVbfAjEL+qr2GCv0zjVvH1ZDaZ8MVYF6hktz1i9PaMN989VZEgU36UGVxNxy5nuJIQ31EoYj0Q6MgBEYLUZRO6v3F3-B+RVsbTMKSHLQBIC9oG6HLe7XclM0rDu-QSHFf$L1o7g-xoBe9IrJ7j$ZFdE0JoYqRRytg-Vn6jTmzkrgyoqUkaOkisc9ppwdxGfieqUVzgtVfAPFiXV4wccqyaR8XHwPALpZ2ONMGD8$lDzAV88YrsIYXl$A98hbKUZZihcjGgY-dNEcsHi2OEu7bDVTHLBBJKXHnYF01uN9SvLqoBC9Uf$7AltydpxZigIQp$1$tGnkdjtUXlVUzQJ-hNmCPOz68w9a4G-G5noizh6fUkRCQQSe592vbgciHrEDGb-pYm4DwJb-T1Db5KkF+R4vmtnkfh+A1jj0a23o3X2cev-6U3wFiZUl4HkgYLUyZ1OudHXpenDgyJFhIbCN9F14tllRLfihIvoFqsQLwgH+-lIiUJ1bgkG6yn5+jEjub1a$7ukL1KoTioDdRj35E2qPdbkBXOYLPP-ypEpIGwUPY4xreX3VSdTlpmzJtIi2GBsk0I60CUbgUSqRQM1ICRgKKXQ-a-uoDjM5YJ1DkSS6plHnzf3ycGfJIOFNYdCOqn9H6SnvSGrhZx6ZIj2jw1ihb0gbgtzLXEYCPYOBZZTdD$n0mIw+3GjB9q9iFas7TwIQgAyXK6o-4mHNLvvG+SqCmZOp9K43UUE5eLL9rwufVqyhZSLYwKbJ8swvf3zN-x5SM5hmi5CBtKcDjNfyKvfND-pNnpzUJsRABDsM+9hv4tuxbl0KlnH17bCgB0nqQGyGr0yMQ7q7XidzDQY6ORRH05a3VV46j3l8qO1PloM$XCe$AkjONC9S0C5uBQ87+9OuUan78LK6Jm0vrCYOvyuBnoHgYTgyU-MCmbUorTD3acVvhIUca$tpSO9h8u3hF1b4HptSpsGKoigzsHAncAISdkSMp81ObgExJG1oJxXr0M4peAnBcuHvv-2Kr-z4sgJOHHBEkGu03365GQ9eFtareDFyErbnQ1CVcT$xgr08XcNRMFdtG9$14hELXR1XN8tQ7oXFB+$fAMaqMuE3JFv0cwneS++NzYh4UhV5OXjSb9v3RLpQJtFVtSPFvwu8-sl$8jzbeiNJR$fymU18pJ7CM0b63rcOg-x-spgfOLy08N8JaQC3g-L5IxkQh5csg2J0G7LL809PJs2+2aAM8NMKTUk9lUlcfY6MZL79ZDLoAacQBVJ$+YuDOcdUKC5YZOd7xxwaJNqwVOjQkPpb11n-d-OHOnnUC6frLOIXb+3EeMiRAhGwegm+7LimHfOXjXzBfSfipsn14Pme0K7RZq2HTnGvQ379xZlbGY-ID0XJch2AGHYw9xAH8DZxb5D1dqR7xMAN9K3ewXh8KjXQ4tIkJbDdbMlFAtK9ack5oHi1P2FA0ZpXKJC+dqaPOoRKFvtC-8a8nSBq+3+ngxpq5-5f3ZaziNi$z$ie93aIZvhuKfMtqrcbpJcpUtykeyGTSEebQDGJzsK0KZ6rkEwVMTv86ZKaNhZK80vvdrC2CCs6-E28D-w3razL40lUHr4bhTlMwbt2QFfSMlp71zjVMPYlE7SgJEV3vwjRBsX9-4F2u$u1g7sTbGKx5TfmS8jkb7IkM06L2J7N1IQ18VEKEttMRNkIxQX5w4Z69vC2EpYnMAfca9a+AUDHpHS$hZ97VKv$60izhtKR6Dpx8wjaxAyzD8oe7SV6e43n8DPB3XoH-8$fR5MfMxFeDm3Ym9ncoBJFNb-Y3GbU2zxwpO1+CwwRH9B8xhy2V7jb2J2XnTM7EgnMCcpiDrQwRa9LHr2vyeAmIrP5ZxAMlD0RACEmcUx8xkATiwPYxc6I63Gelqm01eEtjT-b4Z+1ps5gNJdGaxH$9Gq1V0nQ60oIf0j4CbG7TE98mytw$zyzPNQO39DyQhR2z3u6-s4E9OMT-ZFowTn0anYwiULbJ4RPmh6bAxinG$$80UvSKmaH66PpYoOQKcwAYqYXHwV3D-6k$e8gaHj3uAZCP8fJc+JR4PEdIr0ai8dhY9oHOkos-5vT5xsBy-wS9-Uw-ZS$XRfAvM9BABK0AhsvwV$BAXZ7GrJ8baKnULurKPsnZFlPo8+GT3RzcV1dya03YzAHC4FKybT1gf9BgCRXrBK6wMk4wnNr4wsHnSIn$KBEFXYISk3Tkl1ePo-KsvcFfpicQgmQGsgPI0gzc2ZgD8yTl1Yf9E$aNM8BJSnyvNPpO1Snob6i+MXd7kdV7MrQq-yKnEmwYQ9AG9LpgOBqYjuhv7DNXkcclLO$Sx+d+dCqiyXT18-PUUBOVzSzlP-buSwSufJrxH-0XtrrInqdwCDRDq2Lm4CzvFoUN1aFZyuwDlhrE2nRoJ5uQtbG7H59JnkF7+R-m$R9As4N5dSP1HOmkR1RTJORCYAzSRl40fAxAzNJj-1aU2b8HcR$92qMu9C+6PDHQrOBTf-HEKH4f4n$Qf2O6v4-Mw-737GGyxJsj-gqFCPvRTDhnhak9geQZ3FKltB2q7Zjbi5Ov4OhVLtwxYtSItghV0ZPk6EQxaV2J2z-eZklzj7xFHye8cQ0jNQSh1jiH38Xnf5mgm2uB-0S91bQBT0ztS1j6mZiJe7fEhqu-4QgmRoSE6ZMAUMEiOfunUfndyi2Ov0huew9UBZQcg2wsmvXQIxDzG+13l8MREjsygAr+coi$BIV5I94fz+o50as6ePTIKtV8Bpy5VzGaJgMraAoHc5mVfDYcifJ0IldqwZcKBsKtle53ucVxnGU2cpDM3oPMQ29nzU92qTcBJxMAV56UJItqQ+xcQhtHbfuAEyZqMcbrh5zpyXZ3kH7coEAkEfOEgrNU5wqfJSvQZsFAjQXP5DRpbFrybkIfUvVcpv9SFvYDp$Etd8Vj1Dl9Iv-BmKXfs9xuUiOc5GOZgHkDt+s5MPxKdSy7kJZj+f0$4rVp3E$RXcQvUqfXRhV7aDwnnYqrexJ+r2Z8DGeXzlZvXx2gMYDYAoRhcQkzHK5aoshG2f8XP7tYa6mI6nIBA8pMyvynH0zSTslSp45rj8gFMzJy$LuzurgkDmf3SF58Y00uVfyA5DNV2UCRiRwJ$NJLEAXa$4HGmU9aYGnYbN1DpalB4DdCbd9FRQ6EgXZxBEHImxTazpnjr$r2-IVimvDaq0wG+LtmTyOO0+2H-RSzO6XR9oM51k95FD7Y$pGisA3KGqVT-s8moaAafzJId$RzbL-$aFtpu7UtnfkiZN727rtQuJuvrg8UtSCNTfTNXzIYQqNYx6lwdYP95np4Lstjej8ZnDlcpGtfi50wDMwA84Sj4oQ1RkLtIS6dRzGerx9SOJ7RIH9iS+d+0VYNf8E2y6zVZV3pcIRAMFIOvzXOzT$5NF-ayQVcxkf29Fhijf03BAM$8b3CxfaE4pi$IKUr--hjXls75Z6FDnwpVmm6BrHlYDRDGxhZDzhNzEE9YquaknzyfcNsLfPe2syApiIde8UeLZisk1gFAJyQUsIFrGE6YM4rzFtY4lLsZZPwvK8HvcHo$tHwRRyzIjsylx9+pvnkIuw36Ex9NbkbvKFrn958gPzqR1BF3BadPJ+Gm5gwb5YbelxSvYFqoGb3F0uO9q+N7OOF6+mPPjFhd2wP4HAIrHFMkxw7Xd6kzP4g9triGjKstjhVCzxBjn4IqDmBbzxJrRPtwMqgFep-PhA+vOG9V-uRmBePFQfOi4MTepnh0PSZcIAeRMq2wP5t-a2TswLcKGKOs9Flr9JCHfl21XXSSXgPNamxeIahG+2h6AE$GU94fu2ehJpG6INXorvl0H8HB2Z2hMZzP9m0PM$setXETpk952+58-CNKLnCuR-jPV05Ln$bfuExAULsBE-TZsZX4Amd9Eb9zukUQ4IKIz+8AOI5SN8Q6BL62qRpDSXdaVhi$mwTViY1bLGPMaLKBANvpEcKGiSqRIqkOKIScJiUoRHlRyGSTd4ubBND-Yit3I3Io5MTPeLQ2jRHBEPjMH0mI9CktGeAeJ-MkZ12m7V9Hlfe6IZEQbc6y1wXDC0zRpdYIqQ+1ob-remTD1k$TvS6vAMQFF+at4UPRPUMivDaUVKBImlcX-zVwTLOVsGZ4pMod2vrYUHcHmFep$fds836KT5cFhMGP6iqwoBkrshyKpmNB+4E2F7xdi0X-mGt-BQKtHxXGAq2jbz5fuxuI-4fS+DP+f$ru4inRZ$r5gch$oUR+hF0Ee1GHrc6cE$hyjR83M1DgN86gY9I6puw1uycfthG5sBHRrEkVYwOp94s-JuyZpXYLRcizjLhDKgy+yBvG2p5XiONhjEolFFxCB7U6bgBmQpLCgwYaAtHvd3bJl7V-mi$X9430jq0j7QTgVCDnUmpltXylb2zObl34V1Li5dmi95lMr00osejN1bOiuMvNrSXiOLs+8gbn9X3aGFX9MPQBc2X+bSA49UTwMMnfkdQXFt2qmhH4ucwxUNe7UPSCIcflZDHewTuteoxTRmgTB5DynY2URS5rDrSCPEXzXPkF1M6iqqIct3njaLyHTvLFOYS019XCR1MIm0CFBpTr7N9wA9ICpMGaGkxC4eLz9HVMl1soX06aKKfFpYt-bivhOYSmFiosiCeUpBdgXPYObP5ogaQLBQ-$ciRE1lVnCN1R0AP1zeYCNwrrxVy6nn1b-UTO3zvPolMHC$79PMN3Rz19nRf-7EUj2eRo3vptS4xtGC06yC0lhXE94ZQstTHMIUsdsyoewEAkhhQMByLGvTVjyf6wcjOpecZudrLZvG4Tz7hdpEc86dLspo6oG$MAJRPN8PsXjFfmA0Bapa98pFfFK1EyF5V4+BlVB6npIdmlSEQeYN-i-D6Cc6TpORTYJNU6gsIpKF6bQoDPbCohqfHzjHmdf8doSRPS444JGCEYgPD8U02TrQfgV3gd5Rb3CIeGamzqwhJ4MjO6XAXkzLj7KJDKmJgvKlOHezJyMu4-n+MX$mhK9LV24c734NkpPEB$u7YzV5C4wJqhsde2JL7-9I1tl9TrSooMZ2uQmzXUIXr1LTJ4+n5o86McROtgqTjJR3axeNbovnOYhR4UzSFk7wDvxv64I7TseEIVXCNXbnpfs66P0C4SVen$2xbxfCQw1Ub5F3A1aEC+omJ-ZgBJxvNw59iBEn97K5t1IlPu06FDTwLvOJVXhXuRgifgv6w7eB0hPjdTLhzlreihFhsVRsGbiCgEosTM+LpxqOcq+AS4TOyR+QGd5uHSkVZPKumrmyNjq6mLrNAm83APbk3lqO5Ohs+Sw83NQpgU6U2ggRyUBgf9bn1ggMmX3psuIFdVdvqEaYEw2a+8oQji3TDuQST-ZQYONLh+XuAvIBboXXnPCBB6e1vORd3UcloYCmlkmPzQU4ElfVR4eqLXqSM2jdqw81kVEPbgKuozIyozQ0+CpMmledXqrBN2bb0kYCjsIKINfS4509Us209bvTm+XkP+hA-i8gHtYgcJGYGfa0J4KEEBhjxKQh-vwK+2MVYQNg5HX5p4E5Bz6A0Os5MYIukDKRfgRlNgweUcKh5kkY3gtr3G2UuAgPJwNNfMNgMhqvnYdayCxw5RwGwM6hVDBsn$FFO5zlHTDkpqtVwTxbLlbUScE7XbYuH2i+2TaH4h6FXY13gNEkkMrmH$7axyptMnhKqtuYJmuHwb0gTBEAXO-ihAuuFMpfn466GY4R-IVvupHOiiK6uYsuiJCPo0-9+TY+XfqxBpbLVZ+dJa0lbeRT-x4i5bSdfRK525xisEMQCywu9pA0uPEngNFwc1IeCHKdx8pOtN8zM7MYTlXGv-xvYGIz2opROsui9Pjk9gvtK8-XxBMo1-XccZZeDsdexv7xqz0L-obyXDPPsppOB7UJTuXgL0U+1Eq4Ksu1+3y0w98NAtZJLVSCEMNqQtdF39A9E0-zSAZ6itXQ+rsfbXhCQ688NR63laxq3YimSSs34bqaKrzbqtEzJZuP8Rn72y074nddRCUZXiR6ayYkoN9FP-XHliGUV1hLq499T0GH5jsRxmyCy1d-4LERLBE8jM05U1HrqF6STagUqGgx2L2gmhHT5sj7RE+fgpFZJJMdnbstHUoKMPjF6mZHPUMhLNy7OtV$PU9a4pxugNk9y$RUjVfgSIj8pImM$GX7d7DCb76czKkBt-aMwF21w-bcQQp6f-AU9Kdj7szghAzby1BU3F82YxUAzUjPNJNSFlXIKkH$zmH6tIAXTMGoC67ZB-+cCyEKvrztaqlFY+AlM5A1nTxTpvG30u0-srymOVrj2h9MtH7nLvDyNbezcEDQBLojrJUsIk5gxEkre12wAN6yJuHxmNkrwm2Lounoer+XbhMtm1YpKCnkbaKpJ7qeEAEF9o4q0OmSfX951HPrGQjDB4RS4NmyXtXLNr5EllD7hOcrCkNjROvVH1Qd2qs+6L4C93+pg0l3VOHjcPG2h2Sa9ITRCuqSc4IpjpTCf0AGRHlpKbgBJwr5t6Jiytgw7z2HSit8zNr5GKp-w$RFELKTS2BEuToHJZ3blNcffZ+rHlodlP3rZKEegi3OnTc85QTrY0PVCF+5rPqwzF-BUB-ODjiZeSKROKjwbsJsFTC-K9DQePcMuHnOQKZJ5LExTLimDMwd10wZaFfHR-UKTbhChkq3zYfEkl2$$vXuRQ$Qi$VDjyejuM-3CixP8veMvajTMFCelxLSyqpwHfsxRi-S1Qo8P2sQfZ4MfeIcZA2$FNvE5dSP0AY-GygfXZkU6MtIr7iJrKEXE3YJzMLmfb7weQ+Kr$jMVhCTDpXvw567uwH4K6YLzPzRHT8+$q2spPxu+dubZz+irQA6rlDlNGcovqJ3a+3andlwhxO7NhRLf953jsV7NVVyGJ2+IepUZIThDm4OYfrp4-tHSwxyvbasOycGys6NJmON$TtL3bExw1KsERQEM-vjYm-n6M9Xm6hmJ6kBRwis7v33h0uK3aau-UyFj3Uum9s6HRpPs+$b57MPknP-f+tIfDDEZRIIntRxBwuG6PISHdazuOiRQkkl0bK5yuXeTwYuY4ZoC-jqDSJRkA3fFAf$sdd19jNrUYaV1f0jXXGGO62QHsVkumQbk5fJb1Npk1KNns5Lq2UoLjsDi08Y-5JpGmr7N$4GOpBkdaUujK0Yfe2nPyqwfIByitnkS19eP7SuAZimx-vpwhvGpp$df2xbpJgi4KF-qGKYbPX$SuXCf07xm7wPnnu8nAUg6UgQUlh4siBj0pO4V8yfEmDtYAeX-6xUD3KTrvYrFy9aD1Lf1FdDieampkPe5DtE2UR+xZbjJ-7Lr2xkCz5T3rp5q2l$onTP8HhYK2YqisOLaosyNMl274dmYgrxFtwIN-lxuT$ZKeUwJl$6JLq+X9S3+41Rt1DAXy-uQ-7QMdLHRep7riDEDEAHPEjbyNu2hw$rfLE12-ySGfFAAtfy3r51+sNtxaGYC7yc2XGm1mj9I9FSigttTyzHVuIKvg0NuwLgX1FfrN8lo5Q0lnuFQL1qK+YcJXbwioKqMIRPmcdRUL4jZiuklpF8t4ouzjCP3jO+A$JZRkcxh$xXC8oLS3JuFzQGRK9v+I6fSzC0xgceXKr6arNb9p1mOK4p-krAoqV8QSYjQCRwEjTXjSoPXtJeAADMumzfJLletdmbFtb20KGJfR2VcNRM0B-2DF0HOzuBr3y4820SRxjYIpnJZ1+X8j9bYd4qScH-A006Hl$Z2t00z7En3f3ZMkuCSt4u5hb-FnvkKtVFSSAMasfbTwZ1Vg0MFqcpn9BkHKqENsgBv63tgLKKjesBRo6Bi$NO1gZH3B+GI1txl$RlQPN$$n1wfha2vo0X3MbTD$y+v$BthHcv8fcGI67oLCbRJfvsZJTQ1xoaZt-Om1nyqcJ4aewx13j8S4qk3ToYqN5pYjiy4Z7oGGinsaUKr3Ja1XSnnDbjwV-ANVII8JSDsqL-9t0iBCY6ngha4hk69eeorVpp4ETwGSqF7wVogngpHH7mVkpH8buvbaQ9Cpu22HKl5D1mAD$qVFMjPlirOUjOJPExYUl7$xr$QtxtPAjs9IsKSP51n+VrJxp2vNmiQ6YHP75FClIx2KEPTaGXyN8Arcsj398F$RPu8nbnPYZEyA45QrJzg5Qx66KDz6Mv5AVopLmt1ZtR5xzREwomTEGTQHp8C9klvgH-1VLaG-d6S$l1HSsbC-ood0KIS19qSA58uUdYA1D5+FBubm+DlMCAMn2QBoaZOQxh05jUGnmAcYdaMY6HLRJJuTJmn$xT3xx2qhTTQKnZq879CYJnQN$+O-GLFBi9l0-TzyI4CMvKCAfpHfbCT65CiR6ZN5IPXJSMam7Dxx1ULO-$LkSaJ3yoj8RHbIlFGhYvMt5evYFS8F-mizJVmd$UG3LlmmZc3DOGTHRx13rSsvrckeolF8BuBUNIksaccpcGfeBvXps9itl4SdxvcJlgFwME+mFzyA7f0R7CgRR5136K6IGKMFaZhs4RZfpXTkr5u-uR-nYxRtroMc8lRiksE1Z5mxbLKzxM$mGvyp4VLY3YkJ7MwF9zYo+KDmkzvJ8OyEF8YIqjJfI9GwF+bVLSK08YMGfFDveYJ3j3-Bo4Q11++tAMEuY7$x9HckV+V1Nx0P6nYVhVCB9bbl88eXMC+S7hsofe51M0d5grdwPiK+Ba5LmDDoYhVcNlGOtDncyDrbwluKZ1ElzUk9rwDRLk1jAbJAJirx06hvQO06sCCJcNAI2vLiihL0FJF3dBrr3HZQXrhn5CGVttCI5KE1hZedfEQAmIv-LN69Kvtj3qvVGL0zFFCERSj7q-owzsz91G+k9wkd+mNS0RV+2Q4MD$2x8hwSKw02zvfwscPGBNongHM82JARGkEY9+LCddmfknyFwrg4fb42EBAC$Ixsp+YHNZzcY9nLNwADO8irSsB1+vTk$maiZMUH6bPo1qlU$-Dx8bINFQJOCA3wBjtcQpZIjt3v1h$kemXc3jaAYl3+CbwaYymxjq7MgpmcV3u4O3QcR7-AGubdsvPj-5UxVxpuOUny9Q1eYxAG3TXQyp8b11cPUSd8v4XYuKhO8lfkp0lvvnaxiXz7fLgCpvqQVHLY+LFJ84BhnS0udB5eN18jVKdgCP12EYosh9-36fR$7+9VHq5KFmRDjpfQsRqluZhpHd9SNn0HRKkkUhkb5BQuU2igCaUFp4cXGsXOI472bJn8VaPAyfCuJODFYGxZ9oFCvrK1-vcb0IzXYN+0HOEeUkkh6$cL-xRYvjHnlvk35UI6sgHfAzpqblitbuYTpDQeK5-Bg503fhPt6FpTsUg56Lo4Ewb704Z-STFRRSikS8VbSOKSXgiLPCyLmVcl+TrOy0yT4aFBVyGKZKzGmxClR1EpVDwwGFqrpikBae7FvHRBwi57Qaxp1lasZXyPKxZCTG-l7VGRX8wH4L3Yf8y4x7ViugePjnMywO847OyQpTjrqXMD77DqImc8F5EHy3+FhLPO1oxvhEptT1UePRO4tO1O75NesGNrFhMoefeGSQQyid-Vb7vLmwN33D8YroKcFARivfHe4hnkKC11RsZZUVNxTMfoQURDG72zEH3Mtw+e5dseaHisy-z5MQmhoa2jES0I0O0oS20P10Yfe3iJu3v8r2cepdHnf27fFozVEs$Uep-C0bPVhu7SCREcJ7TIlhGalGoz3KZdRxALgtJdM9SOjh+YoqJxnhnwPmXTmv1fR7J2TuT$yt-51ieORRXv$6TeLoZjmuAb+0K-UOviT+R2vGCVHotHl5fd9K0oa9NpVf8NGQU4je83X5IKZ9f+1iJZUYy2IH146RGAfrtnbHLXRFDFwp3Jhvi8igo0JvaSNJBCEqj4+hM1UfY07uQC1tqUowthJSaZ4dxg8+Y0HuK-YlhaeEq+Gn-Evkmd3a6xktlDvG0TcNO2VV4fCyPky6srFnddsbDMa8gf4orwTkiZA07yJOcA5UJ+zQYY30z8Ter5H9QkbBiwj45dcl2FrwgGaNCvCeF9nsj$xMqTGwt7zODaXAVRqDpufCYDSwLqfl2Y3jKue3-q9O7L2ocvGQfKtKfSeZKsIwoj+5xNVfPpG9iDt7yvefha340ziL-mr$TmstyXUx0F6GNtqOZMXbZEQILrEwdDt753B-tUXF$T6HtAECP$x21NcwJblnRrZLUMI$xj-8iJnJQ+RaKem1QpZQHcbu4gRGoNlUQSJMBiHGa-SpvDvQ7aN92e1gisF9iJALo1wZqAmerperc72iNi3pXnVrD4g03NOtfhA5oNKIwYq8ZSFa6f+MtZXlitndOAC344t114DI48gADalIX6s$IIbgMpLZsdYesqB5FAImlowUxJ4UbZddjkD6HqAreiIkIJNHMgh8jPjKSsJPgqRZgI3pLIyd4vtgaCD5CDMziPssQ-Z0GfYsAtfdZho5vzwVG71vtgJMs8bfLdwO0pgAf+dnVXvkFe1UhowPRVkb5zS6QdyIwwqCOSq6EVLBR+hu9HxyU5fnEIue1IqgmCfxpQn82qQ+8Cr2korxpKX9Mf063FpXBYJrKGX4I7hU-yaxmgXmkgRAAYRDbg3TEBbTYnxCBpnyUQz8nEeG+-eAieddqnD6LOFsuFz-jM1eOnCq1dNMyz38y5fp1AVYCDT0Nkk9c4BEUgxhKo2u4T+61OXsc4XwXICVUU2F7ohAep2oG2jHEO0LBRuZDBk1O2KtZvdkisf12G9HM-lTTAExS6PEu1yqtP21mqBUUn0LuBYs9KPfoXU7XjFlkcjvJlF04DSXy6$SzbLL6UrLgmzU41eIu5kvDQBPssXm9yD22YfPYXlt068I5l9vxTmeV$SEuCFn4$XsXoqu+MDDhxg6GVB9miNMrY25p4zBx-XJUGiU4r408eHF6QI5l$gOutctyu82Bc9xFVt+Bv76mzp8GDPN7EXH5njVnr8DHbwNwVrRFCndiA2aMDUOf61gyt7kCK-Q$N1GKjtNKMhFOlDkv3VsOv7JQne4mLw3O89Ejusq4GD7DzyFaU2QBvgACDYunXz9XFjrX28oU9K$mgHxYD3gakM+BUeDuq+h+i45IJkuuOpVMef4i-DdGSbwC50NwddTMA5$BiBFfRdKjVqnS44sNypr6NpI$GDyJVn6+PR3mBMt3kyVbkdNvmU063K0iFpBCCIJqtxYJ-oUXbM0-8vEJlmXsaHMtvV56hlPr79dO7NrDZm-mguwm8FGSyprlZxrJA3F0+bXT+GIR3$FLYsA-3l5oOGUineFXw$a$073MXl4lOzZCxNoVlmXG$iqHUnw6Jt4$FvuGgG1PfbTsAp$A5T$z9meJLrnfAqFNoAIP7j7U$0uSqTqlgiVZGeR9leDzRFS6-f2mB3OMGqw2h4Kh$rh6EVVoryXKGaciwlkXxZ2rXHdTLuqhh9MAil0K-sctXCOlei9jVvIwiiYOmR59+aefDc5uLrE116Lnajf0EQN3CXHiseHkl2Rf$KKSo4sfijVhTiLeyuVpj85krOC4er7sYBle0Rnj4zoU7oyCUbLg1KS8sIpNhRy1aNjMiFPl2jz3h3FrZIfPvTNdlHTvJcy7tlak6tfhjG57+dSUwvy48gtms40QepyKRJK4EcumItoUPL$NDFDLN6kl3RqV4jEk+e-bAYDbak3bkfnIiuhve5JFP4EafR4Hr2yfmNa-3S-LkprS-6aY$CyLU6ej4VHcmHDpQSh7MSGB1Q4cszv8Kn-KFYVX-z7I7FTqIj5IsvdREzIURi9BuZa7dcdU-ZrbEf2iyzg-Fbg3nwL2tYBnPFD874Nu0vhnQkG+8ECBr+SU-+SFMz0-KpLKv-bdpqRPDojtDY9zFVPePyT8FetIICcDGDV39Z$ka6+wQERv8UlVHKzIdB-oSfGa6tE0Y0gwwPIFEIh2SdT-lu63XH1X2KqrU0pvf4ykAGQ66yfO8iaBlQgd+9iacgwDPMT8kOl9HK5vMhTjllsYUh8NEllHVmZJ6lAXhMh+rl1KCc$VH4i56AF$-NN9u6utn6BFhNbP8FvO6p47PceEe85CECUIOD7RgmCsR0aLIplSvgwVnIg6mEt+yJ47T1SQTRwBlabg21TnIq0gDJh5ZGx2anAkVkyb7NRJQ2MQohA+kEXnzL1d7nJXR5589yBANA-SNh8FiZ5Gm-F-n1c+kKashy5il9wS87-s6iz8Uc5MzyNg5xz5tQ0YkopVd4$HRCj6qQ35gJOovvEIfpFyCHAi1gKqZ4yobu-Lvjwru7SaacJKpH+Sv4nTTk9CuyidhbQEOxUaY2bwoXZt08aAEl-EQkxGtxIaVQ0ecatbnOehO"}},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-out-s: 6uQkFTx3uzlzJJSPhdm4tlhmjdhzKXkf7kehvlxM7AtgaN1YnDcAkXYGdP4A0XM96Oh2p7X2MeVb1DABf5WDXPk/TGfHzwYfVGX/JLv6WLW4EGS60yxUMy3gTFmcJ2u06H7oNu41x6PIZ4iZLPcJ52wrvOg7LksNYkH95w21TqmDQzL81/EavI2rc8/R8JkdIjh3/7nmf+2sQaw0LAZDZrWdrDuXPbVaHvbpB8fDSLkTs0s72dWtROQq2kWlxtNtZKBAz/RbjHaiHo8jGP2v1+lLRmhae3VEUlR6F/X6gMNDHJAQ0cOgkx660bz8s73IfbvWngQdHtl5pY8OjbptvtvlAnr7yYdBxwRooJjDF2JXtM9Ti/TeYkk00fdmNEnVmA1DwRRrI89ICbgFIoNV7MRXg7XLRV+aYbFb1YvBbMUUamobiYvC7PRUjk0z6RGaoEGlc/4AJbu0zNElhaigUXi6JYFUtnv/XlUsQJ255icIkV2qLi562Ccj0L2anOazcNl5qGB8RHVkLT0EoinDBA==$iAWYopvSW+HiueM7S9TWZg==\r\nset-cookie: cf_clearance=cUPxGHX3J7dS20wMVOqgxutUGcytGbqXuq6AuboDOj4-1790490425-1.2.1.1-vQ8raaAFa5D8uXCYUxip_7065fQ5BngNItyCYK1ylXQI9tBYYGoyHSjhRqri6TZgUtRXj8kUZiodg9T1XBP4QIjBX5kAs0Eh_gZQjSL3e0cNRtOsd81hi1bxU9JS8A3xWKESiuJTZZ265fZCB6sTG_b7tIuiDL9gIouFKbL3pxzk1ETxcM1z40WrC9rcFVQq6OPxQxVEQ9opljv5_LIllJhvQkrxHAiOPJOchp.bkC2LQMULTFBIzUUhPKFVMpIxKoWe6kcM4PHOL2YRlj4T5JC76oKHSE5sZBJ24h5nouWEgEBWA2I2e5HqtQD9nAYpG1FVw6SI0ck3iiscHDJnnYz2Alt79nAj0Q5uk6MeGp0sJb48Ae2OH67i.GVDY8M7yoV.JjiPWibjFELPFWYxDVSBjcEOjx0BiF67iUorbuE; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=alterhub.site; Expires=Mon, 27 Sep 2027 06:27:05 GMT\r\ntiming-allow-origin: https://ads.alterhub.site\r\ndate: Sun, 27 Sep 2026 06:27:05 GMT\r\nserver-timing: cfExtPri\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a41870c8f9fc56a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":[{"name":"cf_clearance","value":"cUPxGHX3J7dS20wMVOqgxutUGcytGbqXuq6AuboDOj4-1790490425-1.2.1.1-vQ8raaAFa5D8uXCYUxip_7065fQ5BngNItyCYK1ylXQI9tBYYGoyHSjhRqri6TZgUtRXj8kUZiodg9T1XBP4QIjBX5kAs0Eh_gZQjSL3e0cNRtOsd81hi1bxU9JS8A3xWKESiuJTZZ265fZCB6sTG_b7tIuiDL9gIouFKbL3pxzk1ETxcM1z40WrC9rcFVQq6OPxQxVEQ9opljv5_LIllJhvQkrxHAiOPJOchp.bkC2LQMULTFBIzUUhPKFVMpIxKoWe6kcM4PHOL2YRlj4T5JC76oKHSE5sZBJ24h5nouWEgEBWA2I2e5HqtQD9nAYpG1FVw6SI0ck3iiscHDJnnYz2Alt79nAj0Q5uk6MeGp0sJb48Ae2OH67i.GVDY8M7yoV.JjiPWibjFELPFWYxDVSBjcEOjx0BiF67iUorbuE","quoted":false,"path":"/","domain":"alterhub.site","expires":"2027-09-27T06:27:05Z","raw_expires":"Mon, 27 Sep 2027 06:27:05 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":true,"raw":"cf_clearance=cUPxGHX3J7dS20wMVOqgxutUGcytGbqXuq6AuboDOj4-1790490425-1.2.1.1-vQ8raaAFa5D8uXCYUxip_7065fQ5BngNItyCYK1ylXQI9tBYYGoyHSjhRqri6TZgUtRXj8kUZiodg9T1XBP4QIjBX5kAs0Eh_gZQjSL3e0cNRtOsd81hi1bxU9JS8A3xWKESiuJTZZ265fZCB6sTG_b7tIuiDL9gIouFKbL3pxzk1ETxcM1z40WrC9rcFVQq6OPxQxVEQ9opljv5_LIllJhvQkrxHAiOPJOchp.bkC2LQMULTFBIzUUhPKFVMpIxKoWe6kcM4PHOL2YRlj4T5JC76oKHSE5sZBJ24h5nouWEgEBWA2I2e5HqtQD9nAYpG1FVw6SI0ck3iiscHDJnnYz2Alt79nAj0Q5uk6MeGp0sJb48Ae2OH67i.GVDY8M7yoV.JjiPWibjFELPFWYxDVSBjcEOjx0BiF67iUorbuE; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=alterhub.site; Expires=Mon, 27 Sep 2027 06:27:05 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":15977,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T20:43:33.933419Z","times_seen":19037193,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ads.alterhub.site/promoframe.html#k=fdfdd92a59e588025342002253695a24\u0026w=468\u0026h=60\u0026i=u2_746rpa","fqdn":"ads.alterhub.site","domain":"alterhub.site","tld":"site"},"ip":{"addr":"104.21.42.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ads.alterhub.site/","date":"2026-09-27T06:27:05.816Z","timestamp":1790490425816,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alterhub.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 00:28:34 GMT","end":"Sat, 07 Nov 2026 01:28:30 GMT"},"fingerprint":{"sha1":"CC:30:2C:31:6D:59:8D:61:CD:11:F9:93:CE:16:C0:86:EE:F5:4A:5A","sha256":"FD:96:F8:0E:8C:08:48:55:A0:F2:69:BB:EA:8B:3A:98:9A:71:49:5F:30:C6:90:E1:9F:D3:7F:54:A3:38:1A:B6"}}},"request":{"raw":"GET /promoframe.html HTTP/1.1\r\nHost: ads.alterhub.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=cUPxGHX3J7dS20wMVOqgxutUGcytGbqXuq6AuboDOj4-1790490425-1.2.1.1-vQ8raaAFa5D8uXCYUxip_7065fQ5BngNItyCYK1ylXQI9tBYYGoyHSjhRqri6TZgUtRXj8kUZiodg9T1XBP4QIjBX5kAs0Eh_gZQjSL3e0cNRtOsd81hi1bxU9JS8A3xWKESiuJTZZ265fZCB6sTG_b7tIuiDL9gIouFKbL3pxzk1ETxcM1z40WrC9rcFVQq6OPxQxVEQ9opljv5_LIllJhvQkrxHAiOPJOchp.bkC2LQMULTFBIzUUhPKFVMpIxKoWe6kcM4PHOL2YRlj4T5JC76oKHSE5sZBJ24h5nouWEgEBWA2I2e5HqtQD9nAYpG1FVw6SI0ck3iiscHDJnnYz2Alt79nAj0Q5uk6MeGp0sJb48Ae2OH67i.GVDY8M7yoV.JjiPWibjFELPFWYxDVSBjcEOjx0BiF67iUorbuE\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 308 \r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/html\r\ndate: Sun, 27 Sep 2026 06:27:05 GMT\r\nlocation: /promoframe\r\nrefresh: 0;url=/promoframe\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-id: arn1::4jlv2-1790490425828-94ea986a3c78\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4zcR68rgP1QUrvADHHzbJHzOdg%2BKIiKudsW7FB5WLd6HoY0PIFmWagBeN0Pb9feCCnpPiSCbiyJHCZQ2nxMKL0p4CPGI0ZP57xQSaR8ujtjcfG6UyafvABu1snDNtWcoeNs4eg%3D%3D\"}]}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a41870c95a0456a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"308","status_text":"Permanent Redirect","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T20:43:33.933419Z","times_seen":19037193,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pl27873862.effectivecpmnetwork.com/aee874e267daf21ad94938c5960ef7a1/invoke.js","fqdn":"pl27873862.effectivecpmnetwork.com","domain":"effectivecpmnetwork.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ads.alterhub.site/","date":"2026-09-27T06:27:05.943Z","timestamp":1790490425943,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"effectivecpmnetwork.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 23:21:47 GMT","end":"Thu, 10 Dec 2026 23:21:46 GMT"},"fingerprint":{"sha1":"D6:4E:9E:FD:10:D2:53:EF:D6:DD:33:0A:D1:87:5B:BF:58:A8:9E:5C","sha256":"61:27:CD:75:F7:04:8C:96:76:E8:9F:15:C5:CD:AD:BD:7A:43:30:4D:F0:69:33:60:82:74:88:7D:67:1B:9C:D7"}}},"request":{"raw":"GET /aee874e267daf21ad94938c5960ef7a1/invoke.js HTTP/1.1\r\nHost: pl27873862.effectivecpmnetwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 27 Sep 2026 06:27:06 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\naccept-ch: User-Agent,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Platform,Device-Stock-Ua,X-Device-User-Agent,X-Operamini-Phone-Ua,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile,X-Ucbrowser-Device-Ua\r\naccess-control-allow-origin: *\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\nx-envoy-upstream-service-time: 3\r\nHost: pl27873862.effectivecpmnetwork.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: d81814d340c88fb5705bf6cccda6cef9\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":46172,"size_decoded":19086,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (46170), with no line terminators","md5":"f77d7149b3ac6cff1c6630b9cdb91d65","sha1":"616592a1f43eb7366db9729f2a69e4e45b5418e6","sha256":"d1ef658d06c502f6192def6dce051fa7f51fe33efe21a55241c36d1ef046c431","sha512":"58036c169348707ce0756a87b5b5402a37c6b42c7da9de82ddfe9d9951467b2c516e815dd0ca5a545ce2a68c70d437a1216c78f1d5432a0558ca37cf7bbfc336","ssdeep":"768:tmmnugNJEOlhP92QfyREnzrcSzPYYIq9xOEA9Utws8tjJq1z4T4nmo8eI6KChvpz:Umt3UwrcSzPYYIq9x1Wim19ChvXXN+oL","tlshash":"d823c6a47f10db7e57a1e9bf22798c55f1260d8078ccd2c8e13f6dc8698a30a957d938","first_seen":"2026-09-27T06:27:52.418088Z","last_seen":"2026-09-27T06:27:52.418088Z","times_seen":1,"resource_available":true,"data":null}},"time_used":505,"timings":{"blocked":-1,"dns":27,"connect":93,"send":0,"wait":99,"receive":93,"ssl":192},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"pl27873862.effectivecpmnetwork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tr.rbxcdn.com/180DAY-27e15e41978bc93a56536383bde2da41/256/256/Image/Png/noFilter","fqdn":"tr.rbxcdn.com","domain":"rbxcdn.com","tld":"com"},"ip":{"addr":"23.36.76.203","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ads.alterhub.site/","date":"2026-09-27T06:27:06.194Z","timestamp":1790490426194,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rbxcdn.com","organization":""},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 28 May 2026 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"27:09:A3:4D:E5:89:81:97:71:5C:DA:6E:A1:15:02:B9:81:53:59:9D","sha256":"E2:A0:F7:C3:A0:D8:F6:BF:94:31:82:25:B0:5B:5F:FF:B2:E8:DE:3E:58:CD:AA:E2:D6:5A:A0:5E:68:04:7E:EC"}}},"request":{"raw":"GET /180DAY-27e15e41978bc93a56536383bde2da41/256/256/Image/Png/noFilter HTTP/1.1\r\nHost: tr.rbxcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/Png\r\nserver: public-gateway\r\ncontent-length: 76289\r\nstrict-transport-security: max-age=31536000\r\nx-frame-options: SAMEORIGIN\r\nroblox-machine-id: 78dc4c9a-2ee3-1f6b-0c33-2492ee246198\r\nx-envoy-attempt-count: 1\r\nx-envoy-upstream-service-time: 322\r\nx-terms-message: Terms apply https://rblx.co/TOU.\r\nx-ratelimit-limit: 300000, 300000;w=60, 70000\r\nx-ratelimit-remaining: 299977, 70000\r\nx-ratelimit-reset: 17, 0\r\nx-ingress-proxy: true\r\nx-roblox-edge: c085\r\nreport-to: {\"group\":\"network-errors\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://ncs.roblox.com/upload\"}]}\r\nnel: {\"report_to\":\"network-errors\",\"max_age\":604800,\"success_fraction\":0.001,\"failure_fraction\":1}\r\ncache-control: max-age=31536000\r\nexpires: Mon, 27 Sep 2027 06:27:06 GMT\r\ndate: Sun, 27 Sep 2026 06:27:06 GMT\r\nakamai-request-bc: [a=23.36.76.199,b=1572784683,c=g,n=NO__OSLO,o=20940],[c=c,n=SE_AB_STOCKHOLM,o=20940]\r\naccess-control-allow-methods: GET\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":76289,"size_decoded":77287,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGB, non-interlaced","md5":"d896b6853a645b149f47daf5a148d52d","sha1":"4f5fdd6784d79a3e3607b6928f3126eeae8ed51e","sha256":"c85e4b368a5dd4db9aecd8c05d35a807394276436e5931413f79f45f485941f0","sha512":"68360b69dcbd669369b91a3af758939183d8665770b94c0b76b6e6204a47ac711a7f468a687076de80a478d4a1cd6f13f468c9df7c74f85db5b324193aaca7d1","ssdeep":"1536:P/mnZA9ji72R26xDueMbn1jh7J7+K3kf7IuFgpi297KwPL9oVdUXxlfhAQ8R3FIW:PuZ++7u2IDDsn37JC+3u0i2swz6HUXLW","tlshash":"6c73027394f67abdd89bab50231e48d3940d6260a5e3b5206e40cb3d0f15eced193eac","first_seen":"2026-09-27T06:27:52.420032Z","last_seen":"2026-09-27T06:28:09.500468Z","times_seen":2,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":19,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tr.rbxcdn.com/180DAY-106544ce1068ed48bdb0cc443493eb4f/256/256/Image/Png/noFilter","fqdn":"tr.rbxcdn.com","domain":"rbxcdn.com","tld":"com"},"ip":{"addr":"23.36.76.203","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ads.alterhub.site/","date":"2026-09-27T06:27:06.196Z","timestamp":1790490426196,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rbxcdn.com","organization":""},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 28 May 2026 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"27:09:A3:4D:E5:89:81:97:71:5C:DA:6E:A1:15:02:B9:81:53:59:9D","sha256":"E2:A0:F7:C3:A0:D8:F6:BF:94:31:82:25:B0:5B:5F:FF:B2:E8:DE:3E:58:CD:AA:E2:D6:5A:A0:5E:68:04:7E:EC"}}},"request":{"raw":"GET /180DAY-106544ce1068ed48bdb0cc443493eb4f/256/256/Image/Png/noFilter HTTP/1.1\r\nHost: tr.rbxcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/Png\r\nserver: public-gateway\r\ncontent-length: 113305\r\nstrict-transport-security: max-age=31536000\r\nx-frame-options: SAMEORIGIN\r\nroblox-machine-id: 6a5cad42-960f-c1fb-982b-c3c9eab8b81a\r\nx-envoy-upstream-service-time: 245\r\nx-terms-message: Terms apply https://rblx.co/TOU.\r\nx-ratelimit-limit: 300000, 300000;w=60, 70000\r\nx-ratelimit-remaining: 299979, 70000\r\nx-ratelimit-reset: 49, 0\r\nx-ingress-proxy: true\r\nx-roblox-edge: c096\r\nreport-to: {\"group\":\"network-errors\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://ncs.roblox.com/upload\"}]}\r\nnel: {\"report_to\":\"network-errors\",\"max_age\":604800,\"success_fraction\":0.001,\"failure_fraction\":1}\r\ncache-control: max-age=31536000\r\nexpires: Mon, 27 Sep 2027 06:27:06 GMT\r\ndate: Sun, 27 Sep 2026 06:27:06 GMT\r\nakamai-request-bc: [a=23.36.76.199,b=1572784684,c=g,n=NO__OSLO,o=20940],[c=p,n=NO__OSLO,o=20940]\r\naccess-control-allow-methods: GET\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":113305,"size_decoded":114271,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGB, non-interlaced","md5":"132c19f9af28aa912600984d77c659ee","sha1":"75c2be7f6abb5e5464fa9502e784e777649e067d","sha256":"ecf17e9795ed2ee446f29e39fc71a6489248af8e45d5d9616f8bb4ac36fb72dc","sha512":"284b08f0e2c32678f6498f51b4dc154b153abf274c4a2a297834bf8d4d9e473e04c567477112a85c06b671bdfaa06da31e2c266b4271621ccb59ed3ace87a862","ssdeep":"3072:Wxm2k2mroFFmlDGempVOLJUQbkmSVdkbs6ZX+:L2mroFtempVOLeQ4moko6M","tlshash":"80b31221c7797d5c00526e76e1e669333a54fc5a7f360cda2b086f12b92744d1419fce","first_seen":"2026-09-27T06:27:52.422786Z","last_seen":"2026-09-27T06:28:09.49656Z","times_seen":2,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ads.alterhub.site/promoframe#k=d99b65ef2f1e54f34f14ebb6236adcad\u0026w=468\u0026h=60\u0026i=u5_4uxmyi","fqdn":"ads.alterhub.site","domain":"alterhub.site","tld":"site"},"ip":{"addr":"104.21.42.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ads.alterhub.site/","date":"2026-09-27T06:27:12.408Z","timestamp":1790490432408,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alterhub.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 00:28:34 GMT","end":"Sat, 07 Nov 2026 01:28:30 GMT"},"fingerprint":{"sha1":"CC:30:2C:31:6D:59:8D:61:CD:11:F9:93:CE:16:C0:86:EE:F5:4A:5A","sha256":"FD:96:F8:0E:8C:08:48:55:A0:F2:69:BB:EA:8B:3A:98:9A:71:49:5F:30:C6:90:E1:9F:D3:7F:54:A3:38:1A:B6"}}},"request":{"raw":"GET /promoframe HTTP/1.1\r\nHost: ads.alterhub.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=cUPxGHX3J7dS20wMVOqgxutUGcytGbqXuq6AuboDOj4-1790490425-1.2.1.1-vQ8raaAFa5D8uXCYUxip_7065fQ5BngNItyCYK1ylXQI9tBYYGoyHSjhRqri6TZgUtRXj8kUZiodg9T1XBP4QIjBX5kAs0Eh_gZQjSL3e0cNRtOsd81hi1bxU9JS8A3xWKESiuJTZZ265fZCB6sTG_b7tIuiDL9gIouFKbL3pxzk1ETxcM1z40WrC9rcFVQq6OPxQxVEQ9opljv5_LIllJhvQkrxHAiOPJOchp.bkC2LQMULTFBIzUUhPKFVMpIxKoWe6kcM4PHOL2YRlj4T5JC76oKHSE5sZBJ24h5nouWEgEBWA2I2e5HqtQD9nAYpG1FVw6SI0ck3iiscHDJnnYz2Alt79nAj0Q5uk6MeGp0sJb48Ae2OH67i.GVDY8M7yoV.JjiPWibjFELPFWYxDVSBjcEOjx0BiF67iUorbuE\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\nage: 753876\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"promoframe\"\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; frame-src 'self' https: data: blob:; media-src 'self' https: data: blob:; connect-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self' https:; frame-ancestors https://alterhub.site https://www.alterhub.site;\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sun, 27 Sep 2026 06:27:12 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 18 Sep 2026 13:02:35 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::gr27x-1790490432421-cce0f3b1f81d\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mRzu0CAGQq6jzeXeJ3MNliQHd9fB4%2BmI%2FO17pleNqdoY8qry6DD2Vq4s9YZt6fPsgPdHAKZCXsMlaHU3oUH6%2B9tXG%2BQs2liJGKj1ajSfLIc%2BfuHg%2Fq1Jc2rOJ6p%2BilfwkN%2BgRw%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: a41870f28d4f56a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T20:43:33.933419Z","times_seen":19037193,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ads.alterhub.site/style.css?v=27277508","fqdn":"ads.alterhub.site","domain":"alterhub.site","tld":"site"},"ip":{"addr":"104.21.42.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ads.alterhub.site/","date":"2026-09-27T06:27:05.382Z","timestamp":1790490425382,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alterhub.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 00:28:34 GMT","end":"Sat, 07 Nov 2026 01:28:30 GMT"},"fingerprint":{"sha1":"CC:30:2C:31:6D:59:8D:61:CD:11:F9:93:CE:16:C0:86:EE:F5:4A:5A","sha256":"FD:96:F8:0E:8C:08:48:55:A0:F2:69:BB:EA:8B:3A:98:9A:71:49:5F:30:C6:90:E1:9F:D3:7F:54:A3:38:1A:B6"}}},"request":{"raw":"GET /style.css?v=27277508 HTTP/1.1\r\nHost: ads.alterhub.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\nage: 753871\r\ncache-control: public, max-age=14400, stale-while-revalidate=604800\r\ncontent-disposition: inline; filename=\"style.css\"\r\ncontent-encoding: br\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; frame-src 'self' https: data: blob:; media-src 'self' https: data: blob:; connect-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self' https:;\r\ncontent-type: text/css; charset=utf-8\r\ndate: Sun, 27 Sep 2026 06:27:05 GMT\r\netag: W/\"f167ede8d19165ef340dc2636eed4fb1\"\r\nlast-modified: Fri, 18 Sep 2026 13:02:34 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::dkwps-1790490425448-cd2e72cb98b9\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NvuDkpl52kecz56AegHUCtfwkbJebd%2B%2BcCR2%2FiDv8agYUT6f4L%2FBQZv15DUakiBHelR0LT2aCZ6mgDb0eHp50SHEHy8xDZgBWMEwilGguqe8rVVpv8e6vidiO%2BqTZDH64fdcsQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\ncf-ray: a41870c6a9b256a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48384,"size_decoded":12627,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (48383)","md5":"f167ede8d19165ef340dc2636eed4fb1","sha1":"272775089ed61006ec84dfeb988158f32522c624","sha256":"b1a0fbbaf44f18f37fee9be6e27ff0593369787d014151f4e803bb3293316f2b","sha512":"806e8393a38c747c67b9733826b8fbca4b946d702ca30c49d6dae073e171ca1b358efd90c3f7d53abeee1eef9c77dfdca5073b15d37d069ac8705fb58895db36","ssdeep":"768:WFUmjAab7DfrFwCixOjfcw8+wffKaj+SDPpDk2RJS/HgNbZqqT4l:6UmjAaPzcw8++S4ia5T4l","tlshash":"ee2353b6a214a179bc37e9627bcc9b6e3154f4a3dd2347d8fc40922488c7bf31a61749","first_seen":"2026-09-27T06:27:52.424986Z","last_seen":"2026-09-27T06:30:57.0008Z","times_seen":4,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ads.alterhub.site/","date":"2026-09-27T06:27:05.574Z","timestamp":1790490425574,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://ads.alterhub.site\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:55:16 GMT\r\nexpires: Tue, 21 Sep 2027 15:55:16 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 484309\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-10-11T20:37:43.750543Z","times_seen":313573,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":66,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ads.alterhub.site/ads/bait.js?cb=1790490425596","fqdn":"ads.alterhub.site","domain":"alterhub.site","tld":"site"},"ip":{"addr":"104.21.42.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ads.alterhub.site/","date":"2026-09-27T06:27:05.598Z","timestamp":1790490425598,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alterhub.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 00:28:34 GMT","end":"Sat, 07 Nov 2026 01:28:30 GMT"},"fingerprint":{"sha1":"CC:30:2C:31:6D:59:8D:61:CD:11:F9:93:CE:16:C0:86:EE:F5:4A:5A","sha256":"FD:96:F8:0E:8C:08:48:55:A0:F2:69:BB:EA:8B:3A:98:9A:71:49:5F:30:C6:90:E1:9F:D3:7F:54:A3:38:1A:B6"}}},"request":{"raw":"GET /ads/bait.js?cb=1790490425596 HTTP/1.1\r\nHost: ads.alterhub.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\netag: W/\"424ecc5f56c732e7d4a70f6347b22b66\"\r\naccess-control-allow-origin: *\r\nage: 741767\r\ncache-control: public, max-age=14400, stale-while-revalidate=604800\r\ncontent-disposition: inline; filename=\"bait.js\"\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; frame-src 'self' https: data: blob:; media-src 'self' https: data: blob:; connect-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self' https:;\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sun, 27 Sep 2026 06:27:05 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zfRNCGSxCuuLw%2FgQqCRpnxbpFvd83Mc%2FP3WY%2Bgy6kGizQtQ8ESq0q9SZoUmgMVdb7bJfOP68%2BmevYq5I%2FI79JVcbxk9gTMwZPkzF6nQ6d0v37LOrQIkJWhI1YRhkyQFe44qWhQ%3D%3D\"}]}\r\nlast-modified: Fri, 18 Sep 2026 16:24:18 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::dkwps-1790490425609-d9574ae0ce61\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a41870c7f9de56a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":179,"size_decoded":1662,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text","md5":"424ecc5f56c732e7d4a70f6347b22b66","sha1":"d237bbc96e1195864ccb33d82d9105a26e4d5d27","sha256":"e5fe7eefd70de736455dfe99ef279f0e452d07a52d27fc2c41ef522e054872bb","sha512":"42427e14e5191e949a5a02b44e7a4e2c7b7dd4d146387a6262b48e7f980f5f37ae7280e483a99f87fe05085d111b87877aa6913f31b418ef2dbda7d8c6576ffa","ssdeep":"","tlshash":"34c022024aa844f2bc75004cad12e8c26ba6c4fa42a230c0304cd008620f1db41b2fa3","first_seen":"2026-09-27T06:27:52.427549Z","last_seen":"2026-09-27T06:30:56.9271Z","times_seen":4,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ads.alterhub.site/logo.png?cb=1790490425597","fqdn":"ads.alterhub.site","domain":"alterhub.site","tld":"site"},"ip":{"addr":"104.21.42.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ads.alterhub.site/","date":"2026-09-27T06:27:05.604Z","timestamp":1790490425604,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alterhub.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 00:28:34 GMT","end":"Sat, 07 Nov 2026 01:28:30 GMT"},"fingerprint":{"sha1":"CC:30:2C:31:6D:59:8D:61:CD:11:F9:93:CE:16:C0:86:EE:F5:4A:5A","sha256":"FD:96:F8:0E:8C:08:48:55:A0:F2:69:BB:EA:8B:3A:98:9A:71:49:5F:30:C6:90:E1:9F:D3:7F:54:A3:38:1A:B6"}}},"request":{"raw":"GET /logo.png?cb=1790490425597 HTTP/1.1\r\nHost: ads.alterhub.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 753870\r\ncache-control: public, max-age=86400, stale-while-revalidate=3600\r\ncontent-disposition: inline; filename=\"logo.png\"\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; frame-src 'self' https: data: blob:; media-src 'self' https: data: blob:; connect-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self' https:;\r\ncontent-type: image/png\r\ndate: Sun, 27 Sep 2026 06:27:05 GMT\r\netag: \"b30492cf7dcd04f149fdf83974f64f66\"\r\nlast-modified: Fri, 18 Sep 2026 13:02:35 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::cqqsh-1790490425669-1ed0b81c0b05\r\nserver-timing: cfExtPri\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3RCAo81mdu%2Fo1Np7lhgGosgXfTrUArb3SwqAZPP%2B99UjFoJQe%2F7hHkbiNniOphIOuHFvvii5px7%2F7wpDi9mtovJmUiGpqx7lfdb9dyJoblHbX8Hs52B2hB30VnurGqgKAFZGew%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a41870c809e356a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 36775\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":36775,"size_decoded":38272,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"b30492cf7dcd04f149fdf83974f64f66","sha1":"697f8116ae7258f96fdc8e575d9217d0561a819e","sha256":"48714eead8381395628a7730a417d2d60c7afa2cb7eb48f00cee45ee364115c0","sha512":"7af92369e8b331e67936405d19a9df86bfbccb6b8e76b172edc1697df844dd2e1bd69ce5f02e6ca9ff7e7a0619b2fa300d99582980cf3731e7e9c601da027aa6","ssdeep":"768:O8QZ/xPVFsTJEkZjQZl8CVGOEGFkxQLoXm7pc9lLt+2jf38T6hWze0Xua:O8QTw6CjDCUDLOctPzQea","tlshash":"9af2e1477874607668a308ef34b65b2957a664c0a4a11f355b33bf1a77343f83c9de09","first_seen":"2026-09-27T06:27:52.386786Z","last_seen":"2026-09-27T06:30:56.855844Z","times_seen":4,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ads.alterhub.site/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"ads.alterhub.site","domain":"alterhub.site","tld":"site"},"ip":{"addr":"104.21.42.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ads.alterhub.site/","date":"2026-09-27T06:27:05.605Z","timestamp":1790490425605,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alterhub.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 00:28:34 GMT","end":"Sat, 07 Nov 2026 01:28:30 GMT"},"fingerprint":{"sha1":"CC:30:2C:31:6D:59:8D:61:CD:11:F9:93:CE:16:C0:86:EE:F5:4A:5A","sha256":"FD:96:F8:0E:8C:08:48:55:A0:F2:69:BB:EA:8B:3A:98:9A:71:49:5F:30:C6:90:E1:9F:D3:7F:54:A3:38:1A:B6"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: ads.alterhub.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nlocation: /cdn-cgi/challenge-platform/h/b/scripts/jsd/d76008a69eab/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\nserver-timing: cfExtPri\r\ndate: Sun, 27 Sep 2026 06:27:05 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a41870c809e456a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T20:43:33.933419Z","times_seen":19037193,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ads.alterhub.site/promoframe.html#k=d99b65ef2f1e54f34f14ebb6236adcad\u0026w=468\u0026h=60\u0026i=u1_i6c40v","fqdn":"ads.alterhub.site","domain":"alterhub.site","tld":"site"},"ip":{"addr":"104.21.42.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ads.alterhub.site/","date":"2026-09-27T06:27:05.815Z","timestamp":1790490425815,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alterhub.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 00:28:34 GMT","end":"Sat, 07 Nov 2026 01:28:30 GMT"},"fingerprint":{"sha1":"CC:30:2C:31:6D:59:8D:61:CD:11:F9:93:CE:16:C0:86:EE:F5:4A:5A","sha256":"FD:96:F8:0E:8C:08:48:55:A0:F2:69:BB:EA:8B:3A:98:9A:71:49:5F:30:C6:90:E1:9F:D3:7F:54:A3:38:1A:B6"}}},"request":{"raw":"GET /promoframe.html HTTP/1.1\r\nHost: ads.alterhub.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=cUPxGHX3J7dS20wMVOqgxutUGcytGbqXuq6AuboDOj4-1790490425-1.2.1.1-vQ8raaAFa5D8uXCYUxip_7065fQ5BngNItyCYK1ylXQI9tBYYGoyHSjhRqri6TZgUtRXj8kUZiodg9T1XBP4QIjBX5kAs0Eh_gZQjSL3e0cNRtOsd81hi1bxU9JS8A3xWKESiuJTZZ265fZCB6sTG_b7tIuiDL9gIouFKbL3pxzk1ETxcM1z40WrC9rcFVQq6OPxQxVEQ9opljv5_LIllJhvQkrxHAiOPJOchp.bkC2LQMULTFBIzUUhPKFVMpIxKoWe6kcM4PHOL2YRlj4T5JC76oKHSE5sZBJ24h5nouWEgEBWA2I2e5HqtQD9nAYpG1FVw6SI0ck3iiscHDJnnYz2Alt79nAj0Q5uk6MeGp0sJb48Ae2OH67i.GVDY8M7yoV.JjiPWibjFELPFWYxDVSBjcEOjx0BiF67iUorbuE\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 308 \r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/html\r\ndate: Sun, 27 Sep 2026 06:27:05 GMT\r\nlocation: /promoframe\r\nrefresh: 0;url=/promoframe\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-id: arn1::c9kpf-1790490425843-a19612d9e7bc\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0KmAYJ2RFzA%2B1K91ilQTMyrN5qTAkI9kgcp%2BJT3J6XooLnR0s0WiR02tRLdBk94oE7cBHJp0%2FM0aLaGWkBn4k6dqhpN5o2lOevJRan1sy%2BLY1a2K%2FWb8R7CMlF4iwQRZ2ZosRg%3D%3D\"}]}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a41870c95a0256a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"308","status_text":"Permanent Redirect","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T20:43:33.933419Z","times_seen":19037193,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ads.alterhub.site/promoframe.html#k=3ae6276d5f69eb697421a09960b7da53\u0026n=28128394\u0026i=n3_i9psvz","fqdn":"ads.alterhub.site","domain":"alterhub.site","tld":"site"},"ip":{"addr":"104.21.42.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ads.alterhub.site/","date":"2026-09-27T06:27:05.834Z","timestamp":1790490425834,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alterhub.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 00:28:34 GMT","end":"Sat, 07 Nov 2026 01:28:30 GMT"},"fingerprint":{"sha1":"CC:30:2C:31:6D:59:8D:61:CD:11:F9:93:CE:16:C0:86:EE:F5:4A:5A","sha256":"FD:96:F8:0E:8C:08:48:55:A0:F2:69:BB:EA:8B:3A:98:9A:71:49:5F:30:C6:90:E1:9F:D3:7F:54:A3:38:1A:B6"}}},"request":{"raw":"GET /promoframe.html HTTP/1.1\r\nHost: ads.alterhub.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=cUPxGHX3J7dS20wMVOqgxutUGcytGbqXuq6AuboDOj4-1790490425-1.2.1.1-vQ8raaAFa5D8uXCYUxip_7065fQ5BngNItyCYK1ylXQI9tBYYGoyHSjhRqri6TZgUtRXj8kUZiodg9T1XBP4QIjBX5kAs0Eh_gZQjSL3e0cNRtOsd81hi1bxU9JS8A3xWKESiuJTZZ265fZCB6sTG_b7tIuiDL9gIouFKbL3pxzk1ETxcM1z40WrC9rcFVQq6OPxQxVEQ9opljv5_LIllJhvQkrxHAiOPJOchp.bkC2LQMULTFBIzUUhPKFVMpIxKoWe6kcM4PHOL2YRlj4T5JC76oKHSE5sZBJ24h5nouWEgEBWA2I2e5HqtQD9nAYpG1FVw6SI0ck3iiscHDJnnYz2Alt79nAj0Q5uk6MeGp0sJb48Ae2OH67i.GVDY8M7yoV.JjiPWibjFELPFWYxDVSBjcEOjx0BiF67iUorbuE\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 308 \r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/html\r\ndate: Sun, 27 Sep 2026 06:27:05 GMT\r\nlocation: /promoframe\r\nrefresh: 0;url=/promoframe\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-id: arn1::f28r2-1790490425846-a81600c82451\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7u%2F14UnaOPU3T7Htv1O0FJJh70V7LE8gTGJSLwBbA5nmmdfV4iH50mtv50natXAIIj8CbohExB3U2iuQChOxIEoSW1RbcHCPPcoMh1XYHG7Ct4ur3LeB4VxNzh5TLaM7sIluzA%3D%3D\"}]}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a41870c97a0756a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"308","status_text":"Permanent Redirect","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T20:43:33.933419Z","times_seen":19037193,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ads.alterhub.site/script.js?v=00169b4e","fqdn":"ads.alterhub.site","domain":"alterhub.site","tld":"site"},"ip":{"addr":"104.21.42.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ads.alterhub.site/","date":"2026-09-27T06:27:05.384Z","timestamp":1790490425384,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alterhub.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 00:28:34 GMT","end":"Sat, 07 Nov 2026 01:28:30 GMT"},"fingerprint":{"sha1":"CC:30:2C:31:6D:59:8D:61:CD:11:F9:93:CE:16:C0:86:EE:F5:4A:5A","sha256":"FD:96:F8:0E:8C:08:48:55:A0:F2:69:BB:EA:8B:3A:98:9A:71:49:5F:30:C6:90:E1:9F:D3:7F:54:A3:38:1A:B6"}}},"request":{"raw":"GET /script.js?v=00169b4e HTTP/1.1\r\nHost: ads.alterhub.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\nage: 753871\r\ncache-control: public, max-age=14400, stale-while-revalidate=604800\r\ncontent-disposition: inline; filename=\"script.js\"\r\ncontent-encoding: br\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; frame-src 'self' https: data: blob:; media-src 'self' https: data: blob:; connect-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self' https:;\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sun, 27 Sep 2026 06:27:05 GMT\r\netag: W/\"cb5c166bc7c1c3f6589020fd4fcd7626\"\r\nlast-modified: Fri, 18 Sep 2026 13:02:34 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::4qgwl-1790490425453-79fae6e81485\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q3gaBqrtP43wXgFBvOe0TJdjTRFbs55WIbQ8ZkrcvrN3rc%2FKys7obWrpKyDEPEdI47NvY56GPtEB%2FWuMs5ETnGjkRxSXTT7ahOYl5OAnuuD88dZVHFIpxLFRWZuV8ictPJePmw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncf-ray: a41870c6a9b456a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12557,"size_decoded":6548,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (12556)","md5":"cb5c166bc7c1c3f6589020fd4fcd7626","sha1":"00169b4e391441097b7fb19636b051e75f7a58be","sha256":"90543170866792d8582a3e25dc3fb4f387f8c800512733cb8f09f877402abfc2","sha512":"c5a4515defcc9d7326654bab04d59efa4b3e9d53df5b2d41c1d832254c33833514b1868f3b9041fd4874a8cd26b84d971c48476d4daebbb1d043655c19e4e1de","ssdeep":"384:CLXZSB7EAhCGum6tvErS2E1y08gZyZCZSZeQZ7qt0xIWkBf:k64x/DpErS2E174of","tlshash":"8a42c5bd720839b703a310b5657fb70ab37235119c4b80a099b9d9c82dbddad9233d9d","first_seen":"2026-09-27T06:27:52.429032Z","last_seen":"2026-09-27T06:30:57.012574Z","times_seen":4,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ads.alterhub.site/promo.js?v=bde7b733","fqdn":"ads.alterhub.site","domain":"alterhub.site","tld":"site"},"ip":{"addr":"104.21.42.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ads.alterhub.site/","date":"2026-09-27T06:27:05.385Z","timestamp":1790490425385,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alterhub.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 00:28:34 GMT","end":"Sat, 07 Nov 2026 01:28:30 GMT"},"fingerprint":{"sha1":"CC:30:2C:31:6D:59:8D:61:CD:11:F9:93:CE:16:C0:86:EE:F5:4A:5A","sha256":"FD:96:F8:0E:8C:08:48:55:A0:F2:69:BB:EA:8B:3A:98:9A:71:49:5F:30:C6:90:E1:9F:D3:7F:54:A3:38:1A:B6"}}},"request":{"raw":"GET /promo.js?v=bde7b733 HTTP/1.1\r\nHost: ads.alterhub.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\nage: 405362\r\ncache-control: public, max-age=14400, stale-while-revalidate=604800\r\ncontent-disposition: inline; filename=\"promo.js\"\r\ncontent-encoding: br\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; frame-src 'self' https: data: blob:; media-src 'self' https: data: blob:; connect-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self' https:;\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sun, 27 Sep 2026 06:27:05 GMT\r\netag: W/\"38d86265a4b4326b95d78c020856ac95\"\r\nlast-modified: Tue, 22 Sep 2026 13:51:03 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::t4rtf-1790490425459-d754389fe14a\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x1uz37C%2BX0%2B0K0VtxxpeDJDK%2Fp39U95bRsIKrMCptjrbRLI3dEGyHiTB8eTct%2FV9jeLhq9Aa6yoPgm4Qbizhp2Iq%2B4fGfNLEQLVImDXSbVGjDSR3MMQdC1bYFibfTvHAbxc8pA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncf-ray: a41870c6a9b556a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9921,"size_decoded":5812,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (9920)","md5":"38d86265a4b4326b95d78c020856ac95","sha1":"bde7b7335e0a8daccd73cf41d16032eb738a8a71","sha256":"37e82370908b191d43c5a406379435ccd01331dc4d13b0725e1c18b3a0a15881","sha512":"537ee0ddff8bc542822445a42a5071101a972bdb0a8a7e20042eea9d6bd91cbc6c092b9e63be7c6431fb6129cbbccc941ec3acd762a6258218fc893151119f7a","ssdeep":"192:eUBnUiUhowQv4+jZX/zfDM2xyRyzNYROmby2xXF/O76BZMPpstrJaLFi:eU6iUhgvTjdz3yRyzNibL/O76BMpstdD","tlshash":"6922e9797610643752e709ba79ffb389b5313410bd87844082b4c8e83abcd1e4a67f9e","first_seen":"2026-09-27T06:27:52.431056Z","last_seen":"2026-09-27T06:30:56.911017Z","times_seen":4,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ads.alterhub.site/","date":"2026-09-27T06:27:05.535Z","timestamp":1790490425535,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://ads.alterhub.site\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:55:16 GMT\r\nexpires: Tue, 21 Sep 2027 15:55:16 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 484309\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-10-11T20:37:43.750543Z","times_seen":313573,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":42,"send":0,"wait":31,"receive":83,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ads.alterhub.site/promoframe#k=d99b65ef2f1e54f34f14ebb6236adcad\u0026w=468\u0026h=60\u0026i=u1_i6c40v","fqdn":"ads.alterhub.site","domain":"alterhub.site","tld":"site"},"ip":{"addr":"104.21.42.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ads.alterhub.site/","date":"2026-09-27T06:27:05.872Z","timestamp":1790490425872,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alterhub.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 00:28:34 GMT","end":"Sat, 07 Nov 2026 01:28:30 GMT"},"fingerprint":{"sha1":"CC:30:2C:31:6D:59:8D:61:CD:11:F9:93:CE:16:C0:86:EE:F5:4A:5A","sha256":"FD:96:F8:0E:8C:08:48:55:A0:F2:69:BB:EA:8B:3A:98:9A:71:49:5F:30:C6:90:E1:9F:D3:7F:54:A3:38:1A:B6"}}},"request":{"raw":"GET /promoframe HTTP/1.1\r\nHost: ads.alterhub.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=cUPxGHX3J7dS20wMVOqgxutUGcytGbqXuq6AuboDOj4-1790490425-1.2.1.1-vQ8raaAFa5D8uXCYUxip_7065fQ5BngNItyCYK1ylXQI9tBYYGoyHSjhRqri6TZgUtRXj8kUZiodg9T1XBP4QIjBX5kAs0Eh_gZQjSL3e0cNRtOsd81hi1bxU9JS8A3xWKESiuJTZZ265fZCB6sTG_b7tIuiDL9gIouFKbL3pxzk1ETxcM1z40WrC9rcFVQq6OPxQxVEQ9opljv5_LIllJhvQkrxHAiOPJOchp.bkC2LQMULTFBIzUUhPKFVMpIxKoWe6kcM4PHOL2YRlj4T5JC76oKHSE5sZBJ24h5nouWEgEBWA2I2e5HqtQD9nAYpG1FVw6SI0ck3iiscHDJnnYz2Alt79nAj0Q5uk6MeGp0sJb48Ae2OH67i.GVDY8M7yoV.JjiPWibjFELPFWYxDVSBjcEOjx0BiF67iUorbuE\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\nage: 753869\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"promoframe\"\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; frame-src 'self' https: data: blob:; media-src 'self' https: data: blob:; connect-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self' https:; frame-ancestors https://alterhub.site https://www.alterhub.site;\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sun, 27 Sep 2026 06:27:05 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 18 Sep 2026 13:02:35 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::p5sms-1790490425882-a04c899f2947\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U5C%2B%2Fo8V2R9Ob81eisW2kqa0SaahOG7dv93iUO3NgwB49VM2A8XROx1AkzayVCx%2F75NTpZ3pC790fKy2UDcI5NFnm3W7TibpHo%2BBpDzvJKwOuMJOTK5UCRQe4yAiwKQyV69Pew%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: a41870c9ba0b56a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T20:43:33.933419Z","times_seen":19037193,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ads.alterhub.site/promoframe#k=3ae6276d5f69eb697421a09960b7da53\u0026n=28128394\u0026i=n3_i9psvz","fqdn":"ads.alterhub.site","domain":"alterhub.site","tld":"site"},"ip":{"addr":"104.21.42.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ads.alterhub.site/","date":"2026-09-27T06:27:05.874Z","timestamp":1790490425874,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alterhub.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 00:28:34 GMT","end":"Sat, 07 Nov 2026 01:28:30 GMT"},"fingerprint":{"sha1":"CC:30:2C:31:6D:59:8D:61:CD:11:F9:93:CE:16:C0:86:EE:F5:4A:5A","sha256":"FD:96:F8:0E:8C:08:48:55:A0:F2:69:BB:EA:8B:3A:98:9A:71:49:5F:30:C6:90:E1:9F:D3:7F:54:A3:38:1A:B6"}}},"request":{"raw":"GET /promoframe HTTP/1.1\r\nHost: ads.alterhub.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=cUPxGHX3J7dS20wMVOqgxutUGcytGbqXuq6AuboDOj4-1790490425-1.2.1.1-vQ8raaAFa5D8uXCYUxip_7065fQ5BngNItyCYK1ylXQI9tBYYGoyHSjhRqri6TZgUtRXj8kUZiodg9T1XBP4QIjBX5kAs0Eh_gZQjSL3e0cNRtOsd81hi1bxU9JS8A3xWKESiuJTZZ265fZCB6sTG_b7tIuiDL9gIouFKbL3pxzk1ETxcM1z40WrC9rcFVQq6OPxQxVEQ9opljv5_LIllJhvQkrxHAiOPJOchp.bkC2LQMULTFBIzUUhPKFVMpIxKoWe6kcM4PHOL2YRlj4T5JC76oKHSE5sZBJ24h5nouWEgEBWA2I2e5HqtQD9nAYpG1FVw6SI0ck3iiscHDJnnYz2Alt79nAj0Q5uk6MeGp0sJb48Ae2OH67i.GVDY8M7yoV.JjiPWibjFELPFWYxDVSBjcEOjx0BiF67iUorbuE\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\nage: 753869\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"promoframe\"\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; frame-src 'self' https: data: blob:; media-src 'self' https: data: blob:; connect-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self' https:; frame-ancestors https://alterhub.site https://www.alterhub.site;\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sun, 27 Sep 2026 06:27:05 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 18 Sep 2026 13:02:35 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::4jlv2-1790490425886-b3515d05ab80\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BHCoSyHNHXE78DVJBQHGeXA1AgEY52TB8PwXUg0%2Fmojy2JqVGqndPIgtWGAjXqa34GKZtz3nJha%2BtupQLqqF5uAJJj54wMLN3lOvkHvjlsVO85GGtRcMEwqIJLfXj%2BKCE5tigg%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: a41870c9ba0c56a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T20:43:33.933419Z","times_seen":19037193,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pl28128394.effectivecpmnetwork.com/3ae6276d5f69eb697421a09960b7da53/invoke.js","fqdn":"pl28128394.effectivecpmnetwork.com","domain":"effectivecpmnetwork.com","tld":"com"},"ip":{"addr":"172.255.141.4","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ads.alterhub.site/","date":"2026-09-27T06:27:05.942Z","timestamp":1790490425942,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"effectivecpmnetwork.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 23:21:47 GMT","end":"Thu, 10 Dec 2026 23:21:46 GMT"},"fingerprint":{"sha1":"D6:4E:9E:FD:10:D2:53:EF:D6:DD:33:0A:D1:87:5B:BF:58:A8:9E:5C","sha256":"61:27:CD:75:F7:04:8C:96:76:E8:9F:15:C5:CD:AD:BD:7A:43:30:4D:F0:69:33:60:82:74:88:7D:67:1B:9C:D7"}}},"request":{"raw":"GET /3ae6276d5f69eb697421a09960b7da53/invoke.js HTTP/1.1\r\nHost: pl28128394.effectivecpmnetwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Sun, 27 Sep 2026 06:27:06 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\naccept-ch: Sec-Ch-Ua-Platform,Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile,X-Device-User-Agent,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua,Device-Stock-Ua,X-Operamini-Phone-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version\r\naccess-control-allow-origin: *\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\nx-envoy-upstream-service-time: 8\r\nHost: pl28128394.effectivecpmnetwork.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: ed44a49904f05637c7ab68488bf9466d\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":46235,"size_decoded":19126,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (46233), with no line terminators","md5":"0d4df3e08d85d3f8da157987dbe5d60c","sha1":"a2271dc675a7dc3794248a96644026e8d62e0547","sha256":"a50e7eea2bd6391543714a5fb5ed7eb71825327a64314c5e254e4c06d57cb6a5","sha512":"3688037a3f4162a10a72e2fd1e4a23817d8b16fe23a08e92ee5c06ae2b2695a56ce0eb30903d7c86bd634d6924331ea22cd4c622d3a532e4f2911c70281a0b7e","ssdeep":"768:tmmZugNJEOlhP92QfyREnzrcSzPYYIq9xOEA9Utws8tjJq1z4T4nmo8ew6KChvpB:Umf3UwrcSzPYYIq9x1WimP9ChvXxNEol","tlshash":"b023c6a47f10db7e57a1e9bf227a8c55f1160d8078ccd2c8e13f6dc8698a30a957d938","first_seen":"2026-09-27T06:27:52.43285Z","last_seen":"2026-09-27T06:30:56.897701Z","times_seen":4,"resource_available":true,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":27,"connect":17,"send":0,"wait":36,"receive":17,"ssl":42},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"pl28128394.effectivecpmnetwork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tr.rbxcdn.com/180DAY-45e9d795ebbd95d6fa098f9c07e2803d/256/256/Image/Png/noFilter","fqdn":"tr.rbxcdn.com","domain":"rbxcdn.com","tld":"com"},"ip":{"addr":"23.36.76.203","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ads.alterhub.site/","date":"2026-09-27T06:27:06.177Z","timestamp":1790490426177,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rbxcdn.com","organization":""},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 28 May 2026 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"27:09:A3:4D:E5:89:81:97:71:5C:DA:6E:A1:15:02:B9:81:53:59:9D","sha256":"E2:A0:F7:C3:A0:D8:F6:BF:94:31:82:25:B0:5B:5F:FF:B2:E8:DE:3E:58:CD:AA:E2:D6:5A:A0:5E:68:04:7E:EC"}}},"request":{"raw":"GET /180DAY-45e9d795ebbd95d6fa098f9c07e2803d/256/256/Image/Png/noFilter HTTP/1.1\r\nHost: tr.rbxcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/Png\r\nserver: public-gateway\r\ncontent-length: 78487\r\nstrict-transport-security: max-age=31536000\r\nx-frame-options: SAMEORIGIN\r\nroblox-machine-id: d7858fd9-4187-d277-330e-5b2df544aaa7\r\nx-envoy-upstream-service-time: 322\r\nx-terms-message: Terms apply https://rblx.co/TOU.\r\nx-ratelimit-limit: 300000, 300000;w=60, 70000\r\nx-ratelimit-remaining: 299965, 70000\r\nx-ratelimit-reset: 48, 0\r\nx-ingress-proxy: true\r\nx-roblox-edge: c080\r\nreport-to: {\"group\":\"network-errors\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://ncs.roblox.com/upload\"}]}\r\nnel: {\"report_to\":\"network-errors\",\"max_age\":604800,\"success_fraction\":0.001,\"failure_fraction\":1}\r\ncache-control: max-age=31536000\r\nexpires: Mon, 27 Sep 2027 06:27:06 GMT\r\ndate: Sun, 27 Sep 2026 06:27:06 GMT\r\nakamai-request-bc: [a=23.36.76.199,b=1572784679,c=g,n=NO__OSLO,o=20940],[c=c,n=SE_AB_BROMMA,o=20940]\r\naccess-control-allow-methods: GET\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":78487,"size_decoded":79456,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGB, non-interlaced","md5":"b5f64d776f2245e9d5119d8a881375cc","sha1":"9ee91d861eb77f9e5f451d121948d478a3b296a9","sha256":"d06609a5d499aa9564223c75ef750bd939b7c3ebbd7599a9cf0a0e3fafd70b43","sha512":"52071e15491acbdd0e8ff65c797f1aaeb059361c86a143e09b6b8c5df9962071f93ff24d1ccd329f8f682ddf3b8a23aac9ae356cb1126403d2faa36a0ac4c049","ssdeep":"1536:zHgj2fUZIAhnBGIWyAME6FT9CPCCseciu9n/Vnl1sBi:zvfUWiUItAmJ9ZCsFdL1sBi","tlshash":"f27302007ac5c86778b22e1001a97bc59e817fe623fc45b61b0edab9d4265498fe3dcd","first_seen":"2026-09-27T06:27:52.434746Z","last_seen":"2026-09-27T06:28:09.488862Z","times_seen":2,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":3,"connect":1,"send":0,"wait":22,"receive":7,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tr.rbxcdn.com/180DAY-3afe0aa4d7318f86f753ce97914210f0/256/256/Image/Png/noFilter","fqdn":"tr.rbxcdn.com","domain":"rbxcdn.com","tld":"com"},"ip":{"addr":"23.36.76.203","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ads.alterhub.site/","date":"2026-09-27T06:27:06.181Z","timestamp":1790490426181,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rbxcdn.com","organization":""},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 28 May 2026 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"27:09:A3:4D:E5:89:81:97:71:5C:DA:6E:A1:15:02:B9:81:53:59:9D","sha256":"E2:A0:F7:C3:A0:D8:F6:BF:94:31:82:25:B0:5B:5F:FF:B2:E8:DE:3E:58:CD:AA:E2:D6:5A:A0:5E:68:04:7E:EC"}}},"request":{"raw":"GET /180DAY-3afe0aa4d7318f86f753ce97914210f0/256/256/Image/Png/noFilter HTTP/1.1\r\nHost: tr.rbxcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/Png\r\nserver: public-gateway\r\ncontent-length: 98234\r\nstrict-transport-security: max-age=31536000\r\nx-frame-options: SAMEORIGIN\r\nroblox-machine-id: 69b3b3c4-6115-8987-a7b8-648cf8ad1219\r\nx-envoy-attempt-count: 1\r\nx-envoy-upstream-service-time: 247\r\nx-terms-message: Terms apply https://rblx.co/TOU.\r\nx-ratelimit-limit: 300000, 300000;w=60\r\nx-ratelimit-remaining: 299986\r\nx-ratelimit-reset: 49\r\nx-ingress-proxy: true\r\nx-roblox-edge: c080\r\nreport-to: {\"group\":\"network-errors\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://ncs.roblox.com/upload\"}]}\r\nnel: {\"report_to\":\"network-errors\",\"max_age\":604800,\"success_fraction\":0.001,\"failure_fraction\":1}\r\ncache-control: max-age=31536000\r\nexpires: Mon, 27 Sep 2027 06:27:06 GMT\r\ndate: Sun, 27 Sep 2026 06:27:06 GMT\r\nakamai-request-bc: [a=23.36.76.199,b=1572784695,c=g,n=NO__OSLO,o=20940]\r\naccess-control-allow-methods: GET\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":98234,"size_decoded":99183,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGB, non-interlaced","md5":"ec4ca5975b62951d97b4fb9c3f127b97","sha1":"476c5aa8d603cfc6f98008a18bec6726e1dca626","sha256":"bdd19cad5ff8a60d9b7697b8f1be816dc9be8d38099bd37760c792914329bede","sha512":"2011fa98dc789751525d6fedddb04547f28d4b5a81efa454dab7a90decf5596ea342785b5a492be24885f45de6dc0a8d22efd914353435fc47629bd5a81d31be","ssdeep":"1536:u1yg0x25KHSYyIkBTJrVF8DUh503ejEBtCCJ8ZdwPwtEJA8h2zbP:ucTVK7BTh5OeQnGfwotgNhAbP","tlshash":"9aa302bb9cc041245218b6475305cf6ef65994a6834f95b4f04af1f0f7afb5a80ea336","first_seen":"2026-09-27T06:27:52.437251Z","last_seen":"2026-09-27T06:28:09.51093Z","times_seen":2,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":14,"receive":1,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/jetbrainsmono/v24/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxDcwg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ads.alterhub.site/","date":"2026-09-27T06:27:05.569Z","timestamp":1790490425569,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/jetbrainsmono/v24/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxDcwg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://ads.alterhub.site\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 31432\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 16:00:42 GMT\r\nexpires: Tue, 21 Sep 2027 16:00:42 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:52:37 GMT\r\ncontent-type: font/woff2\r\nage: 483983\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31432,"size_decoded":32245,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31432, version 1.0","md5":"b636a65da4f00129f08c7df6e5dd75ac","sha1":"4f27206c4b1caf8b7805597fcbc6922ff5805daa","sha256":"83c005d49d8a6a50474c73a5a36ac0468076e9c4a29da7bdb14995d80560a5be","sha512":"77ad92edddd5fc9ce47b8b329cf41b2fec895ea01a97b9122df3766163998fadcbe47c868631208636c4e587136ddd390d38e3e9da2743758c9da2c77a66f859","ssdeep":"768:a8+AGQwBrw24YHLKRG5lBF260n1e5vhjJKWWAD95I9Puggtx:B+AiBrw2fHL+GyvYtYADM9Pug0x","tlshash":"52e2f274ea41ca57676335ed4203e99d015fa318ebf6fd40869ccad2a506bcb7c4033a","first_seen":"2024-10-21T03:03:54.505463Z","last_seen":"2026-10-11T20:59:16.148527Z","times_seen":20964,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":34,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ads.alterhub.site/","date":"2026-09-27T06:27:05.573Z","timestamp":1790490425573,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://ads.alterhub.site\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:55:16 GMT\r\nexpires: Tue, 21 Sep 2027 15:55:16 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 484309\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-10-11T20:37:43.750543Z","times_seen":313573,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":55,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ads.alterhub.site/promoframe.html#k=aee874e267daf21ad94938c5960ef7a1\u0026n=27873862\u0026i=n4_6i79ut","fqdn":"ads.alterhub.site","domain":"alterhub.site","tld":"site"},"ip":{"addr":"104.21.42.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ads.alterhub.site/","date":"2026-09-27T06:27:05.837Z","timestamp":1790490425837,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alterhub.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 00:28:34 GMT","end":"Sat, 07 Nov 2026 01:28:30 GMT"},"fingerprint":{"sha1":"CC:30:2C:31:6D:59:8D:61:CD:11:F9:93:CE:16:C0:86:EE:F5:4A:5A","sha256":"FD:96:F8:0E:8C:08:48:55:A0:F2:69:BB:EA:8B:3A:98:9A:71:49:5F:30:C6:90:E1:9F:D3:7F:54:A3:38:1A:B6"}}},"request":{"raw":"GET /promoframe.html HTTP/1.1\r\nHost: ads.alterhub.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=cUPxGHX3J7dS20wMVOqgxutUGcytGbqXuq6AuboDOj4-1790490425-1.2.1.1-vQ8raaAFa5D8uXCYUxip_7065fQ5BngNItyCYK1ylXQI9tBYYGoyHSjhRqri6TZgUtRXj8kUZiodg9T1XBP4QIjBX5kAs0Eh_gZQjSL3e0cNRtOsd81hi1bxU9JS8A3xWKESiuJTZZ265fZCB6sTG_b7tIuiDL9gIouFKbL3pxzk1ETxcM1z40WrC9rcFVQq6OPxQxVEQ9opljv5_LIllJhvQkrxHAiOPJOchp.bkC2LQMULTFBIzUUhPKFVMpIxKoWe6kcM4PHOL2YRlj4T5JC76oKHSE5sZBJ24h5nouWEgEBWA2I2e5HqtQD9nAYpG1FVw6SI0ck3iiscHDJnnYz2Alt79nAj0Q5uk6MeGp0sJb48Ae2OH67i.GVDY8M7yoV.JjiPWibjFELPFWYxDVSBjcEOjx0BiF67iUorbuE\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 308 \r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/html\r\ndate: Sun, 27 Sep 2026 06:27:05 GMT\r\nlocation: /promoframe\r\nrefresh: 0;url=/promoframe\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-id: arn1::4jlv2-1790490425847-b59898fc91f1\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BycZE4PtK%2B9uzTRSg0kegljpAmAvnP%2ByhPpYwlJ5Ckd1cSFPPPpjCPNwzsfDBq8sZ03dh0BctU0T0McSDxAlrPEf4QEayIeZB%2FTgHyiLJ%2Bah4bVWT5aVSpkOzfFFq4rKCgU5%2FQ%3D%3D\"}]}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a41870c97a0956a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"308","status_text":"Permanent Redirect","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T20:43:33.933419Z","times_seen":19037193,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ads.alterhub.site/promoframe#k=aee874e267daf21ad94938c5960ef7a1\u0026n=27873862\u0026i=n4_6i79ut","fqdn":"ads.alterhub.site","domain":"alterhub.site","tld":"site"},"ip":{"addr":"104.21.42.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ads.alterhub.site/","date":"2026-09-27T06:27:05.875Z","timestamp":1790490425875,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alterhub.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 00:28:34 GMT","end":"Sat, 07 Nov 2026 01:28:30 GMT"},"fingerprint":{"sha1":"CC:30:2C:31:6D:59:8D:61:CD:11:F9:93:CE:16:C0:86:EE:F5:4A:5A","sha256":"FD:96:F8:0E:8C:08:48:55:A0:F2:69:BB:EA:8B:3A:98:9A:71:49:5F:30:C6:90:E1:9F:D3:7F:54:A3:38:1A:B6"}}},"request":{"raw":"GET /promoframe HTTP/1.1\r\nHost: ads.alterhub.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=cUPxGHX3J7dS20wMVOqgxutUGcytGbqXuq6AuboDOj4-1790490425-1.2.1.1-vQ8raaAFa5D8uXCYUxip_7065fQ5BngNItyCYK1ylXQI9tBYYGoyHSjhRqri6TZgUtRXj8kUZiodg9T1XBP4QIjBX5kAs0Eh_gZQjSL3e0cNRtOsd81hi1bxU9JS8A3xWKESiuJTZZ265fZCB6sTG_b7tIuiDL9gIouFKbL3pxzk1ETxcM1z40WrC9rcFVQq6OPxQxVEQ9opljv5_LIllJhvQkrxHAiOPJOchp.bkC2LQMULTFBIzUUhPKFVMpIxKoWe6kcM4PHOL2YRlj4T5JC76oKHSE5sZBJ24h5nouWEgEBWA2I2e5HqtQD9nAYpG1FVw6SI0ck3iiscHDJnnYz2Alt79nAj0Q5uk6MeGp0sJb48Ae2OH67i.GVDY8M7yoV.JjiPWibjFELPFWYxDVSBjcEOjx0BiF67iUorbuE\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\nage: 753869\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"promoframe\"\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; frame-src 'self' https: data: blob:; media-src 'self' https: data: blob:; connect-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self' https:; frame-ancestors https://alterhub.site https://www.alterhub.site;\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sun, 27 Sep 2026 06:27:05 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 18 Sep 2026 13:02:35 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::k87cj-1790490425886-4d2d59b31d5d\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fOIKqFgFKY28lYQYfjhF21QsJhHoTsDzUOnYulwJun7pA0ZdAOPM4DjElLlIQG0AS9N5IOLVY1SgQMDQfvPQiAmgCxMql50dFfa2%2FpcYy2U0fhg9gIbHL3O%2B5ClP5KYab62svQ%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: a41870c9ba0d56a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T20:43:33.933419Z","times_seen":19037193,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tr.rbxcdn.com/180DAY-4b2eb340e137a14c3e8db1e189c57abb/256/256/Image/Png/noFilter","fqdn":"tr.rbxcdn.com","domain":"rbxcdn.com","tld":"com"},"ip":{"addr":"23.36.76.203","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ads.alterhub.site/","date":"2026-09-27T06:27:06.186Z","timestamp":1790490426186,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rbxcdn.com","organization":""},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 28 May 2026 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"27:09:A3:4D:E5:89:81:97:71:5C:DA:6E:A1:15:02:B9:81:53:59:9D","sha256":"E2:A0:F7:C3:A0:D8:F6:BF:94:31:82:25:B0:5B:5F:FF:B2:E8:DE:3E:58:CD:AA:E2:D6:5A:A0:5E:68:04:7E:EC"}}},"request":{"raw":"GET /180DAY-4b2eb340e137a14c3e8db1e189c57abb/256/256/Image/Png/noFilter HTTP/1.1\r\nHost: tr.rbxcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/Png\r\nserver: public-gateway\r\ncontent-length: 122806\r\nstrict-transport-security: max-age=31536000\r\nx-frame-options: SAMEORIGIN\r\nroblox-machine-id: 88c60831-6d80-b477-05fa-9f45a2197cf4\r\nx-envoy-upstream-service-time: 210\r\nx-terms-message: Terms apply https://rblx.co/TOU.\r\nx-ratelimit-limit: 300000, 300000;w=60, 70000\r\nx-ratelimit-remaining: 299987, 70000\r\nx-ratelimit-reset: 47, 0\r\nx-ingress-proxy: true\r\nx-roblox-edge: c080\r\nreport-to: {\"group\":\"network-errors\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://ncs.roblox.com/upload\"}]}\r\nnel: {\"report_to\":\"network-errors\",\"max_age\":604800,\"success_fraction\":0.001,\"failure_fraction\":1}\r\ncache-control: max-age=31536000\r\nexpires: Mon, 27 Sep 2027 06:27:06 GMT\r\ndate: Sun, 27 Sep 2026 06:27:06 GMT\r\nakamai-request-bc: [a=23.36.76.199,b=1572784686,c=g,n=NO__OSLO,o=20940]\r\naccess-control-allow-methods: GET\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":122806,"size_decoded":123747,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGB, non-interlaced","md5":"23493c2bc3d9d72913c7800d653792bb","sha1":"9590e497f8d0098fdea14b1515e8bff76fb63b77","sha256":"379270d7d590bee0776b6d3e17c9f68350f4e5c778af2200a46b9083eb77fcef","sha512":"658135993b66794d36680298531356fa794e2df5617830402bdf9459e59820fcf8fdfb4df004fd0ef0b70b46b2e376892ad7d1bd0c5fe5c30733d3ad3a104672","ssdeep":"3072:tzAY8/jncnsNKZyHP79ocNoODCh41YDIO+u:BxScsNKoT2eDCiQIO+u","tlshash":"83c312ce2275b3c482b9b3a39aee11c02d13515386fcd52149ded5eebc177a0b5f9088","first_seen":"2026-09-27T06:27:52.439413Z","last_seen":"2026-09-27T06:28:09.494748Z","times_seen":2,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":9,"receive":1,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tr.rbxcdn.com/180DAY-ec0aefc85ced9f434dbc5328c80fca2e/256/256/Image/Png/noFilter","fqdn":"tr.rbxcdn.com","domain":"rbxcdn.com","tld":"com"},"ip":{"addr":"23.36.76.203","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ads.alterhub.site/","date":"2026-09-27T06:27:06.193Z","timestamp":1790490426193,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rbxcdn.com","organization":""},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 28 May 2026 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"27:09:A3:4D:E5:89:81:97:71:5C:DA:6E:A1:15:02:B9:81:53:59:9D","sha256":"E2:A0:F7:C3:A0:D8:F6:BF:94:31:82:25:B0:5B:5F:FF:B2:E8:DE:3E:58:CD:AA:E2:D6:5A:A0:5E:68:04:7E:EC"}}},"request":{"raw":"GET /180DAY-ec0aefc85ced9f434dbc5328c80fca2e/256/256/Image/Png/noFilter HTTP/1.1\r\nHost: tr.rbxcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/Png\r\nserver: public-gateway\r\ncontent-length: 100091\r\nstrict-transport-security: max-age=31536000\r\nx-frame-options: SAMEORIGIN\r\nroblox-machine-id: 58582497-b35f-4596-ad49-e670ce3876b7\r\nx-envoy-attempt-count: 1\r\nx-envoy-upstream-service-time: 245\r\nx-terms-message: Terms apply https://rblx.co/TOU.\r\nx-ratelimit-limit: 300000, 300000;w=60\r\nx-ratelimit-remaining: 299994\r\nx-ratelimit-reset: 60\r\nx-ingress-proxy: true\r\nx-roblox-edge: c080\r\nreport-to: {\"group\":\"network-errors\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://ncs.roblox.com/upload\"}]}\r\nnel: {\"report_to\":\"network-errors\",\"max_age\":604800,\"success_fraction\":0.001,\"failure_fraction\":1}\r\ncache-control: max-age=31536000\r\nexpires: Mon, 27 Sep 2027 06:27:06 GMT\r\ndate: Sun, 27 Sep 2026 06:27:06 GMT\r\nakamai-request-bc: [a=23.36.76.199,b=1572784682,c=g,n=NO__OSLO,o=20940]\r\naccess-control-allow-methods: GET\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":100091,"size_decoded":101041,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGB, non-interlaced","md5":"22232d1aa08353702324f110d54dc354","sha1":"bf59d80f3b638f2a24addce35c475a30cf3ed720","sha256":"d35661df858b88ba05f136c5bcdc0ec5de2ab6eb2a9e418ccd5aedb3272cc615","sha512":"04e1311b01b66ecd503e2389631e4ccb6cc6a13becdfc5d8233a99c7af40c4399cdc47ea688d6dd0adac416389dfa2e380cdb11e325c4aaa366ec13f5b6f9ff6","ssdeep":"3072:CGFBZNI9nmyIGSzdasaMTvC7tJKCyEYm5fzGZ9:CGBZcbIGSzksaMTaZJKCKkfCH","tlshash":"e5a312dc922b20452bbfb1001f4e7d81636099760b7d5e50fae59b8e1dd02661ce72fa","first_seen":"2026-09-27T06:27:52.442492Z","last_seen":"2026-09-27T06:28:09.512661Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":6,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ads.alterhub.site/promoframe.html#k=172caf16811db1ade9ccf7006c7a98e4\u0026w=728\u0026h=90\u0026i=u8_2uuvvk","fqdn":"ads.alterhub.site","domain":"alterhub.site","tld":"site"},"ip":{"addr":"104.21.42.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ads.alterhub.site/","date":"2026-09-27T06:27:18.884Z","timestamp":1790490438884,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alterhub.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 00:28:34 GMT","end":"Sat, 07 Nov 2026 01:28:30 GMT"},"fingerprint":{"sha1":"CC:30:2C:31:6D:59:8D:61:CD:11:F9:93:CE:16:C0:86:EE:F5:4A:5A","sha256":"FD:96:F8:0E:8C:08:48:55:A0:F2:69:BB:EA:8B:3A:98:9A:71:49:5F:30:C6:90:E1:9F:D3:7F:54:A3:38:1A:B6"}}},"request":{"raw":"GET /promoframe.html HTTP/1.1\r\nHost: ads.alterhub.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=cUPxGHX3J7dS20wMVOqgxutUGcytGbqXuq6AuboDOj4-1790490425-1.2.1.1-vQ8raaAFa5D8uXCYUxip_7065fQ5BngNItyCYK1ylXQI9tBYYGoyHSjhRqri6TZgUtRXj8kUZiodg9T1XBP4QIjBX5kAs0Eh_gZQjSL3e0cNRtOsd81hi1bxU9JS8A3xWKESiuJTZZ265fZCB6sTG_b7tIuiDL9gIouFKbL3pxzk1ETxcM1z40WrC9rcFVQq6OPxQxVEQ9opljv5_LIllJhvQkrxHAiOPJOchp.bkC2LQMULTFBIzUUhPKFVMpIxKoWe6kcM4PHOL2YRlj4T5JC76oKHSE5sZBJ24h5nouWEgEBWA2I2e5HqtQD9nAYpG1FVw6SI0ck3iiscHDJnnYz2Alt79nAj0Q5uk6MeGp0sJb48Ae2OH67i.GVDY8M7yoV.JjiPWibjFELPFWYxDVSBjcEOjx0BiF67iUorbuE\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 308 \r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/html\r\ndate: Sun, 27 Sep 2026 06:27:18 GMT\r\nlocation: /promoframe\r\nrefresh: 0;url=/promoframe\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-id: arn1::h9768-1790490438894-7201d6aef1fa\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=al4p6NBC%2BxM4KTHGnw%2BTGT7OuWptKXzANXABn1OxzjnJ5ZcLYULQZw88f1%2BVnl5ApGQ1A8DO56lrJddZpW1niHqPKFuH5quOku%2Ba8V3QX63DamwOML7Cr%2FPTv5u%2BKNnD%2FvWbAw%3D%3D\"}]}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a418711b08d856a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"308","status_text":"Permanent Redirect","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T20:43:33.933419Z","times_seen":19037193,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ads.alterhub.site/promoframe#k=70b7658cf770f889af09e1d33eabf363\u0026w=728\u0026h=90\u0026i=u7_9l2l13","fqdn":"ads.alterhub.site","domain":"alterhub.site","tld":"site"},"ip":{"addr":"104.21.42.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ads.alterhub.site/","date":"2026-09-27T06:27:18.908Z","timestamp":1790490438908,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alterhub.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 00:28:34 GMT","end":"Sat, 07 Nov 2026 01:28:30 GMT"},"fingerprint":{"sha1":"CC:30:2C:31:6D:59:8D:61:CD:11:F9:93:CE:16:C0:86:EE:F5:4A:5A","sha256":"FD:96:F8:0E:8C:08:48:55:A0:F2:69:BB:EA:8B:3A:98:9A:71:49:5F:30:C6:90:E1:9F:D3:7F:54:A3:38:1A:B6"}}},"request":{"raw":"GET /promoframe HTTP/1.1\r\nHost: ads.alterhub.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=cUPxGHX3J7dS20wMVOqgxutUGcytGbqXuq6AuboDOj4-1790490425-1.2.1.1-vQ8raaAFa5D8uXCYUxip_7065fQ5BngNItyCYK1ylXQI9tBYYGoyHSjhRqri6TZgUtRXj8kUZiodg9T1XBP4QIjBX5kAs0Eh_gZQjSL3e0cNRtOsd81hi1bxU9JS8A3xWKESiuJTZZ265fZCB6sTG_b7tIuiDL9gIouFKbL3pxzk1ETxcM1z40WrC9rcFVQq6OPxQxVEQ9opljv5_LIllJhvQkrxHAiOPJOchp.bkC2LQMULTFBIzUUhPKFVMpIxKoWe6kcM4PHOL2YRlj4T5JC76oKHSE5sZBJ24h5nouWEgEBWA2I2e5HqtQD9nAYpG1FVw6SI0ck3iiscHDJnnYz2Alt79nAj0Q5uk6MeGp0sJb48Ae2OH67i.GVDY8M7yoV.JjiPWibjFELPFWYxDVSBjcEOjx0BiF67iUorbuE\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\nage: 753781\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"promoframe\"\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; frame-src 'self' https: data: blob:; media-src 'self' https: data: blob:; connect-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self' https:; frame-ancestors https://alterhub.site https://www.alterhub.site;\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sun, 27 Sep 2026 06:27:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 18 Sep 2026 13:02:35 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::h9768-1790490438918-754d4da5ae7c\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IC2uiCcYsS64pTv8ZKBcSb7Mt7PwVV7Nf9IHvb2XktX3Etv5R%2BZ8bFAxyHHuavzNIZzFp8zM1lyViVoyfEVbDdmhLkEbaRFqGePlLAKVS3lHmako%2Benn2ynj1ssSWf9IsKm1uA%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: a418711b28d956a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T20:43:33.933419Z","times_seen":19037193,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ads.alterhub.site/logo.png","fqdn":"ads.alterhub.site","domain":"alterhub.site","tld":"site"},"ip":{"addr":"104.21.42.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ads.alterhub.site/","date":"2026-09-27T06:27:05.392Z","timestamp":1790490425392,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alterhub.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 00:28:34 GMT","end":"Sat, 07 Nov 2026 01:28:30 GMT"},"fingerprint":{"sha1":"CC:30:2C:31:6D:59:8D:61:CD:11:F9:93:CE:16:C0:86:EE:F5:4A:5A","sha256":"FD:96:F8:0E:8C:08:48:55:A0:F2:69:BB:EA:8B:3A:98:9A:71:49:5F:30:C6:90:E1:9F:D3:7F:54:A3:38:1A:B6"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: ads.alterhub.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 753870\r\ncache-control: public, max-age=86400, stale-while-revalidate=3600\r\ncontent-disposition: inline; filename=\"logo.png\"\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; frame-src 'self' https: data: blob:; media-src 'self' https: data: blob:; connect-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self' https:;\r\ncontent-type: image/png\r\ndate: Sun, 27 Sep 2026 06:27:05 GMT\r\netag: \"b30492cf7dcd04f149fdf83974f64f66\"\r\nlast-modified: Fri, 18 Sep 2026 13:02:35 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::7h8q7-1790490425458-7c0d1b7b4495\r\nserver-timing: cfExtPri\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VEJ3sMxt%2FDYq750PWY8m%2FKmA0LLVRZJZ7qH6whxQmzBvlVoI75OveGe0RPZAT69rbFLHVApIL%2B52Eb%2FQoAKo61nSzPp%2FGKJav%2B0UEgGN3NFvt55DmEc5jT0LvNk9Yez2%2BzN3GQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a41870c6b9b856a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 36775\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":36775,"size_decoded":38275,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"b30492cf7dcd04f149fdf83974f64f66","sha1":"697f8116ae7258f96fdc8e575d9217d0561a819e","sha256":"48714eead8381395628a7730a417d2d60c7afa2cb7eb48f00cee45ee364115c0","sha512":"7af92369e8b331e67936405d19a9df86bfbccb6b8e76b172edc1697df844dd2e1bd69ce5f02e6ca9ff7e7a0619b2fa300d99582980cf3731e7e9c601da027aa6","ssdeep":"768:O8QZ/xPVFsTJEkZjQZl8CVGOEGFkxQLoXm7pc9lLt+2jf38T6hWze0Xua:O8QTw6CjDCUDLOctPzQea","tlshash":"9af2e1477874607668a308ef34b65b2957a664c0a4a11f355b33bf1a77343f83c9de09","first_seen":"2026-09-27T06:27:52.386786Z","last_seen":"2026-09-27T06:30:56.855844Z","times_seen":4,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ads.alterhub.site/cdn-cgi/challenge-platform/h/b/scripts/jsd/d76008a69eab/main.js?","fqdn":"ads.alterhub.site","domain":"alterhub.site","tld":"site"},"ip":{"addr":"104.21.42.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ads.alterhub.site/","date":"2026-09-27T06:27:05.671Z","timestamp":1790490425671,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alterhub.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 00:28:34 GMT","end":"Sat, 07 Nov 2026 01:28:30 GMT"},"fingerprint":{"sha1":"CC:30:2C:31:6D:59:8D:61:CD:11:F9:93:CE:16:C0:86:EE:F5:4A:5A","sha256":"FD:96:F8:0E:8C:08:48:55:A0:F2:69:BB:EA:8B:3A:98:9A:71:49:5F:30:C6:90:E1:9F:D3:7F:54:A3:38:1A:B6"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/d76008a69eab/main.js? HTTP/1.1\r\nHost: ads.alterhub.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\ncontent-encoding: zstd\r\ndate: Sun, 27 Sep 2026 06:27:05 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a41870c879ef56a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20428,"size_decoded":10025,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (20428), with no line terminators","md5":"6219e582123f4c1082348b7a03f1e50b","sha1":"9e7ee99041842a98e0f5cbe2f310d042f1bb2a49","sha256":"dd7135c13c744a676e9ea9715191a989d79e6b37860b152613efa2f9355e2571","sha512":"67569b6f582b24292e03774e883d74f2166100f595440057ab681f45e4b1c457c65e918b5c789b483624a79ae73b891c8458e2019ce8d65d7a505b818597e033","ssdeep":"384:K07U/nVQ/TxW6NOlOSEVDrEyIu1QxeLGR20O5RUeOf:97qK/lZNOlOSEZNIgHzrrOf","tlshash":"a792b8c77ec5f1d9c21a3075105fb5caa67e6c8050bc0d4acdb290e8bf757a6892be48","first_seen":"2026-09-27T06:25:54.141638Z","last_seen":"2026-09-27T06:57:54.883812Z","times_seen":3,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tr.rbxcdn.com/180DAY-8d95b4decb13fb261396aab7bf79b9ff/256/256/Image/Png/noFilter","fqdn":"tr.rbxcdn.com","domain":"rbxcdn.com","tld":"com"},"ip":{"addr":"23.36.76.203","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ads.alterhub.site/","date":"2026-09-27T06:27:06.183Z","timestamp":1790490426183,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rbxcdn.com","organization":""},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 28 May 2026 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"27:09:A3:4D:E5:89:81:97:71:5C:DA:6E:A1:15:02:B9:81:53:59:9D","sha256":"E2:A0:F7:C3:A0:D8:F6:BF:94:31:82:25:B0:5B:5F:FF:B2:E8:DE:3E:58:CD:AA:E2:D6:5A:A0:5E:68:04:7E:EC"}}},"request":{"raw":"GET /180DAY-8d95b4decb13fb261396aab7bf79b9ff/256/256/Image/Png/noFilter HTTP/1.1\r\nHost: tr.rbxcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/Png\r\nserver: public-gateway\r\ncontent-length: 103831\r\nstrict-transport-security: max-age=31536000\r\nx-frame-options: SAMEORIGIN\r\nroblox-machine-id: d54cb6ba-d292-aaa3-a555-b7a623f00c08\r\nx-envoy-upstream-service-time: 243\r\nx-terms-message: Terms apply https://rblx.co/TOU.\r\nx-ratelimit-limit: 300000, 300000;w=60, 70000\r\nx-ratelimit-remaining: 299988, 70000\r\nx-ratelimit-reset: 55, 0\r\nx-ingress-proxy: true\r\nx-roblox-edge: c086\r\nreport-to: {\"group\":\"network-errors\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://ncs.roblox.com/upload\"}]}\r\nnel: {\"report_to\":\"network-errors\",\"max_age\":604800,\"success_fraction\":0.001,\"failure_fraction\":1}\r\ncache-control: max-age=31536000\r\nexpires: Mon, 27 Sep 2027 06:27:06 GMT\r\ndate: Sun, 27 Sep 2026 06:27:06 GMT\r\nakamai-request-bc: [a=23.36.76.199,b=1572784694,c=g,n=NO__OSLO,o=20940]\r\naccess-control-allow-methods: GET\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":103831,"size_decoded":104772,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGB, non-interlaced","md5":"ff3f7155fcd4f47e04d74233da5da190","sha1":"b6191dd92f75933f040bb042c82fa4e36d2bea0b","sha256":"e41a13f154bd587e1f92b418e1580c249e84fdcb676baea20f40777b69c77e28","sha512":"42ec5f221443217d81e197ad60659325efebdfaaf43ae109845ca39c5a000f86f2250a39b195938beaf3b5c03d901fb79ab8267ba9f040f41a1c7b53436e7626","ssdeep":"3072:1LUrIBJ1gmG1KmhZwMWjzR0AWH7l+b/WbDhhqpLYuF:6reFWXrAWHYbchhuN","tlshash":"39a31291b204d61947a251b50252d32f9f7cde871098ef71091add8bfc0bbea88b1a33","first_seen":"2026-09-27T06:27:52.447422Z","last_seen":"2026-09-27T06:28:09.51171Z","times_seen":2,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":2,"send":0,"wait":12,"receive":2,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tr.rbxcdn.com/180DAY-f4eba8af4f0af179c1b531a743d9b0e1/256/256/Image/Png/noFilter","fqdn":"tr.rbxcdn.com","domain":"rbxcdn.com","tld":"com"},"ip":{"addr":"23.36.76.203","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ads.alterhub.site/","date":"2026-09-27T06:27:06.187Z","timestamp":1790490426187,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rbxcdn.com","organization":""},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 28 May 2026 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"27:09:A3:4D:E5:89:81:97:71:5C:DA:6E:A1:15:02:B9:81:53:59:9D","sha256":"E2:A0:F7:C3:A0:D8:F6:BF:94:31:82:25:B0:5B:5F:FF:B2:E8:DE:3E:58:CD:AA:E2:D6:5A:A0:5E:68:04:7E:EC"}}},"request":{"raw":"GET /180DAY-f4eba8af4f0af179c1b531a743d9b0e1/256/256/Image/Png/noFilter HTTP/1.1\r\nHost: tr.rbxcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/Png\r\nserver: public-gateway\r\ncontent-length: 74406\r\nstrict-transport-security: max-age=31536000\r\nx-frame-options: SAMEORIGIN\r\nroblox-machine-id: 62d7b97a-cf53-f3df-11de-985d3509600d\r\nx-envoy-upstream-service-time: 330\r\nx-terms-message: Terms apply https://rblx.co/TOU.\r\nx-ratelimit-limit: 300000, 300000;w=60\r\nx-ratelimit-remaining: 299996\r\nx-ratelimit-reset: 19\r\nx-ingress-proxy: true\r\nx-roblox-edge: c080\r\nreport-to: {\"group\":\"network-errors\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://ncs.roblox.com/upload\"}]}\r\nnel: {\"report_to\":\"network-errors\",\"max_age\":604800,\"success_fraction\":0.001,\"failure_fraction\":1}\r\ncache-control: max-age=31536000\r\nexpires: Mon, 27 Sep 2027 06:27:06 GMT\r\ndate: Sun, 27 Sep 2026 06:27:06 GMT\r\nakamai-request-bc: [a=23.36.76.199,b=1572784688,c=g,n=NO__OSLO,o=20940]\r\naccess-control-allow-methods: GET\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":74406,"size_decoded":75329,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"7f658837637775355473aa1435c7ddd2","sha1":"6f17da1c95e3fed31dc0b1512cdd1d8d110e926e","sha256":"5aaada4ba0bbd902d4dae679b7042ec9d84f49e48e4101e0e62c02d9f055c909","sha512":"393a182cc25c746b9f45af84d2910af98efdcba38157a99e7bea81ff1b0cb97efd42e153e5c939bc7c162ca2fe94ed79bf52ab5fbd413e89cce629a06c5c1454","ssdeep":"1536:jEnoYBbIcCtwA52+GRhUCYKwkj+PWG3j68NuU3LpdBvcZp:+oYbew/35Ye0WEjLfLpdBvY","tlshash":"c673024de0cacec62046f63f7edde4b6618a2e4981958dcb75711933fbad440c588866","first_seen":"2026-09-27T06:27:52.450079Z","last_seen":"2026-09-27T06:28:09.489775Z","times_seen":2,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":11,"receive":2,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tr.rbxcdn.com/180DAY-a0da9e4963fd5f0b0c07270f1ac2c93f/256/256/Image/Png/noFilter","fqdn":"tr.rbxcdn.com","domain":"rbxcdn.com","tld":"com"},"ip":{"addr":"23.36.76.203","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ads.alterhub.site/","date":"2026-09-27T06:27:06.189Z","timestamp":1790490426189,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rbxcdn.com","organization":""},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 28 May 2026 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"27:09:A3:4D:E5:89:81:97:71:5C:DA:6E:A1:15:02:B9:81:53:59:9D","sha256":"E2:A0:F7:C3:A0:D8:F6:BF:94:31:82:25:B0:5B:5F:FF:B2:E8:DE:3E:58:CD:AA:E2:D6:5A:A0:5E:68:04:7E:EC"}}},"request":{"raw":"GET /180DAY-a0da9e4963fd5f0b0c07270f1ac2c93f/256/256/Image/Png/noFilter HTTP/1.1\r\nHost: tr.rbxcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/Png\r\nserver: public-gateway\r\ncontent-length: 71129\r\nstrict-transport-security: max-age=31536000\r\nx-frame-options: SAMEORIGIN\r\nroblox-machine-id: b4b64605-fdc6-345c-7845-214485ea29ec\r\nx-envoy-attempt-count: 1\r\nx-envoy-upstream-service-time: 215\r\nx-terms-message: Terms apply https://rblx.co/TOU.\r\nx-ratelimit-limit: 300000, 300000;w=60\r\nx-ratelimit-remaining: 299934\r\nx-ratelimit-reset: 22\r\nx-ingress-proxy: true\r\nx-roblox-edge: c085\r\nreport-to: {\"group\":\"network-errors\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://ncs.roblox.com/upload\"}]}\r\nnel: {\"report_to\":\"network-errors\",\"max_age\":604800,\"success_fraction\":0.001,\"failure_fraction\":1}\r\ncache-control: max-age=31536000\r\nexpires: Mon, 27 Sep 2027 06:27:06 GMT\r\ndate: Sun, 27 Sep 2026 06:27:06 GMT\r\nakamai-request-bc: [a=23.36.76.199,b=1572784696,c=g,n=NO__OSLO,o=20940],[c=c,n=SE_AB_STOCKHOLM,o=20940]\r\naccess-control-allow-methods: GET\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":71129,"size_decoded":72110,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGB, non-interlaced","md5":"f3c29e247fe7d26c40c62d65acd14714","sha1":"c0f97f295bae0ad3ed043b05958c84098ce22614","sha256":"94253aed1afda54764cb509f231c8f3c16bbc07085993539fb5d35e363a026d0","sha512":"beedf1a15a6198f5ffecdb6cc6bb496b580fa85722967afb7fdeefe09ac3012a0053a5d74f75a0734b214e1bb14eab7b5739ad3e63f339707a782ca6684e376c","ssdeep":"1536:5JbJ7eIzvm38D2Gcz7UZYwKfj9KC9pqtZ8vfRGCfSf:fj63pKKb0C9pKiRx6f","tlshash":"326302270a19a170d87d1ef286022044f6d235b23c194cb9a67c82deddb49694c6fb7f","first_seen":"2026-09-27T06:27:52.451979Z","last_seen":"2026-09-27T06:28:09.49572Z","times_seen":2,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":2,"send":0,"wait":21,"receive":8,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tr.rbxcdn.com/180DAY-74837b2a65000dbb5ec9b8f452bafa09/256/256/Image/Png/noFilter","fqdn":"tr.rbxcdn.com","domain":"rbxcdn.com","tld":"com"},"ip":{"addr":"23.36.76.203","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ads.alterhub.site/","date":"2026-09-27T06:27:06.197Z","timestamp":1790490426197,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rbxcdn.com","organization":""},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 28 May 2026 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"27:09:A3:4D:E5:89:81:97:71:5C:DA:6E:A1:15:02:B9:81:53:59:9D","sha256":"E2:A0:F7:C3:A0:D8:F6:BF:94:31:82:25:B0:5B:5F:FF:B2:E8:DE:3E:58:CD:AA:E2:D6:5A:A0:5E:68:04:7E:EC"}}},"request":{"raw":"GET /180DAY-74837b2a65000dbb5ec9b8f452bafa09/256/256/Image/Png/noFilter HTTP/1.1\r\nHost: tr.rbxcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/Png\r\nserver: public-gateway\r\ncontent-length: 118435\r\nstrict-transport-security: max-age=31536000\r\nx-frame-options: SAMEORIGIN\r\nroblox-machine-id: a6be468f-2fed-d76a-77a5-15de0f88ef2d\r\nx-envoy-attempt-count: 1\r\nx-envoy-upstream-service-time: 227\r\nx-terms-message: Terms apply https://rblx.co/TOU.\r\nx-ratelimit-limit: 300000, 300000;w=60, 70000\r\nx-ratelimit-remaining: 299979, 70000\r\nx-ratelimit-reset: 45, 0\r\nx-ingress-proxy: true\r\nx-roblox-edge: c086\r\nreport-to: {\"group\":\"network-errors\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://ncs.roblox.com/upload\"}]}\r\nnel: {\"report_to\":\"network-errors\",\"max_age\":604800,\"success_fraction\":0.001,\"failure_fraction\":1}\r\ncache-control: max-age=31536000\r\nexpires: Mon, 27 Sep 2027 06:27:06 GMT\r\ndate: Sun, 27 Sep 2026 06:27:06 GMT\r\nakamai-request-bc: [a=23.36.76.199,b=1572784685,c=g,n=NO__OSLO,o=20940]\r\naccess-control-allow-methods: GET\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":118435,"size_decoded":119402,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGB, non-interlaced","md5":"43d97e7594e4e1b932a4fda8337493eb","sha1":"25029fc32220549854cce402305de57452ceeca6","sha256":"34ada30b140035d633b61730a526b0379f5d11db1f059dab5d470e7def6e7982","sha512":"540f9c3fd0efc666f68cb22ec6aa2111d5928143319570277ddc854e670dff102552339d8eae4037da672e8646796b65eb9f2193168b0685a50a30dfe9dcd613","ssdeep":"3072:wnP+f5jYXZhySgSkuRmcfNyK+sJ5S+BV0+9KDIU4xjN:wP+feX5nmclV+mRb+94RN","tlshash":"d5c313d0d4a1b730851829d0c6097ebd1503972036b56ed7290efbbc2e1939bcd9b67e","first_seen":"2026-09-27T06:27:52.454341Z","last_seen":"2026-09-27T06:28:09.513513Z","times_seen":2,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":7,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ads.alterhub.site/promoframe.html#k=fdfdd92a59e588025342002253695a24\u0026w=468\u0026h=60\u0026i=u6_nii3nv","fqdn":"ads.alterhub.site","domain":"alterhub.site","tld":"site"},"ip":{"addr":"104.21.42.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ads.alterhub.site/","date":"2026-09-27T06:27:12.376Z","timestamp":1790490432376,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alterhub.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 00:28:34 GMT","end":"Sat, 07 Nov 2026 01:28:30 GMT"},"fingerprint":{"sha1":"CC:30:2C:31:6D:59:8D:61:CD:11:F9:93:CE:16:C0:86:EE:F5:4A:5A","sha256":"FD:96:F8:0E:8C:08:48:55:A0:F2:69:BB:EA:8B:3A:98:9A:71:49:5F:30:C6:90:E1:9F:D3:7F:54:A3:38:1A:B6"}}},"request":{"raw":"GET /promoframe.html HTTP/1.1\r\nHost: ads.alterhub.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=cUPxGHX3J7dS20wMVOqgxutUGcytGbqXuq6AuboDOj4-1790490425-1.2.1.1-vQ8raaAFa5D8uXCYUxip_7065fQ5BngNItyCYK1ylXQI9tBYYGoyHSjhRqri6TZgUtRXj8kUZiodg9T1XBP4QIjBX5kAs0Eh_gZQjSL3e0cNRtOsd81hi1bxU9JS8A3xWKESiuJTZZ265fZCB6sTG_b7tIuiDL9gIouFKbL3pxzk1ETxcM1z40WrC9rcFVQq6OPxQxVEQ9opljv5_LIllJhvQkrxHAiOPJOchp.bkC2LQMULTFBIzUUhPKFVMpIxKoWe6kcM4PHOL2YRlj4T5JC76oKHSE5sZBJ24h5nouWEgEBWA2I2e5HqtQD9nAYpG1FVw6SI0ck3iiscHDJnnYz2Alt79nAj0Q5uk6MeGp0sJb48Ae2OH67i.GVDY8M7yoV.JjiPWibjFELPFWYxDVSBjcEOjx0BiF67iUorbuE\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 308 \r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/html\r\ndate: Sun, 27 Sep 2026 06:27:12 GMT\r\nlocation: /promoframe\r\nrefresh: 0;url=/promoframe\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-id: arn1::gr27x-1790490432387-e0395e364344\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Lfl3uNTVbt6DJVpc6b6soSddMaoUqNnHT%2BDNRLOl7IJOZGuHEPmypGOI%2FFCJXJtYVB6AnYHDMIrUcWXpW%2F%2BrIfTDFKn9%2FEuiUVBD9yQa4ewAQrVBjJMPYLV4zHbCHwykIFKVXg%3D%3D\"}]}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a41870f25d4b56a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"308","status_text":"Permanent Redirect","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T20:43:33.933419Z","times_seen":19037193,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}