{"report_id":"63f5d183-36ea-4dae-8d77-a4ec37d0245c","version":6,"status":"done","tags":[],"date":"2026-02-10T14:01:21Z","url":{"schema":"http","addr":"scriptsking.com","fqdn":"scriptsking.com","domain":"scriptsking.com","tld":"com"},"ip":{"addr":"172.67.215.106","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"scriptsking.com/","fqdn":"scriptsking.com","domain":"scriptsking.com","tld":"com"},"title":"scriptsking.com - Everything you need for Roblox","dom":{"size":78833,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (782)","md5":"cf2515ba2cd3169e452176dd06cc1549","sha1":"7beaf3d94ccf5a6d354d79df269c7953dde20187","sha256":"ffbc36d80fa9da08ea65727862716972d39d10c332709f4bc21efe7554761dd5","sha512":"04840a24946e923c6330c31091bd9a50606e5c98b047d6be4c3e0a6d7750795853dd67f8b82415405709fde39b54cc8fdb1a7db326f3fd14d897d7e35a2ef051","ssdeep":"1536:fg9hnsSOfpBJoWxeRZy04W9UsoU2UkrwMy:yWxeRZy04WNk2","tlshash":"6a73a464b1f281b77c73a2b5a7ed611d7b29d04bdd2ecd99bacc01109fc2af58c82614","dom_hash":"domhashbc3c3d7de4afef33597d71c6d98bc325","first_seen":"2026-01-04T14:23:49.122754Z","last_seen":"2026-02-10T14:01:23.389496Z","times_seen":4,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"scriptsking.com","fqdn":"scriptsking.com","domain":"scriptsking.com","tld":"com"},"ip":{"addr":"172.67.215.106","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-17T14:01:21Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-10","alert":"Sinkholed","trigger":"scriptsking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-10","alert":"Phishing Block","trigger":"scriptsking.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-10","alert":"Sinkholed","trigger":"scriptsking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-10","alert":"Sinkholed","trigger":"scriptsking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"bloxforge.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-03-02","domain_rank":116385,"first_seen":"2025-08-08T14:17:18.87394Z","last_seen":"2026-02-10T13:24:17.146526Z","alert_count":0,"request_count":1,"received_data":636,"sent_data":486,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-02-08T22:14:51.234086Z","alert_count":0,"request_count":3,"received_data":225650,"sent_data":1611,"comment":"","tags":null,"fingerprints":null},{"fqdn":"shortswave.com","ip":{"addr":"172.67.162.71","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-01-30","domain_rank":52118,"first_seen":"2025-08-24T07:51:57.178312Z","last_seen":"2026-02-10T11:11:21.85302Z","alert_count":0,"request_count":1,"received_data":4614,"sent_data":446,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"scriptsking.com","ip":{"addr":"172.67.215.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-06-29","domain_rank":5324482,"first_seen":"2025-08-24T07:51:57.177654Z","last_seen":"2026-02-10T13:24:17.24431Z","alert_count":44,"request_count":11,"received_data":2255075,"sent_data":4877,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-02-08T22:32:21.331091Z","alert_count":0,"request_count":1,"received_data":263484,"sent_data":431,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"i.imgur.com","ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2009-01-09","domain_rank":3309,"first_seen":"2012-05-21T08:09:36Z","last_seen":"2026-02-04T16:08:28.614024Z","alert_count":0,"request_count":1,"received_data":9923,"sent_data":432,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-02-08T22:17:48.645662Z","alert_count":0,"request_count":3,"received_data":22689,"sent_data":1555,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"scriptsking.com/","fqdn":"scriptsking.com","domain":"scriptsking.com","tld":"com"},"ip":{"addr":"172.67.215.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0500094bf9de62c291009c83c73f62d4","sha1":"70d4115a1d884683d7e5b41d0f5b85c0126ec10c","sha256":"4e9190e586ffe6d481b33ddb142ccce60021cdf704b3339809d221e947627a42","sha512":"4b22c65943f503bba1685a0d2e8d7d5c85187ebd6fb64585f2137aceed2b16eeb8ae8e8620201d600ea3a0f0f5b23fc7147594d7282fccd29647bdbfa2f9b69c","ssdeep":"","tlshash":"abb012d33749142096bb61564250539c203150533881d036f91c02004f40601d038180","size":117,"data":"","first_seen":"2026-01-04T14:23:49.158576Z","last_seen":"2026-02-26T12:21:19.226519Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@tailwindcss/browser@4","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c1cf5ad5cab813c9a356f5fc08b32a26","sha1":"ba385828d18aedaac4d3ebffb5cbfc0a62c79db4","sha256":"095aecf02b90db863681ea3be03450fb14079e5de8d526ee8909986ca71843cd","sha512":"f70bd982041fc9d8f6a161310437254535a2534077b0e711e6d5ab8bd35bc2d779b9baeaa4e44be7d86502113925ff0cb9870b77ad041ddd61efd60f59a1e274","ssdeep":"3072:JIGxSYIDJOWI1/LBQ6N22KpNYqgwDoKwod0PEUsa3a9+PBCrtRZQN585MipZgLWm:FNoKjW6N22KpNYqgTazATFIyiuvH","tlshash":"31441a353603a03e5fab42da20ee6004d63ea765a75840e9f782d51f11e5af809f7f39","size":262709,"data":"","first_seen":"2025-12-12T04:26:46.287816Z","last_seen":"2026-07-10T23:59:17.819607Z","times_seen":176,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"scriptsking.com/","fqdn":"scriptsking.com","domain":"scriptsking.com","tld":"com"},"ip":{"addr":"172.67.215.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9e48e062b30da9347f507f4bbc005941","sha1":"8f88010cbfffa13bf861feadfdcad4e1d5d412a7","sha256":"55951ddcf31c68bc7889b305d2ba53d34fdf8ebb25ac8d3ccc818d2276e35bb2","sha512":"7fa382ffc0ade199ab765aebd2597391ca81025a5d31267b5cd85bd6ac577d46b1cbb3732f82e600c1404fe2dd0147ceee2b0c7c0e2b4c690cb8a2fb1bad9677","ssdeep":"","tlshash":"6f51871bb5e1993704ff75aa67cfda5c362200479845cd123f5c8b426f22e9009b3aed","size":3042,"data":"","first_seen":"2026-01-04T14:23:49.159414Z","last_seen":"2026-02-26T12:21:19.227571Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"scriptsking.com/img/raccoon.png","fqdn":"scriptsking.com","domain":"scriptsking.com","tld":"com"},"ip":{"addr":"172.67.215.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://scriptsking.com/","date":"2026-02-10T14:00:56.103Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scriptsking.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 20:09:27 GMT","end":"Tue, 24 Mar 2026 21:08:03 GMT"},"fingerprint":{"sha1":"C0:9F:CE:17:F8:76:33:21:D4:DF:1F:B3:CA:4B:01:30:1E:FE:2B:FD","sha256":"48:AB:D2:22:1F:5E:39:5A:72:F8:4D:B4:C9:E6:04:8D:94:5D:78:E3:57:32:AA:E0:98:60:F3:3C:4A:0C:3A:47"}}},"request":{"raw":"GET /img/raccoon.png HTTP/1.1\r\nHost: scriptsking.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://scriptsking.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 10 Feb 2026 14:00:56 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 03 Jul 2025 11:01:13 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 84064\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nage: 2223\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mMyTvZ7n2XcNG%2FrKfd38SQfuBiP1a8qOR83l80%2BnBUy8PMPll0YC%2B8YYL2nWh7ObefuyaQHKQezPCDW5wHydiUHzVyhJ78GK2ZdvcB8%3D\"}]}\r\ncf-ray: 9cbc22b67c080b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84064,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"1f19ae097315f4e9e5ddfc785af4fa36","sha1":"bb7417eb7009cbfc1ee5dc89f527c7b46b824559","sha256":"ff8bd22e6ed3f73d3d2ce137b7a9194c33c995a2a0f744549cade7975cc45932","sha512":"b5c1d8f249d46f40f89419ab65d0e11b11d0cb1f492754ee7930f69cf573a588cf0c9cd42cb36dbd66cd155b3060926ac8855ecd4f5772e778cc1dc0d46a7e2c","ssdeep":"1536:oUd9MjMGoLH7S3b6EXq9wInuWV1Qbkln4L2mZNEpShW/978Quol22gO:oUd9ZGM0uKqbEkl47jsShZoLgO","tlshash":"09830297e74bfe74c2cbb5514fb6170eb0e07344c3bd48b5e85be3a2146026da3a6852","first_seen":"2026-01-04T14:23:49.157002Z","last_seen":"2026-02-26T12:21:19.218136Z","times_seen":5,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-10","alert":"Sinkholed","trigger":"scriptsking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-10","alert":"Phishing Block","trigger":"scriptsking.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-10","alert":"Sinkholed","trigger":"scriptsking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-10","alert":"Sinkholed","trigger":"scriptsking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"scriptsking.com/img/blox-fruits.png","fqdn":"scriptsking.com","domain":"scriptsking.com","tld":"com"},"ip":{"addr":"172.67.215.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://scriptsking.com/","date":"2026-02-10T14:00:56.095Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scriptsking.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 20:09:27 GMT","end":"Tue, 24 Mar 2026 21:08:03 GMT"},"fingerprint":{"sha1":"C0:9F:CE:17:F8:76:33:21:D4:DF:1F:B3:CA:4B:01:30:1E:FE:2B:FD","sha256":"48:AB:D2:22:1F:5E:39:5A:72:F8:4D:B4:C9:E6:04:8D:94:5D:78:E3:57:32:AA:E0:98:60:F3:3C:4A:0C:3A:47"}}},"request":{"raw":"GET /img/blox-fruits.png HTTP/1.1\r\nHost: scriptsking.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://scriptsking.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 10 Feb 2026 14:00:56 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 02 Jul 2025 18:32:44 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 414893\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nage: 2223\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FbQ2h9ob6Q7uy54vhyO6ezGDMHCgSbSO9hE5CMFt%2B4mtc1LTgLrt7iR%2Fyv%2FXwIjGoGYBc7BhJa%2Brcyls2JAZ5hSnjaD47s32PIVBv14%3D\"}]}\r\ncf-ray: 9cbc22b67c040b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":414893,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGB, non-interlaced","md5":"ca5a247c905db633b7ba6681c50a802c","sha1":"14e671745f0112c562e2ddb86bae2dd069967d0f","sha256":"6b30fe152a5d93ffc85842cae02ffbd41bb9494626b3112967c7ccc5e4eab31e","sha512":"4aba0bcb759bf956cdd2cde74764fc623f8d94d8ea06ed2e608129f1033529acd9307a41e55ac40fa4ca7a31c5ded2fd62e614763f25552f6502d8f0cafcfe84","ssdeep":"12288:3LT6kH/UXoWyNhooRS3C7vRbPL6C0EAt6OODoPG03rIo:3LT6EUlyNmoRSSw/EAKE30o","tlshash":"2094233c926392bc969f6477f8837b9194cd15f2c30396c614bd20b1b2e2ae235a6635","first_seen":"2026-01-04T14:23:49.155979Z","last_seen":"2026-02-26T12:21:19.210123Z","times_seen":5,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":107,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-10","alert":"Sinkholed","trigger":"scriptsking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-10","alert":"Phishing Block","trigger":"scriptsking.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-10","alert":"Sinkholed","trigger":"scriptsking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-10","alert":"Sinkholed","trigger":"scriptsking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@tailwindcss/browser@4","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://scriptsking.com/","date":"2026-02-10T14:00:56.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/@tailwindcss/browser@4 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://scriptsking.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 4.1.18\r\nx-jsd-version-type: version\r\netag: W/\"40235-ujhYKNGK7arE0+v/tcv8CmLHnbQ\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Tue, 10 Feb 2026 14:00:56 GMT\r\nage: 33155\r\nx-served-by: cache-fra-eddf8230174-FRA, cache-hel1410024-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 64730\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":262709,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65269)","md5":"c1cf5ad5cab813c9a356f5fc08b32a26","sha1":"ba385828d18aedaac4d3ebffb5cbfc0a62c79db4","sha256":"095aecf02b90db863681ea3be03450fb14079e5de8d526ee8909986ca71843cd","sha512":"f70bd982041fc9d8f6a161310437254535a2534077b0e711e6d5ab8bd35bc2d779b9baeaa4e44be7d86502113925ff0cb9870b77ad041ddd61efd60f59a1e274","ssdeep":"3072:JIGxSYIDJOWI1/LBQ6N22KpNYqgwDoKwod0PEUsa3a9+PBCrtRZQN585MipZgLWm:FNoKjW6N22KpNYqgTazATFIyiuvH","tlshash":"31441a353603a03e5fab42da20ee6004d63ea765a75840e9f782d51f11e5af809f7f39","first_seen":"2025-12-12T04:26:46.287816Z","last_seen":"2026-07-10T23:59:17.819607Z","times_seen":176,"resource_available":true,"data":null}},"time_used":152,"timings":{"blocked":53,"dns":1,"connect":13,"send":0,"wait":16,"receive":16,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"scriptsking.com/img/candybb.png","fqdn":"scriptsking.com","domain":"scriptsking.com","tld":"com"},"ip":{"addr":"172.67.215.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://scriptsking.com/","date":"2026-02-10T14:00:56.102Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scriptsking.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 20:09:27 GMT","end":"Tue, 24 Mar 2026 21:08:03 GMT"},"fingerprint":{"sha1":"C0:9F:CE:17:F8:76:33:21:D4:DF:1F:B3:CA:4B:01:30:1E:FE:2B:FD","sha256":"48:AB:D2:22:1F:5E:39:5A:72:F8:4D:B4:C9:E6:04:8D:94:5D:78:E3:57:32:AA:E0:98:60:F3:3C:4A:0C:3A:47"}}},"request":{"raw":"GET /img/candybb.png HTTP/1.1\r\nHost: scriptsking.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://scriptsking.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 10 Feb 2026 14:00:56 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 03 Jul 2025 11:01:13 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 136391\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nage: 2223\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GwrXNHpzkKcn277go2B1hz%2BrAc2X4kRtRjJsi8sfG5186wGnyGBK5L2QOHfLgaU3Vwdkz11kP0ZEGWa7e2KtNuTdIDt0IqqS4VN8sFc%3D\"}]}\r\ncf-ray: 9cbc22b67c070b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":136391,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"7bbda42d700f3246f181326b908daa88","sha1":"4eecf5a18bcf2c04f8dbcec10b2d66bd169a0e4c","sha256":"572f57a9b93df0a367f0900c67f9f4d92e53da389f93290dc92a2b559a88a01c","sha512":"a697ed1b8e6ec9d78ec2d8c91ffc130c2f127a73b478f7c45a9fc2d12be7395937c6507c9229e6ade54d0fcca290417b985062f1325597ab9ab85f18b6a7d650","ssdeep":"3072:SF9nzlRd4pDZ4XknEWINBQ5DoK0VYDjNtbIZxtaP+20oEBBh0zVhGA4Vwl:Y9n/qj3EDgxoKuYDj/bIZxYP+Too0/Pl","tlshash":"89d312008c504c95ec9f4b70add65482fff47221c76be57c3f006ae90cd21eaea6966b","first_seen":"2026-01-04T14:23:49.133376Z","last_seen":"2026-02-26T12:21:19.211195Z","times_seen":5,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-10","alert":"Sinkholed","trigger":"scriptsking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-10","alert":"Sinkholed","trigger":"scriptsking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-10","alert":"Sinkholed","trigger":"scriptsking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-10","alert":"Phishing Block","trigger":"scriptsking.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"scriptsking.com/css/dark.css","fqdn":"scriptsking.com","domain":"scriptsking.com","tld":"com"},"ip":{"addr":"172.67.215.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://scriptsking.com/","date":"2026-02-10T14:00:56.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scriptsking.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 20:09:27 GMT","end":"Tue, 24 Mar 2026 21:08:03 GMT"},"fingerprint":{"sha1":"C0:9F:CE:17:F8:76:33:21:D4:DF:1F:B3:CA:4B:01:30:1E:FE:2B:FD","sha256":"48:AB:D2:22:1F:5E:39:5A:72:F8:4D:B4:C9:E6:04:8D:94:5D:78:E3:57:32:AA:E0:98:60:F3:3C:4A:0C:3A:47"}}},"request":{"raw":"GET /css/dark.css HTTP/1.1\r\nHost: scriptsking.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://scriptsking.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 10 Feb 2026 14:00:56 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 02 Jul 2025 18:32:47 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DxzMoGPXB56ypxmKM9dJUK8donlDUDahMchXk5vww97JyYHxPXgohGGzR6U2KOmjGOfM9r7H%2FzhPVqzECstVmHyxGbD4s4VvOnSm3KU%3D\"}]}\r\ncontent-encoding: br\r\ncontent-type: text/css\r\nage: 2223\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 9cbc22b66bff0b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8722,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"8e82835e48b913d9ba4dbc0b79cc0796","sha1":"c2c0b2661bf6f4a3a9f0e891553f22acf459caa6","sha256":"9eb30a077d9f6a135a6305f6485fe17b2cdafb0bafc6e2c4ccb59d50c1b7928a","sha512":"16fe932d840398d9df6d7d56de8beb8ab025a2b15ab104bf35d5056fd37165f2484095df4c0a410f8abde47686ed10ae932a45d2cdc5e59df3ecd74ce7a34312","ssdeep":"192:g1FTBDumzOBgnOiEKVPSR4YLfEw0NM4ujh/53HHgtG:yg0O4lG","tlshash":"95021159964221466237d7b4a7f3031ceb784013d91309ac73df36951ffa5ac8293ead","first_seen":"2026-01-04T14:23:49.126054Z","last_seen":"2026-02-26T12:21:19.221196Z","times_seen":5,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-10","alert":"Phishing Block","trigger":"scriptsking.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-10","alert":"Sinkholed","trigger":"scriptsking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-10","alert":"Sinkholed","trigger":"scriptsking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-10","alert":"Sinkholed","trigger":"scriptsking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.imgur.com/4yeXkAK.png","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://scriptsking.com/","date":"2026-02-10T14:00:56.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 29 Jan 2025 00:00:00 GMT","end":"Sat, 14 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E4:72:56:8F:0D:0E:0B:E1:47:1E:79:39:7A:0F:AB:05:30:AF:2A:2D","sha256":"B2:9B:23:54:25:04:8F:9E:C6:BC:84:54:20:8B:AB:34:8C:F1:7E:8A:57:AD:55:F3:C9:40:C3:4E:8B:E5:30:6F"}}},"request":{"raw":"GET /4yeXkAK.png HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://scriptsking.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nlast-modified: Tue, 01 Jul 2025 22:20:09 GMT\r\netag: \"14d3867d27b8847205dc4b2be4575a25\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-cf-pop: IAD89-P1\r\nx-amz-cf-id: E7AeqVSX3pvgcabbL9AEXanv0GoLZCOx1gvUvpq5Ju0CxGMPM8881w==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 1584407\r\ndate: Tue, 10 Feb 2026 14:00:56 GMT\r\nx-served-by: cache-iad-kiad7000069-IAD, cache-hel1410021-HEL\r\nx-cache: Miss from cloudfront, HIT, HIT\r\nx-cache-hits: 409, 0\r\nx-timer: S1770732056.169148,VS0,VE1\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-length: 9168\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":9168,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 179 x 45, 8-bit/color RGBA, non-interlaced","md5":"14d3867d27b8847205dc4b2be4575a25","sha1":"fe580b9e3480baa7a7ce5189420f8aee136d827b","sha256":"60861a17d5e85663d594da16a01109c892b5ccd5c3ad52b64ac4429063fc1e6c","sha512":"7b15025e5b3568d06199651ddeec58f7fbe891b494509d792c31cad79d741e55f945825678984a223135eb3700ce9af1cda77b721cb2ecbde9c9f37b89c9e64b","ssdeep":"192:ZuTMBXYkZ6Hym7xHUJLmDuqj+aBD2KWjuQAufUszAbyXKK0:ZcIIkgpDljgNiQAu8sz0yXn0","tlshash":"2312bfda37f64b0ce1426274412cac3a0de5b837527ebfcf02f65d251362a7865a0745","first_seen":"2026-01-04T14:23:49.147531Z","last_seen":"2026-02-26T12:21:19.216292Z","times_seen":5,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":76,"dns":29,"connect":18,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Exo:ital,wght@0,100..900;1,100..900\u0026family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026family=Open+Sans:ital,wght@0,300..800;1,300..800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://scriptsking.com/","date":"2026-02-10T14:00:56.305Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 08:38:20 GMT","end":"Mon, 13 Apr 2026 08:38:19 GMT"},"fingerprint":{"sha1":"62:20:97:37:86:22:13:0B:BF:38:69:D4:17:18:8A:EA:43:CD:45:29","sha256":"89:3F:DC:64:16:F6:2F:76:F1:04:F1:32:86:F3:B0:4D:A5:74:BE:7C:20:89:75:B7:00:70:9C:E6:A1:2E:CE:69"}}},"request":{"raw":"GET /css2?family=Exo:ital,wght@0,100..900;1,100..900\u0026family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026family=Open+Sans:ital,wght@0,300..800;1,300..800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://scriptsking.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 10 Feb 2026 14:00:56 GMT\r\ndate: Tue, 10 Feb 2026 14:00:56 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19439,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"1454c1f206ea92bb986666b1d5e7a4fd","sha1":"83e32badf22dcdd90117e3763be1b3cef39aa156","sha256":"86ac0642b2c273209e68536c308ffb8f650c0ea1d50a04f9d84d43d3693e642d","sha512":"6295211c4b3044d33e56fe987f84bbd5f2741ab6b3551c80e4e208c28ce6d3bae8f379325e3a8883c638999a04711c01962e23a52f7957aa601d1ba7317a1bb6","ssdeep":"384:cklI9MtfcHjg8ciI0QOkTltULv1qY49GnDu6SqY47:sFJNGs","tlshash":"9d922d91042b5440aa831cd233df7e31ee4fa2557084d1b9affd5acaacdad26637835c","first_seen":"2026-01-04T14:23:49.152537Z","last_seen":"2026-02-26T12:21:19.212092Z","times_seen":5,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bloxforge.com/wp-content/uploads/2025/03/Delta-Exploits-backgroung-image.webp","fqdn":"bloxforge.com","domain":"bloxforge.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://scriptsking.com/","date":"2026-02-10T14:00:56.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bloxforge.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Dec 2025 15:28:10 GMT","end":"Sun, 22 Mar 2026 16:24:45 GMT"},"fingerprint":{"sha1":"F5:2C:C7:08:61:BC:B0:50:84:F4:46:FD:A6:59:2D:ED:72:36:1A:0B","sha256":"DC:14:0C:1D:BF:C6:10:F2:F3:0A:98:DD:B2:B5:C1:06:BB:51:47:4C:47:7A:42:60:66:0B:DC:7C:04:85:65:38"}}},"request":{"raw":"GET /wp-content/uploads/2025/03/Delta-Exploits-backgroung-image.webp HTTP/1.1\r\nHost: bloxforge.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://scriptsking.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Tue, 10 Feb 2026 14:00:56 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 22 Jul 2025 05:35:53 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6vz0TKSeuxkwFlbLeF1lUptai0zUCjo6BEtH5TOrsQkuZT7PPyG6C8QkMuLJofEPHqsWER3mSWZ7BxZFc1WOpi3V8WD3lhLYLbI8Udw%3D\"}]}\r\ncache-control: max-age=7200\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: br\r\ncf-ray: 9cbc22b94af676ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T11:07:12.655044Z","times_seen":17760269,"resource_available":true,"data":null}},"time_used":215,"timings":{"blocked":51,"dns":22,"connect":1,"send":0,"wait":111,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://scriptsking.com/","date":"2026-02-10T14:00:56.481Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 08:38:19 GMT","end":"Mon, 13 Apr 2026 08:38:18 GMT"},"fingerprint":{"sha1":"F1:9D:07:D0:16:5F:B5:2B:B0:D8:35:9E:A2:61:22:81:10:E3:EA:4B","sha256":"58:9C:D2:99:D3:49:E4:DE:C4:A1:20:FF:EC:1F:07:F8:A1:86:34:E5:25:AA:24:F3:5D:BC:11:96:1E:52:88:C8"}}},"request":{"raw":"GET /s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://scriptsking.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 72964\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 07 Feb 2026 18:24:10 GMT\r\nexpires: Sun, 07 Feb 2027 18:24:10 GMT\r\ncache-control: public, max-age=31536000\r\nage: 243406\r\nlast-modified: Tue, 09 Sep 2025 18:33:18 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":72964,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 72964, version 1.0","md5":"91247c94dcda6ff52b445d71d6bbfb81","sha1":"ad2f62363ed047b430b91f32afa31df51fcd7c5e","sha256":"6a3c3e024b31eeacbf1f19c3c7be78612d91c623186f64035a50038241dad4f9","sha512":"a12dcac84e9f9ae02df3aabe29d76994281cd1005edca471194605cfcd6a0456eec872fd28c63c72ae124804d0b47d8377048caae49c40b0a18b5d6be4d6213f","ssdeep":"768:zbw+rLBkMxbCkupj4Y69/Yr71+j9pWiKahMM6+AWEqXB0oGuNGku+QCcIKE205C7:zbw+iwuS/iZWeaO1zP1/9Esvf8fXnm1","tlshash":"8f6302244e3c50c2a54d33aa286940f6f6e79c75b2b79ba4a69c589cd410f329cdfdc4","first_seen":"2025-05-29T18:51:13.223047Z","last_seen":"2026-08-07T10:58:12.37605Z","times_seen":31516,"resource_available":false,"data":null}},"time_used":299,"timings":{"blocked":135,"dns":2,"connect":21,"send":0,"wait":30,"receive":9,"ssl":99},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/materialicons/v145/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://scriptsking.com/","date":"2026-02-10T14:00:56.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 08:38:19 GMT","end":"Mon, 13 Apr 2026 08:38:18 GMT"},"fingerprint":{"sha1":"F1:9D:07:D0:16:5F:B5:2B:B0:D8:35:9E:A2:61:22:81:10:E3:EA:4B","sha256":"58:9C:D2:99:D3:49:E4:DE:C4:A1:20:FF:EC:1F:07:F8:A1:86:34:E5:25:AA:24:F3:5D:BC:11:96:1E:52:88:C8"}}},"request":{"raw":"GET /s/materialicons/v145/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://scriptsking.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 128352\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 06 Feb 2026 13:21:30 GMT\r\nexpires: Sat, 06 Feb 2027 13:21:30 GMT\r\ncache-control: public, max-age=31536000\r\nage: 347966\r\nlast-modified: Wed, 17 Sep 2025 16:29:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":128352,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 128352, version 1.0","md5":"53436aca8627a49f4deaaa44dc9e3c05","sha1":"0bc0c675480d94ec7e8609dda6227f88c5d08d2c","sha256":"8265f64786397d6b832d1ca0aafdf149ad84e72759fffa9f7272e91a0fb015d1","sha512":"6655e0426eb0c78a7cb4d4216a3af7a6edd50aba8c92316608b1f79b8fc15f895cba9314beb7a35400228786e2a78a33e8c03322da04e0da94c2f109241547e8","ssdeep":"3072:b4XkN5u3RbAR2r4lJ8FBnP7fNblbKBRvqy:fGdA8FBP7fNb5y","tlshash":"91c3231efc32af9a2e1724ec288521809c1e92fbe0b3512cf565f437e76517d999ca09","first_seen":"2023-04-05T13:19:11Z","last_seen":"2026-08-07T11:10:10.917479Z","times_seen":75640,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":70,"dns":0,"connect":0,"send":0,"wait":23,"receive":55,"ssl":58},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Material+Symbols+Outlined:opsz,wght,FILL,GRAD@20..48,100..700,0..1,-50..200","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://scriptsking.com/","date":"2026-02-10T14:00:56.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 08:38:20 GMT","end":"Mon, 13 Apr 2026 08:38:19 GMT"},"fingerprint":{"sha1":"62:20:97:37:86:22:13:0B:BF:38:69:D4:17:18:8A:EA:43:CD:45:29","sha256":"89:3F:DC:64:16:F6:2F:76:F1:04:F1:32:86:F3:B0:4D:A5:74:BE:7C:20:89:75:B7:00:70:9C:E6:A1:2E:CE:69"}}},"request":{"raw":"GET /css2?family=Material+Symbols+Outlined:opsz,wght,FILL,GRAD@20..48,100..700,0..1,-50..200 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://scriptsking.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 10 Feb 2026 14:00:56 GMT\r\ndate: Tue, 10 Feb 2026 14:00:56 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":627,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"b5523ee034734fffe459c1fb1a07c8fa","sha1":"fa649d98b41fe8ca24030bfebf0b1b31d7643e04","sha256":"e94ef8e2ec82c24ec8ab19bd5f66bd0cdfdffdb96eb1dd27e9ea4c2a7e59db5f","sha512":"4bbd04b17af53b887d7e239702c2a44c6f30aa498eb8fc6ece678dd1d29f966a72d29c576bf651dff0bf62836decfe6df722aed269436245abd50c3cadf38b39","ssdeep":"","tlshash":"39f0ac586a1a5805a1150c97330f3f220e1e451f294ad8feaf410d0c9efe4774345b0f","first_seen":"2026-02-09T18:05:34.403785Z","last_seen":"2026-02-10T21:48:33.037659Z","times_seen":28,"resource_available":false,"data":null}},"time_used":429,"timings":{"blocked":197,"dns":0,"connect":21,"send":0,"wait":19,"receive":0,"ssl":188},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"scriptsking.com/","fqdn":"scriptsking.com","domain":"scriptsking.com","tld":"com"},"ip":{"addr":"172.67.215.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-10T14:00:55.730Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scriptsking.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 20:09:27 GMT","end":"Tue, 24 Mar 2026 21:08:03 GMT"},"fingerprint":{"sha1":"C0:9F:CE:17:F8:76:33:21:D4:DF:1F:B3:CA:4B:01:30:1E:FE:2B:FD","sha256":"48:AB:D2:22:1F:5E:39:5A:72:F8:4D:B4:C9:E6:04:8D:94:5D:78:E3:57:32:AA:E0:98:60:F3:3C:4A:0C:3A:47"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: scriptsking.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 10 Feb 2026 14:00:55 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Thu, 30 Oct 2025 03:26:17 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Miq1SGuoVtdF122p4zDxQQnQ7gksUELGoCr%2ByOHS7DvPRMpoUuWaJ7DVY6W%2FZbN2PwwzrEaFxlNVmRTXcp%2FkCvfnH6bm1Kv8ZyLQF6o%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9cbc22b4b9f85693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}],"data":{"size":41341,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (780), with CRLF line terminators","md5":"255477e38ac94b67a87e2c546a114d03","sha1":"c5c7eea4899f7efb4b068d4b9b708587b1516c31","sha256":"ca927ab5ca0f2b63ade852301b9179c30e33fd3cf6de655f112cbf562c186f00","sha512":"0a9a8bf99c52c2033ff177f04cb7e8606dc54ca8b8875da2dbdab503d4b779703d2a965531acc2d592ab2911f3bf49432b29b9ce19cc81ffd88044c7d4f449e9","ssdeep":"768:UQJm0tJt7EIQQfGHdfgakMAzipN5gBiB5a1Zk:ja3Ha1y","tlshash":"2703947565d1057b01f382b2e671ab6dffa98187d60bc418b2ed93832fb2c84cd53668","first_seen":"2026-01-04T14:23:49.154538Z","last_seen":"2026-02-10T14:01:23.39654Z","times_seen":4,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":57,"dns":37,"connect":1,"send":0,"wait":103,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-10","alert":"Phishing Block","trigger":"scriptsking.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-10","alert":"Sinkholed","trigger":"scriptsking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-10","alert":"Sinkholed","trigger":"scriptsking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-10","alert":"Sinkholed","trigger":"scriptsking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shortswave.com/images/Button-Icon.svg","fqdn":"shortswave.com","domain":"shortswave.com","tld":"com"},"ip":{"addr":"172.67.162.71","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://scriptsking.com/","date":"2026-02-10T14:00:56.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shortswave.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 19:32:04 GMT","end":"Fri, 10 Apr 2026 20:30:37 GMT"},"fingerprint":{"sha1":"97:8B:B5:05:5E:47:BE:83:4C:C3:7E:10:82:BC:C6:62:3E:69:0C:77","sha256":"E9:BC:00:CF:52:FE:30:E3:27:F9:BF:A5:CE:BC:1B:90:44:32:3C:82:C6:D7:FB:F9:00:CE:06:E9:0D:A7:69:33"}}},"request":{"raw":"GET /images/Button-Icon.svg HTTP/1.1\r\nHost: shortswave.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://scriptsking.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 10 Feb 2026 14:00:56 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 14 Nov 2024 18:01:50 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z9cBp%2F5oRLdBKNqsxtga9LfBDfzd%2BIh%2FWQXym22hnkbFvEmihj3eSpoC2wIYMhSz2UALdofn3gfReGTiDvGq6IkqkoCNLezH9NSQOA%3D%3D\"}]}\r\nage: 3970\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"67363b0e-f6b\"\r\ncontent-encoding: br\r\ncf-ray: 9cbc22b6e9a956b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3947,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c53216fe158a77b7df25aeeba4fed20c","sha1":"58cb572f116b216981cff9f5f6a168a7a75d36dd","sha256":"f6e90f1976a26eef3fda79ea344626da71fff1d807b0ed039d0c41450b551040","sha512":"41d6183c6372794b9d01113bf377fa4c516521aeb059c84fc7751c6014d24ff2002dc3e7a02176bb0ed7ec3591d9185b3c92e447ec49d30cbe8c805992f845fe","ssdeep":"","tlshash":"7481a8f0f19ca1d0a80baba0f4168a95b59f14fd7ff99fc283b0125a651316d8a7dcd0","first_seen":"2026-01-04T14:23:49.128654Z","last_seen":"2026-05-18T23:47:06.223845Z","times_seen":6,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":54,"dns":21,"connect":4,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/exo/v25/4UaOrEtFpBISc36j.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://scriptsking.com/","date":"2026-02-10T14:00:56.475Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 08:38:19 GMT","end":"Mon, 13 Apr 2026 08:38:18 GMT"},"fingerprint":{"sha1":"F1:9D:07:D0:16:5F:B5:2B:B0:D8:35:9E:A2:61:22:81:10:E3:EA:4B","sha256":"58:9C:D2:99:D3:49:E4:DE:C4:A1:20:FF:EC:1F:07:F8:A1:86:34:E5:25:AA:24:F3:5D:BC:11:96:1E:52:88:C8"}}},"request":{"raw":"GET /s/exo/v25/4UaOrEtFpBISc36j.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://scriptsking.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 21828\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 06 Feb 2026 13:03:28 GMT\r\nexpires: Sat, 06 Feb 2027 13:03:28 GMT\r\ncache-control: public, max-age=31536000\r\nage: 349048\r\nlast-modified: Tue, 09 Sep 2025 18:57:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":21828,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21828, version 1.0","md5":"40836fee7a598ef229d06bf980e0e75f","sha1":"7b52a6ecd225795e276b548eab6f28628eb60b21","sha256":"18bbf39a4e6915f988af7263ab2d92858949dc317e2fcfd3e77908f7a36cbc2c","sha512":"6e511e48953a95876b6327013ba9b231f6d7fdee326b4ba88182f2e4e44d3acda336b3c447cffd6f76880d0bf9bb0be2b8cf75289e3f9eda83da612cfb5c0e37","ssdeep":"384:NA/aRBQ7DN907nJyk+VgjQrIrDibRQvDyvycNsL98A75InDbLXaI9G1Pu:pQV907Jd+VSQ7bRQ7yvDN4fk/7F8Pu","tlshash":"d9a2f110cc5119b88f4afa74c12d7a963ed10358195cbf0cf96cb5eadd71748536462a","first_seen":"2025-06-02T18:19:41.054001Z","last_seen":"2026-08-07T07:41:04.373194Z","times_seen":2825,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":89,"dns":2,"connect":22,"send":0,"wait":76,"receive":5,"ssl":58},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"scriptsking.com/favicon.ico","fqdn":"scriptsking.com","domain":"scriptsking.com","tld":"com"},"ip":{"addr":"172.67.215.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://scriptsking.com/","date":"2026-02-10T14:00:56.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scriptsking.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 20:09:27 GMT","end":"Tue, 24 Mar 2026 21:08:03 GMT"},"fingerprint":{"sha1":"C0:9F:CE:17:F8:76:33:21:D4:DF:1F:B3:CA:4B:01:30:1E:FE:2B:FD","sha256":"48:AB:D2:22:1F:5E:39:5A:72:F8:4D:B4:C9:E6:04:8D:94:5D:78:E3:57:32:AA:E0:98:60:F3:3C:4A:0C:3A:47"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: scriptsking.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://scriptsking.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Tue, 10 Feb 2026 14:00:56 GMT\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nekVCbYoZ%2BMUGgGIG5X0SQJkT8E1pNV4oyaHmEFwgGIpre06f3N0MLRqvptnn0a2hwVuqaDJ6iowCl6BBsyrTeewSw8QCMXMuLoU3gc%3D\"}]}\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=iso-8859-1\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cbc22ba3c240b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-08-07T09:31:22.388744Z","times_seen":146669,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-10","alert":"Sinkholed","trigger":"scriptsking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-10","alert":"Sinkholed","trigger":"scriptsking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-10","alert":"Phishing Block","trigger":"scriptsking.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-10","alert":"Sinkholed","trigger":"scriptsking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/icon?family=Material+Icons","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://scriptsking.com/","date":"2026-02-10T14:00:56.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 08:38:20 GMT","end":"Mon, 13 Apr 2026 08:38:19 GMT"},"fingerprint":{"sha1":"62:20:97:37:86:22:13:0B:BF:38:69:D4:17:18:8A:EA:43:CD:45:29","sha256":"89:3F:DC:64:16:F6:2F:76:F1:04:F1:32:86:F3:B0:4D:A5:74:BE:7C:20:89:75:B7:00:70:9C:E6:A1:2E:CE:69"}}},"request":{"raw":"GET /icon?family=Material+Icons HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://scriptsking.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 10 Feb 2026 14:00:56 GMT\r\ndate: Tue, 10 Feb 2026 14:00:56 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":565,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"2b7a8d84952a9183b106df19f711324e","sha1":"a92c5e12b422bba9ebb447e1852d9681487361bc","sha256":"282801a0d182035440d5ef6d429d227126d2e6720a52b91d31a7d746c758154e","sha512":"d7ef3f86fe9fa5730a118c688b8f779e82ec3695df5ec48953905ed078ef4d78a3c8005021574d936f69ff0467968b6e68fbcb0680894470abf8f26200af2e0c","ssdeep":"","tlshash":"c0f0c064be0a988566110c42370f3f164d1d401fa80ac8fe8b911d4c8cff1bb134670f","first_seen":"2025-09-17T21:11:07.996842Z","last_seen":"2026-08-07T11:10:10.928569Z","times_seen":60623,"resource_available":false,"data":null}},"time_used":428,"timings":{"blocked":195,"dns":1,"connect":7,"send":0,"wait":21,"receive":0,"ssl":201},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"scriptsking.com/img/fisch.png","fqdn":"scriptsking.com","domain":"scriptsking.com","tld":"com"},"ip":{"addr":"172.67.215.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://scriptsking.com/","date":"2026-02-10T14:00:56.092Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scriptsking.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 20:09:27 GMT","end":"Tue, 24 Mar 2026 21:08:03 GMT"},"fingerprint":{"sha1":"C0:9F:CE:17:F8:76:33:21:D4:DF:1F:B3:CA:4B:01:30:1E:FE:2B:FD","sha256":"48:AB:D2:22:1F:5E:39:5A:72:F8:4D:B4:C9:E6:04:8D:94:5D:78:E3:57:32:AA:E0:98:60:F3:3C:4A:0C:3A:47"}}},"request":{"raw":"GET /img/fisch.png HTTP/1.1\r\nHost: scriptsking.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://scriptsking.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 10 Feb 2026 14:00:56 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 02 Jul 2025 18:32:45 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 1109302\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nage: 2223\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NvNRDQy%2BqeBFIiM1zWz%2BNwFWh54oVhzXQMXYCwD2d8MReR6QnnUDA1p89P0hyGzMxNAq%2BXzKUT8TvnQNEJNv8lzEp448Ep7tIRJxFH4%3D\"}]}\r\ncf-ray: 9cbc22b67c030b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1109302,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1200 x 1200, 8-bit/color RGBA, non-interlaced","md5":"7ff16ddffbaadefb4c4d2bb4d237ef96","sha1":"0a55891458f395b425712d56ec9305c2a19d902e","sha256":"68cec7c3a8419f57cf8690a1797fa07e5f542e475fb9b5a151dc98b7b0ac1943","sha512":"f81236ad90fbdd61c20107484e1278258ab16c242d8f814e234b632ce7fe3b8aa45e4bffcab3105fbbc40e900859468406b13965b53100409040622dd82ea75e","ssdeep":"24576:a34awWN/OccmZbt/tCEP97gfEpNtHjVA+lmat1xqg/zH:S4a3NGcxZb7Ng8ppAaZbH","tlshash":"2625339dd04a7ad7c7d8e9fda77b92e8eb19d318421051324420f1b0ee6b23947b4bc4","first_seen":"2026-01-04T14:23:49.157761Z","last_seen":"2026-02-26T12:21:19.217205Z","times_seen":5,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":152,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-10","alert":"Sinkholed","trigger":"scriptsking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-10","alert":"Phishing Block","trigger":"scriptsking.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-10","alert":"Sinkholed","trigger":"scriptsking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-10","alert":"Sinkholed","trigger":"scriptsking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"scriptsking.com/img/99.png","fqdn":"scriptsking.com","domain":"scriptsking.com","tld":"com"},"ip":{"addr":"172.67.215.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://scriptsking.com/","date":"2026-02-10T14:00:56.098Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scriptsking.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 20:09:27 GMT","end":"Tue, 24 Mar 2026 21:08:03 GMT"},"fingerprint":{"sha1":"C0:9F:CE:17:F8:76:33:21:D4:DF:1F:B3:CA:4B:01:30:1E:FE:2B:FD","sha256":"48:AB:D2:22:1F:5E:39:5A:72:F8:4D:B4:C9:E6:04:8D:94:5D:78:E3:57:32:AA:E0:98:60:F3:3C:4A:0C:3A:47"}}},"request":{"raw":"GET /img/99.png HTTP/1.1\r\nHost: scriptsking.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://scriptsking.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 10 Feb 2026 14:00:56 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 30 Oct 2025 03:22:10 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 47916\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nage: 2223\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dlKZmeECjG3O%2B4xBveDSSQcBZGNvn4SCuzzLcDT%2BLTwJhxXb608cjr6UKMNDYu9Tk%2BSr5gDqSStpZ4foGgE3rYWTNUkjCtsrRrYVbyI%3D\"}]}\r\ncf-ray: 9cbc22b67c050b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47916,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"4efd07c3403806bbfe55f7414380ff37","sha1":"e92acec15d983e58319b6754bb5bfd441a922c82","sha256":"ba75d5cfa0becb4465dcdd05a1fd35f759bdf438266522012355b6915c61e63d","sha512":"3fe7ae03f4073921b50ed5956f11d247e18ee3b4d7d835f6f1595e5f16ac5701adcaf8febe0c6727a5c33a3d6082a13d0bb270ad2e22422f8f338393ff02e9b8","ssdeep":"768:64PiFBcQrlhzjgglXK5Yfxker1yfJRwHJ3mDuPp8JHzyyzRdPEYFaixs2JqoZPP4:6giXcaZ8S8YJtuRwHJYuPmz9FlC2JNZo","tlshash":"9e230247952156537e75e07a252d422a47f624ba2611f8c7827723cafc15ca3e4fec0b","first_seen":"2025-11-06T21:30:20.985756Z","last_seen":"2026-02-26T12:21:19.222082Z","times_seen":6,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-10","alert":"Sinkholed","trigger":"scriptsking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-10","alert":"Phishing Block","trigger":"scriptsking.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-10","alert":"Sinkholed","trigger":"scriptsking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-10","alert":"Sinkholed","trigger":"scriptsking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"scriptsking.com/img/ninja.png","fqdn":"scriptsking.com","domain":"scriptsking.com","tld":"com"},"ip":{"addr":"172.67.215.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://scriptsking.com/","date":"2026-02-10T14:00:56.088Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scriptsking.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 20:09:27 GMT","end":"Tue, 24 Mar 2026 21:08:03 GMT"},"fingerprint":{"sha1":"C0:9F:CE:17:F8:76:33:21:D4:DF:1F:B3:CA:4B:01:30:1E:FE:2B:FD","sha256":"48:AB:D2:22:1F:5E:39:5A:72:F8:4D:B4:C9:E6:04:8D:94:5D:78:E3:57:32:AA:E0:98:60:F3:3C:4A:0C:3A:47"}}},"request":{"raw":"GET /img/ninja.png HTTP/1.1\r\nHost: scriptsking.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://scriptsking.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 10 Feb 2026 14:00:56 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 02 Jul 2025 18:32:45 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 1188\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nage: 2223\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gwAnW6qog3KcLh2A0StVVqy2vRZti%2FS%2BiEMqjSGMSI7tX50LO%2FMtXUhqfP2a0ZuxMaS6CDdG2XIAERTNo8LdAbS6Ld4aYHrwTRnnsgk%3D\"}]}\r\ncf-ray: 9cbc22b67c010b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1188,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"07ce7014343068a334a092b9824af76d","sha1":"241a199f4629a63ba0cfa466f42eee334c7cb9ae","sha256":"3de09a0fc34171287c6ab86902b1d76bcfdf7d52ac93768cbad96090fcecae57","sha512":"b475cfd0694e01aeecc5860e9cebbbb6e517be97e4ee81e6ec29216894199b24a6aca386afa57dd14970d3bbd3e3274f7a903db79889ee04dc83f7e6cca910d6","ssdeep":"","tlshash":"3521da0180425f4b9ad4252150454854a173f4e689533e6273127a3f2c8f479b4b1324","first_seen":"2026-01-04T14:23:49.148475Z","last_seen":"2026-02-26T12:21:19.20899Z","times_seen":5,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-10","alert":"Sinkholed","trigger":"scriptsking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-10","alert":"Sinkholed","trigger":"scriptsking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-10","alert":"Sinkholed","trigger":"scriptsking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-10","alert":"Phishing Block","trigger":"scriptsking.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"scriptsking.com/img/robux.png","fqdn":"scriptsking.com","domain":"scriptsking.com","tld":"com"},"ip":{"addr":"172.67.215.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://scriptsking.com/","date":"2026-02-10T14:00:56.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scriptsking.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 20:09:27 GMT","end":"Tue, 24 Mar 2026 21:08:03 GMT"},"fingerprint":{"sha1":"C0:9F:CE:17:F8:76:33:21:D4:DF:1F:B3:CA:4B:01:30:1E:FE:2B:FD","sha256":"48:AB:D2:22:1F:5E:39:5A:72:F8:4D:B4:C9:E6:04:8D:94:5D:78:E3:57:32:AA:E0:98:60:F3:3C:4A:0C:3A:47"}}},"request":{"raw":"GET /img/robux.png HTTP/1.1\r\nHost: scriptsking.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://scriptsking.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 10 Feb 2026 14:00:56 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 02 Jul 2025 18:32:45 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 726\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nage: 2223\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6A1xuDnzrxMTCJ2%2BbvZrfjwXl6baIAQnO1aNT038Y0Usl4CdPhR0jm%2FcyICBndD8ubOHRFNLxaML1dC6keC3xEST9nRQxOzZIawypn0%3D\"}]}\r\ncf-ray: 9cbc22b67c020b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":726,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"e1142d942c4a12ae5fe1cf1f5b66881b","sha1":"245888abc99880cf3004ed5510a3fa1d995715b1","sha256":"837ed857639f00482b0b26d8e0589608e346c2d0eabeeef6bc27b0c9756392f7","sha512":"d6f7d2a54b7deaf01db43216e97841297c00303da37ef27cab1ae3bd685a08512ba697cc3d576042ffaff8df568beef603b93ad1506fa2502b1c923bbf0a7a86","ssdeep":"","tlshash":"2e0165dfd18360baca659dd7d161c82cabd7118601282e9a44c1a03c950273c275d767","first_seen":"2026-01-04T14:23:49.144678Z","last_seen":"2026-02-26T12:21:19.215387Z","times_seen":5,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-10","alert":"Sinkholed","trigger":"scriptsking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-10","alert":"Sinkholed","trigger":"scriptsking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-10","alert":"Phishing Block","trigger":"scriptsking.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-10","alert":"Sinkholed","trigger":"scriptsking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"scriptsking.com/img/growagarden.png","fqdn":"scriptsking.com","domain":"scriptsking.com","tld":"com"},"ip":{"addr":"172.67.215.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://scriptsking.com/","date":"2026-02-10T14:00:56.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scriptsking.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 20:09:27 GMT","end":"Tue, 24 Mar 2026 21:08:03 GMT"},"fingerprint":{"sha1":"C0:9F:CE:17:F8:76:33:21:D4:DF:1F:B3:CA:4B:01:30:1E:FE:2B:FD","sha256":"48:AB:D2:22:1F:5E:39:5A:72:F8:4D:B4:C9:E6:04:8D:94:5D:78:E3:57:32:AA:E0:98:60:F3:3C:4A:0C:3A:47"}}},"request":{"raw":"GET /img/growagarden.png HTTP/1.1\r\nHost: scriptsking.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://scriptsking.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 10 Feb 2026 14:00:56 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 02 Jul 2025 18:32:45 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 403200\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nage: 2223\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FgRC0Bj58AHTLohC4MNdsfSfDLcJt99nFf%2FcsvNmKCy3PjmX3XCPe7NShBTTDMUlgpl8nJB6ya%2Fmc1YP0QbPqI4YNLQrcGfueLN2SYQ%3D\"}]}\r\ncf-ray: 9cbc22b67c060b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":403200,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGB, non-interlaced","md5":"bc3f71a627e39cbaab0b163eabbb29f8","sha1":"51f9ce4836252f3b3bd2a02150fba99b27f6ccc1","sha256":"f41f7a786e422bc78367c5ea6855b0bd29f3839f76c0d14e73fb839ab7bbea7d","sha512":"99b74350f52658dfdc2dbf6c6150fb4b9903a1675daccca5dbadb7ef2966bb13c7f67ab0dd95c07241ba988a5443e42f339c3552a314a40ea20fab05c5ad6d52","ssdeep":"12288:LNx5poR32xDeFXutjNtTOmHgTUsKZC1OV+KVjD3xj8z:xDpoR32xDJpHHgp1OV7jj8z","tlshash":"198423e722bf8764ebadd0c311b353c1993359b60e29fec367b20acc90615ad1711a6d","first_seen":"2026-01-04T14:23:49.131092Z","last_seen":"2026-02-26T12:21:19.225561Z","times_seen":5,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":90,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-10","alert":"Sinkholed","trigger":"scriptsking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-10","alert":"Sinkholed","trigger":"scriptsking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-10","alert":"Sinkholed","trigger":"scriptsking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-10","alert":"Phishing Block","trigger":"scriptsking.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}