{"report_id":"758f40dd-eec9-4a96-b56e-13b705addcc6","version":0,"status":"done","tags":[],"date":"2026-09-27T06:29:44Z","url":{"schema":"http","addr":"alterhub.site/","fqdn":"alterhub.site","domain":"alterhub.site","tld":"site"},"ip":{"addr":"104.21.42.238","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"alterhub.site/","fqdn":"alterhub.site","domain":"alterhub.site","tld":"site"},"title":"ALTER | Roblox Script Hub","dom":{"size":36277,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (11643)","md5":"6ea473e39eef4491e02394293862fedd","sha1":"edf7912152c0669b8f1997fa1c7beb4acdd5f245","sha256":"dfa4034383fd59bdb4d9d00b92da816a2532d9217c4958b7492af5e19cd46b5b","sha512":"0779e616c84f50d2a68a9f4246bca4c130ebf7e913b1def6c267e61397f1126220d04ebb223fb978807e4ac79c96597739898f87b3c2581da2dbbdf05b964621","ssdeep":"384:UQg/q0NEBQfQBLJARAEIDFueZT2itFDC/6nx/GU:u/qeFQBaR58FhDC/4x/GU","tlshash":"b0f27672a9e29137117381c671a6b71a39f2810bdd066250b2fc83b84fdfda6bd2354d","dom_hash":"domhash04a52c05b2100492163d837f002bc1bc","first_seen":"2026-09-27T06:30:15.030335Z","last_seen":"2026-09-27T06:30:15.030335Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"alterhub.site/","fqdn":"alterhub.site","domain":"alterhub.site","tld":"site"},"ip":{"addr":"104.21.42.238","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-01T06:29:44Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"31pu2ilhjrkmwpf"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":15}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"pl28128394.effectivecpmnetwork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"cdn.bakestubborn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"cdn.bakestubborn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"spendsdetachment.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"spendsdetachment.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-26","alert":"Sinkholed","trigger":"sleepoverlimitprofound.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"www.highperformanceformat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"www.highperformanceformat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"kettledroopingcontinuation.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"portalfluently.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"pl27873862.effectivecpmnetwork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"pl28128394.effectivecpmnetwork.com","ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":2,"request_count":2,"received_data":94112,"sent_data":996,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"bicea.org","ip":{"addr":"104.21.86.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":24,"received_data":194499,"sent_data":27020,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"www.highperformanceformat.com","ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2024-10-15","domain_rank":366864,"first_seen":"2024-10-23T18:32:34.138968Z","last_seen":"2026-09-23T10:55:38.157488Z","alert_count":6,"request_count":3,"received_data":150064,"sent_data":1490,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"kettledroopingcontinuation.com","ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2024-09-01","domain_rank":196057,"first_seen":"2025-07-30T15:18:19.355595Z","last_seen":"2026-09-27T02:00:14.879715Z","alert_count":15,"request_count":5,"received_data":10552,"sent_data":6520,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-09-20T23:08:06.309324Z","alert_count":0,"request_count":1,"received_data":73236,"sent_data":464,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-20T22:43:37.149177Z","alert_count":0,"request_count":12,"received_data":477112,"sent_data":6924,"comment":"","tags":null,"fingerprints":null},{"fqdn":"alterhub.site","ip":{"addr":"104.21.42.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-10-17","domain_rank":0,"first_seen":"2025-10-31T15:30:43.041546Z","last_seen":"2025-10-31T15:30:43.041546Z","alert_count":0,"request_count":15,"received_data":278662,"sent_data":7760,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"afders.org","ip":{"addr":"104.21.67.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-09-03","domain_rank":0,"first_seen":"2026-09-27T06:30:04.589584Z","last_seen":"2026-09-27T06:30:04.589584Z","alert_count":0,"request_count":11,"received_data":263547,"sent_data":8570,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"spendsdetachment.com","ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2024-09-03","domain_rank":0,"first_seen":"2025-10-05T07:40:04.892598Z","last_seen":"2026-09-27T01:12:33.334098Z","alert_count":8,"request_count":4,"received_data":9722,"sent_data":6037,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"static.nresystems.com","ip":{"addr":"104.18.19.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2001-02-22","domain_rank":0,"first_seen":"2026-05-13T20:38:27.678612Z","last_seen":"2026-09-26T18:12:45.547443Z","alert_count":0,"request_count":4,"received_data":4983,"sent_data":2548,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"sleepoverlimitprofound.com","ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2026-02-26","domain_rank":0,"first_seen":"2026-03-13T13:00:58.430087Z","last_seen":"2026-09-20T11:32:25.076575Z","alert_count":10,"request_count":10,"received_data":22884,"sent_data":14744,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.bakestubborn.com","ip":{"addr":"104.21.74.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-08-31","domain_rank":0,"first_seen":"2026-08-31T15:31:16.269507Z","last_seen":"2026-09-21T17:22:21.513575Z","alert_count":20,"request_count":10,"received_data":332820,"sent_data":5184,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-20T22:43:34.841753Z","alert_count":0,"request_count":3,"received_data":61842,"sent_data":1576,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"tr.rbxcdn.com","ip":{"addr":"143.204.238.74","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2013-07-17","domain_rank":26027,"first_seen":"2019-05-23T12:45:13Z","last_seen":"2026-09-20T14:23:44.384237Z","alert_count":0,"request_count":12,"received_data":1191767,"sent_data":7092,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"cdn.storageimagedisplay.com","ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2024-09-13","domain_rank":170153,"first_seen":"2024-09-13T12:56:32Z","last_seen":"2026-09-25T15:49:52.271341Z","alert_count":0,"request_count":11,"received_data":481834,"sent_data":6394,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fizzyacerbitymellow.com","ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2026-02-02","domain_rank":0,"first_seen":"2026-02-16T17:00:32.078738Z","last_seen":"2026-09-26T14:25:36.784094Z","alert_count":0,"request_count":10,"received_data":22892,"sent_data":14650,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"portalfluently.com","ip":{"addr":"23.111.84.228","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"domain_registered":"2026-06-18","domain_rank":0,"first_seen":"2026-06-19T16:11:46.270184Z","last_seen":"2026-09-26T12:19:09.310243Z","alert_count":2,"request_count":2,"received_data":76980,"sent_data":914,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"pl27873862.effectivecpmnetwork.com","ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":2,"request_count":2,"received_data":93974,"sent_data":996,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"aqml.org","ip":{"addr":"172.67.215.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-09-11","domain_rank":0,"first_seen":"2026-09-23T21:17:13.227155Z","last_seen":"2026-09-23T21:17:15.700438Z","alert_count":0,"request_count":4,"received_data":45979,"sent_data":1904,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ads.alterhub.site","ip":{"addr":"104.21.42.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":8,"received_data":24008,"sent_data":8356,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"protrafficinspector.com","ip":{"addr":"63.189.55.98","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2025-06-18","domain_rank":614186,"first_seen":"2025-07-25T22:45:21.95813Z","last_seen":"2026-09-24T11:32:14.988512Z","alert_count":0,"request_count":4,"received_data":2080,"sent_data":1968,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.show-sb.com","ip":{"addr":"104.21.95.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-08-20","domain_rank":187612,"first_seen":"2024-08-31T03:46:04Z","last_seen":"2026-09-26T07:30:20.211137Z","alert_count":4,"request_count":2,"received_data":4628,"sent_data":1045,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ads.alterhub.site/promoframe#k=d99b65ef2f1e54f34f14ebb6236adcad\u0026w=468\u0026h=60\u0026i=u1_v62o5x","fqdn":"ads.alterhub.site","domain":"alterhub.site","tld":"site"},"ip":{"addr":"104.21.42.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b05179ff5d4f4bf887767e9472c54d5a","sha1":"99c6a936e923e0af73bc270cde85a4d3402f3c7b","sha256":"786cdf25b65220a8d03a4377b2c9481a583dd974cfb4b418172254db9cae9bfd","sha512":"ec485c97c45637576c50adb773d2e22ffb978ebaadca28bdc0f282994cd46d899399661bb27e088d070bfeee791edbe52d706f5927450130ce732ecaa6d50d22","ssdeep":"","tlshash":"7361753f6eb122a8755302f5397fa1403336c12a6115d9a0bcaee248ff90e151427fd8","size":3430,"data":"","first_seen":"2026-09-27T06:30:15.191826Z","last_seen":"2026-09-27T06:30:57.029637Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ads.alterhub.site/promoframe#k=3ae6276d5f69eb697421a09960b7da53\u0026n=28128394\u0026i=n3_ke4tgo","fqdn":"ads.alterhub.site","domain":"alterhub.site","tld":"site"},"ip":{"addr":"104.21.42.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b05179ff5d4f4bf887767e9472c54d5a","sha1":"99c6a936e923e0af73bc270cde85a4d3402f3c7b","sha256":"786cdf25b65220a8d03a4377b2c9481a583dd974cfb4b418172254db9cae9bfd","sha512":"ec485c97c45637576c50adb773d2e22ffb978ebaadca28bdc0f282994cd46d899399661bb27e088d070bfeee791edbe52d706f5927450130ce732ecaa6d50d22","ssdeep":"","tlshash":"7361753f6eb122a8755302f5397fa1403336c12a6115d9a0bcaee248ff90e151427fd8","size":3430,"data":"","first_seen":"2026-09-27T06:30:15.191826Z","last_seen":"2026-09-27T06:30:57.029637Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ads.alterhub.site/promoframe#k=aee874e267daf21ad94938c5960ef7a1\u0026n=27873862\u0026i=n4_0eh5yg","fqdn":"ads.alterhub.site","domain":"alterhub.site","tld":"site"},"ip":{"addr":"104.21.42.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b05179ff5d4f4bf887767e9472c54d5a","sha1":"99c6a936e923e0af73bc270cde85a4d3402f3c7b","sha256":"786cdf25b65220a8d03a4377b2c9481a583dd974cfb4b418172254db9cae9bfd","sha512":"ec485c97c45637576c50adb773d2e22ffb978ebaadca28bdc0f282994cd46d899399661bb27e088d070bfeee791edbe52d706f5927450130ce732ecaa6d50d22","ssdeep":"","tlshash":"7361753f6eb122a8755302f5397fa1403336c12a6115d9a0bcaee248ff90e151427fd8","size":3430,"data":"","first_seen":"2026-09-27T06:30:15.191826Z","last_seen":"2026-09-27T06:30:57.029637Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"00490db6532a3f6c0d204a15d03c66fe","sha1":"3599c453030134eff9cfb147bd692a997218083e","sha256":"cad7a7559b51cbafce8546f28bb1a20cf6b8919c584a410ea971bc795bc0d262","sha512":"e38f54794781083088e9d8027251769ef3588f601c8924d950de4229d6db12c8a9187f7a6d3f6f69bcc40d23a80602da35b3fedaa61f409fefc1d58a804d258e","ssdeep":"","tlshash":"09c08cb62a082c627a95388d660a0384acc10203a8301b0ea2b8f180b4daa2b012008c","size":145,"data":"","first_seen":"2026-09-27T06:30:15.193065Z","last_seen":"2026-09-27T06:30:57.07108Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"9fd3c9cf91d2722614b184a4c2e6155e","sha1":"31a372f2a94a44bc6c1bb36d9f83a15b96bdb1df","sha256":"7b83dd713afc3ecf15a6592e28a8bf66b0699d27c34c52206b208b192859cb81","sha512":"5e5eea7b0e31f0fe2432b5272808bd6eb342f21b2b50b8b56a5fec110bb4cb90398724f8843ad976c46788f7b79ca7188531f76dd7a8880b893d9ea5b5e4c153","ssdeep":"","tlshash":"f231b73b104e723908aebaf5580ef3881e05da061d155f4a9150dfa055649e9247dac2","size":1479,"data":"","first_seen":"2026-09-27T06:30:15.194657Z","last_seen":"2026-09-27T06:30:15.194657Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"681001acff276994b6fb73473d8f4b5b","sha1":"1ba6287b01e2574eca0fb4e2f071462b5809547c","sha256":"c37b0d53a08c256d4e383f77dd13e050ab1e681c60c1f5edd0594a594a4635a2","sha512":"2d5253faea473ea2ece103d9b32bba4b73c9bbb66e4237ae80f0078bc3a3d4034b25bc96cb9e6dcd5328abbe2e4f37a4eb102c452ff6a09bc88bf9e43d3b9843","ssdeep":"","tlshash":"e0814a396dd643745ca3692f217f685d2f55e20f6c10ca55bc8cd2814f289a42e3bad8","size":3981,"data":"","first_seen":"2026-09-27T06:30:15.196342Z","last_seen":"2026-09-27T06:30:15.196342Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portalfluently.com/sfp.js","fqdn":"portalfluently.com","domain":"portalfluently.com","tld":"com"},"ip":{"addr":"23.111.84.228","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"8b2235271c16f8771b21b86e1f28b646","sha1":"79076a682bb500cf7ce5a0c3b7791f444f0b4745","sha256":"2c474c90d59dd2f40732e241bcaa6d9dfdcad896d3689f7e3a4d0383aecdc7ae","sha512":"0a0a45fdba13e92501476f4744c492c70dcc537f521bf5e0ab08d58af1a1103327d809cf576eb79563a6499816136234f93a523d78ef709986808215dab780e9","ssdeep":"768:2bau76Vkz0LIRCwNvDVlW2WE2FXgi+7RB6hJgbGNqJXY1ATJSf5Rr+LPL8jvZtd6:2GMtW7Qi+7RB8JMGNqJLLFNZB","tlshash":"510329d87193b03993b718e71477a214b23a1c15300a9983e17e5c863d63e5bd23bfad","size":37950,"data":"","first_seen":"2026-09-03T11:38:17.004803Z","last_seen":"2026-10-11T18:33:39.03397Z","times_seen":4850,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.highperformanceformat.com/fdfdd92a59e588025342002253695a24/invoke.js","fqdn":"www.highperformanceformat.com","domain":"highperformanceformat.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c14a86a58d2a24cdaa69982e73cf6587","sha1":"a248ef6e9a680d8c2911e39af3d3f08ad3ea1311","sha256":"fc96144c61b5bf93839a2b9b5e5abc3db0c5fb66cb8dbf95ad62c8ddd1eed608","sha512":"35ad8f3a98eadf1ccc6601eeba8403a4c1251cb9cc0e01e89571dd7b3097ac9174a28ecd887539b4e35663349beefe3b82c03192a7b68ddb192614dad5c0516a","ssdeep":"1536:zxD5bKH1LXx2STq1MAtyf4kvj8cXNR1c7l9WEII0Nf:lD5bw1LXx8Dtwlvc73WEc","tlshash":"c223e7d86f60e25247f0a8ff32269535f4691e54384cd4d8e06f3cc4aea7706ea7a478","size":49227,"data":"","first_seen":"2026-09-27T06:30:15.161585Z","last_seen":"2026-09-27T06:30:15.161585Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aqml.org/16/6f633c7fd769c4533953a1b5d3fc2439","fqdn":"aqml.org","domain":"aqml.org","tld":"org"},"ip":{"addr":"172.67.215.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e034b733f7e96b415c50825311d1bc09","sha1":"d9d90e0346619cd97c9b48a8b2bb4df99921f411","sha256":"a044a67e68d1b2c7498dee05394662f1356e2fb8859ac6175d498c744251106f","sha512":"26aef95c78f33670090095c3eafa6e9b97bf55b5f0c6a8161d932b60d4d478a86fa2af72dd48be0b87ddb73376baf58a8be9d0b4df3ba658be9d5f0ab5e60065","ssdeep":"192:Uou1f2fBpS++cJju6r/+ixFAMPE4UNzISalbjVYI9Bc5HHUATN6BdPwKnl9W7nF:8BYS++0u6KOYLNzILlb5EnUAR6BaAnWR","tlshash":"9e12849c7e80add85ba4a9fb75778a6512f71c01b20cc0a8f03a2c64bd42797b4bf175","size":9788,"data":"","first_seen":"2026-09-27T06:30:15.093419Z","last_seen":"2026-09-27T06:30:56.890169Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"afders.org/20","fqdn":"afders.org","domain":"afders.org","tld":"org"},"ip":{"addr":"104.21.67.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0ace9fd96b3a1a96df6673058ad39505","sha1":"acaec4d2167e5c0b0189f7d79f9d20b8cb73abd1","sha256":"7bb9843e599f0e2fa33d255b732e4c5b9faa47f0189247b33d426d36cf4c2e97","sha512":"221e798b509a195219dbbb1f7c4b903abb734b790ae1e108c58b3914794a9a352cede20913e02c195dfcb2c1af1ed27b104da7843f431a364f0cba9a6b3d1d7c","ssdeep":"768:lt+ufvOQZsLIx/4Bq2Vld2WJ26Ygi+7RB6hJgbGNqJx70X7ngr5rz3LVL8oVGtd8:l0P8Wpli+7RB8JMGNqJXLKOL3","tlshash":"e30329d87183b02953b728e6107b6214b23a5c15740a9993e13e9cd63c73e5bd23bfad","size":40128,"data":"","first_seen":"2026-09-27T06:30:15.042381Z","last_seen":"2026-09-28T14:21:31.278472Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"0fd3483231543ef323413fefacb6d647","sha1":"64e20d2a17b46448dd3250ac6cd020fa92f0bc87","sha256":"f4ff54cab2d2601fb6fd174c8890f9cbaf5d298356fcfb023d2adaf8d7532b3a","sha512":"2d90357067e9f9184ad6024e32b6666da17ee3b10c67169ad27998b4896e7a8f3e5f0f59b2c76ab51efe8b92aadafc23bd5b014fd7fc6477139433dbe09eb1b4","ssdeep":"","tlshash":"6c81c72f4ceea13c188ab4ee253ef54c2d16a50b1d00df09f59cea605f91fa4197cac4","size":3961,"data":"","first_seen":"2026-09-27T06:30:15.197797Z","last_seen":"2026-09-27T06:30:15.197797Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alterhub.site/chat.js?v=74f0a8af","fqdn":"alterhub.site","domain":"alterhub.site","tld":"site"},"ip":{"addr":"104.21.42.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"35c00278d383d7e9f8597ebb22fdb6da","sha1":"74f0a8af31e4d77872bc6d6ffac0207c483c2a8e","sha256":"4ebd5c7cb0b95dbc29fe0f78cacf8aa9705c9ea1a4dc505ebba0ed9736083898","sha512":"8ec85afb7aca12326b6a609c9b887de95c15c05cc91974dbc03ec44d3b0869c2901d5a5a17d662037483fc9ef27dd548fcc3c2b6ac96c3f12c27693331ffc7f1","ssdeep":"384:QhItqFGroHf5oeAq8XhvuzSOBq61K5ms8mbQ0jkR8zszuGEIIxn4IGM:5+Gk8QzSOBqtp8mMZlEIIKIGM","tlshash":"7892086f568527332fb7029fb91b69cae75310357381802194f8c4ac1aadfa0193b9ce","size":20117,"data":"","first_seen":"2026-09-27T06:27:52.383623Z","last_seen":"2026-09-27T06:30:56.983306Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"afders.org/9/1964b0264f479cf1ad7ae7082f5db52e","fqdn":"afders.org","domain":"afders.org","tld":"org"},"ip":{"addr":"104.21.67.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bd1136c6314f085860e70456737a9df1","sha1":"98d85b73060878f4665319789aa8769b21bee628","sha256":"eace8ba38e004fae9db0f65c46e6b78927302bd2da39b9377949f032605070fd","sha512":"50204990d521a54f2acf5da394ec705d82fabd8d220f1af47040cf2c1410fa80f6a1995055eb91854119bb3e5c91be4c1ce091581c1450a302742ebe6df35ebc","ssdeep":"1536:ELdPZ2UbmKPpl0ZVkEEC5dpdx+hl4rHCG3uYx3Z/5BTb49xHJ8qr0Jd2F:ZWureGrHfeYx3Z/5BTExHJAC","tlshash":"7483d748af10a21b0bb06cfb311ab922e15a0c8536ace4d8fd7e3c5b5d86716f5bd474","size":85752,"data":"","first_seen":"2026-09-27T06:30:15.184649Z","last_seen":"2026-09-27T06:30:15.184649Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"294adc1a378dd0ef1838958d7b523e16","sha1":"43474522b1ca90cdf27d65c156b378dc71b18c1f","sha256":"75a7f1eb2f915f0acb97fdab6ef716bc10cac27e32297143a94c9c18ac9b206e","sha512":"009520de2b0869d608e33a5fe56de127e70748fcce9c65c9e5f437f4d2caeede9efcb9ae6bcaf86e71da8273db2d69c5e66fafe98c81f29cc615962b2634fb92","ssdeep":"","tlshash":"2331f776b86b13224967ae2f1aaf38bf4f06e9489c5092e404049ac1150c4ac2b3bcc8","size":1489,"data":"","first_seen":"2026-09-27T06:30:15.199161Z","last_seen":"2026-09-27T06:30:15.199161Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"2d8547abd4bff2f27a139fb7d6fc5d08","sha1":"d7499d8ce613cda2e2165b216cbb247726a7abab","sha256":"6aa45f71594e26daa452e61c6126416d4893329e5c8600d52e769fc087ee6c18","sha512":"c3b6a68fbcc7b165e417a60e167b1b865d9650addef91450db6bb31eb5b7840cc0e250b6b5975eb559899a04ef1e9b86554b370a3fb15c9b3ca59976f1413501","ssdeep":"","tlshash":"5521ea79004c42f986a78737908f286caf1a550ee5a941f14879d500c211c257e272b0","size":1274,"data":"","first_seen":"2026-09-27T06:30:15.200469Z","last_seen":"2026-09-27T06:30:15.200469Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"c104a70f111877f0590c047c9d07effb","sha1":"47d377499bf80b6b021daf73f4c68b9849389dd2","sha256":"3e6a7e82870d7e26fc1c514b2aa7529daa833c3eff9c7acc2e228f337527daa6","sha512":"0524e470204dcd579836ac5e4896b5d591fd165c98d0ef37f31c7005e27ac88684b6277e908382efbd38d3731320ea3f735d07e61cac2f2c625a18c14bda73cd","ssdeep":"","tlshash":"91313717349ca7e32347f4191156b6da753a80d67819a739363c11cf0ed1f388aecaa7","size":1491,"data":"","first_seen":"2026-09-27T06:30:15.201977Z","last_seen":"2026-09-27T06:30:57.06845Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alterhub.site/ads/bait.js?cb=1790490551873","fqdn":"alterhub.site","domain":"alterhub.site","tld":"site"},"ip":{"addr":"104.21.42.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"424ecc5f56c732e7d4a70f6347b22b66","sha1":"d237bbc96e1195864ccb33d82d9105a26e4d5d27","sha256":"e5fe7eefd70de736455dfe99ef279f0e452d07a52d27fc2c41ef522e054872bb","sha512":"42427e14e5191e949a5a02b44e7a4e2c7b7dd4d146387a6262b48e7f980f5f37ae7280e483a99f87fe05085d111b87877aa6913f31b418ef2dbda7d8c6576ffa","ssdeep":"","tlshash":"34c022024aa844f2bc75004cad12e8c26ba6c4fa42a230c0304cd008620f1db41b2fa3","size":179,"data":"","first_seen":"2026-09-27T06:27:52.427549Z","last_seen":"2026-09-27T06:30:56.9271Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pl28128394.effectivecpmnetwork.com/3ae6276d5f69eb697421a09960b7da53/invoke.js","fqdn":"pl28128394.effectivecpmnetwork.com","domain":"effectivecpmnetwork.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"65fffc622ef1cf05bbd4521e164d46e3","sha1":"345a65f0c36264e295769f839b9e93347351a582","sha256":"def052b84e31e7960f811b57902b0215e1a0ffdbc1194101d500685bd986fe78","sha512":"0ed8774eae7f1624499f44491add8b7efcdb3e45e7e60a67704c6413e9948aae1d31b1dc2c7c037d8b17c197c4069a41e930ddf0d0859f5fb7d186e423060b95","ssdeep":"768:tmmZugNJEOlhP92QfyREnzrcSzPYYIq9xOEA9Utws8tjJq1z4T4nmo8es6KChvp9:Umf3UwrcSzPYYIq9x1Wimp9ChvXrNmox","tlshash":"5c23c6a47f10db7e57a1e9bf227a8c51f1660d8078ccd1c8e13f6dc8698a30a957d938","size":46253,"data":"","first_seen":"2026-09-27T06:30:15.032201Z","last_seen":"2026-09-27T06:30:15.032201Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alterhub.site/script.js?v=00169b4e","fqdn":"alterhub.site","domain":"alterhub.site","tld":"site"},"ip":{"addr":"104.21.42.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cb5c166bc7c1c3f6589020fd4fcd7626","sha1":"00169b4e391441097b7fb19636b051e75f7a58be","sha256":"90543170866792d8582a3e25dc3fb4f387f8c800512733cb8f09f877402abfc2","sha512":"c5a4515defcc9d7326654bab04d59efa4b3e9d53df5b2d41c1d832254c33833514b1868f3b9041fd4874a8cd26b84d971c48476d4daebbb1d043655c19e4e1de","ssdeep":"384:CLXZSB7EAhCGum6tvErS2E1y08gZyZCZSZeQZ7qt0xIWkBf:k64x/DpErS2E174of","tlshash":"8a42c5bd720839b703a310b5657fb70ab37235119c4b80a099b9d9c82dbddad9233d9d","size":12557,"data":"","first_seen":"2026-09-27T06:27:52.429032Z","last_seen":"2026-09-27T06:30:57.012574Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alterhub.site/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"alterhub.site","domain":"alterhub.site","tld":"site"},"ip":{"addr":"104.21.42.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b8bb2015016149ddf723fa609999ab8d","sha1":"d04af78e49707dd0dfdb26425ba3bf7f613c52ca","sha256":"614b01b220a20801b1d078e6933a4ac813fac0c1b73555438c5345a0345fe4b9","sha512":"ac154038b30aa79b76df2fd7ac74d3a10a03917c028b2aafa95809d83df76c4385b8646a4176a861df9ebabbe0cd067a19d4d8309f76fb9723c113f95dbb9bba","ssdeep":"384:Khm1KapZk63Rf6Onr59MoXlHSNPerk43GEwUAEwHvyt5Nt82SfvKCmaPdL7lq8zh:2mIgkk56E59MoXGuGfUfwHvmEfPZRq8F","tlshash":"2292a3d6bac6b0c8d31b617500af71cab67a6c8440ad090ac972d0f87f79757962fe4c","size":21108,"data":"","first_seen":"2026-09-27T06:30:15.061273Z","last_seen":"2026-09-27T06:30:15.061273Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aqml.org/16/98093f52b5da2db2f9e87d14997d30f3","fqdn":"aqml.org","domain":"aqml.org","tld":"org"},"ip":{"addr":"172.67.215.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7f00aeee01c574914fb05a023a19587f","sha1":"82aec587c353da58107f6f8a896630b08f91157b","sha256":"95679f4ecb907686ca36d8589ad0a1a4aaf254b316ecee3bd877877c719849d7","sha512":"a1104db9dc7ea61c17bff6fb6abdafb8e9926ad69508977b850f216a67ec86ef13088678acc1f011370766ab845b6517430e80ba7898bc6e0278f9e32fb532d7","ssdeep":"192:Uou1f2fBpS++cJju6r/+ixFAMPE4h2zISa5WbjVYI9Bc5HHUATN6BdPwKnl9W7nF:8BYS++0u6KOY82zILgb5EnUAR6BaAnWR","tlshash":"4b12849c7e40add85ba4aafb75778a6512f71d01b20cc0acf03a2c64bd42396b4bf175","size":9788,"data":"","first_seen":"2026-09-27T06:30:15.064154Z","last_seen":"2026-09-27T06:30:56.906971Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.bakestubborn.com/sb/ssp/interstitial/message_redcircle/1/js/jquery.min.js","fqdn":"cdn.bakestubborn.com","domain":"bakestubborn.com","tld":"com"},"ip":{"addr":"104.21.74.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"561acb3e541133bbdd2c0c19f8ee35a1","sha1":"ffd1353cf3f77d25f801c84d8208613eb0d3d548","sha256":"9fde6da568db31801e29243a903bf24f342256b41e3c01e7d018ff7c566ce7fc","sha512":"8a647ed6f56b4da93c7a034609060991cc8080350f057f4f2af2c369f18af066db3b4e77701fc017027fd774264a6d0f84927239d7d2f693edc6f7d6a0917be3","ssdeep":"1536:YjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h5cApwEjOPrBeU6QLiTFbc0QlQvakV:YYh8eip3hXuf6IidlrvakdtQ47GKl","tlshash":"f993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","size":89492,"data":"","first_seen":"2023-03-07T01:04:00Z","last_seen":"2026-10-11T18:55:42.263957Z","times_seen":9172,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"4b8185047a74dea996f429be4c1495df","sha1":"fe7753c373f3af2373465c94211233e10a75df8f","sha256":"3936bbae8398dec760ca2450dd0f1d896ff8ea0b4d892418ebe690621a2f9761","sha512":"86de37aadcb29ce17e7a266e506ea7d2528ab6f0fc52da65da3ad4b54ab9bfd56e45d04930ae399e3fddda89b7ae69994047d312c56f214987cc56cfb9ea03d8","ssdeep":"","tlshash":"6bf0493e2424a32ccd739e5781be47ed8b22879ee144010930ec6ecb0d6198b60c0c6f","size":601,"data":"","first_seen":"2026-09-27T06:30:15.203456Z","last_seen":"2026-09-27T06:30:15.203456Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alterhub.site/promo.js?v=bde7b733","fqdn":"alterhub.site","domain":"alterhub.site","tld":"site"},"ip":{"addr":"104.21.42.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"38d86265a4b4326b95d78c020856ac95","sha1":"bde7b7335e0a8daccd73cf41d16032eb738a8a71","sha256":"37e82370908b191d43c5a406379435ccd01331dc4d13b0725e1c18b3a0a15881","sha512":"537ee0ddff8bc542822445a42a5071101a972bdb0a8a7e20042eea9d6bd91cbc6c092b9e63be7c6431fb6129cbbccc941ec3acd762a6258218fc893151119f7a","ssdeep":"192:eUBnUiUhowQv4+jZX/zfDM2xyRyzNYROmby2xXF/O76BZMPpstrJaLFi:eU6iUhgvTjdz3yRyzNibL/O76BMpstdD","tlshash":"6922e9797610643752e709ba79ffb389b5313410bd87844082b4c8e83abcd1e4a67f9e","size":9921,"data":"","first_seen":"2026-09-27T06:27:52.431056Z","last_seen":"2026-09-27T06:30:56.911017Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ads.alterhub.site/promoframe#k=fdfdd92a59e588025342002253695a24\u0026w=468\u0026h=60\u0026i=u2_h3rpj0","fqdn":"ads.alterhub.site","domain":"alterhub.site","tld":"site"},"ip":{"addr":"104.21.42.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b05179ff5d4f4bf887767e9472c54d5a","sha1":"99c6a936e923e0af73bc270cde85a4d3402f3c7b","sha256":"786cdf25b65220a8d03a4377b2c9481a583dd974cfb4b418172254db9cae9bfd","sha512":"ec485c97c45637576c50adb773d2e22ffb978ebaadca28bdc0f282994cd46d899399661bb27e088d070bfeee791edbe52d706f5927450130ce732ecaa6d50d22","ssdeep":"","tlshash":"7361753f6eb122a8755302f5397fa1403336c12a6115d9a0bcaee248ff90e151427fd8","size":3430,"data":"","first_seen":"2026-09-27T06:30:15.191826Z","last_seen":"2026-09-27T06:30:57.029637Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.highperformanceformat.com/d99b65ef2f1e54f34f14ebb6236adcad/invoke.js","fqdn":"www.highperformanceformat.com","domain":"highperformanceformat.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"67a03299cc562d6863b78561d370ab3e","sha1":"e1da3d40720eb9e8fb65e3c8a07568944d8a2810","sha256":"a2e5318f052198388ee056d8b2414ef110444f130edb3dccf1784c94ce4c7b4e","sha512":"8abd730860317db4ea4359c036faf8888a8029de50f6dec332037b024c0c1841a308f63ba9acfe8e7e8b19dba7648abc1f562c68dc8a74cc4d1626a4a8d53791","ssdeep":"1536:zxD5bK4LEx2qTq1MAif4kvj8c5NR1c7l9WEII0Nf:lD5bjLExEDATvc73WEc","tlshash":"ac23e7d86f60e25247f0a8ff32269535f4691e54384cd4d4e06f3cc4aea7706ea7a478","size":49208,"data":"","first_seen":"2026-09-27T06:30:15.107791Z","last_seen":"2026-09-27T06:30:15.107791Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pl27873862.effectivecpmnetwork.com/aee874e267daf21ad94938c5960ef7a1/invoke.js","fqdn":"pl27873862.effectivecpmnetwork.com","domain":"effectivecpmnetwork.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2475b1318a3da5424263c3d74e100b9c","sha1":"74d6c63d87d5f46b9101e0633b578af23e476ae1","sha256":"24ed4de845ea78e1611a41bec18fc866fb29d18bd31e1ac5f22853dcd89e86f2","sha512":"3486c5bc6e70516e3e5aa845e6162a020b50da2a2df1ec34d0392e27c6c585728c76b4c7db0572aaa43811de69574153ea534165b0019b35d929ecddb9b5445e","ssdeep":"768:tmmnugNJEOlhP92QfyREnzrcSzPYYIq9xOEA9Utws8tjJq1z4T4nmo8ew6KChvp3:Umt3UwrcSzPYYIq9x1WimP9ChvXxNAoD","tlshash":"a423c6a47f10db7e57a1e9bf22798c55f1260d8078ccd2c8e13f6dc8698a30a957d938","size":46166,"data":"","first_seen":"2026-09-27T06:30:15.163635Z","last_seen":"2026-09-27T06:30:56.899854Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"56de8a1ea8c400c4af4a2c24a2d3880d","sha1":"c8af3260c109d49b858f92237f47dd726af3f980","sha256":"af53de409b49a906c225ae31cbb2d0a2c78b871139e98d8611f9f7c18dddc2e3","sha512":"8ab1d8974833dabe7b300c7bb273589a49c7675fa44e1a06abce1ff230353556d10935d64766de0d56af8661daf2949da4061f253a68296e71e7d3de0d004d0c","ssdeep":"","tlshash":"3c21b75e40bf905d2a45f1e6497d786e197b2c0b65104d54723884b8a7c2b21163c1a1","size":1264,"data":"","first_seen":"2026-09-27T06:30:15.204628Z","last_seen":"2026-09-27T06:30:15.204628Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"4fc5730b30b961a026e80a46835a90dd","sha1":"e1d7e7da5c47acac68a7bb421b7ce587c41d2ee8","sha256":"be802d057063f8be9a7ca35eb329d977bbadaa64cea39409fbbf3a938575d110","sha512":"a86b2fa23a440dcdf17d20188755a97b889e24649740a29a34a716cf9cbe498c0bc99eeb8a60d7441279e4137c275d7c6a8c37f708ca115720e57996ab753d98","ssdeep":"","tlshash":"51c08ca8af022122bd683cce9e0c2bc04ac047323922e410620880d060be023040af00","size":145,"data":"","first_seen":"2026-09-27T06:30:15.205928Z","last_seen":"2026-09-27T06:30:57.050317Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aqml.org/16/cad9ea51fc7060d2582c3cdc3bde7b1f","fqdn":"aqml.org","domain":"aqml.org","tld":"org"},"ip":{"addr":"172.67.215.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"911d147212c096dc7ddfd4b25ed730a7","sha1":"0eca9da3e09292c4855ff0099ac032e3d69e06a8","sha256":"50e9cd24367c0f4e6dbdd76e3de8a1957cd1f07ea0e02798018b64eeb5c299c6","sha512":"7083dcf35c5c747f07bab45f29a1265ad1bab47bf2dcbbd133a121600636f2997a653ca6bc8fbccce5870da71055b28c4952581079ecc2053f3d9e2926fb36e2","ssdeep":"192:Uou1f2fBpS++cJju6r/+ixFAMPE4UNzISaJpbjVYI9Bc5HHUATN6BdPwKnl9W7nF:8BYS++0u6KOYLNzILJpb5EnUAR6BaAnM","tlshash":"5012849c7e40add85ba4a9fb75778a2512f71c01b20cc0a8f03a2c64bd42797b4bb175","size":9788,"data":"","first_seen":"2026-09-27T06:30:15.058179Z","last_seen":"2026-09-27T06:30:56.894729Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"afders.org/9/dd21c50fc592f139e5fae52397aac5e6","fqdn":"afders.org","domain":"afders.org","tld":"org"},"ip":{"addr":"104.21.67.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bca852dc9c117ee00b9193a726793e85","sha1":"f0bc032f97643264cde744da2e2d3af02a3dfdb1","sha256":"f4419c64d041d2c20752645fc460d0462469682a91c7a50d89ae24486bef1d35","sha512":"bfe4b8ce0d0d6f8d57125bb9fb1cd10f6b256160657b565e666f6727e0fc36988cb155564ee46568e44f87bab70609e533b7926b0ce5a7c8e479ec0269020b6f","ssdeep":"1536:ELdPZ2UbmKPpl0ZVkEEC5dpdx+hl4rtTCG3uYx3Z/5BTb49xHJ8qr0Jd2F:ZWureGrtTfeYx3Z/5BTExHJAC","tlshash":"a083d748af10a21b0bb06cfb311ab522e15a0c8536ace4d8fd7e3c5b5d86716f5bd474","size":85750,"data":"","first_seen":"2026-09-27T06:30:15.050055Z","last_seen":"2026-09-27T06:30:15.050055Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bicea.org/15/9ecf8e436a025f7fff03b61551d7e737","fqdn":"bicea.org","domain":"bicea.org","tld":"org"},"ip":{"addr":"104.21.86.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fb6d6eecd8244ea6508a744a540a4569","sha1":"ea502039b6ce9bbcaa297e9e47d03364cb7e379b","sha256":"8eb5d0a0566bc3db995e8a5665b64687fee369e0f7db2e53aa55c5380f6e065c","sha512":"15acac02b4ec47b269a0a888a8c4ba7d1332b8159547b3713f9c88fbf56be3eb9b67da28addaf07fd1c19feca10af09677210a556fd5413e62700eed5d386a39","ssdeep":"1536:d5IbWg2WXLqNV2pEsTcMnUr0uDy7wgZxmbM5Pr6jZlrC6wTkGdRdpmtIqYOt0I8x:d5Bg2WXLWEpEYcMnUr0uDSNZxmbM5KDo","tlshash":"de73d7846f10b23e12b0fcff7712e452e0191e86338ce4ede96d2c0a595e366b63566c","size":76965,"data":"","first_seen":"2026-09-27T06:30:15.15882Z","last_seen":"2026-09-27T06:30:15.15882Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alterhub.site/games.js?v=932f0e44","fqdn":"alterhub.site","domain":"alterhub.site","tld":"site"},"ip":{"addr":"104.21.42.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cf2241c109c5d7991ead1d98db007d3f","sha1":"932f0e440418088411a23244cedfd6dce0cb129c","sha256":"9b7c9091c2a71fac6392b5f0261f10641e4f70abd332f89a0168a71abd815603","sha512":"554141208b3e8634a750a7d468773e331a2096340111d92a846d6e4a17f3973bb0c95a4221bdefb5f750cb1449d87d6eb9546272e77bcfb1847ad76f5d271e3a","ssdeep":"","tlshash":"7c41aeab71330de40ca0933d5892bf750eb447f4935b29a435cfd468234d896913af7a","size":2165,"data":"","first_seen":"2026-09-27T06:27:52.382228Z","last_seen":"2026-09-27T06:30:57.008233Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"3059754494241795805571dfa6ef4bf5","sha1":"730ecc4c5ddde4546c5426a3b44c8af97bac98c7","sha256":"02a5fe66baa84aa2a02dd43dbe6e758e0a0a32c51825503028ff528624148ca4","sha512":"ae1ed59683641777f9708a159f375ff9b81e226b2bdb890361996fe3d341c25bfc1f331f395863a4b1ed1cd2293871fc2ecc02300494fc73f4521c568a057505","ssdeep":"","tlshash":"38d023e51cb5843072a4054721b5d7b5776122b5b721b544c1cacc1b6e10ed304b5a6c","size":217,"data":"","first_seen":"2026-09-27T06:30:15.207705Z","last_seen":"2026-09-27T06:30:15.207705Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aqml.org/16/f3dfac6b133adcea2870cc1171f8be84","fqdn":"aqml.org","domain":"aqml.org","tld":"org"},"ip":{"addr":"172.67.215.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cfd64ed8bcdf5182c46973b763e0d105","sha1":"83ce9a7df940de280f31817417f7bace1c598788","sha256":"ae17803b055d8d616d84b2aca4f0ea5840c67622ed07939e8230b0238e572277","sha512":"cd01dfb1190a31a1a1e722729cd69a70c88a75fd8abcf55b7cac8ba0a94e144d0f96d0af2ae2e04c27a518ea5c443186bf11ad78fdfb065375dd1131feb93a9b","ssdeep":"192:Uou1f2fBpS++cJju6r/+ixFAMPE4h2zISaVbjVYI9Bc5HHUATN6BdPwKnl9W7nF:8BYS++0u6KOY82zILVb5EnUAR6BaAnWR","tlshash":"f312849c7e40add85ba4a9fb75778a6512f71d01b20cc0a8f03a2c64bd42397b4bf175","size":9788,"data":"","first_seen":"2026-09-27T06:30:15.165156Z","last_seen":"2026-09-27T06:30:56.99345Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bicea.org/15/9934f3af5b5e41f86ecd27cc4a72d823","fqdn":"bicea.org","domain":"bicea.org","tld":"org"},"ip":{"addr":"104.21.86.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7f5485888fdbc018fc0d9bdd414d8227","sha1":"64af421e1d9a77ec8af81ea674301c116521224f","sha256":"efd6f6bc4a4f5269c931a81c805987d1d864f37ebe87d7695a54da2b553729eb","sha512":"5acedf5e761329e4eb8410be6abd62688c988842227c18243e112a8269b4a019b572ad7a4c6412e232a11f409f39addcb6ab1dd9c587405c3b2a2706a9e4fa2f","ssdeep":"1536:dtbWg2WXLqcspEaTcMnUr0uDy7wgZxmbM5Pr6jZlrC6wTkGdRdpmtIqYOt0I85ma:dwg2WXLopEWcMnUr0uDSNZxmbM5KDVwp","tlshash":"6d73e7846f10b27e12b0fcff7712e492e0191d86338ce4ede96d2c0a595e366b63566c","size":76965,"data":"","first_seen":"2026-09-27T06:30:15.033685Z","last_seen":"2026-09-27T06:30:15.033685Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"pl28128394.effectivecpmnetwork.com/3ae6276d5f69eb697421a09960b7da53/invoke.js","fqdn":"pl28128394.effectivecpmnetwork.com","domain":"effectivecpmnetwork.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ads.alterhub.site/promoframe#k=3ae6276d5f69eb697421a09960b7da53\u0026n=28128394\u0026i=n3_ke4tgo","date":"2026-09-27T06:29:12.285Z","timestamp":1790490552285,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"effectivecpmnetwork.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 23:21:47 GMT","end":"Thu, 10 Dec 2026 23:21:46 GMT"},"fingerprint":{"sha1":"D6:4E:9E:FD:10:D2:53:EF:D6:DD:33:0A:D1:87:5B:BF:58:A8:9E:5C","sha256":"61:27:CD:75:F7:04:8C:96:76:E8:9F:15:C5:CD:AD:BD:7A:43:30:4D:F0:69:33:60:82:74:88:7D:67:1B:9C:D7"}}},"request":{"raw":"GET /3ae6276d5f69eb697421a09960b7da53/invoke.js HTTP/1.1\r\nHost: pl28128394.effectivecpmnetwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 27 Sep 2026 06:29:12 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\naccept-ch: Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Model,X-Device-User-Agent,User-Agent,Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Mobile,Device-Stock-Ua,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua\r\naccess-control-allow-origin: *\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\nx-envoy-upstream-service-time: 8\r\nHost: pl28128394.effectivecpmnetwork.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: ea5515b07bf64a5fea44730cbf18fe0b\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":46253,"size_decoded":19152,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (46251), with no line terminators","md5":"65fffc622ef1cf05bbd4521e164d46e3","sha1":"345a65f0c36264e295769f839b9e93347351a582","sha256":"def052b84e31e7960f811b57902b0215e1a0ffdbc1194101d500685bd986fe78","sha512":"0ed8774eae7f1624499f44491add8b7efcdb3e45e7e60a67704c6413e9948aae1d31b1dc2c7c037d8b17c197c4069a41e930ddf0d0859f5fb7d186e423060b95","ssdeep":"768:tmmZugNJEOlhP92QfyREnzrcSzPYYIq9xOEA9Utws8tjJq1z4T4nmo8es6KChvp9:Umf3UwrcSzPYYIq9x1Wimp9ChvXrNmox","tlshash":"5c23c6a47f10db7e57a1e9bf227a8c51f1660d8078ccd1c8e13f6dc8698a30a957d938","first_seen":"2026-09-27T06:30:15.032201Z","last_seen":"2026-09-27T06:30:15.032201Z","times_seen":1,"resource_available":true,"data":null}},"time_used":471,"timings":{"blocked":-1,"dns":0,"connect":91,"send":0,"wait":102,"receive":91,"ssl":187},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"pl28128394.effectivecpmnetwork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bicea.org/15/9934f3af5b5e41f86ecd27cc4a72d823","fqdn":"bicea.org","domain":"bicea.org","tld":"org"},"ip":{"addr":"104.21.86.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ads.alterhub.site/promoframe#k=3ae6276d5f69eb697421a09960b7da53\u0026n=28128394\u0026i=n3_ke4tgo","date":"2026-09-27T06:29:12.783Z","timestamp":1790490552783,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bicea.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Sep 2026 14:22:10 GMT","end":"Tue, 15 Dec 2026 15:22:04 GMT"},"fingerprint":{"sha1":"B9:2F:CB:73:40:D7:7C:69:4A:C6:22:3F:45:F8:CA:8D:35:85:B1:C6","sha256":"1A:05:85:45:D6:5A:93:DC:D9:59:BF:16:3B:1F:F2:B3:07:D5:B3:3C:34:CF:6D:7D:8D:BC:6F:D5:88:E3:95:59"}}},"request":{"raw":"GET /15/9934f3af5b5e41f86ecd27cc4a72d823 HTTP/1.1\r\nHost: bicea.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 27 Sep 2026 06:29:12 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nset-cookie: uidm=01a0e18d-aa43-72b8-9130-b2e7f0a9c1c6_1; Path=/; Expires=Wed, 24 Sep 2036 06:29:12 GMT; Secure; SameSite=None\n__cf_bm=zUFQypBc62liTyQwIdBBDEm3Y60VM.gj43hhL03MQD0-1790490552.8516886-1.0.1.1-PjE3HcTw3C8dwldcJIBMgGhJvpZZR5NYOv3gGvPXMiBhE3EhOJLR0gF2DcN1IbOTKoDWsCnI4Sd36HzVkls0onOnIAQwHdvKRzE6.67fy6OEofJrUb6pyS8dwL1VgFK7; HttpOnly; SameSite=None; Secure; Path=/; Domain=bicea.org; Expires=Sun, 27 Sep 2026 06:59:12 GMT\r\naccept-ch: Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Platform,X-Device-User-Agent,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile,Device-Stock-Ua,X-Operamini-Phone-Ua,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent\r\ncontent-encoding: gzip\r\nlink: \u003chttps://bicea.org\u003e; rel=preconnect; crossorigin, \u003chttps://bicea.org\u003e; rel=dns-prefetch, \u003chttps://static.nresystems.com\u003e; rel=preconnect; crossorigin, \u003chttps://static.nresystems.com\u003e; rel=dns-prefetch\r\nvary: Accept-Encoding, Origin\r\nx-envoy-upstream-service-time: 10\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: no-cache, max-age=0, private, no-cache\r\nx-request-id: abfc438aa063e4e4c3f920fd3cb354a0\r\npragma: no-cache\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,X-Forwarded-For,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1728000\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a41873e34fdf32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"uidm","value":"01a0e18d-aa43-72b8-9130-b2e7f0a9c1c6_1","quoted":false,"path":"/","expires":"2036-09-24T06:29:12Z","raw_expires":"Wed, 24 Sep 2036 06:29:12 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uidm=01a0e18d-aa43-72b8-9130-b2e7f0a9c1c6_1; Path=/; Expires=Wed, 24 Sep 2036 06:29:12 GMT; Secure; SameSite=None"},{"name":"__cf_bm","value":"zUFQypBc62liTyQwIdBBDEm3Y60VM.gj43hhL03MQD0-1790490552.8516886-1.0.1.1-PjE3HcTw3C8dwldcJIBMgGhJvpZZR5NYOv3gGvPXMiBhE3EhOJLR0gF2DcN1IbOTKoDWsCnI4Sd36HzVkls0onOnIAQwHdvKRzE6.67fy6OEofJrUb6pyS8dwL1VgFK7","quoted":false,"path":"/","domain":"bicea.org","expires":"2026-09-27T06:59:12Z","raw_expires":"Sun, 27 Sep 2026 06:59:12 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=zUFQypBc62liTyQwIdBBDEm3Y60VM.gj43hhL03MQD0-1790490552.8516886-1.0.1.1-PjE3HcTw3C8dwldcJIBMgGhJvpZZR5NYOv3gGvPXMiBhE3EhOJLR0gF2DcN1IbOTKoDWsCnI4Sd36HzVkls0onOnIAQwHdvKRzE6.67fy6OEofJrUb6pyS8dwL1VgFK7; HttpOnly; SameSite=None; Secure; Path=/; Domain=bicea.org; Expires=Sun, 27 Sep 2026 06:59:12 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":76965,"size_decoded":33213,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"7f5485888fdbc018fc0d9bdd414d8227","sha1":"64af421e1d9a77ec8af81ea674301c116521224f","sha256":"efd6f6bc4a4f5269c931a81c805987d1d864f37ebe87d7695a54da2b553729eb","sha512":"5acedf5e761329e4eb8410be6abd62688c988842227c18243e112a8269b4a019b572ad7a4c6412e232a11f409f39addcb6ab1dd9c587405c3b2a2706a9e4fa2f","ssdeep":"1536:dtbWg2WXLqcspEaTcMnUr0uDy7wgZxmbM5Pr6jZlrC6wTkGdRdpmtIqYOt0I85ma:dwg2WXLopEWcMnUr0uDSNZxmbM5KDVwp","tlshash":"6d73e7846f10b27e12b0fcff7712e492e0191d86338ce4ede96d2c0a595e366b63566c","first_seen":"2026-09-27T06:30:15.033685Z","last_seen":"2026-09-27T06:30:15.033685Z","times_seen":1,"resource_available":true,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":55,"connect":1,"send":0,"wait":77,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bicea.org/10/H4sIAAAAAAAC_4xTy4scRRjvXgMeAhEkGBCFOQRJwOlU9bvNQVyzj2x2ZzfJrpMHMlR3Vc_UTL_S1T0zO6fEiHiMNw8iPd9MdlXi62L0pMwKIoFABi-DZC_-A0rQmyCzOxC9WVDfg6-gfr8f3--9fr4vKZCTycZa3ONBQM4YCiqdqvKIxh1RqmyWMFLQ2VKVR6Z-ttSdhrT9GtZ0BZ0uLTGvFZ9REUYII1xa5Cnz4-6Zgynw5J6DFQcpuqpgQ4du-t9e5HMgyBzQ9r70PHA6fu43_zpwbwRR-NU5JlpZnLy6EOYByeIU2nR3K2pFcSeC8GnppzL40e7sNcRiLEkfzkEc7c4YQNweThmAy8fS3AuPwY12ZzDBbd89ROoGwCJw6VHotEfAghFwMgIvvg2cPpIAPAqVdYjCnUqcdsj24ZRMp2PpyF9PgHfG0pHHxyEKv5gPeLd0OQ7yjMeRgK5fAO-OgNdHkOR7kPXmgHf2wMveAU4fSujEUYjCz5bjNm-V2ixtAaeTkwgTxLBNy4QYetkyqFm2XZ-VVZ1iYlgEa8g4EIr7IyBChnx6uQy5L0OeyBDSSUlHtu5hopm-Qz0L6UTXKXORY6sIEcezIPduAad3wEvf_yShjazVVp1hluZsJ488oTp9fC-vJYGGVdtEjtHHk5MiYJ7jaLqvEd9wDaZj3zaZR1XL83RiqdRWtU-vm5aDVEN_e5hzGk5e-T9saupureb5NTec_CQcq-p3Vu0LC-eCzorqbVxaW64sLDqZ0dyoNJLNHEeZf8FLFk2vjC0H6Q4yDFWxDdVQTb2MFaRgBZe7Vi3zVxuXrjqxv1bVlzxa6waKsmw4Vy77a1e34vOmubGx6qwuLLdrbnVr6WJ7a6NTrzYq6EpzvrnoLK2TuvkWXaRZ8wZuuPPo2ry2aZ_HiRmubGyRqi7ChYXtUG9fq5xbDFcWtJVeUzTefGOzgrbXK3jnUNMDRYdTRfsYkvQmtPgdEFQGkUnQpsVdGghVFDs0ELmLZ1mdZa0YxFm9T-7GWZ1FEpD0DqS0GPLkhrgNXvbMoOeLC4N4GoibFQPi0mLAaSZBeuPfe0TJVHnMykRzUFnXDeq6NkLUQUNfZHnRT2YelH-tfwktNik5zPNtpmsmQarhW77vI801sWFgajFLs0DwAriQDvavx8fSxfunIeFjqXztY3DJHohgDzz-EpD8ZSCdAkijgF70OQkyljZyVxE8Y0DjApLsCGTbMrBM7gf70vHBpc35Hw68xR6eAuY9kGYHvLSAJC2gyX-UoB7c-no9yXjIe2RqtssZyZgMhD86dgw8Ppae_fnPA9ef2H8RvOQmiOTB6390f_n7yTeLg0AkY6n-UQgilsBNZAi4BAF7-hVxCxDswfe_z3r3ad0X70I9lcEN5IEbpPLQDdLgg0O0gk9Khupqpm2bzDepr1FN1ahjIOboxDF1RzcgE-Pmt_e_-2cA4DYCLHwFAAA=","fqdn":"bicea.org","domain":"bicea.org","tld":"org"},"ip":{"addr":"104.21.86.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ads.alterhub.site/promoframe#k=fdfdd92a59e588025342002253695a24\u0026w=468\u0026h=60\u0026i=u2_h3rpj0","date":"2026-09-27T06:29:13.897Z","timestamp":1790490553897,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bicea.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Sep 2026 14:22:10 GMT","end":"Tue, 15 Dec 2026 15:22:04 GMT"},"fingerprint":{"sha1":"B9:2F:CB:73:40:D7:7C:69:4A:C6:22:3F:45:F8:CA:8D:35:85:B1:C6","sha256":"1A:05:85:45:D6:5A:93:DC:D9:59:BF:16:3B:1F:F2:B3:07:D5:B3:3C:34:CF:6D:7D:8D:BC:6F:D5:88:E3:95:59"}}},"request":{"raw":"GET /10/H4sIAAAAAAAC_4xTy4scRRjvXgMeAhEkGBCFOQRJwOlU9bvNQVyzj2x2ZzfJrpMHMlR3Vc_UTL_S1T0zO6fEiHiMNw8iPd9MdlXi62L0pMwKIoFABi-DZC_-A0rQmyCzOxC9WVDfg6-gfr8f3--9fr4vKZCTycZa3ONBQM4YCiqdqvKIxh1RqmyWMFLQ2VKVR6Z-ttSdhrT9GtZ0BZ0uLTGvFZ9REUYII1xa5Cnz4-6Zgynw5J6DFQcpuqpgQ4du-t9e5HMgyBzQ9r70PHA6fu43_zpwbwRR-NU5JlpZnLy6EOYByeIU2nR3K2pFcSeC8GnppzL40e7sNcRiLEkfzkEc7c4YQNweThmAy8fS3AuPwY12ZzDBbd89ROoGwCJw6VHotEfAghFwMgIvvg2cPpIAPAqVdYjCnUqcdsj24ZRMp2PpyF9PgHfG0pHHxyEKv5gPeLd0OQ7yjMeRgK5fAO-OgNdHkOR7kPXmgHf2wMveAU4fSujEUYjCz5bjNm-V2ixtAaeTkwgTxLBNy4QYetkyqFm2XZ-VVZ1iYlgEa8g4EIr7IyBChnx6uQy5L0OeyBDSSUlHtu5hopm-Qz0L6UTXKXORY6sIEcezIPduAad3wEvf_yShjazVVp1hluZsJ488oTp9fC-vJYGGVdtEjtHHk5MiYJ7jaLqvEd9wDaZj3zaZR1XL83RiqdRWtU-vm5aDVEN_e5hzGk5e-T9saupureb5NTec_CQcq-p3Vu0LC-eCzorqbVxaW64sLDqZ0dyoNJLNHEeZf8FLFk2vjC0H6Q4yDFWxDdVQTb2MFaRgBZe7Vi3zVxuXrjqxv1bVlzxa6waKsmw4Vy77a1e34vOmubGx6qwuLLdrbnVr6WJ7a6NTrzYq6EpzvrnoLK2TuvkWXaRZ8wZuuPPo2ry2aZ_HiRmubGyRqi7ChYXtUG9fq5xbDFcWtJVeUzTefGOzgrbXK3jnUNMDRYdTRfsYkvQmtPgdEFQGkUnQpsVdGghVFDs0ELmLZ1mdZa0YxFm9T-7GWZ1FEpD0DqS0GPLkhrgNXvbMoOeLC4N4GoibFQPi0mLAaSZBeuPfe0TJVHnMykRzUFnXDeq6NkLUQUNfZHnRT2YelH-tfwktNik5zPNtpmsmQarhW77vI801sWFgajFLs0DwAriQDvavx8fSxfunIeFjqXztY3DJHohgDzz-EpD8ZSCdAkijgF70OQkyljZyVxE8Y0DjApLsCGTbMrBM7gf70vHBpc35Hw68xR6eAuY9kGYHvLSAJC2gyX-UoB7c-no9yXjIe2RqtssZyZgMhD86dgw8Ppae_fnPA9ef2H8RvOQmiOTB6390f_n7yTeLg0AkY6n-UQgilsBNZAi4BAF7-hVxCxDswfe_z3r3ad0X70I9lcEN5IEbpPLQDdLgg0O0gk9Khupqpm2bzDepr1FN1ahjIOboxDF1RzcgE-Pmt_e_-2cA4DYCLHwFAAA= HTTP/1.1\r\nHost: bicea.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uidm=01a0e18d-aa54-75d6-8bfe-24d1a57a1305_2; __cf_bm=s97WfwL8KEDlwJ2cPRMHNEF9t5jPNhpTu1ntfKcpF6c-1790490552.8525264-1.0.1.1-x7_tfLhRY9ofMW4Gcd_xl..H59XSfMYUoI66PPL9LEHv_bWUGQvUPwgWhN0XjBjF9GOag6VdFdtjq1hbB0ZB3T8I1p6mJPUaW4smEEym4vZNDFmJE3JzjshCATN0yON1; pdhtkv=true; uncs=2; pdhtkv29=true; uncs29=2; u_pl31286095=1; slec9934f3af5b5e41f86ecd27cc4a72d823=[6790254]; u_pl31156143=1; slec9ecf8e436a025f7fff03b61551d7e737=[6671912]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 27 Sep 2026 06:29:13 GMT\r\ncontent-type: image/gif\r\ncontent-length: 7\r\nserver: cloudflare\r\naccept-ch: Device-Stock-Ua,X-Device-User-Agent,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version\r\nvary: Accept-Encoding, Origin\r\nx-envoy-upstream-service-time: 3\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: no-cache, max-age=0, private, no-cache\r\nx-request-id: a61e48d30e5a8498f22c7f1dfefcac7e\r\npragma: no-cache\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,X-Forwarded-For,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1728000\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a41873e9decd32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T20:43:33.933419Z","times_seen":19037193,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.bakestubborn.com/sb/ssp/interstitial/message_redcircle/1/img/number.png","fqdn":"cdn.bakestubborn.com","domain":"bakestubborn.com","tld":"com"},"ip":{"addr":"104.21.74.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ads.alterhub.site/promoframe#k=3ae6276d5f69eb697421a09960b7da53\u0026n=28128394\u0026i=n3_ke4tgo","date":"2026-09-27T06:29:15.335Z","timestamp":1790490555335,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bakestubborn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 10:45:38 GMT","end":"Sun, 29 Nov 2026 11:44:06 GMT"},"fingerprint":{"sha1":"CC:2C:E2:22:5E:AA:1C:23:69:1C:A8:45:D8:E3:11:DD:72:0F:3A:7F","sha256":"BF:DE:33:C4:70:F3:0B:0C:27:4F:85:FB:EB:B1:8B:DF:D8:F6:7A:95:F2:7D:D9:E6:40:CC:60:74:A0:77:92:D1"}}},"request":{"raw":"GET /sb/ssp/interstitial/message_redcircle/1/img/number.png HTTP/1.1\r\nHost: cdn.bakestubborn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 06:29:15 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 19 Jan 2024 14:19:45 GMT\r\npriority: u=4,i\r\netag: \"65aa8501-472\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\naccept-ranges: bytes\r\nage: 2294248\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=34a9ZRrKbZY06cakxFeXZsTowKQCc%2Biq2vmthsUOX8HOhx6yinNHCckPE%2FEsNBwu6rwezKiY3V7aOdpRBtsA3%2BM%2BFKwgJFocGYxElR1hNZoqC28bAP%2BGQ5befHUOZ0o3HUty5%2B37uw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a41873f2da151525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1138\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1138,"size_decoded":1975,"mime_type":"image/png","magic":"PNG image data, 43 x 43, 8-bit/color RGBA, non-interlaced","md5":"9e4414e85c588bf7db195e49c02ab2bb","sha1":"09254e79b255f1b2dfe45adbbe44583a4b433782","sha256":"0b977ec6e7cf5d35df03cd3a8041f5f523f5d4059ac67c152c0a7b613e20b762","sha512":"07925dc4d8f6cc1b9b89d26f2c3a6aa3175279719a0999fd837a20e8b12f443eb521e23b3212227ac1b6dfa2ecfcdd94b7494dd67d9d8b046efdddd185bb9bfc","ssdeep":"","tlshash":"a121f90aeca21be0d7888f0214dc135095da07447f8e280a37b6aa599e1070614451fb","first_seen":"2023-04-09T12:43:14Z","last_seen":"2026-10-11T18:22:24.698295Z","times_seen":4655,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"cdn.bakestubborn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"cdn.bakestubborn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://alterhub.site/","date":"2026-09-27T06:29:11.804Z","timestamp":1790490551804,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://alterhub.site\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:55:16 GMT\r\nexpires: Tue, 21 Sep 2027 15:55:16 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 484435\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-10-11T19:42:18.948247Z","times_seen":313537,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":37,"send":0,"wait":30,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bicea.org/pixel/sbls?bv=\u0026tmpl=942\u0026u=https%3A%2F%2Fcdn.bakestubborn.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2Ffinanceskipper%2Fmessage_redcircle2%2F16%2Fcss%2Fanimate.css\u0026l=78689\u0026fd=464","fqdn":"bicea.org","domain":"bicea.org","tld":"org"},"ip":{"addr":"104.21.86.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ads.alterhub.site/promoframe#k=fdfdd92a59e588025342002253695a24\u0026w=468\u0026h=60\u0026i=u2_h3rpj0","date":"2026-09-27T06:29:14.863Z","timestamp":1790490554863,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bicea.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Sep 2026 14:22:10 GMT","end":"Tue, 15 Dec 2026 15:22:04 GMT"},"fingerprint":{"sha1":"B9:2F:CB:73:40:D7:7C:69:4A:C6:22:3F:45:F8:CA:8D:35:85:B1:C6","sha256":"1A:05:85:45:D6:5A:93:DC:D9:59:BF:16:3B:1F:F2:B3:07:D5:B3:3C:34:CF:6D:7D:8D:BC:6F:D5:88:E3:95:59"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=942\u0026u=https%3A%2F%2Fcdn.bakestubborn.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2Ffinanceskipper%2Fmessage_redcircle2%2F16%2Fcss%2Fanimate.css\u0026l=78689\u0026fd=464 HTTP/1.1\r\nHost: bicea.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uidm=01a0e18d-aa54-75d6-8bfe-24d1a57a1305_2; __cf_bm=s97WfwL8KEDlwJ2cPRMHNEF9t5jPNhpTu1ntfKcpF6c-1790490552.8525264-1.0.1.1-x7_tfLhRY9ofMW4Gcd_xl..H59XSfMYUoI66PPL9LEHv_bWUGQvUPwgWhN0XjBjF9GOag6VdFdtjq1hbB0ZB3T8I1p6mJPUaW4smEEym4vZNDFmJE3JzjshCATN0yON1; pdhtkv=true; uncs=2; pdhtkv29=true; uncs29=2; u_pl31286095=1; slec9934f3af5b5e41f86ecd27cc4a72d823=[6790254]; u_pl31156143=1; slec9ecf8e436a025f7fff03b61551d7e737=[6671912]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 27 Sep 2026 06:29:14 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\naccept-ch: Sec-Ch-Ua-Full-Version-List, Sec-Ch-Ua-Full-Version, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, User-Agent, Sec-Ch-Ua, Sec-Ch-Ua-Platformuser-Agent, Sec-Ch-Ua-Model, Device-Stock-Ua, X-Device-User-Agent, X-Operamini-Phone-Ua, X-Ucbrowser-Device-Ua, Sec-Ch-Ua-Platform-Version\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\naccess-control-expose-headers: Content-Length,Content-Range\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a41873efeb7832fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":820,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T20:43:33.933419Z","times_seen":19037193,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bicea.org/pixel/sbls?bv=\u0026tmpl=942\u0026u=https%3A%2F%2Fcdn.bakestubborn.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2Ffinanceskipper%2Fmessage_redcircle2%2F16%2Fcss%2Fstyle.css\u0026l=3664\u0026fd=469","fqdn":"bicea.org","domain":"bicea.org","tld":"org"},"ip":{"addr":"104.21.86.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ads.alterhub.site/promoframe#k=fdfdd92a59e588025342002253695a24\u0026w=468\u0026h=60\u0026i=u2_h3rpj0","date":"2026-09-27T06:29:14.867Z","timestamp":1790490554867,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bicea.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Sep 2026 14:22:10 GMT","end":"Tue, 15 Dec 2026 15:22:04 GMT"},"fingerprint":{"sha1":"B9:2F:CB:73:40:D7:7C:69:4A:C6:22:3F:45:F8:CA:8D:35:85:B1:C6","sha256":"1A:05:85:45:D6:5A:93:DC:D9:59:BF:16:3B:1F:F2:B3:07:D5:B3:3C:34:CF:6D:7D:8D:BC:6F:D5:88:E3:95:59"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=942\u0026u=https%3A%2F%2Fcdn.bakestubborn.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2Ffinanceskipper%2Fmessage_redcircle2%2F16%2Fcss%2Fstyle.css\u0026l=3664\u0026fd=469 HTTP/1.1\r\nHost: bicea.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uidm=01a0e18d-aa54-75d6-8bfe-24d1a57a1305_2; __cf_bm=s97WfwL8KEDlwJ2cPRMHNEF9t5jPNhpTu1ntfKcpF6c-1790490552.8525264-1.0.1.1-x7_tfLhRY9ofMW4Gcd_xl..H59XSfMYUoI66PPL9LEHv_bWUGQvUPwgWhN0XjBjF9GOag6VdFdtjq1hbB0ZB3T8I1p6mJPUaW4smEEym4vZNDFmJE3JzjshCATN0yON1; pdhtkv=true; uncs=2; pdhtkv29=true; uncs29=2; u_pl31286095=1; slec9934f3af5b5e41f86ecd27cc4a72d823=[6790254]; u_pl31156143=1; slec9ecf8e436a025f7fff03b61551d7e737=[6671912]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 27 Sep 2026 06:29:14 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\naccept-ch: Sec-Ch-Ua-Full-Version-List, Sec-Ch-Ua-Full-Version, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, User-Agent, Sec-Ch-Ua, Sec-Ch-Ua-Platformuser-Agent, Sec-Ch-Ua-Model, Device-Stock-Ua, X-Device-User-Agent, X-Operamini-Phone-Ua, X-Ucbrowser-Device-Ua, Sec-Ch-Ua-Platform-Version\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\naccess-control-expose-headers: Content-Length,Content-Range\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a41873efeb8532fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":820,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T20:43:33.933419Z","times_seen":19037193,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bicea.org/11/H4sIAAAAAAAC_4xTTYgcxRfvzn9vOfxBQrwozkFEwelU9cdMtzkE18zuZrM7O252nSSCQ3V9zNZMf6Wru2d28JAP8eIl3jyI9L7ZZCGImJMfF2VW8LAgOBeZQ3LxLoLgTZDdHYjefFDvVfEreL9X9ft9uJc_1QzIyay1Ho9kEJALjoEqr7ZlxOKBqjS3KhgZ6GKlLaOafbEyPE5p8Qa2bAO9VlnmtB9fMBFGCCNcWZIpF_HwwgkKMvncw4aHDNs0sGPDMP33WeU6KKIDK55qz4Fk0___Kt4FSScQhV9e5qqfxcnrjTAPSBanULCD7agfxYMIwmdbkeogooP5bYjVVNM-OQNxdDCfAOJi_3gC8OVUO3P-CfjRwZwm-MWDU6Z-ADwCn52FQTEBHkxAkgnQ-B5I9rMGQBk0NyAKHzbjdEB2T1FyjE61hT__ADmYagtPzkEUfrEYyGHlWhzkmYwjBUNRghxOQHYnkOSHkI3OgBwcAs3ugmQ_aej5sxCFj1biQvYrBU_7INnsZYQJ4thlVUIcu1p3WK3q-oJXTZth4tQJtpBz8lBSTIAoHfLjJXXIhQ55okPIZhUbuTbFxKoJj9E6soltM-4jzzURIh6tQ07vgGT3gaZ393PJwtkr_6VvxzzodKjo-OHsR-XV22Kw5l5tXA4GqyZtba6vNBtLXub0Ws2dZCvHUSau0mSpRqu47iHbQ45jGq5jOmbNrmIDGdjA1WG9k4m1nc0bXizW2_YyZZ1hYBgrjnf9mli_sR1fqdVarTVvrbFSdPz29vLbxXZr0G3vNNH13mJvyVveIN3aO2yJZb1beMdfRDcXrS33Ck5q4Wprm7RtFTYau6Fd3GxeXgpXG9bqqKd23npzq4l2N5oYkvQ29OV9UEwHlWlQsPIBC5SpyocsULmP59WcV6scx1l3jzyIsy6PNCDpfUhZuS-TW-oe0Ox_45FQV8fxcSJ-Vo6Jz8qxZJkG6a1_fi_ldrWOLVL1OBdV5taIjRlhxDf3hcryci-ZW0N_Qjegz2cVz7NsYRHh-A63sXBrnDKzTqlN6iZzTQuULEEq7UQWIznVNn8pIJFTrXrzM_DJIajgEKh8AUj-IpBBCWSnhFH0mMZMil1FU5lkyhjujoDFJSTZAmS7OvBM3wueaufGm1uL35_IvvtpBJweXfrr2_ecS-__BjQtIUlL6MkfNOgGdx5vJJkM5Ygc--BaRjK-AEROtbMfvQRUTrXzj6ITS16srgFNboNKji4dWicxDlQy1Wi6ACrWwE90CKQGAT_S5gHEL0HxZ819fvTd76fYnvoAuqkOfqCP_SDV9_0gDT4-5avkrCIsblKE3HoNW67g2LIZFY5re6xGkGVxyNS09_VX3_w9AHo7OZkZBQAA","fqdn":"bicea.org","domain":"bicea.org","tld":"org"},"ip":{"addr":"104.21.86.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ads.alterhub.site/promoframe#k=3ae6276d5f69eb697421a09960b7da53\u0026n=28128394\u0026i=n3_ke4tgo","date":"2026-09-27T06:29:15.321Z","timestamp":1790490555321,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bicea.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Sep 2026 14:22:10 GMT","end":"Tue, 15 Dec 2026 15:22:04 GMT"},"fingerprint":{"sha1":"B9:2F:CB:73:40:D7:7C:69:4A:C6:22:3F:45:F8:CA:8D:35:85:B1:C6","sha256":"1A:05:85:45:D6:5A:93:DC:D9:59:BF:16:3B:1F:F2:B3:07:D5:B3:3C:34:CF:6D:7D:8D:BC:6F:D5:88:E3:95:59"}}},"request":{"raw":"GET /11/H4sIAAAAAAAC_4xTTYgcxRfvzn9vOfxBQrwozkFEwelU9cdMtzkE18zuZrM7O252nSSCQ3V9zNZMf6Wru2d28JAP8eIl3jyI9L7ZZCGImJMfF2VW8LAgOBeZQ3LxLoLgTZDdHYjefFDvVfEreL9X9ft9uJc_1QzIyay1Ho9kEJALjoEqr7ZlxOKBqjS3KhgZ6GKlLaOafbEyPE5p8Qa2bAO9VlnmtB9fMBFGCCNcWZIpF_HwwgkKMvncw4aHDNs0sGPDMP33WeU6KKIDK55qz4Fk0___Kt4FSScQhV9e5qqfxcnrjTAPSBanULCD7agfxYMIwmdbkeogooP5bYjVVNM-OQNxdDCfAOJi_3gC8OVUO3P-CfjRwZwm-MWDU6Z-ADwCn52FQTEBHkxAkgnQ-B5I9rMGQBk0NyAKHzbjdEB2T1FyjE61hT__ADmYagtPzkEUfrEYyGHlWhzkmYwjBUNRghxOQHYnkOSHkI3OgBwcAs3ugmQ_aej5sxCFj1biQvYrBU_7INnsZYQJ4thlVUIcu1p3WK3q-oJXTZth4tQJtpBz8lBSTIAoHfLjJXXIhQ55okPIZhUbuTbFxKoJj9E6soltM-4jzzURIh6tQ07vgGT3gaZ393PJwtkr_6VvxzzodKjo-OHsR-XV22Kw5l5tXA4GqyZtba6vNBtLXub0Ws2dZCvHUSau0mSpRqu47iHbQ45jGq5jOmbNrmIDGdjA1WG9k4m1nc0bXizW2_YyZZ1hYBgrjnf9mli_sR1fqdVarTVvrbFSdPz29vLbxXZr0G3vNNH13mJvyVveIN3aO2yJZb1beMdfRDcXrS33Ck5q4Wprm7RtFTYau6Fd3GxeXgpXG9bqqKd23npzq4l2N5oYkvQ29OV9UEwHlWlQsPIBC5SpyocsULmP59WcV6scx1l3jzyIsy6PNCDpfUhZuS-TW-oe0Ox_45FQV8fxcSJ-Vo6Jz8qxZJkG6a1_fi_ldrWOLVL1OBdV5taIjRlhxDf3hcryci-ZW0N_Qjegz2cVz7NsYRHh-A63sXBrnDKzTqlN6iZzTQuULEEq7UQWIznVNn8pIJFTrXrzM_DJIajgEKh8AUj-IpBBCWSnhFH0mMZMil1FU5lkyhjujoDFJSTZAmS7OvBM3wueaufGm1uL35_IvvtpBJweXfrr2_ecS-__BjQtIUlL6MkfNOgGdx5vJJkM5Ygc--BaRjK-AEROtbMfvQRUTrXzj6ITS16srgFNboNKji4dWicxDlQy1Wi6ACrWwE90CKQGAT_S5gHEL0HxZ819fvTd76fYnvoAuqkOfqCP_SDV9_0gDT4-5avkrCIsblKE3HoNW67g2LIZFY5re6xGkGVxyNS09_VX3_w9AHo7OZkZBQAA HTTP/1.1\r\nHost: bicea.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uidm=01a0e18d-aa54-75d6-8bfe-24d1a57a1305_2; __cf_bm=s97WfwL8KEDlwJ2cPRMHNEF9t5jPNhpTu1ntfKcpF6c-1790490552.8525264-1.0.1.1-x7_tfLhRY9ofMW4Gcd_xl..H59XSfMYUoI66PPL9LEHv_bWUGQvUPwgWhN0XjBjF9GOag6VdFdtjq1hbB0ZB3T8I1p6mJPUaW4smEEym4vZNDFmJE3JzjshCATN0yON1; pdhtkv=true; uncs=2; pdhtkv29=true; uncs29=2; u_pl31286095=1; slec9934f3af5b5e41f86ecd27cc4a72d823=[6790254]; u_pl31156143=1; slec9ecf8e436a025f7fff03b61551d7e737=[6671912]; iprc_l+574e4dfde0b7d9d0e285c2e1fff9d691=6671912; iprc_l-6671912=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 27 Sep 2026 06:29:15 GMT\r\ncontent-type: image/gif\r\ncontent-length: 7\r\nserver: cloudflare\r\naccept-ch: Sec-Ch-Ua-Platform,Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile,Device-Stock-Ua,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version-List,X-Device-User-Agent,X-Operamini-Phone-Ua,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua,Sec-Ch-Ua-Full-Version\r\nset-cookie: iprc_l+33b69633d8de7918c43ac44e3d37885d=6790254; Path=/; Expires=Mon, 28 Sep 2026 06:29:15 GMT; Secure; SameSite=None\niprc_l-6790254=1; Path=/; Expires=Mon, 28 Sep 2026 06:29:15 GMT; Secure; SameSite=None\niprc_a+1e6df3a1c90d651f993d129e830cb178=756511; Path=/; Expires=Mon, 28 Sep 2026 06:29:15 GMT; Secure; SameSite=None\niprc_a-756511=1; Path=/; Expires=Mon, 28 Sep 2026 06:29:15 GMT; Secure; SameSite=None\r\nvary: Accept-Encoding, Origin\r\nx-envoy-upstream-service-time: 6\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: no-cache, max-age=0, private, no-cache\r\nx-request-id: c952147e6e2f5016076eda4bc821ff79\r\npragma: no-cache\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,X-Forwarded-For,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1728000\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a41873f2c8da32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"iprc_l+33b69633d8de7918c43ac44e3d37885d","value":"6790254","quoted":false,"path":"/","expires":"2026-09-28T06:29:15Z","raw_expires":"Mon, 28 Sep 2026 06:29:15 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"iprc_l+33b69633d8de7918c43ac44e3d37885d=6790254; Path=/; Expires=Mon, 28 Sep 2026 06:29:15 GMT; Secure; SameSite=None"},{"name":"iprc_l-6790254","value":"1","quoted":false,"path":"/","expires":"2026-09-28T06:29:15Z","raw_expires":"Mon, 28 Sep 2026 06:29:15 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"iprc_l-6790254=1; Path=/; Expires=Mon, 28 Sep 2026 06:29:15 GMT; Secure; SameSite=None"},{"name":"iprc_a+1e6df3a1c90d651f993d129e830cb178","value":"756511","quoted":false,"path":"/","expires":"2026-09-28T06:29:15Z","raw_expires":"Mon, 28 Sep 2026 06:29:15 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"iprc_a+1e6df3a1c90d651f993d129e830cb178=756511; Path=/; Expires=Mon, 28 Sep 2026 06:29:15 GMT; Secure; SameSite=None"},{"name":"iprc_a-756511","value":"1","quoted":false,"path":"/","expires":"2026-09-28T06:29:15Z","raw_expires":"Mon, 28 Sep 2026 06:29:15 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"iprc_a-756511=1; Path=/; Expires=Mon, 28 Sep 2026 06:29:15 GMT; Secure; SameSite=None"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T20:43:33.933419Z","times_seen":19037193,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600\u0026family=Inter+Tight:wght@600\u0026family=JetBrains+Mono:wght@400;500\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://alterhub.site/","date":"2026-09-27T06:29:11.624Z","timestamp":1790490551624,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:29 GMT","end":"Thu, 03 Dec 2026 19:23:28 GMT"},"fingerprint":{"sha1":"6C:5B:26:B8:8E:09:56:23:73:54:AC:B4:B3:91:75:07:31:24:4F:2D","sha256":"83:FB:4A:3F:88:06:C6:06:CC:A5:92:12:C8:C2:89:BD:56:6A:F9:0D:8F:49:3D:A0:83:3B:7E:53:A1:2C:69:05"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600\u0026family=Inter+Tight:wght@600\u0026family=JetBrains+Mono:wght@400;500\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://alterhub.site/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 27 Sep 2026 06:29:11 GMT\r\ndate: Sun, 27 Sep 2026 06:29:11 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15150,"size_decoded":1694,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"1ed52a530cc5b1e5fc28b60a6f929907","sha1":"eabb8502de851c171e4a31657a41cee59cb3807c","sha256":"58c028dd9fcac2fc7af733220529648802bebfdea88a688567dc60df516f464d","sha512":"a24600613c6d251acdc1054e511dd228e28395170828df3321f965a58ff32e9622ee00440fe3c7f4e0cb7ed4d36cc05fd844f413649a89e33ea44934b9f2b9f3","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlVtXGjI3CsWTNKG+7p3ZAXYjG9Up3qnt:vXuM0pbfQOGCE","tlshash":"d762cb91002ba400ab831cc673cf7e3aad8e51466085d5b99ffe0d89aceec66537875d","first_seen":"2026-09-27T06:27:52.41365Z","last_seen":"2026-09-27T06:30:56.974658Z","times_seen":4,"resource_available":true,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":29,"send":0,"wait":49,"receive":0,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alterhub.site/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"alterhub.site","domain":"alterhub.site","tld":"site"},"ip":{"addr":"104.21.42.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://alterhub.site/","date":"2026-09-27T06:29:11.885Z","timestamp":1790490551885,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alterhub.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 00:28:34 GMT","end":"Sat, 07 Nov 2026 01:28:30 GMT"},"fingerprint":{"sha1":"CC:30:2C:31:6D:59:8D:61:CD:11:F9:93:CE:16:C0:86:EE:F5:4A:5A","sha256":"FD:96:F8:0E:8C:08:48:55:A0:F2:69:BB:EA:8B:3A:98:9A:71:49:5F:30:C6:90:E1:9F:D3:7F:54:A3:38:1A:B6"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: alterhub.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nlocation: /cdn-cgi/challenge-platform/h/b/scripts/jsd/d76008a69eab/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\nserver-timing: cfExtPri\r\ndate: Sun, 27 Sep 2026 06:29:11 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a41873dd4b2d0b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T20:43:33.933419Z","times_seen":19037193,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tr.rbxcdn.com/180DAY-7d77e7ea0d8cbe538ce786e111f2be71/256/256/Image/Png/noFilter","fqdn":"tr.rbxcdn.com","domain":"rbxcdn.com","tld":"com"},"ip":{"addr":"143.204.238.74","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://alterhub.site/","date":"2026-09-27T06:29:12.532Z","timestamp":1790490552532,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rbxcdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 09 Sep 2026 00:00:00 GMT","end":"Thu, 25 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"75:D8:06:E9:90:C5:4F:78:20:E1:DC:B0:2D:7F:04:D1:43:36:17:D5","sha256":"3B:CA:A7:4C:D5:BA:BE:D5:47:44:99:0D:4A:D5:DF:17:82:35:B8:6B:67:AF:9F:D7:A1:77:B6:43:87:6A:83:9B"}}},"request":{"raw":"GET /180DAY-7d77e7ea0d8cbe538ce786e111f2be71/256/256/Image/Png/noFilter HTTP/1.1\r\nHost: tr.rbxcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://alterhub.site/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/Png\r\ncontent-length: 87124\r\ndate: Thu, 10 Sep 2026 19:30:57 GMT\r\nserver: public-gateway\r\ncache-control: no-cache\r\nedge-cache-tag: 180DAY-7d77e7ea0d8cbe538ce786e111f2be71\r\nstrict-transport-security: max-age=31536000\r\nx-frame-options: SAMEORIGIN\r\nroblox-machine-id: 2b18f75d-59da-8490-763f-ec6d0f494601\r\nx-envoy-attempt-count: 1\r\nx-envoy-upstream-service-time: 188\r\nx-terms-message: Terms apply https://rblx.co/TOU.\r\nx-ratelimit-limit: 300000, 300000;w=60\r\nx-ratelimit-remaining: 259364\r\nx-ratelimit-reset: 2\r\nx-ingress-proxy: true\r\nx-roblox-edge: c088\r\nreport-to: {\"group\":\"network-errors\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://ncs.roblox.com/upload\"}]}\r\nnel: {\"report_to\":\"network-errors\",\"max_age\":604800,\"success_fraction\":0,\"failure_fraction\":0.05,\"response_headers\":[\"Rbx-Cdn-Provider\",\"vary\"]}\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 4888a1b692b693505c9036bc998623cc.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: Y35Yho5oTCitj9LO5YGqaE-UOUrXeHyz_LtEa8QAqTTl0Ps57SgAuA==\r\nage: 1421894\r\nrbx-cdn-provider: aws\r\ntiming-allow-origin: *\r\nvary: Origin\r\nserver-timing: cdn-cache-hit,cdn-pop;desc=\"ARN53-P4\",cdn-rid;desc=\"Y35Yho5oTCitj9LO5YGqaE-UOUrXeHyz_LtEa8QAqTTl0Ps57SgAuA==\",cdn-hit-layer;desc=\"EDGE\",cdn-downstream-fbl;dur=4\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":87124,"size_decoded":88435,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGB, non-interlaced","md5":"4c38d29ae40cbd3a277df75e17adfb55","sha1":"2a100d6695ca461a5b8444e52a8e713ae3e74369","sha256":"3bb31c8d3f7c5a3529dbe23c5f7b3769bd94dde6a87fa1dd6c221ce807e950ae","sha512":"86ce7381b4f19e42a5e9f9b2553c10545665263e35c773844c9aa74415938606d4b33d056f9049e3dea181de0f588904dac162086785d33aabbdd1faa59655d6","ssdeep":"1536:u+4N+T4TOH9s3D6Kt8lUk4ygV+LlJKDxcgilFMF0y2TB1ySnuYvzHCYe:CN+T4623DZilri+3EygeH0YvOT","tlshash":"438312702d7ca1d04a5f3630bd904b7e5961a0861f0ffd6748ecb8d9f0ae29a91c49f8","first_seen":"2026-09-27T06:30:15.039178Z","last_seen":"2026-09-27T06:30:56.973839Z","times_seen":2,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":22,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tr.rbxcdn.com/180DAY-ec0aefc85ced9f434dbc5328c80fca2e/256/256/Image/Png/noFilter","fqdn":"tr.rbxcdn.com","domain":"rbxcdn.com","tld":"com"},"ip":{"addr":"143.204.238.74","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://alterhub.site/","date":"2026-09-27T06:29:12.532Z","timestamp":1790490552532,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rbxcdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 09 Sep 2026 00:00:00 GMT","end":"Thu, 25 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"75:D8:06:E9:90:C5:4F:78:20:E1:DC:B0:2D:7F:04:D1:43:36:17:D5","sha256":"3B:CA:A7:4C:D5:BA:BE:D5:47:44:99:0D:4A:D5:DF:17:82:35:B8:6B:67:AF:9F:D7:A1:77:B6:43:87:6A:83:9B"}}},"request":{"raw":"GET /180DAY-ec0aefc85ced9f434dbc5328c80fca2e/256/256/Image/Png/noFilter HTTP/1.1\r\nHost: tr.rbxcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://alterhub.site/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/Png\r\ncontent-length: 100091\r\ndate: Mon, 07 Sep 2026 15:31:44 GMT\r\nserver: public-gateway\r\ncache-control: no-cache\r\nedge-cache-tag: 180DAY-ec0aefc85ced9f434dbc5328c80fca2e\r\nstrict-transport-security: max-age=31536000\r\nx-frame-options: SAMEORIGIN\r\nroblox-machine-id: c0eb48e3-6d39-75c8-40ba-f2ed35767644\r\nx-envoy-attempt-count: 1\r\nx-envoy-upstream-service-time: 233\r\nx-terms-message: Terms apply https://rblx.co/TOU.\r\nx-ratelimit-limit: 300000, 300000;w=60\r\nx-ratelimit-remaining: 289177\r\nx-ratelimit-reset: 16\r\nx-ingress-proxy: true\r\nx-roblox-edge: c086\r\nreport-to: {\"group\":\"network-errors\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://ncs.roblox.com/upload\"}]}\r\nnel: {\"report_to\":\"network-errors\",\"max_age\":604800,\"success_fraction\":0,\"failure_fraction\":0.05,\"response_headers\":[\"Rbx-Cdn-Provider\",\"vary\"]}\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 4888a1b692b693505c9036bc998623cc.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: vMdTuE7SdvAI6gJHIrAUe8_Ewjms2eXK_C3PkzyG3jdqDAx81euPLA==\r\nage: 1695448\r\nrbx-cdn-provider: aws\r\ntiming-allow-origin: *\r\nvary: Origin\r\nserver-timing: cdn-cache-hit,cdn-pop;desc=\"ARN53-P4\",cdn-rid;desc=\"vMdTuE7SdvAI6gJHIrAUe8_Ewjms2eXK_C3PkzyG3jdqDAx81euPLA==\",cdn-hit-layer;desc=\"EDGE\",cdn-downstream-fbl;dur=4\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":100091,"size_decoded":101404,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGB, non-interlaced","md5":"a7312d562af35a99377d97f652bfacbc","sha1":"59765b840d108a091c27d7f8fea9c50803748fab","sha256":"53ffc82e0abf1b0d147539ac3715416270a0b3fca3c5e13f9e8ad571a9cd85eb","sha512":"a0737b2104474affd17fbdee55b0d0026717ce5402e487a3ee2a98767b444818fde892b28c11002fd25f9ce792a98ea597ba90432517b941b6cca2439e26cc00","ssdeep":"3072:AGFBZNI9nmyIGSzdasaMTvC7tJKCyEYm5fzGZ9:AGBZcbIGSzksaMTaZJKCKkfCH","tlshash":"49a302dc922b10462bbfb1001f4e7d81736499760b7d5e90fae49b8e1dd02661ce72fa","first_seen":"2026-09-27T06:30:15.040494Z","last_seen":"2026-09-27T06:30:56.950544Z","times_seen":2,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":35,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"afders.org/20","fqdn":"afders.org","domain":"afders.org","tld":"org"},"ip":{"addr":"104.21.67.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ads.alterhub.site/promoframe#k=fdfdd92a59e588025342002253695a24\u0026w=468\u0026h=60\u0026i=u2_h3rpj0","date":"2026-09-27T06:29:12.953Z","timestamp":1790490552953,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afders.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Sep 2026 13:34:44 GMT","end":"Tue, 15 Dec 2026 14:34:40 GMT"},"fingerprint":{"sha1":"7A:92:9A:74:98:BB:CF:88:2A:BD:0B:26:71:9B:9A:F3:95:83:01:4C","sha256":"47:5D:69:65:F3:FE:34:4C:29:B8:D4:0E:EE:3F:82:6A:2D:80:CC:43:F1:EA:3B:18:98:DF:BA:E5:D7:79:87:38"}}},"request":{"raw":"GET /20 HTTP/1.1\r\nHost: afders.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uidm=01a0e18d-aa1e-7290-835a-05820375040e_1; __cf_bm=E.kpiN_tj8vCp_KnIHDU.orChpHJXA2krs.ZFBCUMdg-1790490552.8087704-1.0.1.1-dvJkw6z0LrAU8qRhbDPxTmy.g5FAGkt6BUndPfuLI0t03qnEghiew.ibnPQwnpjPeftp5uwteKXaQ1s6h84qCfDcnt9qM3qKuqpLdIGQy8cklBLncfcxTdq8JhH8Y5ld\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 27 Sep 2026 06:29:13 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding, Origin\r\nx-envoy-upstream-service-time: 1\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: no-cache, max-age=0, private, no-cache\r\nx-request-id: 221b3561a2e33383f09c2b83257ae25d\r\npragma: no-cache\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,X-Forwarded-For,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1728000\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a41873e3ff9756c3-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40128,"size_decoded":20185,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (40121), with no line terminators","md5":"0ace9fd96b3a1a96df6673058ad39505","sha1":"acaec4d2167e5c0b0189f7d79f9d20b8cb73abd1","sha256":"7bb9843e599f0e2fa33d255b732e4c5b9faa47f0189247b33d426d36cf4c2e97","sha512":"221e798b509a195219dbbb1f7c4b903abb734b790ae1e108c58b3914794a9a352cede20913e02c195dfcb2c1af1ed27b104da7843f431a364f0cba9a6b3d1d7c","ssdeep":"768:lt+ufvOQZsLIx/4Bq2Vld2WJ26Ygi+7RB6hJgbGNqJx70X7ngr5rz3LVL8oVGtd8:l0P8Wpli+7RB8JMGNqJXLKOL3","tlshash":"e30329d87183b02953b728e6107b6214b23a5c15740a9993e13e9cd63c73e5bd23bfad","first_seen":"2026-09-27T06:30:15.042381Z","last_seen":"2026-09-28T14:21:31.278472Z","times_seen":4,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/cti/e8/16/fb/e816fbb8b8b55c21ed4139466c6bca03/1675417831.jpeg","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ads.alterhub.site/promoframe#k=3ae6276d5f69eb697421a09960b7da53\u0026n=28128394\u0026i=n3_ke4tgo","date":"2026-09-27T06:29:13.221Z","timestamp":1790490553221,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 02:32:58 GMT","end":"Wed, 02 Dec 2026 02:32:57 GMT"},"fingerprint":{"sha1":"0C:28:A6:45:71:D0:51:55:56:A0:1D:34:71:8C:C4:7C:16:5A:03:5C","sha256":"68:73:EC:1A:D4:78:3E:46:1A:F8:1D:99:8F:CB:9D:46:B9:0E:28:CF:C6:BF:14:EF:F5:90:39:D3:FF:5A:1F:5C"}}},"request":{"raw":"GET /cti/e8/16/fb/e816fbb8b8b55c21ed4139466c6bca03/1675417831.jpeg HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 27 Sep 2026 06:29:13 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 32522\r\nserver: nginx/1.21.6\r\nlast-modified: Fri, 03 Feb 2023 09:50:39 GMT\r\netag: \"63dcd8ef-7f0a\"\r\nexpires: Tue, 29 Sep 2026 06:29:13 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":32522,"size_decoded":32870,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 320x240, components 3","md5":"b6204e2fecc1394ab096b0cb5c713329","sha1":"9efbcb902cf965d2ecd61780ca46dd616a5b4f6e","sha256":"11d07a2a74166992bd1116ac69d0230818d534fdbd02de96c811f294b1d28b42","sha512":"b8127fbb7abff0b5a7a63840854fd165585819df6c6ef91ffdd27069dcaf8b2ab44beebc9c39c7a80cc9b793d7d07984949a9ac0092da0977c6363de073afcc6","ssdeep":"768:YyuRD7Sd+Xti26OO1+3PWxEG5a3yO1qy8M+Q:Yyu1Wd4RN6+3PWxq33kQ","tlshash":"82e2e1acb5b644c9f907aa28324b7f387ed98a50681702791df194e4daa5c363e1334e","first_seen":"2023-05-07T18:12:23Z","last_seen":"2026-10-08T21:09:27.595878Z","times_seen":220,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":20,"send":0,"wait":66,"receive":13,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fizzyacerbitymellow.com/ren.gif?sid=H4sIAAAAAAAC_1RSv48bRRSeNRYUKZBQFJoUW4BEJOybtdf2btJF_JIId4QERYJqdmfWmXi8s9mZtR1XlwTRcgUFFVp_voslBAhEcdAhHw1CQsp2LnINfwISokT2WRystO99T9_ozffeN5_OilPSRMFW77-np1IpttNpUve1OzLlemzc3duuR5v0mntHpl3_mjtZh3x01Wv7TXrFfVvEA73Toh6lHvXct2QuEj3Z2bCQ2deh1wxp0281vY6PSf7_2hQODHPAR6fkJUhevfhH8jFkvEQ6_O4NYQZWZ6-_OSwUszrHiC8-TAepHqcYnsMkd5Cki-1paFMR8kUNOl1sJ4AeHa4nQCQrUrv0DFG62MpENDo6UxopiBQRv4DxaAmhlpBsiVg_huRPCRBz7O4hHT7Z1fmYPThj2ZqtSP2vPyHHFak_u4h0-O11JSfuLa0KK3VqMElKyMkSsr9EVpzATmuQ4xPE9hEk_53Qly8gHX71jh7JgTsS-QCSl5sdyGQJZhwU6186KBIHReZgyFeuTwM_9li7m4Q87lGf-T4XEQ2DFqUsjHso4oeQ_ABxvo8s38dAHsBwB8ZWxLm5jxEvj7gyLVM-4coUkbfNrW1ul3Nt-zN2pG1fpAQsP0DOy0OZ3TePEdvn5tPEvDvX68AiW85ZxMu55JYgv796hXqMCi_gDRZ1vUaPUa8RBp1eI4iDkHbCXjv2k8PE2KKcZVvvncWvP2AgVi4TIuj5otXtcZa0PMZDP2wHcSfsUpH0mAcjS0hT2yxnKity8_gKMlmRxkdfImInMOoEsbwMVnhg4xLsbolp-g1TVuR3i6hppBXgukRm67APHAhLZuqUXJx_cPv6zxtPxbELEf9Gth_ivESWl7gnfyHoq4ff72VWDuWUrU2-ZZkVz4PJp3t_I5YVufTCo81ru3q5gzjbh8n-7TRXJqvIjfQzGE0QZTUoSaDE-VUsKmH-U0fneGY-QT-vI1L1eaTy-mGkcvX5pt1GckVu9Bdr9CqMXLmdVtTuBkFXJF2etHm71eZhh4rQZ2HXD_0OrKnu_Xj80z8DAF3Eq9wDBAAA","fqdn":"fizzyacerbitymellow.com","domain":"fizzyacerbitymellow.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ads.alterhub.site/promoframe#k=aee874e267daf21ad94938c5960ef7a1\u0026n=27873862\u0026i=n4_0eh5yg","date":"2026-09-27T06:29:13.524Z","timestamp":1790490553524,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"fizzyacerbitymellow.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 22:02:47 GMT","end":"Fri, 30 Oct 2026 22:02:46 GMT"},"fingerprint":{"sha1":"85:2D:D6:49:43:AB:3A:C0:5E:0D:58:0E:0B:D7:D6:2A:82:8B:E0:41","sha256":"FF:C6:2E:36:C1:47:5E:79:06:79:62:3E:93:9A:4C:D1:A2:35:A6:48:A3:E5:43:F4:74:4F:64:C9:9E:32:17:24"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_1RSv48bRRSeNRYUKZBQFJoUW4BEJOybtdf2btJF_JIId4QERYJqdmfWmXi8s9mZtR1XlwTRcgUFFVp_voslBAhEcdAhHw1CQsp2LnINfwISokT2WRystO99T9_ozffeN5_OilPSRMFW77-np1IpttNpUve1OzLlemzc3duuR5v0mntHpl3_mjtZh3x01Wv7TXrFfVvEA73Toh6lHvXct2QuEj3Z2bCQ2deh1wxp0281vY6PSf7_2hQODHPAR6fkJUhevfhH8jFkvEQ6_O4NYQZWZ6-_OSwUszrHiC8-TAepHqcYnsMkd5Cki-1paFMR8kUNOl1sJ4AeHa4nQCQrUrv0DFG62MpENDo6UxopiBQRv4DxaAmhlpBsiVg_huRPCRBz7O4hHT7Z1fmYPThj2ZqtSP2vPyHHFak_u4h0-O11JSfuLa0KK3VqMElKyMkSsr9EVpzATmuQ4xPE9hEk_53Qly8gHX71jh7JgTsS-QCSl5sdyGQJZhwU6186KBIHReZgyFeuTwM_9li7m4Q87lGf-T4XEQ2DFqUsjHso4oeQ_ABxvo8s38dAHsBwB8ZWxLm5jxEvj7gyLVM-4coUkbfNrW1ul3Nt-zN2pG1fpAQsP0DOy0OZ3TePEdvn5tPEvDvX68AiW85ZxMu55JYgv796hXqMCi_gDRZ1vUaPUa8RBp1eI4iDkHbCXjv2k8PE2KKcZVvvncWvP2AgVi4TIuj5otXtcZa0PMZDP2wHcSfsUpH0mAcjS0hT2yxnKity8_gKMlmRxkdfImInMOoEsbwMVnhg4xLsbolp-g1TVuR3i6hppBXgukRm67APHAhLZuqUXJx_cPv6zxtPxbELEf9Gth_ivESWl7gnfyHoq4ff72VWDuWUrU2-ZZkVz4PJp3t_I5YVufTCo81ru3q5gzjbh8n-7TRXJqvIjfQzGE0QZTUoSaDE-VUsKmH-U0fneGY-QT-vI1L1eaTy-mGkcvX5pt1GckVu9Bdr9CqMXLmdVtTuBkFXJF2etHm71eZhh4rQZ2HXD_0OrKnu_Xj80z8DAF3Eq9wDBAAA HTTP/1.1\r\nHost: fizzyacerbitymellow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; u_pl27773363=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 27 Sep 2026 06:29:13 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccept-ch: X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua,Sec-Ch-Ua-Platform,X-Device-User-Agent,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile,Device-Stock-Ua,X-Operamini-Phone-Ua\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nvary: Origin\r\nx-envoy-upstream-service-time: 3\r\nHost: fizzyacerbitymellow.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: f13fdf5c67ba3700988fa1ae694744dc\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T20:43:33.933419Z","times_seen":19037193,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spendsdetachment.com/watch.1363666931209.js?dev=e\u0026fstu=01a0e18d-ab83-7f1d-a158-504693aca864\u0026key=fdfdd92a59e588025342002253695a24\u0026kw=%5B%22advertisement%22%5D\u0026ps1=1790490553\u0026rb=e\u0026refer=https%3A%2F%2Falterhub.site%2F\u0026res=14.1055\u0026rmtc=t\u0026sht=YvDt2IYo-nlz0YUQSiB5dKCixhS1-nHJ46Df_jJN8Sw\u0026shv=2\u0026st1=d2701569ca189e98f70aa261f0dfb943\u0026tz=0\u0026uuid=01a0e18d-a9ff-715f-a03c-d96f766d2d64%3A1%3A1","fqdn":"spendsdetachment.com","domain":"spendsdetachment.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ads.alterhub.site/promoframe#k=fdfdd92a59e588025342002253695a24\u0026w=468\u0026h=60\u0026i=u2_h3rpj0","date":"2026-09-27T06:29:13.573Z","timestamp":1790490553573,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"spendsdetachment.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 04:27:12 GMT","end":"Tue, 24 Nov 2026 04:27:11 GMT"},"fingerprint":{"sha1":"EB:97:C4:8B:DE:F8:13:B1:55:C6:2E:E9:8C:5C:48:F7:1E:59:B1:F2","sha256":"D3:ED:AA:AB:A7:0F:5D:B5:E3:C6:C8:42:92:C6:71:07:01:45:1D:84:99:AD:9D:45:AD:FB:7A:B9:4D:A7:8F:57"}}},"request":{"raw":"GET /watch.1363666931209.js?dev=e\u0026fstu=01a0e18d-ab83-7f1d-a158-504693aca864\u0026key=fdfdd92a59e588025342002253695a24\u0026kw=%5B%22advertisement%22%5D\u0026ps1=1790490553\u0026rb=e\u0026refer=https%3A%2F%2Falterhub.site%2F\u0026res=14.1055\u0026rmtc=t\u0026sht=YvDt2IYo-nlz0YUQSiB5dKCixhS1-nHJ46Df_jJN8Sw\u0026shv=2\u0026st1=d2701569ca189e98f70aa261f0dfb943\u0026tz=0\u0026uuid=01a0e18d-a9ff-715f-a03c-d96f766d2d64%3A1%3A1 HTTP/1.1\r\nHost: spendsdetachment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://ads.alterhub.site\r\nReferer: https://ads.alterhub.site/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=01a0e18d-a9ff-715f-a03c-d96f766d2d64:1:1; ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJwIjp7ImlkIjoyOTM3ODA1NywiayI6ImZkZmRkOTJhNTllNTg4MDI1MzQyMDAyMjUzNjk1YTI0Iiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjo1MzU1MzA1LCJwaWQiOjI5NzIzMTgsImFuIjp0cnVlLCJsYW4iOnRydWUsImNpZCI6MjgsImFpZCI6MjcsInB0Ijo0LCJwayI6InRzcnAydWgwIiwiY3BrcyI6eyIyOCI6Ijk4MDkzZjUyYjVkYTJkYjJmOWU4N2QxNDk5N2QzMGYzIiwiMjkiOiI5ZWNmOGU0MzZhMDI1ZjdmZmYwM2I2MTU1MWQ3ZTczNyJ9LCJ0IjoxfSwidSI6eyJ1IjoxLCJhdSI6MSwiZCI6eyJpZCI6MjY2NTYxMTE1LCJpZHMiOiIiLCJpYyI6ZmFsc2UsIm4iOiJEZXNrdG9wLEVtdWxhdG9yIiwidiI6IlVua25vd24iLCJtIjoiVW5rbm93biIsImYiOjEsImZuIjoiRGVza3RvcCIsIm9pZCI6Mzg5MTQsIm9uIjoiV2luZG93cyIsIm92IjoiMTAuMCIsImJpZCI6MTM2OTI1LCJibiI6IkZpcmVmb3giLCJidiI6IjEzNC4wIiwid3YiOmZhbHNlLCJlIjp0cnVlLCJhYiI6ZmFsc2V9LCJjIjp7ImlkIjoxNjIsImMiOiJOTyIsIm4iOiJOb3J3YXkifSwiY3QiOnsiaWQiOjMxNTE2MjcsIm4iOiJIb3ZpayB2ZXJrIn0sInJnIjp7ImlkIjozMjcxLCJuIjoiVmlrZW4ifSwiYSI6ZmFsc2UsImNyIjp7Im4iOiJCbGl4IFNvbHV0aW9ucyJ9LCJ4ZiI6IiIsIml4ZiI6ZmFsc2UsImlneGYiOmZhbHNlLCJpd2YiOnRydWUsInVwIjp0cnVlLCJyIjoiaHR0cHM6Ly9hbHRlcmh1Yi5zaXRlLyIsInR6IjoyLCJpZHVjIjowLCJhciI6W119fQ.DyQWATwZd7RdKScjpAR-kl_SmGciWoOVU7Ez3t6USs4\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 27 Sep 2026 06:29:13 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\naccept-ch: Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Model,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Mobile,Device-Stock-Ua,X-Device-User-Agent,X-Operamini-Phone-Ua,Sec-Ch-Ua-Platform-Version\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://ads.alterhub.site\r\ncontent-encoding: zstd\r\nset-cookie: uid_id2=01a0e18d-a9ff-715f-a03c-d96f766d2d64:1:1; Path=/; Expires=Sun, 04 Oct 2026 06:29:13 GMT; Secure; SameSite=None\npdhtkv=true; Path=/; Expires=Mon, 28 Sep 2026 06:29:13 GMT; Secure; SameSite=None\nuncs=1; Path=/; Expires=Mon, 28 Sep 2026 06:29:13 GMT; Secure; SameSite=None\npdhtkv27=true; Path=/; Expires=Mon, 28 Sep 2026 06:29:13 GMT; Secure; SameSite=None\nuncs27=1; Path=/; Expires=Mon, 28 Sep 2026 06:29:13 GMT; Secure; SameSite=None\nu_pl29378057=1; Path=/; Expires=Mon, 28 Sep 2026 06:29:13 GMT; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nx-envoy-upstream-service-time: 10\r\nHost: spendsdetachment.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 4e3e94d78a09e982b898183d55252223\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":[{"name":"uid_id2","value":"01a0e18d-a9ff-715f-a03c-d96f766d2d64:1:1","quoted":false,"path":"/","expires":"2026-10-04T06:29:13Z","raw_expires":"Sun, 04 Oct 2026 06:29:13 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uid_id2=01a0e18d-a9ff-715f-a03c-d96f766d2d64:1:1; Path=/; Expires=Sun, 04 Oct 2026 06:29:13 GMT; Secure; SameSite=None"},{"name":"pdhtkv","value":"true","quoted":false,"path":"/","expires":"2026-09-28T06:29:13Z","raw_expires":"Mon, 28 Sep 2026 06:29:13 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"pdhtkv=true; Path=/; Expires=Mon, 28 Sep 2026 06:29:13 GMT; Secure; SameSite=None"},{"name":"uncs","value":"1","quoted":false,"path":"/","expires":"2026-09-28T06:29:13Z","raw_expires":"Mon, 28 Sep 2026 06:29:13 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uncs=1; Path=/; Expires=Mon, 28 Sep 2026 06:29:13 GMT; Secure; SameSite=None"},{"name":"pdhtkv27","value":"true","quoted":false,"path":"/","expires":"2026-09-28T06:29:13Z","raw_expires":"Mon, 28 Sep 2026 06:29:13 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"pdhtkv27=true; Path=/; Expires=Mon, 28 Sep 2026 06:29:13 GMT; Secure; SameSite=None"},{"name":"uncs27","value":"1","quoted":false,"path":"/","expires":"2026-09-28T06:29:13Z","raw_expires":"Mon, 28 Sep 2026 06:29:13 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uncs27=1; Path=/; Expires=Mon, 28 Sep 2026 06:29:13 GMT; Secure; SameSite=None"},{"name":"u_pl29378057","value":"1","quoted":false,"path":"/","expires":"2026-09-28T06:29:13Z","raw_expires":"Mon, 28 Sep 2026 06:29:13 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"u_pl29378057=1; Path=/; Expires=Mon, 28 Sep 2026 06:29:13 GMT; Secure; SameSite=None"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3993,"size_decoded":3938,"mime_type":"text/html","magic":"JavaScript source, ASCII text, with very long lines (3117)","md5":"0a611d5a50a1646f6c057694f23bcac6","sha1":"8e3457dfa06d1fc60c19c08b229a3ca749ee0271","sha256":"d81dc844820135670bd986d6ec7fd5fc6fabac9ceedf736a7292b0ee5812cf8f","sha512":"bd63e4d411af7b7a7c594a67d893087b5118c4f7f2f0ab502aabbf1cc5781708e0759cc3fb533a83ef9db23fb239b8e9137e9ad66288b4c2858f4f5537b723ae","ssdeep":"","tlshash":"fb81c72f4cdea13c188ab0ee253eb14c2d15a50b2900df09f59cea705f90fa51d7cad8","first_seen":"2026-09-27T06:30:15.045055Z","last_seen":"2026-09-27T06:30:15.045055Z","times_seen":1,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"spendsdetachment.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"spendsdetachment.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alterhub.site/chat.js?v=74f0a8af","fqdn":"alterhub.site","domain":"alterhub.site","tld":"site"},"ip":{"addr":"104.21.42.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://alterhub.site/","date":"2026-09-27T06:29:11.631Z","timestamp":1790490551631,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alterhub.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 00:28:34 GMT","end":"Sat, 07 Nov 2026 01:28:30 GMT"},"fingerprint":{"sha1":"CC:30:2C:31:6D:59:8D:61:CD:11:F9:93:CE:16:C0:86:EE:F5:4A:5A","sha256":"FD:96:F8:0E:8C:08:48:55:A0:F2:69:BB:EA:8B:3A:98:9A:71:49:5F:30:C6:90:E1:9F:D3:7F:54:A3:38:1A:B6"}}},"request":{"raw":"GET /chat.js?v=74f0a8af HTTP/1.1\r\nHost: alterhub.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://alterhub.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\nage: 123694\r\ncache-control: public, max-age=14400, stale-while-revalidate=604800\r\ncontent-disposition: inline; filename=\"chat.js\"\r\ncontent-encoding: br\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; frame-src 'self' https: data: blob:; media-src 'self' https: data: blob:; connect-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self' https:;\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sun, 27 Sep 2026 06:29:11 GMT\r\netag: \"35c00278d383d7e9f8597ebb22fdb6da\"\r\nlast-modified: Fri, 18 Sep 2026 13:02:34 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::fzmx6-1789740969229-1c8c8ae5ea31\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5X5bgXboaT4j6pKyBEfdmObietjAXU9Tn9TIJyA3zwhHdLXSzvsSuRm22%2BY46Hk56dI4HbCNn2mG8BOh27IQSEQa1jwx21FL187PndNbkuQVxgXuulXXemibOYMpLC0J\"}]}\r\ncf-cache-status: UPDATING\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncf-ray: a41873dbbad70b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20117,"size_decoded":9156,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (20116)","md5":"35c00278d383d7e9f8597ebb22fdb6da","sha1":"74f0a8af31e4d77872bc6d6ffac0207c483c2a8e","sha256":"4ebd5c7cb0b95dbc29fe0f78cacf8aa9705c9ea1a4dc505ebba0ed9736083898","sha512":"8ec85afb7aca12326b6a609c9b887de95c15c05cc91974dbc03ec44d3b0869c2901d5a5a17d662037483fc9ef27dd548fcc3c2b6ac96c3f12c27693331ffc7f1","ssdeep":"384:QhItqFGroHf5oeAq8XhvuzSOBq61K5ms8mbQ0jkR8zszuGEIIxn4IGM:5+Gk8QzSOBqtp8mMZlEIIKIGM","tlshash":"7892086f568527332fb7029fb91b69cae75310357381802194f8c4ac1aadfa0193b9ce","first_seen":"2026-09-27T06:27:52.383623Z","last_seen":"2026-09-27T06:30:56.983306Z","times_seen":4,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.nresystems.com/img.gif?h1id=1\u0026h3id=0\u0026key=1964b0264f479cf1ad7ae7082f5db52e\u0026uuid=01a0e18d-aa54-75d6-8bfe-24d1a57a1305","fqdn":"static.nresystems.com","domain":"nresystems.com","tld":"com"},"ip":{"addr":"104.18.19.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ads.alterhub.site/promoframe#k=3ae6276d5f69eb697421a09960b7da53\u0026n=28128394\u0026i=n3_ke4tgo","date":"2026-09-27T06:29:12.928Z","timestamp":1790490552928,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /img.gif?h1id=1\u0026h3id=0\u0026key=1964b0264f479cf1ad7ae7082f5db52e\u0026uuid=01a0e18d-aa54-75d6-8bfe-24d1a57a1305 HTTP/1.1\r\nHost: static.nresystems.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 27 Sep 2026 06:29:13 GMT\r\ncontent-type: image/gif\r\ncontent-length: 7\r\nserver: cloudflare\r\nx-envoy-upstream-service-time: 4\r\nexpires: Sun, 27 Sep 2026 10:29:13 GMT\r\ncache-control: public, max-age=14400\r\nvary: Origin\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,X-Forwarded-For,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1728000\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nset-cookie: uid_id2=01a0e18d-aa54-75d6-8bfe-24d1a57a1305; Path=/; Expires=Wed, 24 Sep 2036 06:29:13 GMT; Secure; SameSite=None\n__cf_bm=xVSuB52LCH0g.gn0.dq7m64xdxkS7UNHBqVRjBXyCSU-1790490552.947158-1.0.1.1-qJ5ToWvvYiYwSkDQ5yJz7h.N4tXWfBEAvURbwrGFLPB00PRsfLupFAObotYvo.IjcMB6EjrvRITh4CAwyafG9qhnBmjbrIuFwn43ANcobdTHEyPSxpEkb_ojZwLRrL.x; HttpOnly; SameSite=None; Secure; Path=/; Domain=nresystems.com; Expires=Sun, 27 Sep 2026 06:59:13 GMT\r\ncf-cache-status: BYPASS\r\ncf-ray: a41873e3edbb56ca-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"uid_id2","value":"01a0e18d-aa54-75d6-8bfe-24d1a57a1305","quoted":false,"path":"/","expires":"2036-09-24T06:29:13Z","raw_expires":"Wed, 24 Sep 2036 06:29:13 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uid_id2=01a0e18d-aa54-75d6-8bfe-24d1a57a1305; Path=/; Expires=Wed, 24 Sep 2036 06:29:13 GMT; Secure; SameSite=None"},{"name":"__cf_bm","value":"xVSuB52LCH0g.gn0.dq7m64xdxkS7UNHBqVRjBXyCSU-1790490552.947158-1.0.1.1-qJ5ToWvvYiYwSkDQ5yJz7h.N4tXWfBEAvURbwrGFLPB00PRsfLupFAObotYvo.IjcMB6EjrvRITh4CAwyafG9qhnBmjbrIuFwn43ANcobdTHEyPSxpEkb_ojZwLRrL.x","quoted":false,"path":"/","domain":"nresystems.com","expires":"2026-09-27T06:59:13Z","raw_expires":"Sun, 27 Sep 2026 06:59:13 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=xVSuB52LCH0g.gn0.dq7m64xdxkS7UNHBqVRjBXyCSU-1790490552.947158-1.0.1.1-qJ5ToWvvYiYwSkDQ5yJz7h.N4tXWfBEAvURbwrGFLPB00PRsfLupFAObotYvo.IjcMB6EjrvRITh4CAwyafG9qhnBmjbrIuFwn43ANcobdTHEyPSxpEkb_ojZwLRrL.x; HttpOnly; SameSite=None; Secure; Path=/; Domain=nresystems.com; Expires=Sun, 27 Sep 2026 06:59:13 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T20:43:33.933419Z","times_seen":19037193,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sleepoverlimitprofound.com/ren.gif?sid=H4sIAAAAAAAC_1RSv28cRRSedU40KSKhCJoUW1CAhM-zP27vllBF_JIINiRBkaCa2Zk1k9vb2ezM7p2vcgiC1gUFFVp_Z8cSQYhUQIfOdCCkbAFyEVPkPwAJKNFdThhGmvdD3-jN9973Pt6vTkkXFTt5-y09VVnGNnpd6j5_U-VCj427ecP1aJdedm-qPAovu5OFKeuXvCDs0hfc12Uy1Bs-9Sj1qOe-pkqZ6snGEoUqvoy9bky7od_1eiEm5f9zUzkwzIGoT8nTUKK98Dh9HyqZIx99_Yo0Q6uLF18dVRmzukQtjt7Nh7ke5xidhWnpIM2PVq-hTUvIZ2vQ-dGqA-j6YNEBuGrJ2jOPwPOjFU3w-vAJU55B5uDiPMb1HDKbQ7E5En0XSjwkQCKwuYV8dG9Tl2O28wRlC7QlnT__gBq3pPPoIvLRV1cyNXGv66yySucGk7SBmsyhtucoqmPY6RrU-BiJ_RBK_Ezos-eRj754Q9dq6NayHEKJZjkDlc7BjINqcZWDKnVQFQ5G4sQN6SBMPBZEaSySPg1ZGArJaTzwKWVx0keV3IESe0jKXRTlLoZqD0Y4MLYlzju7qEVzKDLjm-aeyEzFvZX3Vz5oZtpu77NDbbdlTsDKPZSiOVDFbXMXiT03m6bmzZleGMZtM2NcNDMlLEF5--Q56jEqvYFYZ9yn6_2eH64zj8v12Et50I9jP-qnB6mxVbNfrLR37t__C0N54gZMRn4_Er00iiWP4n7oe4zGcUR5X7BeAKMaKLO2HM5UteTarzUK1ZL19z4HZ8cw2TESdQms8sDGDdgHDab5g0QLle6YpFSFNd3JzhRCNyhsB3bHgbRkPzslF2fXblz5fqnry7_9BJn8SFYHSdmgKBvcUj8QbGd3HmwVVo3UlC2Evm6ZlU-BqYdbfyNRLTl_6fFy49xfJJJiF6b4t9IsM0VLruafwGgCXpxDpggyefYV4w3Mf3J-Fu-bj7BddsCzzoxnZeeAZ2X2aUvS8kJLrg5-X_JeVVcnbs_nQTQYRDKNRBqIwA9E3KMyDlkchXHYgzXtrW-_-e6fAQC_IwGjBwQAAA==","fqdn":"sleepoverlimitprofound.com","domain":"sleepoverlimitprofound.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ads.alterhub.site/promoframe#k=3ae6276d5f69eb697421a09960b7da53\u0026n=28128394\u0026i=n3_ke4tgo","date":"2026-09-27T06:29:13.231Z","timestamp":1790490553231,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sleepoverlimitprofound.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 04:20:18 GMT","end":"Tue, 24 Nov 2026 04:20:17 GMT"},"fingerprint":{"sha1":"25:9A:58:CA:68:4D:EC:36:88:A4:BC:7F:2C:41:BE:B7:58:63:32:E3","sha256":"08:E4:A1:17:A8:1B:17:9D:84:10:F1:9B:37:A3:57:FE:8C:98:BA:9C:11:0D:A1:97:5C:AA:71:F0:6A:4A:28:5E"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_1RSv28cRRSedU40KSKhCJoUW1CAhM-zP27vllBF_JIINiRBkaCa2Zk1k9vb2ezM7p2vcgiC1gUFFVp_Z8cSQYhUQIfOdCCkbAFyEVPkPwAJKNFdThhGmvdD3-jN9973Pt6vTkkXFTt5-y09VVnGNnpd6j5_U-VCj427ecP1aJdedm-qPAovu5OFKeuXvCDs0hfc12Uy1Bs-9Sj1qOe-pkqZ6snGEoUqvoy9bky7od_1eiEm5f9zUzkwzIGoT8nTUKK98Dh9HyqZIx99_Yo0Q6uLF18dVRmzukQtjt7Nh7ke5xidhWnpIM2PVq-hTUvIZ2vQ-dGqA-j6YNEBuGrJ2jOPwPOjFU3w-vAJU55B5uDiPMb1HDKbQ7E5En0XSjwkQCKwuYV8dG9Tl2O28wRlC7QlnT__gBq3pPPoIvLRV1cyNXGv66yySucGk7SBmsyhtucoqmPY6RrU-BiJ_RBK_Ezos-eRj754Q9dq6NayHEKJZjkDlc7BjINqcZWDKnVQFQ5G4sQN6SBMPBZEaSySPg1ZGArJaTzwKWVx0keV3IESe0jKXRTlLoZqD0Y4MLYlzju7qEVzKDLjm-aeyEzFvZX3Vz5oZtpu77NDbbdlTsDKPZSiOVDFbXMXiT03m6bmzZleGMZtM2NcNDMlLEF5--Q56jEqvYFYZ9yn6_2eH64zj8v12Et50I9jP-qnB6mxVbNfrLR37t__C0N54gZMRn4_Er00iiWP4n7oe4zGcUR5X7BeAKMaKLO2HM5UteTarzUK1ZL19z4HZ8cw2TESdQms8sDGDdgHDab5g0QLle6YpFSFNd3JzhRCNyhsB3bHgbRkPzslF2fXblz5fqnry7_9BJn8SFYHSdmgKBvcUj8QbGd3HmwVVo3UlC2Evm6ZlU-BqYdbfyNRLTl_6fFy49xfJJJiF6b4t9IsM0VLruafwGgCXpxDpggyefYV4w3Mf3J-Fu-bj7BddsCzzoxnZeeAZ2X2aUvS8kJLrg5-X_JeVVcnbs_nQTQYRDKNRBqIwA9E3KMyDlkchXHYgzXtrW-_-e6fAQC_IwGjBwQAAA== HTTP/1.1\r\nHost: sleepoverlimitprofound.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; u_pl28027895=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 27 Sep 2026 06:29:13 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccept-ch: Sec-Ch-Ua-Platformuser-Agent,X-Device-User-Agent,X-Operamini-Phone-Ua,Sec-Ch-Ua,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile,Device-Stock-Ua,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua-Platform-Version\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nvary: Origin\r\nx-envoy-upstream-service-time: 4\r\nHost: sleepoverlimitprofound.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 6389ff5115a5de657e949d8975dfdbfe\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T20:43:33.933419Z","times_seen":19037193,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-26","alert":"Sinkholed","trigger":"sleepoverlimitprofound.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/cti/af/f1/05/aff1055ecf44148a994c802556289940/1779810320.png","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ads.alterhub.site/promoframe#k=aee874e267daf21ad94938c5960ef7a1\u0026n=27873862\u0026i=n4_0eh5yg","date":"2026-09-27T06:29:13.518Z","timestamp":1790490553518,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 02:32:58 GMT","end":"Wed, 02 Dec 2026 02:32:57 GMT"},"fingerprint":{"sha1":"0C:28:A6:45:71:D0:51:55:56:A0:1D:34:71:8C:C4:7C:16:5A:03:5C","sha256":"68:73:EC:1A:D4:78:3E:46:1A:F8:1D:99:8F:CB:9D:46:B9:0E:28:CF:C6:BF:14:EF:F5:90:39:D3:FF:5A:1F:5C"}}},"request":{"raw":"GET /cti/af/f1/05/aff1055ecf44148a994c802556289940/1779810320.png HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 27 Sep 2026 06:29:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 88700\r\nserver: nginx/1.21.6\r\nlast-modified: Tue, 26 May 2026 15:45:21 GMT\r\netag: \"6a15c011-15a7c\"\r\nexpires: Tue, 29 Sep 2026 06:29:13 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":88700,"size_decoded":89048,"mime_type":"image/png","magic":"PNG image data, 320 x 240, 8-bit/color RGB, non-interlaced","md5":"ccf3ec2ebb8a275b830856f3a7cf819b","sha1":"df2340ade4b55602ae1f9d4a635f5c149142727f","sha256":"202ce93fecbf6ef0226a5ce41b5b1f0d40b0d1c6259be0b874534afc2365c6bc","sha512":"6973a127599fae13a62e1116e68f5445e0531bb99c7716e105c5f9a636091ceeca13a9a00b1ab65cb0102a2eb5b1f3f05a7512050ffed7d20d0926340200181a","ssdeep":"1536:kPbrlCeR4CfVjVecYvfFr6HdRbrBw4i4eaIY/FG17M81LHz4oQvFH:AAeRxjYbgtrKvPFD17M8lz4xFH","tlshash":"718312b908a4298de09f39127d777a0c188f77c8ed75d11867c57223abad202b0675fe","first_seen":"2026-05-29T02:42:29.395588Z","last_seen":"2026-10-08T03:29:34.785066Z","times_seen":147,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fizzyacerbitymellow.com/ren.gif?sid=H4sIAAAAAAAC_1RSz4sjRRitng1e5iDIopc59EHBFZOpTjpJt3tb_AWuM667sqCn6q7qbG0qXb1d1Uk2p1lXvDoHBU_SeZnZgKgoHkZvkvEigrB9y2Hnsn-CIB4lmeBoQ38_eMWr932vPp0WZ6SBgi3fe1dPpFJst92g7su3Zcr1yLh7t1yPNuhV97ZMO_5Vd7wK-fA1r-U36BX3LRH39W6TepR61HPflLlI9Hh3jUJm34ReI6QNv9nw2j7G-f97UzgwzAEfnpHnIHn17NPkI8h4gXTw_evC9K3OXn1jUChmdY4hn3-Q9lM9SjG4KJPcQZLON6ehTUXIl1vQ6XwzAfTwaDUBIlmRreefIErnG5mIhsfnSiMFkSLi2xgNFxBqAckWiPVDSP6YADHH3j7SwaM9nY_Y_XOUrdCK1P76E3JUkdqTy0gH311Tcuze1KqwUqcG46SEHC8gewtkxSnsZAtydIrYfgzJ_yD0hW2kg6_f1kPZd4ci70Pycr0DmSzAjINi9UsHReKgyBwM-NL1aeDHHmt1kpDHXeoz3-ciomHQpJSFcRdF_ACSHyLOD5DlB-jLQxjuwNiKODcOMOTlMVemacpHXJki8ja5ucmtcqZtb8qOte2JlIDlh8h5eSSze-YhYntpNknMOzO9Ciyy5YxFvJxJbgnye8sXqceo8AJeZ1HHq3cZ9eph0O7WgzgIaTvstmI_OUqMLcpptvHemf_2I_pi6TIhgq4vmp0uZ0nTYzz0w1YQt8MOFUmXeTCyhDRb6-VMZEVunFxBJitS__ArROwURp0iljtghQc2KsHulJik3zJlRX6niBpGWgGuS2S2BnvfgbBkqs7I5dn7t679svb0em8OEf9ONh_ivESWl7grfyXoqQc_7GdWDuSErUy-aZkVz4DJx_t_I5YV2d55un5tr3yxgzg7gMn-ZZopk1VEnLwEowmi7BKUJFDi4ioWlTD_6aOLemo-QS-vIVK1WaTy2lGkcvV5Ra6nn6043bXuDbtcuu1m1OoEQUckHZ60eKvZ4mGbitBnYccP_Tasqe7-dPLzPwMAzc_UWQMEAAA=","fqdn":"fizzyacerbitymellow.com","domain":"fizzyacerbitymellow.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ads.alterhub.site/promoframe#k=aee874e267daf21ad94938c5960ef7a1\u0026n=27873862\u0026i=n4_0eh5yg","date":"2026-09-27T06:29:13.525Z","timestamp":1790490553525,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"fizzyacerbitymellow.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 22:02:47 GMT","end":"Fri, 30 Oct 2026 22:02:46 GMT"},"fingerprint":{"sha1":"85:2D:D6:49:43:AB:3A:C0:5E:0D:58:0E:0B:D7:D6:2A:82:8B:E0:41","sha256":"FF:C6:2E:36:C1:47:5E:79:06:79:62:3E:93:9A:4C:D1:A2:35:A6:48:A3:E5:43:F4:74:4F:64:C9:9E:32:17:24"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_1RSz4sjRRitng1e5iDIopc59EHBFZOpTjpJt3tb_AWuM667sqCn6q7qbG0qXb1d1Uk2p1lXvDoHBU_SeZnZgKgoHkZvkvEigrB9y2Hnsn-CIB4lmeBoQ38_eMWr932vPp0WZ6SBgi3fe1dPpFJst92g7su3Zcr1yLh7t1yPNuhV97ZMO_5Vd7wK-fA1r-U36BX3LRH39W6TepR61HPflLlI9Hh3jUJm34ReI6QNv9nw2j7G-f97UzgwzAEfnpHnIHn17NPkI8h4gXTw_evC9K3OXn1jUChmdY4hn3-Q9lM9SjG4KJPcQZLON6ehTUXIl1vQ6XwzAfTwaDUBIlmRreefIErnG5mIhsfnSiMFkSLi2xgNFxBqAckWiPVDSP6YADHH3j7SwaM9nY_Y_XOUrdCK1P76E3JUkdqTy0gH311Tcuze1KqwUqcG46SEHC8gewtkxSnsZAtydIrYfgzJ_yD0hW2kg6_f1kPZd4ci70Pycr0DmSzAjINi9UsHReKgyBwM-NL1aeDHHmt1kpDHXeoz3-ciomHQpJSFcRdF_ACSHyLOD5DlB-jLQxjuwNiKODcOMOTlMVemacpHXJki8ja5ucmtcqZtb8qOte2JlIDlh8h5eSSze-YhYntpNknMOzO9Ciyy5YxFvJxJbgnye8sXqceo8AJeZ1HHq3cZ9eph0O7WgzgIaTvstmI_OUqMLcpptvHemf_2I_pi6TIhgq4vmp0uZ0nTYzz0w1YQt8MOFUmXeTCyhDRb6-VMZEVunFxBJitS__ArROwURp0iljtghQc2KsHulJik3zJlRX6niBpGWgGuS2S2BnvfgbBkqs7I5dn7t679svb0em8OEf9ONh_ivESWl7grfyXoqQc_7GdWDuSErUy-aZkVz4DJx_t_I5YV2d55un5tr3yxgzg7gMn-ZZopk1VEnLwEowmi7BKUJFDi4ioWlTD_6aOLemo-QS-vIVK1WaTy2lGkcvV5Ra6nn6043bXuDbtcuu1m1OoEQUckHZ60eKvZ4mGbitBnYccP_Tasqe7-dPLzPwMAzc_UWQMEAAA= HTTP/1.1\r\nHost: fizzyacerbitymellow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; u_pl27773363=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 27 Sep 2026 06:29:13 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccept-ch: X-Device-User-Agent,Sec-Ch-Ua,Sec-Ch-Ua-Full-Version-List,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile,Device-Stock-Ua\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nvary: Origin\r\nx-envoy-upstream-service-time: 1\r\nHost: fizzyacerbitymellow.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: e37322288f1752900d928f65742b8605\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T20:43:33.933419Z","times_seen":19037193,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bicea.org/pixel/ase","fqdn":"bicea.org","domain":"bicea.org","tld":"org"},"ip":{"addr":"104.21.86.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ads.alterhub.site/promoframe#k=3ae6276d5f69eb697421a09960b7da53\u0026n=28128394\u0026i=n3_ke4tgo","date":"2026-09-27T06:29:13.785Z","timestamp":1790490553785,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bicea.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Sep 2026 14:22:10 GMT","end":"Tue, 15 Dec 2026 15:22:04 GMT"},"fingerprint":{"sha1":"B9:2F:CB:73:40:D7:7C:69:4A:C6:22:3F:45:F8:CA:8D:35:85:B1:C6","sha256":"1A:05:85:45:D6:5A:93:DC:D9:59:BF:16:3B:1F:F2:B3:07:D5:B3:3C:34:CF:6D:7D:8D:BC:6F:D5:88:E3:95:59"}}},"request":{"raw":"POST /pixel/ase HTTP/1.1\r\nHost: bicea.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 225\r\nOrigin: https://ads.alterhub.site\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":225,"data":"[{\"placement_key\":\"9934f3af5b5e41f86ecd27cc4a72d823\",\"template_body\":\"body_social-bar_pl_general-maga\",\"event_name\":\"base.render_pixel.success\",\"id_frontend_invoke\":\"01a0e18d-aa86-7905-8380-4e9bcd41fb0d\",\"script_version\":\"\"}]"}},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 27 Sep 2026 06:29:13 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\naccept-ch: Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, X-Device-User-Agent, X-Ucbrowser-Device-Ua, Sec-Ch-Ua, Sec-Ch-Ua-Platformuser-Agent, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Ua-Full-Version, Sec-Ch-Ua-Model, Device-Stock-Ua, X-Operamini-Phone-Ua, User-Agent, Sec-Ch-Ua-Platform-Version\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\naccess-control-expose-headers: Content-Length,Content-Range\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=cDO4biuKgc.BEyF9qd1T44578Fz1lQkTuAsRSamd_TU-1790490553.7870011-1.0.1.1-W6aKfyj4pHM_pewM5m694_xcejYhcs9z8bEjbzNHiSYgVQCwsS0QYcpIOcYscKyH.4FTKY2h5HpEZrmBzQrEr1ItrmpC6I5g70rB62teHslvWpYY_P3.QEt2Jsng1rdG; HttpOnly; SameSite=None; Secure; Path=/; Domain=bicea.org; Expires=Sun, 27 Sep 2026 06:59:13 GMT\r\ncf-ray: a41873e92d8d32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"cDO4biuKgc.BEyF9qd1T44578Fz1lQkTuAsRSamd_TU-1790490553.7870011-1.0.1.1-W6aKfyj4pHM_pewM5m694_xcejYhcs9z8bEjbzNHiSYgVQCwsS0QYcpIOcYscKyH.4FTKY2h5HpEZrmBzQrEr1ItrmpC6I5g70rB62teHslvWpYY_P3.QEt2Jsng1rdG","quoted":false,"path":"/","domain":"bicea.org","expires":"2026-09-27T06:59:13Z","raw_expires":"Sun, 27 Sep 2026 06:59:13 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=cDO4biuKgc.BEyF9qd1T44578Fz1lQkTuAsRSamd_TU-1790490553.7870011-1.0.1.1-W6aKfyj4pHM_pewM5m694_xcejYhcs9z8bEjbzNHiSYgVQCwsS0QYcpIOcYscKyH.4FTKY2h5HpEZrmBzQrEr1ItrmpC6I5g70rB62teHslvWpYY_P3.QEt2Jsng1rdG; HttpOnly; SameSite=None; Secure; Path=/; Domain=bicea.org; Expires=Sun, 27 Sep 2026 06:59:13 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":1891,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T20:43:33.933419Z","times_seen":19037193,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bicea.org/pixel/ase","fqdn":"bicea.org","domain":"bicea.org","tld":"org"},"ip":{"addr":"104.21.86.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ads.alterhub.site/promoframe#k=fdfdd92a59e588025342002253695a24\u0026w=468\u0026h=60\u0026i=u2_h3rpj0","date":"2026-09-27T06:29:14.898Z","timestamp":1790490554898,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bicea.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Sep 2026 14:22:10 GMT","end":"Tue, 15 Dec 2026 15:22:04 GMT"},"fingerprint":{"sha1":"B9:2F:CB:73:40:D7:7C:69:4A:C6:22:3F:45:F8:CA:8D:35:85:B1:C6","sha256":"1A:05:85:45:D6:5A:93:DC:D9:59:BF:16:3B:1F:F2:B3:07:D5:B3:3C:34:CF:6D:7D:8D:BC:6F:D5:88:E3:95:59"}}},"request":{"raw":"POST /pixel/ase HTTP/1.1\r\nHost: bicea.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 223\r\nOrigin: https://ads.alterhub.site\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":223,"data":"[{\"placement_key\":\"9ecf8e436a025f7fff03b61551d7e737\",\"template_body\":\"body_social-bar_pl_general-maga\",\"event_name\":\"base.impression.success\",\"id_frontend_invoke\":\"01a0e18d-aa8c-725e-9cd8-73ad8ba5446d\",\"script_version\":\"\"}]"}},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 27 Sep 2026 06:29:14 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\naccept-ch: Sec-Ch-Ua-Model, Sec-Ch-Ua-Mobile, X-Device-User-Agent, Sec-Ch-Ua-Full-Version-List, Device-Stock-Ua, X-Operamini-Phone-Ua, X-Ucbrowser-Device-Ua, User-Agent, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua, Sec-Ch-Ua-Platformuser-Agent, Sec-Ch-Ua-Full-Version, Sec-Ch-Ua-Platform\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\naccess-control-expose-headers: Content-Length,Content-Range\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=0wxSQqp4NivyXgcDC6prX0AKbS.4d5BbORUDTHhIWQc-1790490554.899373-1.0.1.1-2IUkapech.ntcCz.e5duVcLLcYRpOCFDgEoKE0XLFLBoDmTy04KU37f1gSyjbZhCCV4SwghyQp7Mr.uDJ8IV_InXdjx0tiRhjseVA2AvxulZOC23V47gE1Sxa_eHS9Xx; HttpOnly; SameSite=None; Secure; Path=/; Domain=bicea.org; Expires=Sun, 27 Sep 2026 06:59:14 GMT\r\ncf-ray: a41873f01bdb32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"0wxSQqp4NivyXgcDC6prX0AKbS.4d5BbORUDTHhIWQc-1790490554.899373-1.0.1.1-2IUkapech.ntcCz.e5duVcLLcYRpOCFDgEoKE0XLFLBoDmTy04KU37f1gSyjbZhCCV4SwghyQp7Mr.uDJ8IV_InXdjx0tiRhjseVA2AvxulZOC23V47gE1Sxa_eHS9Xx","quoted":false,"path":"/","domain":"bicea.org","expires":"2026-09-27T06:59:14Z","raw_expires":"Sun, 27 Sep 2026 06:59:14 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=0wxSQqp4NivyXgcDC6prX0AKbS.4d5BbORUDTHhIWQc-1790490554.899373-1.0.1.1-2IUkapech.ntcCz.e5duVcLLcYRpOCFDgEoKE0XLFLBoDmTy04KU37f1gSyjbZhCCV4SwghyQp7Mr.uDJ8IV_InXdjx0tiRhjseVA2AvxulZOC23V47gE1Sxa_eHS9Xx; HttpOnly; SameSite=None; Secure; Path=/; Domain=bicea.org; Expires=Sun, 27 Sep 2026 06:59:14 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":1888,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T20:43:33.933419Z","times_seen":19037193,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ads.alterhub.site/promoframe#k=3ae6276d5f69eb697421a09960b7da53\u0026n=28128394\u0026i=n3_ke4tgo","date":"2026-09-27T06:29:15.341Z","timestamp":1790490555341,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://ads.alterhub.site\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:52:25 GMT\r\nexpires: Tue, 21 Sep 2027 15:52:25 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 484610\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":43949,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-10-11T19:43:38.076302Z","times_seen":324817,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alterhub.site/api/weao","fqdn":"alterhub.site","domain":"alterhub.site","tld":"site"},"ip":{"addr":"104.21.42.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://alterhub.site/","date":"2026-09-27T06:29:11.876Z","timestamp":1790490551876,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alterhub.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 00:28:34 GMT","end":"Sat, 07 Nov 2026 01:28:30 GMT"},"fingerprint":{"sha1":"CC:30:2C:31:6D:59:8D:61:CD:11:F9:93:CE:16:C0:86:EE:F5:4A:5A","sha256":"FD:96:F8:0E:8C:08:48:55:A0:F2:69:BB:EA:8B:3A:98:9A:71:49:5F:30:C6:90:E1:9F:D3:7F:54:A3:38:1A:B6"}}},"request":{"raw":"GET /api/weao HTTP/1.1\r\nHost: alterhub.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://alterhub.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nage: 0\r\ncache-control: public\r\ncontent-encoding: br\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; frame-src 'self' https: data: blob:; media-src 'self' https: data: blob:; connect-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self' https:;\r\ncontent-type: application/json; charset=utf-8\r\ndate: Sun, 27 Sep 2026 06:29:12 GMT\r\netag: W/\"23e8-X7ks4fvb7OblJlOK6+pkR+zlzWA\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::8dpgg-1790490551887-ed49c12f69a0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EWaXdPm5s7X%2FPJ58%2BLVf%2F51dDqWdSxRy6xLnF03LUQgxnfn%2Fd80rd8%2BeDgWbKrUQCwm1%2BnJSLWyw7Xcx5WpCWW1dtuG530Xd1sWO%2FFnxCGd0Di%2BzVY%2FhUM%2FABWjE5AbA\"}]}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncf-ray: a41873dd3b290b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9192,"size_decoded":3169,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b622e24f3e511575b163d21d14bce590","sha1":"5fb92ce1fbdbece6e526538aebea6447ece5cd60","sha256":"5e4b20dad5bdb793f940c75d9622ce5826ff6744d7a0c565c61e8e250c33297b","sha512":"eb64b2600f05a60c99e77bd51335b5bf737a10871da3e806e406b521d3bd430048cea7244285948adf96ffa3e1e5d822da18ab77cac99cfd0adf10206b419a5d","ssdeep":"192:MEwOXQt9hqj6YPsYhVexVIiZn1iFBpe1C8KJ:M+XO9hqjlPsYhVkVIiZnwFBpOC8KJ","tlshash":"ed12be7f06b49dbd87281f94c18b3d88f31f71bfd5c9694ae28a490961fd0bb2125127","first_seen":"2026-09-27T06:27:52.415644Z","last_seen":"2026-09-27T06:30:56.944749Z","times_seen":4,"resource_available":true,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"afders.org/9/dd21c50fc592f139e5fae52397aac5e6","fqdn":"afders.org","domain":"afders.org","tld":"org"},"ip":{"addr":"104.21.67.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ads.alterhub.site/promoframe#k=fdfdd92a59e588025342002253695a24\u0026w=468\u0026h=60\u0026i=u2_h3rpj0","date":"2026-09-27T06:29:12.806Z","timestamp":1790490552806,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afders.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Sep 2026 13:34:44 GMT","end":"Tue, 15 Dec 2026 14:34:40 GMT"},"fingerprint":{"sha1":"7A:92:9A:74:98:BB:CF:88:2A:BD:0B:26:71:9B:9A:F3:95:83:01:4C","sha256":"47:5D:69:65:F3:FE:34:4C:29:B8:D4:0E:EE:3F:82:6A:2D:80:CC:43:F1:EA:3B:18:98:DF:BA:E5:D7:79:87:38"}}},"request":{"raw":"GET /9/dd21c50fc592f139e5fae52397aac5e6 HTTP/1.1\r\nHost: afders.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 27 Sep 2026 06:29:12 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nset-cookie: uidm=01a0e18d-aa1e-7290-835a-05820375040e_1; Path=/; Expires=Wed, 24 Sep 2036 06:29:12 GMT; Secure; SameSite=None\n__cf_bm=E.kpiN_tj8vCp_KnIHDU.orChpHJXA2krs.ZFBCUMdg-1790490552.8087704-1.0.1.1-dvJkw6z0LrAU8qRhbDPxTmy.g5FAGkt6BUndPfuLI0t03qnEghiew.ibnPQwnpjPeftp5uwteKXaQ1s6h84qCfDcnt9qM3qKuqpLdIGQy8cklBLncfcxTdq8JhH8Y5ld; HttpOnly; SameSite=None; Secure; Path=/; Domain=afders.org; Expires=Sun, 27 Sep 2026 06:59:12 GMT\r\naccept-ch: Sec-Ch-Ua-Mobile,Device-Stock-Ua,X-Device-User-Agent,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Model,X-Operamini-Phone-Ua,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version\r\ncontent-encoding: gzip\r\nlink: \u003chttps://arwf.org\u003e; rel=preconnect; crossorigin, \u003chttps://arwf.org\u003e; rel=dns-prefetch, \u003chttps://static.nresystems.com\u003e; rel=preconnect; crossorigin, \u003chttps://static.nresystems.com\u003e; rel=dns-prefetch\r\nvary: Accept-Encoding, Origin\r\nx-envoy-upstream-service-time: 7\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: no-cache, max-age=0, private, no-cache\r\nx-request-id: d2a468bd178d33b2886df19a493cac11\r\npragma: no-cache\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,X-Forwarded-For,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1728000\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a41873e30eb856c3-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"uidm","value":"01a0e18d-aa1e-7290-835a-05820375040e_1","quoted":false,"path":"/","expires":"2036-09-24T06:29:12Z","raw_expires":"Wed, 24 Sep 2036 06:29:12 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uidm=01a0e18d-aa1e-7290-835a-05820375040e_1; Path=/; Expires=Wed, 24 Sep 2036 06:29:12 GMT; Secure; SameSite=None"},{"name":"__cf_bm","value":"E.kpiN_tj8vCp_KnIHDU.orChpHJXA2krs.ZFBCUMdg-1790490552.8087704-1.0.1.1-dvJkw6z0LrAU8qRhbDPxTmy.g5FAGkt6BUndPfuLI0t03qnEghiew.ibnPQwnpjPeftp5uwteKXaQ1s6h84qCfDcnt9qM3qKuqpLdIGQy8cklBLncfcxTdq8JhH8Y5ld","quoted":false,"path":"/","domain":"afders.org","expires":"2026-09-27T06:59:12Z","raw_expires":"Sun, 27 Sep 2026 06:59:12 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=E.kpiN_tj8vCp_KnIHDU.orChpHJXA2krs.ZFBCUMdg-1790490552.8087704-1.0.1.1-dvJkw6z0LrAU8qRhbDPxTmy.g5FAGkt6BUndPfuLI0t03qnEghiew.ibnPQwnpjPeftp5uwteKXaQ1s6h84qCfDcnt9qM3qKuqpLdIGQy8cklBLncfcxTdq8JhH8Y5ld; HttpOnly; SameSite=None; Secure; Path=/; Domain=afders.org; Expires=Sun, 27 Sep 2026 06:59:12 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":85750,"size_decoded":36007,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"bca852dc9c117ee00b9193a726793e85","sha1":"f0bc032f97643264cde744da2e2d3af02a3dfdb1","sha256":"f4419c64d041d2c20752645fc460d0462469682a91c7a50d89ae24486bef1d35","sha512":"bfe4b8ce0d0d6f8d57125bb9fb1cd10f6b256160657b565e666f6727e0fc36988cb155564ee46568e44f87bab70609e533b7926b0ce5a7c8e479ec0269020b6f","ssdeep":"1536:ELdPZ2UbmKPpl0ZVkEEC5dpdx+hl4rtTCG3uYx3Z/5BTb49xHJ8qr0Jd2F:ZWureGrtTfeYx3Z/5BTExHJAC","tlshash":"a083d748af10a21b0bb06cfb311ab522e15a0c8536ace4d8fd7e3c5b5d86716f5bd474","first_seen":"2026-09-27T06:30:15.050055Z","last_seen":"2026-09-27T06:30:15.050055Z","times_seen":1,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fizzyacerbitymellow.com/ren.gif?sid=H4sIAAAAAAAC_1RSv48bxR-dva_1pUiBhKLQpNgCEJGwb9Ze27uXLuKXRLgjJCgSVLM7s87E453NzqztuLokiJYrKKjQ-vkulhAgEMWRDvloEBJStnORayj4A5AQJbLP4mCk-fzQG828z3vzybQ4JQ0UbPneu3oilWLb7QZ1X70tU65Hxt295Xq0Qa-6t2Xa8a-641XIhztey2_QK-5bIu7r7Sb1KPWo574pc5Ho8fYahcy-Cr1GSBt-s-G1fYzz__amcGCYAz48JS9A8ur535KPIOMF0sG3rwvTtzp77Y1BoZjVOYZ8_kHaT_UoxeC8THIHSTrfnIY2FSGfb0Gn880E0MPD1QSIZEW2Lj1DlM43NBENj86YRgoiRcQvYDRcQKgFJFsg1o8g-VMCxBy7e0gHj3d1PmL3z1C2QitS-_MPyFFFas8uIh18c03JsXtTq8JKnRqMkxJyvIDsLZAVJ7CTLcjRCWL7EJL_SuiLF5AOvnxbD2XfHYq8D8nLtQYyWYAZB8VqSwdF4qDIHAz40vVp4Mcea3WSkMdd6jPf5yKiYdCklIVxF0X8AJIfIM73keX76MsDGO7A2Io4N_Yx5OURV6ZpysdcmSLyNrm5ya1ypm1vyo607YmUgOUHyHl5KLN75hFi-7_ZJDHvzPQqsMiWMxbxcia5JcjvLV-iHqPCC3idRR2v3mXUq4dBu1sP4iCk7bDbiv3kMDG2KKfZxntn_vP36Iuly4QIur5odrqcJU2P8dAPW0HcDjtUJF3mwcgS0mytxZnIitw4voJMVqT-4ReI2AmMOkEsL4MVHtioBLtTYpJ-zZQV-Z0iahhpBbgukdka7H0HwpKpOiUXZ-_fuvbj2lNx_DJE_AvZLMR5iSwvcVf-RNBTD77by6wcyAlbmXzTMiv-Dyaf7v2FWFbk0nMP179t5_IO4mwfJvvnppkyWUVeefI7jCaIshqUJFDi_CkWlTD_6qPzemo-Ri-vIVK1WaTy2mGkcvVZRa6nn64ouxW53pufkTdy6babUasTBB2RdHjS4q1mi4dtKkKfhR0_9Nuwprr7w_GTvwcAyRzl4wMEAAA=","fqdn":"fizzyacerbitymellow.com","domain":"fizzyacerbitymellow.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ads.alterhub.site/promoframe#k=aee874e267daf21ad94938c5960ef7a1\u0026n=27873862\u0026i=n4_0eh5yg","date":"2026-09-27T06:29:13.527Z","timestamp":1790490553527,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"fizzyacerbitymellow.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 22:02:47 GMT","end":"Fri, 30 Oct 2026 22:02:46 GMT"},"fingerprint":{"sha1":"85:2D:D6:49:43:AB:3A:C0:5E:0D:58:0E:0B:D7:D6:2A:82:8B:E0:41","sha256":"FF:C6:2E:36:C1:47:5E:79:06:79:62:3E:93:9A:4C:D1:A2:35:A6:48:A3:E5:43:F4:74:4F:64:C9:9E:32:17:24"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_1RSv48bxR-dva_1pUiBhKLQpNgCEJGwb9Ze27uXLuKXRLgjJCgSVLM7s87E453NzqztuLokiJYrKKjQ-vkulhAgEMWRDvloEBJStnORayj4A5AQJbLP4mCk-fzQG828z3vzybQ4JQ0UbPneu3oilWLb7QZ1X70tU65Hxt295Xq0Qa-6t2Xa8a-641XIhztey2_QK-5bIu7r7Sb1KPWo574pc5Ho8fYahcy-Cr1GSBt-s-G1fYzz__amcGCYAz48JS9A8ur535KPIOMF0sG3rwvTtzp77Y1BoZjVOYZ8_kHaT_UoxeC8THIHSTrfnIY2FSGfb0Gn880E0MPD1QSIZEW2Lj1DlM43NBENj86YRgoiRcQvYDRcQKgFJFsg1o8g-VMCxBy7e0gHj3d1PmL3z1C2QitS-_MPyFFFas8uIh18c03JsXtTq8JKnRqMkxJyvIDsLZAVJ7CTLcjRCWL7EJL_SuiLF5AOvnxbD2XfHYq8D8nLtQYyWYAZB8VqSwdF4qDIHAz40vVp4Mcea3WSkMdd6jPf5yKiYdCklIVxF0X8AJIfIM73keX76MsDGO7A2Io4N_Yx5OURV6ZpysdcmSLyNrm5ya1ypm1vyo607YmUgOUHyHl5KLN75hFi-7_ZJDHvzPQqsMiWMxbxcia5JcjvLV-iHqPCC3idRR2v3mXUq4dBu1sP4iCk7bDbiv3kMDG2KKfZxntn_vP36Iuly4QIur5odrqcJU2P8dAPW0HcDjtUJF3mwcgS0mytxZnIitw4voJMVqT-4ReI2AmMOkEsL4MVHtioBLtTYpJ-zZQV-Z0iahhpBbgukdka7H0HwpKpOiUXZ-_fuvbj2lNx_DJE_AvZLMR5iSwvcVf-RNBTD77by6wcyAlbmXzTMiv-Dyaf7v2FWFbk0nMP179t5_IO4mwfJvvnppkyWUVeefI7jCaIshqUJFDi_CkWlTD_6qPzemo-Ri-vIVK1WaTy2mGkcvVZRa6nn64ouxW53pufkTdy6babUasTBB2RdHjS4q1mi4dtKkKfhR0_9Nuwprr7w_GTvwcAyRzl4wMEAAA= HTTP/1.1\r\nHost: fizzyacerbitymellow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; u_pl27773363=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 27 Sep 2026 06:29:13 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccept-ch: Device-Stock-Ua,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Model,X-Device-User-Agent,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Mobile\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nvary: Origin\r\nx-envoy-upstream-service-time: 2\r\nHost: fizzyacerbitymellow.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: a924c439cd79fccb2290b1bf68f357c7\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T20:43:33.933419Z","times_seen":19037193,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fizzyacerbitymellow.com/impr.gif?sid=H4sIAAAAAAAC_1RSv48bRRSePSwoUiChKDQptgCJSJwza6_t3aSL-CUR7ggJigTV7MysM_F4Z7MzazuuLgmi5QoKKrT3-S6WECAQxUGHfDQICSnbucg1_AlIiBLZsThYad_7nr7Rm--9bz49KE9JEyVbvv-emSqt2eVOk_qv3VaZMGPr79zyA9qkV_3bKuuGV_3JKhSjK0E7bNJL_tuSD8zlFg0oDWjgv6UKmZrJ5TULlX8dB82YNsNWM-iEmBT_r23pwTIPYnRKXoIS9Yt_pB9D8QWy4XdvSDtwJn_9zWGpmTMFRmL-YTbIzDjD8AymhYc0m29Ow9iakC-2YLL5ZgKY0eFqAiSqJlsXniLJ5huZSEZHz5QmGjJDIs5hPFpA6gUUW4CbR1DiCQG4wM4usuHjHVOM2f1nLFuxNWn89SfUuCaNp-eRDb-9ptXEv2l06ZTJLCZpBTVZQPUXyMsTuOkW1PgE3D2EEr8T-vI5ZMOv3jEjNfBHshhAiWq9A5UuwKyHcvUrD2Xqocw9DMXSD2kU8oC1u2kseI-GLAyFTGgctShlMe-h5A-gxD54sYe82MNA7cMKD9bVxLuxh5GojoS2LVs9FtqWSbDJrU1uVzPj-gfsyLi-zAhYsY9CVIcqv2cfgbvnZtPUvjszq8ASV81YIqqZEo6guLd8hQaMyiAS2yzpBts9RoPtOOr0tiMexbQT99o8TA9T68rqIN94781__QEDufSZlFEvlK1uT7C0FTARh3E74p24S2XaYwGsqqDs1no5U1WTG8eXkKuabH_0JRJ2AqtPwNVFsDIAG1dgdypMs2-YdrK4UyZNq5yEMBVy14C770E6cqBPyfnZB7eu_bz2VB77kPw3svnAiwp5UeGu-oWgrx98v5s7NVRTtjL5pmNOPg-mnuz-Da5qcuGFh-vXduViBzzfg83_7TTTNq_J9ewzWEOQ5FvQikDLs6tYUsH-p07O8IH9BP2igUQ3ZokuGoeJLvTn63ZryTW53p-v0KuwaumnbdnilEa9btCOUhm0Q8HTThTGostouy3hbH33x-Of_hkAoaw7AgMEAAA=","fqdn":"fizzyacerbitymellow.com","domain":"fizzyacerbitymellow.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ads.alterhub.site/promoframe#k=aee874e267daf21ad94938c5960ef7a1\u0026n=27873862\u0026i=n4_0eh5yg","date":"2026-09-27T06:29:13.530Z","timestamp":1790490553530,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"fizzyacerbitymellow.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 22:02:47 GMT","end":"Fri, 30 Oct 2026 22:02:46 GMT"},"fingerprint":{"sha1":"85:2D:D6:49:43:AB:3A:C0:5E:0D:58:0E:0B:D7:D6:2A:82:8B:E0:41","sha256":"FF:C6:2E:36:C1:47:5E:79:06:79:62:3E:93:9A:4C:D1:A2:35:A6:48:A3:E5:43:F4:74:4F:64:C9:9E:32:17:24"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1RSv48bRRSePSwoUiChKDQptgCJSJwza6_t3aSL-CUR7ggJigTV7MysM_F4Z7MzazuuLgmi5QoKKrT3-S6WECAQxUGHfDQICSnbucg1_AlIiBLZsThYad_7nr7Rm--9bz49KE9JEyVbvv-emSqt2eVOk_qv3VaZMGPr79zyA9qkV_3bKuuGV_3JKhSjK0E7bNJL_tuSD8zlFg0oDWjgv6UKmZrJ5TULlX8dB82YNsNWM-iEmBT_r23pwTIPYnRKXoIS9Yt_pB9D8QWy4XdvSDtwJn_9zWGpmTMFRmL-YTbIzDjD8AymhYc0m29Ow9iakC-2YLL5ZgKY0eFqAiSqJlsXniLJ5huZSEZHz5QmGjJDIs5hPFpA6gUUW4CbR1DiCQG4wM4usuHjHVOM2f1nLFuxNWn89SfUuCaNp-eRDb-9ptXEv2l06ZTJLCZpBTVZQPUXyMsTuOkW1PgE3D2EEr8T-vI5ZMOv3jEjNfBHshhAiWq9A5UuwKyHcvUrD2Xqocw9DMXSD2kU8oC1u2kseI-GLAyFTGgctShlMe-h5A-gxD54sYe82MNA7cMKD9bVxLuxh5GojoS2LVs9FtqWSbDJrU1uVzPj-gfsyLi-zAhYsY9CVIcqv2cfgbvnZtPUvjszq8ASV81YIqqZEo6guLd8hQaMyiAS2yzpBts9RoPtOOr0tiMexbQT99o8TA9T68rqIN94781__QEDufSZlFEvlK1uT7C0FTARh3E74p24S2XaYwGsqqDs1no5U1WTG8eXkKuabH_0JRJ2AqtPwNVFsDIAG1dgdypMs2-YdrK4UyZNq5yEMBVy14C770E6cqBPyfnZB7eu_bz2VB77kPw3svnAiwp5UeGu-oWgrx98v5s7NVRTtjL5pmNOPg-mnuz-Da5qcuGFh-vXduViBzzfg83_7TTTNq_J9ewzWEOQ5FvQikDLs6tYUsH-p07O8IH9BP2igUQ3ZokuGoeJLvTn63ZryTW53p-v0KuwaumnbdnilEa9btCOUhm0Q8HTThTGostouy3hbH33x-Of_hkAoaw7AgMEAAA= HTTP/1.1\r\nHost: fizzyacerbitymellow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; u_pl27773363=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 27 Sep 2026 06:29:13 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccept-ch: X-Device-User-Agent,Sec-Ch-Ua,Sec-Ch-Ua-Full-Version-List,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile,Device-Stock-Ua\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nvary: Origin\r\nx-envoy-upstream-service-time: 2\r\nHost: fizzyacerbitymellow.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: e78c8bd6cbd5f9723b2c87ce74ea0375\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T20:43:33.933419Z","times_seen":19037193,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/cti/ed/d3/cc/edd3cc02467dec17b04a1f36230c43a3/1781174138.jpg","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ads.alterhub.site/promoframe#k=d99b65ef2f1e54f34f14ebb6236adcad\u0026w=468\u0026h=60\u0026i=u1_v62o5x","date":"2026-09-27T06:29:13.884Z","timestamp":1790490553884,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 02:32:58 GMT","end":"Wed, 02 Dec 2026 02:32:57 GMT"},"fingerprint":{"sha1":"0C:28:A6:45:71:D0:51:55:56:A0:1D:34:71:8C:C4:7C:16:5A:03:5C","sha256":"68:73:EC:1A:D4:78:3E:46:1A:F8:1D:99:8F:CB:9D:46:B9:0E:28:CF:C6:BF:14:EF:F5:90:39:D3:FF:5A:1F:5C"}}},"request":{"raw":"GET /cti/ed/d3/cc/edd3cc02467dec17b04a1f36230c43a3/1781174138.jpg HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 27 Sep 2026 06:29:13 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 33174\r\nserver: nginx/1.21.6\r\nlast-modified: Thu, 11 Jun 2026 10:35:38 GMT\r\netag: \"6a2a8f7a-8196\"\r\nexpires: Tue, 29 Sep 2026 06:29:13 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":33174,"size_decoded":33522,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 26.3 (Macintosh), datetime=2026:06:09 16:00:28], progressive, precision 8, 468x60, components 3","md5":"142df135785b1f17281d043d3b67934f","sha1":"4ce99e511a5bd210691de974e141ce6b02b17ecb","sha256":"16b51d94ea48f16dbb80865371895c927676d3eaa280c4863a8b7454a0a66948","sha512":"76d250686b8938cee1c2ad287bf23fbf3d78e9e517150c1b2f75690dd99252938b060c532920280b0fa8f45af1a8f04bf09cd568a94fbc73562b61bb28aa9041","ssdeep":"384:kG+S3g1LU+iS7LG+S3g1LUmnU7GiIV8CcpdGt9LIAop2eLMXJV7kHEJ0LCb9ICQc:9eNiJeZgCcjGtxUQQsRJ0Etm2I/HHU","tlshash":"3ee2bf2567d59d22fbe0a43684f6d293b7119c296af327587c5c3c807fb8a550d2c343","first_seen":"2026-07-07T07:20:26.405509Z","last_seen":"2026-10-08T04:16:46.39846Z","times_seen":437,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bicea.org/pixel/sbls?bv=\u0026tmpl=942\u0026u=https%3A%2F%2Fcdn.bakestubborn.com%2Fsb%2Fssp%2Finterstitial%2Fmessage_redcircle%2F1%2Fcss%2Fanimate.css\u0026l=78689\u0026fd=481","fqdn":"bicea.org","domain":"bicea.org","tld":"org"},"ip":{"addr":"104.21.86.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ads.alterhub.site/promoframe#k=3ae6276d5f69eb697421a09960b7da53\u0026n=28128394\u0026i=n3_ke4tgo","date":"2026-09-27T06:29:14.803Z","timestamp":1790490554803,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bicea.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Sep 2026 14:22:10 GMT","end":"Tue, 15 Dec 2026 15:22:04 GMT"},"fingerprint":{"sha1":"B9:2F:CB:73:40:D7:7C:69:4A:C6:22:3F:45:F8:CA:8D:35:85:B1:C6","sha256":"1A:05:85:45:D6:5A:93:DC:D9:59:BF:16:3B:1F:F2:B3:07:D5:B3:3C:34:CF:6D:7D:8D:BC:6F:D5:88:E3:95:59"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=942\u0026u=https%3A%2F%2Fcdn.bakestubborn.com%2Fsb%2Fssp%2Finterstitial%2Fmessage_redcircle%2F1%2Fcss%2Fanimate.css\u0026l=78689\u0026fd=481 HTTP/1.1\r\nHost: bicea.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uidm=01a0e18d-aa54-75d6-8bfe-24d1a57a1305_2; __cf_bm=s97WfwL8KEDlwJ2cPRMHNEF9t5jPNhpTu1ntfKcpF6c-1790490552.8525264-1.0.1.1-x7_tfLhRY9ofMW4Gcd_xl..H59XSfMYUoI66PPL9LEHv_bWUGQvUPwgWhN0XjBjF9GOag6VdFdtjq1hbB0ZB3T8I1p6mJPUaW4smEEym4vZNDFmJE3JzjshCATN0yON1; pdhtkv=true; uncs=2; pdhtkv29=true; uncs29=2; u_pl31286095=1; slec9934f3af5b5e41f86ecd27cc4a72d823=[6790254]; u_pl31156143=1; slec9ecf8e436a025f7fff03b61551d7e737=[6671912]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 27 Sep 2026 06:29:14 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\naccept-ch: Sec-Ch-Ua-Full-Version-List, Sec-Ch-Ua-Full-Version, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, User-Agent, Sec-Ch-Ua, Sec-Ch-Ua-Platformuser-Agent, Sec-Ch-Ua-Model, Device-Stock-Ua, X-Device-User-Agent, X-Operamini-Phone-Ua, X-Ucbrowser-Device-Ua, Sec-Ch-Ua-Platform-Version\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\naccess-control-expose-headers: Content-Length,Content-Range\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a41873ef8ac632fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":820,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T20:43:33.933419Z","times_seen":19037193,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/jetbrainsmono/v24/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxDcwg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://alterhub.site/","date":"2026-09-27T06:29:11.839Z","timestamp":1790490551839,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/jetbrainsmono/v24/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxDcwg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://alterhub.site\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 31432\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 16:00:42 GMT\r\nexpires: Tue, 21 Sep 2027 16:00:42 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:52:37 GMT\r\ncontent-type: font/woff2\r\nage: 484109\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31432,"size_decoded":32245,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31432, version 1.0","md5":"b636a65da4f00129f08c7df6e5dd75ac","sha1":"4f27206c4b1caf8b7805597fcbc6922ff5805daa","sha256":"83c005d49d8a6a50474c73a5a36ac0468076e9c4a29da7bdb14995d80560a5be","sha512":"77ad92edddd5fc9ce47b8b329cf41b2fec895ea01a97b9122df3766163998fadcbe47c868631208636c4e587136ddd390d38e3e9da2743758c9da2c77a66f859","ssdeep":"768:a8+AGQwBrw24YHLKRG5lBF260n1e5vhjJKWWAD95I9Puggtx:B+AiBrw2fHL+GyvYtYADM9Pug0x","tlshash":"52e2f274ea41ca57676335ed4203e99d015fa318ebf6fd40869ccad2a506bcb7c4033a","first_seen":"2024-10-21T03:03:54.505463Z","last_seen":"2026-10-11T19:50:27.268451Z","times_seen":20959,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":43,"dns":0,"connect":0,"send":0,"wait":24,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ads.alterhub.site/promoframe#k=fdfdd92a59e588025342002253695a24\u0026w=468\u0026h=60\u0026i=u2_h3rpj0","date":"2026-09-27T06:29:14.985Z","timestamp":1790490554985,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://ads.alterhub.site\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:52:25 GMT\r\nexpires: Tue, 21 Sep 2027 15:52:25 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 484609\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":43949,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-10-11T19:43:38.076302Z","times_seen":324817,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ads.alterhub.site/promoframe#k=3ae6276d5f69eb697421a09960b7da53\u0026n=28128394\u0026i=n3_ke4tgo","date":"2026-09-27T06:29:15.343Z","timestamp":1790490555343,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://ads.alterhub.site\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:52:25 GMT\r\nexpires: Tue, 21 Sep 2027 15:52:25 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 484610\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":43949,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-10-11T19:43:38.076302Z","times_seen":324817,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alterhub.site/promo.js?v=bde7b733","fqdn":"alterhub.site","domain":"alterhub.site","tld":"site"},"ip":{"addr":"104.21.42.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://alterhub.site/","date":"2026-09-27T06:29:11.630Z","timestamp":1790490551630,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alterhub.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 00:28:34 GMT","end":"Sat, 07 Nov 2026 01:28:30 GMT"},"fingerprint":{"sha1":"CC:30:2C:31:6D:59:8D:61:CD:11:F9:93:CE:16:C0:86:EE:F5:4A:5A","sha256":"FD:96:F8:0E:8C:08:48:55:A0:F2:69:BB:EA:8B:3A:98:9A:71:49:5F:30:C6:90:E1:9F:D3:7F:54:A3:38:1A:B6"}}},"request":{"raw":"GET /promo.js?v=bde7b733 HTTP/1.1\r\nHost: alterhub.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://alterhub.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\nage: 123694\r\ncache-control: public, max-age=14400, stale-while-revalidate=604800\r\ncontent-disposition: inline; filename=\"promo.js\"\r\ncontent-encoding: br\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; frame-src 'self' https: data: blob:; media-src 'self' https: data: blob:; connect-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self' https:;\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sun, 27 Sep 2026 06:29:11 GMT\r\netag: \"38d86265a4b4326b95d78c020856ac95\"\r\nlast-modified: Thu, 17 Sep 2026 11:43:53 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::s7q7j-1789676778663-7566fab229bb\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n7I9k7Xyr%2FZCrkPNaYdv5YEga%2FvgoGouEBdyH2ycOwkLt%2BfPmyBZ6LM2mC28ZNmSF4sw5cKQmni67dLWvyg4EkzFksG4smWO%2BgPT3Eg0cH11QegG0p2ymNQ1IiO2ct2v\"}]}\r\ncf-cache-status: UPDATING\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncf-ray: a41873dbbad60b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9921,"size_decoded":5800,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (9920)","md5":"38d86265a4b4326b95d78c020856ac95","sha1":"bde7b7335e0a8daccd73cf41d16032eb738a8a71","sha256":"37e82370908b191d43c5a406379435ccd01331dc4d13b0725e1c18b3a0a15881","sha512":"537ee0ddff8bc542822445a42a5071101a972bdb0a8a7e20042eea9d6bd91cbc6c092b9e63be7c6431fb6129cbbccc941ec3acd762a6258218fc893151119f7a","ssdeep":"192:eUBnUiUhowQv4+jZX/zfDM2xyRyzNYROmby2xXF/O76BZMPpstrJaLFi:eU6iUhgvTjdz3yRyzNibL/O76BMpstdD","tlshash":"6922e9797610643752e709ba79ffb389b5313410bd87844082b4c8e83abcd1e4a67f9e","first_seen":"2026-09-27T06:27:52.431056Z","last_seen":"2026-09-27T06:30:56.911017Z","times_seen":4,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tr.rbxcdn.com/180DAY-27e15e41978bc93a56536383bde2da41/256/256/Image/Png/noFilter","fqdn":"tr.rbxcdn.com","domain":"rbxcdn.com","tld":"com"},"ip":{"addr":"143.204.238.74","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://alterhub.site/","date":"2026-09-27T06:29:12.534Z","timestamp":1790490552534,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rbxcdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 09 Sep 2026 00:00:00 GMT","end":"Thu, 25 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"75:D8:06:E9:90:C5:4F:78:20:E1:DC:B0:2D:7F:04:D1:43:36:17:D5","sha256":"3B:CA:A7:4C:D5:BA:BE:D5:47:44:99:0D:4A:D5:DF:17:82:35:B8:6B:67:AF:9F:D7:A1:77:B6:43:87:6A:83:9B"}}},"request":{"raw":"GET /180DAY-27e15e41978bc93a56536383bde2da41/256/256/Image/Png/noFilter HTTP/1.1\r\nHost: tr.rbxcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://alterhub.site/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/Png\r\ncontent-length: 76289\r\ndate: Thu, 27 Aug 2026 04:21:41 GMT\r\nserver: public-gateway\r\ncache-control: no-cache\r\nedge-cache-tag: 180DAY-27e15e41978bc93a56536383bde2da41\r\nstrict-transport-security: max-age=31536000\r\nx-frame-options: SAMEORIGIN\r\nroblox-machine-id: 3f4eb9ad-8dfe-101c-3ea6-541a9498bc61\r\nx-envoy-attempt-count: 1\r\nx-envoy-upstream-service-time: 346\r\nx-terms-message: Terms apply https://rblx.co/TOU.\r\nx-ratelimit-limit: 300000, 300000;w=60, 70000\r\nx-ratelimit-remaining: 291894, 70000\r\nx-ratelimit-reset: 20, 0\r\nx-ingress-proxy: true\r\nx-roblox-edge: c097\r\nreport-to: {\"group\":\"network-errors\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://ncs.roblox.com/upload\"}]}\r\nnel: {\"report_to\":\"network-errors\",\"max_age\":604800,\"success_fraction\":0,\"failure_fraction\":0.05,\"response_headers\":[\"Rbx-Cdn-Provider\",\"vary\"]}\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 4888a1b692b693505c9036bc998623cc.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: EOAvWpXTdSY0mS06rll79kPBCkxB6uIK8wLdRpkEM1DZkHiHC8iPiA==\r\nage: 2686051\r\nrbx-cdn-provider: aws\r\ntiming-allow-origin: *\r\nvary: Origin\r\nserver-timing: cdn-cache-hit,cdn-pop;desc=\"ARN53-P4\",cdn-rid;desc=\"EOAvWpXTdSY0mS06rll79kPBCkxB6uIK8wLdRpkEM1DZkHiHC8iPiA==\",cdn-hit-layer;desc=\"EDGE\",cdn-downstream-fbl;dur=4\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":76289,"size_decoded":77618,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGB, non-interlaced","md5":"0b01ddb1679014a60c1f52dc4cb16f06","sha1":"016028f70e0cce37d4a4d8d2de73b321607889df","sha256":"e1d67d87a3a6bc7e848c0fa156b21f6905ae73f069b05ee933c2d3697df76bbd","sha512":"ff88c2d6273a39ff02b5ed10e30ed167cdee8941795b7e31e34f8f047954a7998aa4f95276fc2abec5754dbc71e6523001dbb7b4bde1c2fb75ed8abcce2a5030","ssdeep":"1536:s/mnZA9ji72R26xDueMbn1jh7J7+K3kf7IuFgpi297KwPL9oVdUXxlfhAQ8R3FIW:suZ++7u2IDDsn37JC+3u0i2swz6HUXLW","tlshash":"e673026394f67a7ddc9bab50231e48e3940d6660a5e3b4216e40cb3d0f15ecad193eac","first_seen":"2026-09-27T06:30:15.054034Z","last_seen":"2026-09-27T06:30:56.886255Z","times_seen":2,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":31,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.highperformanceformat.com/70b7658cf770f889af09e1d33eabf363/invoke.js","fqdn":"www.highperformanceformat.com","domain":"highperformanceformat.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://alterhub.site/","date":"2026-09-27T06:29:12.220Z","timestamp":1790490552220,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"highperformanceformat.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 23:52:39 GMT","end":"Wed, 04 Nov 2026 23:52:38 GMT"},"fingerprint":{"sha1":"B8:83:42:30:01:F1:50:DF:BA:43:AD:F5:FF:7C:75:43:E4:F3:14:B8","sha256":"06:90:24:D1:9F:9A:3E:F1:28:CC:2D:B9:77:E8:06:2F:0D:9E:37:96:BE:CB:04:A2:6B:68:B2:4A:66:04:FE:87"}}},"request":{"raw":"GET /70b7658cf770f889af09e1d33eabf363/invoke.js HTTP/1.1\r\nHost: www.highperformanceformat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://alterhub.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 27 Sep 2026 06:29:12 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\naccept-ch: User-Agent,Sec-Ch-Ua-Model,X-Device-User-Agent,X-Operamini-Phone-Ua,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Mobile,Device-Stock-Ua,X-Ucbrowser-Device-Ua\r\naccess-control-allow-origin: *\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\nx-envoy-upstream-service-time: 3\r\nHost: www.highperformanceformat.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: e3b3154b1f2bb76ee7b8315a2b80f44e\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":49208,"size_decoded":21338,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (49208), with no line terminators","md5":"bad281012611c5539565cd47a2625167","sha1":"afc742a44ac1048223f6b212684a70a14ea4156f","sha256":"f68543bd1cbc7102e66063316194d26e1518525985d17bc51340ec76f7ae4bdc","sha512":"41db313ecd0dc53ecb5c523d3ed15fc3d15c0b2b832fe280497a58ceef5bdcf3ce2bfd33df5c38a2f74a19c4cc085f626950890e4356c7f509d47221749cf766","ssdeep":"1536:zxD5bKBL9x2qTq1MAdf4kvj8c5NR1c7l9WEII0Nf:lD5bGL9xED/Tvc73WEc","tlshash":"4923e7d86f60e25247f0a8ff32269535f4691e54384cd4d8e06f3cc4aea7706ea7a478","first_seen":"2026-09-27T06:27:52.408785Z","last_seen":"2026-09-27T06:30:15.05566Z","times_seen":3,"resource_available":true,"data":null}},"time_used":463,"timings":{"blocked":-1,"dns":2,"connect":91,"send":0,"wait":95,"receive":90,"ssl":186},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"www.highperformanceformat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"www.highperformanceformat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tr.rbxcdn.com/180DAY-4b2eb340e137a14c3e8db1e189c57abb/256/256/Image/Png/noFilter","fqdn":"tr.rbxcdn.com","domain":"rbxcdn.com","tld":"com"},"ip":{"addr":"143.204.238.74","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://alterhub.site/","date":"2026-09-27T06:29:12.527Z","timestamp":1790490552527,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rbxcdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 09 Sep 2026 00:00:00 GMT","end":"Thu, 25 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"75:D8:06:E9:90:C5:4F:78:20:E1:DC:B0:2D:7F:04:D1:43:36:17:D5","sha256":"3B:CA:A7:4C:D5:BA:BE:D5:47:44:99:0D:4A:D5:DF:17:82:35:B8:6B:67:AF:9F:D7:A1:77:B6:43:87:6A:83:9B"}}},"request":{"raw":"GET /180DAY-4b2eb340e137a14c3e8db1e189c57abb/256/256/Image/Png/noFilter HTTP/1.1\r\nHost: tr.rbxcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://alterhub.site/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/Png\r\ncontent-length: 122806\r\ndate: Fri, 28 Aug 2026 06:42:01 GMT\r\nserver: public-gateway\r\ncache-control: no-cache\r\nedge-cache-tag: 180DAY-4b2eb340e137a14c3e8db1e189c57abb\r\nstrict-transport-security: max-age=31536000\r\nx-frame-options: SAMEORIGIN\r\nroblox-machine-id: 2c07ce83-71e4-a7a4-250e-e92cb203c37e\r\nx-envoy-attempt-count: 1\r\nx-envoy-upstream-service-time: 221\r\nx-terms-message: Terms apply https://rblx.co/TOU.\r\nx-ratelimit-limit: 300000, 300000;w=60, 70000\r\nx-ratelimit-remaining: 299700, 70000\r\nx-ratelimit-reset: 59, 0\r\nx-ingress-proxy: true\r\nx-roblox-edge: c080\r\nreport-to: {\"group\":\"network-errors\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://ncs.roblox.com/upload\"}]}\r\nnel: {\"report_to\":\"network-errors\",\"max_age\":604800,\"success_fraction\":0,\"failure_fraction\":0.05,\"response_headers\":[\"Rbx-Cdn-Provider\",\"vary\"]}\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 4888a1b692b693505c9036bc998623cc.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: mIEnPe66OELPUKDy4VFVx-RX2O34ROnjnvKNroUnQrrEY3Dz90w33g==\r\nage: 2591230\r\nrbx-cdn-provider: aws\r\ntiming-allow-origin: *\r\nvary: Origin\r\nserver-timing: cdn-cache-hit,cdn-pop;desc=\"ARN53-P4\",cdn-rid;desc=\"mIEnPe66OELPUKDy4VFVx-RX2O34ROnjnvKNroUnQrrEY3Dz90w33g==\",cdn-hit-layer;desc=\"EDGE\",cdn-downstream-fbl;dur=3\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":122806,"size_decoded":124136,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGB, non-interlaced","md5":"e9ba496d299da3519934e10eaea84b6d","sha1":"d1691a793e47eabb980b4f837bb3410fd07c504c","sha256":"f1a5f89644e1368015887242137ac9d80c923eeca5a597f3cf67abb527243782","sha512":"3a943dcba6e1b8936ed81eb2c6b41483c17d46487d3b3306cd762706b8133fb9aa1e7f12fe13acf268b29924816dc23247b7ec83a030894a9ef94a4e7d81c64a","ssdeep":"3072:fzAY8/jncnsNKZyHP79ocNoODCh41YDIO+u:rxScsNKoT2eDCiQIO+u","tlshash":"43c312ce2276b3c482b9b7a39aed21c02d13511386fcd52149ded5eebd177a0b5f9088","first_seen":"2026-09-27T06:30:15.056543Z","last_seen":"2026-09-27T06:30:57.010774Z","times_seen":2,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":8,"send":0,"wait":50,"receive":1,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aqml.org/16/cad9ea51fc7060d2582c3cdc3bde7b1f","fqdn":"aqml.org","domain":"aqml.org","tld":"org"},"ip":{"addr":"172.67.215.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ads.alterhub.site/promoframe#k=d99b65ef2f1e54f34f14ebb6236adcad\u0026w=468\u0026h=60\u0026i=u1_v62o5x","date":"2026-09-27T06:29:12.757Z","timestamp":1790490552757,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aqml.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Sep 2026 13:36:46 GMT","end":"Tue, 15 Dec 2026 14:36:42 GMT"},"fingerprint":{"sha1":"34:A6:72:5B:20:45:F1:E6:6E:20:09:20:A2:76:92:39:84:2C:2B:B9","sha256":"B6:D9:25:0C:FB:DC:E8:14:EF:A2:03:18:05:20:55:36:F0:E5:FE:E0:01:2F:9E:86:6C:32:E1:FE:AB:FB:92:68"}}},"request":{"raw":"GET /16/cad9ea51fc7060d2582c3cdc3bde7b1f HTTP/1.1\r\nHost: aqml.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 27 Sep 2026 06:29:12 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nset-cookie: uidm=01a0e18d-a9eb-7931-b899-719bba1d8734_1; Path=/; Expires=Wed, 24 Sep 2036 06:29:12 GMT; Secure; SameSite=None\n__cf_bm=9UWefSsF86c310FKDRlZZ6PsXzuAIzVSVLCTrWETBt0-1790490552.7704103-1.0.1.1-dwjQsq1SJgmKoYw7H7xuF0_lxgSiLLzwj7X4Ljm8vgaeRzIcMbDtSdaaDBS_GyPyn_pqWSj6pFBviPGfp4fR1bAbC15PguuaKPziKgcdfwMNPuBDH7zUB1Vx2gWmsEf2; HttpOnly; SameSite=None; Secure; Path=/; Domain=aqml.org; Expires=Sun, 27 Sep 2026 06:59:12 GMT\r\naccept-ch: X-Operamini-Phone-Ua,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Model,Device-Stock-Ua,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Mobile,X-Device-User-Agent\r\ncontent-encoding: gzip\r\nlink: \u003chttps://aqml.org\u003e; rel=preconnect; crossorigin, \u003chttps://aqml.org\u003e; rel=dns-prefetch, \u003chttps://static.nresystems.com\u003e; rel=preconnect; crossorigin, \u003chttps://static.nresystems.com\u003e; rel=dns-prefetch\r\nvary: Accept-Encoding, Origin\r\nx-envoy-upstream-service-time: 4\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: no-cache, max-age=0, private, no-cache\r\nx-request-id: 2eec9862b43603bb089f86e189b1345a\r\npragma: no-cache\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,X-Forwarded-For,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1728000\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a41873e2c8a6120a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"uidm","value":"01a0e18d-a9eb-7931-b899-719bba1d8734_1","quoted":false,"path":"/","expires":"2036-09-24T06:29:12Z","raw_expires":"Wed, 24 Sep 2036 06:29:12 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uidm=01a0e18d-a9eb-7931-b899-719bba1d8734_1; Path=/; Expires=Wed, 24 Sep 2036 06:29:12 GMT; Secure; SameSite=None"},{"name":"__cf_bm","value":"9UWefSsF86c310FKDRlZZ6PsXzuAIzVSVLCTrWETBt0-1790490552.7704103-1.0.1.1-dwjQsq1SJgmKoYw7H7xuF0_lxgSiLLzwj7X4Ljm8vgaeRzIcMbDtSdaaDBS_GyPyn_pqWSj6pFBviPGfp4fR1bAbC15PguuaKPziKgcdfwMNPuBDH7zUB1Vx2gWmsEf2","quoted":false,"path":"/","domain":"aqml.org","expires":"2026-09-27T06:59:12Z","raw_expires":"Sun, 27 Sep 2026 06:59:12 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=9UWefSsF86c310FKDRlZZ6PsXzuAIzVSVLCTrWETBt0-1790490552.7704103-1.0.1.1-dwjQsq1SJgmKoYw7H7xuF0_lxgSiLLzwj7X4Ljm8vgaeRzIcMbDtSdaaDBS_GyPyn_pqWSj6pFBviPGfp4fR1bAbC15PguuaKPziKgcdfwMNPuBDH7zUB1Vx2gWmsEf2; HttpOnly; SameSite=None; Secure; Path=/; Domain=aqml.org; Expires=Sun, 27 Sep 2026 06:59:12 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9788,"size_decoded":6264,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9788), with no line terminators","md5":"911d147212c096dc7ddfd4b25ed730a7","sha1":"0eca9da3e09292c4855ff0099ac032e3d69e06a8","sha256":"50e9cd24367c0f4e6dbdd76e3de8a1957cd1f07ea0e02798018b64eeb5c299c6","sha512":"7083dcf35c5c747f07bab45f29a1265ad1bab47bf2dcbbd133a121600636f2997a653ca6bc8fbccce5870da71055b28c4952581079ecc2053f3d9e2926fb36e2","ssdeep":"192:Uou1f2fBpS++cJju6r/+ixFAMPE4UNzISaJpbjVYI9Bc5HHUATN6BdPwKnl9W7nF:8BYS++0u6KOYLNzILJpb5EnUAR6BaAnM","tlshash":"5012849c7e40add85ba4a9fb75778a2512f71c01b20cc0a8f03a2c64bd42797b4bb175","first_seen":"2026-09-27T06:30:15.058179Z","last_seen":"2026-09-27T06:30:56.894729Z","times_seen":2,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":2,"connect":1,"send":0,"wait":61,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"afders.org/3/1964b0264f479cf1ad7ae7082f5db52e?uidm=01a0e18d-aa54-75d6-8bfe-24d1a57a1305_1","fqdn":"afders.org","domain":"afders.org","tld":"org"},"ip":{"addr":"104.21.67.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ads.alterhub.site/promoframe#k=3ae6276d5f69eb697421a09960b7da53\u0026n=28128394\u0026i=n3_ke4tgo","date":"2026-09-27T06:29:12.930Z","timestamp":1790490552930,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afders.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Sep 2026 13:34:44 GMT","end":"Tue, 15 Dec 2026 14:34:40 GMT"},"fingerprint":{"sha1":"7A:92:9A:74:98:BB:CF:88:2A:BD:0B:26:71:9B:9A:F3:95:83:01:4C","sha256":"47:5D:69:65:F3:FE:34:4C:29:B8:D4:0E:EE:3F:82:6A:2D:80:CC:43:F1:EA:3B:18:98:DF:BA:E5:D7:79:87:38"}}},"request":{"raw":"GET /3/1964b0264f479cf1ad7ae7082f5db52e?uidm=01a0e18d-aa54-75d6-8bfe-24d1a57a1305_1 HTTP/1.1\r\nHost: afders.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nOrigin: https://ads.alterhub.site\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uidm=01a0e18d-aa1e-7290-835a-05820375040e_1; __cf_bm=E.kpiN_tj8vCp_KnIHDU.orChpHJXA2krs.ZFBCUMdg-1790490552.8087704-1.0.1.1-dvJkw6z0LrAU8qRhbDPxTmy.g5FAGkt6BUndPfuLI0t03qnEghiew.ibnPQwnpjPeftp5uwteKXaQ1s6h84qCfDcnt9qM3qKuqpLdIGQy8cklBLncfcxTdq8JhH8Y5ld\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 27 Sep 2026 06:29:12 GMT\r\ncontent-type: text/plain\r\nserver: cloudflare\r\naccept-ch: Sec-Ch-Ua-Platform,Sec-Ch-Ua-Mobile,Device-Stock-Ua,X-Device-User-Agent,X-Operamini-Phone-Ua,Sec-Ch-Ua,Sec-Ch-Ua-Model,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version\r\nvary: Accept-Encoding, Origin\r\nx-envoy-upstream-service-time: 11\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: no-cache, max-age=0, private, no-cache\r\nx-request-id: a633c2aa75f75fde4da0b5976aabe729\r\npragma: no-cache\r\naccess-control-allow-origin: https://ads.alterhub.site\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,X-Forwarded-For,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1728000\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: gzip\r\ncf-ray: a41873e3df6756c3-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":76,"size_decoded":1210,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"e89d9e022ffe13e567aed5e21f7cadbe","sha1":"2fa149110fe1987c4c011a2a6bd6f2fc0805696a","sha256":"3b3cc8dce8bb0e4a95f482103f5da8dede246a5160adb383b0612e0db2b2b484","sha512":"80e0635e1735298a55222d5844bd4b7419a0e955fb755e3ff498d98f55bb4ff05ac2487bfe60f44630e53a304846dff9f9395fa3553f936deef41b2b7b9e8f29","ssdeep":"","tlshash":"cea024f0030c17034d4d34114c1510c0015105df1030130fc0430c443107415d73417c","first_seen":"2026-09-27T06:30:15.059871Z","last_seen":"2026-09-27T06:30:15.059871Z","times_seen":1,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bicea.org/10/H4sIAAAAAAAC_4xTTYgcxRfvzn9vOfxBQrwozkFEwelUf860OQTXzO5mszs7bnadJIJDdX3M1kx_pau6Z3bwkA_x4iXePIj0vtlkIYiYkx8XZVbwsCA4F5lDcvEuguBNkN0diN58UO9V8St4v1f1-324lz_VDMjxrLWejEQY4guugSqvtkVMk4GsNLcqJjLQxUpbxJ5zsTI8Tlnxhmk7BnqtssxIP7lgIRMhE5mVJZExngwvnKAg0s990_CR4ViG6TowzP59lrkOEutAi6facyDo9P-_8ndBkAnE0ZeXmeyrJH29EeUhVkkGBT3YjvtxMogherblmQ48PpjfhkRONe2TM5DEB_MJICn2jyeAQEy1M-efQBAfzGlCUDw4ZRqEwGII6FkYFBNg4QQEngBJ7oGgP2sAhEJzA-LoYTPJBnj3FMXH6FRb-PMPEIOptvDkHMTRF4uhGFauJWGuRBJLGPISxHACojuBND8ENToDYnAIRN0FQX_S0PNnIY4erSSF6FcKlvVB0NnLyMSImXVaxdh1qjWXetV6wFnVcqiJ3Ro2beSePJTgE8BSh_x4CR1yrkOe6hDRWcVBdYeY2Pa4T0kNOdhxKAuQX7cQwj6pQU7ugKD3gWR393NBo9kr_6VvxzrodAjvBNHsR-nX2nywVr_auBwOVi3S2lxfaTaWfOX2Ws2ddCs3Y8WvknTJI1Wz5iPHR65rGXXXci3PqZoGMkzDrA5rHcXXdjZv-AlfbzvLhHaGoWGsuP71a3z9xnZyxfNarTV_rbFSdIL29vLbxXZr0G3vNNH13mJvyV_ewF3vHbpEVe-WuRMsopuL9lb9ipl60WprG7cdGTUau5FT3GxeXopWG_bqqCd33npzq4l2N5ompNlt6Iv7IKkOUmlQ0PIBDaUly4c0lHlgzqs1r3Y5TlR3Dz9IVJfFGuDsPmS03BfpLXkPiPrfeMTl1XFynHCgyjEOaDkWVGmQ3frn9xLmVGumjas-Y7xK6x52TIopDqx9LlVe7qVza-hPyAb02azi-7bDbczdwGWOyeseI9SqEeLgmkXrlg1SlCCkdiKLkZhqm78UkIqpVr35GQT4EGR4CES8ADh_EfCgBLxTwih-TBIq-K4kmUiVNIa7I6BJCalaALWrA1P6XvhUOzfe3Fr8_kT23U9jYOTo0l_fvudeev83IFkJaVZCT_ygQTe883gjVSISI3zsg2sKK7YAWEy1sx-9BERMtfOP4hNLXqyuAUlvg0yPLh3aJzEOZTrVSLYAMtEgSHUIhQYhO9LmATgoQbJnzQN29N3vp9ie_AC6mQ5BqI-DMNP3gzALPz7lK8Ws4lqB7dXrHuMe5Ta1LZv6LmK-g33P8R0XlJz2vv7qm78HAIZTqUcZBQAA","fqdn":"bicea.org","domain":"bicea.org","tld":"org"},"ip":{"addr":"104.21.86.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ads.alterhub.site/promoframe#k=3ae6276d5f69eb697421a09960b7da53\u0026n=28128394\u0026i=n3_ke4tgo","date":"2026-09-27T06:29:13.786Z","timestamp":1790490553786,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bicea.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Sep 2026 14:22:10 GMT","end":"Tue, 15 Dec 2026 15:22:04 GMT"},"fingerprint":{"sha1":"B9:2F:CB:73:40:D7:7C:69:4A:C6:22:3F:45:F8:CA:8D:35:85:B1:C6","sha256":"1A:05:85:45:D6:5A:93:DC:D9:59:BF:16:3B:1F:F2:B3:07:D5:B3:3C:34:CF:6D:7D:8D:BC:6F:D5:88:E3:95:59"}}},"request":{"raw":"GET /10/H4sIAAAAAAAC_4xTTYgcxRfvzn9vOfxBQrwozkFEwelUf860OQTXzO5mszs7bnadJIJDdX3M1kx_pau6Z3bwkA_x4iXePIj0vtlkIYiYkx8XZVbwsCA4F5lDcvEuguBNkN0diN58UO9V8St4v1f1-324lz_VDMjxrLWejEQY4guugSqvtkVMk4GsNLcqJjLQxUpbxJ5zsTI8Tlnxhmk7BnqtssxIP7lgIRMhE5mVJZExngwvnKAg0s990_CR4ViG6TowzP59lrkOEutAi6facyDo9P-_8ndBkAnE0ZeXmeyrJH29EeUhVkkGBT3YjvtxMogherblmQ48PpjfhkRONe2TM5DEB_MJICn2jyeAQEy1M-efQBAfzGlCUDw4ZRqEwGII6FkYFBNg4QQEngBJ7oGgP2sAhEJzA-LoYTPJBnj3FMXH6FRb-PMPEIOptvDkHMTRF4uhGFauJWGuRBJLGPISxHACojuBND8ENToDYnAIRN0FQX_S0PNnIY4erSSF6FcKlvVB0NnLyMSImXVaxdh1qjWXetV6wFnVcqiJ3Ro2beSePJTgE8BSh_x4CR1yrkOe6hDRWcVBdYeY2Pa4T0kNOdhxKAuQX7cQwj6pQU7ugKD3gWR393NBo9kr_6VvxzrodAjvBNHsR-nX2nywVr_auBwOVi3S2lxfaTaWfOX2Ws2ddCs3Y8WvknTJI1Wz5iPHR65rGXXXci3PqZoGMkzDrA5rHcXXdjZv-AlfbzvLhHaGoWGsuP71a3z9xnZyxfNarTV_rbFSdIL29vLbxXZr0G3vNNH13mJvyV_ewF3vHbpEVe-WuRMsopuL9lb9ipl60WprG7cdGTUau5FT3GxeXopWG_bqqCd33npzq4l2N5ompNlt6Iv7IKkOUmlQ0PIBDaUly4c0lHlgzqs1r3Y5TlR3Dz9IVJfFGuDsPmS03BfpLXkPiPrfeMTl1XFynHCgyjEOaDkWVGmQ3frn9xLmVGumjas-Y7xK6x52TIopDqx9LlVe7qVza-hPyAb02azi-7bDbczdwGWOyeseI9SqEeLgmkXrlg1SlCCkdiKLkZhqm78UkIqpVr35GQT4EGR4CES8ADh_EfCgBLxTwih-TBIq-K4kmUiVNIa7I6BJCalaALWrA1P6XvhUOzfe3Fr8_kT23U9jYOTo0l_fvudeev83IFkJaVZCT_ygQTe883gjVSISI3zsg2sKK7YAWEy1sx-9BERMtfOP4hNLXqyuAUlvg0yPLh3aJzEOZTrVSLYAMtEgSHUIhQYhO9LmATgoQbJnzQN29N3vp9ie_AC6mQ5BqI-DMNP3gzALPz7lK8Ws4lqB7dXrHuMe5Ta1LZv6LmK-g33P8R0XlJz2vv7qm78HAIZTqUcZBQAA HTTP/1.1\r\nHost: bicea.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uidm=01a0e18d-aa54-75d6-8bfe-24d1a57a1305_2; __cf_bm=s97WfwL8KEDlwJ2cPRMHNEF9t5jPNhpTu1ntfKcpF6c-1790490552.8525264-1.0.1.1-x7_tfLhRY9ofMW4Gcd_xl..H59XSfMYUoI66PPL9LEHv_bWUGQvUPwgWhN0XjBjF9GOag6VdFdtjq1hbB0ZB3T8I1p6mJPUaW4smEEym4vZNDFmJE3JzjshCATN0yON1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl31286095=1; slec9934f3af5b5e41f86ecd27cc4a72d823=[6790254]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 27 Sep 2026 06:29:13 GMT\r\ncontent-type: image/gif\r\ncontent-length: 7\r\nserver: cloudflare\r\naccept-ch: Sec-Ch-Ua-Platform,Sec-Ch-Ua-Mobile,X-Device-User-Agent,X-Operamini-Phone-Ua,User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Model,Device-Stock-Ua,X-Ucbrowser-Device-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version-List\r\nvary: Accept-Encoding, Origin\r\nx-envoy-upstream-service-time: 3\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: no-cache, max-age=0, private, no-cache\r\nx-request-id: 18b2e20c6538e771ca24a4e11e3f667f\r\npragma: no-cache\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,X-Forwarded-For,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1728000\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a41873e92d9232fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T20:43:33.933419Z","times_seen":19037193,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alterhub.site/cdn-cgi/challenge-platform/h/b/scripts/jsd/d76008a69eab/main.js?","fqdn":"alterhub.site","domain":"alterhub.site","tld":"site"},"ip":{"addr":"104.21.42.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://alterhub.site/","date":"2026-09-27T06:29:11.899Z","timestamp":1790490551899,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alterhub.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 00:28:34 GMT","end":"Sat, 07 Nov 2026 01:28:30 GMT"},"fingerprint":{"sha1":"CC:30:2C:31:6D:59:8D:61:CD:11:F9:93:CE:16:C0:86:EE:F5:4A:5A","sha256":"FD:96:F8:0E:8C:08:48:55:A0:F2:69:BB:EA:8B:3A:98:9A:71:49:5F:30:C6:90:E1:9F:D3:7F:54:A3:38:1A:B6"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/d76008a69eab/main.js? HTTP/1.1\r\nHost: alterhub.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\ncontent-encoding: zstd\r\ndate: Sun, 27 Sep 2026 06:29:11 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a41873dd6b2e0b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21108,"size_decoded":10139,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (21108), with no line terminators","md5":"b8bb2015016149ddf723fa609999ab8d","sha1":"d04af78e49707dd0dfdb26425ba3bf7f613c52ca","sha256":"614b01b220a20801b1d078e6933a4ac813fac0c1b73555438c5345a0345fe4b9","sha512":"ac154038b30aa79b76df2fd7ac74d3a10a03917c028b2aafa95809d83df76c4385b8646a4176a861df9ebabbe0cd067a19d4d8309f76fb9723c113f95dbb9bba","ssdeep":"384:Khm1KapZk63Rf6Onr59MoXlHSNPerk43GEwUAEwHvyt5Nt82SfvKCmaPdL7lq8zh:2mIgkk56E59MoXGuGfUfwHvmEfPZRq8F","tlshash":"2292a3d6bac6b0c8d31b617500af71cab67a6c8440ad090ac972d0f87f79757962fe4c","first_seen":"2026-09-27T06:30:15.061273Z","last_seen":"2026-09-27T06:30:15.061273Z","times_seen":1,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ads.alterhub.site/promoframe#k=fdfdd92a59e588025342002253695a24\u0026w=468\u0026h=60\u0026i=u2_h3rpj0","fqdn":"ads.alterhub.site","domain":"alterhub.site","tld":"site"},"ip":{"addr":"104.21.42.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://alterhub.site/","date":"2026-09-27T06:29:12.176Z","timestamp":1790490552176,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alterhub.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 00:28:34 GMT","end":"Sat, 07 Nov 2026 01:28:30 GMT"},"fingerprint":{"sha1":"CC:30:2C:31:6D:59:8D:61:CD:11:F9:93:CE:16:C0:86:EE:F5:4A:5A","sha256":"FD:96:F8:0E:8C:08:48:55:A0:F2:69:BB:EA:8B:3A:98:9A:71:49:5F:30:C6:90:E1:9F:D3:7F:54:A3:38:1A:B6"}}},"request":{"raw":"GET /promoframe HTTP/1.1\r\nHost: ads.alterhub.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://alterhub.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=Y3_9Q5s.VO85OlRAqFfB2dTrk0CywSN3jGmQQoIUouE-1790490552-1.2.1.1-0xos2XuR8es9GyM5OWDs6icaJ8unVLMx3YGIrYMXJ7uZmKFCwKUPA2X_EE69pPWzGsd9UQZAum76gnam6AJqqAvKuHLcsw3LcAWcoHJSPilD3DSkTdLv3V3fDXGE1uymM2V31WOv1fiq222__oCOoNBxG0cdwugzeh2bVOHGhsxmITdW_ANygmKCmd077CP_O3YgqnZRe7rswHmUuGXQAkwCPPRg6Pr_2se0001xmCfEPY8VmAYo5meDAQ.M4LZ.rQoq1iZpf_Yk37IueLxOcWhGo_mtxQVhO4wjcUuvmESJty_3CEpNe5uFUo9bwFJsjx6yT.nP2V5GYTwALmA3MWiwpXPHQ.Gelpx8LkCsF0h3dkTPpGy7hlxutFfo2MmkPEH5kl1q_2ojVOMlr3vZ8AUBtJ7eEeqYUIQWqo2d2hI\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\nage: 753996\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"promoframe\"\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; frame-src 'self' https: data: blob:; media-src 'self' https: data: blob:; connect-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self' https:; frame-ancestors https://alterhub.site https://www.alterhub.site;\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sun, 27 Sep 2026 06:29:12 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 18 Sep 2026 13:02:35 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::7h8q7-1790490552201-986f70019e5d\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mZ%2FPZ3ruLnW4NwaeIbLp6cT9LlNsBx9VDOqUPnVdZGuY0Z%2FaVpTqoUvo9jUUsVPl%2FBEPAne7jkbRd64D0f0ixNWV77ARF8pF9T4Z1%2BZ%2FbJ2lv2QwC4nAa3e8b2Iq9B8xxEQIXA%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: a41873df1b600b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3705,"size_decoded":3310,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"1e0d3faf8d68838811acc2295bc4c8bf","sha1":"099464ea459114da3161e81c364578a8e332b3db","sha256":"f9230bb5c891635d4c3605b3a6c4061ba69d39e336e6ffc88aacbde15bf3676e","sha512":"8f7ba179af9896e4c71ba80e5ae5d3bc62d9ef20c472c50e937f85c356420f92f0fd0fb55aa33abdaecca740a60473bb380fcf8710ca8ea66327946d38c494d1","ssdeep":"","tlshash":"cc71943f2ea122b8755302f53abfa1443336c12a6111d9a0bcaee258ffd0e155427fd8","first_seen":"2026-09-27T06:30:15.062796Z","last_seen":"2026-09-27T06:30:56.861643Z","times_seen":2,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aqml.org/16/98093f52b5da2db2f9e87d14997d30f3","fqdn":"aqml.org","domain":"aqml.org","tld":"org"},"ip":{"addr":"172.67.215.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ads.alterhub.site/promoframe#k=fdfdd92a59e588025342002253695a24\u0026w=468\u0026h=60\u0026i=u2_h3rpj0","date":"2026-09-27T06:29:12.811Z","timestamp":1790490552811,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aqml.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Sep 2026 13:36:46 GMT","end":"Tue, 15 Dec 2026 14:36:42 GMT"},"fingerprint":{"sha1":"34:A6:72:5B:20:45:F1:E6:6E:20:09:20:A2:76:92:39:84:2C:2B:B9","sha256":"B6:D9:25:0C:FB:DC:E8:14:EF:A2:03:18:05:20:55:36:F0:E5:FE:E0:01:2F:9E:86:6C:32:E1:FE:AB:FB:92:68"}}},"request":{"raw":"GET /16/98093f52b5da2db2f9e87d14997d30f3 HTTP/1.1\r\nHost: aqml.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 27 Sep 2026 06:29:12 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nset-cookie: uidm=01a0e18d-aa16-78df-a20d-226cf6d44687_1; Path=/; Expires=Wed, 24 Sep 2036 06:29:12 GMT; Secure; SameSite=None\n__cf_bm=E1ZextEHP_97anmaALgoaAV85YsqE9zgEvmI9fULQes-1790490552.811763-1.0.1.1-kWsLSMkEMSTT4pI2bFOZ2aDHyx6Z8gKVpQwNuUcF_iSb4eFdW_4zvw4ZWAkmMY3Uoz.Pe7C1IkMSaLvEJnO9YWfRLtVWKKZGYP0fDbCA17KqHnrMj7MwlxJRgIuXq.0M; HttpOnly; SameSite=None; Secure; Path=/; Domain=aqml.org; Expires=Sun, 27 Sep 2026 06:59:12 GMT\r\naccept-ch: X-Operamini-Phone-Ua,Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Platform,Device-Stock-Ua,X-Device-User-Agent\r\ncontent-encoding: gzip\r\nlink: \u003chttps://aqml.org\u003e; rel=preconnect; crossorigin, \u003chttps://aqml.org\u003e; rel=dns-prefetch, \u003chttps://static.nresystems.com\u003e; rel=preconnect; crossorigin, \u003chttps://static.nresystems.com\u003e; rel=dns-prefetch\r\nvary: Accept-Encoding, Origin\r\nx-envoy-upstream-service-time: 7\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: no-cache, max-age=0, private, no-cache\r\nx-request-id: 1ee9b4c789c74e3a420cfed14d314f0d\r\npragma: no-cache\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,X-Forwarded-For,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1728000\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a41873e31948120a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"uidm","value":"01a0e18d-aa16-78df-a20d-226cf6d44687_1","quoted":false,"path":"/","expires":"2036-09-24T06:29:12Z","raw_expires":"Wed, 24 Sep 2036 06:29:12 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uidm=01a0e18d-aa16-78df-a20d-226cf6d44687_1; Path=/; Expires=Wed, 24 Sep 2036 06:29:12 GMT; Secure; SameSite=None"},{"name":"__cf_bm","value":"E1ZextEHP_97anmaALgoaAV85YsqE9zgEvmI9fULQes-1790490552.811763-1.0.1.1-kWsLSMkEMSTT4pI2bFOZ2aDHyx6Z8gKVpQwNuUcF_iSb4eFdW_4zvw4ZWAkmMY3Uoz.Pe7C1IkMSaLvEJnO9YWfRLtVWKKZGYP0fDbCA17KqHnrMj7MwlxJRgIuXq.0M","quoted":false,"path":"/","domain":"aqml.org","expires":"2026-09-27T06:59:12Z","raw_expires":"Sun, 27 Sep 2026 06:59:12 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=E1ZextEHP_97anmaALgoaAV85YsqE9zgEvmI9fULQes-1790490552.811763-1.0.1.1-kWsLSMkEMSTT4pI2bFOZ2aDHyx6Z8gKVpQwNuUcF_iSb4eFdW_4zvw4ZWAkmMY3Uoz.Pe7C1IkMSaLvEJnO9YWfRLtVWKKZGYP0fDbCA17KqHnrMj7MwlxJRgIuXq.0M; HttpOnly; SameSite=None; Secure; Path=/; Domain=aqml.org; Expires=Sun, 27 Sep 2026 06:59:12 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9788,"size_decoded":6252,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9788), with no line terminators","md5":"7f00aeee01c574914fb05a023a19587f","sha1":"82aec587c353da58107f6f8a896630b08f91157b","sha256":"95679f4ecb907686ca36d8589ad0a1a4aaf254b316ecee3bd877877c719849d7","sha512":"a1104db9dc7ea61c17bff6fb6abdafb8e9926ad69508977b850f216a67ec86ef13088678acc1f011370766ab845b6517430e80ba7898bc6e0278f9e32fb532d7","ssdeep":"192:Uou1f2fBpS++cJju6r/+ixFAMPE4h2zISa5WbjVYI9Bc5HHUATN6BdPwKnl9W7nF:8BYS++0u6KOY82zILgb5EnUAR6BaAnWR","tlshash":"4b12849c7e40add85ba4aafb75778a6512f71d01b20cc0acf03a2c64bd42396b4bf175","first_seen":"2026-09-27T06:30:15.064154Z","last_seen":"2026-09-27T06:30:56.906971Z","times_seen":2,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sleepoverlimitprofound.com/ren.gif?sid=H4sIAAAAAAAC_1RSv28cxR-d9ff0bSIRCUXQUGxBAQifZ_f29m4JVcQviWBDEhQJqpmdWTO5vZ3NzOzd-SqHIGhdUECD1u_sWCIIkYYfokFnOhBStolcxBT5D0ACSnT2CcNI8_mhN5p5n_fmw93qmLRRsaM339BTledsrdum_jPXVSH02Prr1_yAtulF_7oq4uiiP1kEM3oh6ERt-qz_qkwHei2kAaUBDfxXlJGZnqydoFDlF0nQTmg7CttBN8LE_Le3lQfLPIjRMXkcSjTnH2XvQqVzFMOvXpJ24HT5_MvDKmdOG4zEwdvFoNDjAsOzMjMesuJgeRraNoR8sgJdHCwngB7tLSYAVw1ZeeIheHGwpAk-2j9lynPIAlycw3g0h8znUGyOVN-GEvcJkAqsb6AY3lnXZsy2TlG2QBvS-uN3qHFDWg8voBh-eSlXE_-qziundGExyWqoyRxqc46yOoSbrkCND5G696HEL4Q-eQ7F8PPX9EgN_JE0AyhRn2igsjmY9VAttvJQZR6q0sNQHPkR7UdpwDpxloi0RyMWRUJymvRDSlmS9lClt6DEDlKzjdJsY6B2YIUH6xrivbWNkaj3RW5DW98Rua14sMzhMnfqmXabu2xfu01ZEDCzAyPqPVXetLeRuv_Nppl9faYXgXFXzxgX9UwJR2BuHj1NA0Zl0BerjId0tdcNo1UWcLmaBBnv9JIkjHvZXmZdVe-WS--9u3f_xEAe-R0m47AXi24WJ5LHSS8KA0aTJKa8J1i3A6tqKLtyIs5UNeTKgxFK1ZDVdz4DZ4ew-SFS9RRYFYCNa7D3akyLe6kWKtuyqVGls-3J1hRC1yhdC27Lg3RkNz8mF2ZXrl364cTXy8VHkOlPZLmQmhqlqXFD_Uiwmd-6t1E6NVRTtjD6qmNO_h9M3d_4C6lqyGMPvj75cc99-j3Schu2_OemWW7LhshHBlYT8LKFXBHk8uwpxmvYf_X8rN61H2DTtMDz1oznprXHc5N_3JDMnG_I5f5vDXnx159PyVt15HdD3on7_Vhmscg6ohN2RNKlMolYEkdJ1IWzzY1vv_nu7wEAHj-GqAcEAAA=","fqdn":"sleepoverlimitprofound.com","domain":"sleepoverlimitprofound.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ads.alterhub.site/promoframe#k=3ae6276d5f69eb697421a09960b7da53\u0026n=28128394\u0026i=n3_ke4tgo","date":"2026-09-27T06:29:13.232Z","timestamp":1790490553232,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sleepoverlimitprofound.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 04:20:18 GMT","end":"Tue, 24 Nov 2026 04:20:17 GMT"},"fingerprint":{"sha1":"25:9A:58:CA:68:4D:EC:36:88:A4:BC:7F:2C:41:BE:B7:58:63:32:E3","sha256":"08:E4:A1:17:A8:1B:17:9D:84:10:F1:9B:37:A3:57:FE:8C:98:BA:9C:11:0D:A1:97:5C:AA:71:F0:6A:4A:28:5E"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_1RSv28cxR-d9ff0bSIRCUXQUGxBAQifZ_f29m4JVcQviWBDEhQJqpmdWTO5vZ3NzOzd-SqHIGhdUECD1u_sWCIIkYYfokFnOhBStolcxBT5D0ACSnT2CcNI8_mhN5p5n_fmw93qmLRRsaM339BTledsrdum_jPXVSH02Prr1_yAtulF_7oq4uiiP1kEM3oh6ERt-qz_qkwHei2kAaUBDfxXlJGZnqydoFDlF0nQTmg7CttBN8LE_Le3lQfLPIjRMXkcSjTnH2XvQqVzFMOvXpJ24HT5_MvDKmdOG4zEwdvFoNDjAsOzMjMesuJgeRraNoR8sgJdHCwngB7tLSYAVw1ZeeIheHGwpAk-2j9lynPIAlycw3g0h8znUGyOVN-GEvcJkAqsb6AY3lnXZsy2TlG2QBvS-uN3qHFDWg8voBh-eSlXE_-qziundGExyWqoyRxqc46yOoSbrkCND5G696HEL4Q-eQ7F8PPX9EgN_JE0AyhRn2igsjmY9VAttvJQZR6q0sNQHPkR7UdpwDpxloi0RyMWRUJymvRDSlmS9lClt6DEDlKzjdJsY6B2YIUH6xrivbWNkaj3RW5DW98Rua14sMzhMnfqmXabu2xfu01ZEDCzAyPqPVXetLeRuv_Nppl9faYXgXFXzxgX9UwJR2BuHj1NA0Zl0BerjId0tdcNo1UWcLmaBBnv9JIkjHvZXmZdVe-WS--9u3f_xEAe-R0m47AXi24WJ5LHSS8KA0aTJKa8J1i3A6tqKLtyIs5UNeTKgxFK1ZDVdz4DZ4ew-SFS9RRYFYCNa7D3akyLe6kWKtuyqVGls-3J1hRC1yhdC27Lg3RkNz8mF2ZXrl364cTXy8VHkOlPZLmQmhqlqXFD_Uiwmd-6t1E6NVRTtjD6qmNO_h9M3d_4C6lqyGMPvj75cc99-j3Schu2_OemWW7LhshHBlYT8LKFXBHk8uwpxmvYf_X8rN61H2DTtMDz1oznprXHc5N_3JDMnG_I5f5vDXnx159PyVt15HdD3on7_Vhmscg6ohN2RNKlMolYEkdJ1IWzzY1vv_nu7wEAHj-GqAcEAAA= HTTP/1.1\r\nHost: sleepoverlimitprofound.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; u_pl28027895=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 27 Sep 2026 06:29:13 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccept-ch: Sec-Ch-Ua-Mobile,Device-Stock-Ua,X-Device-User-Agent,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Platform,X-Operamini-Phone-Ua,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Model\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nvary: Origin\r\nx-envoy-upstream-service-time: 2\r\nHost: sleepoverlimitprofound.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 221ff55280f70422bc3ab244eb86a908\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T20:43:33.933419Z","times_seen":19037193,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-26","alert":"Sinkholed","trigger":"sleepoverlimitprofound.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:300,400,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ads.alterhub.site/promoframe#k=fdfdd92a59e588025342002253695a24\u0026w=468\u0026h=60\u0026i=u2_h3rpj0","date":"2026-09-27T06:29:14.496Z","timestamp":1790490554496,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:29 GMT","end":"Thu, 03 Dec 2026 19:23:28 GMT"},"fingerprint":{"sha1":"6C:5B:26:B8:8E:09:56:23:73:54:AC:B4:B3:91:75:07:31:24:4F:2D","sha256":"83:FB:4A:3F:88:06:C6:06:CC:A5:92:12:C8:C2:89:BD:56:6A:F9:0D:8F:49:3D:A0:83:3B:7E:53:A1:2C:69:05"}}},"request":{"raw":"GET /css?family=Roboto:300,400,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 27 Sep 2026 06:29:14 GMT\r\ndate: Sun, 27 Sep 2026 06:29:14 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16755,"size_decoded":2347,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"1936a90eef3ebd4c6b40eb59d72e164d","sha1":"4c698f8dc97e2e6186d46215e209aca1b1194a5d","sha256":"412d98c2f4410a048131a7d9362fb38456ce2ff67cd4731ea411708a7996a021","sha512":"07ad2431175e5566ae435738d94d4da3e96e4856a1fe1d5917c52474cab28808cd940fec0e8f75eb2f3d573e6fe8497fc12636ef4738d1b67e9144725192b580","ssdeep":"384:p9f59g9P9r9yU9/qY4+949Y9p9fM919W969yh9/qY4X9N9t949fd9k9D939yQ9/O:pDS99YURRuWDyjooYhREHPWP2ZZYQRVs","tlshash":"48721091041704009b834ce223cebf35fe1f52117142d0b5abfd9b6b9ddbca6526939d","first_seen":"2026-02-19T22:28:01.752187Z","last_seen":"2026-10-05T17:31:24.98813Z","times_seen":12391,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBGEe.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ads.alterhub.site/promoframe#k=3ae6276d5f69eb697421a09960b7da53\u0026n=28128394\u0026i=n3_ke4tgo","date":"2026-09-27T06:29:15.346Z","timestamp":1790490555346,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBGEe.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://ads.alterhub.site\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20556\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:53:32 GMT\r\nexpires: Tue, 21 Sep 2027 15:53:32 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:43 GMT\r\ncontent-type: font/woff2\r\nage: 484543\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20556,"size_decoded":21369,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20556, version 1.0","md5":"8feefe1e602c4b14ff414a77c3af2c2c","sha1":"e57daae78e76c8944e97edecfa656f8608e09db5","sha256":"2addf2d86d7a5778653b36d551e97a39da52855f82fac7461cfc1bd86d460aed","sha512":"893f9695ee887eed00246f24d4ec3e17ed64e2af4fab055f951795f50d34f3685aafcfbda943060a132c42169d2ef5c99d3db4fb901d57a09e712b4ff02afd92","ssdeep":"384:tpv6fcCujSd2+uNZ0omwRnNPqfWvx/CldKV8D2w9lQXL79Ci5q8S/USM2BHRpWp6:fxC0So4wRhx90K6ywQLIWS8S5By5AR","tlshash":"8792e056b288746a77e4e3ecc859ae6c65ed9b0f0c1b15b909322122f196c4734930f9","first_seen":"2026-02-19T22:35:21.90447Z","last_seen":"2026-10-11T19:39:41.228654Z","times_seen":49568,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tr.rbxcdn.com/180DAY-45e9d795ebbd95d6fa098f9c07e2803d/256/256/Image/Png/noFilter","fqdn":"tr.rbxcdn.com","domain":"rbxcdn.com","tld":"com"},"ip":{"addr":"143.204.238.74","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://alterhub.site/","date":"2026-09-27T06:29:12.517Z","timestamp":1790490552517,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rbxcdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 09 Sep 2026 00:00:00 GMT","end":"Thu, 25 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"75:D8:06:E9:90:C5:4F:78:20:E1:DC:B0:2D:7F:04:D1:43:36:17:D5","sha256":"3B:CA:A7:4C:D5:BA:BE:D5:47:44:99:0D:4A:D5:DF:17:82:35:B8:6B:67:AF:9F:D7:A1:77:B6:43:87:6A:83:9B"}}},"request":{"raw":"GET /180DAY-45e9d795ebbd95d6fa098f9c07e2803d/256/256/Image/Png/noFilter HTTP/1.1\r\nHost: tr.rbxcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://alterhub.site/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/Png\r\ncontent-length: 78487\r\ndate: Sat, 01 Aug 2026 16:18:36 GMT\r\nserver: public-gateway\r\ncache-control: no-cache\r\nedge-cache-tag: 180DAY-45e9d795ebbd95d6fa098f9c07e2803d\r\nstrict-transport-security: max-age=31536000\r\nx-frame-options: SAMEORIGIN\r\nroblox-machine-id: 6626da1d-8577-5f9e-c836-be64fad5f325\r\nx-envoy-upstream-service-time: 328\r\nx-terms-message: Terms apply https://rblx.co/TOU.\r\nx-ratelimit-limit: 300000, 300000;w=60, 70000\r\nx-ratelimit-remaining: 274572, 70000\r\nx-ratelimit-reset: 24, 0\r\nx-ingress-proxy: true\r\nx-roblox-edge: c080\r\nreport-to: {\"group\":\"network-errors\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://ncs.roblox.com/upload\"}]}\r\nnel: {\"report_to\":\"network-errors\",\"max_age\":604800,\"success_fraction\":0,\"failure_fraction\":0.05,\"response_headers\":[\"Rbx-Cdn-Provider\",\"vary\"]}\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 4888a1b692b693505c9036bc998623cc.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: dADFhreVuQ78v5qgIAcBSI6yx6QT0WM67tccjisZet0AmqyD8BBw6g==\r\nage: 4889435\r\nrbx-cdn-provider: aws\r\ntiming-allow-origin: *\r\nvary: Origin\r\nserver-timing: cdn-cache-hit,cdn-pop;desc=\"ARN53-P4\",cdn-rid;desc=\"dADFhreVuQ78v5qgIAcBSI6yx6QT0WM67tccjisZet0AmqyD8BBw6g==\",cdn-hit-layer;desc=\"EDGE\",cdn-downstream-fbl;dur=4\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":78487,"size_decoded":79790,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGB, non-interlaced","md5":"9d8bb5407723958a7f4f140d94a86569","sha1":"769937db420ab624d4ae009470c2373d0c64a00b","sha256":"6fa79057a7ed33f2157ba6f20b8574406e25a442f2900b4426daeb722a6b518d","sha512":"bfdff80b15e51d8b8ba468fb51c970060911c32c77b9a90615710edf4d120aa570d186aec5f1410e9e8e5dc16f5766d01de29eb9d7f1fe35e4e0570dcd1bfd8d","ssdeep":"1536:ZHgj2fUZIAhnBGIWyAME6FT9CPCCseciu9n/Vnl1sBi:ZvfUWiUItAmJ9ZCsFdL1sBi","tlshash":"987302007ac5c85778b22e1001a97bc59e817fe623fc45ba1b0edab9d42654d8fd3dc9","first_seen":"2026-09-27T06:30:15.066674Z","last_seen":"2026-09-27T06:30:56.913191Z","times_seen":2,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":2,"connect":8,"send":0,"wait":13,"receive":9,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tr.rbxcdn.com/180DAY-74837b2a65000dbb5ec9b8f452bafa09/256/256/Image/Png/noFilter","fqdn":"tr.rbxcdn.com","domain":"rbxcdn.com","tld":"com"},"ip":{"addr":"143.204.238.74","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://alterhub.site/","date":"2026-09-27T06:29:12.536Z","timestamp":1790490552536,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rbxcdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 09 Sep 2026 00:00:00 GMT","end":"Thu, 25 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"75:D8:06:E9:90:C5:4F:78:20:E1:DC:B0:2D:7F:04:D1:43:36:17:D5","sha256":"3B:CA:A7:4C:D5:BA:BE:D5:47:44:99:0D:4A:D5:DF:17:82:35:B8:6B:67:AF:9F:D7:A1:77:B6:43:87:6A:83:9B"}}},"request":{"raw":"GET /180DAY-74837b2a65000dbb5ec9b8f452bafa09/256/256/Image/Png/noFilter HTTP/1.1\r\nHost: tr.rbxcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://alterhub.site/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/Png\r\ncontent-length: 118435\r\ndate: Sat, 29 Aug 2026 23:54:27 GMT\r\nserver: public-gateway\r\ncache-control: no-cache\r\nedge-cache-tag: 180DAY-74837b2a65000dbb5ec9b8f452bafa09\r\nstrict-transport-security: max-age=31536000\r\nx-frame-options: SAMEORIGIN\r\nroblox-machine-id: 73e7a560-a828-ca0d-c6d2-f25e46b2159f\r\nx-envoy-attempt-count: 1\r\nx-envoy-upstream-service-time: 212\r\nx-terms-message: Terms apply https://rblx.co/TOU.\r\nx-ratelimit-limit: 300000, 300000;w=60, 70000\r\nx-ratelimit-remaining: 284209, 70000\r\nx-ratelimit-reset: 32, 0\r\nx-ingress-proxy: true\r\nx-roblox-edge: c080\r\nreport-to: {\"group\":\"network-errors\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://ncs.roblox.com/upload\"}]}\r\nnel: {\"report_to\":\"network-errors\",\"max_age\":604800,\"success_fraction\":0,\"failure_fraction\":0.05,\"response_headers\":[\"Rbx-Cdn-Provider\",\"vary\"]}\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 4888a1b692b693505c9036bc998623cc.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: s9a0sW8wdoNLGoY_xHhs22XZA3FRRD5O79LyuMLTEZ0i7hQJmuMZIA==\r\nage: 2442884\r\nrbx-cdn-provider: aws\r\ntiming-allow-origin: *\r\nvary: Origin\r\nserver-timing: cdn-cache-hit,cdn-pop;desc=\"ARN53-P4\",cdn-rid;desc=\"s9a0sW8wdoNLGoY_xHhs22XZA3FRRD5O79LyuMLTEZ0i7hQJmuMZIA==\",cdn-hit-layer;desc=\"EDGE\",cdn-downstream-fbl;dur=6\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":118435,"size_decoded":119765,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGB, non-interlaced","md5":"c60b8e0d6c82b68a1eff6782114883be","sha1":"0ab99ae6f1c552631e5da939a7604978655bfc88","sha256":"20fd6b4791af5dc9e3e8fb3b6ae42faffd199724fc3ba34276f4c7416820664c","sha512":"4f295efc0fcb6f799c477d5681d0bea6dc421bdc2ef6368c862d6479c429c7ab51e00493386e708749da290610f189ca5095a8ba56efa1c2c1545f5191cef6de","ssdeep":"3072:mnP+f5jYXZhySgSkuRmcfNyK+sJ5S+BV0+9KDIU4xjN:mP+feX5nmclV+mRb+94RN","tlshash":"e0c313c0d4a1b730851829d0c6097ebd15039b2036b56ed7390efbbc2e1939bcd9a67e","first_seen":"2026-09-27T06:30:15.068041Z","last_seen":"2026-09-27T06:30:56.896815Z","times_seen":2,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":44,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"protrafficinspector.com/stats","fqdn":"protrafficinspector.com","domain":"protrafficinspector.com","tld":"com"},"ip":{"addr":"63.189.55.98","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ads.alterhub.site/promoframe#k=d99b65ef2f1e54f34f14ebb6236adcad\u0026w=468\u0026h=60\u0026i=u1_v62o5x","date":"2026-09-27T06:29:12.753Z","timestamp":1790490552753,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"protrafficinspector.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 26 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A5:A0:EB:57:26:41:24:03:DD:F3:2D:91:FB:6B:49:B6:53:8B:5F:86","sha256":"82:7E:C7:50:5F:EC:61:E0:5F:7F:ED:2E:10:87:9B:31:A9:8F:4B:DF:E8:99:CC:2E:A1:13:31:E7:45:CE:89:25"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: protrafficinspector.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nOrigin: https://ads.alterhub.site\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 27 Sep 2026 06:29:12 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://ads.alterhub.site\r\nset-cookie: uid_id2=01a0e18d-a9ff-7f93-835a-abb00c352bc6:3:1; Path=/; Expires=Wed, 24 Sep 2036 06:29:12 GMT; Secure; SameSite=None\r\nvary: Origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"uid_id2","value":"01a0e18d-a9ff-7f93-835a-abb00c352bc6:3:1","quoted":false,"path":"/","expires":"2036-09-24T06:29:12Z","raw_expires":"Wed, 24 Sep 2036 06:29:12 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uid_id2=01a0e18d-a9ff-7f93-835a-abb00c352bc6:3:1; Path=/; Expires=Wed, 24 Sep 2036 06:29:12 GMT; Secure; SameSite=None"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40,"size_decoded":520,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"c1565cc77db47bb0c316ca8650cd7960","sha1":"8c2fdae4053233a623760f4e7e383807eee66cf8","sha256":"4a7a5ab8884cd95a2baddd59bdc68f5896ab3515c09ce32a3dbfefd03beb2af7","sha512":"d87ce7c61e8828c4599f3bbbcedf78adaca06858980a5b49acaf21f32abf20375879292ce362500e50f9a7aadee2cdf5dbfa37dad9c6cbfce3ab87a91dab93b2","ssdeep":"","tlshash":"dd90045c07350451311d31103f445d3c750d17333c7511444114c37054c543c01d40d3","first_seen":"2026-09-27T06:30:15.069307Z","last_seen":"2026-09-27T06:30:15.069307Z","times_seen":1,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":2,"connect":21,"send":0,"wait":21,"receive":0,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"protrafficinspector.com/stats","fqdn":"protrafficinspector.com","domain":"protrafficinspector.com","tld":"com"},"ip":{"addr":"63.189.55.98","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ads.alterhub.site/promoframe#k=fdfdd92a59e588025342002253695a24\u0026w=468\u0026h=60\u0026i=u2_h3rpj0","date":"2026-09-27T06:29:12.804Z","timestamp":1790490552804,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"protrafficinspector.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 26 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A5:A0:EB:57:26:41:24:03:DD:F3:2D:91:FB:6B:49:B6:53:8B:5F:86","sha256":"82:7E:C7:50:5F:EC:61:E0:5F:7F:ED:2E:10:87:9B:31:A9:8F:4B:DF:E8:99:CC:2E:A1:13:31:E7:45:CE:89:25"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: protrafficinspector.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nOrigin: https://ads.alterhub.site\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 27 Sep 2026 06:29:12 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://ads.alterhub.site\r\nset-cookie: uid_id2=01a0e18d-a9ff-715f-a03c-d96f766d2d64:1:1; Path=/; Expires=Wed, 24 Sep 2036 06:29:12 GMT; Secure; SameSite=None\r\nvary: Origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"uid_id2","value":"01a0e18d-a9ff-715f-a03c-d96f766d2d64:1:1","quoted":false,"path":"/","expires":"2036-09-24T06:29:12Z","raw_expires":"Wed, 24 Sep 2036 06:29:12 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uid_id2=01a0e18d-a9ff-715f-a03c-d96f766d2d64:1:1; Path=/; Expires=Wed, 24 Sep 2036 06:29:12 GMT; Secure; SameSite=None"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40,"size_decoded":520,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"18f58c05d0da4450de847882e1bca875","sha1":"ca698339b5dbf90977d3f7c4b49168484e0bebe9","sha256":"0516b5f2bcf7e5073fc603f2d2f6bc07a4772a68f12e8f325926d7a9d3b21b0a","sha512":"08c4b3d0254401f64a175f0f28caefb896272ee05d44e0954ccbf305e5a047ce40c291f17495e9d2dcd8941a16eace40a30c1d63b2181e514ee3a93f5f5d3aab","ssdeep":"","tlshash":"5390040507374101545c4d5013f07c10335d1d75413d3151474dd5314001c355070431","first_seen":"2026-09-27T06:30:15.070902Z","last_seen":"2026-09-27T06:30:15.070902Z","times_seen":1,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bicea.org/7/9934f3af5b5e41f86ecd27cc4a72d823?uidm=01a0e18d-aa54-75d6-8bfe-24d1a57a1305_2","fqdn":"bicea.org","domain":"bicea.org","tld":"org"},"ip":{"addr":"104.21.86.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ads.alterhub.site/promoframe#k=3ae6276d5f69eb697421a09960b7da53\u0026n=28128394\u0026i=n3_ke4tgo","date":"2026-09-27T06:29:13.548Z","timestamp":1790490553548,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bicea.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Sep 2026 14:22:10 GMT","end":"Tue, 15 Dec 2026 15:22:04 GMT"},"fingerprint":{"sha1":"B9:2F:CB:73:40:D7:7C:69:4A:C6:22:3F:45:F8:CA:8D:35:85:B1:C6","sha256":"1A:05:85:45:D6:5A:93:DC:D9:59:BF:16:3B:1F:F2:B3:07:D5:B3:3C:34:CF:6D:7D:8D:BC:6F:D5:88:E3:95:59"}}},"request":{"raw":"GET /7/9934f3af5b5e41f86ecd27cc4a72d823?uidm=01a0e18d-aa54-75d6-8bfe-24d1a57a1305_2 HTTP/1.1\r\nHost: bicea.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nOrigin: https://ads.alterhub.site\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uidm=01a0e18d-aa54-75d6-8bfe-24d1a57a1305_2; __cf_bm=s97WfwL8KEDlwJ2cPRMHNEF9t5jPNhpTu1ntfKcpF6c-1790490552.8525264-1.0.1.1-x7_tfLhRY9ofMW4Gcd_xl..H59XSfMYUoI66PPL9LEHv_bWUGQvUPwgWhN0XjBjF9GOag6VdFdtjq1hbB0ZB3T8I1p6mJPUaW4smEEym4vZNDFmJE3JzjshCATN0yON1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 27 Sep 2026 06:29:13 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nserver: cloudflare\r\naccept-ch: X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile,User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Full-Version-List,Device-Stock-Ua,X-Device-User-Agent\r\ncontent-encoding: gzip\r\nset-cookie: pdhtkv=true; Path=/; Expires=Mon, 28 Sep 2026 06:29:13 GMT; Secure; SameSite=None\nuncs=1; Path=/; Expires=Mon, 28 Sep 2026 06:29:13 GMT; Secure; SameSite=None\npdhtkv29=true; Path=/; Expires=Mon, 28 Sep 2026 06:29:13 GMT; Secure; SameSite=None\nuncs29=1; Path=/; Expires=Mon, 28 Sep 2026 06:29:13 GMT; Secure; SameSite=None\nu_pl31286095=1; Path=/; Expires=Mon, 28 Sep 2026 06:29:13 GMT; Secure; SameSite=None\nslec9934f3af5b5e41f86ecd27cc4a72d823=[6790254]; Path=/; Expires=Sun, 27 Sep 2026 06:29:18 GMT; Secure; SameSite=None\r\nvary: Accept-Encoding, Origin\r\nx-envoy-upstream-service-time: 137\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: no-cache, max-age=0, private, no-cache\r\nx-request-id: 42f3c1ada8f710f134706a838dfd655f\r\npragma: no-cache\r\naccess-control-allow-origin: https://ads.alterhub.site\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,X-Forwarded-For,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1728000\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a41873e7a9f732fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"pdhtkv","value":"true","quoted":false,"path":"/","expires":"2026-09-28T06:29:13Z","raw_expires":"Mon, 28 Sep 2026 06:29:13 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"pdhtkv=true; Path=/; Expires=Mon, 28 Sep 2026 06:29:13 GMT; Secure; SameSite=None"},{"name":"uncs","value":"1","quoted":false,"path":"/","expires":"2026-09-28T06:29:13Z","raw_expires":"Mon, 28 Sep 2026 06:29:13 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uncs=1; Path=/; Expires=Mon, 28 Sep 2026 06:29:13 GMT; Secure; SameSite=None"},{"name":"pdhtkv29","value":"true","quoted":false,"path":"/","expires":"2026-09-28T06:29:13Z","raw_expires":"Mon, 28 Sep 2026 06:29:13 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"pdhtkv29=true; Path=/; Expires=Mon, 28 Sep 2026 06:29:13 GMT; Secure; SameSite=None"},{"name":"uncs29","value":"1","quoted":false,"path":"/","expires":"2026-09-28T06:29:13Z","raw_expires":"Mon, 28 Sep 2026 06:29:13 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uncs29=1; Path=/; Expires=Mon, 28 Sep 2026 06:29:13 GMT; Secure; SameSite=None"},{"name":"u_pl31286095","value":"1","quoted":false,"path":"/","expires":"2026-09-28T06:29:13Z","raw_expires":"Mon, 28 Sep 2026 06:29:13 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"u_pl31286095=1; Path=/; Expires=Mon, 28 Sep 2026 06:29:13 GMT; Secure; SameSite=None"},{"name":"slec9934f3af5b5e41f86ecd27cc4a72d823","value":"[6790254]","quoted":false,"path":"/","expires":"2026-09-27T06:29:18Z","raw_expires":"Sun, 27 Sep 2026 06:29:18 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"slec9934f3af5b5e41f86ecd27cc4a72d823=[6790254]; Path=/; Expires=Sun, 27 Sep 2026 06:29:18 GMT; Secure; SameSite=None"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":6708,"size_decoded":8400,"mime_type":"text/plain; charset=utf-8","magic":"JSON text data","md5":"b816a0a24e2472ec5046dae3c4888d31","sha1":"e16a6efc6843b0569f319fda1849a81c7fb5389f","sha256":"ac832df40c62e981d0107d6f862ad927eb7bf134ba8dc418a4f302532b0a846e","sha512":"6a777b599380408f432342b8e615ffa352752015bc1818df330c58f5dd8176b672c32a3b4eabf13fca1b5e895b02b081bbca82ba7e7a1def5b5cf73e2970e889","ssdeep":"192:9z9I8+hDkBOYTvbeaI1713oMOPu5nI8+hv/ZTRxl:9zihgBOYTDeaInoMO25AhHZTRf","tlshash":"78d18d2797e37f4063326d2c151a0dbb9d546c43c294af8e85cff99762e793982110e8","first_seen":"2026-09-27T06:30:15.072312Z","last_seen":"2026-09-27T06:30:15.072312Z","times_seen":1,"resource_available":true,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"afders.org/23?uuid=01a0e18d-aa25-7f93-bea9-62b62a70713f\u0026eb=433c25aa07cd5252598cb35df449253c\u0026te=11ed45f7e66284fb3f0be75501723aa8\u0026pk=9934f3af5b5e41f86ecd27cc4a72d823","fqdn":"afders.org","domain":"afders.org","tld":"org"},"ip":{"addr":"104.21.67.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ads.alterhub.site/promoframe#k=3ae6276d5f69eb697421a09960b7da53\u0026n=28128394\u0026i=n3_ke4tgo","date":"2026-09-27T06:29:13.550Z","timestamp":1790490553550,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afders.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Sep 2026 13:34:44 GMT","end":"Tue, 15 Dec 2026 14:34:40 GMT"},"fingerprint":{"sha1":"7A:92:9A:74:98:BB:CF:88:2A:BD:0B:26:71:9B:9A:F3:95:83:01:4C","sha256":"47:5D:69:65:F3:FE:34:4C:29:B8:D4:0E:EE:3F:82:6A:2D:80:CC:43:F1:EA:3B:18:98:DF:BA:E5:D7:79:87:38"}}},"request":{"raw":"GET /23?uuid=01a0e18d-aa25-7f93-bea9-62b62a70713f\u0026eb=433c25aa07cd5252598cb35df449253c\u0026te=11ed45f7e66284fb3f0be75501723aa8\u0026pk=9934f3af5b5e41f86ecd27cc4a72d823 HTTP/1.1\r\nHost: afders.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uidm=01a0e18d-aa54-75d6-8bfe-24d1a57a1305_2; __cf_bm=E.kpiN_tj8vCp_KnIHDU.orChpHJXA2krs.ZFBCUMdg-1790490552.8087704-1.0.1.1-dvJkw6z0LrAU8qRhbDPxTmy.g5FAGkt6BUndPfuLI0t03qnEghiew.ibnPQwnpjPeftp5uwteKXaQ1s6h84qCfDcnt9qM3qKuqpLdIGQy8cklBLncfcxTdq8JhH8Y5ld\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 27 Sep 2026 06:29:13 GMT\r\ncontent-type: image/gif\r\ncontent-length: 1\r\nserver: cloudflare\r\nx-envoy-upstream-service-time: 1\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: no-cache, max-age=0, private, no-cache\r\nx-request-id: 5d3efe2ca4b1248892d840fc89d8040a\r\npragma: no-cache\r\nvary: Origin\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,X-Forwarded-For,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1728000\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a41873e7bae556c3-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T20:43:33.933419Z","times_seen":19037193,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.show-sb.com/sb/notifications/utility/default/us/blog/financeskipper/message_redcircle2/16/index.html","fqdn":"cdn.show-sb.com","domain":"show-sb.com","tld":"com"},"ip":{"addr":"104.21.95.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ads.alterhub.site/promoframe#k=fdfdd92a59e588025342002253695a24\u0026w=468\u0026h=60\u0026i=u2_h3rpj0","date":"2026-09-27T06:29:13.895Z","timestamp":1790490553895,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"show-sb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Jul 2026 08:49:29 GMT","end":"Thu, 29 Oct 2026 09:49:07 GMT"},"fingerprint":{"sha1":"C6:C1:39:5B:4A:88:46:B1:12:EF:0B:E1:32:AA:4B:26:BC:E9:04:3C","sha256":"97:94:F6:6E:AE:28:3E:4B:61:23:FE:FD:3B:D0:CD:67:8D:82:40:5B:11:AA:57:9E:36:73:2D:B8:75:67:B9:3C"}}},"request":{"raw":"GET /sb/notifications/utility/default/us/blog/financeskipper/message_redcircle2/16/index.html HTTP/1.1\r\nHost: cdn.show-sb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nOrigin: https://ads.alterhub.site\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 06:29:14 GMT\r\ncontent-type: text/html\r\nlast-modified: Fri, 19 Jan 2024 14:21:26 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mp59J1ZSANNwDDsBRfhbG56o%2FIP%2Fqm%2FqoJDYUyKQb7rgry%2BZubrVe0C3zx1nYKI%2Brf8fUoltkxlAlLOBbZBsOPJt5ab4I05jR3HmAXkXRYp1NIlO0Y0Bp4sBj0g4zx2amzM%3D\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a41873e9d81c5688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1545,"size_decoded":1274,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"3f8de4c280d2d48e8418a562095ac7e4","sha1":"3dc3e5bc655dcd0ff5b045b147c28398e07b6e4d","sha256":"54358796e1fc6b065f33194b7e4f02b43fc28050a3d64e482e59f4251d06fc15","sha512":"c18250930cb2c86f3a7d61f48af05396524b301f316fdba1de20d4a47e4ebf85f98b0b7dd045320c232c861c07b4869ca74dcae0eb7ca578f8398c5e573d6ac3","ssdeep":"","tlshash":"cb314c462fecd5b611c38685bb303f27ec86d94be9462501b6fc0a548bdbda2d943a07","first_seen":"2023-04-07T13:35:32Z","last_seen":"2026-09-28T21:28:36.199251Z","times_seen":664,"resource_available":true,"data":null}},"time_used":484,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":484,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.bakestubborn.com/sb/ssp/interstitial/message_redcircle/1/css/style.css","fqdn":"cdn.bakestubborn.com","domain":"bakestubborn.com","tld":"com"},"ip":{"addr":"104.21.74.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ads.alterhub.site/promoframe#k=3ae6276d5f69eb697421a09960b7da53\u0026n=28128394\u0026i=n3_ke4tgo","date":"2026-09-27T06:29:14.313Z","timestamp":1790490554313,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bakestubborn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 10:45:38 GMT","end":"Sun, 29 Nov 2026 11:44:06 GMT"},"fingerprint":{"sha1":"CC:2C:E2:22:5E:AA:1C:23:69:1C:A8:45:D8:E3:11:DD:72:0F:3A:7F","sha256":"BF:DE:33:C4:70:F3:0B:0C:27:4F:85:FB:EB:B1:8B:DF:D8:F6:7A:95:F2:7D:D9:E6:40:CC:60:74:A0:77:92:D1"}}},"request":{"raw":"GET /sb/ssp/interstitial/message_redcircle/1/css/style.css HTTP/1.1\r\nHost: cdn.bakestubborn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nOrigin: https://ads.alterhub.site\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 06:29:14 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 19 Jan 2024 14:19:45 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jQPctUp4qqqj%2BAZde%2Fmu4aoBrKl%2F8DuJc45kU7uI%2B5Qf49zwu0PLdsINPcGSZZ0EB5AuPocpC71zlZ0YSAAxjkwG7j%2FOb1T7TonqU9xynXnxZyUJDpD%2B6zP9Re9GeojcIBDUGXGpmg%3D%3D\"}]}\r\npriority: u=3,i=?0\r\netag: W/\"65aa8501-14cf\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a41873ec89271525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5327,"size_decoded":2220,"mime_type":"text/css","magic":"ASCII text","md5":"c1ba26c5d5aeee6feba13f9253a66396","sha1":"2ef869fb563e89f964da9532d1811ad2048ecc00","sha256":"ceef88fed1e8d5e933b022877eee627f6bcd3be66a6bbab443ca253b8de49940","sha512":"899a7c86c9851f33f515acfed24931e0146864570bae6e66d3f764bc4e86593dda381d36ab1cec83fd1f6ef9cd20eaa30186eff621f6389f383de3578a792353","ssdeep":"96:C7YnTMXQ7GxQ8IBkHhnF9iQpmJxMX5OiwUF9gNAxcNMHwAhvFQ3FS9yFnYFBSaFR:nTMXQsikHhnFUJxMX5eCgNAx6qDhve9+","tlshash":"beb1ae9a26bb2500b806e47e3b66271723148007e64bdd253fc17658cfc63a5dee278f","first_seen":"2024-01-26T18:53:03Z","last_seen":"2026-10-11T05:58:42.552578Z","times_seen":1245,"resource_available":true,"data":null}},"time_used":489,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":478,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"cdn.bakestubborn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"cdn.bakestubborn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tr.rbxcdn.com/180DAY-106544ce1068ed48bdb0cc443493eb4f/256/256/Image/Png/noFilter","fqdn":"tr.rbxcdn.com","domain":"rbxcdn.com","tld":"com"},"ip":{"addr":"143.204.238.74","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://alterhub.site/","date":"2026-09-27T06:29:12.535Z","timestamp":1790490552535,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rbxcdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 09 Sep 2026 00:00:00 GMT","end":"Thu, 25 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"75:D8:06:E9:90:C5:4F:78:20:E1:DC:B0:2D:7F:04:D1:43:36:17:D5","sha256":"3B:CA:A7:4C:D5:BA:BE:D5:47:44:99:0D:4A:D5:DF:17:82:35:B8:6B:67:AF:9F:D7:A1:77:B6:43:87:6A:83:9B"}}},"request":{"raw":"GET /180DAY-106544ce1068ed48bdb0cc443493eb4f/256/256/Image/Png/noFilter HTTP/1.1\r\nHost: tr.rbxcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://alterhub.site/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/Png\r\ncontent-length: 113305\r\ndate: Mon, 03 Aug 2026 22:42:24 GMT\r\nserver: public-gateway\r\ncache-control: no-cache\r\nedge-cache-tag: 180DAY-106544ce1068ed48bdb0cc443493eb4f\r\nstrict-transport-security: max-age=31536000\r\nx-frame-options: SAMEORIGIN\r\nroblox-machine-id: 61ea47af-0a87-7c51-1f06-ae52701a7ffc\r\nx-envoy-upstream-service-time: 242\r\nx-terms-message: Terms apply https://rblx.co/TOU.\r\nx-ratelimit-limit: 300000, 300000;w=60, 70000\r\nx-ratelimit-remaining: 297550, 70000\r\nx-ratelimit-reset: 36, 0\r\nx-ingress-proxy: true\r\nx-roblox-edge: c088\r\nreport-to: {\"group\":\"network-errors\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://ncs.roblox.com/upload\"}]}\r\nnel: {\"report_to\":\"network-errors\",\"max_age\":604800,\"success_fraction\":0,\"failure_fraction\":0.05,\"response_headers\":[\"Rbx-Cdn-Provider\",\"vary\"]}\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 4888a1b692b693505c9036bc998623cc.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: E0tvQUJirqPT7FxdfxaLRuTgp55EWt7PydpjU9AQkQ6qcibAYX3VLw==\r\nage: 4693607\r\nrbx-cdn-provider: aws\r\ntiming-allow-origin: *\r\nvary: Origin\r\nserver-timing: cdn-cache-hit,cdn-pop;desc=\"ARN53-P4\",cdn-rid;desc=\"E0tvQUJirqPT7FxdfxaLRuTgp55EWt7PydpjU9AQkQ6qcibAYX3VLw==\",cdn-hit-layer;desc=\"EDGE\",cdn-downstream-fbl;dur=5\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":113305,"size_decoded":114609,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGB, non-interlaced","md5":"b9033f3916f16ab7a6da13883b8c7339","sha1":"fb2f65dc10ba215455d2d5a360b7a975c5b2d6e2","sha256":"1dc3fce46003dee469e7735961c0ce33fab1bc2d365e9c01b0ff0e402b0fa353","sha512":"a63fab51a2f08aa40e9b191ab17620a206f674a8892ca7f80e4438949bf127191233cb78008d6430a96c613baf38e4ee487e2b208913cee641ebfdb663c33faa","ssdeep":"3072:wxm2k2mroFFmlDGempVOLJUQbkmSVdkbs6ZX+:52mroFtempVOLeQ4moko6M","tlshash":"4eb31221c7b97d6c00526e7aa1e669323a54fc5b7f370cd92b086f62b92744d2409fce","first_seen":"2026-09-27T06:30:15.075255Z","last_seen":"2026-09-27T06:30:56.889045Z","times_seen":2,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":41,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.bakestubborn.com/sb/notifications/utility/default/us/blog/financeskipper/message_redcircle2/16/css/animate.css","fqdn":"cdn.bakestubborn.com","domain":"bakestubborn.com","tld":"com"},"ip":{"addr":"104.21.74.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ads.alterhub.site/promoframe#k=fdfdd92a59e588025342002253695a24\u0026w=468\u0026h=60\u0026i=u2_h3rpj0","date":"2026-09-27T06:29:14.391Z","timestamp":1790490554391,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bakestubborn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 10:45:38 GMT","end":"Sun, 29 Nov 2026 11:44:06 GMT"},"fingerprint":{"sha1":"CC:2C:E2:22:5E:AA:1C:23:69:1C:A8:45:D8:E3:11:DD:72:0F:3A:7F","sha256":"BF:DE:33:C4:70:F3:0B:0C:27:4F:85:FB:EB:B1:8B:DF:D8:F6:7A:95:F2:7D:D9:E6:40:CC:60:74:A0:77:92:D1"}}},"request":{"raw":"GET /sb/notifications/utility/default/us/blog/financeskipper/message_redcircle2/16/css/animate.css HTTP/1.1\r\nHost: cdn.bakestubborn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nOrigin: https://ads.alterhub.site\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 06:29:14 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 19 Jan 2024 14:21:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v0SmcL%2B0SgrRfRYlQUAk4XB%2FPcRDYh19tuh60QbUzKKY%2FYXShNISrirAwjqXaWySie0WY2omtdfR7B5OlANmE%2Bo%2BSca%2B3YLR%2F7GKJS2O2w271rMzj%2Fh8cUKZGoMp3MYnjD7bMOw6ZA%3D%3D\"}]}\r\npriority: u=3,i=?0\r\netag: W/\"65aa8566-13361\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a41873ecf9371525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78689,"size_decoded":5695,"mime_type":"text/css","magic":"ASCII text","md5":"3d4123dbfb33d27a5cfdfcfa91df6783","sha1":"e7d0eeeec54b848f0bc3da8685fa3bc88429d660","sha256":"cb7d1393b65701b2f97d8da244c2c6023e9cbc3463ecb0136b915cfc775c6887","sha512":"75c8a48dc207595e201b50b87ff68782112a21aded9f15f14185c07d40f0151d6afe74a2b278aa575caf12ac422e8166316296ed7b6573ea24e667cca4af51dd","ssdeep":"384:jvuAuF81dghu3ublZlX/m/Gu7uNUtrL4VrbZJgBhLYNKwZiMUL6Vpaj7F:jvuAu21dghu3uLu7uNKwZiMUL6Vpaj7F","tlshash":"22731bad399115845263861d83df9e68273ce5731826acef73c2488bcf8bf9867c9147","first_seen":"2024-01-20T06:37:31Z","last_seen":"2026-10-11T18:22:24.905904Z","times_seen":14910,"resource_available":true,"data":null}},"time_used":460,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":460,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"cdn.bakestubborn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"cdn.bakestubborn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.bakestubborn.com/sb/ssp/interstitial/message_redcircle/1/js/jquery.min.js","fqdn":"cdn.bakestubborn.com","domain":"bakestubborn.com","tld":"com"},"ip":{"addr":"104.21.74.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ads.alterhub.site/promoframe#k=3ae6276d5f69eb697421a09960b7da53\u0026n=28128394\u0026i=n3_ke4tgo","date":"2026-09-27T06:29:14.424Z","timestamp":1790490554424,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bakestubborn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 10:45:38 GMT","end":"Sun, 29 Nov 2026 11:44:06 GMT"},"fingerprint":{"sha1":"CC:2C:E2:22:5E:AA:1C:23:69:1C:A8:45:D8:E3:11:DD:72:0F:3A:7F","sha256":"BF:DE:33:C4:70:F3:0B:0C:27:4F:85:FB:EB:B1:8B:DF:D8:F6:7A:95:F2:7D:D9:E6:40:CC:60:74:A0:77:92:D1"}}},"request":{"raw":"GET /sb/ssp/interstitial/message_redcircle/1/js/jquery.min.js HTTP/1.1\r\nHost: cdn.bakestubborn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 06:29:14 GMT\r\ncontent-type: application/javascript\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 19 Jan 2024 14:19:45 GMT\r\npriority: u=3,i=?0\r\netag: \"65aa8501-15d94\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\naccept-ranges: bytes\r\nage: 2294249\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2u4iwnwR3L6KIIw34CTPbAYNA91xqIu20JzXZq4WE3gxqSUpJ9h84GzbtkGUoU0aTqG92d1yt8lFbA4rJl5usfQB%2BL1QmEwlBFlFmaS9lE5AUJW0I%2BCIoFAfTevjdJVfIQU93aILNA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a41873ed29431525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 89492\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89492,"size_decoded":90340,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"561acb3e541133bbdd2c0c19f8ee35a1","sha1":"ffd1353cf3f77d25f801c84d8208613eb0d3d548","sha256":"9fde6da568db31801e29243a903bf24f342256b41e3c01e7d018ff7c566ce7fc","sha512":"8a647ed6f56b4da93c7a034609060991cc8080350f057f4f2af2c369f18af066db3b4e77701fc017027fd774264a6d0f84927239d7d2f693edc6f7d6a0917be3","ssdeep":"1536:YjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h5cApwEjOPrBeU6QLiTFbc0QlQvakV:YYh8eip3hXuf6IidlrvakdtQ47GKl","tlshash":"f993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","first_seen":"2023-03-07T01:04:00Z","last_seen":"2026-10-11T18:55:42.263957Z","times_seen":9172,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"cdn.bakestubborn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"cdn.bakestubborn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ads.alterhub.site/promoframe#k=fdfdd92a59e588025342002253695a24\u0026w=468\u0026h=60\u0026i=u2_h3rpj0","date":"2026-09-27T06:29:14.984Z","timestamp":1790490554984,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://ads.alterhub.site\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:52:25 GMT\r\nexpires: Tue, 21 Sep 2027 15:52:25 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 484609\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":43949,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-10-11T19:43:38.076302Z","times_seen":324817,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tr.rbxcdn.com/180DAY-f4eba8af4f0af179c1b531a743d9b0e1/256/256/Image/Png/noFilter","fqdn":"tr.rbxcdn.com","domain":"rbxcdn.com","tld":"com"},"ip":{"addr":"143.204.238.74","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://alterhub.site/","date":"2026-09-27T06:29:12.528Z","timestamp":1790490552528,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rbxcdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 09 Sep 2026 00:00:00 GMT","end":"Thu, 25 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"75:D8:06:E9:90:C5:4F:78:20:E1:DC:B0:2D:7F:04:D1:43:36:17:D5","sha256":"3B:CA:A7:4C:D5:BA:BE:D5:47:44:99:0D:4A:D5:DF:17:82:35:B8:6B:67:AF:9F:D7:A1:77:B6:43:87:6A:83:9B"}}},"request":{"raw":"GET /180DAY-f4eba8af4f0af179c1b531a743d9b0e1/256/256/Image/Png/noFilter HTTP/1.1\r\nHost: tr.rbxcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://alterhub.site/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/Png\r\ncontent-length: 74406\r\ndate: Sat, 25 Jul 2026 08:52:42 GMT\r\nserver: public-gateway\r\ncache-control: no-cache\r\nedge-cache-tag: 180DAY-f4eba8af4f0af179c1b531a743d9b0e1\r\nstrict-transport-security: max-age=31536000\r\nx-frame-options: SAMEORIGIN\r\nroblox-machine-id: 25f5cd69-5f75-55f6-3b6e-8e89acbba1ed\r\nx-envoy-upstream-service-time: 405\r\nx-terms-message: Terms apply https://rblx.co/TOU.\r\nx-ratelimit-limit: 300000, 300000;w=60, 70000\r\nx-ratelimit-remaining: 270354, 70000\r\nx-ratelimit-reset: 17, 0\r\nx-ingress-proxy: true\r\nx-roblox-edge: c088\r\nreport-to: {\"group\":\"network-errors\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://ncs.roblox.com/upload\"}]}\r\nnel: {\"report_to\":\"network-errors\",\"max_age\":604800,\"success_fraction\":0,\"failure_fraction\":0.05,\"response_headers\":[\"Rbx-Cdn-Provider\",\"vary\"]}\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 4888a1b692b693505c9036bc998623cc.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: 56ZyCyGRFMp2WOICDcTAyY6zu0-SC5UziJJt1bt3cwTJzZpWY0ng8w==\r\nage: 5520989\r\nrbx-cdn-provider: aws\r\ntiming-allow-origin: *\r\nvary: Origin\r\nserver-timing: cdn-cache-hit,cdn-pop;desc=\"ARN53-P4\",cdn-rid;desc=\"56ZyCyGRFMp2WOICDcTAyY6zu0-SC5UziJJt1bt3cwTJzZpWY0ng8w==\",cdn-hit-layer;desc=\"EDGE\",cdn-downstream-fbl;dur=3\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":74406,"size_decoded":75709,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"6d876ad30ad064074904b87f8460e7c5","sha1":"4c7f3409bff0ea6a65dabd7580cb2c73e6719f65","sha256":"23eaff60bc68aa29808c0ade9cffadfc33f86cd7617654b3632f2ea9556ca36d","sha512":"496a029add46408a99cdf718727d723914ee03499952c8cb47793076097823773877f37877379f38002328084b78bc19b94a382ee1b83940dc689da56561b83f","ssdeep":"1536:A/s6UEnoYBbIcCtwA52+GRhUCYKwkj+PWG3j68NuU3LpdBvcZp:yoYbew/35Ye0WEjLfLpdBvY","tlshash":"cb73024de0cacec62046f63f7edde4b661ca2e4a91958d8b75701933fbbd440c688c66","first_seen":"2026-09-27T06:30:15.080486Z","last_seen":"2026-09-27T06:30:56.972492Z","times_seen":2,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":11,"send":0,"wait":46,"receive":2,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"afders.org/20","fqdn":"afders.org","domain":"afders.org","tld":"org"},"ip":{"addr":"104.21.67.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ads.alterhub.site/promoframe#k=3ae6276d5f69eb697421a09960b7da53\u0026n=28128394\u0026i=n3_ke4tgo","date":"2026-09-27T06:29:12.926Z","timestamp":1790490552926,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afders.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Sep 2026 13:34:44 GMT","end":"Tue, 15 Dec 2026 14:34:40 GMT"},"fingerprint":{"sha1":"7A:92:9A:74:98:BB:CF:88:2A:BD:0B:26:71:9B:9A:F3:95:83:01:4C","sha256":"47:5D:69:65:F3:FE:34:4C:29:B8:D4:0E:EE:3F:82:6A:2D:80:CC:43:F1:EA:3B:18:98:DF:BA:E5:D7:79:87:38"}}},"request":{"raw":"GET /20 HTTP/1.1\r\nHost: afders.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uidm=01a0e18d-aa1e-7290-835a-05820375040e_1; __cf_bm=E.kpiN_tj8vCp_KnIHDU.orChpHJXA2krs.ZFBCUMdg-1790490552.8087704-1.0.1.1-dvJkw6z0LrAU8qRhbDPxTmy.g5FAGkt6BUndPfuLI0t03qnEghiew.ibnPQwnpjPeftp5uwteKXaQ1s6h84qCfDcnt9qM3qKuqpLdIGQy8cklBLncfcxTdq8JhH8Y5ld\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 27 Sep 2026 06:29:12 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding, Origin\r\nx-envoy-upstream-service-time: 1\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: no-cache, max-age=0, private, no-cache\r\nx-request-id: 886b483f02495864a02393b7575d6476\r\npragma: no-cache\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,X-Forwarded-For,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1728000\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a41873e3cf6556c3-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":40128,"size_decoded":20185,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (40121), with no line terminators","md5":"0ace9fd96b3a1a96df6673058ad39505","sha1":"acaec4d2167e5c0b0189f7d79f9d20b8cb73abd1","sha256":"7bb9843e599f0e2fa33d255b732e4c5b9faa47f0189247b33d426d36cf4c2e97","sha512":"221e798b509a195219dbbb1f7c4b903abb734b790ae1e108c58b3914794a9a352cede20913e02c195dfcb2c1af1ed27b104da7843f431a364f0cba9a6b3d1d7c","ssdeep":"768:lt+ufvOQZsLIx/4Bq2Vld2WJ26Ygi+7RB6hJgbGNqJx70X7ngr5rz3LVL8oVGtd8:l0P8Wpli+7RB8JMGNqJXLKOL3","tlshash":"e30329d87183b02953b728e6107b6214b23a5c15740a9993e13e9cd63c73e5bd23bfad","first_seen":"2026-09-27T06:30:15.042381Z","last_seen":"2026-09-28T14:21:31.278472Z","times_seen":4,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sleepoverlimitprofound.com/ren.gif?sid=H4sIAAAAAAAC_1RSz4scRRSuXgcvOQQkRBAPDXpQcGarf0zPdOIp-AuMG00iAT1VdXWPlenp6nRV98zOaWNEr3tQ8CQ93-xmwYiYk3qTWW-KkPYgc8h68D9Q0IMXmcngakG9H3zFq--97304K09IByVbvvmGmso0ZdvdDrWfuyEzocba3rluO7RDL9o3ZBb4F-3JyhTVBcfzO_R5-9U4GqptlzqUOtSxX5FFnKjJ9hqFzL8InU5IO77bcbo-JsX_c11a0MyCqE7IE5CiOftb8i5ktEA2-uqlWA-Nyl94eVSmzKgClTh6OxtmapxhdBomhYUkO9q8htINIZ9uQWVHmw6gqoNVB-CyIVvnH4JnRxua4NXhI6Y8RZyBizMYVwvE6QKSLRCpO5DiAQEigZ0ryEZ3d1QxZruPULZCG9L68w_IcUNaD88hG315KZUT-5pKSyNVpjFJasjJAnKwQF4ew0y3IMfHiMz7kOInQp88g2z0-WuqkkO7ioshpKjXM5DJAkxbKFdXWigTC2VuYSSWtk_7fuQwL0hCEfWoz3xfxJyGfZdSFkY9lNFtSLGPqNhDXuxhKPehhQVtGmK9tYdK1Ici1a6u74pUl9zZeHfjvXquzGDGDpUZxBkBK_ZRiPpA5rf0HUTmsfk00a_P1cowbuo546KeS2EIilvLZ6nDaOz0RZtxl7Z7XddvM4fH7dBJuNcLQzfoJQeJNmU9yzfaW_fu_YVhvLQ9FgduLxDdJAhjHoQ933UYDcOA8p5gXQ9a1pB6az2cqWzI1V8q5LIh7Xc-A2fH0OkxIvk0WOmAjWuw92pMs_uREjLZ1VEhc6M7k90phKqRmxbMroXYkFl6Qs7Nr16_9N1a16Q4izj6gWwOoqJGXtS4Kb8nGKS371_JjRzJKVsJfc0wEz8OJh884yKSDTn_1N_rjbvwyc-I8j3o_N9K81TnDXnx1x-hFQHPLaSSII1Pv2K8hv5Pzk_jmf4Ag6IFnrbmPC1aBzwt0o_XbBtyuf_7unBDLmcfQcul3XW5F_T7QZwEIvGE53oi7NI49FkY-KHfhdHNzW--_vafAQCtbyirBwQAAA==","fqdn":"sleepoverlimitprofound.com","domain":"sleepoverlimitprofound.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ads.alterhub.site/promoframe#k=3ae6276d5f69eb697421a09960b7da53\u0026n=28128394\u0026i=n3_ke4tgo","date":"2026-09-27T06:29:13.229Z","timestamp":1790490553229,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sleepoverlimitprofound.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 04:20:18 GMT","end":"Tue, 24 Nov 2026 04:20:17 GMT"},"fingerprint":{"sha1":"25:9A:58:CA:68:4D:EC:36:88:A4:BC:7F:2C:41:BE:B7:58:63:32:E3","sha256":"08:E4:A1:17:A8:1B:17:9D:84:10:F1:9B:37:A3:57:FE:8C:98:BA:9C:11:0D:A1:97:5C:AA:71:F0:6A:4A:28:5E"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_1RSz4scRRSuXgcvOQQkRBAPDXpQcGarf0zPdOIp-AuMG00iAT1VdXWPlenp6nRV98zOaWNEr3tQ8CQ93-xmwYiYk3qTWW-KkPYgc8h68D9Q0IMXmcngakG9H3zFq--97304K09IByVbvvmGmso0ZdvdDrWfuyEzocba3rluO7RDL9o3ZBb4F-3JyhTVBcfzO_R5-9U4GqptlzqUOtSxX5FFnKjJ9hqFzL8InU5IO77bcbo-JsX_c11a0MyCqE7IE5CiOftb8i5ktEA2-uqlWA-Nyl94eVSmzKgClTh6OxtmapxhdBomhYUkO9q8htINIZ9uQWVHmw6gqoNVB-CyIVvnH4JnRxua4NXhI6Y8RZyBizMYVwvE6QKSLRCpO5DiAQEigZ0ryEZ3d1QxZruPULZCG9L68w_IcUNaD88hG315KZUT-5pKSyNVpjFJasjJAnKwQF4ew0y3IMfHiMz7kOInQp88g2z0-WuqkkO7ioshpKjXM5DJAkxbKFdXWigTC2VuYSSWtk_7fuQwL0hCEfWoz3xfxJyGfZdSFkY9lNFtSLGPqNhDXuxhKPehhQVtGmK9tYdK1Ici1a6u74pUl9zZeHfjvXquzGDGDpUZxBkBK_ZRiPpA5rf0HUTmsfk00a_P1cowbuo546KeS2EIilvLZ6nDaOz0RZtxl7Z7XddvM4fH7dBJuNcLQzfoJQeJNmU9yzfaW_fu_YVhvLQ9FgduLxDdJAhjHoQ933UYDcOA8p5gXQ9a1pB6az2cqWzI1V8q5LIh7Xc-A2fH0OkxIvk0WOmAjWuw92pMs_uREjLZ1VEhc6M7k90phKqRmxbMroXYkFl6Qs7Nr16_9N1a16Q4izj6gWwOoqJGXtS4Kb8nGKS371_JjRzJKVsJfc0wEz8OJh884yKSDTn_1N_rjbvwyc-I8j3o_N9K81TnDXnx1x-hFQHPLaSSII1Pv2K8hv5Pzk_jmf4Ag6IFnrbmPC1aBzwt0o_XbBtyuf_7unBDLmcfQcul3XW5F_T7QZwEIvGE53oi7NI49FkY-KHfhdHNzW--_vafAQCtbyirBwQAAA== HTTP/1.1\r\nHost: sleepoverlimitprofound.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; u_pl28027895=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 27 Sep 2026 06:29:13 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccept-ch: Sec-Ch-Ua,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version-List,Device-Stock-Ua,X-Device-User-Agent,User-Agent,Sec-Ch-Ua-Platform-Version\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nvary: Origin\r\nx-envoy-upstream-service-time: 1\r\nHost: sleepoverlimitprofound.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: a44c16208629fe7391b88bcda8425b71\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T20:43:33.933419Z","times_seen":19037193,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-26","alert":"Sinkholed","trigger":"sleepoverlimitprofound.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/cti/b3/e1/da/b3e1dabea9f310adf55c1503b0fb1b85/1708444063.jpg","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ads.alterhub.site/promoframe#k=aee874e267daf21ad94938c5960ef7a1\u0026n=27873862\u0026i=n4_0eh5yg","date":"2026-09-27T06:29:13.510Z","timestamp":1790490553510,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 02:32:58 GMT","end":"Wed, 02 Dec 2026 02:32:57 GMT"},"fingerprint":{"sha1":"0C:28:A6:45:71:D0:51:55:56:A0:1D:34:71:8C:C4:7C:16:5A:03:5C","sha256":"68:73:EC:1A:D4:78:3E:46:1A:F8:1D:99:8F:CB:9D:46:B9:0E:28:CF:C6:BF:14:EF:F5:90:39:D3:FF:5A:1F:5C"}}},"request":{"raw":"GET /cti/b3/e1/da/b3e1dabea9f310adf55c1503b0fb1b85/1708444063.jpg HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 27 Sep 2026 06:29:13 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 16993\r\nserver: nginx/1.21.6\r\nlast-modified: Tue, 20 Feb 2024 15:47:51 GMT\r\netag: \"65d4c9a7-4261\"\r\nexpires: Tue, 29 Sep 2026 06:29:13 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16993,"size_decoded":17341,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 320x240, components 3","md5":"d4aba6b9402c9af0dfbbceadae8ddcab","sha1":"5aec88eaffa44358ff64c96454201e23ce0ac1f8","sha256":"2730fbef919712c7f0bbbd5b2a01ede6301b1738c4c7a356e5d8e8e4ac4a4631","sha512":"114f2168033060ff1db9941500cb4d802f50961e134e249a12e4646695c3be5b683194a9a054bd66d6fb2c9ee17497f5e12a6abf1d39694bca8186d9ee433879","ssdeep":"384:YJk8b2vV5/4ZpYPbNPT+zojak88xz7iUtnoEJtApY0fr+:YJklUZ4RL+ziw8zdtrJ0fr+","tlshash":"0b72cf1fbb2161e0bde581af56170d93e3e6491131e0184ea3f8b281bdd4d68ad58df3","first_seen":"2024-03-07T18:33:56Z","last_seen":"2026-10-01T14:45:45.335932Z","times_seen":190,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ads.alterhub.site/promoframe#k=3ae6276d5f69eb697421a09960b7da53\u0026n=28128394\u0026i=n3_ke4tgo","date":"2026-09-27T06:29:15.348Z","timestamp":1790490555348,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://ads.alterhub.site\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:52:25 GMT\r\nexpires: Tue, 21 Sep 2027 15:52:25 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 484610\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":43949,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-10-11T19:43:38.076302Z","times_seen":324817,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/jetbrainsmono/v24/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxDcwg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://alterhub.site/","date":"2026-09-27T06:29:11.841Z","timestamp":1790490551841,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/jetbrainsmono/v24/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxDcwg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://alterhub.site\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 31432\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 16:00:42 GMT\r\nexpires: Tue, 21 Sep 2027 16:00:42 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:52:37 GMT\r\ncontent-type: font/woff2\r\nage: 484109\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31432,"size_decoded":32245,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31432, version 1.0","md5":"b636a65da4f00129f08c7df6e5dd75ac","sha1":"4f27206c4b1caf8b7805597fcbc6922ff5805daa","sha256":"83c005d49d8a6a50474c73a5a36ac0468076e9c4a29da7bdb14995d80560a5be","sha512":"77ad92edddd5fc9ce47b8b329cf41b2fec895ea01a97b9122df3766163998fadcbe47c868631208636c4e587136ddd390d38e3e9da2743758c9da2c77a66f859","ssdeep":"768:a8+AGQwBrw24YHLKRG5lBF260n1e5vhjJKWWAD95I9Puggtx:B+AiBrw2fHL+GyvYtYADM9Pug0x","tlshash":"52e2f274ea41ca57676335ed4203e99d015fa318ebf6fd40869ccad2a506bcb7c4033a","first_seen":"2024-10-21T03:03:54.505463Z","last_seen":"2026-10-11T19:50:27.268451Z","times_seen":20959,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":42,"dns":0,"connect":0,"send":0,"wait":18,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bicea.org/3/9ecf8e436a025f7fff03b61551d7e737?uidm=01a0e18d-aa54-75d6-8bfe-24d1a57a1305_1","fqdn":"bicea.org","domain":"bicea.org","tld":"org"},"ip":{"addr":"104.21.86.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ads.alterhub.site/promoframe#k=fdfdd92a59e588025342002253695a24\u0026w=468\u0026h=60\u0026i=u2_h3rpj0","date":"2026-09-27T06:29:12.983Z","timestamp":1790490552983,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bicea.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Sep 2026 14:22:10 GMT","end":"Tue, 15 Dec 2026 15:22:04 GMT"},"fingerprint":{"sha1":"B9:2F:CB:73:40:D7:7C:69:4A:C6:22:3F:45:F8:CA:8D:35:85:B1:C6","sha256":"1A:05:85:45:D6:5A:93:DC:D9:59:BF:16:3B:1F:F2:B3:07:D5:B3:3C:34:CF:6D:7D:8D:BC:6F:D5:88:E3:95:59"}}},"request":{"raw":"GET /3/9ecf8e436a025f7fff03b61551d7e737?uidm=01a0e18d-aa54-75d6-8bfe-24d1a57a1305_1 HTTP/1.1\r\nHost: bicea.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nOrigin: https://ads.alterhub.site\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uidm=01a0e18d-aa4a-7022-a786-b33078eaaa6b_1; __cf_bm=s97WfwL8KEDlwJ2cPRMHNEF9t5jPNhpTu1ntfKcpF6c-1790490552.8525264-1.0.1.1-x7_tfLhRY9ofMW4Gcd_xl..H59XSfMYUoI66PPL9LEHv_bWUGQvUPwgWhN0XjBjF9GOag6VdFdtjq1hbB0ZB3T8I1p6mJPUaW4smEEym4vZNDFmJE3JzjshCATN0yON1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 27 Sep 2026 06:29:13 GMT\r\ncontent-type: text/plain\r\nserver: cloudflare\r\naccept-ch: Sec-Ch-Ua-Platform,Sec-Ch-Ua-Model,Device-Stock-Ua,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Mobile,X-Device-User-Agent,User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent\r\nset-cookie: uidm=01a0e18d-aa54-75d6-8bfe-24d1a57a1305_2; Path=/; Expires=Wed, 24 Sep 2036 06:29:13 GMT; Secure; SameSite=None\r\nvary: Accept-Encoding, Origin\r\nx-envoy-upstream-service-time: 7\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: no-cache, max-age=0, private, no-cache\r\nx-request-id: ec85b812773ebe0ae17a3c213412bc36\r\npragma: no-cache\r\naccess-control-allow-origin: https://ads.alterhub.site\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,X-Forwarded-For,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1728000\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: gzip\r\ncf-ray: a41873e429bf32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"uidm","value":"01a0e18d-aa54-75d6-8bfe-24d1a57a1305_2","quoted":false,"path":"/","expires":"2036-09-24T06:29:13Z","raw_expires":"Wed, 24 Sep 2036 06:29:13 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uidm=01a0e18d-aa54-75d6-8bfe-24d1a57a1305_2; Path=/; Expires=Wed, 24 Sep 2036 06:29:13 GMT; Secure; SameSite=None"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":76,"size_decoded":1336,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"47990492c81d1c109529b78fe05bfdf1","sha1":"69baff7d42c9a8cd9e0630cedc1c93d619ebb3ac","sha256":"3b84580ea5dd08d6c73b02ed26ce8e1093967b6d2301e9dfca328f16ac13df5f","sha512":"7877544bf257ca335ae7ffab22e2bea74fe35dd06bfbae408204c7c0d2589e88756935c594ea7f2f32849a051cde41f5737ec77f35f619075d0f17d8bff7782e","ssdeep":"","tlshash":"2aa01259149229cc4289c0415110955ac620c02151107c0a88422400058700d10102d6","first_seen":"2026-09-27T06:30:15.083629Z","last_seen":"2026-09-27T06:30:15.083629Z","times_seen":1,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spendsdetachment.com/impr.gif?sid=H4sIAAAAAAAC_1RSz4scRRit3gRBchAk6kEPffBgwJ6t_jndyS1oFDQbNZGAnqqrqieV6enudFXPTOa0ccWr6y0n6X2zmwVR0VP0Fma9CYJ920P24j8gKJ5lJoO7FtT3g_dR9b3H-2KvOSE9NOz4g-vlTOU52wx71H7jtipEOdH21i3bpT16xb6tiii4Yk-XoR5fdv2gRy_Z70g-LDc96lLqUte-pmqZldPNFQpVfZu4vYT2Aq_nhgGm9f973VjQzIIYn5AXoUT3wh_Zp1B8gWL0w1tSD01Zvfn2qMmZKWuMxeHHxbAoJwVGp2VWW8iKw_U0St0R8nADZXG4ZoByvL9kgFR1ZOPlp0iLw_WaSMcHzzZNc8gCqbiAyXgBmR9BsQV4uQMlficAF9i6gWL0aKusJ-z-M5Qt0Y6c_-cvqElHzj-9iGL0_dVcTe2bZd4YVRYa06yFmi6gBgtUzRHMbANqcgRuPoMSvxH6ygUUo2_eLcdqaI9lPYQSx69Tl1HpxsJhSZY5fTfMHEZ97ogkyvpRJDwRBSuhVLYA0xaa5VUWmsxCU1kYiWM7oHHAXeZHWSJ4nwYsCIRMaRJ7lLKE99HwB1BiF7zeRlVvY6h2oYUFbQjGoj0QufZ0-0jkuknddfbW2W_npRnssYPSDGRBwOpd1KLdV9U9vQNuzs1nmX5vXi4DS007Z6lo50oYgvreWYLCDZx-n4dO2ne54yVR6IVBKKSM9zNtmrOjaew7_cwVDnPD2AlpECU-4yyOgr1q7SDrybXnMZTHdiYyIRKPhYkM45h6oR94lHpe6EdJyLwAWrVQemOl3kx15MPHl1CpjjiffI2UHUHnR-DqNbDmVbDJPIhisDuIKGbFdyw3sr7TpD2tjIQoW1TmPMx9C9KQvfyEXJx_dOvqk5U9st5DSP4rWR_wukVVt7irfiEY5A9-vFEZNVIztvTLTcOMfA5MdcQ69xW46shLf--srHt58Cd4tQ1d_ffWPNdVR96__iV0SZBWBLkiyOXpZyxtoc_06Wm9pz_HoLaQ5tY8zWuyn-Z1vgutju3Mlx6nNO5Hrh9n0vUDwbMwDhIRMer7EkZ3d396_PO_AwBGVE2lPAQAAA==","fqdn":"spendsdetachment.com","domain":"spendsdetachment.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ads.alterhub.site/promoframe#k=fdfdd92a59e588025342002253695a24\u0026w=468\u0026h=60\u0026i=u2_h3rpj0","date":"2026-09-27T06:29:13.832Z","timestamp":1790490553832,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"spendsdetachment.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 04:27:12 GMT","end":"Tue, 24 Nov 2026 04:27:11 GMT"},"fingerprint":{"sha1":"EB:97:C4:8B:DE:F8:13:B1:55:C6:2E:E9:8C:5C:48:F7:1E:59:B1:F2","sha256":"D3:ED:AA:AB:A7:0F:5D:B5:E3:C6:C8:42:92:C6:71:07:01:45:1D:84:99:AD:9D:45:AD:FB:7A:B9:4D:A7:8F:57"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1RSz4scRRit3gRBchAk6kEPffBgwJ6t_jndyS1oFDQbNZGAnqqrqieV6enudFXPTOa0ccWr6y0n6X2zmwVR0VP0Fma9CYJ920P24j8gKJ5lJoO7FtT3g_dR9b3H-2KvOSE9NOz4g-vlTOU52wx71H7jtipEOdH21i3bpT16xb6tiii4Yk-XoR5fdv2gRy_Z70g-LDc96lLqUte-pmqZldPNFQpVfZu4vYT2Aq_nhgGm9f973VjQzIIYn5AXoUT3wh_Zp1B8gWL0w1tSD01Zvfn2qMmZKWuMxeHHxbAoJwVGp2VWW8iKw_U0St0R8nADZXG4ZoByvL9kgFR1ZOPlp0iLw_WaSMcHzzZNc8gCqbiAyXgBmR9BsQV4uQMlficAF9i6gWL0aKusJ-z-M5Qt0Y6c_-cvqElHzj-9iGL0_dVcTe2bZd4YVRYa06yFmi6gBgtUzRHMbANqcgRuPoMSvxH6ygUUo2_eLcdqaI9lPYQSx69Tl1HpxsJhSZY5fTfMHEZ97ogkyvpRJDwRBSuhVLYA0xaa5VUWmsxCU1kYiWM7oHHAXeZHWSJ4nwYsCIRMaRJ7lLKE99HwB1BiF7zeRlVvY6h2oYUFbQjGoj0QufZ0-0jkuknddfbW2W_npRnssYPSDGRBwOpd1KLdV9U9vQNuzs1nmX5vXi4DS007Z6lo50oYgvreWYLCDZx-n4dO2ne54yVR6IVBKKSM9zNtmrOjaew7_cwVDnPD2AlpECU-4yyOgr1q7SDrybXnMZTHdiYyIRKPhYkM45h6oR94lHpe6EdJyLwAWrVQemOl3kx15MPHl1CpjjiffI2UHUHnR-DqNbDmVbDJPIhisDuIKGbFdyw3sr7TpD2tjIQoW1TmPMx9C9KQvfyEXJx_dOvqk5U9st5DSP4rWR_wukVVt7irfiEY5A9-vFEZNVIztvTLTcOMfA5MdcQ69xW46shLf--srHt58Cd4tQ1d_ffWPNdVR96__iV0SZBWBLkiyOXpZyxtoc_06Wm9pz_HoLaQ5tY8zWuyn-Z1vgutju3Mlx6nNO5Hrh9n0vUDwbMwDhIRMer7EkZ3d396_PO_AwBGVE2lPAQAAA== HTTP/1.1\r\nHost: spendsdetachment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=01a0e18d-a9ff-715f-a03c-d96f766d2d64:1:1; ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.DyQWATwZd7RdKScjpAR-kl_SmGciWoOVU7Ez3t6USs4; pdhtkv=true; uncs=1; pdhtkv27=true; uncs27=1; u_pl29378057=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 27 Sep 2026 06:29:13 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccept-ch: User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Mobile,X-Device-User-Agent,Sec-Ch-Ua,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Model,Device-Stock-Ua,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nset-cookie: iprc_c+266e5162a992e3fa644972ba58ff0261=1438851; Path=/; Expires=Mon, 28 Sep 2026 06:29:13 GMT; Secure; SameSite=None\niprc_c-1438851=8; Path=/; Expires=Mon, 28 Sep 2026 06:29:13 GMT; Secure; SameSite=None\r\nvary: Origin\r\nx-envoy-upstream-service-time: 4\r\nHost: spendsdetachment.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 114776bd810bd0654f348de9b57af43e\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":[{"name":"iprc_c+266e5162a992e3fa644972ba58ff0261","value":"1438851","quoted":false,"path":"/","expires":"2026-09-28T06:29:13Z","raw_expires":"Mon, 28 Sep 2026 06:29:13 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"iprc_c+266e5162a992e3fa644972ba58ff0261=1438851; Path=/; Expires=Mon, 28 Sep 2026 06:29:13 GMT; Secure; SameSite=None"},{"name":"iprc_c-1438851","value":"8","quoted":false,"path":"/","expires":"2026-09-28T06:29:13Z","raw_expires":"Mon, 28 Sep 2026 06:29:13 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"iprc_c-1438851=8; Path=/; Expires=Mon, 28 Sep 2026 06:29:13 GMT; Secure; SameSite=None"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T20:43:33.933419Z","times_seen":19037193,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"spendsdetachment.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"spendsdetachment.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/impr.gif?sid=H4sIAAAAAAAC_1RSvW8cRRyddSKaFEgoQAHFFhQgcefZj7vbdbqIABLCQUlQJKjm85jc3s5mZ_fufJWDEbWpoELrd3YsIYRIw0cXnemQkNgGuYgb_gAKEA0NsnPCZorfh95vZt776X26V5-QLmp2_N67dm6yjK33utR_9a7JpZ06f_OOH9AuvebfNXk_vubPTkM52QiiuEtf899SYmTXQxpQGtDAf9OUStvZ-hkKU3ydBt2UduOwG_RizMr_96724JgHOTkhz8HI9tnf9YcwYol8_O0byo0qW7x-Y1xnrLIlJvLw_XyU22mO8XmpSw86P1xNw7qWkC_WYPPDlQLYyf6pAnDTkrUXnoDnhyua4JODp0x5BpWDyyuYTpZQ2REMW0LYHRj5KwGExOZN5OOHm7acsq2nKDtFW3L57z9hpi25_OQq8vE31zMz82_brK6MzR1muoGZLWGGSxT1Ear5Gsz0CKL6GEb-QuiLV5CPv3rbTszIn6hyBCOPX6EBoypIZIelWncGOo06SdRjHcY5pSLqhVz0zxZl9BLMXULtPNTGQ6091IWHsTz2Y5rEImBRX6dSDGjM4lgqTtMkpJSlYoBaPICRuxDlNopyGyOzCyc9uIpgIpsDmbnQNQ9l5moerHK4ylGzsNVwjx3YaqhyAlbuopTNvinuux2I6tJirt07C3saGK-aBeOyWRhZEZT3LwqUQdIZUKo6fMB0pxcOQh1ETMUDuq9dVV8c5YnsDJQ8u6Q6upcqlvQSMZB0r1g5yHt84x-M1LEv05T3e0qHOlC9WEexDmLFeT-M-kwKJuFMA-PWwJyHuWnJrd8mKExLOh98Cc6O4LIjCPMyWP0S2HQR9xOwj9CnmOePhJVGbzlRmqJy3dnWHNI2KKrLqLY8qIrsZSfk6uLWneuPzyyiu59DiZ_J6kCUDYqywT3zE8Ewe_DoZlGZsZmzU8_crlilngEzLfEufQZhWvL8Xztn9t0Y_gFRbMMV_721yFzREv3dBpwl4AVBZggydf4Z4w3chZ6f13vuEwxLDzzzFjwryT7PymwXzhz7OlKhoDQZ9IMo0SqIYil0L4lT2Wc0ihQq19774fsf_x0AvqdgvkAEAAA=","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ads.alterhub.site/promoframe#k=d99b65ef2f1e54f34f14ebb6236adcad\u0026w=468\u0026h=60\u0026i=u1_v62o5x","date":"2026-09-27T06:29:13.885Z","timestamp":1790490553885,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 00:02:23 GMT","end":"Sat, 21 Nov 2026 00:02:22 GMT"},"fingerprint":{"sha1":"45:C6:44:0A:42:17:85:94:0C:43:02:EA:82:14:8D:F8:D3:13:D9:E2","sha256":"8C:E7:C4:F5:8F:DB:E8:10:A8:55:E4:5C:85:CC:97:D0:7D:0A:FE:C9:6C:C4:4D:6A:FF:20:87:2C:BC:34:2D:F4"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1RSvW8cRRyddSKaFEgoQAHFFhQgcefZj7vbdbqIABLCQUlQJKjm85jc3s5mZ_fufJWDEbWpoELrd3YsIYRIw0cXnemQkNgGuYgb_gAKEA0NsnPCZorfh95vZt776X26V5-QLmp2_N67dm6yjK33utR_9a7JpZ06f_OOH9AuvebfNXk_vubPTkM52QiiuEtf899SYmTXQxpQGtDAf9OUStvZ-hkKU3ydBt2UduOwG_RizMr_96724JgHOTkhz8HI9tnf9YcwYol8_O0byo0qW7x-Y1xnrLIlJvLw_XyU22mO8XmpSw86P1xNw7qWkC_WYPPDlQLYyf6pAnDTkrUXnoDnhyua4JODp0x5BpWDyyuYTpZQ2REMW0LYHRj5KwGExOZN5OOHm7acsq2nKDtFW3L57z9hpi25_OQq8vE31zMz82_brK6MzR1muoGZLWGGSxT1Ear5Gsz0CKL6GEb-QuiLV5CPv3rbTszIn6hyBCOPX6EBoypIZIelWncGOo06SdRjHcY5pSLqhVz0zxZl9BLMXULtPNTGQ6091IWHsTz2Y5rEImBRX6dSDGjM4lgqTtMkpJSlYoBaPICRuxDlNopyGyOzCyc9uIpgIpsDmbnQNQ9l5moerHK4ylGzsNVwjx3YaqhyAlbuopTNvinuux2I6tJirt07C3saGK-aBeOyWRhZEZT3LwqUQdIZUKo6fMB0pxcOQh1ETMUDuq9dVV8c5YnsDJQ8u6Q6upcqlvQSMZB0r1g5yHt84x-M1LEv05T3e0qHOlC9WEexDmLFeT-M-kwKJuFMA-PWwJyHuWnJrd8mKExLOh98Cc6O4LIjCPMyWP0S2HQR9xOwj9CnmOePhJVGbzlRmqJy3dnWHNI2KKrLqLY8qIrsZSfk6uLWneuPzyyiu59DiZ_J6kCUDYqywT3zE8Ewe_DoZlGZsZmzU8_crlilngEzLfEufQZhWvL8Xztn9t0Y_gFRbMMV_721yFzREv3dBpwl4AVBZggydf4Z4w3chZ6f13vuEwxLDzzzFjwryT7PymwXzhz7OlKhoDQZ9IMo0SqIYil0L4lT2Wc0ihQq19774fsf_x0AvqdgvkAEAAA= HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=01a0e18d-a9ff-7f93-835a-abb00c352bc6:3:1; ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJwIjp7ImlkIjoyOTM3ODA0MywiayI6ImQ5OWI2NWVmMmYxZTU0ZjM0ZjE0ZWJiNjIzNmFkY2FkIiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjo1NDI5MTEwLCJwaWQiOjI5NzIzMTgsImFuIjp0cnVlLCJsYW4iOnRydWUsImNpZCI6MjgsImFpZCI6MjcsInB0Ijo0LCJwayI6ImU0bm1oZmozMnIiLCJjcGtzIjp7IjI4IjoiY2FkOWVhNTFmYzcwNjBkMjU4MmMzY2RjM2JkZTdiMWYifSwidCI6MX0sInUiOnsidSI6MSwiYXUiOjEsImQiOnsiaWQiOjI2NjU2MTExNSwiaWRzIjoiIiwiaWMiOmZhbHNlLCJuIjoiRGVza3RvcCxFbXVsYXRvciIsInYiOiJVbmtub3duIiwibSI6IlVua25vd24iLCJmIjoxLCJmbiI6IkRlc2t0b3AiLCJvaWQiOjM4OTE0LCJvbiI6IldpbmRvd3MiLCJvdiI6IjEwLjAiLCJiaWQiOjEzNjkyNSwiYm4iOiJGaXJlZm94IiwiYnYiOiIxMzQuMCIsInd2IjpmYWxzZSwiZSI6dHJ1ZSwiYWIiOmZhbHNlfSwiYyI6eyJpZCI6MTYyLCJjIjoiTk8iLCJuIjoiTm9yd2F5In0sImN0Ijp7ImlkIjozMTUxNjI3LCJuIjoiSG92aWsgdmVyayJ9LCJyZyI6eyJpZCI6MzI3MSwibiI6IlZpa2VuIn0sImEiOmZhbHNlLCJjciI6eyJuIjoiQmxpeCBTb2x1dGlvbnMifSwieGYiOiIiLCJpeGYiOmZhbHNlLCJpZ3hmIjpmYWxzZSwiaXdmIjp0cnVlLCJ1cCI6dHJ1ZSwiciI6Imh0dHBzOi8vYWx0ZXJodWIuc2l0ZS8iLCJ0eiI6MiwiaWR1YyI6MCwiYXIiOltdfX0.SmTQ7wZvuVNtGe1ctSVV587BCScmhCWfnwzRJ0jSP3Y; pdhtkv=true; uncs=1; pdhtkv27=true; uncs27=1; u_pl29378043=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 27 Sep 2026 06:29:13 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccept-ch: Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Model,X-Device-User-Agent,X-Ucbrowser-Device-Ua,Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Mobile,Device-Stock-Ua,X-Operamini-Phone-Ua,User-Agent\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nset-cookie: iprc_c+266e5162a992e3fa644972ba58ff0261=1438851; Path=/; Expires=Mon, 28 Sep 2026 06:29:13 GMT; Secure; SameSite=None\niprc_c-1438851=8; Path=/; Expires=Mon, 28 Sep 2026 06:29:13 GMT; Secure; SameSite=None\r\nvary: Origin\r\nx-envoy-upstream-service-time: 2\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 9ef24fbfbb9fbfcd9fc1e7e09a5fdb01\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":[{"name":"iprc_c+266e5162a992e3fa644972ba58ff0261","value":"1438851","quoted":false,"path":"/","expires":"2026-09-28T06:29:13Z","raw_expires":"Mon, 28 Sep 2026 06:29:13 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"iprc_c+266e5162a992e3fa644972ba58ff0261=1438851; Path=/; Expires=Mon, 28 Sep 2026 06:29:13 GMT; Secure; SameSite=None"},{"name":"iprc_c-1438851","value":"8","quoted":false,"path":"/","expires":"2026-09-28T06:29:13Z","raw_expires":"Mon, 28 Sep 2026 06:29:13 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"iprc_c-1438851=8; Path=/; Expires=Mon, 28 Sep 2026 06:29:13 GMT; Secure; SameSite=None"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T20:43:33.933419Z","times_seen":19037193,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"kettledroopingcontinuation.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.bakestubborn.com/sb/ssp/interstitial/message_redcircle/1/js/script.js","fqdn":"cdn.bakestubborn.com","domain":"bakestubborn.com","tld":"com"},"ip":{"addr":"104.21.74.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ads.alterhub.site/promoframe#k=3ae6276d5f69eb697421a09960b7da53\u0026n=28128394\u0026i=n3_ke4tgo","date":"2026-09-27T06:29:14.481Z","timestamp":1790490554481,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bakestubborn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 10:45:38 GMT","end":"Sun, 29 Nov 2026 11:44:06 GMT"},"fingerprint":{"sha1":"CC:2C:E2:22:5E:AA:1C:23:69:1C:A8:45:D8:E3:11:DD:72:0F:3A:7F","sha256":"BF:DE:33:C4:70:F3:0B:0C:27:4F:85:FB:EB:B1:8B:DF:D8:F6:7A:95:F2:7D:D9:E6:40:CC:60:74:A0:77:92:D1"}}},"request":{"raw":"GET /sb/ssp/interstitial/message_redcircle/1/js/script.js HTTP/1.1\r\nHost: cdn.bakestubborn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nOrigin: https://ads.alterhub.site\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 06:29:14 GMT\r\ncontent-type: application/javascript\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 19 Jan 2024 14:19:45 GMT\r\npriority: u=3,i=?0\r\netag: \"65aa8501-478\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nPZ9rCm0RapJuVBH7cNXTDwR8ub5FfBiTaC62UoPnAuqMS9MH278RmmlKIUTc%2FcbnHSO1ZLTY6%2F8z85fABshq%2BV6nEmmzbJ9UdJb18bXJBu3zJaCRUPFSQ%2FVsPrkTz7QJEKk7Mbghw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a41873ed894c1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1144\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1144,"size_decoded":1980,"mime_type":"application/javascript","magic":"ASCII text","md5":"cc851ecae9979c9cb7d86725f8202ab2","sha1":"168c8c343143c6bd39486f20039ca3c4bbaa966c","sha256":"ca338eeb72736d653e58065bf3a80eb1f26b1879da62fc62065e53b8049c19bb","sha512":"557abab1e46c94d058a4d6678671f70aa10ff2e2e270bf3afe44508a75d3dd062a8ef44369f777bfb0aa7ba9d18a6603b110e86bbfa002bec2b6a65797473480","ssdeep":"","tlshash":"4321bb23316c42a45313f027521b6aceba32059bad2a972a312c16cd0fc077903f9af2","first_seen":"2023-12-10T19:25:32Z","last_seen":"2026-10-11T05:58:42.520194Z","times_seen":1557,"resource_available":true,"data":null}},"time_used":450,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":450,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"cdn.bakestubborn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"cdn.bakestubborn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portalfluently.com/sfp.js","fqdn":"portalfluently.com","domain":"portalfluently.com","tld":"com"},"ip":{"addr":"23.111.84.228","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ads.alterhub.site/promoframe#k=3ae6276d5f69eb697421a09960b7da53\u0026n=28128394\u0026i=n3_ke4tgo","date":"2026-09-27T06:29:12.968Z","timestamp":1790490552968,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"portalfluently.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 23:40:44 GMT","end":"Sun, 15 Nov 2026 23:40:43 GMT"},"fingerprint":{"sha1":"04:7E:87:1C:D4:BF:C8:7A:47:9E:4C:FB:2A:44:D1:25:8D:83:7F:1A","sha256":"0B:F1:DB:9B:8C:77:3E:61:8B:03:C2:BF:97:81:32:72:FC:3C:87:CC:8E:6E:6B:D5:93:EF:4F:11:1C:B6:E2:06"}}},"request":{"raw":"GET /sfp.js HTTP/1.1\r\nHost: portalfluently.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Sun, 27 Sep 2026 06:29:13 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\nx-envoy-upstream-service-time: 1\r\nHost: portalfluently.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 3b237f02490c3b9d19f9e5ee83b15ad8\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":37950,"size_decoded":18372,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (37943), with no line terminators","md5":"8b2235271c16f8771b21b86e1f28b646","sha1":"79076a682bb500cf7ce5a0c3b7791f444f0b4745","sha256":"2c474c90d59dd2f40732e241bcaa6d9dfdcad896d3689f7e3a4d0383aecdc7ae","sha512":"0a0a45fdba13e92501476f4744c492c70dcc537f521bf5e0ab08d58af1a1103327d809cf576eb79563a6499816136234f93a523d78ef709986808215dab780e9","ssdeep":"768:2bau76Vkz0LIRCwNvDVlW2WE2FXgi+7RB6hJgbGNqJXY1ATJSf5Rr+LPL8jvZtd6:2GMtW7Qi+7RB8JMGNqJLLFNZB","tlshash":"510329d87193b03993b718e71477a214b23a1c15300a9983e17e5c863d63e5bd23bfad","first_seen":"2026-09-03T11:38:17.004803Z","last_seen":"2026-10-11T18:33:39.03397Z","times_seen":4850,"resource_available":true,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":1,"connect":18,"send":0,"wait":42,"receive":18,"ssl":62},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"portalfluently.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.nresystems.com/img.gif?h1id=1\u0026h3id=0\u0026key=9934f3af5b5e41f86ecd27cc4a72d823\u0026uuid=01a0e18d-aa54-75d6-8bfe-24d1a57a1305","fqdn":"static.nresystems.com","domain":"nresystems.com","tld":"com"},"ip":{"addr":"104.18.19.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ads.alterhub.site/promoframe#k=3ae6276d5f69eb697421a09960b7da53\u0026n=28128394\u0026i=n3_ke4tgo","date":"2026-09-27T06:29:12.975Z","timestamp":1790490552975,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nresystems.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 12:58:44 GMT","end":"Mon, 02 Nov 2026 12:58:43 GMT"},"fingerprint":{"sha1":"0E:57:2C:95:2B:9D:FA:A8:6A:D7:DB:94:38:89:F4:B7:FB:6B:6A:91","sha256":"08:66:34:AB:C3:2D:3C:3D:C1:2D:A0:7E:E3:FF:30:B9:03:C0:3F:57:99:3E:A4:52:16:4F:B4:54:36:BC:41:DD"}}},"request":{"raw":"GET /img.gif?h1id=1\u0026h3id=0\u0026key=9934f3af5b5e41f86ecd27cc4a72d823\u0026uuid=01a0e18d-aa54-75d6-8bfe-24d1a57a1305 HTTP/1.1\r\nHost: static.nresystems.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 27 Sep 2026 06:29:13 GMT\r\ncontent-type: image/gif\r\ncontent-length: 7\r\nserver: cloudflare\r\nx-envoy-upstream-service-time: 1\r\nexpires: Sun, 27 Sep 2026 10:29:13 GMT\r\ncache-control: public, max-age=14400\r\nvary: Origin\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,X-Forwarded-For,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1728000\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nset-cookie: uid_id2=01a0e18d-aa54-75d6-8bfe-24d1a57a1305; Path=/; Expires=Wed, 24 Sep 2036 06:29:13 GMT; Secure; SameSite=None\n__cf_bm=AVAuT33fteEa2qXVfj1loqa4tX32BHcHAOesvtU7k6M-1790490552.9768293-1.0.1.1-Iqho_uG9wKL2KKsYnyM0dwEW36rAAO9jj9KaC7WqdcgCuYxOly_prCRyh7MKIEgYj_hlYovZRQT2vDzAl_6aC4d1txtEafiEvDZClcl0XrmCftKTUQ3uMaw8U0Gp6KV5; HttpOnly; SameSite=None; Secure; Path=/; Domain=nresystems.com; Expires=Sun, 27 Sep 2026 06:59:13 GMT\r\ncf-cache-status: BYPASS\r\ncf-ray: a41873e41dd556ca-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"uid_id2","value":"01a0e18d-aa54-75d6-8bfe-24d1a57a1305","quoted":false,"path":"/","expires":"2036-09-24T06:29:13Z","raw_expires":"Wed, 24 Sep 2036 06:29:13 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uid_id2=01a0e18d-aa54-75d6-8bfe-24d1a57a1305; Path=/; Expires=Wed, 24 Sep 2036 06:29:13 GMT; Secure; SameSite=None"},{"name":"__cf_bm","value":"AVAuT33fteEa2qXVfj1loqa4tX32BHcHAOesvtU7k6M-1790490552.9768293-1.0.1.1-Iqho_uG9wKL2KKsYnyM0dwEW36rAAO9jj9KaC7WqdcgCuYxOly_prCRyh7MKIEgYj_hlYovZRQT2vDzAl_6aC4d1txtEafiEvDZClcl0XrmCftKTUQ3uMaw8U0Gp6KV5","quoted":false,"path":"/","domain":"nresystems.com","expires":"2026-09-27T06:59:13Z","raw_expires":"Sun, 27 Sep 2026 06:59:13 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=AVAuT33fteEa2qXVfj1loqa4tX32BHcHAOesvtU7k6M-1790490552.9768293-1.0.1.1-Iqho_uG9wKL2KKsYnyM0dwEW36rAAO9jj9KaC7WqdcgCuYxOly_prCRyh7MKIEgYj_hlYovZRQT2vDzAl_6aC4d1txtEafiEvDZClcl0XrmCftKTUQ3uMaw8U0Gp6KV5; HttpOnly; SameSite=None; Secure; Path=/; Domain=nresystems.com; Expires=Sun, 27 Sep 2026 06:59:13 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T20:43:33.933419Z","times_seen":19037193,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bicea.org/pixel/sbls?bv=\u0026tmpl=942\u0026u=https%3A%2F%2Fcdn.show-sb.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2Ffinanceskipper%2Fmessage_redcircle2%2F16%2Findex.html\u0026l=1545\u0026fd=487","fqdn":"bicea.org","domain":"bicea.org","tld":"org"},"ip":{"addr":"104.21.86.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ads.alterhub.site/promoframe#k=fdfdd92a59e588025342002253695a24\u0026w=468\u0026h=60\u0026i=u2_h3rpj0","date":"2026-09-27T06:29:14.399Z","timestamp":1790490554399,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bicea.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Sep 2026 14:22:10 GMT","end":"Tue, 15 Dec 2026 15:22:04 GMT"},"fingerprint":{"sha1":"B9:2F:CB:73:40:D7:7C:69:4A:C6:22:3F:45:F8:CA:8D:35:85:B1:C6","sha256":"1A:05:85:45:D6:5A:93:DC:D9:59:BF:16:3B:1F:F2:B3:07:D5:B3:3C:34:CF:6D:7D:8D:BC:6F:D5:88:E3:95:59"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=942\u0026u=https%3A%2F%2Fcdn.show-sb.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2Ffinanceskipper%2Fmessage_redcircle2%2F16%2Findex.html\u0026l=1545\u0026fd=487 HTTP/1.1\r\nHost: bicea.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uidm=01a0e18d-aa54-75d6-8bfe-24d1a57a1305_2; __cf_bm=s97WfwL8KEDlwJ2cPRMHNEF9t5jPNhpTu1ntfKcpF6c-1790490552.8525264-1.0.1.1-x7_tfLhRY9ofMW4Gcd_xl..H59XSfMYUoI66PPL9LEHv_bWUGQvUPwgWhN0XjBjF9GOag6VdFdtjq1hbB0ZB3T8I1p6mJPUaW4smEEym4vZNDFmJE3JzjshCATN0yON1; pdhtkv=true; uncs=2; pdhtkv29=true; uncs29=2; u_pl31286095=1; slec9934f3af5b5e41f86ecd27cc4a72d823=[6790254]; u_pl31156143=1; slec9ecf8e436a025f7fff03b61551d7e737=[6671912]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 27 Sep 2026 06:29:14 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\naccept-ch: Sec-Ch-Ua-Full-Version-List, Sec-Ch-Ua-Full-Version, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, User-Agent, Sec-Ch-Ua, Sec-Ch-Ua-Platformuser-Agent, Sec-Ch-Ua-Model, Device-Stock-Ua, X-Device-User-Agent, X-Operamini-Phone-Ua, X-Ucbrowser-Device-Ua, Sec-Ch-Ua-Platform-Version\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\naccess-control-expose-headers: Content-Length,Content-Range\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a41873ecfde932fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":820,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T20:43:33.933419Z","times_seen":19037193,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.bakestubborn.com/sb/ssp/interstitial/message_redcircle/1/img/close.svg","fqdn":"cdn.bakestubborn.com","domain":"bakestubborn.com","tld":"com"},"ip":{"addr":"104.21.74.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ads.alterhub.site/promoframe#k=3ae6276d5f69eb697421a09960b7da53\u0026n=28128394\u0026i=n3_ke4tgo","date":"2026-09-27T06:29:14.422Z","timestamp":1790490554422,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bakestubborn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 10:45:38 GMT","end":"Sun, 29 Nov 2026 11:44:06 GMT"},"fingerprint":{"sha1":"CC:2C:E2:22:5E:AA:1C:23:69:1C:A8:45:D8:E3:11:DD:72:0F:3A:7F","sha256":"BF:DE:33:C4:70:F3:0B:0C:27:4F:85:FB:EB:B1:8B:DF:D8:F6:7A:95:F2:7D:D9:E6:40:CC:60:74:A0:77:92:D1"}}},"request":{"raw":"GET /sb/ssp/interstitial/message_redcircle/1/img/close.svg HTTP/1.1\r\nHost: cdn.bakestubborn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 06:29:14 GMT\r\ncontent-type: image/svg+xml\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 19 Jan 2024 14:19:45 GMT\r\npriority: u=5,i\r\netag: \"65aa8501-4ff\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\naccept-ranges: bytes\r\nage: 2294249\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9gBl%2FKS0joocE5xTbZIim8dWpa%2FSP%2FOYgOoJNrBAX006mikDUZNq%2FYFsSNnM%2BGQLFuSPDHmUG0kmLFOKg8DPYgI3D%2ByP8Rdtch27lykYS%2FvjZJb1Wi8Z4g89Lz4QfaqzTnJMcq26EQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a41873ed29421525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1279\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1279,"size_decoded":2122,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"369850b9873659adf0951d845f57dba1","sha1":"a64257186daa33b6b318943a457b6cf8d80b26b6","sha256":"9630c142a8c074cc1809ebf4109538cf29cc0baeb6c27726191f1cf5376e2e21","sha512":"6441b40e85c86e21362c7061a6b9610f52a5c801b274b246711546ad45c68c3e7f2f242f1621b90967eaeebf52709545d06283c2015d6b9ad7f6f7d37fb14a88","ssdeep":"","tlshash":"6821d8dc958f223ef324ff6189b316606ba423f6bb18c5bcb199a8157e1cb910c48e14","first_seen":"2023-04-07T22:39:47Z","last_seen":"2026-10-11T05:58:42.491772Z","times_seen":11581,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"cdn.bakestubborn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"cdn.bakestubborn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bicea.org/11/H4sIAAAAAAAC_4xTy2tcVRi_EwsuChWkWBCFWRRpwZmec9_XLsTYPJomk7RNTB_IcO55zJzMffWee2cmWbVWxGXduRC5802aqNTXxupKmQgihUIHN4M0G_8BpehOkEkGqjsPnO_1O3B-3znf771evq9VISejlaV4SwYBOWNVUfnUuoxY3FHl2moZoyo6W16XkW2eLXfHJm2_hg2zik6X5zhtxWd0hBHCCJdnZcpF3D1zgIJM7nm46qGqqVexZUI3_W-u8ilQZApYe197HiQbPvebuA6SDiAKvzrHVSuLk1dnwjwgWZxCm-2uRa0o7kQQPg1FWgIR7U5OQ6yGmvbhFMTR7qQDiNvb4w7Al0Nt6oXH4Ee7E5rgt-8eMvUD4BH47Ch02gPgwQAkGQCNb4NkjzQAyqC2DFG4U4vTDtk8RMkYHWpH_noCsjPUjjw-DlH4xXQgu-XLcZBnMo4UdEUBsjsA2RhAku9BtjUFsrMHNHsHJHuooRNHIQo_m4_bslVu87QFko1OIkwQxy6rEGKZFcdidsX1Ba_oJsPEcgg2kHXwUFIMgKgS5OMtS5CLEuRJCUI2KpvINSkmhi08Rh1kEtNk3EeeqyNEPOpATm-BZHeApu_fy-tJYGDdtZFn9fDopAo49TzDFAYRlm9xEwvX5pTpDqUmcXTm6san123HQ7plvr2dSxaOXvk_tOv6br1ORd0PRz8pz1kXnUX3wsy5oLOg05VLS_O1mVkvszZWas1kNcdRJi7QZNamFex4yPSQZelV19It3TYruIqquIorXaeeicXmpateLJbWzTnK6t2gWp23vCuXxdLVtfi8ba-sLHqLM_Ptur--NnexvbbSaaw3a-jKxvTGrDe3TBr2W2yWZRs3cNOfRtemjVX3PE7scGFljaybKpyZ2QzN9rXaudlwYcZY2NpQzTffWK2hzeUa3klYM2u1t7M059t5RFUPf3JY0r2D4s64qHs9DEl6E1ryDihWApVp0GbFXRYoXRU7LFC5jyden3ij6MdZo0fuxlmDRxqQ9A6krNiWyQ11G2j2TH9LqAv9eGyInxV94rOiL1mmQXrj33PEyPhDMK8Qw0MV07SY77sIMQ9tC5XlRS-ZaLD0a-NLaPFR2eNUuNw0bIJ0SzhCCGT4NrYszBzuGA4oWYBU2sH8bcmhdvH-aUjkUKtc-xh8sgcq2AMqXwKSvwykUwBpFrAVfU6CjKfN3K8qmXFgcQFJdgSyzRLwrNQL9rXj_Uur0z8caIs_PAWcPtAmC2haQJIWsCF_1KAR3Pp6OclkKLfIWGyXM5LxEhD56NgxoHKoPfvznweqP7H_ItDkJqjkwet_dH_5-8k3s_1AJUOt8VEIKtbAT0oQSA0C_vQq4heg-IPvf5_k_tO4p96FRloCPyj1_SAtbftBGnxwyFbJUVkYXKcIuY6NDVdwbJiMCss1PWYTZBgcMjXc-Pb-d_8MAFUfMAR8BQAA","fqdn":"bicea.org","domain":"bicea.org","tld":"org"},"ip":{"addr":"104.21.86.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ads.alterhub.site/promoframe#k=fdfdd92a59e588025342002253695a24\u0026w=468\u0026h=60\u0026i=u2_h3rpj0","date":"2026-09-27T06:29:14.904Z","timestamp":1790490554904,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bicea.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Sep 2026 14:22:10 GMT","end":"Tue, 15 Dec 2026 15:22:04 GMT"},"fingerprint":{"sha1":"B9:2F:CB:73:40:D7:7C:69:4A:C6:22:3F:45:F8:CA:8D:35:85:B1:C6","sha256":"1A:05:85:45:D6:5A:93:DC:D9:59:BF:16:3B:1F:F2:B3:07:D5:B3:3C:34:CF:6D:7D:8D:BC:6F:D5:88:E3:95:59"}}},"request":{"raw":"GET /11/H4sIAAAAAAAC_4xTy2tcVRi_EwsuChWkWBCFWRRpwZmec9_XLsTYPJomk7RNTB_IcO55zJzMffWee2cmWbVWxGXduRC5802aqNTXxupKmQgihUIHN4M0G_8BpehOkEkGqjsPnO_1O3B-3znf771evq9VISejlaV4SwYBOWNVUfnUuoxY3FHl2moZoyo6W16XkW2eLXfHJm2_hg2zik6X5zhtxWd0hBHCCJdnZcpF3D1zgIJM7nm46qGqqVexZUI3_W-u8ilQZApYe197HiQbPvebuA6SDiAKvzrHVSuLk1dnwjwgWZxCm-2uRa0o7kQQPg1FWgIR7U5OQ6yGmvbhFMTR7qQDiNvb4w7Al0Nt6oXH4Ee7E5rgt-8eMvUD4BH47Ch02gPgwQAkGQCNb4NkjzQAyqC2DFG4U4vTDtk8RMkYHWpH_noCsjPUjjw-DlH4xXQgu-XLcZBnMo4UdEUBsjsA2RhAku9BtjUFsrMHNHsHJHuooRNHIQo_m4_bslVu87QFko1OIkwQxy6rEGKZFcdidsX1Ba_oJsPEcgg2kHXwUFIMgKgS5OMtS5CLEuRJCUI2KpvINSkmhi08Rh1kEtNk3EeeqyNEPOpATm-BZHeApu_fy-tJYGDdtZFn9fDopAo49TzDFAYRlm9xEwvX5pTpDqUmcXTm6san123HQ7plvr2dSxaOXvk_tOv6br1ORd0PRz8pz1kXnUX3wsy5oLOg05VLS_O1mVkvszZWas1kNcdRJi7QZNamFex4yPSQZelV19It3TYruIqquIorXaeeicXmpateLJbWzTnK6t2gWp23vCuXxdLVtfi8ba-sLHqLM_Ptur--NnexvbbSaaw3a-jKxvTGrDe3TBr2W2yWZRs3cNOfRtemjVX3PE7scGFljaybKpyZ2QzN9rXaudlwYcZY2NpQzTffWK2hzeUa3klYM2u1t7M059t5RFUPf3JY0r2D4s64qHs9DEl6E1ryDihWApVp0GbFXRYoXRU7LFC5jyden3ij6MdZo0fuxlmDRxqQ9A6krNiWyQ11G2j2TH9LqAv9eGyInxV94rOiL1mmQXrj33PEyPhDMK8Qw0MV07SY77sIMQ9tC5XlRS-ZaLD0a-NLaPFR2eNUuNw0bIJ0SzhCCGT4NrYszBzuGA4oWYBU2sH8bcmhdvH-aUjkUKtc-xh8sgcq2AMqXwKSvwykUwBpFrAVfU6CjKfN3K8qmXFgcQFJdgSyzRLwrNQL9rXj_Uur0z8caIs_PAWcPtAmC2haQJIWsCF_1KAR3Pp6OclkKLfIWGyXM5LxEhD56NgxoHKoPfvznweqP7H_ItDkJqjkwet_dH_5-8k3s_1AJUOt8VEIKtbAT0oQSA0C_vQq4heg-IPvf5_k_tO4p96FRloCPyj1_SAtbftBGnxwyFbJUVkYXKcIuY6NDVdwbJiMCss1PWYTZBgcMjXc-Pb-d_8MAFUfMAR8BQAA HTTP/1.1\r\nHost: bicea.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uidm=01a0e18d-aa54-75d6-8bfe-24d1a57a1305_2; __cf_bm=s97WfwL8KEDlwJ2cPRMHNEF9t5jPNhpTu1ntfKcpF6c-1790490552.8525264-1.0.1.1-x7_tfLhRY9ofMW4Gcd_xl..H59XSfMYUoI66PPL9LEHv_bWUGQvUPwgWhN0XjBjF9GOag6VdFdtjq1hbB0ZB3T8I1p6mJPUaW4smEEym4vZNDFmJE3JzjshCATN0yON1; pdhtkv=true; uncs=2; pdhtkv29=true; uncs29=2; u_pl31286095=1; slec9934f3af5b5e41f86ecd27cc4a72d823=[6790254]; u_pl31156143=1; slec9ecf8e436a025f7fff03b61551d7e737=[6671912]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 27 Sep 2026 06:29:14 GMT\r\ncontent-type: image/gif\r\ncontent-length: 7\r\nserver: cloudflare\r\naccept-ch: Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Platform,Device-Stock-Ua,X-Device-User-Agent,X-Ucbrowser-Device-Ua,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile,X-Operamini-Phone-Ua,User-Agent,Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent\r\nset-cookie: iprc_l+574e4dfde0b7d9d0e285c2e1fff9d691=6671912; Path=/; Expires=Mon, 28 Sep 2026 06:29:14 GMT; Secure; SameSite=None\niprc_l-6671912=1; Path=/; Expires=Mon, 28 Sep 2026 06:29:14 GMT; Secure; SameSite=None\r\nvary: Accept-Encoding, Origin\r\nx-envoy-upstream-service-time: 5\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: no-cache, max-age=0, private, no-cache\r\nx-request-id: a116b74b4e632df028024f23ff07394a\r\npragma: no-cache\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,X-Forwarded-For,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1728000\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a41873f02bf232fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"iprc_l+574e4dfde0b7d9d0e285c2e1fff9d691","value":"6671912","quoted":false,"path":"/","expires":"2026-09-28T06:29:14Z","raw_expires":"Mon, 28 Sep 2026 06:29:14 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"iprc_l+574e4dfde0b7d9d0e285c2e1fff9d691=6671912; Path=/; Expires=Mon, 28 Sep 2026 06:29:14 GMT; Secure; SameSite=None"},{"name":"iprc_l-6671912","value":"1","quoted":false,"path":"/","expires":"2026-09-28T06:29:14Z","raw_expires":"Mon, 28 Sep 2026 06:29:14 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"iprc_l-6671912=1; Path=/; Expires=Mon, 28 Sep 2026 06:29:14 GMT; Secure; SameSite=None"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T20:43:33.933419Z","times_seen":19037193,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tr.rbxcdn.com/180DAY-a0da9e4963fd5f0b0c07270f1ac2c93f/256/256/Image/Png/noFilter","fqdn":"tr.rbxcdn.com","domain":"rbxcdn.com","tld":"com"},"ip":{"addr":"143.204.238.74","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://alterhub.site/","date":"2026-09-27T06:29:12.529Z","timestamp":1790490552529,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rbxcdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 09 Sep 2026 00:00:00 GMT","end":"Thu, 25 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"75:D8:06:E9:90:C5:4F:78:20:E1:DC:B0:2D:7F:04:D1:43:36:17:D5","sha256":"3B:CA:A7:4C:D5:BA:BE:D5:47:44:99:0D:4A:D5:DF:17:82:35:B8:6B:67:AF:9F:D7:A1:77:B6:43:87:6A:83:9B"}}},"request":{"raw":"GET /180DAY-a0da9e4963fd5f0b0c07270f1ac2c93f/256/256/Image/Png/noFilter HTTP/1.1\r\nHost: tr.rbxcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://alterhub.site/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/Png\r\ncontent-length: 71129\r\ndate: Sun, 27 Sep 2026 02:13:30 GMT\r\nserver: public-gateway\r\ncache-control: no-cache\r\nedge-cache-tag: 180DAY-a0da9e4963fd5f0b0c07270f1ac2c93f\r\nstrict-transport-security: max-age=31536000\r\nx-frame-options: SAMEORIGIN\r\nroblox-machine-id: b89cbcee-546a-154a-754b-ffc28bf21e4f\r\nx-envoy-attempt-count: 1\r\nx-envoy-upstream-service-time: 202\r\nx-terms-message: Terms apply https://rblx.co/TOU.\r\nx-ratelimit-limit: 300000, 300000;w=60\r\nx-ratelimit-remaining: 288658\r\nx-ratelimit-reset: 30\r\nx-ingress-proxy: true\r\nx-roblox-edge: c279\r\nreport-to: {\"group\":\"network-errors\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://ncs.roblox.com/upload\"}]}\r\nnel: {\"report_to\":\"network-errors\",\"max_age\":604800,\"success_fraction\":0,\"failure_fraction\":0.05,\"response_headers\":[\"Rbx-Cdn-Provider\",\"vary\"]}\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 4888a1b692b693505c9036bc998623cc.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: gUmiAxgu29PIVYwGzF-UdsAmzb_4H5Ws5Kzv6eQPAPJjqf_5tDRIUw==\r\nage: 15342\r\nrbx-cdn-provider: aws\r\ntiming-allow-origin: *\r\nvary: Origin\r\nserver-timing: cdn-cache-hit,cdn-pop;desc=\"ARN53-P4\",cdn-rid;desc=\"gUmiAxgu29PIVYwGzF-UdsAmzb_4H5Ws5Kzv6eQPAPJjqf_5tDRIUw==\",cdn-hit-layer;desc=\"EDGE\",cdn-downstream-fbl;dur=2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":71129,"size_decoded":72439,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGB, non-interlaced","md5":"4699f5c2b33e91112e59eb88b178b296","sha1":"fa317cdb0e42465575ad94d48b56af24a739f658","sha256":"5c3fc100a174f4996af61533c2f583fa5ee3950790a87388bdfb2eaedc27e6e0","sha512":"8a739d6fcd6834dcab0e82a7ede16794ed29cece631195c044fe61271feedec81c9ca575b0e4722f61f112422e98f185d43fe48cb5d47a5000ca64ab6d1f8893","ssdeep":"1536:DJbJ7eIzvm38D2Gcz7UZYwKfj9KC9pqtZ8vfRGCfSf:lj63pKKb0C9pKiRx6f","tlshash":"6d6302270a19a174dc3d1af286032044f6d235b23c194cb9a67c86deddb49694c6fb7f","first_seen":"2026-09-27T06:30:15.086952Z","last_seen":"2026-09-27T06:30:56.858993Z","times_seen":2,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":11,"send":0,"wait":45,"receive":1,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/cti/1c/74/1d/1c741db7f66779009cf74f4c9e8aabf5/1781790808.jpg","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ads.alterhub.site/promoframe#k=3ae6276d5f69eb697421a09960b7da53\u0026n=28128394\u0026i=n3_ke4tgo","date":"2026-09-27T06:29:13.219Z","timestamp":1790490553219,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 02:32:58 GMT","end":"Wed, 02 Dec 2026 02:32:57 GMT"},"fingerprint":{"sha1":"0C:28:A6:45:71:D0:51:55:56:A0:1D:34:71:8C:C4:7C:16:5A:03:5C","sha256":"68:73:EC:1A:D4:78:3E:46:1A:F8:1D:99:8F:CB:9D:46:B9:0E:28:CF:C6:BF:14:EF:F5:90:39:D3:FF:5A:1F:5C"}}},"request":{"raw":"GET /cti/1c/74/1d/1c741db7f66779009cf74f4c9e8aabf5/1781790808.jpg HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 27 Sep 2026 06:29:13 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 88305\r\nserver: nginx/1.21.6\r\nlast-modified: Thu, 18 Jun 2026 13:53:28 GMT\r\netag: \"6a33f858-158f1\"\r\nexpires: Tue, 29 Sep 2026 06:29:13 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":88305,"size_decoded":88654,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 26.3 (Macintosh), datetime=2026:06:18 15:47:48], progressive, precision 8, 320x240, components 3","md5":"b895a4bdb4f5f48355b081fa6fa0d888","sha1":"a509614bf907dd2e60b55c61aff8a32863e158bc","sha256":"03c953f79d30c60b847399f7e8e10c3aa4375c942e2c9218f7da79cf5f833930","sha512":"28d0e4b488b0cc0812fabfbcc00b28310d75b22564596704ebaafb4e60afdf51187ebc0d5d97fc2417e3cf1865520d4b8c1d096536b82290b990ab5c5818d3ba","ssdeep":"1536:8p6X+hp6X+HquL6eR05p48SN90VXkgqXU4yJEWdrNHMuaPCl43q4SDkEbZ7EQJV0:8p6uhp6uLRw+0xVfTJEs6qbw+7EQPoPl","tlshash":"b783f106eb118c23f8e5433126e3dbda67233658a75316a73cac7053fb68520985e19b","first_seen":"2026-06-30T14:22:40.327252Z","last_seen":"2026-10-09T18:15:22.157447Z","times_seen":136,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":2,"connect":19,"send":0,"wait":36,"receive":31,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bicea.org/pixel/sbls?bv=\u0026tmpl=942\u0026u=https%3A%2F%2Fcdn.bakestubborn.com%2Fsb%2Fssp%2Finterstitial%2Fmessage_redcircle%2F1%2Fjs%2Fscript.js\u0026l=1144\u0026fd=454","fqdn":"bicea.org","domain":"bicea.org","tld":"org"},"ip":{"addr":"104.21.86.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ads.alterhub.site/promoframe#k=3ae6276d5f69eb697421a09960b7da53\u0026n=28128394\u0026i=n3_ke4tgo","date":"2026-09-27T06:29:14.937Z","timestamp":1790490554937,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bicea.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Sep 2026 14:22:10 GMT","end":"Tue, 15 Dec 2026 15:22:04 GMT"},"fingerprint":{"sha1":"B9:2F:CB:73:40:D7:7C:69:4A:C6:22:3F:45:F8:CA:8D:35:85:B1:C6","sha256":"1A:05:85:45:D6:5A:93:DC:D9:59:BF:16:3B:1F:F2:B3:07:D5:B3:3C:34:CF:6D:7D:8D:BC:6F:D5:88:E3:95:59"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=942\u0026u=https%3A%2F%2Fcdn.bakestubborn.com%2Fsb%2Fssp%2Finterstitial%2Fmessage_redcircle%2F1%2Fjs%2Fscript.js\u0026l=1144\u0026fd=454 HTTP/1.1\r\nHost: bicea.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uidm=01a0e18d-aa54-75d6-8bfe-24d1a57a1305_2; __cf_bm=s97WfwL8KEDlwJ2cPRMHNEF9t5jPNhpTu1ntfKcpF6c-1790490552.8525264-1.0.1.1-x7_tfLhRY9ofMW4Gcd_xl..H59XSfMYUoI66PPL9LEHv_bWUGQvUPwgWhN0XjBjF9GOag6VdFdtjq1hbB0ZB3T8I1p6mJPUaW4smEEym4vZNDFmJE3JzjshCATN0yON1; pdhtkv=true; uncs=2; pdhtkv29=true; uncs29=2; u_pl31286095=1; slec9934f3af5b5e41f86ecd27cc4a72d823=[6790254]; u_pl31156143=1; slec9ecf8e436a025f7fff03b61551d7e737=[6671912]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 27 Sep 2026 06:29:14 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\naccept-ch: Sec-Ch-Ua-Platform, Sec-Ch-Ua-Model, Sec-Ch-Ua-Mobile, X-Device-User-Agent, X-Operamini-Phone-Ua, X-Ucbrowser-Device-Ua, Sec-Ch-Ua-Full-Version-List, Device-Stock-Ua, User-Agent, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua, Sec-Ch-Ua-Platformuser-Agent, Sec-Ch-Ua-Full-Version\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\naccess-control-expose-headers: Content-Length,Content-Range\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a41873f05c5e32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":820,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T20:43:33.933419Z","times_seen":19037193,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alterhub.site/logo.png?cb=1790490551873","fqdn":"alterhub.site","domain":"alterhub.site","tld":"site"},"ip":{"addr":"104.21.42.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://alterhub.site/","date":"2026-09-27T06:29:11.881Z","timestamp":1790490551881,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alterhub.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 00:28:34 GMT","end":"Sat, 07 Nov 2026 01:28:30 GMT"},"fingerprint":{"sha1":"CC:30:2C:31:6D:59:8D:61:CD:11:F9:93:CE:16:C0:86:EE:F5:4A:5A","sha256":"FD:96:F8:0E:8C:08:48:55:A0:F2:69:BB:EA:8B:3A:98:9A:71:49:5F:30:C6:90:E1:9F:D3:7F:54:A3:38:1A:B6"}}},"request":{"raw":"GET /logo.png?cb=1790490551873 HTTP/1.1\r\nHost: alterhub.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://alterhub.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 753996\r\ncache-control: public, max-age=86400, stale-while-revalidate=3600\r\ncontent-disposition: inline; filename=\"logo.png\"\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; frame-src 'self' https: data: blob:; media-src 'self' https: data: blob:; connect-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self' https:;\r\ncontent-type: image/png\r\ndate: Sun, 27 Sep 2026 06:29:11 GMT\r\netag: \"b30492cf7dcd04f149fdf83974f64f66\"\r\nlast-modified: Fri, 18 Sep 2026 13:02:35 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::zvgz8-1790490551929-4083f6e1eec6\r\nserver-timing: cfExtPri\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jv2fpSa4hKMoWLy%2Fa43XKSbEyf1O6E2SzKgQpfqtwAJg7kzaHrmoJxeYy9PxGk%2Fo2vVdi5esseoypEzMsr2DFafsxrFBr48uaKIAbC5DlgYeZOmSoXdlLC9D7mQ%2B9myw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a41873dd4b2b0b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 36775\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":36775,"size_decoded":38258,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"b30492cf7dcd04f149fdf83974f64f66","sha1":"697f8116ae7258f96fdc8e575d9217d0561a819e","sha256":"48714eead8381395628a7730a417d2d60c7afa2cb7eb48f00cee45ee364115c0","sha512":"7af92369e8b331e67936405d19a9df86bfbccb6b8e76b172edc1697df844dd2e1bd69ce5f02e6ca9ff7e7a0619b2fa300d99582980cf3731e7e9c601da027aa6","ssdeep":"768:O8QZ/xPVFsTJEkZjQZl8CVGOEGFkxQLoXm7pc9lLt+2jf38T6hWze0Xua:O8QTw6CjDCUDLOctPzQea","tlshash":"9af2e1477874607668a308ef34b65b2957a664c0a4a11f355b33bf1a77343f83c9de09","first_seen":"2026-09-27T06:27:52.386786Z","last_seen":"2026-09-27T06:30:56.855844Z","times_seen":4,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ads.alterhub.site/promoframe.html#k=d99b65ef2f1e54f34f14ebb6236adcad\u0026w=468\u0026h=60\u0026i=u1_v62o5x","fqdn":"ads.alterhub.site","domain":"alterhub.site","tld":"site"},"ip":{"addr":"104.21.42.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://alterhub.site/","date":"2026-09-27T06:29:12.115Z","timestamp":1790490552115,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alterhub.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 00:28:34 GMT","end":"Sat, 07 Nov 2026 01:28:30 GMT"},"fingerprint":{"sha1":"CC:30:2C:31:6D:59:8D:61:CD:11:F9:93:CE:16:C0:86:EE:F5:4A:5A","sha256":"FD:96:F8:0E:8C:08:48:55:A0:F2:69:BB:EA:8B:3A:98:9A:71:49:5F:30:C6:90:E1:9F:D3:7F:54:A3:38:1A:B6"}}},"request":{"raw":"GET /promoframe.html HTTP/1.1\r\nHost: ads.alterhub.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://alterhub.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=Y3_9Q5s.VO85OlRAqFfB2dTrk0CywSN3jGmQQoIUouE-1790490552-1.2.1.1-0xos2XuR8es9GyM5OWDs6icaJ8unVLMx3YGIrYMXJ7uZmKFCwKUPA2X_EE69pPWzGsd9UQZAum76gnam6AJqqAvKuHLcsw3LcAWcoHJSPilD3DSkTdLv3V3fDXGE1uymM2V31WOv1fiq222__oCOoNBxG0cdwugzeh2bVOHGhsxmITdW_ANygmKCmd077CP_O3YgqnZRe7rswHmUuGXQAkwCPPRg6Pr_2se0001xmCfEPY8VmAYo5meDAQ.M4LZ.rQoq1iZpf_Yk37IueLxOcWhGo_mtxQVhO4wjcUuvmESJty_3CEpNe5uFUo9bwFJsjx6yT.nP2V5GYTwALmA3MWiwpXPHQ.Gelpx8LkCsF0h3dkTPpGy7hlxutFfo2MmkPEH5kl1q_2ojVOMlr3vZ8AUBtJ7eEeqYUIQWqo2d2hI\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 308 \r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/html\r\ndate: Sun, 27 Sep 2026 06:29:12 GMT\r\nlocation: /promoframe\r\nrefresh: 0;url=/promoframe\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-id: arn1::7h8q7-1790490552146-3474a7d8a0fa\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d8eHQpRmqhJ33VGXafvWtba0Gap6FfZNoR78m42%2BUod%2FLs7Xxly4QP0FF0Q8B012Y7IkJhjS8EKM602aozS4aEhQJu5HPXUue1HczVYNOxdg4BFdprU7WDbfoofJ7ObaK5g6NQ%3D%3D\"}]}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a41873debb580b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"308","status_text":"Permanent Redirect","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T20:43:33.933419Z","times_seen":19037193,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":3,"connect":1,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ads.alterhub.site/promoframe#k=d99b65ef2f1e54f34f14ebb6236adcad\u0026w=468\u0026h=60\u0026i=u1_v62o5x","fqdn":"ads.alterhub.site","domain":"alterhub.site","tld":"site"},"ip":{"addr":"104.21.42.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://alterhub.site/","date":"2026-09-27T06:29:12.178Z","timestamp":1790490552178,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alterhub.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 00:28:34 GMT","end":"Sat, 07 Nov 2026 01:28:30 GMT"},"fingerprint":{"sha1":"CC:30:2C:31:6D:59:8D:61:CD:11:F9:93:CE:16:C0:86:EE:F5:4A:5A","sha256":"FD:96:F8:0E:8C:08:48:55:A0:F2:69:BB:EA:8B:3A:98:9A:71:49:5F:30:C6:90:E1:9F:D3:7F:54:A3:38:1A:B6"}}},"request":{"raw":"GET /promoframe HTTP/1.1\r\nHost: ads.alterhub.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://alterhub.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=Y3_9Q5s.VO85OlRAqFfB2dTrk0CywSN3jGmQQoIUouE-1790490552-1.2.1.1-0xos2XuR8es9GyM5OWDs6icaJ8unVLMx3YGIrYMXJ7uZmKFCwKUPA2X_EE69pPWzGsd9UQZAum76gnam6AJqqAvKuHLcsw3LcAWcoHJSPilD3DSkTdLv3V3fDXGE1uymM2V31WOv1fiq222__oCOoNBxG0cdwugzeh2bVOHGhsxmITdW_ANygmKCmd077CP_O3YgqnZRe7rswHmUuGXQAkwCPPRg6Pr_2se0001xmCfEPY8VmAYo5meDAQ.M4LZ.rQoq1iZpf_Yk37IueLxOcWhGo_mtxQVhO4wjcUuvmESJty_3CEpNe5uFUo9bwFJsjx6yT.nP2V5GYTwALmA3MWiwpXPHQ.Gelpx8LkCsF0h3dkTPpGy7hlxutFfo2MmkPEH5kl1q_2ojVOMlr3vZ8AUBtJ7eEeqYUIQWqo2d2hI\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\nage: 753996\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"promoframe\"\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; frame-src 'self' https: data: blob:; media-src 'self' https: data: blob:; connect-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self' https:; frame-ancestors https://alterhub.site https://www.alterhub.site;\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sun, 27 Sep 2026 06:29:12 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 18 Sep 2026 13:02:35 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::7h8q7-1790490552195-ff101f2e00cf\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pI6drq3xJPVDks0FUXLijMn0tJ%2F0%2BzFyNlD89aIIiMBDX4%2BOwbffXefiPRWVDWFG2WB4G3a%2BqDYAZJ0Sub4Hm9%2B9fP2MsPPfk4oqMTN1VddKtlsWC4LMLtqayophfUdnfsU0sg%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: a41873df2b610b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3705,"size_decoded":3310,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"1e0d3faf8d68838811acc2295bc4c8bf","sha1":"099464ea459114da3161e81c364578a8e332b3db","sha256":"f9230bb5c891635d4c3605b3a6c4061ba69d39e336e6ffc88aacbde15bf3676e","sha512":"8f7ba179af9896e4c71ba80e5ae5d3bc62d9ef20c472c50e937f85c356420f92f0fd0fb55aa33abdaecca740a60473bb380fcf8710ca8ea66327946d38c494d1","ssdeep":"","tlshash":"cc71943f2ea122b8755302f53abfa1443336c12a6111d9a0bcaee258ffd0e155427fd8","first_seen":"2026-09-27T06:30:15.062796Z","last_seen":"2026-09-27T06:30:56.861643Z","times_seen":2,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aqml.org/16/6f633c7fd769c4533953a1b5d3fc2439","fqdn":"aqml.org","domain":"aqml.org","tld":"org"},"ip":{"addr":"172.67.215.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ads.alterhub.site/promoframe#k=aee874e267daf21ad94938c5960ef7a1\u0026n=27873862\u0026i=n4_0eh5yg","date":"2026-09-27T06:29:12.796Z","timestamp":1790490552796,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aqml.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Sep 2026 13:36:46 GMT","end":"Tue, 15 Dec 2026 14:36:42 GMT"},"fingerprint":{"sha1":"34:A6:72:5B:20:45:F1:E6:6E:20:09:20:A2:76:92:39:84:2C:2B:B9","sha256":"B6:D9:25:0C:FB:DC:E8:14:EF:A2:03:18:05:20:55:36:F0:E5:FE:E0:01:2F:9E:86:6C:32:E1:FE:AB:FB:92:68"}}},"request":{"raw":"GET /16/6f633c7fd769c4533953a1b5d3fc2439 HTTP/1.1\r\nHost: aqml.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 27 Sep 2026 06:29:12 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nset-cookie: uidm=01a0e18d-aa09-7398-9ae3-33b507aca9d9_1; Path=/; Expires=Wed, 24 Sep 2036 06:29:12 GMT; Secure; SameSite=None\n__cf_bm=rMpypCTgjUCZzF0ohOVXdFm3e1Sx3619QkfOgloM9RY-1790490552.7968779-1.0.1.1-4JjU7.tsD1o2KJagSFWnWod4UAuihlyts1vER6LvYAE.kCQGjOVdq7Ljup_Pf809xcokHb01NtH1737hWePICvKcE0SBJ7SGu5wEKQDAac.TJnPXHDwtx8ti4Gr9rkkD; HttpOnly; SameSite=None; Secure; Path=/; Domain=aqml.org; Expires=Sun, 27 Sep 2026 06:59:12 GMT\r\naccept-ch: Device-Stock-Ua,X-Device-User-Agent,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Mobile,Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Model\r\ncontent-encoding: gzip\r\nlink: \u003chttps://aqml.org\u003e; rel=preconnect; crossorigin, \u003chttps://aqml.org\u003e; rel=dns-prefetch, \u003chttps://static.nresystems.com\u003e; rel=preconnect; crossorigin, \u003chttps://static.nresystems.com\u003e; rel=dns-prefetch\r\nvary: Accept-Encoding, Origin\r\nx-envoy-upstream-service-time: 7\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: no-cache, max-age=0, private, no-cache\r\nx-request-id: b31071b364c0e66925e86e14886626f1\r\npragma: no-cache\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,X-Forwarded-For,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1728000\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a41873e2f915120a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"uidm","value":"01a0e18d-aa09-7398-9ae3-33b507aca9d9_1","quoted":false,"path":"/","expires":"2036-09-24T06:29:12Z","raw_expires":"Wed, 24 Sep 2036 06:29:12 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uidm=01a0e18d-aa09-7398-9ae3-33b507aca9d9_1; Path=/; Expires=Wed, 24 Sep 2036 06:29:12 GMT; Secure; SameSite=None"},{"name":"__cf_bm","value":"rMpypCTgjUCZzF0ohOVXdFm3e1Sx3619QkfOgloM9RY-1790490552.7968779-1.0.1.1-4JjU7.tsD1o2KJagSFWnWod4UAuihlyts1vER6LvYAE.kCQGjOVdq7Ljup_Pf809xcokHb01NtH1737hWePICvKcE0SBJ7SGu5wEKQDAac.TJnPXHDwtx8ti4Gr9rkkD","quoted":false,"path":"/","domain":"aqml.org","expires":"2026-09-27T06:59:12Z","raw_expires":"Sun, 27 Sep 2026 06:59:12 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=rMpypCTgjUCZzF0ohOVXdFm3e1Sx3619QkfOgloM9RY-1790490552.7968779-1.0.1.1-4JjU7.tsD1o2KJagSFWnWod4UAuihlyts1vER6LvYAE.kCQGjOVdq7Ljup_Pf809xcokHb01NtH1737hWePICvKcE0SBJ7SGu5wEKQDAac.TJnPXHDwtx8ti4Gr9rkkD; HttpOnly; SameSite=None; Secure; Path=/; Domain=aqml.org; Expires=Sun, 27 Sep 2026 06:59:12 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9788,"size_decoded":6266,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9788), with no line terminators","md5":"e034b733f7e96b415c50825311d1bc09","sha1":"d9d90e0346619cd97c9b48a8b2bb4df99921f411","sha256":"a044a67e68d1b2c7498dee05394662f1356e2fb8859ac6175d498c744251106f","sha512":"26aef95c78f33670090095c3eafa6e9b97bf55b5f0c6a8161d932b60d4d478a86fa2af72dd48be0b87ddb73376baf58a8be9d0b4df3ba658be9d5f0ab5e60065","ssdeep":"192:Uou1f2fBpS++cJju6r/+ixFAMPE4UNzISalbjVYI9Bc5HHUATN6BdPwKnl9W7nF:8BYS++0u6KOYLNzILlb5EnUAR6BaAnWR","tlshash":"9e12849c7e80add85ba4a9fb75778a6512f71c01b20cc0a8f03a2c64bd42797b4bf175","first_seen":"2026-09-27T06:30:15.093419Z","last_seen":"2026-09-27T06:30:56.890169Z","times_seen":2,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"afders.org/23?uuid=01a0e18d-aa25-7f93-bea9-62b62a70713f\u0026eb=433c25aa07cd5252598cb35df449253c\u0026te=11ed45f7e66284fb3f0be75501723aa8\u0026pk=dd21c50fc592f139e5fae52397aac5e6","fqdn":"afders.org","domain":"afders.org","tld":"org"},"ip":{"addr":"104.21.67.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ads.alterhub.site/promoframe#k=fdfdd92a59e588025342002253695a24\u0026w=468\u0026h=60\u0026i=u2_h3rpj0","date":"2026-09-27T06:29:13.730Z","timestamp":1790490553730,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afders.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Sep 2026 13:34:44 GMT","end":"Tue, 15 Dec 2026 14:34:40 GMT"},"fingerprint":{"sha1":"7A:92:9A:74:98:BB:CF:88:2A:BD:0B:26:71:9B:9A:F3:95:83:01:4C","sha256":"47:5D:69:65:F3:FE:34:4C:29:B8:D4:0E:EE:3F:82:6A:2D:80:CC:43:F1:EA:3B:18:98:DF:BA:E5:D7:79:87:38"}}},"request":{"raw":"GET /23?uuid=01a0e18d-aa25-7f93-bea9-62b62a70713f\u0026eb=433c25aa07cd5252598cb35df449253c\u0026te=11ed45f7e66284fb3f0be75501723aa8\u0026pk=dd21c50fc592f139e5fae52397aac5e6 HTTP/1.1\r\nHost: afders.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uidm=01a0e18d-aa54-75d6-8bfe-24d1a57a1305_2; __cf_bm=E.kpiN_tj8vCp_KnIHDU.orChpHJXA2krs.ZFBCUMdg-1790490552.8087704-1.0.1.1-dvJkw6z0LrAU8qRhbDPxTmy.g5FAGkt6BUndPfuLI0t03qnEghiew.ibnPQwnpjPeftp5uwteKXaQ1s6h84qCfDcnt9qM3qKuqpLdIGQy8cklBLncfcxTdq8JhH8Y5ld\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 27 Sep 2026 06:29:13 GMT\r\ncontent-type: image/gif\r\ncontent-length: 1\r\nserver: cloudflare\r\nx-envoy-upstream-service-time: 1\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: no-cache, max-age=0, private, no-cache\r\nx-request-id: f549b5b45a545519a113e238124a8593\r\npragma: no-cache\r\nvary: Origin\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,X-Forwarded-For,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1728000\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a41873e8dbc056c3-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T20:43:33.933419Z","times_seen":19037193,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bicea.org/pixel/ase","fqdn":"bicea.org","domain":"bicea.org","tld":"org"},"ip":{"addr":"104.21.86.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ads.alterhub.site/promoframe#k=fdfdd92a59e588025342002253695a24\u0026w=468\u0026h=60\u0026i=u2_h3rpj0","date":"2026-09-27T06:29:13.894Z","timestamp":1790490553894,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bicea.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Sep 2026 14:22:10 GMT","end":"Tue, 15 Dec 2026 15:22:04 GMT"},"fingerprint":{"sha1":"B9:2F:CB:73:40:D7:7C:69:4A:C6:22:3F:45:F8:CA:8D:35:85:B1:C6","sha256":"1A:05:85:45:D6:5A:93:DC:D9:59:BF:16:3B:1F:F2:B3:07:D5:B3:3C:34:CF:6D:7D:8D:BC:6F:D5:88:E3:95:59"}}},"request":{"raw":"POST /pixel/ase HTTP/1.1\r\nHost: bicea.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 225\r\nOrigin: https://ads.alterhub.site\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":225,"data":"[{\"placement_key\":\"9ecf8e436a025f7fff03b61551d7e737\",\"template_body\":\"body_social-bar_pl_general-maga\",\"event_name\":\"base.render_pixel.success\",\"id_frontend_invoke\":\"01a0e18d-aa8c-725e-9cd8-73ad8ba5446d\",\"script_version\":\"\"}]"}},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 27 Sep 2026 06:29:13 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\naccept-ch: Sec-Ch-Ua-Model, Sec-Ch-Ua-Mobile, X-Device-User-Agent, Sec-Ch-Ua-Full-Version-List, Device-Stock-Ua, X-Operamini-Phone-Ua, X-Ucbrowser-Device-Ua, User-Agent, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua, Sec-Ch-Ua-Platformuser-Agent, Sec-Ch-Ua-Full-Version, Sec-Ch-Ua-Platform\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\naccess-control-expose-headers: Content-Length,Content-Range\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=enCs5FCayMjaGoObdWAZwKh7GYEJ6L5LvxucKnrEB6Y-1790490553.8948376-1.0.1.1-6XmueOi4JYF0aXZ7HpNtgt.AymKiw3D0gufx4U3QUqJebkw73DCVe9AzoQLyb6L6.U1Fj9gjrr725zt.ZkNf1l7s5JxrcFbrWc0EPZV48GUqOpAgwF4TccoY9Td2yZfs; HttpOnly; SameSite=None; Secure; Path=/; Domain=bicea.org; Expires=Sun, 27 Sep 2026 06:59:13 GMT\r\ncf-ray: a41873e9debb32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"enCs5FCayMjaGoObdWAZwKh7GYEJ6L5LvxucKnrEB6Y-1790490553.8948376-1.0.1.1-6XmueOi4JYF0aXZ7HpNtgt.AymKiw3D0gufx4U3QUqJebkw73DCVe9AzoQLyb6L6.U1Fj9gjrr725zt.ZkNf1l7s5JxrcFbrWc0EPZV48GUqOpAgwF4TccoY9Td2yZfs","quoted":false,"path":"/","domain":"bicea.org","expires":"2026-09-27T06:59:13Z","raw_expires":"Sun, 27 Sep 2026 06:59:13 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=enCs5FCayMjaGoObdWAZwKh7GYEJ6L5LvxucKnrEB6Y-1790490553.8948376-1.0.1.1-6XmueOi4JYF0aXZ7HpNtgt.AymKiw3D0gufx4U3QUqJebkw73DCVe9AzoQLyb6L6.U1Fj9gjrr725zt.ZkNf1l7s5JxrcFbrWc0EPZV48GUqOpAgwF4TccoY9Td2yZfs; HttpOnly; SameSite=None; Secure; Path=/; Domain=bicea.org; Expires=Sun, 27 Sep 2026 06:59:13 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":1891,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T20:43:33.933419Z","times_seen":19037193,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"afders.org/3/1964b0264f479cf1ad7ae7082f5db52e?uidm=01a0e18d-aa54-75d6-8bfe-24d1a57a1305_1","fqdn":"afders.org","domain":"afders.org","tld":"org"},"ip":{"addr":"104.21.67.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ads.alterhub.site/promoframe#k=3ae6276d5f69eb697421a09960b7da53\u0026n=28128394\u0026i=n3_ke4tgo","date":"2026-09-27T06:29:13.990Z","timestamp":1790490553990,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afders.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Sep 2026 13:34:44 GMT","end":"Tue, 15 Dec 2026 14:34:40 GMT"},"fingerprint":{"sha1":"7A:92:9A:74:98:BB:CF:88:2A:BD:0B:26:71:9B:9A:F3:95:83:01:4C","sha256":"47:5D:69:65:F3:FE:34:4C:29:B8:D4:0E:EE:3F:82:6A:2D:80:CC:43:F1:EA:3B:18:98:DF:BA:E5:D7:79:87:38"}}},"request":{"raw":"GET /3/1964b0264f479cf1ad7ae7082f5db52e?uidm=01a0e18d-aa54-75d6-8bfe-24d1a57a1305_1 HTTP/1.1\r\nHost: afders.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nOrigin: https://ads.alterhub.site\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uidm=01a0e18d-aa54-75d6-8bfe-24d1a57a1305_2; __cf_bm=E.kpiN_tj8vCp_KnIHDU.orChpHJXA2krs.ZFBCUMdg-1790490552.8087704-1.0.1.1-dvJkw6z0LrAU8qRhbDPxTmy.g5FAGkt6BUndPfuLI0t03qnEghiew.ibnPQwnpjPeftp5uwteKXaQ1s6h84qCfDcnt9qM3qKuqpLdIGQy8cklBLncfcxTdq8JhH8Y5ld\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 27 Sep 2026 06:29:14 GMT\r\ncontent-type: text/plain\r\nserver: cloudflare\r\naccept-ch: Device-Stock-Ua,X-Device-User-Agent,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Mobile,Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Model\r\nvary: Accept-Encoding, Origin\r\nx-envoy-upstream-service-time: 7\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: no-cache, max-age=0, private, no-cache\r\nx-request-id: 94cfc00124c5203b2e8860746e46eb3b\r\npragma: no-cache\r\naccess-control-allow-origin: https://ads.alterhub.site\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,X-Forwarded-For,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1728000\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: gzip\r\ncf-ray: a41873ea7d7056c3-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":76,"size_decoded":1209,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"fc55de85c5253d3aa60cab7d15459aba","sha1":"77da0851e13aab78c43e5c86ea7a4bec27b77fd7","sha256":"4e7bb06cf4b6ed17661628bd3773f1344bf6546f014760dc8f99e9fd48dcf8e8","sha512":"94a485c9121251a6f888d1b1b231e48ee31ac206ede609ac4e3b2c0e8ed4e44dbaf9bad6759583c5abcf3af3c735c912e614774c2579265696e8106e76632948","ssdeep":"","tlshash":"9ca01211a0580c08294076004c66581802f410a4a0042002d1a080671008151a1ca511","first_seen":"2026-09-27T06:30:15.095051Z","last_seen":"2026-09-27T06:30:15.095051Z","times_seen":1,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/cti/cd/0a/a5/cd0aa5aa4fed2dbe4dba699fa34bbf23/1708443906.jpg","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ads.alterhub.site/promoframe#k=3ae6276d5f69eb697421a09960b7da53\u0026n=28128394\u0026i=n3_ke4tgo","date":"2026-09-27T06:29:13.224Z","timestamp":1790490553224,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 02:32:58 GMT","end":"Wed, 02 Dec 2026 02:32:57 GMT"},"fingerprint":{"sha1":"0C:28:A6:45:71:D0:51:55:56:A0:1D:34:71:8C:C4:7C:16:5A:03:5C","sha256":"68:73:EC:1A:D4:78:3E:46:1A:F8:1D:99:8F:CB:9D:46:B9:0E:28:CF:C6:BF:14:EF:F5:90:39:D3:FF:5A:1F:5C"}}},"request":{"raw":"GET /cti/cd/0a/a5/cd0aa5aa4fed2dbe4dba699fa34bbf23/1708443906.jpg HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 27 Sep 2026 06:29:13 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 29275\r\nserver: nginx/1.21.6\r\nlast-modified: Tue, 20 Feb 2024 15:45:14 GMT\r\netag: \"65d4c90a-725b\"\r\nexpires: Tue, 29 Sep 2026 06:29:13 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29275,"size_decoded":29623,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 320x240, components 3","md5":"7e27ab817bfa1d0f6c2cc144aea82ad0","sha1":"d913e6d4c0b055f122f92ba193188512485740fc","sha256":"8ebab76a80210f1cacea950100d6ce78fcc504f7a407a873e4f0f3828bf03504","sha512":"bf522a5420dcc97b493374bb4336830f20c95b67cc49d9418e245511f5697e19be003279d5f1ab670cb907c31d05069027a4f328e9f0e818c13613f370a991c2","ssdeep":"768:YLR7GdQXbDeDeXyjGIYckST7eK9mqU3aX5O:YLlGdQXb9Xyj3YckSeGX5O","tlshash":"5bd2e1bb9a7b4846f5f49da755088c9a44c15bc49fbcbe5a8acd740b41d0fa3073803b","first_seen":"2024-05-14T20:27:54Z","last_seen":"2026-10-06T22:28:26.911349Z","times_seen":193,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":19,"send":0,"wait":65,"receive":15,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sleepoverlimitprofound.com/impr.gif?sid=H4sIAAAAAAAC_1RSvW8cRR-e9Xt6m0hEQhE0FFtQAMLn2Y_7WEIV8SURbEiCIkE1szNrJre3s5mZvTtf5RAErQsKaND6OTuWCEKk4UM06EwHQso2kYuYIv8BSECJzj5hGGl-H3pGM8_veebD3eqYtFGxozff0FOV52yt06b-M9dVIfTY-uvX_IC26UX_uiq68UV_sghm9EIQxW36rP-qTAd6LaQBpQEN_FeUkZmerJ2gUOUXSdBOaDsO20EnxsT8t7eVB8s8iNExeRxKNOcfZe9CpXMUw69eknbgdPn8y8MqZ04bjMTB28Wg0OMCw7MyMx6y4mB5Gto2hHyyAl0cLCeAHu0tJgBXDVl54iF4cbCkCT7aP2XKc8gCXJzDeDSHzOdQbI5U34YS9wmQCqxvoBjeWddmzLZOUbZAG9L643eocUNaDy-gGH55KVcT_6rOK6d0YTHJaqjJHGpzjrI6hJuuQI0Pkbr3ocQvhD55DsXw89f0SA38kTQDKFGfaKCyOZj1UC228lBlHqrSw1Ac-THtx2nAom6WiLRHYxbHQnKa9ENKWZL2UKW3oMQOUrON0mxjoHZghQfrGuK9tY2RqPdFbkNb3xG5rXiwzOEyR_VMu81dtq_dpiwImNmBEfWeKm_a20jd_2bTzL4-04vAuKtnjIt6poQjMDePnqYBozLoi1XGQ7ra64TxKgu4XE2CjEe9JAm7vWwvs66qd8ul997du39iII_8iMlu2OuKTtZNJO8mvTgMGE2SLuU9wToRrKqh7MqJOFPVkCsPRihVQ1bf-QycHcLmh0jVU2BVADauwd6rMS3upVqobMumRpXOtidbUwhdo3QtuC0P0pHd_JhcmF25dumHE18vFx9Bpj-R5UJqapSmxg31I8FmfuveRunUUE3Zwuirjjn5fzB1f-MvpKohjz34-uTHPffp90jLbdjyn5tmuS0bIh8ZWE3AyxZyRZDLs6cYr2H_1fOzetd-gE3TAs9bM56b1h7PTf5xQzJzviGX-7815MVffz4lb9WRn0UyTCnt97pB1M9kEMUizTr9OBFdRqNIwtnmxrfffPf3AOJXFnYHBAAA","fqdn":"sleepoverlimitprofound.com","domain":"sleepoverlimitprofound.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ads.alterhub.site/promoframe#k=3ae6276d5f69eb697421a09960b7da53\u0026n=28128394\u0026i=n3_ke4tgo","date":"2026-09-27T06:29:13.236Z","timestamp":1790490553236,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sleepoverlimitprofound.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 04:20:18 GMT","end":"Tue, 24 Nov 2026 04:20:17 GMT"},"fingerprint":{"sha1":"25:9A:58:CA:68:4D:EC:36:88:A4:BC:7F:2C:41:BE:B7:58:63:32:E3","sha256":"08:E4:A1:17:A8:1B:17:9D:84:10:F1:9B:37:A3:57:FE:8C:98:BA:9C:11:0D:A1:97:5C:AA:71:F0:6A:4A:28:5E"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1RSvW8cRR-e9Xt6m0hEQhE0FFtQAMLn2Y_7WEIV8SURbEiCIkE1szNrJre3s5mZvTtf5RAErQsKaND6OTuWCEKk4UM06EwHQso2kYuYIv8BSECJzj5hGGl-H3pGM8_veebD3eqYtFGxozff0FOV52yt06b-M9dVIfTY-uvX_IC26UX_uiq68UV_sghm9EIQxW36rP-qTAd6LaQBpQEN_FeUkZmerJ2gUOUXSdBOaDsO20EnxsT8t7eVB8s8iNExeRxKNOcfZe9CpXMUw69eknbgdPn8y8MqZ04bjMTB28Wg0OMCw7MyMx6y4mB5Gto2hHyyAl0cLCeAHu0tJgBXDVl54iF4cbCkCT7aP2XKc8gCXJzDeDSHzOdQbI5U34YS9wmQCqxvoBjeWddmzLZOUbZAG9L643eocUNaDy-gGH55KVcT_6rOK6d0YTHJaqjJHGpzjrI6hJuuQI0Pkbr3ocQvhD55DsXw89f0SA38kTQDKFGfaKCyOZj1UC228lBlHqrSw1Ac-THtx2nAom6WiLRHYxbHQnKa9ENKWZL2UKW3oMQOUrON0mxjoHZghQfrGuK9tY2RqPdFbkNb3xG5rXiwzOEyR_VMu81dtq_dpiwImNmBEfWeKm_a20jd_2bTzL4-04vAuKtnjIt6poQjMDePnqYBozLoi1XGQ7ra64TxKgu4XE2CjEe9JAm7vWwvs66qd8ul997du39iII_8iMlu2OuKTtZNJO8mvTgMGE2SLuU9wToRrKqh7MqJOFPVkCsPRihVQ1bf-QycHcLmh0jVU2BVADauwd6rMS3upVqobMumRpXOtidbUwhdo3QtuC0P0pHd_JhcmF25dumHE18vFx9Bpj-R5UJqapSmxg31I8FmfuveRunUUE3Zwuirjjn5fzB1f-MvpKohjz34-uTHPffp90jLbdjyn5tmuS0bIh8ZWE3AyxZyRZDLs6cYr2H_1fOzetd-gE3TAs9bM56b1h7PTf5xQzJzviGX-7815MVffz4lb9WRn0UyTCnt97pB1M9kEMUizTr9OBFdRqNIwtnmxrfffPf3AOJXFnYHBAAA HTTP/1.1\r\nHost: sleepoverlimitprofound.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; u_pl28027895=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 27 Sep 2026 06:29:13 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccept-ch: X-Device-User-Agent,X-Operamini-Phone-Ua,User-Agent,Sec-Ch-Ua-Platform-Version,X-Ucbrowser-Device-Ua,Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile,Device-Stock-Ua\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nvary: Origin\r\nx-envoy-upstream-service-time: 1\r\nHost: sleepoverlimitprofound.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 6b87515c076df60961bba571fb3d165b\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T20:43:33.933419Z","times_seen":19037193,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-26","alert":"Sinkholed","trigger":"sleepoverlimitprofound.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fizzyacerbitymellow.com/impr.gif?sid=H4sIAAAAAAAC_1RSz4scRRSuXgcvAQUJevHQBwUj7qR6pmem29yCv8C4a0wkoKfqqupJZWq6Ol3VM5M5bYx4dQ8e9CK93-xmQFQUwdWbzHoRQUhfZA7Zi3-CIB5lJoOrDf3e9_iKV997X310UJ6SJkq2fPstM1Vas4udJvVfuKEyYcbW37nuB7RJL_k3VNYNL_mTVShGLwftsEkv-K9LPjAXWzSgNKCB_5oqZGomF9csVP5lHDRj2gxbzaATYlL8v7alB8s8iNEpeQpK1E_-kb4PxRfIht-8Iu3AmfylV4elZs4UGIn5u9kgM-MMwzOYFh7SbL45DWNrQj7dgsnmmwlgRoerCZCommw9_RBJNt_IRDI6eqQ00ZAZEnEO49ECUi-g2ALc3IMSDwjABXZ2kQ3v75hizO48YtmKrUnjrz-hxjVpPDyPbPj1Za0m_jWjS6dMZjFJK6jJAqq_QF6ewE23oMYn4O4DKPEboc-cQzb84g0zUgN_JIsBlKjWO1DpAsx6KFe_8lCmHsrcw1As_ZBGIQ9Yu5vGgvdoyMJQyITGUYtSFvMeSn4XSuyDF3vIiz0M1D6s8GBdTbyrexiJ6kho27LVfaFtmQSb3NrkdjUzrn_Ajozry4yAFfsoRHWo8tv2Hrh7bDZN7ZszswoscdWMJaKaKeEIitvL52jAqAwisc2SbrDdYzTYjqNObzviUUw7ca_Nw_Qwta6sDvKN9978l-8wkEufSRn1Qtnq9gRLWwETcRi3I96Ju1SmPRbAqgrKbq2XM1U1uXp8AbmqyfZ7nyNhJ7D6BFw9C1YGYOMK7GaFafYV004WN8ukaZWTEKZC7hpwdzxIRw70KTk_e-f65Z_Wnl7JPobkv5LNB15UyIsKt9TPBH1999vd3KmhmrKVydccc_JxMPVg929wVZMnfv9-_dpe_OwEPN-Dzf_tNNM2r8mV_hzWECS5B60ItDy7iiUV7H_q5Awf2A_RLxpIdGOW6KJxmOhCf7JWWxN57K8br9DzsGrpp23Z4pRGvW7QjlIZtEPB004UxqLLaLst4Wx964fjH_8ZAFsWM4MDBAAA","fqdn":"fizzyacerbitymellow.com","domain":"fizzyacerbitymellow.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ads.alterhub.site/promoframe#k=aee874e267daf21ad94938c5960ef7a1\u0026n=27873862\u0026i=n4_0eh5yg","date":"2026-09-27T06:29:13.528Z","timestamp":1790490553528,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"fizzyacerbitymellow.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 22:02:47 GMT","end":"Fri, 30 Oct 2026 22:02:46 GMT"},"fingerprint":{"sha1":"85:2D:D6:49:43:AB:3A:C0:5E:0D:58:0E:0B:D7:D6:2A:82:8B:E0:41","sha256":"FF:C6:2E:36:C1:47:5E:79:06:79:62:3E:93:9A:4C:D1:A2:35:A6:48:A3:E5:43:F4:74:4F:64:C9:9E:32:17:24"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1RSz4scRRSuXgcvAQUJevHQBwUj7qR6pmem29yCv8C4a0wkoKfqqupJZWq6Ol3VM5M5bYx4dQ8e9CK93-xmQFQUwdWbzHoRQUhfZA7Zi3-CIB5lJoOrDf3e9_iKV997X310UJ6SJkq2fPstM1Vas4udJvVfuKEyYcbW37nuB7RJL_k3VNYNL_mTVShGLwftsEkv-K9LPjAXWzSgNKCB_5oqZGomF9csVP5lHDRj2gxbzaATYlL8v7alB8s8iNEpeQpK1E_-kb4PxRfIht-8Iu3AmfylV4elZs4UGIn5u9kgM-MMwzOYFh7SbL45DWNrQj7dgsnmmwlgRoerCZCommw9_RBJNt_IRDI6eqQ00ZAZEnEO49ECUi-g2ALc3IMSDwjABXZ2kQ3v75hizO48YtmKrUnjrz-hxjVpPDyPbPj1Za0m_jWjS6dMZjFJK6jJAqq_QF6ewE23oMYn4O4DKPEboc-cQzb84g0zUgN_JIsBlKjWO1DpAsx6KFe_8lCmHsrcw1As_ZBGIQ9Yu5vGgvdoyMJQyITGUYtSFvMeSn4XSuyDF3vIiz0M1D6s8GBdTbyrexiJ6kho27LVfaFtmQSb3NrkdjUzrn_Ajozry4yAFfsoRHWo8tv2Hrh7bDZN7ZszswoscdWMJaKaKeEIitvL52jAqAwisc2SbrDdYzTYjqNObzviUUw7ca_Nw_Qwta6sDvKN9978l-8wkEufSRn1Qtnq9gRLWwETcRi3I96Ju1SmPRbAqgrKbq2XM1U1uXp8AbmqyfZ7nyNhJ7D6BFw9C1YGYOMK7GaFafYV004WN8ukaZWTEKZC7hpwdzxIRw70KTk_e-f65Z_Wnl7JPobkv5LNB15UyIsKt9TPBH1999vd3KmhmrKVydccc_JxMPVg929wVZMnfv9-_dpe_OwEPN-Dzf_tNNM2r8mV_hzWECS5B60ItDy7iiUV7H_q5Awf2A_RLxpIdGOW6KJxmOhCf7JWWxN57K8br9DzsGrpp23Z4pRGvW7QjlIZtEPB004UxqLLaLst4Wx964fjH_8ZAFsWM4MDBAAA HTTP/1.1\r\nHost: fizzyacerbitymellow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; u_pl27773363=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 27 Sep 2026 06:29:13 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccept-ch: User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Mobile,X-Device-User-Agent,Sec-Ch-Ua,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Model,Device-Stock-Ua,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nvary: Origin\r\nx-envoy-upstream-service-time: 3\r\nHost: fizzyacerbitymellow.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 908a49655f912bfcdb342e43bb8e8ae4\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T20:43:33.933419Z","times_seen":19037193,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Roboto:wght@100;300;400;500;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ads.alterhub.site/promoframe#k=3ae6276d5f69eb697421a09960b7da53\u0026n=28128394\u0026i=n3_ke4tgo","date":"2026-09-27T06:29:14.418Z","timestamp":1790490554418,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:29 GMT","end":"Thu, 03 Dec 2026 19:23:28 GMT"},"fingerprint":{"sha1":"6C:5B:26:B8:8E:09:56:23:73:54:AC:B4:B3:91:75:07:31:24:4F:2D","sha256":"83:FB:4A:3F:88:06:C6:06:CC:A5:92:12:C8:C2:89:BD:56:6A:F9:0D:8F:49:3D:A0:83:3B:7E:53:A1:2C:69:05"}}},"request":{"raw":"GET /css2?family=Roboto:wght@100;300;400;500;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 27 Sep 2026 06:29:14 GMT\r\ndate: Sun, 27 Sep 2026 06:29:14 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27925,"size_decoded":2503,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"b3aa47c04f634f874e9fe24da03e44c2","sha1":"d6233fb889991ce8ab543cf6a3dedfa597e8c8bd","sha256":"1c87a812c578a613533eee262e5564ff39d369f62a5d9d8f0cda4daf92755241","sha512":"930654c03131317f868a8b908537b51f208c654d835caa93d129f0371820222f21a88cca41646271d967b881c7b44a65f8b0b699555d51b43cb8e2f93b831b18","ssdeep":"768:DDZDCDHDHDY4DRLDuDWDyDS99YURRuWDyjooYhREHPM5svvYaR7AIWP2ZZYQRVKj:Xxyll3","tlshash":"2ec210a1041744009b838ce223cebf35fe1f52117142d0b5abfd9b6baddbca6526936d","first_seen":"2026-02-20T05:06:38.045053Z","last_seen":"2026-10-11T01:02:41.872026Z","times_seen":5400,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/cti/8c/e3/fd/8ce3fdd4a4be2bdce1fa795f9077b554/1784628576.jpg","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ads.alterhub.site/promoframe#k=3ae6276d5f69eb697421a09960b7da53\u0026n=28128394\u0026i=n3_ke4tgo","date":"2026-09-27T06:29:14.425Z","timestamp":1790490554425,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 02:32:58 GMT","end":"Wed, 02 Dec 2026 02:32:57 GMT"},"fingerprint":{"sha1":"0C:28:A6:45:71:D0:51:55:56:A0:1D:34:71:8C:C4:7C:16:5A:03:5C","sha256":"68:73:EC:1A:D4:78:3E:46:1A:F8:1D:99:8F:CB:9D:46:B9:0E:28:CF:C6:BF:14:EF:F5:90:39:D3:FF:5A:1F:5C"}}},"request":{"raw":"GET /cti/8c/e3/fd/8ce3fdd4a4be2bdce1fa795f9077b554/1784628576.jpg HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 27 Sep 2026 06:29:14 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 2066\r\nserver: nginx/1.21.6\r\nlast-modified: Tue, 21 Jul 2026 10:09:36 GMT\r\netag: \"6a5f4560-812\"\r\nexpires: Tue, 29 Sep 2026 06:29:14 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2066,"size_decoded":2412,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 149x149, components 3","md5":"fa410e41a8bf3012334c53eb381f38d1","sha1":"74f3051213aa6e459162848585e4b3500c8f7e1b","sha256":"1b65e71238d9ab462b8349874cf0102ed1425d6736b5e3d7ac93e8af6e1d3326","sha512":"7d97160375e0c9acb3c73aac111b0d3326d1b7e5846f43969ee1a2bedba2962313fdce1d94e75ec279822e7e902f5833ca83d055d8703db4d1aecd312abfa116","ssdeep":"","tlshash":"dd412a2a9b140c5df534a63a4398329f921a3bc1dc8baa2372c34d14127b0730bea7c5","first_seen":"2026-07-21T12:24:06.10225Z","last_seen":"2026-10-11T05:58:42.537926Z","times_seen":1396,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"afders.org/23?uuid=01a0e18d-aa25-7f93-bea9-62b62a70713f\u0026eb=433c25aa07cd5252598cb35df449253c\u0026te=11ed45f7e66284fb3f0be75501723aa8\u0026pk=9ecf8e436a025f7fff03b61551d7e737","fqdn":"afders.org","domain":"afders.org","tld":"org"},"ip":{"addr":"104.21.67.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ads.alterhub.site/promoframe#k=fdfdd92a59e588025342002253695a24\u0026w=468\u0026h=60\u0026i=u2_h3rpj0","date":"2026-09-27T06:29:13.732Z","timestamp":1790490553732,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afders.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Sep 2026 13:34:44 GMT","end":"Tue, 15 Dec 2026 14:34:40 GMT"},"fingerprint":{"sha1":"7A:92:9A:74:98:BB:CF:88:2A:BD:0B:26:71:9B:9A:F3:95:83:01:4C","sha256":"47:5D:69:65:F3:FE:34:4C:29:B8:D4:0E:EE:3F:82:6A:2D:80:CC:43:F1:EA:3B:18:98:DF:BA:E5:D7:79:87:38"}}},"request":{"raw":"GET /23?uuid=01a0e18d-aa25-7f93-bea9-62b62a70713f\u0026eb=433c25aa07cd5252598cb35df449253c\u0026te=11ed45f7e66284fb3f0be75501723aa8\u0026pk=9ecf8e436a025f7fff03b61551d7e737 HTTP/1.1\r\nHost: afders.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uidm=01a0e18d-aa54-75d6-8bfe-24d1a57a1305_2; __cf_bm=E.kpiN_tj8vCp_KnIHDU.orChpHJXA2krs.ZFBCUMdg-1790490552.8087704-1.0.1.1-dvJkw6z0LrAU8qRhbDPxTmy.g5FAGkt6BUndPfuLI0t03qnEghiew.ibnPQwnpjPeftp5uwteKXaQ1s6h84qCfDcnt9qM3qKuqpLdIGQy8cklBLncfcxTdq8JhH8Y5ld\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 27 Sep 2026 06:29:13 GMT\r\ncontent-type: image/gif\r\ncontent-length: 1\r\nserver: cloudflare\r\nx-envoy-upstream-service-time: 1\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: no-cache, max-age=0, private, no-cache\r\nx-request-id: e8fa2d055ad25852e8366d7f51854d77\r\npragma: no-cache\r\nvary: Origin\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,X-Forwarded-For,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1728000\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a41873e8dbc256c3-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T20:43:33.933419Z","times_seen":19037193,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.show-sb.com/sb/au/8e/ff/66/8eff6635b7ed4954a8b4e92629e58a35/1698745384.html","fqdn":"cdn.show-sb.com","domain":"show-sb.com","tld":"com"},"ip":{"addr":"104.21.95.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ads.alterhub.site/promoframe#k=3ae6276d5f69eb697421a09960b7da53\u0026n=28128394\u0026i=n3_ke4tgo","date":"2026-09-27T06:29:13.784Z","timestamp":1790490553784,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"show-sb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Jul 2026 08:49:29 GMT","end":"Thu, 29 Oct 2026 09:49:07 GMT"},"fingerprint":{"sha1":"C6:C1:39:5B:4A:88:46:B1:12:EF:0B:E1:32:AA:4B:26:BC:E9:04:3C","sha256":"97:94:F6:6E:AE:28:3E:4B:61:23:FE:FD:3B:D0:CD:67:8D:82:40:5B:11:AA:57:9E:36:73:2D:B8:75:67:B9:3C"}}},"request":{"raw":"GET /sb/au/8e/ff/66/8eff6635b7ed4954a8b4e92629e58a35/1698745384.html HTTP/1.1\r\nHost: cdn.show-sb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nOrigin: https://ads.alterhub.site\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 06:29:14 GMT\r\ncontent-type: text/html\r\nlast-modified: Tue, 31 Oct 2023 09:43:09 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FrO74PPjmI5Ew3CKzzc4fm2A5JStFWWk93h44cfUjXHBIfE7yXosnVRLJlpg3FXCV0XZv2BY%2BBfIhHXSJ0OCTnilkyzomJkCXf0sHg1XbjJSR6Xf1%2BGXvSMw8nKzW90jG20%3D\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a41873e948155688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":1495,"size_decoded":1337,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"f070cdd03a32d5be3e06e85dc55af8db","sha1":"1220eaa18d825e82039cfaa9ef85c4ffbb50a3d9","sha256":"47522c812831fe5b4db4cd4d25c93d38c79aeb2bcb9b622dc79e61e5584818b9","sha512":"90616311e7dfc222bae39ca05a2f4df67c6420cb98910f2be8f923be01e0b144423a4c85299bdb0077aaf0fc32771b2d4c5d7ce462dd9f29ec7cb1974c198649","ssdeep":"","tlshash":"4d3106612ce9de770083a0967b313f27bd929643898a564233bc09948f9aed9cd5350b","first_seen":"2023-12-25T06:31:04Z","last_seen":"2026-10-11T17:47:31.042483Z","times_seen":1289,"resource_available":true,"data":null}},"time_used":506,"timings":{"blocked":-1,"dns":3,"connect":15,"send":0,"wait":487,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.nresystems.com/img.gif?h1id=1\u0026h3id=0\u0026key=9ecf8e436a025f7fff03b61551d7e737\u0026uuid=01a0e18d-aa54-75d6-8bfe-24d1a57a1305","fqdn":"static.nresystems.com","domain":"nresystems.com","tld":"com"},"ip":{"addr":"104.18.19.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ads.alterhub.site/promoframe#k=fdfdd92a59e588025342002253695a24\u0026w=468\u0026h=60\u0026i=u2_h3rpj0","date":"2026-09-27T06:29:12.985Z","timestamp":1790490552985,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nresystems.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 12:58:44 GMT","end":"Mon, 02 Nov 2026 12:58:43 GMT"},"fingerprint":{"sha1":"0E:57:2C:95:2B:9D:FA:A8:6A:D7:DB:94:38:89:F4:B7:FB:6B:6A:91","sha256":"08:66:34:AB:C3:2D:3C:3D:C1:2D:A0:7E:E3:FF:30:B9:03:C0:3F:57:99:3E:A4:52:16:4F:B4:54:36:BC:41:DD"}}},"request":{"raw":"GET /img.gif?h1id=1\u0026h3id=0\u0026key=9ecf8e436a025f7fff03b61551d7e737\u0026uuid=01a0e18d-aa54-75d6-8bfe-24d1a57a1305 HTTP/1.1\r\nHost: static.nresystems.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 27 Sep 2026 06:29:13 GMT\r\ncontent-type: image/gif\r\ncontent-length: 7\r\nserver: cloudflare\r\nx-envoy-upstream-service-time: 2\r\nexpires: Sun, 27 Sep 2026 10:29:13 GMT\r\ncache-control: public, max-age=14400\r\nvary: Origin\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,X-Forwarded-For,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1728000\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nset-cookie: uid_id2=01a0e18d-aa54-75d6-8bfe-24d1a57a1305; Path=/; Expires=Wed, 24 Sep 2036 06:29:13 GMT; Secure; SameSite=None\n__cf_bm=xSe6ExY1o5TGM0WYxB.b.8fnVSj9AmoX6aX5cMHKH1I-1790490552.9862657-1.0.1.1-b0rvMYLM8p0c6nuKLthc1UkPoDxLFQCvKI5PHIhdoKDClEW3M_PFd1wqwakLQUiiy0u_rEjgO9mQdn2LA_sdX3GefFMzDJhwzbYLhJKHMMf.CwWuEiha4yhc4iJmtZ.y; HttpOnly; SameSite=None; Secure; Path=/; Domain=nresystems.com; Expires=Sun, 27 Sep 2026 06:59:13 GMT\r\ncf-cache-status: BYPASS\r\ncf-ray: a41873e42de456ca-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"uid_id2","value":"01a0e18d-aa54-75d6-8bfe-24d1a57a1305","quoted":false,"path":"/","expires":"2036-09-24T06:29:13Z","raw_expires":"Wed, 24 Sep 2036 06:29:13 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uid_id2=01a0e18d-aa54-75d6-8bfe-24d1a57a1305; Path=/; Expires=Wed, 24 Sep 2036 06:29:13 GMT; Secure; SameSite=None"},{"name":"__cf_bm","value":"xSe6ExY1o5TGM0WYxB.b.8fnVSj9AmoX6aX5cMHKH1I-1790490552.9862657-1.0.1.1-b0rvMYLM8p0c6nuKLthc1UkPoDxLFQCvKI5PHIhdoKDClEW3M_PFd1wqwakLQUiiy0u_rEjgO9mQdn2LA_sdX3GefFMzDJhwzbYLhJKHMMf.CwWuEiha4yhc4iJmtZ.y","quoted":false,"path":"/","domain":"nresystems.com","expires":"2026-09-27T06:59:13Z","raw_expires":"Sun, 27 Sep 2026 06:59:13 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=xSe6ExY1o5TGM0WYxB.b.8fnVSj9AmoX6aX5cMHKH1I-1790490552.9862657-1.0.1.1-b0rvMYLM8p0c6nuKLthc1UkPoDxLFQCvKI5PHIhdoKDClEW3M_PFd1wqwakLQUiiy0u_rEjgO9mQdn2LA_sdX3GefFMzDJhwzbYLhJKHMMf.CwWuEiha4yhc4iJmtZ.y; HttpOnly; SameSite=None; Secure; Path=/; Domain=nresystems.com; Expires=Sun, 27 Sep 2026 06:59:13 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T20:43:33.933419Z","times_seen":19037193,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fizzyacerbitymellow.com/impr.gif?sid=H4sIAAAAAAAC_1RSz4scRRit3gxechAk6GUPfVAw4s5Wz_TMdJtb8BcYd42JBPRUXVU9qUxNV6eremYyp40Rr-5BwZP0vtnNgKgoHlZvMutFBCF920P2kj9BEI8yk8HVhv5-8IpX7_tefXpQnpEmSnb63rtmqrRm250m9V--pTJhxtbfuekHtEmv-LdU1g2v-JNlKEavBe2wSS_7b0k-MNstGlAa0MB_UxUyNZPtFQqVfxMHzZg2w1Yz6ISYFP_vbenBMg9idEaegxL1s0_Sj6D4Atnw-9elHTiTv_rGsNTMmQIjMf8gG2RmnGF4XqaFhzSbr0_D2JqQLzdgsvl6ApjR4XICJKomG88_RpLN1zKRjI6eKk00ZIZEXMR4tIDUCyi2ADcPoMQjAnCBnV1kw4c7phize09RtkRr0vjrT6hxTRqPLyEbfndVq4l_w-jSKZNZTNIKarKA6i-Qlydw0w2o8Qm4-xhK_EHoCxeRDb9-24zUwB_JYgAlqtUOVLoAsx7K5a88lKmHMvcwFKd-SKOQB6zdTWPBezRkYShkQuOoRSmLeQ8lvw8l9sGLPeTFHgZqH1Z4sK4m3vU9jER1JLRt2eqh0LZMgnVurXO7mhnXP2BHxvVlRsCKfRSiOlT5XfsA3F2YTVP7zswsA0tcNWOJqGZKOILi7umLNGBUBpHYYkk32OoxGmzFUae3FfEopp241-ZhephaV1YH-dp7b_7bjxjIU59JGfVC2er2BEtbARNxGLcj3om7VKY9FsCqCspurJYzVTW5fnwZuarJ1odfIWEnsPoEXG2ClQHYuAK7XWGafcu0k8XtMmla5SSEqZC7Btw9D9KRA31GLs3ev3n1l5Wn1_pzSP47WX_gRYW8qHBH_UrQ1_d_2M2dGqopW5p8wzEnnwFTj3b_Blc1ubj5ZPXaXvliEzzfg83_ZZppm9dEHr8EawiS_AK0ItDy_CqWVLD_6ZPz-sB-gn7RQKIbs0QXjcNEF_rzmlzLPlty-ivda3Z16qdt2eKURr1u0I5SGbRDwdNOFMaiy2i7LeFsfeen45__GQAxp0SHAwQAAA==","fqdn":"fizzyacerbitymellow.com","domain":"fizzyacerbitymellow.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ads.alterhub.site/promoframe#k=aee874e267daf21ad94938c5960ef7a1\u0026n=27873862\u0026i=n4_0eh5yg","date":"2026-09-27T06:29:13.532Z","timestamp":1790490553532,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"fizzyacerbitymellow.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 22:02:47 GMT","end":"Fri, 30 Oct 2026 22:02:46 GMT"},"fingerprint":{"sha1":"85:2D:D6:49:43:AB:3A:C0:5E:0D:58:0E:0B:D7:D6:2A:82:8B:E0:41","sha256":"FF:C6:2E:36:C1:47:5E:79:06:79:62:3E:93:9A:4C:D1:A2:35:A6:48:A3:E5:43:F4:74:4F:64:C9:9E:32:17:24"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1RSz4scRRit3gxechAk6GUPfVAw4s5Wz_TMdJtb8BcYd42JBPRUXVU9qUxNV6eremYyp40Rr-5BwZP0vtnNgKgoHlZvMutFBCF920P2kj9BEI8yk8HVhv5-8IpX7_tefXpQnpEmSnb63rtmqrRm250m9V--pTJhxtbfuekHtEmv-LdU1g2v-JNlKEavBe2wSS_7b0k-MNstGlAa0MB_UxUyNZPtFQqVfxMHzZg2w1Yz6ISYFP_vbenBMg9idEaegxL1s0_Sj6D4Atnw-9elHTiTv_rGsNTMmQIjMf8gG2RmnGF4XqaFhzSbr0_D2JqQLzdgsvl6ApjR4XICJKomG88_RpLN1zKRjI6eKk00ZIZEXMR4tIDUCyi2ADcPoMQjAnCBnV1kw4c7phize09RtkRr0vjrT6hxTRqPLyEbfndVq4l_w-jSKZNZTNIKarKA6i-Qlydw0w2o8Qm4-xhK_EHoCxeRDb9-24zUwB_JYgAlqtUOVLoAsx7K5a88lKmHMvcwFKd-SKOQB6zdTWPBezRkYShkQuOoRSmLeQ8lvw8l9sGLPeTFHgZqH1Z4sK4m3vU9jER1JLRt2eqh0LZMgnVurXO7mhnXP2BHxvVlRsCKfRSiOlT5XfsA3F2YTVP7zswsA0tcNWOJqGZKOILi7umLNGBUBpHYYkk32OoxGmzFUae3FfEopp241-ZhephaV1YH-dp7b_7bjxjIU59JGfVC2er2BEtbARNxGLcj3om7VKY9FsCqCspurJYzVTW5fnwZuarJ1odfIWEnsPoEXG2ClQHYuAK7XWGafcu0k8XtMmla5SSEqZC7Btw9D9KRA31GLs3ev3n1l5Wn1_pzSP47WX_gRYW8qHBH_UrQ1_d_2M2dGqopW5p8wzEnnwFTj3b_Blc1ubj5ZPXaXvliEzzfg83_ZZppm9dEHr8EawiS_AK0ItDy_CqWVLD_6ZPz-sB-gn7RQKIbs0QXjcNEF_rzmlzLPlty-ivda3Z16qdt2eKURr1u0I5SGbRDwdNOFMaiy2i7LeFsfeen45__GQAxp0SHAwQAAA== HTTP/1.1\r\nHost: fizzyacerbitymellow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; u_pl27773363=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 27 Sep 2026 06:29:13 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccept-ch: Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version,X-Device-User-Agent,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile,Device-Stock-Ua,User-Agent,Sec-Ch-Ua-Platformuser-Agent\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nvary: Origin\r\nx-envoy-upstream-service-time: 2\r\nHost: fizzyacerbitymellow.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 0bd3d659a2ae239302e9ce7959572fe8\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T20:43:33.933419Z","times_seen":19037193,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fizzyacerbitymellow.com/ntv.json?key=aee874e267daf21ad94938c5960ef7a1\u0026vstc=4\u0026rb=e","fqdn":"fizzyacerbitymellow.com","domain":"fizzyacerbitymellow.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ads.alterhub.site/promoframe#k=aee874e267daf21ad94938c5960ef7a1\u0026n=27873862\u0026i=n4_0eh5yg","date":"2026-09-27T06:29:12.793Z","timestamp":1790490552793,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"fizzyacerbitymellow.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 22:02:47 GMT","end":"Fri, 30 Oct 2026 22:02:46 GMT"},"fingerprint":{"sha1":"85:2D:D6:49:43:AB:3A:C0:5E:0D:58:0E:0B:D7:D6:2A:82:8B:E0:41","sha256":"FF:C6:2E:36:C1:47:5E:79:06:79:62:3E:93:9A:4C:D1:A2:35:A6:48:A3:E5:43:F4:74:4F:64:C9:9E:32:17:24"}}},"request":{"raw":"GET /ntv.json?key=aee874e267daf21ad94938c5960ef7a1\u0026vstc=4\u0026rb=e HTTP/1.1\r\nHost: fizzyacerbitymellow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nOrigin: https://ads.alterhub.site\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 27 Sep 2026 06:29:13 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\naccept-ch: Sec-Ch-Ua-Platform,Sec-Ch-Ua-Model,Device-Stock-Ua,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Mobile,X-Device-User-Agent,User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://ads.alterhub.site\r\ncontent-encoding: zstd\r\nset-cookie: pdhtkv=true; Path=/; Expires=Mon, 28 Sep 2026 06:29:13 GMT; Secure; SameSite=None\nuncs=1; Path=/; Expires=Mon, 28 Sep 2026 06:29:13 GMT; Secure; SameSite=None\npdhtkv49=true; Path=/; Expires=Mon, 28 Sep 2026 06:29:13 GMT; Secure; SameSite=None\nuncs49=1; Path=/; Expires=Mon, 28 Sep 2026 06:29:13 GMT; Secure; SameSite=None\nu_pl27773363=1; Path=/; Expires=Mon, 28 Sep 2026 06:29:13 GMT; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nx-envoy-upstream-service-time: 20\r\nHost: fizzyacerbitymellow.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: e18c10c799332575060fd777f7105063\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":[{"name":"pdhtkv","value":"true","quoted":false,"path":"/","expires":"2026-09-28T06:29:13Z","raw_expires":"Mon, 28 Sep 2026 06:29:13 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"pdhtkv=true; Path=/; Expires=Mon, 28 Sep 2026 06:29:13 GMT; Secure; SameSite=None"},{"name":"uncs","value":"1","quoted":false,"path":"/","expires":"2026-09-28T06:29:13Z","raw_expires":"Mon, 28 Sep 2026 06:29:13 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uncs=1; Path=/; Expires=Mon, 28 Sep 2026 06:29:13 GMT; Secure; SameSite=None"},{"name":"pdhtkv49","value":"true","quoted":false,"path":"/","expires":"2026-09-28T06:29:13Z","raw_expires":"Mon, 28 Sep 2026 06:29:13 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"pdhtkv49=true; Path=/; Expires=Mon, 28 Sep 2026 06:29:13 GMT; Secure; SameSite=None"},{"name":"uncs49","value":"1","quoted":false,"path":"/","expires":"2026-09-28T06:29:13Z","raw_expires":"Mon, 28 Sep 2026 06:29:13 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uncs49=1; Path=/; Expires=Mon, 28 Sep 2026 06:29:13 GMT; Secure; SameSite=None"},{"name":"u_pl27773363","value":"1","quoted":false,"path":"/","expires":"2026-09-28T06:29:13Z","raw_expires":"Mon, 28 Sep 2026 06:29:13 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"u_pl27773363=1; Path=/; Expires=Mon, 28 Sep 2026 06:29:13 GMT; Secure; SameSite=None"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14519,"size_decoded":11777,"mime_type":"application/json","magic":"JSON text data","md5":"41815a41155c875d14fe68471fe37a12","sha1":"4dcd9403f3ee0c7e7efe1c91f8ad3a8dd67564f1","sha256":"250fde547811478c9055a249d329e64de4e69a48a42e444d111cb49d27e4a48c","sha512":"fe11feccac181bacf41df7575ebbb7fd61537b710080fa5066193b9fbd953f41b68bc2f46d629ecac2b530ada9ad800962dc7b588fc8e82a963dd919953139e6","ssdeep":"384:HQgQJguvYY/CStsVo8THBfiZNzo4pvXzKY7zmyyeNK:HbYr5vtmThfkJ1pf97K","tlshash":"c262be7a136c3bcb2bab2ed6b48f18eb1c40111b8699af44f13584f566319d1322ce2c","first_seen":"2026-09-27T06:30:15.103574Z","last_seen":"2026-09-27T06:30:15.103574Z","times_seen":1,"resource_available":true,"data":null}},"time_used":457,"timings":{"blocked":-1,"dns":52,"connect":91,"send":0,"wait":114,"receive":0,"ssl":199},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.bakestubborn.com/sb/ssp/interstitial/message_redcircle/1/css/animate.css","fqdn":"cdn.bakestubborn.com","domain":"bakestubborn.com","tld":"com"},"ip":{"addr":"104.21.74.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ads.alterhub.site/promoframe#k=3ae6276d5f69eb697421a09960b7da53\u0026n=28128394\u0026i=n3_ke4tgo","date":"2026-09-27T06:29:14.311Z","timestamp":1790490554311,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bakestubborn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 10:45:38 GMT","end":"Sun, 29 Nov 2026 11:44:06 GMT"},"fingerprint":{"sha1":"CC:2C:E2:22:5E:AA:1C:23:69:1C:A8:45:D8:E3:11:DD:72:0F:3A:7F","sha256":"BF:DE:33:C4:70:F3:0B:0C:27:4F:85:FB:EB:B1:8B:DF:D8:F6:7A:95:F2:7D:D9:E6:40:CC:60:74:A0:77:92:D1"}}},"request":{"raw":"GET /sb/ssp/interstitial/message_redcircle/1/css/animate.css HTTP/1.1\r\nHost: cdn.bakestubborn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nOrigin: https://ads.alterhub.site\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 06:29:14 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 19 Jan 2024 14:19:45 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZjJ2BrPl6X0Lccu%2BIibRE4JHAJqh1jExMUSGqHGvk%2Fo756g7%2BK1nhsoiG68xgPqVvOoldUFEYi2%2Ffw6xIBzIeAEq%2B%2F51pfkkoGpqLl%2BrjkFRWrtnT6ju5axw3IPMlRJD9nNmrkSG6Q%3D%3D\"}]}\r\npriority: u=3,i=?0\r\netag: W/\"65aa8501-13361\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a41873ec89281525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78689,"size_decoded":5693,"mime_type":"text/css","magic":"ASCII text","md5":"3d4123dbfb33d27a5cfdfcfa91df6783","sha1":"e7d0eeeec54b848f0bc3da8685fa3bc88429d660","sha256":"cb7d1393b65701b2f97d8da244c2c6023e9cbc3463ecb0136b915cfc775c6887","sha512":"75c8a48dc207595e201b50b87ff68782112a21aded9f15f14185c07d40f0151d6afe74a2b278aa575caf12ac422e8166316296ed7b6573ea24e667cca4af51dd","ssdeep":"384:jvuAuF81dghu3ublZlX/m/Gu7uNUtrL4VrbZJgBhLYNKwZiMUL6Vpaj7F:jvuAu21dghu3uLu7uNKwZiMUL6Vpaj7F","tlshash":"22731bad399115845263861d83df9e68273ce5731826acef73c2488bcf8bf9867c9147","first_seen":"2024-01-20T06:37:31Z","last_seen":"2026-10-11T18:22:24.905904Z","times_seen":14910,"resource_available":true,"data":null}},"time_used":480,"timings":{"blocked":0,"dns":3,"connect":10,"send":0,"wait":466,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"cdn.bakestubborn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"cdn.bakestubborn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alterhub.site/","fqdn":"alterhub.site","domain":"alterhub.site","tld":"site"},"ip":{"addr":"104.21.42.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-27T06:29:11.105Z","timestamp":1790490551105,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alterhub.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 00:28:34 GMT","end":"Sat, 07 Nov 2026 01:28:30 GMT"},"fingerprint":{"sha1":"CC:30:2C:31:6D:59:8D:61:CD:11:F9:93:CE:16:C0:86:EE:F5:4A:5A","sha256":"FD:96:F8:0E:8C:08:48:55:A0:F2:69:BB:EA:8B:3A:98:9A:71:49:5F:30:C6:90:E1:9F:D3:7F:54:A3:38:1A:B6"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: alterhub.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\nage: 752191\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; frame-src 'self' https: data: blob:; media-src 'self' https: data: blob:; connect-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self' https:;\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sun, 27 Sep 2026 06:29:11 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 18 Sep 2026 13:32:39 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::45d4d-1790490551202-f0a64e83b244\r\ncf-cache-status: DYNAMIC\r\npriority: u=0,i\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IVdiBi94poaCr8knRt7OkP3AlLJ8UKG8xyH2t3Miin5pTuzZOVAkYTyR3aPsJq%2FKRT2ncaitaK9Read%2BjIWeFOlVgB%2FNj1wRXUYMcxBj0wJ4FQijWueyHsyhi1i0kts%2B\"}]}\r\nvary: accept-encoding\r\ncf-ray: a41873d8aabd0b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21659,"size_decoded":7238,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (947)","md5":"b19e547b2032d7658e30c36ce2e2076d","sha1":"a41fe69993a03defd6a5aac8471833eaa771e89c","sha256":"71f78a7c78033346a8b0f9f5226662279dccfe82a55cfe1b5b6ed8a6d0b1f2fd","sha512":"baac9f70fa3d8b313590951947e394b2a2a6daa8779c141f7b991905f7a762318234ba02a89797156afc4e4c1ac466b8ef84599eb7b45c1b3ce0079136d8709a","ssdeep":"192:AOZ0pBjwhcqPzstDz8u10FJ0x9Eedzn2RNbDFuGvcTQDikYCPVibWkHnx/k:bGgFq0KE2IDFuGvcTQDikYC4hnx/k","tlshash":"a4a283a3adf1817310a380da71e6bb277ea28157c646200472bc47ac4fdbd95d9736cd","first_seen":"2026-09-27T06:30:15.105508Z","last_seen":"2026-09-27T06:30:15.105508Z","times_seen":1,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":20,"connect":20,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alterhub.site/script.js?v=00169b4e","fqdn":"alterhub.site","domain":"alterhub.site","tld":"site"},"ip":{"addr":"104.21.42.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://alterhub.site/","date":"2026-09-27T06:29:11.628Z","timestamp":1790490551628,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alterhub.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 00:28:34 GMT","end":"Sat, 07 Nov 2026 01:28:30 GMT"},"fingerprint":{"sha1":"CC:30:2C:31:6D:59:8D:61:CD:11:F9:93:CE:16:C0:86:EE:F5:4A:5A","sha256":"FD:96:F8:0E:8C:08:48:55:A0:F2:69:BB:EA:8B:3A:98:9A:71:49:5F:30:C6:90:E1:9F:D3:7F:54:A3:38:1A:B6"}}},"request":{"raw":"GET /script.js?v=00169b4e HTTP/1.1\r\nHost: alterhub.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://alterhub.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\nage: 123694\r\ncache-control: public, max-age=14400, stale-while-revalidate=604800\r\ncontent-disposition: inline; filename=\"script.js\"\r\ncontent-encoding: br\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; frame-src 'self' https: data: blob:; media-src 'self' https: data: blob:; connect-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self' https:;\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sun, 27 Sep 2026 06:29:11 GMT\r\netag: \"cb5c166bc7c1c3f6589020fd4fcd7626\"\r\nlast-modified: Fri, 18 Sep 2026 13:02:34 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::gq2c5-1789740969239-842e98a7df56\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2%2FFnTq5iR%2FnuuBglJ3xOQ2Kd%2FQdTKIgwQsn7gg8O44KAgsIpGalqQUVDFgp4%2BNcACGycIHkjvJPBuTT1stqB5RgiqlAs3dvoQtzLLiEHnvD3uRgjZ37uXYfKhlY5dPs8\"}]}\r\ncf-cache-status: UPDATING\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncf-ray: a41873dbaad50b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12557,"size_decoded":6542,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (12556)","md5":"cb5c166bc7c1c3f6589020fd4fcd7626","sha1":"00169b4e391441097b7fb19636b051e75f7a58be","sha256":"90543170866792d8582a3e25dc3fb4f387f8c800512733cb8f09f877402abfc2","sha512":"c5a4515defcc9d7326654bab04d59efa4b3e9d53df5b2d41c1d832254c33833514b1868f3b9041fd4874a8cd26b84d971c48476d4daebbb1d043655c19e4e1de","ssdeep":"384:CLXZSB7EAhCGum6tvErS2E1y08gZyZCZSZeQZ7qt0xIWkBf:k64x/DpErS2E174of","tlshash":"8a42c5bd720839b703a310b5657fb70ab37235119c4b80a099b9d9c82dbddad9233d9d","first_seen":"2026-09-27T06:27:52.429032Z","last_seen":"2026-09-27T06:30:57.012574Z","times_seen":4,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spendsdetachment.com/watch.1363666931209.js?key=fdfdd92a59e588025342002253695a24\u0026kw=%5B%22advertisement%22%5D\u0026refer=https%3A%2F%2Falterhub.site%2F\u0026tz=0\u0026dev=e\u0026res=14.1055\u0026rb=e\u0026uuid=01a0e18d-a9ff-715f-a03c-d96f766d2d64%3A1%3A1","fqdn":"spendsdetachment.com","domain":"spendsdetachment.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ads.alterhub.site/promoframe#k=fdfdd92a59e588025342002253695a24\u0026w=468\u0026h=60\u0026i=u2_h3rpj0","date":"2026-09-27T06:29:12.883Z","timestamp":1790490552883,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"spendsdetachment.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 04:27:12 GMT","end":"Tue, 24 Nov 2026 04:27:11 GMT"},"fingerprint":{"sha1":"EB:97:C4:8B:DE:F8:13:B1:55:C6:2E:E9:8C:5C:48:F7:1E:59:B1:F2","sha256":"D3:ED:AA:AB:A7:0F:5D:B5:E3:C6:C8:42:92:C6:71:07:01:45:1D:84:99:AD:9D:45:AD:FB:7A:B9:4D:A7:8F:57"}}},"request":{"raw":"GET /watch.1363666931209.js?key=fdfdd92a59e588025342002253695a24\u0026kw=%5B%22advertisement%22%5D\u0026refer=https%3A%2F%2Falterhub.site%2F\u0026tz=0\u0026dev=e\u0026res=14.1055\u0026rb=e\u0026uuid=01a0e18d-a9ff-715f-a03c-d96f766d2d64%3A1%3A1 HTTP/1.1\r\nHost: spendsdetachment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nOrigin: https://ads.alterhub.site\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 307 Temporary Redirect\r\nServer: nginx/1.28.2\r\nDate: Sun, 27 Sep 2026 06:29:13 GMT\r\nContent-Type: text/html\r\nContent-Length: 0\r\nConnection: keep-alive\r\naccept-ch: User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Mobile,X-Device-User-Agent,Sec-Ch-Ua,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Model,Device-Stock-Ua,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://ads.alterhub.site\r\nlocation: https://spendsdetachment.com/watch.1363666931209.js?dev=e\u0026fstu=01a0e18d-ab83-7f1d-a158-504693aca864\u0026key=fdfdd92a59e588025342002253695a24\u0026kw=%5B%22advertisement%22%5D\u0026ps1=1790490553\u0026rb=e\u0026refer=https%3A%2F%2Falterhub.site%2F\u0026res=14.1055\u0026rmtc=t\u0026sht=YvDt2IYo-nlz0YUQSiB5dKCixhS1-nHJ46Df_jJN8Sw\u0026shv=2\u0026st1=d2701569ca189e98f70aa261f0dfb943\u0026tz=0\u0026uuid=01a0e18d-a9ff-715f-a03c-d96f766d2d64%3A1%3A1\r\nset-cookie: uid_id2=01a0e18d-a9ff-715f-a03c-d96f766d2d64:1:1; Path=/; Expires=Sun, 04 Oct 2026 06:29:13 GMT; Secure; SameSite=None\nain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.DyQWATwZd7RdKScjpAR-kl_SmGciWoOVU7Ez3t6USs4; Path=/; Expires=Sun, 27 Sep 2026 06:30:13 GMT; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nx-envoy-upstream-service-time: 3\r\nHost: spendsdetachment.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: b657b78f7c250aa49157a17df6b850b6\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":[{"name":"uid_id2","value":"01a0e18d-a9ff-715f-a03c-d96f766d2d64:1:1","quoted":false,"path":"/","expires":"2026-10-04T06:29:13Z","raw_expires":"Sun, 04 Oct 2026 06:29:13 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uid_id2=01a0e18d-a9ff-715f-a03c-d96f766d2d64:1:1; Path=/; Expires=Sun, 04 Oct 2026 06:29:13 GMT; Secure; SameSite=None"},{"name":"ain","value":"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.DyQWATwZd7RdKScjpAR-kl_SmGciWoOVU7Ez3t6USs4","quoted":false,"path":"/","expires":"2026-09-27T06:30:13Z","raw_expires":"Sun, 27 Sep 2026 06:30:13 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.DyQWATwZd7RdKScjpAR-kl_SmGciWoOVU7Ez3t6USs4; Path=/; Expires=Sun, 27 Sep 2026 06:30:13 GMT; Secure; SameSite=None"}],"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T20:43:33.933419Z","times_seen":19037193,"resource_available":true,"data":null}},"time_used":385,"timings":{"blocked":-1,"dns":2,"connect":90,"send":0,"wait":96,"receive":0,"ssl":197},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"spendsdetachment.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"spendsdetachment.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/pixel/ase","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ads.alterhub.site/promoframe#k=d99b65ef2f1e54f34f14ebb6236adcad\u0026w=468\u0026h=60\u0026i=u1_v62o5x","date":"2026-09-27T06:29:13.791Z","timestamp":1790490553791,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 00:02:23 GMT","end":"Sat, 21 Nov 2026 00:02:22 GMT"},"fingerprint":{"sha1":"45:C6:44:0A:42:17:85:94:0C:43:02:EA:82:14:8D:F8:D3:13:D9:E2","sha256":"8C:E7:C4:F5:8F:DB:E8:10:A8:55:E4:5C:85:CC:97:D0:7D:0A:FE:C9:6C:C4:4D:6A:FF:20:87:2C:BC:34:2D:F4"}}},"request":{"raw":"POST /pixel/ase HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 477\r\nOrigin: https://ads.alterhub.site\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":477,"data":"[{\"placement_key\":\"d99b65ef2f1e54f34f14ebb6236adcad\",\"template_body\":\"body_banner_pl_general\",\"event_name\":\"base.cear.success\",\"id_frontend_invoke\":\"01a0e18d-a9a7-7a2b-b6a1-842c80a213f6\",\"script_version\":\"\",\"extra_json\":{\"cpk\":\"cad9ea51fc7060d2582c3cdc3bde7b1f\"}},{\"placement_key\":\"d99b65ef2f1e54f34f14ebb6236adcad\",\"template_body\":\"body_banner_pl_general\",\"event_name\":\"base.load_watch.success\",\"id_frontend_invoke\":\"01a0e18d-a9a7-7a2b-b6a1-842c80a213f6\",\"script_version\":\"\"}]"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 27 Sep 2026 06:29:14 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: Sec-Ch-Ua-Platform, Device-Stock-Ua, X-Device-User-Agent, X-Operamini-Phone-Ua, X-Ucbrowser-Device-Ua, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua, Sec-Ch-Ua-Platformuser-Agent, Sec-Ch-Ua-Model, Sec-Ch-Ua-Mobile, User-Agent, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Ua-Full-Version\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":1837,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T20:43:33.933419Z","times_seen":19037193,"resource_available":true,"data":null}},"time_used":396,"timings":{"blocked":0,"dns":0,"connect":99,"send":0,"wait":99,"receive":0,"ssl":199},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"kettledroopingcontinuation.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://alterhub.site/","date":"2026-09-27T06:29:11.842Z","timestamp":1790490551842,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://alterhub.site\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:55:16 GMT\r\nexpires: Tue, 21 Sep 2027 15:55:16 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 484435\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-10-11T19:42:18.948247Z","times_seen":313537,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":42,"dns":0,"connect":0,"send":0,"wait":43,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.highperformanceformat.com/d99b65ef2f1e54f34f14ebb6236adcad/invoke.js","fqdn":"www.highperformanceformat.com","domain":"highperformanceformat.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ads.alterhub.site/promoframe#k=d99b65ef2f1e54f34f14ebb6236adcad\u0026w=468\u0026h=60\u0026i=u1_v62o5x","date":"2026-09-27T06:29:12.260Z","timestamp":1790490552260,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"highperformanceformat.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 23:52:39 GMT","end":"Wed, 04 Nov 2026 23:52:38 GMT"},"fingerprint":{"sha1":"B8:83:42:30:01:F1:50:DF:BA:43:AD:F5:FF:7C:75:43:E4:F3:14:B8","sha256":"06:90:24:D1:9F:9A:3E:F1:28:CC:2D:B9:77:E8:06:2F:0D:9E:37:96:BE:CB:04:A2:6B:68:B2:4A:66:04:FE:87"}}},"request":{"raw":"GET /d99b65ef2f1e54f34f14ebb6236adcad/invoke.js HTTP/1.1\r\nHost: www.highperformanceformat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 27 Sep 2026 06:29:12 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\naccept-ch: Sec-Ch-Ua-Mobile,Device-Stock-Ua,X-Device-User-Agent,User-Agent,Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Model\r\naccess-control-allow-origin: *\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\nx-envoy-upstream-service-time: 4\r\nHost: www.highperformanceformat.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: efda3f919398cd49fef946aa3fd609f8\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":49208,"size_decoded":21337,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (49208), with no line terminators","md5":"67a03299cc562d6863b78561d370ab3e","sha1":"e1da3d40720eb9e8fb65e3c8a07568944d8a2810","sha256":"a2e5318f052198388ee056d8b2414ef110444f130edb3dccf1784c94ce4c7b4e","sha512":"8abd730860317db4ea4359c036faf8888a8029de50f6dec332037b024c0c1841a308f63ba9acfe8e7e8b19dba7648abc1f562c68dc8a74cc4d1626a4a8d53791","ssdeep":"1536:zxD5bK4LEx2qTq1MAif4kvj8c5NR1c7l9WEII0Nf:lD5bjLExEDATvc73WEc","tlshash":"ac23e7d86f60e25247f0a8ff32269535f4691e54384cd4d4e06f3cc4aea7706ea7a478","first_seen":"2026-09-27T06:30:15.107791Z","last_seen":"2026-09-27T06:30:15.107791Z","times_seen":1,"resource_available":true,"data":null}},"time_used":471,"timings":{"blocked":-1,"dns":0,"connect":91,"send":0,"wait":97,"receive":91,"ssl":191},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"www.highperformanceformat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"www.highperformanceformat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sleepoverlimitprofound.com/ntv.json?key=3ae6276d5f69eb697421a09960b7da53\u0026vstc=4\u0026rb=e","fqdn":"sleepoverlimitprofound.com","domain":"sleepoverlimitprofound.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ads.alterhub.site/promoframe#k=3ae6276d5f69eb697421a09960b7da53\u0026n=28128394\u0026i=n3_ke4tgo","date":"2026-09-27T06:29:12.776Z","timestamp":1790490552776,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sleepoverlimitprofound.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 04:20:18 GMT","end":"Tue, 24 Nov 2026 04:20:17 GMT"},"fingerprint":{"sha1":"25:9A:58:CA:68:4D:EC:36:88:A4:BC:7F:2C:41:BE:B7:58:63:32:E3","sha256":"08:E4:A1:17:A8:1B:17:9D:84:10:F1:9B:37:A3:57:FE:8C:98:BA:9C:11:0D:A1:97:5C:AA:71:F0:6A:4A:28:5E"}}},"request":{"raw":"GET /ntv.json?key=3ae6276d5f69eb697421a09960b7da53\u0026vstc=4\u0026rb=e HTTP/1.1\r\nHost: sleepoverlimitprofound.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nOrigin: https://ads.alterhub.site\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 27 Sep 2026 06:29:13 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\naccept-ch: X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua,Sec-Ch-Ua-Platform,X-Device-User-Agent,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile,Device-Stock-Ua,X-Operamini-Phone-Ua\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://ads.alterhub.site\r\ncontent-encoding: zstd\r\nset-cookie: pdhtkv=true; Path=/; Expires=Mon, 28 Sep 2026 06:29:13 GMT; Secure; SameSite=None\nuncs=1; Path=/; Expires=Mon, 28 Sep 2026 06:29:13 GMT; Secure; SameSite=None\npdhtkv49=true; Path=/; Expires=Mon, 28 Sep 2026 06:29:13 GMT; Secure; SameSite=None\nuncs49=1; Path=/; Expires=Mon, 28 Sep 2026 06:29:13 GMT; Secure; SameSite=None\nu_pl28027895=1; Path=/; Expires=Mon, 28 Sep 2026 06:29:13 GMT; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nx-envoy-upstream-service-time: 20\r\nHost: sleepoverlimitprofound.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: f6117f7e9edbbfeea6be65deb8afb6f2\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":[{"name":"pdhtkv","value":"true","quoted":false,"path":"/","expires":"2026-09-28T06:29:13Z","raw_expires":"Mon, 28 Sep 2026 06:29:13 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"pdhtkv=true; Path=/; Expires=Mon, 28 Sep 2026 06:29:13 GMT; Secure; SameSite=None"},{"name":"uncs","value":"1","quoted":false,"path":"/","expires":"2026-09-28T06:29:13Z","raw_expires":"Mon, 28 Sep 2026 06:29:13 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uncs=1; Path=/; Expires=Mon, 28 Sep 2026 06:29:13 GMT; Secure; SameSite=None"},{"name":"pdhtkv49","value":"true","quoted":false,"path":"/","expires":"2026-09-28T06:29:13Z","raw_expires":"Mon, 28 Sep 2026 06:29:13 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"pdhtkv49=true; Path=/; Expires=Mon, 28 Sep 2026 06:29:13 GMT; Secure; SameSite=None"},{"name":"uncs49","value":"1","quoted":false,"path":"/","expires":"2026-09-28T06:29:13Z","raw_expires":"Mon, 28 Sep 2026 06:29:13 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uncs49=1; Path=/; Expires=Mon, 28 Sep 2026 06:29:13 GMT; Secure; SameSite=None"},{"name":"u_pl28027895","value":"1","quoted":false,"path":"/","expires":"2026-09-28T06:29:13Z","raw_expires":"Mon, 28 Sep 2026 06:29:13 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"u_pl28027895=1; Path=/; Expires=Mon, 28 Sep 2026 06:29:13 GMT; Secure; SameSite=None"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14481,"size_decoded":11037,"mime_type":"application/json","magic":"JSON text data","md5":"1c857473def4d6578150b721fe6a0029","sha1":"17b6b8798dffe210f71d5a1a4cbc941fd4913c33","sha256":"d6d8c49cc1ab9a946a931d8c31074cd991ed92390f620c0286dbf4eafe5f583d","sha512":"858999a29ab15870601fa8e54f01c6f8cc394738242e4f22ec2a5a7c3ede40d7d08127806fa9b6ab133586107aac78d7b88954455626ad584d8de4711c7e32a1","ssdeep":"384:0VTyZH8Ocp+y482r680ooJhcNy97yUcydfOpM9iu1tETpd:0qRcJA68hoJH7yUcydfOMhtETpd","tlshash":"ca52af7203fd72124e9cb21319ef99f61e6555436358fd04c76ccbe92838283a62e936","first_seen":"2026-09-27T06:30:15.109156Z","last_seen":"2026-09-27T06:30:15.109156Z","times_seen":1,"resource_available":true,"data":null}},"time_used":408,"timings":{"blocked":-1,"dns":3,"connect":90,"send":0,"wait":116,"receive":0,"ssl":198},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-26","alert":"Sinkholed","trigger":"sleepoverlimitprofound.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/cti/fc/d4/90/fcd490a573b21c3525fa9000da14df07/1708078000.jpg","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ads.alterhub.site/promoframe#k=3ae6276d5f69eb697421a09960b7da53\u0026n=28128394\u0026i=n3_ke4tgo","date":"2026-09-27T06:29:13.220Z","timestamp":1790490553220,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 02:32:58 GMT","end":"Wed, 02 Dec 2026 02:32:57 GMT"},"fingerprint":{"sha1":"0C:28:A6:45:71:D0:51:55:56:A0:1D:34:71:8C:C4:7C:16:5A:03:5C","sha256":"68:73:EC:1A:D4:78:3E:46:1A:F8:1D:99:8F:CB:9D:46:B9:0E:28:CF:C6:BF:14:EF:F5:90:39:D3:FF:5A:1F:5C"}}},"request":{"raw":"GET /cti/fc/d4/90/fcd490a573b21c3525fa9000da14df07/1708078000.jpg HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 27 Sep 2026 06:29:13 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 28465\r\nserver: nginx/1.21.6\r\nlast-modified: Fri, 16 Feb 2024 10:06:48 GMT\r\netag: \"65cf33b8-6f31\"\r\nexpires: Tue, 29 Sep 2026 06:29:13 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":28465,"size_decoded":28813,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 320x240, components 3","md5":"f8ef0beaf830f58376677222c97ba0eb","sha1":"697f982bab7202718a899dc00b698b6a5059cbe6","sha256":"82c7319e8d3ae29c054411eeb22db0d9e67b338b82b889fdb31d31f11491d690","sha512":"be8509be33426e7647954429b7ffd7db61a17d7ff357aa4110b335aa449b3d8dd1aabddd84cf0b39493277b9cf36fb277c53daa904d47989ea8f84daf402d3b0","ssdeep":"768:YPOQM5RnYQfhGayvUOhgRCK39cSCI2IZW5eI8bppZNkkhq:YhM5RYQIBSRCqR4I3I8bFS3","tlshash":"a1d2e191071b23ca2d7a16f3e4c0bc9401da2e95e316654ea0bd0b9edd3bc45d9cce2b","first_seen":"2024-04-08T08:59:05Z","last_seen":"2026-10-11T04:18:22.096016Z","times_seen":209,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":1,"connect":19,"send":0,"wait":66,"receive":9,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.bakestubborn.com/sb/notifications/utility/default/us/blog/financeskipper/message_redcircle2/16/css/style.css","fqdn":"cdn.bakestubborn.com","domain":"bakestubborn.com","tld":"com"},"ip":{"addr":"104.21.74.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ads.alterhub.site/promoframe#k=fdfdd92a59e588025342002253695a24\u0026w=468\u0026h=60\u0026i=u2_h3rpj0","date":"2026-09-27T06:29:14.393Z","timestamp":1790490554393,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bakestubborn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 10:45:38 GMT","end":"Sun, 29 Nov 2026 11:44:06 GMT"},"fingerprint":{"sha1":"CC:2C:E2:22:5E:AA:1C:23:69:1C:A8:45:D8:E3:11:DD:72:0F:3A:7F","sha256":"BF:DE:33:C4:70:F3:0B:0C:27:4F:85:FB:EB:B1:8B:DF:D8:F6:7A:95:F2:7D:D9:E6:40:CC:60:74:A0:77:92:D1"}}},"request":{"raw":"GET /sb/notifications/utility/default/us/blog/financeskipper/message_redcircle2/16/css/style.css HTTP/1.1\r\nHost: cdn.bakestubborn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nOrigin: https://ads.alterhub.site\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 06:29:14 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 19 Jan 2024 14:21:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8%2BznZm6TC6cvYpAjazve7u79Neb5yHpGJeAZVeJwzdfs7QtMN9qbBZtJnXnOw9q%2FpxP%2F2LChv%2FtlgwQ3MHZtyHnRFk8widIlkB5IU4eDoU%2FzmTq1%2F8wAVqRZ6Af65YBEbjhMhMhhkw%3D%3D\"}]}\r\npriority: u=3,i=?0\r\netag: W/\"65aa8566-e50\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a41873ecf9381525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3664,"size_decoded":1888,"mime_type":"text/css","magic":"ASCII text","md5":"da91945ede579f34a99cde40a98ce5a4","sha1":"cfbf9b6c295766437a906f7fd6f46a0302240c9a","sha256":"9b9d07bcd50263ebd848d3f60889a594727d925ee4488df503eac791023d57b1","sha512":"764d388d8e0d63feaf440cdb92de9ef3f1eb76152b4f1ac1ad0d1fc7b30c110f24628b0e0c34bf5a9cbb1918aa8dc2fc466386f07ec0fda75ea7ec1cf9befae4","ssdeep":"","tlshash":"3071ee961b372604b40bd49a2f652717132540078a4bed183fca774c8fc66a8c6e3bdf","first_seen":"2024-01-21T07:50:10Z","last_seen":"2026-10-10T21:16:58.778028Z","times_seen":638,"resource_available":true,"data":null}},"time_used":464,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":464,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"cdn.bakestubborn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"cdn.bakestubborn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/pixel/ase","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ads.alterhub.site/promoframe#k=d99b65ef2f1e54f34f14ebb6236adcad\u0026w=468\u0026h=60\u0026i=u1_v62o5x","date":"2026-09-27T06:29:14.895Z","timestamp":1790490554895,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 00:02:23 GMT","end":"Sat, 21 Nov 2026 00:02:22 GMT"},"fingerprint":{"sha1":"45:C6:44:0A:42:17:85:94:0C:43:02:EA:82:14:8D:F8:D3:13:D9:E2","sha256":"8C:E7:C4:F5:8F:DB:E8:10:A8:55:E4:5C:85:CC:97:D0:7D:0A:FE:C9:6C:C4:4D:6A:FF:20:87:2C:BC:34:2D:F4"}}},"request":{"raw":"POST /pixel/ase HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 241\r\nOrigin: https://ads.alterhub.site\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":241,"data":"[{\"placement_key\":\"d99b65ef2f1e54f34f14ebb6236adcad\",\"template_body\":\"body_banner_pl_general\",\"event_name\":\"base.render.success\",\"id_frontend_invoke\":\"01a0e18d-a9a7-7a2b-b6a1-842c80a213f6\",\"script_version\":\"\",\"extra_json\":{\"path\":\"iframe\"}}]"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 27 Sep 2026 06:29:14 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: Sec-Ch-Ua-Full-Version, Sec-Ch-Ua-Mobile, Device-Stock-Ua, X-Ucbrowser-Device-Ua, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Platformuser-Agent, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Model, X-Device-User-Agent, X-Operamini-Phone-Ua, User-Agent, Sec-Ch-Ua, Sec-Ch-Ua-Full-Version-List\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":1601,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T20:43:33.933419Z","times_seen":19037193,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"kettledroopingcontinuation.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bicea.org/pixel/sbs?c=1","fqdn":"bicea.org","domain":"bicea.org","tld":"org"},"ip":{"addr":"104.21.86.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ads.alterhub.site/promoframe#k=3ae6276d5f69eb697421a09960b7da53\u0026n=28128394\u0026i=n3_ke4tgo","date":"2026-09-27T06:29:15.323Z","timestamp":1790490555323,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bicea.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Sep 2026 14:22:10 GMT","end":"Tue, 15 Dec 2026 15:22:04 GMT"},"fingerprint":{"sha1":"B9:2F:CB:73:40:D7:7C:69:4A:C6:22:3F:45:F8:CA:8D:35:85:B1:C6","sha256":"1A:05:85:45:D6:5A:93:DC:D9:59:BF:16:3B:1F:F2:B3:07:D5:B3:3C:34:CF:6D:7D:8D:BC:6F:D5:88:E3:95:59"}}},"request":{"raw":"GET /pixel/sbs?c=1 HTTP/1.1\r\nHost: bicea.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uidm=01a0e18d-aa54-75d6-8bfe-24d1a57a1305_2; __cf_bm=s97WfwL8KEDlwJ2cPRMHNEF9t5jPNhpTu1ntfKcpF6c-1790490552.8525264-1.0.1.1-x7_tfLhRY9ofMW4Gcd_xl..H59XSfMYUoI66PPL9LEHv_bWUGQvUPwgWhN0XjBjF9GOag6VdFdtjq1hbB0ZB3T8I1p6mJPUaW4smEEym4vZNDFmJE3JzjshCATN0yON1; pdhtkv=true; uncs=2; pdhtkv29=true; uncs29=2; u_pl31286095=1; slec9934f3af5b5e41f86ecd27cc4a72d823=[6790254]; u_pl31156143=1; slec9ecf8e436a025f7fff03b61551d7e737=[6671912]; iprc_l+574e4dfde0b7d9d0e285c2e1fff9d691=6671912; iprc_l-6671912=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 27 Sep 2026 06:29:15 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\naccept-ch: Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, X-Device-User-Agent, X-Ucbrowser-Device-Ua, Sec-Ch-Ua, Sec-Ch-Ua-Platformuser-Agent, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Ua-Full-Version, Sec-Ch-Ua-Model, Device-Stock-Ua, X-Operamini-Phone-Ua, User-Agent, Sec-Ch-Ua-Platform-Version\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\naccess-control-expose-headers: Content-Length,Content-Range\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a41873f2c8de32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":820,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T20:43:33.933419Z","times_seen":19037193,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/watch.794391129081.js?key=d99b65ef2f1e54f34f14ebb6236adcad\u0026kw=%5B%22advertisement%22%5D\u0026refer=https%3A%2F%2Falterhub.site%2F\u0026tz=0\u0026dev=e\u0026res=14.1055\u0026rb=e\u0026uuid=01a0e18d-a9ff-7f93-835a-abb00c352bc6%3A3%3A1","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ads.alterhub.site/promoframe#k=d99b65ef2f1e54f34f14ebb6236adcad\u0026w=468\u0026h=60\u0026i=u1_v62o5x","date":"2026-09-27T06:29:12.886Z","timestamp":1790490552886,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 00:02:23 GMT","end":"Sat, 21 Nov 2026 00:02:22 GMT"},"fingerprint":{"sha1":"45:C6:44:0A:42:17:85:94:0C:43:02:EA:82:14:8D:F8:D3:13:D9:E2","sha256":"8C:E7:C4:F5:8F:DB:E8:10:A8:55:E4:5C:85:CC:97:D0:7D:0A:FE:C9:6C:C4:4D:6A:FF:20:87:2C:BC:34:2D:F4"}}},"request":{"raw":"GET /watch.794391129081.js?key=d99b65ef2f1e54f34f14ebb6236adcad\u0026kw=%5B%22advertisement%22%5D\u0026refer=https%3A%2F%2Falterhub.site%2F\u0026tz=0\u0026dev=e\u0026res=14.1055\u0026rb=e\u0026uuid=01a0e18d-a9ff-7f93-835a-abb00c352bc6%3A3%3A1 HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nOrigin: https://ads.alterhub.site\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 307 Temporary Redirect\r\nServer: nginx/1.28.2\r\nDate: Sun, 27 Sep 2026 06:29:13 GMT\r\nContent-Type: text/html\r\nContent-Length: 0\r\nConnection: keep-alive\r\naccept-ch: X-Operamini-Phone-Ua,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Platform,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile,Device-Stock-Ua,X-Device-User-Agent\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://ads.alterhub.site\r\nlocation: https://kettledroopingcontinuation.com/watch.794391129081.js?dev=e\u0026fstu=01a0e18d-ab8d-7edd-ad1e-f59ea858c7d0\u0026key=d99b65ef2f1e54f34f14ebb6236adcad\u0026kw=%5B%22advertisement%22%5D\u0026ps1=1790490553\u0026rb=e\u0026refer=https%3A%2F%2Falterhub.site%2F\u0026res=14.1055\u0026rmtc=t\u0026sht=30B3F8OZDif_f7zJDK0D1Xd2fHsH8O0s1fkBVherwN0\u0026shv=2\u0026st1=6ecea912e4d75a050b3f59cc23a55666\u0026tz=0\u0026uuid=01a0e18d-a9ff-7f93-835a-abb00c352bc6%3A3%3A1\r\nset-cookie: uid_id2=01a0e18d-a9ff-7f93-835a-abb00c352bc6:3:1; Path=/; Expires=Sun, 04 Oct 2026 06:29:13 GMT; Secure; SameSite=None\nain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.SmTQ7wZvuVNtGe1ctSVV587BCScmhCWfnwzRJ0jSP3Y; Path=/; Expires=Sun, 27 Sep 2026 06:30:13 GMT; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nx-envoy-upstream-service-time: 1\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: c0356617b632ea1a4e508e21dbff6aea\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":[{"name":"uid_id2","value":"01a0e18d-a9ff-7f93-835a-abb00c352bc6:3:1","quoted":false,"path":"/","expires":"2026-10-04T06:29:13Z","raw_expires":"Sun, 04 Oct 2026 06:29:13 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uid_id2=01a0e18d-a9ff-7f93-835a-abb00c352bc6:3:1; Path=/; Expires=Sun, 04 Oct 2026 06:29:13 GMT; Secure; SameSite=None"},{"name":"ain","value":"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.SmTQ7wZvuVNtGe1ctSVV587BCScmhCWfnwzRJ0jSP3Y","quoted":false,"path":"/","expires":"2026-09-27T06:30:13Z","raw_expires":"Sun, 27 Sep 2026 06:30:13 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.SmTQ7wZvuVNtGe1ctSVV587BCScmhCWfnwzRJ0jSP3Y; Path=/; Expires=Sun, 27 Sep 2026 06:30:13 GMT; Secure; SameSite=None"}],"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T20:43:33.933419Z","times_seen":19037193,"resource_available":true,"data":null}},"time_used":392,"timings":{"blocked":-1,"dns":2,"connect":91,"send":0,"wait":100,"receive":0,"ssl":199},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"kettledroopingcontinuation.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sleepoverlimitprofound.com/impr.gif?sid=H4sIAAAAAAAC_1RSy4scRRivXgcvOQQkRBAPDXpQcGerH_PoxFPwBcaNJpGAnurVa2V6ujpd1TOzc9oY0eseFDxJ7292s2BEzEm9yaw3RUh7kD1kPfgfKOjBi8xkcLWgvge_4qvf9_2-D_eqE9JGxY7ffMNMdZaxjU6b-s_d0Lk0Y-tvXvcD2qYX_Rs678YX_cnClKMLQRS36fP-q0oMzEZIA0oDGviv6FKlZrKxRKGLL5KgndB2HLaDToxJ-f_cVh4s8yBHJ-QJaNmc_S19F1rMkQ-_eknZgTPFCy8Pq4w5U2IkD9_OB7kZ5xiehmnpIc0PV69hbEPIp2sw-eGqA5jR_qIDcN2QtfMPwfPDFU3w0cEjpjyDysHlGYxHc6hsDs3mEOYOtHxAACGxeQX58O6mKcds-xHKFmhDWn_-AT1uSOvhOeTDLy9leuJfM1nltMktJmkNPZlDb81RVEdw0zXo8RGEex9a_kTok2eQDz9_zYz0wB-pcgAt6-UMdDoHsx6qxdUeqtRDVXgYymM_pv1YBCzqpokUPRqzOJaK06QfUsoS0UMlbkPLXYhyB0W5g4HehZUerGuI99YORrI-kJkNbX1XZrbiwcqHKx_VM-O29tiBcVsqJ2DlLkpZ7-vilr0D4R6bTVP7-swsDOOunjEu65mWjqC8dfwsDRhVQV-uMx7S9V4njNdZwNV6EqQ86iVJ2O2l-6l1Vb1XrLT37t37CwN17EdMdcNeV3bSbqJ4N-nFYcBoknQp70nWiWB1DW3XlsOZ6oZc_WWEQjdk_Z3PwNkRbHYEoZ8GqwKwcQ32Xo1pfl8YqdNtK0pdONuebE8hTY3CteC2PShH9rITcm529fql75a6puVZKPEDWR2IskZR1ripvyfYym7fv1I4PdRTthD6mmNOPQ6mHzwTQuiGnH_q7-XGXfjkZ4hiB7b4t9Iss0VDXvz1R1hDwAsPmSbI1OlXjNew_8n5abxnP8BW2QLPWjOela19npXZx0u2Dbnc_31ZuCGX849g9bGfRioUlPZ73SDqpyqIYinSTj9OZJfRKFJwtrn5zdff_jMAUQe4dQcEAAA=","fqdn":"sleepoverlimitprofound.com","domain":"sleepoverlimitprofound.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ads.alterhub.site/promoframe#k=3ae6276d5f69eb697421a09960b7da53\u0026n=28128394\u0026i=n3_ke4tgo","date":"2026-09-27T06:29:13.233Z","timestamp":1790490553233,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sleepoverlimitprofound.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 04:20:18 GMT","end":"Tue, 24 Nov 2026 04:20:17 GMT"},"fingerprint":{"sha1":"25:9A:58:CA:68:4D:EC:36:88:A4:BC:7F:2C:41:BE:B7:58:63:32:E3","sha256":"08:E4:A1:17:A8:1B:17:9D:84:10:F1:9B:37:A3:57:FE:8C:98:BA:9C:11:0D:A1:97:5C:AA:71:F0:6A:4A:28:5E"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1RSy4scRRivXgcvOQQkRBAPDXpQcGerH_PoxFPwBcaNJpGAnurVa2V6ujpd1TOzc9oY0eseFDxJ7292s2BEzEm9yaw3RUh7kD1kPfgfKOjBi8xkcLWgvge_4qvf9_2-D_eqE9JGxY7ffMNMdZaxjU6b-s_d0Lk0Y-tvXvcD2qYX_Rs678YX_cnClKMLQRS36fP-q0oMzEZIA0oDGviv6FKlZrKxRKGLL5KgndB2HLaDToxJ-f_cVh4s8yBHJ-QJaNmc_S19F1rMkQ-_eknZgTPFCy8Pq4w5U2IkD9_OB7kZ5xiehmnpIc0PV69hbEPIp2sw-eGqA5jR_qIDcN2QtfMPwfPDFU3w0cEjpjyDysHlGYxHc6hsDs3mEOYOtHxAACGxeQX58O6mKcds-xHKFmhDWn_-AT1uSOvhOeTDLy9leuJfM1nltMktJmkNPZlDb81RVEdw0zXo8RGEex9a_kTok2eQDz9_zYz0wB-pcgAt6-UMdDoHsx6qxdUeqtRDVXgYymM_pv1YBCzqpokUPRqzOJaK06QfUsoS0UMlbkPLXYhyB0W5g4HehZUerGuI99YORrI-kJkNbX1XZrbiwcqHKx_VM-O29tiBcVsqJ2DlLkpZ7-vilr0D4R6bTVP7-swsDOOunjEu65mWjqC8dfwsDRhVQV-uMx7S9V4njNdZwNV6EqQ86iVJ2O2l-6l1Vb1XrLT37t37CwN17EdMdcNeV3bSbqJ4N-nFYcBoknQp70nWiWB1DW3XlsOZ6oZc_WWEQjdk_Z3PwNkRbHYEoZ8GqwKwcQ32Xo1pfl8YqdNtK0pdONuebE8hTY3CteC2PShH9rITcm529fql75a6puVZKPEDWR2IskZR1ripvyfYym7fv1I4PdRTthD6mmNOPQ6mHzwTQuiGnH_q7-XGXfjkZ4hiB7b4t9Iss0VDXvz1R1hDwAsPmSbI1OlXjNew_8n5abxnP8BW2QLPWjOela19npXZx0u2Dbnc_31ZuCGX849g9bGfRioUlPZ73SDqpyqIYinSTj9OZJfRKFJwtrn5zdff_jMAUQe4dQcEAAA= HTTP/1.1\r\nHost: sleepoverlimitprofound.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; u_pl28027895=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 27 Sep 2026 06:29:13 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccept-ch: Sec-Ch-Ua-Platform,Sec-Ch-Ua-Model,Device-Stock-Ua,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Mobile,X-Device-User-Agent,User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nvary: Origin\r\nx-envoy-upstream-service-time: 3\r\nHost: sleepoverlimitprofound.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 27ffa73ec8d62dae58171c00aa94da89\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T20:43:33.933419Z","times_seen":19037193,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-26","alert":"Sinkholed","trigger":"sleepoverlimitprofound.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/cti/a1/11/df/a111df301a9ba9bcc31a2d30ac35d817/1779810261.png","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ads.alterhub.site/promoframe#k=aee874e267daf21ad94938c5960ef7a1\u0026n=27873862\u0026i=n4_0eh5yg","date":"2026-09-27T06:29:13.513Z","timestamp":1790490553513,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 02:32:58 GMT","end":"Wed, 02 Dec 2026 02:32:57 GMT"},"fingerprint":{"sha1":"0C:28:A6:45:71:D0:51:55:56:A0:1D:34:71:8C:C4:7C:16:5A:03:5C","sha256":"68:73:EC:1A:D4:78:3E:46:1A:F8:1D:99:8F:CB:9D:46:B9:0E:28:CF:C6:BF:14:EF:F5:90:39:D3:FF:5A:1F:5C"}}},"request":{"raw":"GET /cti/a1/11/df/a111df301a9ba9bcc31a2d30ac35d817/1779810261.png HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 27 Sep 2026 06:29:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 105844\r\nserver: nginx/1.21.6\r\nlast-modified: Tue, 26 May 2026 15:44:21 GMT\r\netag: \"6a15bfd5-19d74\"\r\nexpires: Tue, 29 Sep 2026 06:29:13 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":105844,"size_decoded":106193,"mime_type":"image/png","magic":"PNG image data, 320 x 240, 8-bit/color RGB, non-interlaced","md5":"bc4e49bb5af1fea76e17ac4b970da4cd","sha1":"3e8133328f76d72ffecbf14930c82a804a35c052","sha256":"1c94974d97f479a6873a747754f2098b44f371d9b28012087b58f46d5dfff9a7","sha512":"94d512412dc084f2fabb3040ba7a1e8265d78025da3e99f1bad42360b0cae40f8556092059a3ca9f9a39cbcd2d174943ff0f568c065028192893fff211092ec6","ssdeep":"3072:PmM8T17wF9uW7YSHSFa7DWBP/TFrG0CYWs:jSwFIW7CM7SV5i/s","tlshash":"aba312d3058e85c5895f6fd6adeecd2e9b73dc10443672ca10d2b89a1a31dd2dfe009a","first_seen":"2026-05-28T06:17:10.479721Z","last_seen":"2026-10-08T23:25:19.187678Z","times_seen":139,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/cti/b8/96/fe/b896fe42b0e18e9bbe77c1698e11f572/1708421804.jpg","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ads.alterhub.site/promoframe#k=aee874e267daf21ad94938c5960ef7a1\u0026n=27873862\u0026i=n4_0eh5yg","date":"2026-09-27T06:29:13.514Z","timestamp":1790490553514,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 02:32:58 GMT","end":"Wed, 02 Dec 2026 02:32:57 GMT"},"fingerprint":{"sha1":"0C:28:A6:45:71:D0:51:55:56:A0:1D:34:71:8C:C4:7C:16:5A:03:5C","sha256":"68:73:EC:1A:D4:78:3E:46:1A:F8:1D:99:8F:CB:9D:46:B9:0E:28:CF:C6:BF:14:EF:F5:90:39:D3:FF:5A:1F:5C"}}},"request":{"raw":"GET /cti/b8/96/fe/b896fe42b0e18e9bbe77c1698e11f572/1708421804.jpg HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 27 Sep 2026 06:29:13 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 23613\r\nserver: nginx/1.21.6\r\nlast-modified: Tue, 20 Feb 2024 09:36:52 GMT\r\netag: \"65d472b4-5c3d\"\r\nexpires: Tue, 29 Sep 2026 06:29:13 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23613,"size_decoded":23961,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 320x240, components 3","md5":"4ae624dfd5368d5f8849749329a10f3b","sha1":"6ea465f682129e2ba154e62a74a1b13fd612b036","sha256":"e90688fd1aacb32bc74ac6479b58dc35b3da79c9b4ad9aa135476f7c895cbc4b","sha512":"6fec2b3ab1632da9d4d02d6a800587bdb951560e7dcf05b28579ac99a17e98db00e54cd428d64599b8c9ce0bfd41db84ee0b5d9f14004acec7a8d41d2bf3256e","ssdeep":"384:Yf+dMn+UMCOAgBT0KbTsPemRTKvfM7r3gPKRLIWM3cBub2mxC:Y2CnfHcbgPcE7D+cUt3f2UC","tlshash":"32b2e003eb7200c89ebfccc2e4a8bd5a2dc3905ca5e5541f38c28845f35ca29374c5b6","first_seen":"2024-03-03T17:19:08Z","last_seen":"2026-10-04T23:58:17.611818Z","times_seen":194,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.bakestubborn.com/sb/notifications/utility/default/us/blog/financeskipper/message_redcircle2/16/js/script.js","fqdn":"cdn.bakestubborn.com","domain":"bakestubborn.com","tld":"com"},"ip":{"addr":"104.21.74.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ads.alterhub.site/promoframe#k=fdfdd92a59e588025342002253695a24\u0026w=468\u0026h=60\u0026i=u2_h3rpj0","date":"2026-09-27T06:29:14.397Z","timestamp":1790490554397,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bakestubborn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 10:45:38 GMT","end":"Sun, 29 Nov 2026 11:44:06 GMT"},"fingerprint":{"sha1":"CC:2C:E2:22:5E:AA:1C:23:69:1C:A8:45:D8:E3:11:DD:72:0F:3A:7F","sha256":"BF:DE:33:C4:70:F3:0B:0C:27:4F:85:FB:EB:B1:8B:DF:D8:F6:7A:95:F2:7D:D9:E6:40:CC:60:74:A0:77:92:D1"}}},"request":{"raw":"GET /sb/notifications/utility/default/us/blog/financeskipper/message_redcircle2/16/js/script.js HTTP/1.1\r\nHost: cdn.bakestubborn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nOrigin: https://ads.alterhub.site\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 06:29:14 GMT\r\ncontent-type: application/javascript\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 19 Jan 2024 14:21:26 GMT\r\npriority: u=3,i=?0\r\netag: \"65aa8566-182\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nURufy7YidtsslLDNqp5ZuEbgIPnIgEAFP5Y0al8ejR2QgPpRhZUF7%2F%2FEvZmGoOwAp45SMq0zLEo9MY7A%2BzcJQgZ9jINKrq2VvKhE0YYWWwf9AYybim9NvCon9bVNKB%2BxTbrxXGtqw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a41873ecf9391525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 386\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":386,"size_decoded":1221,"mime_type":"application/javascript","magic":"ASCII text","md5":"5ca8c1679ba9453cfa512e01d6fec9c5","sha1":"45628341eb20e4acee5e812d3b2dfc8f23962daf","sha256":"520a0196a18cbe656f7382a02ec828125e68bdac511b9ebe2bf27f31e262d037","sha512":"842e878cb264f7362266570b9a8e4b50187e8bedf2a499c0b8fe5e9fa2c563fa7577427039f58540b103c4da5197287373efc5f031ebd7ce17e5b34bbb8d11f7","ssdeep":"","tlshash":"86e02b386158513487f7d1a2619f27df2730469ed00a025e702c474f0ce1fa622c1d9b","first_seen":"2023-04-05T09:22:06Z","last_seen":"2026-10-11T18:22:24.689125Z","times_seen":3885,"resource_available":true,"data":null}},"time_used":456,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":456,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"cdn.bakestubborn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"cdn.bakestubborn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/intertight/v9/NGSnv5HMAFg6IuGlBNMjxJEL2VmU3NS7Z2mj0QiaWy5S.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://alterhub.site/","date":"2026-09-27T06:29:11.806Z","timestamp":1790490551806,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/intertight/v9/NGSnv5HMAFg6IuGlBNMjxJEL2VmU3NS7Z2mj0QiaWy5S.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://alterhub.site\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22660\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 25 Sep 2026 00:24:57 GMT\r\nexpires: Sat, 25 Sep 2027 00:24:57 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:28:09 GMT\r\ncontent-type: font/woff2\r\nage: 194654\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22660,"size_decoded":23473,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22660, version 1.0","md5":"62121ba6ea2742fb24ae38eb26d47c76","sha1":"e40dc7ea466c4cae0140e2a599064d867bca4bee","sha256":"db1a039d03ed646ef6a899f9ff92bf2f6fe382a49f1b0992066e85caf88b5be9","sha512":"a0ac5fe744f4a41c6897c09e0fd872fe4efb0dba28b4cdbb855f2564a779cddee30dba2822665f4fab925ee32f4d2e7307fd7dc4b6a73f4ce49ceaa1fa00af7d","ssdeep":"384:WCqxxJcfEOEG+49NbByk6X9zlK6C+XmkMXzH81FU/0ecAqqyP4LjZEE2eUfY:dqZ38rB56X9zlDlmkizH81Fwig2pw","tlshash":"b1a2e0eb1b13603ed1c528b2a318dfad253037ea45f4b57320f89787d5a55232fa8299","first_seen":"2025-06-04T21:11:52.160537Z","last_seen":"2026-10-11T17:28:20.594589Z","times_seen":790,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":78,"dns":0,"connect":0,"send":0,"wait":48,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alterhub.site/ads/bait.js?cb=1790490551873","fqdn":"alterhub.site","domain":"alterhub.site","tld":"site"},"ip":{"addr":"104.21.42.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://alterhub.site/","date":"2026-09-27T06:29:11.878Z","timestamp":1790490551878,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alterhub.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 00:28:34 GMT","end":"Sat, 07 Nov 2026 01:28:30 GMT"},"fingerprint":{"sha1":"CC:30:2C:31:6D:59:8D:61:CD:11:F9:93:CE:16:C0:86:EE:F5:4A:5A","sha256":"FD:96:F8:0E:8C:08:48:55:A0:F2:69:BB:EA:8B:3A:98:9A:71:49:5F:30:C6:90:E1:9F:D3:7F:54:A3:38:1A:B6"}}},"request":{"raw":"GET /ads/bait.js?cb=1790490551873 HTTP/1.1\r\nHost: alterhub.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://alterhub.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\netag: W/\"424ecc5f56c732e7d4a70f6347b22b66\"\r\naccess-control-allow-origin: *\r\nage: 741893\r\ncache-control: public, max-age=14400, stale-while-revalidate=604800\r\ncontent-disposition: inline; filename=\"bait.js\"\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; frame-src 'self' https: data: blob:; media-src 'self' https: data: blob:; connect-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self' https:;\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sun, 27 Sep 2026 06:29:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kzXuLeVtDdrIvUJv%2Bb3ewtEoOoi2%2FkpeA9%2Fe8X87Qq5u8pUtjfGFUAOSHBNDdMZCd7upNmSe4%2BZ%2Flgjfl1HPfJ4VULaQo5HPfCLCku9FWWBfyrBYbFNrO1CpoI2xyoYC\"}]}\r\nlast-modified: Fri, 18 Sep 2026 16:24:18 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::lfqlc-1790490551938-9b36515f6d03\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a41873dd3b2a0b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":179,"size_decoded":1650,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text","md5":"424ecc5f56c732e7d4a70f6347b22b66","sha1":"d237bbc96e1195864ccb33d82d9105a26e4d5d27","sha256":"e5fe7eefd70de736455dfe99ef279f0e452d07a52d27fc2c41ef522e054872bb","sha512":"42427e14e5191e949a5a02b44e7a4e2c7b7dd4d146387a6262b48e7f980f5f37ae7280e483a99f87fe05085d111b87877aa6913f31b418ef2dbda7d8c6576ffa","ssdeep":"","tlshash":"34c022024aa844f2bc75004cad12e8c26ba6c4fa42a230c0304cd008620f1db41b2fa3","first_seen":"2026-09-27T06:27:52.427549Z","last_seen":"2026-09-27T06:30:56.9271Z","times_seen":4,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"afders.org/3/dd21c50fc592f139e5fae52397aac5e6?uidm=01a0e18d-aa54-75d6-8bfe-24d1a57a1305_1","fqdn":"afders.org","domain":"afders.org","tld":"org"},"ip":{"addr":"104.21.67.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ads.alterhub.site/promoframe#k=fdfdd92a59e588025342002253695a24\u0026w=468\u0026h=60\u0026i=u2_h3rpj0","date":"2026-09-27T06:29:12.956Z","timestamp":1790490552956,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afders.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Sep 2026 13:34:44 GMT","end":"Tue, 15 Dec 2026 14:34:40 GMT"},"fingerprint":{"sha1":"7A:92:9A:74:98:BB:CF:88:2A:BD:0B:26:71:9B:9A:F3:95:83:01:4C","sha256":"47:5D:69:65:F3:FE:34:4C:29:B8:D4:0E:EE:3F:82:6A:2D:80:CC:43:F1:EA:3B:18:98:DF:BA:E5:D7:79:87:38"}}},"request":{"raw":"GET /3/dd21c50fc592f139e5fae52397aac5e6?uidm=01a0e18d-aa54-75d6-8bfe-24d1a57a1305_1 HTTP/1.1\r\nHost: afders.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nOrigin: https://ads.alterhub.site\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uidm=01a0e18d-aa1e-7290-835a-05820375040e_1; __cf_bm=E.kpiN_tj8vCp_KnIHDU.orChpHJXA2krs.ZFBCUMdg-1790490552.8087704-1.0.1.1-dvJkw6z0LrAU8qRhbDPxTmy.g5FAGkt6BUndPfuLI0t03qnEghiew.ibnPQwnpjPeftp5uwteKXaQ1s6h84qCfDcnt9qM3qKuqpLdIGQy8cklBLncfcxTdq8JhH8Y5ld\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 27 Sep 2026 06:29:13 GMT\r\ncontent-type: text/plain\r\nserver: cloudflare\r\naccept-ch: Sec-Ch-Ua-Platform,Device-Stock-Ua,X-Device-User-Agent,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile,Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version\r\nset-cookie: uidm=01a0e18d-aa54-75d6-8bfe-24d1a57a1305_2; Path=/; Expires=Wed, 24 Sep 2036 06:29:13 GMT; Secure; SameSite=None\r\nvary: Accept-Encoding, Origin\r\nx-envoy-upstream-service-time: 7\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: no-cache, max-age=0, private, no-cache\r\nx-request-id: b73301ac423aeedc358e49236dd22449\r\npragma: no-cache\r\naccess-control-allow-origin: https://ads.alterhub.site\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,X-Forwarded-For,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1728000\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: gzip\r\ncf-ray: a41873e3ff9e56c3-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"uidm","value":"01a0e18d-aa54-75d6-8bfe-24d1a57a1305_2","quoted":false,"path":"/","expires":"2036-09-24T06:29:13Z","raw_expires":"Wed, 24 Sep 2036 06:29:13 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uidm=01a0e18d-aa54-75d6-8bfe-24d1a57a1305_2; Path=/; Expires=Wed, 24 Sep 2036 06:29:13 GMT; Secure; SameSite=None"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":76,"size_decoded":1336,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"12ae452e29fc8082058f980e43518697","sha1":"2c52fea3a0082e4bed0aa980d205b74dfa1c8269","sha256":"9bcc12959f161a3200b19839345defee12b8300dcaa61d9807bde4aa83ee0040","sha512":"13f7d731a1342865e9ade7c6b86ebc6ed808e751dae30e1d598cc866b9d5fd60b1fd04cc11bfaa77be5ea787fd1925e19287b5f1bfa79c95261e8c7699b09ebf","ssdeep":"","tlshash":"2ea02403d530d17c04cc0d5c1011c0d557cc1d43c00130cc41c534040d04c5c051f0c7","first_seen":"2026-09-27T06:30:15.151281Z","last_seen":"2026-09-27T06:30:15.151281Z","times_seen":1,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bicea.org/3/9934f3af5b5e41f86ecd27cc4a72d823?uidm=01a0e18d-aa54-75d6-8bfe-24d1a57a1305_1","fqdn":"bicea.org","domain":"bicea.org","tld":"org"},"ip":{"addr":"104.21.86.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ads.alterhub.site/promoframe#k=3ae6276d5f69eb697421a09960b7da53\u0026n=28128394\u0026i=n3_ke4tgo","date":"2026-09-27T06:29:12.981Z","timestamp":1790490552981,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bicea.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Sep 2026 14:22:10 GMT","end":"Tue, 15 Dec 2026 15:22:04 GMT"},"fingerprint":{"sha1":"B9:2F:CB:73:40:D7:7C:69:4A:C6:22:3F:45:F8:CA:8D:35:85:B1:C6","sha256":"1A:05:85:45:D6:5A:93:DC:D9:59:BF:16:3B:1F:F2:B3:07:D5:B3:3C:34:CF:6D:7D:8D:BC:6F:D5:88:E3:95:59"}}},"request":{"raw":"GET /3/9934f3af5b5e41f86ecd27cc4a72d823?uidm=01a0e18d-aa54-75d6-8bfe-24d1a57a1305_1 HTTP/1.1\r\nHost: bicea.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nOrigin: https://ads.alterhub.site\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uidm=01a0e18d-aa4a-7022-a786-b33078eaaa6b_1; __cf_bm=s97WfwL8KEDlwJ2cPRMHNEF9t5jPNhpTu1ntfKcpF6c-1790490552.8525264-1.0.1.1-x7_tfLhRY9ofMW4Gcd_xl..H59XSfMYUoI66PPL9LEHv_bWUGQvUPwgWhN0XjBjF9GOag6VdFdtjq1hbB0ZB3T8I1p6mJPUaW4smEEym4vZNDFmJE3JzjshCATN0yON1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 27 Sep 2026 06:29:13 GMT\r\ncontent-type: text/plain\r\nserver: cloudflare\r\naccept-ch: X-Device-User-Agent,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile,Device-Stock-Ua\r\nset-cookie: uidm=01a0e18d-aa54-75d6-8bfe-24d1a57a1305_2; Path=/; Expires=Wed, 24 Sep 2036 06:29:13 GMT; Secure; SameSite=None\r\nvary: Accept-Encoding, Origin\r\nx-envoy-upstream-service-time: 12\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: no-cache, max-age=0, private, no-cache\r\nx-request-id: 59d287026f558e188235a9c5f8201e57\r\npragma: no-cache\r\naccess-control-allow-origin: https://ads.alterhub.site\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,X-Forwarded-For,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1728000\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: gzip\r\ncf-ray: a41873e429b732fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"uidm","value":"01a0e18d-aa54-75d6-8bfe-24d1a57a1305_2","quoted":false,"path":"/","expires":"2036-09-24T06:29:13Z","raw_expires":"Wed, 24 Sep 2036 06:29:13 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uidm=01a0e18d-aa54-75d6-8bfe-24d1a57a1305_2; Path=/; Expires=Wed, 24 Sep 2036 06:29:13 GMT; Secure; SameSite=None"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":76,"size_decoded":1337,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"da361b8ff4ea837926a933cfbb90efeb","sha1":"1f18c7356fa0d53d00c4599644aff18cbd00d659","sha256":"bc8d5e1d0bf47fef9ca452b715d1eae2ece62c8bd5ba1568ada2bf4526d8f5d8","sha512":"a80981b3415bb1883eaa7f98c7eba58c30def0cff5e1a915dbea4e04f2cd0024aaf368723de9c1c16e691b9d85aab5f0c76134419e93f46a826e97ca38acb7cd","ssdeep":"","tlshash":"82a02280fc22328830800032cf02eb083282a3ec0f02330802b308ba82c88c32023bbc","first_seen":"2026-09-27T06:30:15.154383Z","last_seen":"2026-09-27T06:30:15.154383Z","times_seen":1,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sleepoverlimitprofound.com/impr.gif?sid=H4sIAAAAAAAC_1RSu28cRRifNQdNikgogoZiCwpA-DL7uMcSqoiXRLAhCYoE1bzWTG5vZ7Mze3e-BocgaF2ARIXWv7NjiSBEKqBDZzoeUrZBLmIK_gOQgIIC3eWEYaT5HvqNvvl93-_7YK86IW1U7Pj118xUZxk732lT_6lrOpdmbP2Nq35A2_SCf03n3fiCP1mYcvRcEMVt-rT_shIDcz6kAaUBDfyXdKlSMzm_RKGLz5OgndB2HLaDToxJ-f_cVh4s8yBHJ-RRaNmc_TV9G1rMkQ-_fEHZgTPFsy8Oq4w5U2IkD9_MB7kZ5xiehmnpIc0PV69hbEPIJ2sw-eGqA5jR_qIDcN2Qtcfug-eHK5rgo4MHTHkGlYPLMxiP5lDZHJrNIcwtaHmPAEJiYxP58PaGKcds-wHKFmhDWn_8Dj1uSOv-OeTDLy5meuJfMVnltMktJmkNPZlDb81RVEdw0zXo8RGEew9a_kTo42eQDz97xYz0wB-pcgAt6-UMdDoHsx6qxdUeqtRDVXgYymM_pv1YBCzqpokUPRqzOJaK06QfUsoS0UMlbkLLXYhyB0W5g4HehZUerGuI98YORrI-kJkNbX1bZrbiwcqHKx_VM-O29tiBcVsqJ2DlLkpZ7-vihr0F4R6aTVP76swsDOOunjEu65mWjqC8cfwkDRhVQV-uMx7S9V4njNdZwNV6EqQ86iVJ2O2l-6l1Vb1XrLT37tz5EwN17EdMdcNeV3bSbqJ4N-nFYcBoknQp70nWiWB1DW3XlsOZ6oZc_nmEQjdk_a1PwdkRbHYEoZ8AqwKwcQ32To1pflcYqdNtK0pdONuebE8hTY3CteC2PShH9rITcm52-erFb5e6Xur_BiW-J6sDUdYoyhrX9XcEW9nNu5uF00M9ZQuhrzjm1CNg-t7mXxC6IQ___fFy455590eIYge2-LfSLLNFQ9LyLKwh4MUaMk2QqdOvGK9h_5Pz03jPvo-tsgWetWY8K1v7PCuzj5bllpQb8vwvPzTkUv4hrD7200iFgtJ-rxtE_VQFUSxF2unHiewyGkUKzjbXv_7qm38GAIvjo8kHBAAA","fqdn":"sleepoverlimitprofound.com","domain":"sleepoverlimitprofound.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ads.alterhub.site/promoframe#k=3ae6276d5f69eb697421a09960b7da53\u0026n=28128394\u0026i=n3_ke4tgo","date":"2026-09-27T06:29:13.234Z","timestamp":1790490553234,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sleepoverlimitprofound.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 04:20:18 GMT","end":"Tue, 24 Nov 2026 04:20:17 GMT"},"fingerprint":{"sha1":"25:9A:58:CA:68:4D:EC:36:88:A4:BC:7F:2C:41:BE:B7:58:63:32:E3","sha256":"08:E4:A1:17:A8:1B:17:9D:84:10:F1:9B:37:A3:57:FE:8C:98:BA:9C:11:0D:A1:97:5C:AA:71:F0:6A:4A:28:5E"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1RSu28cRRifNQdNikgogoZiCwpA-DL7uMcSqoiXRLAhCYoE1bzWTG5vZ7Mze3e-BocgaF2ARIXWv7NjiSBEKqBDZzoeUrZBLmIK_gOQgIIC3eWEYaT5HvqNvvl93-_7YK86IW1U7Pj118xUZxk732lT_6lrOpdmbP2Nq35A2_SCf03n3fiCP1mYcvRcEMVt-rT_shIDcz6kAaUBDfyXdKlSMzm_RKGLz5OgndB2HLaDToxJ-f_cVh4s8yBHJ-RRaNmc_TV9G1rMkQ-_fEHZgTPFsy8Oq4w5U2IkD9_MB7kZ5xiehmnpIc0PV69hbEPIJ2sw-eGqA5jR_qIDcN2Qtcfug-eHK5rgo4MHTHkGlYPLMxiP5lDZHJrNIcwtaHmPAEJiYxP58PaGKcds-wHKFmhDWn_8Dj1uSOv-OeTDLy5meuJfMVnltMktJmkNPZlDb81RVEdw0zXo8RGEew9a_kTo42eQDz97xYz0wB-pcgAt6-UMdDoHsx6qxdUeqtRDVXgYymM_pv1YBCzqpokUPRqzOJaK06QfUsoS0UMlbkLLXYhyB0W5g4HehZUerGuI98YORrI-kJkNbX1bZrbiwcqHKx_VM-O29tiBcVsqJ2DlLkpZ7-vihr0F4R6aTVP76swsDOOunjEu65mWjqC8cfwkDRhVQV-uMx7S9V4njNdZwNV6EqQ86iVJ2O2l-6l1Vb1XrLT37tz5EwN17EdMdcNeV3bSbqJ4N-nFYcBoknQp70nWiWB1DW3XlsOZ6oZc_nmEQjdk_a1PwdkRbHYEoZ8AqwKwcQ32To1pflcYqdNtK0pdONuebE8hTY3CteC2PShH9rITcm52-erFb5e6Xur_BiW-J6sDUdYoyhrX9XcEW9nNu5uF00M9ZQuhrzjm1CNg-t7mXxC6IQ___fFy455590eIYge2-LfSLLNFQ9LyLKwh4MUaMk2QqdOvGK9h_5Pz03jPvo-tsgWetWY8K1v7PCuzj5bllpQb8vwvPzTkUv4hrD7200iFgtJ-rxtE_VQFUSxF2unHiewyGkUKzjbXv_7qm38GAIvjo8kHBAAA HTTP/1.1\r\nHost: sleepoverlimitprofound.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; u_pl28027895=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 27 Sep 2026 06:29:13 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccept-ch: User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Mobile,X-Device-User-Agent,Sec-Ch-Ua,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Model,Device-Stock-Ua,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nvary: Origin\r\nx-envoy-upstream-service-time: 3\r\nHost: sleepoverlimitprofound.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 2894ef8aaca3b26f996f3a6b2c9aeed1\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T20:43:33.933419Z","times_seen":19037193,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-26","alert":"Sinkholed","trigger":"sleepoverlimitprofound.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bicea.org/pixel/sbls?bv=\u0026tmpl=942\u0026u=https%3A%2F%2Fcdn.bakestubborn.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2Ffinanceskipper%2Fmessage_redcircle2%2F16%2Fjs%2Fscript.js\u0026l=386\u0026fd=462","fqdn":"bicea.org","domain":"bicea.org","tld":"org"},"ip":{"addr":"104.21.86.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ads.alterhub.site/promoframe#k=fdfdd92a59e588025342002253695a24\u0026w=468\u0026h=60\u0026i=u2_h3rpj0","date":"2026-09-27T06:29:14.865Z","timestamp":1790490554865,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bicea.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Sep 2026 14:22:10 GMT","end":"Tue, 15 Dec 2026 15:22:04 GMT"},"fingerprint":{"sha1":"B9:2F:CB:73:40:D7:7C:69:4A:C6:22:3F:45:F8:CA:8D:35:85:B1:C6","sha256":"1A:05:85:45:D6:5A:93:DC:D9:59:BF:16:3B:1F:F2:B3:07:D5:B3:3C:34:CF:6D:7D:8D:BC:6F:D5:88:E3:95:59"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=942\u0026u=https%3A%2F%2Fcdn.bakestubborn.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2Ffinanceskipper%2Fmessage_redcircle2%2F16%2Fjs%2Fscript.js\u0026l=386\u0026fd=462 HTTP/1.1\r\nHost: bicea.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uidm=01a0e18d-aa54-75d6-8bfe-24d1a57a1305_2; __cf_bm=s97WfwL8KEDlwJ2cPRMHNEF9t5jPNhpTu1ntfKcpF6c-1790490552.8525264-1.0.1.1-x7_tfLhRY9ofMW4Gcd_xl..H59XSfMYUoI66PPL9LEHv_bWUGQvUPwgWhN0XjBjF9GOag6VdFdtjq1hbB0ZB3T8I1p6mJPUaW4smEEym4vZNDFmJE3JzjshCATN0yON1; pdhtkv=true; uncs=2; pdhtkv29=true; uncs29=2; u_pl31286095=1; slec9934f3af5b5e41f86ecd27cc4a72d823=[6790254]; u_pl31156143=1; slec9ecf8e436a025f7fff03b61551d7e737=[6671912]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 27 Sep 2026 06:29:14 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\naccept-ch: Sec-Ch-Ua-Model, Sec-Ch-Ua-Mobile, Device-Stock-Ua, X-Operamini-Phone-Ua, User-Agent, Sec-Ch-Ua, Sec-Ch-Ua-Platformuser-Agent, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Ua-Platform, X-Device-User-Agent, X-Ucbrowser-Device-Ua, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\naccess-control-expose-headers: Content-Length,Content-Range\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a41873efeb7f32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":820,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T20:43:33.933419Z","times_seen":19037193,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bicea.org/pixel/ase","fqdn":"bicea.org","domain":"bicea.org","tld":"org"},"ip":{"addr":"104.21.86.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ads.alterhub.site/promoframe#k=3ae6276d5f69eb697421a09960b7da53\u0026n=28128394\u0026i=n3_ke4tgo","date":"2026-09-27T06:29:15.319Z","timestamp":1790490555319,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bicea.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Sep 2026 14:22:10 GMT","end":"Tue, 15 Dec 2026 15:22:04 GMT"},"fingerprint":{"sha1":"B9:2F:CB:73:40:D7:7C:69:4A:C6:22:3F:45:F8:CA:8D:35:85:B1:C6","sha256":"1A:05:85:45:D6:5A:93:DC:D9:59:BF:16:3B:1F:F2:B3:07:D5:B3:3C:34:CF:6D:7D:8D:BC:6F:D5:88:E3:95:59"}}},"request":{"raw":"POST /pixel/ase HTTP/1.1\r\nHost: bicea.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 223\r\nOrigin: https://ads.alterhub.site\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":223,"data":"[{\"placement_key\":\"9934f3af5b5e41f86ecd27cc4a72d823\",\"template_body\":\"body_social-bar_pl_general-maga\",\"event_name\":\"base.impression.success\",\"id_frontend_invoke\":\"01a0e18d-aa86-7905-8380-4e9bcd41fb0d\",\"script_version\":\"\"}]"}},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 27 Sep 2026 06:29:15 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\naccept-ch: Sec-Ch-Ua-Platform, Sec-Ch-Ua-Model, Sec-Ch-Ua-Mobile, X-Device-User-Agent, X-Operamini-Phone-Ua, X-Ucbrowser-Device-Ua, Sec-Ch-Ua-Full-Version-List, Device-Stock-Ua, User-Agent, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua, Sec-Ch-Ua-Platformuser-Agent, Sec-Ch-Ua-Full-Version\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\naccess-control-expose-headers: Content-Length,Content-Range\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=xGOWqvPYtUBrdnMcrPcnfNw14lfghN0HtW9rKG3wPGc-1790490555.320479-1.0.1.1-Fw1H_mlbdx9BgavuSuKVdPx3p_P7C9mzucfFsU73cfLAPwK2dPLIcbLEpk6jekYBBsYAylmFcZJ1XppO1oELGyCMO1diyUf_UiOCr4x3.6qAEpoNHmNhHJLUaoneFLo9; HttpOnly; SameSite=None; Secure; Path=/; Domain=bicea.org; Expires=Sun, 27 Sep 2026 06:59:15 GMT\r\ncf-ray: a41873f2b8d232fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"xGOWqvPYtUBrdnMcrPcnfNw14lfghN0HtW9rKG3wPGc-1790490555.320479-1.0.1.1-Fw1H_mlbdx9BgavuSuKVdPx3p_P7C9mzucfFsU73cfLAPwK2dPLIcbLEpk6jekYBBsYAylmFcZJ1XppO1oELGyCMO1diyUf_UiOCr4x3.6qAEpoNHmNhHJLUaoneFLo9","quoted":false,"path":"/","domain":"bicea.org","expires":"2026-09-27T06:59:15Z","raw_expires":"Sun, 27 Sep 2026 06:59:15 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=xGOWqvPYtUBrdnMcrPcnfNw14lfghN0HtW9rKG3wPGc-1790490555.320479-1.0.1.1-Fw1H_mlbdx9BgavuSuKVdPx3p_P7C9mzucfFsU73cfLAPwK2dPLIcbLEpk6jekYBBsYAylmFcZJ1XppO1oELGyCMO1diyUf_UiOCr4x3.6qAEpoNHmNhHJLUaoneFLo9; HttpOnly; SameSite=None; Secure; Path=/; Domain=bicea.org; Expires=Sun, 27 Sep 2026 06:59:15 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":1888,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T20:43:33.933419Z","times_seen":19037193,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alterhub.site/games.js?v=932f0e44","fqdn":"alterhub.site","domain":"alterhub.site","tld":"site"},"ip":{"addr":"104.21.42.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://alterhub.site/","date":"2026-09-27T06:29:11.627Z","timestamp":1790490551627,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alterhub.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 00:28:34 GMT","end":"Sat, 07 Nov 2026 01:28:30 GMT"},"fingerprint":{"sha1":"CC:30:2C:31:6D:59:8D:61:CD:11:F9:93:CE:16:C0:86:EE:F5:4A:5A","sha256":"FD:96:F8:0E:8C:08:48:55:A0:F2:69:BB:EA:8B:3A:98:9A:71:49:5F:30:C6:90:E1:9F:D3:7F:54:A3:38:1A:B6"}}},"request":{"raw":"GET /games.js?v=932f0e44 HTTP/1.1\r\nHost: alterhub.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://alterhub.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\nage: 681477\r\ncache-control: public, max-age=14400, stale-while-revalidate=604800\r\ncontent-disposition: inline; filename=\"games.js\"\r\ncontent-encoding: br\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; frame-src 'self' https: data: blob:; media-src 'self' https: data: blob:; connect-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self' https:;\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sun, 27 Sep 2026 06:29:11 GMT\r\netag: W/\"cf2241c109c5d7991ead1d98db007d3f\"\r\nlast-modified: Sat, 19 Sep 2026 09:11:14 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::m2xcl-1790490551676-5122c1513b57\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mve6HcOmDtZ%2BhjMmsnx7i7plgULuv0P1cbyo4g9ZHTFK6p6kivhczLK%2BLHKASTINPnKnpxgxXbdNFNu8RF0n51D%2BgAaZOdXDLlNof7VKPeWWPAxg1UdmACwCgiRXV5As\"}]}\r\ncf-cache-status: MISS\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncf-ray: a41873dbaad40b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":2165,"size_decoded":2508,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"cf2241c109c5d7991ead1d98db007d3f","sha1":"932f0e440418088411a23244cedfd6dce0cb129c","sha256":"9b7c9091c2a71fac6392b5f0261f10641e4f70abd332f89a0168a71abd815603","sha512":"554141208b3e8634a750a7d468773e331a2096340111d92a846d6e4a17f3973bb0c95a4221bdefb5f750cb1449d87d6eb9546272e77bcfb1847ad76f5d271e3a","ssdeep":"","tlshash":"7c41aeab71330de40ca0933d5892bf750eb447f4935b29a435cfd468234d896913af7a","first_seen":"2026-09-27T06:27:52.382228Z","last_seen":"2026-09-27T06:30:57.008233Z","times_seen":4,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ads.alterhub.site/promoframe.html#k=fdfdd92a59e588025342002253695a24\u0026w=468\u0026h=60\u0026i=u2_h3rpj0","fqdn":"ads.alterhub.site","domain":"alterhub.site","tld":"site"},"ip":{"addr":"104.21.42.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://alterhub.site/","date":"2026-09-27T06:29:12.124Z","timestamp":1790490552124,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alterhub.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 00:28:34 GMT","end":"Sat, 07 Nov 2026 01:28:30 GMT"},"fingerprint":{"sha1":"CC:30:2C:31:6D:59:8D:61:CD:11:F9:93:CE:16:C0:86:EE:F5:4A:5A","sha256":"FD:96:F8:0E:8C:08:48:55:A0:F2:69:BB:EA:8B:3A:98:9A:71:49:5F:30:C6:90:E1:9F:D3:7F:54:A3:38:1A:B6"}}},"request":{"raw":"GET /promoframe.html HTTP/1.1\r\nHost: ads.alterhub.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://alterhub.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=Y3_9Q5s.VO85OlRAqFfB2dTrk0CywSN3jGmQQoIUouE-1790490552-1.2.1.1-0xos2XuR8es9GyM5OWDs6icaJ8unVLMx3YGIrYMXJ7uZmKFCwKUPA2X_EE69pPWzGsd9UQZAum76gnam6AJqqAvKuHLcsw3LcAWcoHJSPilD3DSkTdLv3V3fDXGE1uymM2V31WOv1fiq222__oCOoNBxG0cdwugzeh2bVOHGhsxmITdW_ANygmKCmd077CP_O3YgqnZRe7rswHmUuGXQAkwCPPRg6Pr_2se0001xmCfEPY8VmAYo5meDAQ.M4LZ.rQoq1iZpf_Yk37IueLxOcWhGo_mtxQVhO4wjcUuvmESJty_3CEpNe5uFUo9bwFJsjx6yT.nP2V5GYTwALmA3MWiwpXPHQ.Gelpx8LkCsF0h3dkTPpGy7hlxutFfo2MmkPEH5kl1q_2ojVOMlr3vZ8AUBtJ7eEeqYUIQWqo2d2hI\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 308 \r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/html\r\ndate: Sun, 27 Sep 2026 06:29:12 GMT\r\nlocation: /promoframe\r\nrefresh: 0;url=/promoframe\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-id: arn1::4jlv2-1790490552141-f49be0f946cd\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=upCC3yg1PQcyn5xNSpxknikxtrc3RSrWilFL8qJQRxQCXKdBCS7YwKeDN3b7hkatQtEueNO3XBZnG9aXQij2qg3HKKvEEhsdVOeJEd399LxAZUesij5KtlTYft%2FDUD5FeYRJ3A%3D%3D\"}]}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a41873decb5a0b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"308","status_text":"Permanent Redirect","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T20:43:33.933419Z","times_seen":19037193,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tr.rbxcdn.com/180DAY-cb38b3527d1aac1088342cb5c901828a/256/256/Image/Png/noFilter","fqdn":"tr.rbxcdn.com","domain":"rbxcdn.com","tld":"com"},"ip":{"addr":"143.204.238.74","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://alterhub.site/","date":"2026-09-27T06:29:12.531Z","timestamp":1790490552531,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rbxcdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 09 Sep 2026 00:00:00 GMT","end":"Thu, 25 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"75:D8:06:E9:90:C5:4F:78:20:E1:DC:B0:2D:7F:04:D1:43:36:17:D5","sha256":"3B:CA:A7:4C:D5:BA:BE:D5:47:44:99:0D:4A:D5:DF:17:82:35:B8:6B:67:AF:9F:D7:A1:77:B6:43:87:6A:83:9B"}}},"request":{"raw":"GET /180DAY-cb38b3527d1aac1088342cb5c901828a/256/256/Image/Png/noFilter HTTP/1.1\r\nHost: tr.rbxcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://alterhub.site/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/Png\r\ncontent-length: 131879\r\ndate: Sat, 08 Aug 2026 18:32:01 GMT\r\nserver: public-gateway\r\ncache-control: no-cache\r\nedge-cache-tag: 180DAY-cb38b3527d1aac1088342cb5c901828a\r\nstrict-transport-security: max-age=31536000\r\nx-frame-options: SAMEORIGIN\r\nroblox-machine-id: 19cd7d84-3471-33f8-70ce-7271a4315328\r\nx-envoy-upstream-service-time: 245\r\nx-terms-message: Terms apply https://rblx.co/TOU.\r\nx-ratelimit-limit: 300000, 300000;w=60, 70000\r\nx-ratelimit-remaining: 299476, 70000\r\nx-ratelimit-reset: 59, 0\r\nx-ingress-proxy: true\r\nx-roblox-edge: c088\r\nreport-to: {\"group\":\"network-errors\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://ncs.roblox.com/upload\"}]}\r\nnel: {\"report_to\":\"network-errors\",\"max_age\":604800,\"success_fraction\":0,\"failure_fraction\":0.05,\"response_headers\":[\"Rbx-Cdn-Provider\",\"vary\"]}\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 4888a1b692b693505c9036bc998623cc.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: HrbITkopGUuGgw00wx4_bQ7kChds2I7Dk-wx6ZTOdzZ6TW41uLGwIQ==\r\nage: 4276630\r\nrbx-cdn-provider: aws\r\ntiming-allow-origin: *\r\nvary: Origin\r\nserver-timing: cdn-cache-hit,cdn-pop;desc=\"ARN53-P4\",cdn-rid;desc=\"HrbITkopGUuGgw00wx4_bQ7kChds2I7Dk-wx6ZTOdzZ6TW41uLGwIQ==\",cdn-hit-layer;desc=\"EDGE\",cdn-downstream-fbl;dur=3\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":131879,"size_decoded":133183,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGB, non-interlaced","md5":"be5295b53208d14ef8e155ad01487e91","sha1":"f6d506ddfae9c4ac992929c376ab8d4fc2c891cb","sha256":"d35f2e8eb22f7aabc3e2add467dc26b532a0620eafa6f32873f78336c6fb06f2","sha512":"9a5d4584be6310ea251c1cf636921c8e282a931ffd5feb04e44ae62bb685b2c190ea5ea70436b3288584205e004d67d77414051e57fd7c44c5c058f998357ea9","ssdeep":"3072:BpDmxAzw/ALLyTcxjKKNWosYajHDmZfv6:B1mxAhLLyQoKNhWHK1C","tlshash":"86d3121f9ec575cbb6195d255c22bb316cf6f482d1288f65974abf4af62cca43c0082b","first_seen":"2026-09-27T06:30:15.157337Z","last_seen":"2026-09-27T06:30:57.003586Z","times_seen":2,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":22,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sleepoverlimitprofound.com/ren.gif?sid=H4sIAAAAAAAC_1RSvY8bRRSfPQxNikgogoZiCwpA2Jn98NpLqCK-JMIdJEGRoJrZ2TUTr3c2O7NrnxsuBEF7BUhUaP3zXU4iCJEK6JCPjg8p2yAXOQr-A5CAggLZsTgYad6HfqM3v_d-74NZeUI6KNny9dfUVKYpO9_tUPupazITaqzt7au2Qzv0gn1NZoF_wZ6sTFE953h-hz5tvxxHQ3XepQ6lDnXsl2QRJ2pyfo1C5p-HTiekHd_tOF0fk-L_uS4taGZBVCfkUUjRnP01eRsyWiAbfflCrIdG5c--OCpTZlSBShy9mQ0zNc4wOg2TwkKSHW1eQ-mGkE-2oLKjTQdQ1cGqA3DZkK3H7oNnRxua4NXhA6Y8RZyBizMYVwvE6QKSLRCpW5DiHgEige0dZKPb26oYs90HKFuhDWn98TvkuCGt--eQjb64mMqJfUWlpZEq05gkNeRkATlYIC-PYaZbkONjROY9SPEToY-fQTb67BVVyaFdxcUQUtTrGchkAaYtlKsrLZSJhTK3MBJL26d9P3KYFyShiHrUZ74vYk7DvkspC6MeyugmpNhHVOwhL_YwlPvQwoI2DbHe2EMl6kORalfXt0WqS-5svLvxXj1XZjBjh8oM4oyAFfsoRH0g8xv6FiLz0Hya6FfnamUYN_WccVHPpTAExY3lk9RhNHb6os24S9u9ruu3mcPjdugk3OuFoRv0koNEm7Ke5RvtrTt3_sQwXtoeiwO3F4huEoQxD8Ke7zqMhmFAeU-wrgcta0i9tR7OVDbk8s8VctmQ9lufgrNj6PQYkXwCrHTAxjXYOzWm2d1ICZns6qiQudGdye4UQtXITQtm10JsyCw9Iefml69e_Hat66X-b4ij78nmICpq5EWN6_I7gkF68-5ObuRITtlK6CuGmfgRMHlv5y9EsiEP__3xeuOeefdHRPkedP5vpXmq84YkxVloRcDzLaSSII1Pv2K8hv5Pzk_jmX4fg6IFnrbmPC1aBzwt0o_W5daUG_L8Lz805FL2IbRc2l2Xe0G_H8RJIBJPeK4nwi6NQ5-FgR_6XRjdXP_6q2_-GQB3izMXBwQAAA==","fqdn":"sleepoverlimitprofound.com","domain":"sleepoverlimitprofound.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ads.alterhub.site/promoframe#k=3ae6276d5f69eb697421a09960b7da53\u0026n=28128394\u0026i=n3_ke4tgo","date":"2026-09-27T06:29:13.230Z","timestamp":1790490553230,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sleepoverlimitprofound.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 04:20:18 GMT","end":"Tue, 24 Nov 2026 04:20:17 GMT"},"fingerprint":{"sha1":"25:9A:58:CA:68:4D:EC:36:88:A4:BC:7F:2C:41:BE:B7:58:63:32:E3","sha256":"08:E4:A1:17:A8:1B:17:9D:84:10:F1:9B:37:A3:57:FE:8C:98:BA:9C:11:0D:A1:97:5C:AA:71:F0:6A:4A:28:5E"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_1RSvY8bRRSfPQxNikgogoZiCwpA2Jn98NpLqCK-JMIdJEGRoJrZ2TUTr3c2O7NrnxsuBEF7BUhUaP3zXU4iCJEK6JCPjg8p2yAXOQr-A5CAggLZsTgYad6HfqM3v_d-74NZeUI6KNny9dfUVKYpO9_tUPupazITaqzt7au2Qzv0gn1NZoF_wZ6sTFE953h-hz5tvxxHQ3XepQ6lDnXsl2QRJ2pyfo1C5p-HTiekHd_tOF0fk-L_uS4taGZBVCfkUUjRnP01eRsyWiAbfflCrIdG5c--OCpTZlSBShy9mQ0zNc4wOg2TwkKSHW1eQ-mGkE-2oLKjTQdQ1cGqA3DZkK3H7oNnRxua4NXhA6Y8RZyBizMYVwvE6QKSLRCpW5DiHgEige0dZKPb26oYs90HKFuhDWn98TvkuCGt--eQjb64mMqJfUWlpZEq05gkNeRkATlYIC-PYaZbkONjROY9SPEToY-fQTb67BVVyaFdxcUQUtTrGchkAaYtlKsrLZSJhTK3MBJL26d9P3KYFyShiHrUZ74vYk7DvkspC6MeyugmpNhHVOwhL_YwlPvQwoI2DbHe2EMl6kORalfXt0WqS-5svLvxXj1XZjBjh8oM4oyAFfsoRH0g8xv6FiLz0Hya6FfnamUYN_WccVHPpTAExY3lk9RhNHb6os24S9u9ruu3mcPjdugk3OuFoRv0koNEm7Ke5RvtrTt3_sQwXtoeiwO3F4huEoQxD8Ke7zqMhmFAeU-wrgcta0i9tR7OVDbk8s8VctmQ9lufgrNj6PQYkXwCrHTAxjXYOzWm2d1ICZns6qiQudGdye4UQtXITQtm10JsyCw9Iefml69e_Hat66X-b4ij78nmICpq5EWN6_I7gkF68-5ObuRITtlK6CuGmfgRMHlv5y9EsiEP__3xeuOeefdHRPkedP5vpXmq84YkxVloRcDzLaSSII1Pv2K8hv5Pzk_jmX4fg6IFnrbmPC1aBzwt0o_W5daUG_L8Lz805FL2IbRc2l2Xe0G_H8RJIBJPeK4nwi6NQ5-FgR_6XRjdXP_6q2_-GQB3izMXBwQAAA== HTTP/1.1\r\nHost: sleepoverlimitprofound.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; u_pl28027895=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 27 Sep 2026 06:29:13 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccept-ch: Sec-Ch-Ua-Mobile,Device-Stock-Ua,X-Device-User-Agent,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Platform,X-Operamini-Phone-Ua,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Model\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nvary: Origin\r\nx-envoy-upstream-service-time: 1\r\nHost: sleepoverlimitprofound.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 43b48e17ceda8e66d2238637343e371a\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T20:43:33.933419Z","times_seen":19037193,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-26","alert":"Sinkholed","trigger":"sleepoverlimitprofound.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bicea.org/15/9ecf8e436a025f7fff03b61551d7e737","fqdn":"bicea.org","domain":"bicea.org","tld":"org"},"ip":{"addr":"104.21.86.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ads.alterhub.site/promoframe#k=fdfdd92a59e588025342002253695a24\u0026w=468\u0026h=60\u0026i=u2_h3rpj0","date":"2026-09-27T06:29:12.809Z","timestamp":1790490552809,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bicea.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Sep 2026 14:22:10 GMT","end":"Tue, 15 Dec 2026 15:22:04 GMT"},"fingerprint":{"sha1":"B9:2F:CB:73:40:D7:7C:69:4A:C6:22:3F:45:F8:CA:8D:35:85:B1:C6","sha256":"1A:05:85:45:D6:5A:93:DC:D9:59:BF:16:3B:1F:F2:B3:07:D5:B3:3C:34:CF:6D:7D:8D:BC:6F:D5:88:E3:95:59"}}},"request":{"raw":"GET /15/9ecf8e436a025f7fff03b61551d7e737 HTTP/1.1\r\nHost: bicea.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 27 Sep 2026 06:29:12 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nset-cookie: uidm=01a0e18d-aa4a-7022-a786-b33078eaaa6b_1; Path=/; Expires=Wed, 24 Sep 2036 06:29:12 GMT; Secure; SameSite=None\n__cf_bm=s97WfwL8KEDlwJ2cPRMHNEF9t5jPNhpTu1ntfKcpF6c-1790490552.8525264-1.0.1.1-x7_tfLhRY9ofMW4Gcd_xl..H59XSfMYUoI66PPL9LEHv_bWUGQvUPwgWhN0XjBjF9GOag6VdFdtjq1hbB0ZB3T8I1p6mJPUaW4smEEym4vZNDFmJE3JzjshCATN0yON1; HttpOnly; SameSite=None; Secure; Path=/; Domain=bicea.org; Expires=Sun, 27 Sep 2026 06:59:12 GMT\r\naccept-ch: X-Operamini-Phone-Ua,User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Model,X-Ucbrowser-Device-Ua,Sec-Ch-Ua,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Mobile,Device-Stock-Ua,X-Device-User-Agent\r\ncontent-encoding: gzip\r\nlink: \u003chttps://bicea.org\u003e; rel=preconnect; crossorigin, \u003chttps://bicea.org\u003e; rel=dns-prefetch, \u003chttps://static.nresystems.com\u003e; rel=preconnect; crossorigin, \u003chttps://static.nresystems.com\u003e; rel=dns-prefetch\r\nvary: Accept-Encoding, Origin\r\nx-envoy-upstream-service-time: 6\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: no-cache, max-age=0, private, no-cache\r\nx-request-id: e80de9c0a1b48fe64277c3ae8d5ae9b7\r\npragma: no-cache\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,X-Forwarded-For,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1728000\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a41873e35fe132fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"uidm","value":"01a0e18d-aa4a-7022-a786-b33078eaaa6b_1","quoted":false,"path":"/","expires":"2036-09-24T06:29:12Z","raw_expires":"Wed, 24 Sep 2036 06:29:12 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uidm=01a0e18d-aa4a-7022-a786-b33078eaaa6b_1; Path=/; Expires=Wed, 24 Sep 2036 06:29:12 GMT; Secure; SameSite=None"},{"name":"__cf_bm","value":"s97WfwL8KEDlwJ2cPRMHNEF9t5jPNhpTu1ntfKcpF6c-1790490552.8525264-1.0.1.1-x7_tfLhRY9ofMW4Gcd_xl..H59XSfMYUoI66PPL9LEHv_bWUGQvUPwgWhN0XjBjF9GOag6VdFdtjq1hbB0ZB3T8I1p6mJPUaW4smEEym4vZNDFmJE3JzjshCATN0yON1","quoted":false,"path":"/","domain":"bicea.org","expires":"2026-09-27T06:59:12Z","raw_expires":"Sun, 27 Sep 2026 06:59:12 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=s97WfwL8KEDlwJ2cPRMHNEF9t5jPNhpTu1ntfKcpF6c-1790490552.8525264-1.0.1.1-x7_tfLhRY9ofMW4Gcd_xl..H59XSfMYUoI66PPL9LEHv_bWUGQvUPwgWhN0XjBjF9GOag6VdFdtjq1hbB0ZB3T8I1p6mJPUaW4smEEym4vZNDFmJE3JzjshCATN0yON1; HttpOnly; SameSite=None; Secure; Path=/; Domain=bicea.org; Expires=Sun, 27 Sep 2026 06:59:12 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":76965,"size_decoded":33203,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"fb6d6eecd8244ea6508a744a540a4569","sha1":"ea502039b6ce9bbcaa297e9e47d03364cb7e379b","sha256":"8eb5d0a0566bc3db995e8a5665b64687fee369e0f7db2e53aa55c5380f6e065c","sha512":"15acac02b4ec47b269a0a888a8c4ba7d1332b8159547b3713f9c88fbf56be3eb9b67da28addaf07fd1c19feca10af09677210a556fd5413e62700eed5d386a39","ssdeep":"1536:d5IbWg2WXLqNV2pEsTcMnUr0uDy7wgZxmbM5Pr6jZlrC6wTkGdRdpmtIqYOt0I8x:d5Bg2WXLWEpEYcMnUr0uDSNZxmbM5KDo","tlshash":"de73d7846f10b23e12b0fcff7712e452e0191e86338ce4ede96d2c0a595e366b63566c","first_seen":"2026-09-27T06:30:15.15882Z","last_seen":"2026-09-27T06:30:15.15882Z","times_seen":1,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":29,"connect":1,"send":0,"wait":79,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fizzyacerbitymellow.com/ren.gif?sid=H4sIAAAAAAAC_1RSz4sjRRSuHoOXBQVZ9OKhDwqumEx10km63dviL3Cdcd2VBT1Vd1Vna1Pp6u2qTrI5zbri1Tl40It0vsxsQFQUwdGbJF5EELYvksPOxT9BEI-STHC0od_7Hl_x6nvvq4-mxSlpoGCrt9_SE6kU2203qPvCTZlyPTLu3g3Xow162b0p045_2R2vQz582Wv5DXrJfV3Efb3bpB6lHvXc12QuEj3e3bCQ2Zeh1whpw282vLaPcf7_2hQODHPAh6fkKUhePflH8j5kvEA6-OYVYfpWZy-9OigUszrHkM_fTfupHqUYnMMkd5Ck8-1paFMR8ukOdDrfTgA9PFpPgEhWZOfpR4jS-VYmouHxmdJIQaSI-AWMhgsItYBkC8T6PiR_SICYY28f6eDBns5H7O4Zy9ZsRWp__Qk5qkjt0UWkg6-vKDl2r2tVWKlTg3FSQo4XkL0FsmIJO9mBHC0R2w8g-W-EPnMB6eCLN_RQ9t2hyPuQvNzsQCYLMOOgWP_SQZE4KDIHA75yfRr4scdanSTkcZf6zPe5iGgYNCllYdxFEd-D5IeI8wNk-QH68hCGOzC2Is61Awx5ecyVaZryAVemiLxtbm5zq5xp25uyY217IiVg-SFyXh7J7I65j9g-Npsk5s2ZXgcW2XLGIl7OJLcE-Z3Vc9RjVHgBr7Oo49W7jHr1MGh360EchLQddluxnxwlxhblNNt678x_-Q59sXKZEEHXF81Ol7Ok6TEe-mEriNthh4qkyzwYWUKanc1yJrIi104uIZMVqb_3OSK2hFFLxPJZsMIDG5Vgt0pM0q-YsiK_VUQNI60A1yUyW4O960BYMlWn5OLsnRtXftp4ejX9GCL-lWw_xHmJLC9xW_5M0FP3vt3PrBzICVubfN0yKx4Hkw_3_0YsK_LE799vXtuLny0RZwcw2b-dZspkFbnam8NogihzoCSBEudXsaiE-U8dneOp-RC9vIZI1WaRymtHkcrVJxu1FREn7qbxGj0PI1duuxm1OkHQEUmHJy3earZ42KYi9FnY8UO_DWuq2z-c_PjPAKd-o10DBAAA","fqdn":"fizzyacerbitymellow.com","domain":"fizzyacerbitymellow.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ads.alterhub.site/promoframe#k=aee874e267daf21ad94938c5960ef7a1\u0026n=27873862\u0026i=n4_0eh5yg","date":"2026-09-27T06:29:13.522Z","timestamp":1790490553522,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"fizzyacerbitymellow.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 22:02:47 GMT","end":"Fri, 30 Oct 2026 22:02:46 GMT"},"fingerprint":{"sha1":"85:2D:D6:49:43:AB:3A:C0:5E:0D:58:0E:0B:D7:D6:2A:82:8B:E0:41","sha256":"FF:C6:2E:36:C1:47:5E:79:06:79:62:3E:93:9A:4C:D1:A2:35:A6:48:A3:E5:43:F4:74:4F:64:C9:9E:32:17:24"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_1RSz4sjRRSuHoOXBQVZ9OKhDwqumEx10km63dviL3Cdcd2VBT1Vd1Vna1Pp6u2qTrI5zbri1Tl40It0vsxsQFQUwdGbJF5EELYvksPOxT9BEI-STHC0od_7Hl_x6nvvq4-mxSlpoGCrt9_SE6kU2203qPvCTZlyPTLu3g3Xow162b0p045_2R2vQz582Wv5DXrJfV3Efb3bpB6lHvXc12QuEj3e3bCQ2Zeh1whpw282vLaPcf7_2hQODHPAh6fkKUhePflH8j5kvEA6-OYVYfpWZy-9OigUszrHkM_fTfupHqUYnMMkd5Ck8-1paFMR8ukOdDrfTgA9PFpPgEhWZOfpR4jS-VYmouHxmdJIQaSI-AWMhgsItYBkC8T6PiR_SICYY28f6eDBns5H7O4Zy9ZsRWp__Qk5qkjt0UWkg6-vKDl2r2tVWKlTg3FSQo4XkL0FsmIJO9mBHC0R2w8g-W-EPnMB6eCLN_RQ9t2hyPuQvNzsQCYLMOOgWP_SQZE4KDIHA75yfRr4scdanSTkcZf6zPe5iGgYNCllYdxFEd-D5IeI8wNk-QH68hCGOzC2Is61Awx5ecyVaZryAVemiLxtbm5zq5xp25uyY217IiVg-SFyXh7J7I65j9g-Npsk5s2ZXgcW2XLGIl7OJLcE-Z3Vc9RjVHgBr7Oo49W7jHr1MGh360EchLQddluxnxwlxhblNNt678x_-Q59sXKZEEHXF81Ol7Ok6TEe-mEriNthh4qkyzwYWUKanc1yJrIi104uIZMVqb_3OSK2hFFLxPJZsMIDG5Vgt0pM0q-YsiK_VUQNI60A1yUyW4O960BYMlWn5OLsnRtXftp4ejX9GCL-lWw_xHmJLC9xW_5M0FP3vt3PrBzICVubfN0yKx4Hkw_3_0YsK_LE799vXtuLny0RZwcw2b-dZspkFbnam8NogihzoCSBEudXsaiE-U8dneOp-RC9vIZI1WaRymtHkcrVJxu1FREn7qbxGj0PI1duuxm1OkHQEUmHJy3earZ42KYi9FnY8UO_DWuq2z-c_PjPAKd-o10DBAAA HTTP/1.1\r\nHost: fizzyacerbitymellow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; u_pl27773363=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 27 Sep 2026 06:29:13 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccept-ch: Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Model,X-Device-User-Agent,X-Ucbrowser-Device-Ua,Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Mobile,Device-Stock-Ua,X-Operamini-Phone-Ua,User-Agent\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nvary: Origin\r\nx-envoy-upstream-service-time: 1\r\nHost: fizzyacerbitymellow.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 146bc89d4cb8d11ac06b809a1917e923\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T20:43:33.933419Z","times_seen":19037193,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alterhub.site/api/games?ids=84575720768520%2C128736949265057%2C112233638491976%2C119031147890918%2C120700541929930%2C83038462357724%2C130960835358983%2C100293509865504%2C73613510857111%2C105767799784652%2C119427438574114%2C110668201954727%2C103883942725157%2C94640181989498%2C96425088123775%2C126870639873289%2C78724109436030%2C124293095895786","fqdn":"alterhub.site","domain":"alterhub.site","tld":"site"},"ip":{"addr":"104.21.42.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://alterhub.site/","date":"2026-09-27T06:29:11.874Z","timestamp":1790490551874,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alterhub.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 00:28:34 GMT","end":"Sat, 07 Nov 2026 01:28:30 GMT"},"fingerprint":{"sha1":"CC:30:2C:31:6D:59:8D:61:CD:11:F9:93:CE:16:C0:86:EE:F5:4A:5A","sha256":"FD:96:F8:0E:8C:08:48:55:A0:F2:69:BB:EA:8B:3A:98:9A:71:49:5F:30:C6:90:E1:9F:D3:7F:54:A3:38:1A:B6"}}},"request":{"raw":"GET /api/games?ids=84575720768520%2C128736949265057%2C112233638491976%2C119031147890918%2C120700541929930%2C83038462357724%2C130960835358983%2C100293509865504%2C73613510857111%2C105767799784652%2C119427438574114%2C110668201954727%2C103883942725157%2C94640181989498%2C96425088123775%2C126870639873289%2C78724109436030%2C124293095895786 HTTP/1.1\r\nHost: alterhub.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://alterhub.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-encoding: br\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; frame-src 'self' https: data: blob:; media-src 'self' https: data: blob:; connect-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self' https:;\r\ncontent-type: application/json; charset=utf-8\r\ndate: Sun, 27 Sep 2026 06:29:12 GMT\r\netag: W/\"c38-6lGb3EVfX+Q/291yt7qAMyxfQ14\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::sgm7w-1790490551886-f86b5935c862\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hM0D5mtHDQi1pyqtvnpYsEyWjYW8FDLfVA7DsVh7oQbZSsPrKMROvVvGwzeaHAXwqfXZjILRvUZzR6s1srnm%2FsyiOIUeNeotn%2BBjGhSNxOz5WKiHnWUaqI8IDnDd9oVR\"}]}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncf-ray: a41873dd3b280b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3128,"size_decoded":2481,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b324e30f2fa09aa8c012e04ba302fed0","sha1":"ea519bdc455f5fe43fdbdd72b7ba80332c5f435e","sha256":"50504a8eacb54fb70bd329ed3ea5c91d624cc9fd15cf303d2de8baac3218746f","sha512":"e959c43908a80ffd99dc219c6ffb53eb1eeea55bb16fd33c000c05e164566bddaf8bca6397ab64eed969711e3532c78c600b9a23e70fd60ec378dd43050d8430","ssdeep":"","tlshash":"dd51f097236319dd8b64273cf1cda48e057261dbca80aba3445ed99004e2a9b7d3f273","first_seen":"2026-09-27T06:30:15.160164Z","last_seen":"2026-09-27T06:30:56.966206Z","times_seen":2,"resource_available":true,"data":null}},"time_used":484,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":484,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.highperformanceformat.com/fdfdd92a59e588025342002253695a24/invoke.js","fqdn":"www.highperformanceformat.com","domain":"highperformanceformat.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ads.alterhub.site/promoframe#k=fdfdd92a59e588025342002253695a24\u0026w=468\u0026h=60\u0026i=u2_h3rpj0","date":"2026-09-27T06:29:12.263Z","timestamp":1790490552263,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"highperformanceformat.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 23:52:39 GMT","end":"Wed, 04 Nov 2026 23:52:38 GMT"},"fingerprint":{"sha1":"B8:83:42:30:01:F1:50:DF:BA:43:AD:F5:FF:7C:75:43:E4:F3:14:B8","sha256":"06:90:24:D1:9F:9A:3E:F1:28:CC:2D:B9:77:E8:06:2F:0D:9E:37:96:BE:CB:04:A2:6B:68:B2:4A:66:04:FE:87"}}},"request":{"raw":"GET /fdfdd92a59e588025342002253695a24/invoke.js HTTP/1.1\r\nHost: www.highperformanceformat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 27 Sep 2026 06:29:12 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\naccept-ch: Sec-Ch-Ua-Platform,Device-Stock-Ua,X-Device-User-Agent,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua,Sec-Ch-Ua-Full-Version-List\r\naccess-control-allow-origin: *\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\nx-envoy-upstream-service-time: 6\r\nHost: www.highperformanceformat.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 72698fb25981054a9db8ccca1a4c347f\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":49227,"size_decoded":21404,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (49227), with no line terminators","md5":"c14a86a58d2a24cdaa69982e73cf6587","sha1":"a248ef6e9a680d8c2911e39af3d3f08ad3ea1311","sha256":"fc96144c61b5bf93839a2b9b5e5abc3db0c5fb66cb8dbf95ad62c8ddd1eed608","sha512":"35ad8f3a98eadf1ccc6601eeba8403a4c1251cb9cc0e01e89571dd7b3097ac9174a28ecd887539b4e35663349beefe3b82c03192a7b68ddb192614dad5c0516a","ssdeep":"1536:zxD5bKH1LXx2STq1MAtyf4kvj8cXNR1c7l9WEII0Nf:lD5bw1LXx8Dtwlvc73WEc","tlshash":"c223e7d86f60e25247f0a8ff32269535f4691e54384cd4d8e06f3cc4aea7706ea7a478","first_seen":"2026-09-27T06:30:15.161585Z","last_seen":"2026-09-27T06:30:15.161585Z","times_seen":1,"resource_available":true,"data":null}},"time_used":512,"timings":{"blocked":-1,"dns":0,"connect":100,"send":0,"wait":111,"receive":99,"ssl":202},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"www.highperformanceformat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"www.highperformanceformat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pl27873862.effectivecpmnetwork.com/aee874e267daf21ad94938c5960ef7a1/invoke.js","fqdn":"pl27873862.effectivecpmnetwork.com","domain":"effectivecpmnetwork.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ads.alterhub.site/promoframe#k=aee874e267daf21ad94938c5960ef7a1\u0026n=27873862\u0026i=n4_0eh5yg","date":"2026-09-27T06:29:12.302Z","timestamp":1790490552302,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"effectivecpmnetwork.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 23:21:47 GMT","end":"Thu, 10 Dec 2026 23:21:46 GMT"},"fingerprint":{"sha1":"D6:4E:9E:FD:10:D2:53:EF:D6:DD:33:0A:D1:87:5B:BF:58:A8:9E:5C","sha256":"61:27:CD:75:F7:04:8C:96:76:E8:9F:15:C5:CD:AD:BD:7A:43:30:4D:F0:69:33:60:82:74:88:7D:67:1B:9C:D7"}}},"request":{"raw":"GET /aee874e267daf21ad94938c5960ef7a1/invoke.js HTTP/1.1\r\nHost: pl27873862.effectivecpmnetwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 27 Sep 2026 06:29:12 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\naccept-ch: Device-Stock-Ua,X-Ucbrowser-Device-Ua,Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile,X-Device-User-Agent,X-Operamini-Phone-Ua,User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Platform\r\naccess-control-allow-origin: *\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\nx-envoy-upstream-service-time: 4\r\nHost: pl27873862.effectivecpmnetwork.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 3b1c9aadf165c45786521289fc7a93da\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":46166,"size_decoded":19066,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (46164), with no line terminators","md5":"2475b1318a3da5424263c3d74e100b9c","sha1":"74d6c63d87d5f46b9101e0633b578af23e476ae1","sha256":"24ed4de845ea78e1611a41bec18fc866fb29d18bd31e1ac5f22853dcd89e86f2","sha512":"3486c5bc6e70516e3e5aa845e6162a020b50da2a2df1ec34d0392e27c6c585728c76b4c7db0572aaa43811de69574153ea534165b0019b35d929ecddb9b5445e","ssdeep":"768:tmmnugNJEOlhP92QfyREnzrcSzPYYIq9xOEA9Utws8tjJq1z4T4nmo8ew6KChvp3:Umt3UwrcSzPYYIq9x1WimP9ChvXxNAoD","tlshash":"a423c6a47f10db7e57a1e9bf22798c55f1260d8078ccd2c8e13f6dc8698a30a957d938","first_seen":"2026-09-27T06:30:15.163635Z","last_seen":"2026-09-27T06:30:56.899854Z","times_seen":2,"resource_available":true,"data":null}},"time_used":466,"timings":{"blocked":0,"dns":0,"connect":91,"send":0,"wait":97,"receive":91,"ssl":187},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"pl27873862.effectivecpmnetwork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aqml.org/16/f3dfac6b133adcea2870cc1171f8be84","fqdn":"aqml.org","domain":"aqml.org","tld":"org"},"ip":{"addr":"172.67.215.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ads.alterhub.site/promoframe#k=3ae6276d5f69eb697421a09960b7da53\u0026n=28128394\u0026i=n3_ke4tgo","date":"2026-09-27T06:29:12.785Z","timestamp":1790490552785,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aqml.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Sep 2026 13:36:46 GMT","end":"Tue, 15 Dec 2026 14:36:42 GMT"},"fingerprint":{"sha1":"34:A6:72:5B:20:45:F1:E6:6E:20:09:20:A2:76:92:39:84:2C:2B:B9","sha256":"B6:D9:25:0C:FB:DC:E8:14:EF:A2:03:18:05:20:55:36:F0:E5:FE:E0:01:2F:9E:86:6C:32:E1:FE:AB:FB:92:68"}}},"request":{"raw":"GET /16/f3dfac6b133adcea2870cc1171f8be84 HTTP/1.1\r\nHost: aqml.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 27 Sep 2026 06:29:12 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nset-cookie: uidm=01a0e18d-a9ff-793a-91e5-f37b43bb9ea9_1; Path=/; Expires=Wed, 24 Sep 2036 06:29:12 GMT; Secure; SameSite=None\n__cf_bm=Xs_MmS6IzGw_hJ_0ybNgNTmn1Iv5Jhuu6g9URfSM2wo-1790490552.7861965-1.0.1.1-SG.hKkrGR8oJfiLA5wZ8Af7O9cmDIcw1aIIc3mTwdo65gRUUVMJ4BKoXKu3w_SoJLPbuwMXGMz9i8akKSYYOsuNajp3Cn5RGXLgB0mYkpKqkyYAzrc7qq9sQPWBUisvL; HttpOnly; SameSite=None; Secure; Path=/; Domain=aqml.org; Expires=Sun, 27 Sep 2026 06:59:12 GMT\r\naccept-ch: X-Operamini-Phone-Ua,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Model,Device-Stock-Ua,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Mobile,X-Device-User-Agent\r\ncontent-encoding: gzip\r\nlink: \u003chttps://aqml.org\u003e; rel=preconnect; crossorigin, \u003chttps://aqml.org\u003e; rel=dns-prefetch, \u003chttps://static.nresystems.com\u003e; rel=preconnect; crossorigin, \u003chttps://static.nresystems.com\u003e; rel=dns-prefetch\r\nvary: Accept-Encoding, Origin\r\nx-envoy-upstream-service-time: 7\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: no-cache, max-age=0, private, no-cache\r\nx-request-id: 8be44c5bb0bbb66d2e122b5180f6bc66\r\npragma: no-cache\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,X-Forwarded-For,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1728000\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a41873e2e8f3120a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"uidm","value":"01a0e18d-a9ff-793a-91e5-f37b43bb9ea9_1","quoted":false,"path":"/","expires":"2036-09-24T06:29:12Z","raw_expires":"Wed, 24 Sep 2036 06:29:12 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uidm=01a0e18d-a9ff-793a-91e5-f37b43bb9ea9_1; Path=/; Expires=Wed, 24 Sep 2036 06:29:12 GMT; Secure; SameSite=None"},{"name":"__cf_bm","value":"Xs_MmS6IzGw_hJ_0ybNgNTmn1Iv5Jhuu6g9URfSM2wo-1790490552.7861965-1.0.1.1-SG.hKkrGR8oJfiLA5wZ8Af7O9cmDIcw1aIIc3mTwdo65gRUUVMJ4BKoXKu3w_SoJLPbuwMXGMz9i8akKSYYOsuNajp3Cn5RGXLgB0mYkpKqkyYAzrc7qq9sQPWBUisvL","quoted":false,"path":"/","domain":"aqml.org","expires":"2026-09-27T06:59:12Z","raw_expires":"Sun, 27 Sep 2026 06:59:12 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=Xs_MmS6IzGw_hJ_0ybNgNTmn1Iv5Jhuu6g9URfSM2wo-1790490552.7861965-1.0.1.1-SG.hKkrGR8oJfiLA5wZ8Af7O9cmDIcw1aIIc3mTwdo65gRUUVMJ4BKoXKu3w_SoJLPbuwMXGMz9i8akKSYYOsuNajp3Cn5RGXLgB0mYkpKqkyYAzrc7qq9sQPWBUisvL; HttpOnly; SameSite=None; Secure; Path=/; Domain=aqml.org; Expires=Sun, 27 Sep 2026 06:59:12 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9788,"size_decoded":6269,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9788), with no line terminators","md5":"cfd64ed8bcdf5182c46973b763e0d105","sha1":"83ce9a7df940de280f31817417f7bace1c598788","sha256":"ae17803b055d8d616d84b2aca4f0ea5840c67622ed07939e8230b0238e572277","sha512":"cd01dfb1190a31a1a1e722729cd69a70c88a75fd8abcf55b7cac8ba0a94e144d0f96d0af2ae2e04c27a518ea5c443186bf11ad78fdfb065375dd1131feb93a9b","ssdeep":"192:Uou1f2fBpS++cJju6r/+ixFAMPE4h2zISaVbjVYI9Bc5HHUATN6BdPwKnl9W7nF:8BYS++0u6KOY82zILVb5EnUAR6BaAnWR","tlshash":"f312849c7e40add85ba4a9fb75778a6512f71d01b20cc0a8f03a2c64bd42397b4bf175","first_seen":"2026-09-27T06:30:15.165156Z","last_seen":"2026-09-27T06:30:56.99345Z","times_seen":2,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"protrafficinspector.com/stats","fqdn":"protrafficinspector.com","domain":"protrafficinspector.com","tld":"com"},"ip":{"addr":"63.189.55.98","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ads.alterhub.site/promoframe#k=aee874e267daf21ad94938c5960ef7a1\u0026n=27873862\u0026i=n4_0eh5yg","date":"2026-09-27T06:29:12.792Z","timestamp":1790490552792,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"protrafficinspector.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 26 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A5:A0:EB:57:26:41:24:03:DD:F3:2D:91:FB:6B:49:B6:53:8B:5F:86","sha256":"82:7E:C7:50:5F:EC:61:E0:5F:7F:ED:2E:10:87:9B:31:A9:8F:4B:DF:E8:99:CC:2E:A1:13:31:E7:45:CE:89:25"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: protrafficinspector.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nOrigin: https://ads.alterhub.site\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 27 Sep 2026 06:29:12 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://ads.alterhub.site\r\nset-cookie: uid_id2=01a0e18d-aa25-7f93-bea9-62b62a70713f:1:1; Path=/; Expires=Wed, 24 Sep 2036 06:29:12 GMT; Secure; SameSite=None\r\nvary: Origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"uid_id2","value":"01a0e18d-aa25-7f93-bea9-62b62a70713f:1:1","quoted":false,"path":"/","expires":"2036-09-24T06:29:12Z","raw_expires":"Wed, 24 Sep 2036 06:29:12 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uid_id2=01a0e18d-aa25-7f93-bea9-62b62a70713f:1:1; Path=/; Expires=Wed, 24 Sep 2036 06:29:12 GMT; Secure; SameSite=None"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40,"size_decoded":520,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"8716bb181733d2b194d57129fde1fd8a","sha1":"80f49ca6e31b7a9cde69cf66dbb5bea4579820ec","sha256":"0bb8c6101aaa4218ada61d90067a8d7511b247db02643c087b4116b040cbcf11","sha512":"d2b531aa9d6de5fd7baaf30cceded19ddb21672b92a61cef6ecb110558337130327f3d7d7d35d78c6bedf808d70084b55252d5a98eee590730ed78ba93b4b6d5","ssdeep":"","tlshash":"a29004041df34c047005117301000417d11cdc1333311c10dc40dd77c55c3340574410","first_seen":"2026-09-27T06:30:15.168632Z","last_seen":"2026-09-27T06:30:15.168632Z","times_seen":1,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":21,"send":0,"wait":21,"receive":0,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bicea.org/7/9ecf8e436a025f7fff03b61551d7e737?uidm=01a0e18d-aa54-75d6-8bfe-24d1a57a1305_2","fqdn":"bicea.org","domain":"bicea.org","tld":"org"},"ip":{"addr":"104.21.86.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ads.alterhub.site/promoframe#k=fdfdd92a59e588025342002253695a24\u0026w=468\u0026h=60\u0026i=u2_h3rpj0","date":"2026-09-27T06:29:13.739Z","timestamp":1790490553739,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bicea.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Sep 2026 14:22:10 GMT","end":"Tue, 15 Dec 2026 15:22:04 GMT"},"fingerprint":{"sha1":"B9:2F:CB:73:40:D7:7C:69:4A:C6:22:3F:45:F8:CA:8D:35:85:B1:C6","sha256":"1A:05:85:45:D6:5A:93:DC:D9:59:BF:16:3B:1F:F2:B3:07:D5:B3:3C:34:CF:6D:7D:8D:BC:6F:D5:88:E3:95:59"}}},"request":{"raw":"GET /7/9ecf8e436a025f7fff03b61551d7e737?uidm=01a0e18d-aa54-75d6-8bfe-24d1a57a1305_2 HTTP/1.1\r\nHost: bicea.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nOrigin: https://ads.alterhub.site\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uidm=01a0e18d-aa54-75d6-8bfe-24d1a57a1305_2; __cf_bm=s97WfwL8KEDlwJ2cPRMHNEF9t5jPNhpTu1ntfKcpF6c-1790490552.8525264-1.0.1.1-x7_tfLhRY9ofMW4Gcd_xl..H59XSfMYUoI66PPL9LEHv_bWUGQvUPwgWhN0XjBjF9GOag6VdFdtjq1hbB0ZB3T8I1p6mJPUaW4smEEym4vZNDFmJE3JzjshCATN0yON1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl31286095=1; slec9934f3af5b5e41f86ecd27cc4a72d823=[6790254]\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 27 Sep 2026 06:29:13 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nserver: cloudflare\r\naccept-ch: Device-Stock-Ua,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Mobile,X-Device-User-Agent,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua,Sec-Ch-Ua-Model\r\ncontent-encoding: gzip\r\nset-cookie: uncs=2; Path=/; Expires=Mon, 28 Sep 2026 06:29:13 GMT; Secure; SameSite=None\nuncs29=2; Path=/; Expires=Mon, 28 Sep 2026 06:29:13 GMT; Secure; SameSite=None\nu_pl31156143=1; Path=/; Expires=Mon, 28 Sep 2026 06:29:13 GMT; Secure; SameSite=None\nslec9ecf8e436a025f7fff03b61551d7e737=[6671912]; Path=/; Expires=Sun, 27 Sep 2026 06:29:18 GMT; Secure; SameSite=None\r\nvary: Accept-Encoding, Origin\r\nx-envoy-upstream-service-time: 112\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: no-cache, max-age=0, private, no-cache\r\nx-request-id: 1e01c0d4d730ba3200661efdc64902ab\r\npragma: no-cache\r\naccess-control-allow-origin: https://ads.alterhub.site\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,X-Forwarded-For,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1728000\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a41873e8ed0432fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"uncs","value":"2","quoted":false,"path":"/","expires":"2026-09-28T06:29:13Z","raw_expires":"Mon, 28 Sep 2026 06:29:13 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uncs=2; Path=/; Expires=Mon, 28 Sep 2026 06:29:13 GMT; Secure; SameSite=None"},{"name":"uncs29","value":"2","quoted":false,"path":"/","expires":"2026-09-28T06:29:13Z","raw_expires":"Mon, 28 Sep 2026 06:29:13 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uncs29=2; Path=/; Expires=Mon, 28 Sep 2026 06:29:13 GMT; Secure; SameSite=None"},{"name":"u_pl31156143","value":"1","quoted":false,"path":"/","expires":"2026-09-28T06:29:13Z","raw_expires":"Mon, 28 Sep 2026 06:29:13 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"u_pl31156143=1; Path=/; Expires=Mon, 28 Sep 2026 06:29:13 GMT; Secure; SameSite=None"},{"name":"slec9ecf8e436a025f7fff03b61551d7e737","value":"[6671912]","quoted":false,"path":"/","expires":"2026-09-27T06:29:18Z","raw_expires":"Sun, 27 Sep 2026 06:29:18 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"slec9ecf8e436a025f7fff03b61551d7e737=[6671912]; Path=/; Expires=Sun, 27 Sep 2026 06:29:18 GMT; Secure; SameSite=None"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7042,"size_decoded":8568,"mime_type":"text/plain; charset=utf-8","magic":"JSON text data","md5":"0e0ca2cf373a78f06c04ad0e64601f3d","sha1":"c2ba15c66d53fa685ad41ed06b1632436eb9ef16","sha256":"31ed47f72f54e8fe8ba3036eb308631d53b58d7ee85ea02302df62257735ea9e","sha512":"0cdaea9c89b84eb876b653ca23e1a86ac86dfe68386c5a202b0ab639b554ee82ebdf6a87ca5492d4dfef8a1e0814801411f869e78db23e7a7c4db607a0c2a25c","ssdeep":"192:9z8NaLIg6nJ3FLVBMftCIar16J9aMXJ3FLVBMftCEHXY:9zkms5dMftorkJXdMftxY","tlshash":"46e17eb960c664289644c941b4225df8080fcca71bd0d2aa9adbd26f935f4bb5b1cd44","first_seen":"2026-09-27T06:30:15.175184Z","last_seen":"2026-09-27T06:30:15.175184Z","times_seen":1,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://alterhub.site/","date":"2026-09-27T06:29:11.844Z","timestamp":1790490551844,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://alterhub.site\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:55:16 GMT\r\nexpires: Tue, 21 Sep 2027 15:55:16 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 484435\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-10-11T19:42:18.948247Z","times_seen":313537,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":41,"dns":0,"connect":0,"send":0,"wait":38,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.nresystems.com/img.gif?h1id=1\u0026h3id=0\u0026key=dd21c50fc592f139e5fae52397aac5e6\u0026uuid=01a0e18d-aa54-75d6-8bfe-24d1a57a1305","fqdn":"static.nresystems.com","domain":"nresystems.com","tld":"com"},"ip":{"addr":"104.18.19.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ads.alterhub.site/promoframe#k=fdfdd92a59e588025342002253695a24\u0026w=468\u0026h=60\u0026i=u2_h3rpj0","date":"2026-09-27T06:29:12.957Z","timestamp":1790490552957,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /img.gif?h1id=1\u0026h3id=0\u0026key=dd21c50fc592f139e5fae52397aac5e6\u0026uuid=01a0e18d-aa54-75d6-8bfe-24d1a57a1305 HTTP/1.1\r\nHost: static.nresystems.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 27 Sep 2026 06:29:13 GMT\r\ncontent-type: image/gif\r\ncontent-length: 7\r\nserver: cloudflare\r\nx-envoy-upstream-service-time: 3\r\nexpires: Sun, 27 Sep 2026 10:29:13 GMT\r\ncache-control: public, max-age=14400\r\nvary: Origin\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,X-Forwarded-For,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1728000\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nset-cookie: uid_id2=01a0e18d-aa54-75d6-8bfe-24d1a57a1305; Path=/; Expires=Wed, 24 Sep 2036 06:29:13 GMT; Secure; SameSite=None\n__cf_bm=uJ2Ha0aGvGfTp.HZwM05dGs5S9y7jU3_aJQUdjqDWqo-1790490552.9585853-1.0.1.1-4SUjyyixxD0gR0IaIyglawsOdpkDGLYHLzriFA7A5rMe5z37lUNwNoMETbQvBlSZGroKjtndZqumpK3qOKT9yMXB.eW5B0X0t8i8pVtL6lQkEUHqPpVVAz90v6OIHZ.f; HttpOnly; SameSite=None; Secure; Path=/; Domain=nresystems.com; Expires=Sun, 27 Sep 2026 06:59:13 GMT\r\ncf-cache-status: BYPASS\r\ncf-ray: a41873e3fdc156ca-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"uid_id2","value":"01a0e18d-aa54-75d6-8bfe-24d1a57a1305","quoted":false,"path":"/","expires":"2036-09-24T06:29:13Z","raw_expires":"Wed, 24 Sep 2036 06:29:13 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uid_id2=01a0e18d-aa54-75d6-8bfe-24d1a57a1305; Path=/; Expires=Wed, 24 Sep 2036 06:29:13 GMT; Secure; SameSite=None"},{"name":"__cf_bm","value":"uJ2Ha0aGvGfTp.HZwM05dGs5S9y7jU3_aJQUdjqDWqo-1790490552.9585853-1.0.1.1-4SUjyyixxD0gR0IaIyglawsOdpkDGLYHLzriFA7A5rMe5z37lUNwNoMETbQvBlSZGroKjtndZqumpK3qOKT9yMXB.eW5B0X0t8i8pVtL6lQkEUHqPpVVAz90v6OIHZ.f","quoted":false,"path":"/","domain":"nresystems.com","expires":"2026-09-27T06:59:13Z","raw_expires":"Sun, 27 Sep 2026 06:59:13 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=uJ2Ha0aGvGfTp.HZwM05dGs5S9y7jU3_aJQUdjqDWqo-1790490552.9585853-1.0.1.1-4SUjyyixxD0gR0IaIyglawsOdpkDGLYHLzriFA7A5rMe5z37lUNwNoMETbQvBlSZGroKjtndZqumpK3qOKT9yMXB.eW5B0X0t8i8pVtL6lQkEUHqPpVVAz90v6OIHZ.f; HttpOnly; SameSite=None; Secure; Path=/; Domain=nresystems.com; Expires=Sun, 27 Sep 2026 06:59:13 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T20:43:33.933419Z","times_seen":19037193,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"afders.org/23?uuid=01a0e18d-aa25-7f93-bea9-62b62a70713f\u0026eb=433c25aa07cd5252598cb35df449253c\u0026te=11ed45f7e66284fb3f0be75501723aa8\u0026pk=1964b0264f479cf1ad7ae7082f5db52e","fqdn":"afders.org","domain":"afders.org","tld":"org"},"ip":{"addr":"104.21.67.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ads.alterhub.site/promoframe#k=3ae6276d5f69eb697421a09960b7da53\u0026n=28128394\u0026i=n3_ke4tgo","date":"2026-09-27T06:29:13.547Z","timestamp":1790490553547,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afders.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Sep 2026 13:34:44 GMT","end":"Tue, 15 Dec 2026 14:34:40 GMT"},"fingerprint":{"sha1":"7A:92:9A:74:98:BB:CF:88:2A:BD:0B:26:71:9B:9A:F3:95:83:01:4C","sha256":"47:5D:69:65:F3:FE:34:4C:29:B8:D4:0E:EE:3F:82:6A:2D:80:CC:43:F1:EA:3B:18:98:DF:BA:E5:D7:79:87:38"}}},"request":{"raw":"GET /23?uuid=01a0e18d-aa25-7f93-bea9-62b62a70713f\u0026eb=433c25aa07cd5252598cb35df449253c\u0026te=11ed45f7e66284fb3f0be75501723aa8\u0026pk=1964b0264f479cf1ad7ae7082f5db52e HTTP/1.1\r\nHost: afders.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uidm=01a0e18d-aa54-75d6-8bfe-24d1a57a1305_2; __cf_bm=E.kpiN_tj8vCp_KnIHDU.orChpHJXA2krs.ZFBCUMdg-1790490552.8087704-1.0.1.1-dvJkw6z0LrAU8qRhbDPxTmy.g5FAGkt6BUndPfuLI0t03qnEghiew.ibnPQwnpjPeftp5uwteKXaQ1s6h84qCfDcnt9qM3qKuqpLdIGQy8cklBLncfcxTdq8JhH8Y5ld\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 27 Sep 2026 06:29:13 GMT\r\ncontent-type: image/gif\r\ncontent-length: 1\r\nserver: cloudflare\r\nx-envoy-upstream-service-time: 1\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: no-cache, max-age=0, private, no-cache\r\nx-request-id: 2cd30818e26ec3f19b737f06f4da019a\r\npragma: no-cache\r\nvary: Origin\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,X-Forwarded-For,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1728000\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a41873e7aae156c3-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T20:43:33.933419Z","times_seen":19037193,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/watch.794391129081.js?dev=e\u0026fstu=01a0e18d-ab8d-7edd-ad1e-f59ea858c7d0\u0026key=d99b65ef2f1e54f34f14ebb6236adcad\u0026kw=%5B%22advertisement%22%5D\u0026ps1=1790490553\u0026rb=e\u0026refer=https%3A%2F%2Falterhub.site%2F\u0026res=14.1055\u0026rmtc=t\u0026sht=30B3F8OZDif_f7zJDK0D1Xd2fHsH8O0s1fkBVherwN0\u0026shv=2\u0026st1=6ecea912e4d75a050b3f59cc23a55666\u0026tz=0\u0026uuid=01a0e18d-a9ff-7f93-835a-abb00c352bc6%3A3%3A1","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ads.alterhub.site/promoframe#k=d99b65ef2f1e54f34f14ebb6236adcad\u0026w=468\u0026h=60\u0026i=u1_v62o5x","date":"2026-09-27T06:29:13.575Z","timestamp":1790490553575,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 00:02:23 GMT","end":"Sat, 21 Nov 2026 00:02:22 GMT"},"fingerprint":{"sha1":"45:C6:44:0A:42:17:85:94:0C:43:02:EA:82:14:8D:F8:D3:13:D9:E2","sha256":"8C:E7:C4:F5:8F:DB:E8:10:A8:55:E4:5C:85:CC:97:D0:7D:0A:FE:C9:6C:C4:4D:6A:FF:20:87:2C:BC:34:2D:F4"}}},"request":{"raw":"GET /watch.794391129081.js?dev=e\u0026fstu=01a0e18d-ab8d-7edd-ad1e-f59ea858c7d0\u0026key=d99b65ef2f1e54f34f14ebb6236adcad\u0026kw=%5B%22advertisement%22%5D\u0026ps1=1790490553\u0026rb=e\u0026refer=https%3A%2F%2Falterhub.site%2F\u0026res=14.1055\u0026rmtc=t\u0026sht=30B3F8OZDif_f7zJDK0D1Xd2fHsH8O0s1fkBVherwN0\u0026shv=2\u0026st1=6ecea912e4d75a050b3f59cc23a55666\u0026tz=0\u0026uuid=01a0e18d-a9ff-7f93-835a-abb00c352bc6%3A3%3A1 HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://ads.alterhub.site\r\nReferer: https://ads.alterhub.site/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=01a0e18d-a9ff-7f93-835a-abb00c352bc6:3:1; ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.SmTQ7wZvuVNtGe1ctSVV587BCScmhCWfnwzRJ0jSP3Y\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 27 Sep 2026 06:29:13 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\naccept-ch: Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Mobile,Device-Stock-Ua,X-Device-User-Agent,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Model,Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://ads.alterhub.site\r\ncontent-encoding: zstd\r\nset-cookie: uid_id2=01a0e18d-a9ff-7f93-835a-abb00c352bc6:3:1; Path=/; Expires=Sun, 04 Oct 2026 06:29:13 GMT; Secure; SameSite=None\npdhtkv=true; Path=/; Expires=Mon, 28 Sep 2026 06:29:13 GMT; Secure; SameSite=None\nuncs=1; Path=/; Expires=Mon, 28 Sep 2026 06:29:13 GMT; Secure; SameSite=None\npdhtkv27=true; Path=/; Expires=Mon, 28 Sep 2026 06:29:13 GMT; Secure; SameSite=None\nuncs27=1; Path=/; Expires=Mon, 28 Sep 2026 06:29:13 GMT; Secure; SameSite=None\nu_pl29378043=1; Path=/; Expires=Mon, 28 Sep 2026 06:29:13 GMT; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nx-envoy-upstream-service-time: 19\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 6a523ae91f26fdc56d6ab50d653dbd73\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":[{"name":"uid_id2","value":"01a0e18d-a9ff-7f93-835a-abb00c352bc6:3:1","quoted":false,"path":"/","expires":"2026-10-04T06:29:13Z","raw_expires":"Sun, 04 Oct 2026 06:29:13 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uid_id2=01a0e18d-a9ff-7f93-835a-abb00c352bc6:3:1; Path=/; Expires=Sun, 04 Oct 2026 06:29:13 GMT; Secure; SameSite=None"},{"name":"pdhtkv","value":"true","quoted":false,"path":"/","expires":"2026-09-28T06:29:13Z","raw_expires":"Mon, 28 Sep 2026 06:29:13 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"pdhtkv=true; Path=/; Expires=Mon, 28 Sep 2026 06:29:13 GMT; Secure; SameSite=None"},{"name":"uncs","value":"1","quoted":false,"path":"/","expires":"2026-09-28T06:29:13Z","raw_expires":"Mon, 28 Sep 2026 06:29:13 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uncs=1; Path=/; Expires=Mon, 28 Sep 2026 06:29:13 GMT; Secure; SameSite=None"},{"name":"pdhtkv27","value":"true","quoted":false,"path":"/","expires":"2026-09-28T06:29:13Z","raw_expires":"Mon, 28 Sep 2026 06:29:13 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"pdhtkv27=true; Path=/; Expires=Mon, 28 Sep 2026 06:29:13 GMT; Secure; SameSite=None"},{"name":"uncs27","value":"1","quoted":false,"path":"/","expires":"2026-09-28T06:29:13Z","raw_expires":"Mon, 28 Sep 2026 06:29:13 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uncs27=1; Path=/; Expires=Mon, 28 Sep 2026 06:29:13 GMT; Secure; SameSite=None"},{"name":"u_pl29378043","value":"1","quoted":false,"path":"/","expires":"2026-09-28T06:29:13Z","raw_expires":"Mon, 28 Sep 2026 06:29:13 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"u_pl29378043=1; Path=/; Expires=Mon, 28 Sep 2026 06:29:13 GMT; Secure; SameSite=None"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":4013,"size_decoded":3991,"mime_type":"text/html","magic":"JavaScript source, ASCII text, with very long lines (3137)","md5":"f3d95b04dd9a58e32f046d30866c64b5","sha1":"2f01639acc53117f61f4698f7114ad591430e62f","sha256":"42e12fd158c0633ced9cc62a08acd28bf6ad5b6f3cdfc46347eea29c1a7dee7e","sha512":"6ecc21b6713968fd874f42eb6ede424123800641d5050960e4098ef95c57edb9a000db15655e08ade62a511bb3618fa649e0592924111905f3306a4b206c3030","ssdeep":"","tlshash":"7d814a396dd64378ac63692f217f685d2f51e20f6d10ca55bc4ce2814f289a42e3bbdc","first_seen":"2026-09-27T06:30:15.177953Z","last_seen":"2026-09-27T06:30:15.177953Z","times_seen":1,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"kettledroopingcontinuation.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spendsdetachment.com/pixel/ase","fqdn":"spendsdetachment.com","domain":"spendsdetachment.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ads.alterhub.site/promoframe#k=fdfdd92a59e588025342002253695a24\u0026w=468\u0026h=60\u0026i=u2_h3rpj0","date":"2026-09-27T06:29:13.887Z","timestamp":1790490553887,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"spendsdetachment.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 04:27:12 GMT","end":"Tue, 24 Nov 2026 04:27:11 GMT"},"fingerprint":{"sha1":"EB:97:C4:8B:DE:F8:13:B1:55:C6:2E:E9:8C:5C:48:F7:1E:59:B1:F2","sha256":"D3:ED:AA:AB:A7:0F:5D:B5:E3:C6:C8:42:92:C6:71:07:01:45:1D:84:99:AD:9D:45:AD:FB:7A:B9:4D:A7:8F:57"}}},"request":{"raw":"POST /pixel/ase HTTP/1.1\r\nHost: spendsdetachment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1242\r\nOrigin: https://ads.alterhub.site\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1242,"data":"[{\"placement_key\":\"fdfdd92a59e588025342002253695a24\",\"template_body\":\"body_banner_pl_general\",\"event_name\":\"base.cep.success\",\"id_frontend_invoke\":\"01a0e18d-a9dc-7405-a5ea-b97dd5082651\",\"script_version\":\"\",\"extra_json\":{\"cpk\":\"dd21c50fc592f139e5fae52397aac5e6\"}},{\"placement_key\":\"fdfdd92a59e588025342002253695a24\",\"template_body\":\"body_banner_pl_general\",\"event_name\":\"base.cesb.success\",\"id_frontend_invoke\":\"01a0e18d-a9dc-7405-a5ea-b97dd5082651\",\"script_version\":\"\",\"extra_json\":{\"cpk\":\"9ecf8e436a025f7fff03b61551d7e737\"}},{\"placement_key\":\"fdfdd92a59e588025342002253695a24\",\"template_body\":\"body_banner_pl_general\",\"event_name\":\"base.cear.success\",\"id_frontend_invoke\":\"01a0e18d-a9dc-7405-a5ea-b97dd5082651\",\"script_version\":\"\",\"extra_json\":{\"cpk\":\"98093f52b5da2db2f9e87d14997d30f3\"}},{\"placement_key\":\"fdfdd92a59e588025342002253695a24\",\"template_body\":\"body_banner_pl_general\",\"event_name\":\"base.load_watch.success\",\"id_frontend_invoke\":\"01a0e18d-a9dc-7405-a5ea-b97dd5082651\",\"script_version\":\"\"},{\"placement_key\":\"fdfdd92a59e588025342002253695a24\",\"template_body\":\"body_banner_pl_general\",\"event_name\":\"base.render.success\",\"id_frontend_invoke\":\"01a0e18d-a9dc-7405-a5ea-b97dd5082651\",\"script_version\":\"\",\"extra_json\":{\"path\":\"iframe\"}}]"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 27 Sep 2026 06:29:14 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: Device-Stock-Ua, X-Ucbrowser-Device-Ua, User-Agent, Sec-Ch-Ua-Platformuser-Agent, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Ua-Model, X-Device-User-Agent, X-Operamini-Phone-Ua, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua, Sec-Ch-Ua-Full-Version, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile\r\nHost: spendsdetachment.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":2583,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T20:43:33.933419Z","times_seen":19037193,"resource_available":true,"data":null}},"time_used":378,"timings":{"blocked":0,"dns":0,"connect":93,"send":0,"wait":95,"receive":0,"ssl":190},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"spendsdetachment.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"spendsdetachment.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bicea.org/pixel/sbls?bv=\u0026tmpl=942\u0026u=https%3A%2F%2Fcdn.bakestubborn.com%2Fsb%2Fssp%2Finterstitial%2Fmessage_redcircle%2F1%2Fcss%2Fstyle.css\u0026l=5327\u0026fd=494","fqdn":"bicea.org","domain":"bicea.org","tld":"org"},"ip":{"addr":"104.21.86.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ads.alterhub.site/promoframe#k=3ae6276d5f69eb697421a09960b7da53\u0026n=28128394\u0026i=n3_ke4tgo","date":"2026-09-27T06:29:14.808Z","timestamp":1790490554808,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bicea.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Sep 2026 14:22:10 GMT","end":"Tue, 15 Dec 2026 15:22:04 GMT"},"fingerprint":{"sha1":"B9:2F:CB:73:40:D7:7C:69:4A:C6:22:3F:45:F8:CA:8D:35:85:B1:C6","sha256":"1A:05:85:45:D6:5A:93:DC:D9:59:BF:16:3B:1F:F2:B3:07:D5:B3:3C:34:CF:6D:7D:8D:BC:6F:D5:88:E3:95:59"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=942\u0026u=https%3A%2F%2Fcdn.bakestubborn.com%2Fsb%2Fssp%2Finterstitial%2Fmessage_redcircle%2F1%2Fcss%2Fstyle.css\u0026l=5327\u0026fd=494 HTTP/1.1\r\nHost: bicea.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uidm=01a0e18d-aa54-75d6-8bfe-24d1a57a1305_2; __cf_bm=s97WfwL8KEDlwJ2cPRMHNEF9t5jPNhpTu1ntfKcpF6c-1790490552.8525264-1.0.1.1-x7_tfLhRY9ofMW4Gcd_xl..H59XSfMYUoI66PPL9LEHv_bWUGQvUPwgWhN0XjBjF9GOag6VdFdtjq1hbB0ZB3T8I1p6mJPUaW4smEEym4vZNDFmJE3JzjshCATN0yON1; pdhtkv=true; uncs=2; pdhtkv29=true; uncs29=2; u_pl31286095=1; slec9934f3af5b5e41f86ecd27cc4a72d823=[6790254]; u_pl31156143=1; slec9ecf8e436a025f7fff03b61551d7e737=[6671912]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 27 Sep 2026 06:29:14 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\naccept-ch: Device-Stock-Ua, X-Device-User-Agent, X-Ucbrowser-Device-Ua, User-Agent, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Ua-Full-Version, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Model, Sec-Ch-Ua-Mobile, X-Operamini-Phone-Ua, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua, Sec-Ch-Ua-Platformuser-Agent\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\naccess-control-expose-headers: Content-Length,Content-Range\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a41873ef8ad832fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":820,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T20:43:33.933419Z","times_seen":19037193,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bicea.org/pixel/sbs?c=1","fqdn":"bicea.org","domain":"bicea.org","tld":"org"},"ip":{"addr":"104.21.86.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ads.alterhub.site/promoframe#k=fdfdd92a59e588025342002253695a24\u0026w=468\u0026h=60\u0026i=u2_h3rpj0","date":"2026-09-27T06:29:14.905Z","timestamp":1790490554905,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bicea.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Sep 2026 14:22:10 GMT","end":"Tue, 15 Dec 2026 15:22:04 GMT"},"fingerprint":{"sha1":"B9:2F:CB:73:40:D7:7C:69:4A:C6:22:3F:45:F8:CA:8D:35:85:B1:C6","sha256":"1A:05:85:45:D6:5A:93:DC:D9:59:BF:16:3B:1F:F2:B3:07:D5:B3:3C:34:CF:6D:7D:8D:BC:6F:D5:88:E3:95:59"}}},"request":{"raw":"GET /pixel/sbs?c=1 HTTP/1.1\r\nHost: bicea.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uidm=01a0e18d-aa54-75d6-8bfe-24d1a57a1305_2; __cf_bm=s97WfwL8KEDlwJ2cPRMHNEF9t5jPNhpTu1ntfKcpF6c-1790490552.8525264-1.0.1.1-x7_tfLhRY9ofMW4Gcd_xl..H59XSfMYUoI66PPL9LEHv_bWUGQvUPwgWhN0XjBjF9GOag6VdFdtjq1hbB0ZB3T8I1p6mJPUaW4smEEym4vZNDFmJE3JzjshCATN0yON1; pdhtkv=true; uncs=2; pdhtkv29=true; uncs29=2; u_pl31286095=1; slec9934f3af5b5e41f86ecd27cc4a72d823=[6790254]; u_pl31156143=1; slec9ecf8e436a025f7fff03b61551d7e737=[6671912]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 27 Sep 2026 06:29:14 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\naccept-ch: Sec-Ch-Ua-Model, Sec-Ch-Ua-Mobile, X-Device-User-Agent, Sec-Ch-Ua-Full-Version-List, Device-Stock-Ua, X-Operamini-Phone-Ua, X-Ucbrowser-Device-Ua, User-Agent, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua, Sec-Ch-Ua-Platformuser-Agent, Sec-Ch-Ua-Full-Version, Sec-Ch-Ua-Platform\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\naccess-control-expose-headers: Content-Length,Content-Range\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a41873f02bf332fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":820,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T20:43:33.933419Z","times_seen":19037193,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alterhub.site/style.css?v=27277508","fqdn":"alterhub.site","domain":"alterhub.site","tld":"site"},"ip":{"addr":"104.21.42.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://alterhub.site/","date":"2026-09-27T06:29:11.626Z","timestamp":1790490551626,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alterhub.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 00:28:34 GMT","end":"Sat, 07 Nov 2026 01:28:30 GMT"},"fingerprint":{"sha1":"CC:30:2C:31:6D:59:8D:61:CD:11:F9:93:CE:16:C0:86:EE:F5:4A:5A","sha256":"FD:96:F8:0E:8C:08:48:55:A0:F2:69:BB:EA:8B:3A:98:9A:71:49:5F:30:C6:90:E1:9F:D3:7F:54:A3:38:1A:B6"}}},"request":{"raw":"GET /style.css?v=27277508 HTTP/1.1\r\nHost: alterhub.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://alterhub.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\nage: 123694\r\ncache-control: public, max-age=14400, stale-while-revalidate=604800\r\ncontent-disposition: inline; filename=\"style.css\"\r\ncontent-encoding: br\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; frame-src 'self' https: data: blob:; media-src 'self' https: data: blob:; connect-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self' https:;\r\ncontent-type: text/css; charset=utf-8\r\ndate: Sun, 27 Sep 2026 06:29:11 GMT\r\netag: \"f167ede8d19165ef340dc2636eed4fb1\"\r\nlast-modified: Fri, 18 Sep 2026 13:02:34 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::kgbbk-1789740969211-d6a74fd8a091\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DDqKH4zkgbP57SgVVGAS%2Bu3glz%2BR0C7DWcPKJUAKz3icFPi%2FVpBIAkTdO70xqCvlDcVkfBFkM%2FOAMpKPXWfBDLAbUwDvpYw%2F5aVCcFOLqVJWqvK1rXY55vmYh4GUw1x%2B\"}]}\r\ncf-cache-status: UPDATING\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\ncf-ray: a41873dbaad30b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48384,"size_decoded":12619,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (48383)","md5":"f167ede8d19165ef340dc2636eed4fb1","sha1":"272775089ed61006ec84dfeb988158f32522c624","sha256":"b1a0fbbaf44f18f37fee9be6e27ff0593369787d014151f4e803bb3293316f2b","sha512":"806e8393a38c747c67b9733826b8fbca4b946d702ca30c49d6dae073e171ca1b358efd90c3f7d53abeee1eef9c77dfdca5073b15d37d069ac8705fb58895db36","ssdeep":"768:WFUmjAab7DfrFwCixOjfcw8+wffKaj+SDPpDk2RJS/HgNbZqqT4l:6UmjAaPzcw8++S4ia5T4l","tlshash":"ee2353b6a214a179bc37e9627bcc9b6e3154f4a3dd2347d8fc40922488c7bf31a61749","first_seen":"2026-09-27T06:27:52.424986Z","last_seen":"2026-09-27T06:30:57.0008Z","times_seen":4,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alterhub.site/logo.png","fqdn":"alterhub.site","domain":"alterhub.site","tld":"site"},"ip":{"addr":"104.21.42.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alterhub.site/","date":"2026-09-27T06:29:12.170Z","timestamp":1790490552170,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alterhub.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 00:28:34 GMT","end":"Sat, 07 Nov 2026 01:28:30 GMT"},"fingerprint":{"sha1":"CC:30:2C:31:6D:59:8D:61:CD:11:F9:93:CE:16:C0:86:EE:F5:4A:5A","sha256":"FD:96:F8:0E:8C:08:48:55:A0:F2:69:BB:EA:8B:3A:98:9A:71:49:5F:30:C6:90:E1:9F:D3:7F:54:A3:38:1A:B6"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: alterhub.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://alterhub.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=Y3_9Q5s.VO85OlRAqFfB2dTrk0CywSN3jGmQQoIUouE-1790490552-1.2.1.1-0xos2XuR8es9GyM5OWDs6icaJ8unVLMx3YGIrYMXJ7uZmKFCwKUPA2X_EE69pPWzGsd9UQZAum76gnam6AJqqAvKuHLcsw3LcAWcoHJSPilD3DSkTdLv3V3fDXGE1uymM2V31WOv1fiq222__oCOoNBxG0cdwugzeh2bVOHGhsxmITdW_ANygmKCmd077CP_O3YgqnZRe7rswHmUuGXQAkwCPPRg6Pr_2se0001xmCfEPY8VmAYo5meDAQ.M4LZ.rQoq1iZpf_Yk37IueLxOcWhGo_mtxQVhO4wjcUuvmESJty_3CEpNe5uFUo9bwFJsjx6yT.nP2V5GYTwALmA3MWiwpXPHQ.Gelpx8LkCsF0h3dkTPpGy7hlxutFfo2MmkPEH5kl1q_2ojVOMlr3vZ8AUBtJ7eEeqYUIQWqo2d2hI\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=86400, stale-while-revalidate=3600\r\ncontent-disposition: inline; filename=\"logo.png\"\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; frame-src 'self' https: data: blob:; media-src 'self' https: data: blob:; connect-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self' https:;\r\ncontent-type: image/png\r\ndate: Sun, 27 Sep 2026 06:29:12 GMT\r\netag: \"b30492cf7dcd04f149fdf83974f64f66\"\r\nlast-modified: Thu, 17 Sep 2026 10:29:46 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::2xpvh-1789676779499-158cc54a7863\r\nserver-timing: cfExtPri\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Vy1zMNSzUA5FY3N%2BzPZmrmHCoxmK3RJRQRo1gT9kRbrRH9rej%2FzPdNanBor5zqlWXlJnYitQiwEcL6VNmOd%2FKULWwiDKrOm30XGOXbxdjXVJcZDmcDToiyIDLbVA6f9W\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a41873df1b5d0b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 36775\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":36775,"size_decoded":38252,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"b30492cf7dcd04f149fdf83974f64f66","sha1":"697f8116ae7258f96fdc8e575d9217d0561a819e","sha256":"48714eead8381395628a7730a417d2d60c7afa2cb7eb48f00cee45ee364115c0","sha512":"7af92369e8b331e67936405d19a9df86bfbccb6b8e76b172edc1697df844dd2e1bd69ce5f02e6ca9ff7e7a0619b2fa300d99582980cf3731e7e9c601da027aa6","ssdeep":"768:O8QZ/xPVFsTJEkZjQZl8CVGOEGFkxQLoXm7pc9lLt+2jf38T6hWze0Xua:O8QTw6CjDCUDLOctPzQea","tlshash":"9af2e1477874607668a308ef34b65b2957a664c0a4a11f355b33bf1a77343f83c9de09","first_seen":"2026-09-27T06:27:52.386786Z","last_seen":"2026-09-27T06:30:56.855844Z","times_seen":4,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pl28128394.effectivecpmnetwork.com/3ae6276d5f69eb697421a09960b7da53/invoke.js","fqdn":"pl28128394.effectivecpmnetwork.com","domain":"effectivecpmnetwork.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://alterhub.site/","date":"2026-09-27T06:29:12.221Z","timestamp":1790490552221,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"effectivecpmnetwork.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 23:21:47 GMT","end":"Thu, 10 Dec 2026 23:21:46 GMT"},"fingerprint":{"sha1":"D6:4E:9E:FD:10:D2:53:EF:D6:DD:33:0A:D1:87:5B:BF:58:A8:9E:5C","sha256":"61:27:CD:75:F7:04:8C:96:76:E8:9F:15:C5:CD:AD:BD:7A:43:30:4D:F0:69:33:60:82:74:88:7D:67:1B:9C:D7"}}},"request":{"raw":"GET /3ae6276d5f69eb697421a09960b7da53/invoke.js HTTP/1.1\r\nHost: pl28128394.effectivecpmnetwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://alterhub.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 27 Sep 2026 06:29:12 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\naccept-ch: User-Agent,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Platform,Device-Stock-Ua,X-Device-User-Agent,X-Operamini-Phone-Ua,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile,X-Ucbrowser-Device-Ua\r\naccess-control-allow-origin: *\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\nx-envoy-upstream-service-time: 6\r\nHost: pl28128394.effectivecpmnetwork.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 5a17ae4fa855b1500459b425d21b7950\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":46235,"size_decoded":19126,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (46233), with no line terminators","md5":"0d4df3e08d85d3f8da157987dbe5d60c","sha1":"a2271dc675a7dc3794248a96644026e8d62e0547","sha256":"a50e7eea2bd6391543714a5fb5ed7eb71825327a64314c5e254e4c06d57cb6a5","sha512":"3688037a3f4162a10a72e2fd1e4a23817d8b16fe23a08e92ee5c06ae2b2695a56ce0eb30903d7c86bd634d6924331ea22cd4c622d3a532e4f2911c70281a0b7e","ssdeep":"768:tmmZugNJEOlhP92QfyREnzrcSzPYYIq9xOEA9Utws8tjJq1z4T4nmo8ew6KChvpB:Umf3UwrcSzPYYIq9x1WimP9ChvXxNEol","tlshash":"b023c6a47f10db7e57a1e9bf227a8c55f1160d8078ccd2c8e13f6dc8698a30a957d938","first_seen":"2026-09-27T06:27:52.43285Z","last_seen":"2026-09-27T06:30:56.897701Z","times_seen":4,"resource_available":true,"data":null}},"time_used":479,"timings":{"blocked":-1,"dns":3,"connect":92,"send":0,"wait":102,"receive":92,"ssl":190},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"pl28128394.effectivecpmnetwork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"protrafficinspector.com/stats","fqdn":"protrafficinspector.com","domain":"protrafficinspector.com","tld":"com"},"ip":{"addr":"63.189.55.98","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ads.alterhub.site/promoframe#k=3ae6276d5f69eb697421a09960b7da53\u0026n=28128394\u0026i=n3_ke4tgo","date":"2026-09-27T06:29:12.775Z","timestamp":1790490552775,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"protrafficinspector.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 26 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A5:A0:EB:57:26:41:24:03:DD:F3:2D:91:FB:6B:49:B6:53:8B:5F:86","sha256":"82:7E:C7:50:5F:EC:61:E0:5F:7F:ED:2E:10:87:9B:31:A9:8F:4B:DF:E8:99:CC:2E:A1:13:31:E7:45:CE:89:25"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: protrafficinspector.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nOrigin: https://ads.alterhub.site\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 27 Sep 2026 06:29:12 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://ads.alterhub.site\r\nset-cookie: uid_id2=01a0e18d-aa13-7a6b-b3ca-ef1156e6c7f4:2:1; Path=/; Expires=Wed, 24 Sep 2036 06:29:12 GMT; Secure; SameSite=None\r\nvary: Origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"uid_id2","value":"01a0e18d-aa13-7a6b-b3ca-ef1156e6c7f4:2:1","quoted":false,"path":"/","expires":"2036-09-24T06:29:12Z","raw_expires":"Wed, 24 Sep 2036 06:29:12 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uid_id2=01a0e18d-aa13-7a6b-b3ca-ef1156e6c7f4:2:1; Path=/; Expires=Wed, 24 Sep 2036 06:29:12 GMT; Secure; SameSite=None"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40,"size_decoded":520,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"473bac0f27af0cf2e3a2b86a2adca2b3","sha1":"42029ece4b903410929e37174b891788c9fec466","sha256":"efa2f590cb7f0a90219c0b6fb5153cf3110baafb35c9837cb237b29fd903a578","sha512":"0a3e7204d5cfa5d51275cf0fa9754550bbdfdc1fef23aad0f988733e4bbcc9b9c959c561561843fe5e26440133a3989084141d0cf5f5aea920fa9e73597dc367","ssdeep":"","tlshash":"429004d0dd531000305454d00374c7c7501d7c7033fc15034d11d3330704031f1c5440","first_seen":"2026-09-27T06:30:15.182792Z","last_seen":"2026-09-27T06:30:15.182792Z","times_seen":1,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":21,"send":0,"wait":21,"receive":0,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"afders.org/9/1964b0264f479cf1ad7ae7082f5db52e","fqdn":"afders.org","domain":"afders.org","tld":"org"},"ip":{"addr":"104.21.67.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ads.alterhub.site/promoframe#k=3ae6276d5f69eb697421a09960b7da53\u0026n=28128394\u0026i=n3_ke4tgo","date":"2026-09-27T06:29:12.779Z","timestamp":1790490552779,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afders.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Sep 2026 13:34:44 GMT","end":"Tue, 15 Dec 2026 14:34:40 GMT"},"fingerprint":{"sha1":"7A:92:9A:74:98:BB:CF:88:2A:BD:0B:26:71:9B:9A:F3:95:83:01:4C","sha256":"47:5D:69:65:F3:FE:34:4C:29:B8:D4:0E:EE:3F:82:6A:2D:80:CC:43:F1:EA:3B:18:98:DF:BA:E5:D7:79:87:38"}}},"request":{"raw":"GET /9/1964b0264f479cf1ad7ae7082f5db52e HTTP/1.1\r\nHost: afders.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 27 Sep 2026 06:29:12 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nset-cookie: uidm=01a0e18d-aa0f-78dd-97bd-6425efdeebf7_1; Path=/; Expires=Wed, 24 Sep 2036 06:29:12 GMT; Secure; SameSite=None\n__cf_bm=LWXnSuQLdTSkWtKJMwloQHZ8FYKmKorcUCCzfTieafQ-1790490552.79831-1.0.1.1-9tOWzCQ6O8lectX8w5y3VFwkH6YSDpsueBhfyQNeQTfcl4oRmLYx4WoPkyV7UuZ9A3dKFAwf1.aVWdD2_JNjKu9h8K7OZvexu5x2lY2RmL9zwbwSqLYunf51uoayOvzy; HttpOnly; SameSite=None; Secure; Path=/; Domain=afders.org; Expires=Sun, 27 Sep 2026 06:59:12 GMT\r\naccept-ch: X-Operamini-Phone-Ua,Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Platform,Device-Stock-Ua,X-Device-User-Agent\r\ncontent-encoding: gzip\r\nlink: \u003chttps://arwf.org\u003e; rel=preconnect; crossorigin, \u003chttps://arwf.org\u003e; rel=dns-prefetch, \u003chttps://static.nresystems.com\u003e; rel=preconnect; crossorigin, \u003chttps://static.nresystems.com\u003e; rel=dns-prefetch\r\nvary: Accept-Encoding, Origin\r\nx-envoy-upstream-service-time: 6\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: no-cache, max-age=0, private, no-cache\r\nx-request-id: c2b463e8e766a89a43885f73afdfd092\r\npragma: no-cache\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,X-Forwarded-For,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1728000\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a41873e2fea956c3-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"uidm","value":"01a0e18d-aa0f-78dd-97bd-6425efdeebf7_1","quoted":false,"path":"/","expires":"2036-09-24T06:29:12Z","raw_expires":"Wed, 24 Sep 2036 06:29:12 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uidm=01a0e18d-aa0f-78dd-97bd-6425efdeebf7_1; Path=/; Expires=Wed, 24 Sep 2036 06:29:12 GMT; Secure; SameSite=None"},{"name":"__cf_bm","value":"LWXnSuQLdTSkWtKJMwloQHZ8FYKmKorcUCCzfTieafQ-1790490552.79831-1.0.1.1-9tOWzCQ6O8lectX8w5y3VFwkH6YSDpsueBhfyQNeQTfcl4oRmLYx4WoPkyV7UuZ9A3dKFAwf1.aVWdD2_JNjKu9h8K7OZvexu5x2lY2RmL9zwbwSqLYunf51uoayOvzy","quoted":false,"path":"/","domain":"afders.org","expires":"2026-09-27T06:59:12Z","raw_expires":"Sun, 27 Sep 2026 06:59:12 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=LWXnSuQLdTSkWtKJMwloQHZ8FYKmKorcUCCzfTieafQ-1790490552.79831-1.0.1.1-9tOWzCQ6O8lectX8w5y3VFwkH6YSDpsueBhfyQNeQTfcl4oRmLYx4WoPkyV7UuZ9A3dKFAwf1.aVWdD2_JNjKu9h8K7OZvexu5x2lY2RmL9zwbwSqLYunf51uoayOvzy; HttpOnly; SameSite=None; Secure; Path=/; Domain=afders.org; Expires=Sun, 27 Sep 2026 06:59:12 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":85752,"size_decoded":35942,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"bd1136c6314f085860e70456737a9df1","sha1":"98d85b73060878f4665319789aa8769b21bee628","sha256":"eace8ba38e004fae9db0f65c46e6b78927302bd2da39b9377949f032605070fd","sha512":"50204990d521a54f2acf5da394ec705d82fabd8d220f1af47040cf2c1410fa80f6a1995055eb91854119bb3e5c91be4c1ce091581c1450a302742ebe6df35ebc","ssdeep":"1536:ELdPZ2UbmKPpl0ZVkEEC5dpdx+hl4rHCG3uYx3Z/5BTb49xHJ8qr0Jd2F:ZWureGrHfeYx3Z/5BTExHJAC","tlshash":"7483d748af10a21b0bb06cfb311ab922e15a0c8536ace4d8fd7e3c5b5d86716f5bd474","first_seen":"2026-09-27T06:30:15.184649Z","last_seen":"2026-09-27T06:30:15.184649Z","times_seen":1,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":75,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fizzyacerbitymellow.com/pixel/ase","fqdn":"fizzyacerbitymellow.com","domain":"fizzyacerbitymellow.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ads.alterhub.site/promoframe#k=aee874e267daf21ad94938c5960ef7a1\u0026n=27873862\u0026i=n4_0eh5yg","date":"2026-09-27T06:29:13.874Z","timestamp":1790490553874,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"fizzyacerbitymellow.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 22:02:47 GMT","end":"Fri, 30 Oct 2026 22:02:46 GMT"},"fingerprint":{"sha1":"85:2D:D6:49:43:AB:3A:C0:5E:0D:58:0E:0B:D7:D6:2A:82:8B:E0:41","sha256":"FF:C6:2E:36:C1:47:5E:79:06:79:62:3E:93:9A:4C:D1:A2:35:A6:48:A3:E5:43:F4:74:4F:64:C9:9E:32:17:24"}}},"request":{"raw":"POST /pixel/ase HTTP/1.1\r\nHost: fizzyacerbitymellow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 2412\r\nOrigin: https://ads.alterhub.site\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2412,"data":"[{\"placement_key\":\"aee874e267daf21ad94938c5960ef7a1\",\"template_body\":\"body_native_pl_general\",\"event_name\":\"base.invoke_init.success\",\"id_frontend_invoke\":\"01a0e18d-a9cc-7c15-a91e-f163f000dd52\",\"script_version\":\"\"},{\"placement_key\":\"aee874e267daf21ad94938c5960ef7a1\",\"template_body\":\"body_native_pl_general\",\"event_name\":\"base.cear.success\",\"id_frontend_invoke\":\"01a0e18d-a9cc-7c15-a91e-f163f000dd52\",\"script_version\":\"\",\"extra_json\":{\"cpk\":\"6f633c7fd769c4533953a1b5d3fc2439\"}},{\"placement_key\":\"aee874e267daf21ad94938c5960ef7a1\",\"template_body\":\"body_native_pl_general\",\"event_name\":\"base.render.success\",\"id_frontend_invoke\":\"01a0e18d-a9cc-7c15-a91e-f163f000dd52\",\"script_version\":\"\"},{\"placement_key\":\"aee874e267daf21ad94938c5960ef7a1\",\"template_body\":\"body_native_pl_general\",\"event_name\":\"base.render.success\",\"id_frontend_invoke\":\"01a0e18d-a9cc-7c15-a91e-f163f000dd52\",\"script_version\":\"\"},{\"placement_key\":\"aee874e267daf21ad94938c5960ef7a1\",\"template_body\":\"body_native_pl_general\",\"event_name\":\"base.render.success\",\"id_frontend_invoke\":\"01a0e18d-a9cc-7c15-a91e-f163f000dd52\",\"script_version\":\"\"},{\"placement_key\":\"aee874e267daf21ad94938c5960ef7a1\",\"template_body\":\"body_native_pl_general\",\"event_name\":\"base.render.success\",\"id_frontend_invoke\":\"01a0e18d-a9cc-7c15-a91e-f163f000dd52\",\"script_version\":\"\"},{\"placement_key\":\"aee874e267daf21ad94938c5960ef7a1\",\"template_body\":\"body_native_pl_general\",\"event_name\":\"base.impression.success\",\"id_frontend_invoke\":\"01a0e18d-a9cc-7c15-a91e-f163f000dd52\",\"script_version\":\"\"},{\"placement_key\":\"aee874e267daf21ad94938c5960ef7a1\",\"template_body\":\"body_native_pl_general\",\"event_name\":\"base.impression.success\",\"id_frontend_invoke\":\"01a0e18d-a9cc-7c15-a91e-f163f000dd52\",\"script_version\":\"\"},{\"placement_key\":\"aee874e267daf21ad94938c5960ef7a1\",\"template_body\":\"body_native_pl_general\",\"event_name\":\"base.impression.success\",\"id_frontend_invoke\":\"01a0e18d-a9cc-7c15-a91e-f163f000dd52\",\"script_version\":\"\"},{\"placement_key\":\"aee874e267daf21ad94938c5960ef7a1\",\"template_body\":\"body_native_pl_general\",\"event_name\":\"base.impression.success\",\"id_frontend_invoke\":\"01a0e18d-a9cc-7c15-a91e-f163f000dd52\",\"script_version\":\"\"},{\"placement_key\":\"aee874e267daf21ad94938c5960ef7a1\",\"template_body\":\"body_native_pl_general\",\"event_name\":\"base.ad_request.success\",\"id_frontend_invoke\":\"01a0e18d-a9cc-7c15-a91e-f163f000dd52\",\"script_version\":\"\",\"extra_json\":{\"banners_count\":4}}]"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 27 Sep 2026 06:29:14 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: Sec-Ch-Ua-Platformuser-Agent, Sec-Ch-Ua-Mobile, X-Device-User-Agent, X-Ucbrowser-Device-Ua, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Ua-Full-Version, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Model, Device-Stock-Ua, X-Operamini-Phone-Ua, User-Agent, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua\r\nHost: fizzyacerbitymellow.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":3759,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T20:43:33.933419Z","times_seen":19037193,"resource_available":true,"data":null}},"time_used":383,"timings":{"blocked":0,"dns":0,"connect":92,"send":0,"wait":101,"receive":0,"ssl":190},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bicea.org/pixel/sbls?bv=\u0026tmpl=942\u0026u=https%3A%2F%2Fcdn.show-sb.com%2Fsb%2Fau%2F8e%2Fff%2F66%2F8eff6635b7ed4954a8b4e92629e58a35%2F1698745384.html\u0026l=1495\u0026fd=512","fqdn":"bicea.org","domain":"bicea.org","tld":"org"},"ip":{"addr":"104.21.86.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ads.alterhub.site/promoframe#k=3ae6276d5f69eb697421a09960b7da53\u0026n=28128394\u0026i=n3_ke4tgo","date":"2026-09-27T06:29:14.318Z","timestamp":1790490554318,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bicea.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Sep 2026 14:22:10 GMT","end":"Tue, 15 Dec 2026 15:22:04 GMT"},"fingerprint":{"sha1":"B9:2F:CB:73:40:D7:7C:69:4A:C6:22:3F:45:F8:CA:8D:35:85:B1:C6","sha256":"1A:05:85:45:D6:5A:93:DC:D9:59:BF:16:3B:1F:F2:B3:07:D5:B3:3C:34:CF:6D:7D:8D:BC:6F:D5:88:E3:95:59"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=942\u0026u=https%3A%2F%2Fcdn.show-sb.com%2Fsb%2Fau%2F8e%2Fff%2F66%2F8eff6635b7ed4954a8b4e92629e58a35%2F1698745384.html\u0026l=1495\u0026fd=512 HTTP/1.1\r\nHost: bicea.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uidm=01a0e18d-aa54-75d6-8bfe-24d1a57a1305_2; __cf_bm=s97WfwL8KEDlwJ2cPRMHNEF9t5jPNhpTu1ntfKcpF6c-1790490552.8525264-1.0.1.1-x7_tfLhRY9ofMW4Gcd_xl..H59XSfMYUoI66PPL9LEHv_bWUGQvUPwgWhN0XjBjF9GOag6VdFdtjq1hbB0ZB3T8I1p6mJPUaW4smEEym4vZNDFmJE3JzjshCATN0yON1; pdhtkv=true; uncs=2; pdhtkv29=true; uncs29=2; u_pl31286095=1; slec9934f3af5b5e41f86ecd27cc4a72d823=[6790254]; u_pl31156143=1; slec9ecf8e436a025f7fff03b61551d7e737=[6671912]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 27 Sep 2026 06:29:14 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\naccept-ch: Sec-Ch-Ua-Model, Sec-Ch-Ua-Mobile, Device-Stock-Ua, X-Operamini-Phone-Ua, User-Agent, Sec-Ch-Ua, Sec-Ch-Ua-Platformuser-Agent, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Ua-Platform, X-Device-User-Agent, X-Ucbrowser-Device-Ua, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\naccess-control-expose-headers: Content-Length,Content-Range\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a41873ec7cca32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":820,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T20:43:33.933419Z","times_seen":19037193,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/gsap/3.12.5/gsap.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://alterhub.site/","date":"2026-09-27T06:29:11.883Z","timestamp":1790490551883,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/gsap/3.12.5/gsap.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://alterhub.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 06:29:12 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=6,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 288311\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Thu, 18 Jan 2024 23:33:45 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BinKQtLjB6sOfhjXO4FNtVISEhGCvx25%2BWM%2Fok%2BjnNHE5SfHzKawaygoZacguoX0wKmUTNr26ddsZt0%2Br2zIcxUx2ljZW5xZqVr0I8ky6ufjDvES09LicO%2F1NTO17LQUgbQTcky3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a41873df2ef6b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 25515\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":72214,"size_decoded":26537,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65255)","md5":"47da594cbece0e34a656e6bf2490b7c3","sha1":"2d26f4c060491ac980d09ca687388d3610256eb7","sha256":"28033e449a31ebcc396e5be8b13b63152bf03094288fb5867034321927bce087","sha512":"ede1d1c1c6d890ae1df60ffab43fe68647fef9ea131f0a4d33dc28071b4f5015a6ebbcde01f142f87adda04d866a729ea1c972fd5c5e2ef22ac2f09d93ba9272","ssdeep":"1536:auJ29KBROpgAEQ9a1tgwA6NSZW3ytdKTdIwEp28Ywz7CDE:f29CakgwdNSQ3yt8eNp28YqCA","tlshash":"d063e8d93292f423039a51a1447f094bf337a958640f0918f269e4ce7d3c9ad52bbe7a","first_seen":"2024-01-19T15:55:20Z","last_seen":"2026-10-11T19:52:23.739905Z","times_seen":13658,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":3,"connect":15,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alterhub.site/cdn-cgi/challenge-platform/h/b/jsd/oneshot/d76008a69eab/0.9264352749421071:1790488826:y8DHsLbh9yAPDSfWTL9TGd2nW_3eWITLCgy9T2faj_I/a41873d8aabd0b59","fqdn":"alterhub.site","domain":"alterhub.site","tld":"site"},"ip":{"addr":"104.21.42.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://alterhub.site/","date":"2026-09-27T06:29:12.038Z","timestamp":1790490552038,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alterhub.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 00:28:34 GMT","end":"Sat, 07 Nov 2026 01:28:30 GMT"},"fingerprint":{"sha1":"CC:30:2C:31:6D:59:8D:61:CD:11:F9:93:CE:16:C0:86:EE:F5:4A:5A","sha256":"FD:96:F8:0E:8C:08:48:55:A0:F2:69:BB:EA:8B:3A:98:9A:71:49:5F:30:C6:90:E1:9F:D3:7F:54:A3:38:1A:B6"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/jsd/oneshot/d76008a69eab/0.9264352749421071:1790488826:y8DHsLbh9yAPDSfWTL9TGd2nW_3eWITLCgy9T2faj_I/a41873d8aabd0b59 HTTP/1.1\r\nHost: alterhub.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 13818\r\nOrigin: https://alterhub.site\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://alterhub.site/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":13818,"data":"le9h5bvtXd55Cyv3tES41pGDrwwUVvuL1-BrKl3ypan2rJFYIlcc7n0Ovl1TUXcqn9IAJ0TYRkIQaGelK-6s5C7+Mmv1GcP33Cxi2OSOh9RdFyhYXurZmB2J38Ly4V9p7hJs2E4IvYnVSyR1QN61gR2ug-L8aRhM6FYQaH4DYMkOg3Ag7OwP26e6TjpuHs2w0tbeuS9n3TxwSkUrQ29NFyIRiAhNEL5gNxG9fOQvFGpFzArYro3qi0dDLGUASmyte7kYYpawScdoN3IY36H-zIz2+wxX0OZnlpg37aivsbLy+mlM0VwZz8$gP8cYkl$6cHoL97TvcKtS2YuDR8V02OVlYqLc6AAlOM5YsIQAZpAJmzLKbDz3P5ZzsZ2uITHtUYT0VZlD2cjrE1oORHtxvHRK7+uV33dR7IbT$u0BGLguF-FFvuaK8YN0L0yzrkpAHCD$-VT$HLAw3MeADiCmhNh71wmSaZ6NodLeDE6Rv9A9Scd9wEAPxt8+wI5w9u6aY+VFj65ZwoeJyzKJJpEn9cnSHf7DuzZZk-qg57SD43pLhyZypTVV4iXxgTL00JdDt$-$yfq5$7TXUS--FVb3U5PD9svCofolB1zQ9gEz8MiAXduukLvoB-o9fPG2X9EOe3duCB1xfs9JDA5ywhf5mqElAwlUvLuJwdoOxzPiUK7GJsp9o+EJ3V1y9mm1Xb-IYXAMBMhXHbfHvoRr-M6qfXyZwdODPcGloxoaJpD5eUT7c3A9anS3garesCEH8GuJEgVSMFZfaYFcHxSHx58V1mqapt-PjkVBig4s9-s0bbv3mdJy2847OC6zH6ERH+$cOMbdDZFJ9Enr0MJoN4uk5JKTP3tpvwwQzs2IbtHUVdNukeZzeO2QBZe8AbPhxf5XuvQaBzb6r9G+zXqUxwSJJs3jek$YFGukjPM8ZM1qyRn1Bm57BrPhTvvRG252l+ASf8X5FKCFMZ8qbkh9zFk-RFdDuKq94h2EXV2d$4$D1n3aSKOdw8dUu9T833IafkEKCuOz-fIJajnsfvdOU-irwp+I+EUmL8HagasM7rNyn6Hpv1ilb36B55uMQO0zMotvn$vhN7ueKGsXZmTuMqrDnnw+4tqcxY$B$-EFDqO91K8p8Q53FZsAddrcUqicXOKACb7jlu2JKB24VTLSFkC$0JodLIhSuAObilDLiLxJbG4Ltvn9u9qtAv4$PKdmhyBjTjgRjCzzSDzqwHlIfSHuO0gbYqxCL5FfSIU2+OuivKlgNotxGGFVhL1PrLxIuVSLtxuiRzNB6gxc3Tk2nIpVVZQkBCOKGIV6umRKHyhGPBg0OMGzNV8sqHU51cYTgMrvCP5RbdM$5ViulpIf$GzenC87+TzygFbKUzip6Jc2nvU-xtrAKkDd7GfjCMa8LFOobfm5pa8OuZd4I9g6rXidBpEq3Ee5YLHRIm9A2qcadvs7bXaiXEdoXrFCNrozzCI24-2SAFpwwiH$KiRrnQi1ibJtL7Grd6eb97mXKT1U9bMKB5NmXDSyQXRwXTdc9dmk1v7djq0URN81yfOwzIAJUg5A4MRE1TIzota+8gSCwXIPtva2mpiS75AMuVlbtq4sl370ekgXe+S+-aQv6TrizuHydYR0LYXXR-sPGKakex$mIDuhEslGP3AerN6KGwECZ3wQng1Nx9VFT1fm0t5pvJ5gUg1Gz7-m4iz7ajk+2QTCpSNtkmxJ$M3BGN8PmjFjiyLAL8SIz2-pBCHNjD5h2SbfscjBT0B5Vdlk$lZ6a0PIYruffFv4GcmMfoHqX0t4n62CURoHeC0gHIaF4NLN6s4rl6Hd2ZBJ2RhzZ9HNdNK7jT5F57lrqjhbMgMlJ+tNA1SLOKK4PRBrkVy+XhXHcKsEf6RAx+gNxu7DMUgMFuvlVHTRFEaB$kU7RI4howIJT6XOKSZZm3$6eBywXGaKUrNblvJHO4rVGa5AJt4NvEeYryYVvma5-5GstR1Po-9sZeIror1Cng9aPzX299jyyDGh54r7Tg-wjhrvDLjSxTKMmMPh$DyQjmMmm$3-gw1K5b2EX1HKtvih3P9m$5GpkT$BtkefOvgmhDzfvwBKHr$DKs2FvrD+D4N+Sl3Mv162LUR0G4hlMzX+91xKDvTUOP7mKdFCMkC270IFNeANlB8hxaxx5kYmI2X-H$IbmcltLCLgwEmtHiL6KFkzMCOt8iierJI2tZ9mJg5htns6Rt7LgUdQL81OEVLAuJpef8ZO856kATR$hxEbxqNKg22bpv4fP-vmfVwMpy0IuswqEMHskzi$pEYgkpz+hzuj6cP5TzQ9k9MQcerlHn58Vs6ARaBcRqDtJZgfkFf$NL8qMdqIU-lumOZTspevfP+jl8ARI4D8c1oci8rwlK5n$VYAbPGBHkEa5sJVkFLms4mDyE1sggKoQ+gVNDFOFb5SJi5ghTgRhjAXA4vyqjcQqREgdAPh7cvgo$xM8I4O5K8Ugv9rwD9V+TDO-xhNfZILVzGXwMCuIFqDcc7NMnt0N9E-q6eJviZ55o0+a-Ji6ams7q7m4RuNwsAQsdRr+kaRF0l46s9AzzHkR-oHGq0jq3$Nzw4pqfb$2f6Vgv-cihb1qea+5pnJTQ+ot4PFasNYGriCGyIuyOx8bEenOYXdrwrC2w0B4KYAp4Op0ZDsKrXbfyVol29S9d$eZydtVT+mbBjws+ltDx7nAjmkUmpbKC4PyVAG$3rmNAI7uH2i7cdTD4HhA2kgESIvZJ7EYyfYXYx3u9mzcX0s61pVLcQgEeP7hhhDj0Uf1-ZyCVESfKr+lGQAthaocAyNGvgXtj$r1PJJtkiqCVkxcVGnX96BgyiE5+PCL4fMuhXSvJgQ5f2EZR+U+TY2vrGvheAcYrphlAI4h+kzjBTzq2Tijqo059FBsung$fSpom-mGnLCgj9MrKtAacuTxJp1G7SKNYw6tmSPTIXQfFI$Kl3PTtfISm-sveKJsYKwPcUywzLQF+EFw6cVv8wVvthSwkdKNC48pONvqsTciCGYcM8j$7aeJZzXyrmoEM9zIp--i4nA-qwYnhdqppFYbV9YFiDuqFl-Zj4vn7cPzsaLz1VkhkAcFp5uTQkJ1MYMYE9gG6yFtmpcF1Dsd4mDVRD6hsjkX+YoU$7Fny6+2albf6BmgdSxeRJv12D0ZN4c2+GuaVUUdsUwueEHUMUmd5GV8cZC4vT-Y8VCiYqi-gmCCCt-my$KlEsFKH7fhKH7HQR9ARX084vZBOxybUtmf4RtQo1HfE$z67hX4kAuFbqJSUJohLqFj6j5BjO$PsuxhnmnRfKgTx+sizzOT$J34ZbK0ODS4apRpjbCjkl27SlrXh-kfdKTEAfIKQFgUHodsq1X-KPPb4OijGqoi-Ha0tXbo2lHrrK$fQQvF4AsspmYelxRaLNPnXeawwkzf9KKKN2hpC4xkK90utiTc9Xs--iPMgB4g+jalR-+Fdsz1ZvRiKvG7TAYwX7FT7EOMDt0X1z0QOmaFU+1emr0UT32jGTjIy2NPxE3Y--tGJq5iJ8hn80+DM-ThcSQ$gnixAOogB$UszhtHffr3aFUF2l0T-nHj0bkhrSml$aXNlLLi2CK653lN8mxi3j7bQ+w8zHjMdggcSnKTiykEe39tSTkM+KZh7N0vgtKZOd6UBavyuhD$9U8ObH0AAb6+JeURbVCRJRwbO4svEsYmRR48ZA6v0Mml0UYYU19A7i4qkVHwtkjQkhr1dd8YNODFAi45eweh1g6-PdgONiZ+NUf277IxOAH0VaLl1vAu+$DsZ1oyxj8R+md80TAh9SYpbguZXAXeSCjspcRuZbhwvvSheGQKPg5u37KTzfEjyrDNctpD45r+8d0svcYcaG7eOD+z3qIO5RiErvp-x$1hqyRAZh6z6T4-ZGoFdEvif5bS0GK1Avs1VBG6bxfCGH2k+tGsHdqZJ76Zsg-suPj-CfRrss+XS-zvE0Rbcu2ViychuhQa$k3V8DhwcLtN5t05+pONUtQbvvoIib28XN8X1JTVc6vIJtXo9sXHSD4KDMa+FEeJTVBiYAcyotlYPl-XQeMTNr8kcS$Tfls5+Ft8UT08Gz-4zHq7nha1GGyrXocBLMrCrNqdIV2uE1DVncZEVl98Q8bBGxn5SkA$HipGV-kLZ46m2U+IZcVkXBSJh5uLRYUltPQmulVw1HqMZVeFqzwI2EM6$7x9I2LSU0$PPqFR2SBnlmMECppZc7ny$mFoBHYY-vNU82Q-sP5Kb5p1mj3$$p6u8Ta7AOkeuCVAhknGXR3Kl348RJ9dwzyuXdsklxuOCLwrPCyaFOBMIoQYbs1ZwXbVxf7cJBCV01CQn-pM1COVDoGvxpVdc3hq1oGMbB7lkIRQh1ivg4YvPU-S2IVwOgfY-vuU3nTsjYod2$h0Z1AmqtNLKw59iQZEQqTx$HAUyuEYTBH7S+q-li3s5dypUEz$JFO6Nb0gti3aJhfRrM-GNt2hDioj+uPwbEfrof0pjuZjtqfnVA+7BcGufvQFnY105qNJJ8Z1BOs8Lw675-6XL2mw$wtd5maEowZgEgv7lj9QtgY4UIggVIntX+EuESt6$9LMr5QRuVH5tih2koE4nlbafMPCH3p9w9w2Z1dvmzZtvuFJHVLR-nMHtyUTQEdO8apkCiGOwPmJ+$rIkN-4JfpBrDN0gBKnxduf-bVXOvefNLLZjsG8qbDbgYigQzZxG9tCqhMdn6Qz8Vi6moO5nHyFGAYqcJ$-K1CAY$tjv6cllKgTNXOg0IhvKzJZpqxpZkIEHDbDTVju32HeIKRz-M3+zBnqkvuLv-smrcif-Ddg6mh0mkX06x$hjiZvUaLhF+GY7xzEpFVwyvNN5KQ4Zb8xHid6By0hKPBLKeSrUHzhjAgeg2lYg-RnYn+odHuuCF1E3w3ZD11qCAXmXi10qQskOlHu+8oR$z43YoF92CgwEMxcZV9IeOwuT2NPpjz9pjtQobkIiHkcvTOZEm1$yp75Onj5jYSdp5HBhV7xqFnN9PRILtLP-yiDhF9iTZE6idfZMj+F8GicT7LYROo56shPYG-y4IpIYsF5pPacQbpKy6iJaNQjg1M117aL+UoJspKRpOVj62mjuyMYr41OoS6+F-ZlaP49XE3r1uRBJKYQ3aFU292fSXr5XCXH0P3JGXrLzUx2FAs7DU4XtKesAstgkAFM7UzR-Bl9TOF3tBP2YthRpumqGONm0mNBmnwPfQEF$XJAL2sZOeHpP5rA-fzoNIakQihb+fJYKbpEBuh+FCPO4nst3Fv6nOqBI9hxl8lRk4mn4sMBAtgu2nyrLK6w1u4Hq9KS$88ar2cqNLTHfZvtOECrwpIY8t6Gm3-v59lJdt6c3anXRc+HJhB7tytAUSHvNrdSR-QdbRh9ihM9w2OpLev5MHDIJBSn290H-vLtKE3VtMV+21C7QhjnfV4dJnT8u3Vm$HfsftOdg$oMOw5cTiejNNAxJJqKDFYDtZ7Ba66I7MXe+tAbNbA$HKZ-k0K$+pVLwkH2yGG6xFJL$zu9h-r9ML0LRP$5h-phnD3FPAQuY$feAQU7axmAyTTVQ$uswGDKoGpNYsGHQf3d3t8ws$hx1Sjy0f3TsRwcVrX-PuB5XA9HrfmAMhHyjVompqgCzT+aqoPIznfL1vyhl7FyiTkARES26ES8OBn$xMXZpUPALLIFDru6MyuviPjZI1kb+5m2KJrKkUmE4G6u$xv4-OGyHq1PIePu2mLmdn+DdnTmN+CUPmrp2F2ASD5uvRuP8CEHIwXkHUxP5g0mT$rSmgRB7+GYukRzpz-BMivzcLky5fm8a+VYFGyngmAFbBXdgK6V$QifbCp9JAIKz5qzG9eG7k7sc+xr8L3+rnpxpCzLJawOSeQzqoePorglOlGBKx6DD9aa0BzbLaLOuRkVBtfMoZ0zahR6e4oZhaAVigDHBFmhEx7IYYkHBMS1-y1JnHPycvMCYob$91iB6h9Ye6AOjhByf18XxumeqQq-wIuwg6dV$H6SPl+OflAlFtzTGRxk-+DvsEug55OYCjEdfqiOs3g2SQZQ$J5psR1pMsz8xrya0IrpvOhDu4iqNEwtGSf5Emj27aUi0kjfAqQCMYV93Sz5$KcsTdU5Nr8eV$gEDT+$QmNaA$Rj$9-Av+JYZgNE8TABOejJdYJiNgxhGq1h+R9z1wJUXv6RsGmCGKcs$ZOkvvYcggk4oecwr44yc38RINlBdUmdvl$59ey4GhZz627XkEbSc9lPNpMA$YiJGgjmYcc5GcEODTekAx0axjZzm4rO8o2RwwQIvoY9uurByBbVzy3tV3Jko3Puv8HEriBlPV1Q-yBqQeyaQCZngClfAB2gY9ONnKz28i1rFHwqshrvxnRLs6rQV4ldEd4ti85Yqrz$fTZ+26uuKF1ch7-jic9k6Tb2L-M4Ljfv+vrLJRfHxArw3JuiETgny7EQMfkc07g-uLrFgkibUrL7SzCcVv5ElJFhK4F30-8FaakaUKcmNDbvk1-HIm4oZosKdyoCPdZay$xxfc7+dVU140A7fDJw+gNu0DuMPhlYuEmDCvGT8DiLVFPtkFL3uteqU9DTFvUkaIT9Pe+YIIj9SvSrXqUyLQhOFGzCXSjcQFqD5pQYpvKeitAzVq8mMfQSD1DCbKuDVPwEP3pACfzOPVSyEleKrskGuAHkm49A0Tnszduu+4plHPOnMDGM58Q-Y8UKIL8vbp3jZ5ltkBqIZ7u$QHZvGDOBSY6cPnDKONzd0xa34vpvOHwsSJO7x9gbK7$Me-FoEZ3O8eCGPP0oKUB7NN-1N+RCn6c0laKAAURT6$A$vQvfeXCXIAeaI+NyowtcGUhXONXtOYjg$gwtk1Cl27t1i5sfwh6e$GBUrAil4+AkYErBUKDRpx2I7Q$HExJCbTRB3qxmPNTGA0P7+hZUUToHfNwLIFMOk0V3nul64sy4lDRCaOvVSJ72i58-fTqhnHTPqwwYOfeZO9cpSFCry5inA5XI4eV6+Ac22U+tgHDlO1bbz+B5C5INpN9zN1prm5qFjd0sQ-4eYVekoVot1kHiBwuewKl8OdsB0nUHI379Dyvf8B1Qkba+nHQfIxIrl$z2HB$YYTigQ0ps54nrJA4ndavjfuVFAFV+L57-4fv8tYXnDIUaN9c2yXHDwaeLHOLje6giGfv8o8738SF9fPoO1UB-0FaMqjmFla6Y98EYyDelqYuAgiyBSgxlo9I3fsxITanTsgBddCsew2ReOGd1I1BhIFcCi6bioqfvXe69lYt2pzO$oi$Rto0YJM2g+veK+acywvDJY3FhSxi7+KUx$rLqaphPUnTawJkEfD6cNIG8hrVgGrMzZudKDK5zgS3HAkbSHDcAIg4P9XzNRSZQTsp93AosNN39-a7-hC6aeGJUOjJQU$-vJXDK61pZaBfImcph7uxLeGTzr-62AqSGCDM$fG6Y9yVRUTTQC+x0093QeY8mlNXXI5DkQCguXVn$--KH7cilHZsgYw8iKLJUHO5y459IEtxf2hNtlX--7KpZJGPu52a20znkHUaNSK2VTES9ROSVmMwFyguQsG7mYojbZNkxNVsQHi+ou4x+lZ4ugTKjhS$ge7ZbibtDG6bgx2g3qj2DR5D0NXVt9zfz83FC-gj2SkwNsLLoar0PtYyFMKhGV5OsvTkqyLosi4BnFgIvz2IUp6FpV+yhImdO4EhuATemmEZkVVQd7V6juwfRjnE7jsDtYrz5k2GXLq$+Xbwx77Vm7twPe1SEVYHnonb4u5xVk$06vqmo54HJ-pY3tf0KvDhMg+q4OPzYuBdkG7hD5i8E-k$7uhpHYlahPNz0hvYKCb0f3tOCQircZIeuYSLffYCcnItrYHIH7js0jtLIytu0UFrDU3v-XstjA4xbdh1EA3vaYc4smPa1R-DEhuuuTtJQOYejR0aJ-bwY9$XCruBykpyu9CKu2TNfla53zTMPnQ4y$qrnua70e79zFZ6dBk+UiCZoR+du0t+NZg23-HkYXNaC7vJyi+0M8$z5YPupz-ZyFexquiD8V0Pj+kNDLLgZG1oKY3sxSrhL3VR7-MyBwgJPTt5FCbwbh0AmHV$zbsIkTuye$8rkmnqICB$ooDdfJl$VkROls8lBJfdvj2zO8bUQcZszOUgpb0HcSOdyh3$C49XfKzl2$hHdMiOm78cPrssRGag9U536H9tuY9X97cQn$Bo94-xf+vL-Zhne+eHi8p6zwbX5tvE$n2Yw28hIJZNXpVw-mcPpsPttUvo8n51G-Czm+xDtAhKTwdUCN7dAPpUt9vpkMtCuZYXX63oCjE-FQxOr2xhtOnZaH6oSIvF6MGXYphlUAf6oMZORUBwubHdSLMCE3FZ$i3E-p$IEdpxjPbRw9ThVpxE2qkVuyKx7H-CLEzGcvljRwP$B9VH1ulKN9vBMkJ$J7nUQjseHpRjQ57NKdYsm1XJ0VIxSjxywC+jHO0Dj80Rd7OLPvzNUczPIhmiLgkrcHfR8BgcLodXLp0GQCiTEsQLLD7wrhYDm98Qm6RNq1u941$wtjrQffuxIifPK9K6c$5pmJqxZpEvBsTwew8umJpcFjZ3ke4rs2QVD$Yi5sX5cEkC0uzg$TF62YKSnAbh4L$vg-mzuat0s2U6NLpL64G6+l5mBvT1K8OiTEIpx3ROuAznmkN$JmslgxAtzjJy411NsLKY1Nssvlr8licHNzr8d-7zP33FfJH8HPVixVsOQxJ3Xd0AJjiRVqry7OrcJ6w6rdVVzxrCjoDTlE6FaymgFpjAaTxcY54BUKiLi4rzGVa+v+viJPDYB$3IwI-jgyYFajVsq8rthliHFuSp4$7HvO52ezpzRB-n42amBZdlH2y+64qZ0zsBnomUg81UVG3I$yQ9TZXcx5db3wywaXGP8vUXM2MgJ5kxqM3Nd9Zxg88Oja2v2Kv9Bb3FdaxLJufwE00IJtd3Cx8wtH3uOUBk4SSP4u8xFPFFYyuJl2qnmB68jtmklXeRbF709kkERefDmqKUQqlrFfdaHNgyvFLuTd5w03fkrsxUQG+vcl-vTfO5GJIKoLpih3x4wjl6D5SsRwX14uLaHADgoblXxonFMqm0TS582572rPG5lSwfRV$T+17jViKS-GRRPl3akU-jqn2aGOnAkJ+zqe28oQpQtZQ6isEGUbaCfffJQ3$erMXMrV23tAIod3E0QTdBXk5T9woVUYt7J$xEqbNJyoq2xxYdI+BA-Utf6IpNl$ze4CiY9CBp96loGNGqYU3992rvyBDkxMORuZsG4R5CGssvh6zFwiTxDvtFH6DZDxT8n+URF1e7QZ0LISsEjZyZtpv1v$q8i91fqoS04JY1lxPADYSmAJ4j6-7NFpiTdRN3GRMcaoaGw$9LfbwfbF5+z5LMpmM-$-zQaCVqEBGecePqmNERmq7rs$t2g0jxc9rIm4jhhkm1MjH8kQQDnabtKBbeQLAZlosT5jD2Le$If2nt-w-IlVak$59bAe$GI++3QnbJKbb92g15P+y75ut8o4hxx8MTucLzpZ-ZuFv-xHVHX7VxKG6NlLRqMDdnqdfU$kDLRsUxVDcEHbNMQpp0TLCI0Arc4IuPzCnymqr2zAZxOulOKFf7UcwiacR78++g6B30MaOVzcCCynY7feH$L0Fu4x0p-pY5ptQsi5atGPpOYEAtUyLRkzpbK+2fObcX8IzJZjDwjyJ1O8ujqE-KlOxgJ9BZtasSAFBXSMkCSsyzwwD-39ga0o2hm$CHXjBpKRB5wJQIXY$NX3mu-t+zBVTtg414+G-tw2Ly7PAnENRbdnvynsV1pL9ImNEXMhbbSH4Abota2Zhv64J4St$8nj-+6QvFGO5QjmZ224ax6eRJxhIyJPNEqVo$SohsEDFq6IlKcYEwhBIoUtb9$Euo7JV9t7-BK9NFUnc2hTmcNniXoKtiByq3Fk0JRfJlAOTT$PAiBIgsrCgsxN4UgIiNkV4Q3-Oo-KwtzeA-MgmBCcEYJcDDaMYA+C5NMDR67a1skocxCl2jhlL3FdhH3pV8+KZt0xeZScXQtc$djQ10fUNNm3XcAsAYc-O9wj4oepgXJtvo8aSFOTAAXeu44-CPJ5Bj3wYUPgAHYb77pG5JGen6jkt54pVB9zM-ZDbnBP$rE2Np08zcN5f$p-8xRz6nh5ORueS6Akhj9+u1IydCHn8dcnF11Et7ehxCXsBt7JIB72LBRySJwfAVxCApdYjAIjPRiQh3jTlpKEuH2S5FqpwNy$f-v2OwXC193DFD-kU0uzASVyQC-FNUSBqqXNN3bU0BfvX5bTnbM5BlctmR-sv9vRth1eQ-3blAhFYBTUDAQJEjC7zUxC3RjgTuqPfRVRubAiajShtn-R2$FODdTDHGmYsC6wyABez89VD7vSJZ0X1F4eQho-wA5BSoeVdxNTLu--mnBi50hRGmOUBJ5d-BCuXrwdFgty9MRwqrtO4hVRTtYGo1mjpkDBosKFjasliMXd575oZxNJMPnHHPFSqCetkrepvmvNUnti-h0O0U386koBNk7O95M0wVblxwrwzfFFDQh5j9+O+AMft9KheSgUH4ksKP8abZusga3iKD-GVBrSD8$ohbyF+e6cxh0ia60roRbwCuMfnv8Mnj6F1EFkvl9QyxXPEfAQyGNQIfM9ZOvUD-q3F80B3nrUi12U+b7PiFuQNLQRmXwaHAZoyD-OyOscFyNjBXQVuSDL5Q2CGiCKZw$IoVRTa7P0QAVOYbQiA-NN6A3FNoRsMkE$ACnCjKISBNX3J5RFLoigMzXgn3SpOe43zuMYJ9st4g-Oq9-+qU92L3zfo6xC1T+S4K1dT-XuhQn3Gxe$pDkUYE9640dY+cV7z6JXGCoVK6i7+di8KCfnFoJ1M8F-7TUJViGtltZ149Q-onz9tp-UZ2gC3ogqNTMvp+2eNyUV2gcYT+D1tbehZ5qfdcpdca+mXc5BQPycTAAwGN9Lr1g8nlxceLI-Qe2PhL0GDAYlaQ$gOHonXlb9ChC2eqz6LX-g$8TGZbb98BIbo58pU+LrF9XYBfDiarQ$Catvn$H-6SoSx5FIJ7iPszK+F0hjHPVhkS0oY1TF-9wLv3bJ94m24BeC5LL5lu3EmwkwL9eTdRUG9c3P0J+8djgxMoaI1c5$1Fek0NbKOfaXdcxSsmxOJPFeSxfvAg73+xKXGK2VzVbnXEgtolzdAgvLHALaHYfNz2Fckvxk-6sZhV0mYBYY-6+a+JUY8$trrHfvf4jULJ-rdRTHVarBI-SZd1yP1gEVDKrJm+AxkgVqMT3KMzXM8X$LoexvJz3huK2ws7lulkxpJNIi1+EXBTi4wuKt+HIoci+pp7YDn2QQLB8JcH4O$5b$vDG9x0luHYxbFTJc7KsfkUNnScrtzym1zR2DRJFd5QnMy5apLAa6r$5ISIxIAUxvI$wkQXI60n4yjLLGCJCzHwPIF63pedHFRX1MDeeJwtpTTcrosGLg8jFIRIkDx1AH75s49CanpPEpc3qofP2bNwueeEbucQ14Z23FpF5hrDDcCJmOuftzPjngCrTNUGUbtUY1C0wnDifiJ9mvvkdu9Pt1$TG4P3NH2A-lJ14cPU09o-PKhMgaMIevwBQ7D+7rxqMrHLwG81eKqlf0GZzPSuHf$Rz-f3PPiUxyP04UX56M7PRjTHtnZbjkwDKiLqYZkEU5EU3X+FfQYRbpfn4B6idp$cs1QYpSClv8dNuZqO4ok676mhKMcc7Vermcjbiei0XizZaBpferrEfR3trXvhF3dv8XJBENxT0SCzdoe7t+cnHV97-SN4-oYMpr7pB8Y3uN-rY7hPMAXazKaAb77Yt9qedO-7d5-U8L7JHUAl5VfudiXKJjCyN3G4jXtSVfgbe0kry2aOeU$w2qmpLTs9fZprlJ48P0fkqxtkFe-pKVdFpfdeOp-jN-Ek-74IOcEGkiFrbF-vDLSrywtzQegjB2GYYJw$1Xw07Hs4-INDFe2319lPk6hjyZGQF+12gaeuryomU4B3JwXVziGKq$x3Lo89Y-FlRB5f6$tyB8F25u5uOnw77h8Hjio6vX42R+4ZetVHjmaKzrlnLvGxUiHwBlPIm+eE3fbfV6y7uTpVy2mvrbU3BD7ej6XVEGYYVyaIEuyKQ$Ns7XywyO-sdYXFKpPKm6i0cVx7bf4wK3oGrbBCqbRa49TmoUlpfxtr--tdqktBSoYsDul382az3bqgOKakm63xFHx5xgmmFP5q0eHkfVwEcZF5hbKucO8Tb08eML71eNv7LOqbiMHkV$9Su-+H$w7-PCJmQhZslQA9D-cm8NGeDsmrGFpiuILG3dsTp52Sdzs8t9FjLHrLtjBEKdshD9O4qH1fq-ySZiEm85c1qsTA3OB$UuI3umKFH7aHtEuzZw51q+ZO30Q9hQbBnOJ9flnqF$gg9o+LQu5MLippAKT$5bu4auyUsP2LQk+1JSrRfVciQD1lT$7iF42Cr3m+67JTndTwBPcokC5SFfZ5SopoDluhOJba4esHQZEqt3uuyJH4YGowjJ8voGC6Cu9v6-Fc1SyhScOVmlM6T4KrYIb4RABtqDtV+9nRf+FC9v7g1Pzme7OTLRdGtj6KR8OmI7n4PTQKawn0z2ywfHiUAQ7v7IThKp4F9rFR2rU4HIFdxFbM56FOYjM9h$TSesbhUPC-bJaoo5yVO$7XQUAMv$MgFqmx+-fDJQGC3oGRyfdwhyPEKJsguErBby0sOo5BL5Fasin7xQTfVfeX5GYHkKR+PdUva4njNmJV9jSX-VxpG-PoHU3sMvvqYv$PfpbRkKzBC$w6wOtmUy3caaNuHQPAx$JuajdQh8qRX3+IFgpqVv9Y$B10eePrDAx2qw+iSX3J6C7crFjqZrdGHPf$yiN6AqcwNiRP7QRBYOyr0770YYIaHe6ELz1lRIzTbGKl3NphN+Ym3-gt6Jo8vLshQTLzehVkOiDOKqcCB3FXeHXu64M5d7IvIaZS9duB7uoVkB1xN6jwpOVOA3tdcxb9s5oqgKH9TPNa9SlcUhsg57fPUkwait-Q-zxd4j3uko9LF9cQtk$tHo3li1I4l46gcASpaIHxkUcuf3JAQDY3s9TS$Fv3FjAOYy$TMFfUDnPYR6w+LK7ly+01HvEYJeSX$NxBqiw+R+ZJZa95d37SmT8uCJysiL4-6dX2sUwUCV5n+xusOK8ud3wTw7BgTLYyK7dY7hNBSzZbG0XjUPCI2k8HVJmkbygUId-t51mft0MsOo7g6+x49gGIYiqsD8Mes$5ZXN2O+CEwCYhPghKM5qX9z0OCVnRdf4FSarCVDbD93SaFAchqYRM52Fr-NFmS90GPesSF5tupnBBkKnwv8tMQV3puw-1p70t2K0$JPShgxJJb9tCPCgklVIhXHjasYGFwqiIVXhZ9KnJ0X5FuR2OkjxLfy8E9YPjfkvdvb-l3QHKHc8h3vMJ7iKgNmSRt6JIoMYdEkozpZDIE4hfQxVGm0s9gIr+-aNuQPkUZ4XVv$rxzaqX32kuGV--Kf5RH6k0gfrp0P3EwsHpHu5KfBz3AxLRtUr9TFkhUPcQMVyU3oDhxpLf+2LnKS4TRGQPYivBK4i9F7Uvg8xsTemOy$+GMU0uZ-iAtMEri+EdsIBBMvTlKawVJfBH+aP6YjSicwVz$m-LP01foGQqkvBgPByXOs4CyEsPgc9P7HpsCJ0FhMHAkfoJU-youtDPegzEg8UiF$vrLmKh0t-S+8gKEBvkpZgmBM$C-JVqUX22QrrmzeIHfRSb6uBj2o$Kumdp-rLv8IEqinRmCijsTeCFrVAvqUur6MPRz4jO$eimM+wlOg9-U8F7vwX5LN1u4D8H6xs1JSQ"}},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-out-s: 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$3PQXJN02Tft6CqtlixYrMg==\r\nset-cookie: cf_clearance=Y3_9Q5s.VO85OlRAqFfB2dTrk0CywSN3jGmQQoIUouE-1790490552-1.2.1.1-0xos2XuR8es9GyM5OWDs6icaJ8unVLMx3YGIrYMXJ7uZmKFCwKUPA2X_EE69pPWzGsd9UQZAum76gnam6AJqqAvKuHLcsw3LcAWcoHJSPilD3DSkTdLv3V3fDXGE1uymM2V31WOv1fiq222__oCOoNBxG0cdwugzeh2bVOHGhsxmITdW_ANygmKCmd077CP_O3YgqnZRe7rswHmUuGXQAkwCPPRg6Pr_2se0001xmCfEPY8VmAYo5meDAQ.M4LZ.rQoq1iZpf_Yk37IueLxOcWhGo_mtxQVhO4wjcUuvmESJty_3CEpNe5uFUo9bwFJsjx6yT.nP2V5GYTwALmA3MWiwpXPHQ.Gelpx8LkCsF0h3dkTPpGy7hlxutFfo2MmkPEH5kl1q_2ojVOMlr3vZ8AUBtJ7eEeqYUIQWqo2d2hI; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=alterhub.site; Expires=Mon, 27 Sep 2027 06:29:12 GMT\r\ntiming-allow-origin: https://alterhub.site\r\ndate: Sun, 27 Sep 2026 06:29:12 GMT\r\nserver-timing: cfExtPri\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a41873de3b510b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":[{"name":"cf_clearance","value":"Y3_9Q5s.VO85OlRAqFfB2dTrk0CywSN3jGmQQoIUouE-1790490552-1.2.1.1-0xos2XuR8es9GyM5OWDs6icaJ8unVLMx3YGIrYMXJ7uZmKFCwKUPA2X_EE69pPWzGsd9UQZAum76gnam6AJqqAvKuHLcsw3LcAWcoHJSPilD3DSkTdLv3V3fDXGE1uymM2V31WOv1fiq222__oCOoNBxG0cdwugzeh2bVOHGhsxmITdW_ANygmKCmd077CP_O3YgqnZRe7rswHmUuGXQAkwCPPRg6Pr_2se0001xmCfEPY8VmAYo5meDAQ.M4LZ.rQoq1iZpf_Yk37IueLxOcWhGo_mtxQVhO4wjcUuvmESJty_3CEpNe5uFUo9bwFJsjx6yT.nP2V5GYTwALmA3MWiwpXPHQ.Gelpx8LkCsF0h3dkTPpGy7hlxutFfo2MmkPEH5kl1q_2ojVOMlr3vZ8AUBtJ7eEeqYUIQWqo2d2hI","quoted":false,"path":"/","domain":"alterhub.site","expires":"2027-09-27T06:29:12Z","raw_expires":"Mon, 27 Sep 2027 06:29:12 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":true,"raw":"cf_clearance=Y3_9Q5s.VO85OlRAqFfB2dTrk0CywSN3jGmQQoIUouE-1790490552-1.2.1.1-0xos2XuR8es9GyM5OWDs6icaJ8unVLMx3YGIrYMXJ7uZmKFCwKUPA2X_EE69pPWzGsd9UQZAum76gnam6AJqqAvKuHLcsw3LcAWcoHJSPilD3DSkTdLv3V3fDXGE1uymM2V31WOv1fiq222__oCOoNBxG0cdwugzeh2bVOHGhsxmITdW_ANygmKCmd077CP_O3YgqnZRe7rswHmUuGXQAkwCPPRg6Pr_2se0001xmCfEPY8VmAYo5meDAQ.M4LZ.rQoq1iZpf_Yk37IueLxOcWhGo_mtxQVhO4wjcUuvmESJty_3CEpNe5uFUo9bwFJsjx6yT.nP2V5GYTwALmA3MWiwpXPHQ.Gelpx8LkCsF0h3dkTPpGy7hlxutFfo2MmkPEH5kl1q_2ojVOMlr3vZ8AUBtJ7eEeqYUIQWqo2d2hI; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=alterhub.site; Expires=Mon, 27 Sep 2027 06:29:12 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":15956,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T20:43:33.933419Z","times_seen":19037193,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ads.alterhub.site/promoframe.html#k=aee874e267daf21ad94938c5960ef7a1\u0026n=27873862\u0026i=n4_0eh5yg","fqdn":"ads.alterhub.site","domain":"alterhub.site","tld":"site"},"ip":{"addr":"104.21.42.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://alterhub.site/","date":"2026-09-27T06:29:12.171Z","timestamp":1790490552171,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alterhub.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 00:28:34 GMT","end":"Sat, 07 Nov 2026 01:28:30 GMT"},"fingerprint":{"sha1":"CC:30:2C:31:6D:59:8D:61:CD:11:F9:93:CE:16:C0:86:EE:F5:4A:5A","sha256":"FD:96:F8:0E:8C:08:48:55:A0:F2:69:BB:EA:8B:3A:98:9A:71:49:5F:30:C6:90:E1:9F:D3:7F:54:A3:38:1A:B6"}}},"request":{"raw":"GET /promoframe.html HTTP/1.1\r\nHost: ads.alterhub.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://alterhub.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=Y3_9Q5s.VO85OlRAqFfB2dTrk0CywSN3jGmQQoIUouE-1790490552-1.2.1.1-0xos2XuR8es9GyM5OWDs6icaJ8unVLMx3YGIrYMXJ7uZmKFCwKUPA2X_EE69pPWzGsd9UQZAum76gnam6AJqqAvKuHLcsw3LcAWcoHJSPilD3DSkTdLv3V3fDXGE1uymM2V31WOv1fiq222__oCOoNBxG0cdwugzeh2bVOHGhsxmITdW_ANygmKCmd077CP_O3YgqnZRe7rswHmUuGXQAkwCPPRg6Pr_2se0001xmCfEPY8VmAYo5meDAQ.M4LZ.rQoq1iZpf_Yk37IueLxOcWhGo_mtxQVhO4wjcUuvmESJty_3CEpNe5uFUo9bwFJsjx6yT.nP2V5GYTwALmA3MWiwpXPHQ.Gelpx8LkCsF0h3dkTPpGy7hlxutFfo2MmkPEH5kl1q_2ojVOMlr3vZ8AUBtJ7eEeqYUIQWqo2d2hI\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 308 \r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/html\r\ndate: Sun, 27 Sep 2026 06:29:12 GMT\r\nlocation: /promoframe\r\nrefresh: 0;url=/promoframe\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-id: arn1::7h8q7-1790490552190-6e02cc4f6a2a\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Jr3OLqRaoYEPkYCQsSzo%2BDyCCztdz30bJvIxZoDHZeFGSEWNbGcRGLPokol5pEtL5cF1Dc8lDMejNoffwDbwK58VW3f9ZZ4gBoPnW%2B0WFdBx8SLTmg%2BT3DKnfelQ3UtLBHhhTA%3D%3D\"}]}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a41873df1b5f0b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"308","status_text":"Permanent Redirect","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T20:43:33.933419Z","times_seen":19037193,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pl27873862.effectivecpmnetwork.com/aee874e267daf21ad94938c5960ef7a1/invoke.js","fqdn":"pl27873862.effectivecpmnetwork.com","domain":"effectivecpmnetwork.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://alterhub.site/","date":"2026-09-27T06:29:12.221Z","timestamp":1790490552221,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"effectivecpmnetwork.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 23:21:47 GMT","end":"Thu, 10 Dec 2026 23:21:46 GMT"},"fingerprint":{"sha1":"D6:4E:9E:FD:10:D2:53:EF:D6:DD:33:0A:D1:87:5B:BF:58:A8:9E:5C","sha256":"61:27:CD:75:F7:04:8C:96:76:E8:9F:15:C5:CD:AD:BD:7A:43:30:4D:F0:69:33:60:82:74:88:7D:67:1B:9C:D7"}}},"request":{"raw":"GET /aee874e267daf21ad94938c5960ef7a1/invoke.js HTTP/1.1\r\nHost: pl27873862.effectivecpmnetwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://alterhub.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 27 Sep 2026 06:29:12 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\naccept-ch: User-Agent,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Platform,Device-Stock-Ua,X-Device-User-Agent,X-Operamini-Phone-Ua,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile,X-Ucbrowser-Device-Ua\r\naccess-control-allow-origin: *\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\nx-envoy-upstream-service-time: 2\r\nHost: pl27873862.effectivecpmnetwork.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 7f840c141deaeca18ddbc723aa7149d5\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":46184,"size_decoded":19091,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (46182), with no line terminators","md5":"298e0801715681dbad150c81cc2e91e0","sha1":"35743b07a5ab50e842a2be6cb49f90ed453edbc7","sha256":"6ef24d8028cb8c171d3a7be8be0412a0e71337a90ba80319715be8885dd20124","sha512":"db08d8b8fe331f45125f8f915517712fbf2935aa3e25ee1ba6388210b211db8250bea5ccb79b44c9e0131b0775593285384bdb32297e0484d2862ef2aeca85c2","ssdeep":"768:tmmnugNJEOlhP92QfyREnzrcSzPYYIq9xOEA9Utws8tjJq1z4T4nmo8es6KChvpH:Umt3UwrcSzPYYIq9x1Wimp9ChvXrNKoP","tlshash":"1323c7a47f10db7e57a1e9bf22798c51f1660d8078ccd2c8e13f6dc8698a30a957d938","first_seen":"2026-09-27T06:30:15.186703Z","last_seen":"2026-09-27T06:30:15.186703Z","times_seen":1,"resource_available":true,"data":null}},"time_used":526,"timings":{"blocked":-1,"dns":48,"connect":92,"send":0,"wait":104,"receive":92,"ssl":190},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"pl27873862.effectivecpmnetwork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ads.alterhub.site/promoframe#k=aee874e267daf21ad94938c5960ef7a1\u0026n=27873862\u0026i=n4_0eh5yg","fqdn":"ads.alterhub.site","domain":"alterhub.site","tld":"site"},"ip":{"addr":"104.21.42.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://alterhub.site/","date":"2026-09-27T06:29:12.243Z","timestamp":1790490552243,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alterhub.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 00:28:34 GMT","end":"Sat, 07 Nov 2026 01:28:30 GMT"},"fingerprint":{"sha1":"CC:30:2C:31:6D:59:8D:61:CD:11:F9:93:CE:16:C0:86:EE:F5:4A:5A","sha256":"FD:96:F8:0E:8C:08:48:55:A0:F2:69:BB:EA:8B:3A:98:9A:71:49:5F:30:C6:90:E1:9F:D3:7F:54:A3:38:1A:B6"}}},"request":{"raw":"GET /promoframe HTTP/1.1\r\nHost: ads.alterhub.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://alterhub.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=Y3_9Q5s.VO85OlRAqFfB2dTrk0CywSN3jGmQQoIUouE-1790490552-1.2.1.1-0xos2XuR8es9GyM5OWDs6icaJ8unVLMx3YGIrYMXJ7uZmKFCwKUPA2X_EE69pPWzGsd9UQZAum76gnam6AJqqAvKuHLcsw3LcAWcoHJSPilD3DSkTdLv3V3fDXGE1uymM2V31WOv1fiq222__oCOoNBxG0cdwugzeh2bVOHGhsxmITdW_ANygmKCmd077CP_O3YgqnZRe7rswHmUuGXQAkwCPPRg6Pr_2se0001xmCfEPY8VmAYo5meDAQ.M4LZ.rQoq1iZpf_Yk37IueLxOcWhGo_mtxQVhO4wjcUuvmESJty_3CEpNe5uFUo9bwFJsjx6yT.nP2V5GYTwALmA3MWiwpXPHQ.Gelpx8LkCsF0h3dkTPpGy7hlxutFfo2MmkPEH5kl1q_2ojVOMlr3vZ8AUBtJ7eEeqYUIQWqo2d2hI\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\nage: 753996\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"promoframe\"\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; frame-src 'self' https: data: blob:; media-src 'self' https: data: blob:; connect-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self' https:; frame-ancestors https://alterhub.site https://www.alterhub.site;\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sun, 27 Sep 2026 06:29:12 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 18 Sep 2026 13:02:35 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::7h8q7-1790490552253-f3b36fc9d6eb\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ezH8wmXVUisnEJtLR9uAlswtEex3mtO9REZaObbiKYQRNkQ2d4ya8Bxg80wUY%2Fu99XubWv0qYJaNVokn5qaB%2FMiJmEApUNRq1Gvs4ZlytYnXFDuBUtiRG7DJlqCn7agS94pk3A%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: a41873df8b650b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3705,"size_decoded":3304,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"1e0d3faf8d68838811acc2295bc4c8bf","sha1":"099464ea459114da3161e81c364578a8e332b3db","sha256":"f9230bb5c891635d4c3605b3a6c4061ba69d39e336e6ffc88aacbde15bf3676e","sha512":"8f7ba179af9896e4c71ba80e5ae5d3bc62d9ef20c472c50e937f85c356420f92f0fd0fb55aa33abdaecca740a60473bb380fcf8710ca8ea66327946d38c494d1","ssdeep":"","tlshash":"cc71943f2ea122b8755302f53abfa1443336c12a6111d9a0bcaee258ffd0e155427fd8","first_seen":"2026-09-27T06:30:15.062796Z","last_seen":"2026-09-27T06:30:56.861643Z","times_seen":2,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tr.rbxcdn.com/180DAY-8d95b4decb13fb261396aab7bf79b9ff/256/256/Image/Png/noFilter","fqdn":"tr.rbxcdn.com","domain":"rbxcdn.com","tld":"com"},"ip":{"addr":"143.204.238.74","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://alterhub.site/","date":"2026-09-27T06:29:12.523Z","timestamp":1790490552523,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rbxcdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 09 Sep 2026 00:00:00 GMT","end":"Thu, 25 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"75:D8:06:E9:90:C5:4F:78:20:E1:DC:B0:2D:7F:04:D1:43:36:17:D5","sha256":"3B:CA:A7:4C:D5:BA:BE:D5:47:44:99:0D:4A:D5:DF:17:82:35:B8:6B:67:AF:9F:D7:A1:77:B6:43:87:6A:83:9B"}}},"request":{"raw":"GET /180DAY-8d95b4decb13fb261396aab7bf79b9ff/256/256/Image/Png/noFilter HTTP/1.1\r\nHost: tr.rbxcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://alterhub.site/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/Png\r\ncontent-length: 103831\r\ndate: Mon, 03 Aug 2026 22:33:41 GMT\r\nserver: public-gateway\r\ncache-control: no-cache\r\nedge-cache-tag: 180DAY-8d95b4decb13fb261396aab7bf79b9ff\r\nstrict-transport-security: max-age=31536000\r\nx-frame-options: SAMEORIGIN\r\nroblox-machine-id: 0007945b-1862-5a3a-25a1-ea3065d286c0\r\nx-envoy-upstream-service-time: 619\r\nx-terms-message: Terms apply https://rblx.co/TOU.\r\nx-ratelimit-limit: 300000, 300000;w=60, 70000\r\nx-ratelimit-remaining: 270627, 70000\r\nx-ratelimit-reset: 19, 0\r\nx-ingress-proxy: true\r\nx-roblox-edge: c088\r\nreport-to: {\"group\":\"network-errors\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://ncs.roblox.com/upload\"}]}\r\nnel: {\"report_to\":\"network-errors\",\"max_age\":604800,\"success_fraction\":0,\"failure_fraction\":0.05,\"response_headers\":[\"Rbx-Cdn-Provider\",\"vary\"]}\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 4888a1b692b693505c9036bc998623cc.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: BrWubdcujkZEHYzP3XAQMek8caqkDOJtXfy956fw_TlP458jmKkPYA==\r\nage: 4694130\r\nrbx-cdn-provider: aws\r\ntiming-allow-origin: *\r\nvary: Origin\r\nserver-timing: cdn-cache-hit,cdn-pop;desc=\"ARN53-P4\",cdn-rid;desc=\"BrWubdcujkZEHYzP3XAQMek8caqkDOJtXfy956fw_TlP458jmKkPYA==\",cdn-hit-layer;desc=\"EDGE\",cdn-downstream-fbl;dur=2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":103831,"size_decoded":105135,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGB, non-interlaced","md5":"10dfb0622427df3cd214a32b5ebeafd3","sha1":"3b62615a019fea21a7bad7c295e3a3b844f6f27f","sha256":"7fd6d2f1a96f0a53d790554df873285549f9aba7ea9178a52b97e3b005179d90","sha512":"06e8ca9d3b20320e22022bbc4e19fbffc3d986c4a4e51b7c57e15861893f590f92c3c9fe587f44f089c3ef5d431e0ffc6126ff60f83ebf5f340768e6d1ef5ddc","ssdeep":"3072:fLUrIBJ1gmG1KmhZwMWjzR0AWH7l+b/WbDhhqpLYuF:QreFWXrAWHYbchhuN","tlshash":"cea31291b104d61947a251b60252d72f9f7cde871098ef71091add8bfc4bbea84b1a33","first_seen":"2026-09-27T06:30:15.188057Z","last_seen":"2026-09-27T06:30:57.001772Z","times_seen":2,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":8,"send":0,"wait":48,"receive":1,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sleepoverlimitprofound.com/pixel/ase","fqdn":"sleepoverlimitprofound.com","domain":"sleepoverlimitprofound.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ads.alterhub.site/promoframe#k=3ae6276d5f69eb697421a09960b7da53\u0026n=28128394\u0026i=n3_ke4tgo","date":"2026-09-27T06:29:13.870Z","timestamp":1790490553870,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sleepoverlimitprofound.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 04:20:18 GMT","end":"Tue, 24 Nov 2026 04:20:17 GMT"},"fingerprint":{"sha1":"25:9A:58:CA:68:4D:EC:36:88:A4:BC:7F:2C:41:BE:B7:58:63:32:E3","sha256":"08:E4:A1:17:A8:1B:17:9D:84:10:F1:9B:37:A3:57:FE:8C:98:BA:9C:11:0D:A1:97:5C:AA:71:F0:6A:4A:28:5E"}}},"request":{"raw":"POST /pixel/ase HTTP/1.1\r\nHost: sleepoverlimitprofound.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 2937\r\nOrigin: https://ads.alterhub.site\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2937,"data":"[{\"placement_key\":\"3ae6276d5f69eb697421a09960b7da53\",\"template_body\":\"body_native_pl_general\",\"event_name\":\"base.invoke_init.success\",\"id_frontend_invoke\":\"01a0e18d-a9c1-7be3-ad0c-3d3fd35f1236\",\"script_version\":\"\"},{\"placement_key\":\"3ae6276d5f69eb697421a09960b7da53\",\"template_body\":\"body_native_pl_general\",\"event_name\":\"base.cep.success\",\"id_frontend_invoke\":\"01a0e18d-a9c1-7be3-ad0c-3d3fd35f1236\",\"script_version\":\"\",\"extra_json\":{\"cpk\":\"1964b0264f479cf1ad7ae7082f5db52e\"}},{\"placement_key\":\"3ae6276d5f69eb697421a09960b7da53\",\"template_body\":\"body_native_pl_general\",\"event_name\":\"base.cesb.success\",\"id_frontend_invoke\":\"01a0e18d-a9c1-7be3-ad0c-3d3fd35f1236\",\"script_version\":\"\",\"extra_json\":{\"cpk\":\"9934f3af5b5e41f86ecd27cc4a72d823\"}},{\"placement_key\":\"3ae6276d5f69eb697421a09960b7da53\",\"template_body\":\"body_native_pl_general\",\"event_name\":\"base.cear.success\",\"id_frontend_invoke\":\"01a0e18d-a9c1-7be3-ad0c-3d3fd35f1236\",\"script_version\":\"\",\"extra_json\":{\"cpk\":\"f3dfac6b133adcea2870cc1171f8be84\"}},{\"placement_key\":\"3ae6276d5f69eb697421a09960b7da53\",\"template_body\":\"body_native_pl_general\",\"event_name\":\"base.render.success\",\"id_frontend_invoke\":\"01a0e18d-a9c1-7be3-ad0c-3d3fd35f1236\",\"script_version\":\"\"},{\"placement_key\":\"3ae6276d5f69eb697421a09960b7da53\",\"template_body\":\"body_native_pl_general\",\"event_name\":\"base.render.success\",\"id_frontend_invoke\":\"01a0e18d-a9c1-7be3-ad0c-3d3fd35f1236\",\"script_version\":\"\"},{\"placement_key\":\"3ae6276d5f69eb697421a09960b7da53\",\"template_body\":\"body_native_pl_general\",\"event_name\":\"base.render.success\",\"id_frontend_invoke\":\"01a0e18d-a9c1-7be3-ad0c-3d3fd35f1236\",\"script_version\":\"\"},{\"placement_key\":\"3ae6276d5f69eb697421a09960b7da53\",\"template_body\":\"body_native_pl_general\",\"event_name\":\"base.render.success\",\"id_frontend_invoke\":\"01a0e18d-a9c1-7be3-ad0c-3d3fd35f1236\",\"script_version\":\"\"},{\"placement_key\":\"3ae6276d5f69eb697421a09960b7da53\",\"template_body\":\"body_native_pl_general\",\"event_name\":\"base.impression.success\",\"id_frontend_invoke\":\"01a0e18d-a9c1-7be3-ad0c-3d3fd35f1236\",\"script_version\":\"\"},{\"placement_key\":\"3ae6276d5f69eb697421a09960b7da53\",\"template_body\":\"body_native_pl_general\",\"event_name\":\"base.impression.success\",\"id_frontend_invoke\":\"01a0e18d-a9c1-7be3-ad0c-3d3fd35f1236\",\"script_version\":\"\"},{\"placement_key\":\"3ae6276d5f69eb697421a09960b7da53\",\"template_body\":\"body_native_pl_general\",\"event_name\":\"base.impression.success\",\"id_frontend_invoke\":\"01a0e18d-a9c1-7be3-ad0c-3d3fd35f1236\",\"script_version\":\"\"},{\"placement_key\":\"3ae6276d5f69eb697421a09960b7da53\",\"template_body\":\"body_native_pl_general\",\"event_name\":\"base.impression.success\",\"id_frontend_invoke\":\"01a0e18d-a9c1-7be3-ad0c-3d3fd35f1236\",\"script_version\":\"\"},{\"placement_key\":\"3ae6276d5f69eb697421a09960b7da53\",\"template_body\":\"body_native_pl_general\",\"event_name\":\"base.ad_request.success\",\"id_frontend_invoke\":\"01a0e18d-a9c1-7be3-ad0c-3d3fd35f1236\",\"script_version\":\"\",\"extra_json\":{\"banners_count\":4}}]"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 27 Sep 2026 06:29:14 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: Sec-Ch-Ua-Platform, Sec-Ch-Ua-Model, Sec-Ch-Ua-Mobile, X-Device-User-Agent, X-Operamini-Phone-Ua, User-Agent, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Ua-Full-Version, Device-Stock-Ua, X-Ucbrowser-Device-Ua, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua, Sec-Ch-Ua-Platformuser-Agent\r\nHost: sleepoverlimitprofound.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":4290,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T20:43:33.933419Z","times_seen":19037193,"resource_available":true,"data":null}},"time_used":375,"timings":{"blocked":0,"dns":0,"connect":92,"send":0,"wait":95,"receive":0,"ssl":188},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-26","alert":"Sinkholed","trigger":"sleepoverlimitprofound.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.bakestubborn.com/sb/notifications/utility/default/us/blog/financeskipper/message_redcircle2/16/img/sale3.jpg","fqdn":"cdn.bakestubborn.com","domain":"bakestubborn.com","tld":"com"},"ip":{"addr":"104.21.74.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ads.alterhub.site/promoframe#k=fdfdd92a59e588025342002253695a24\u0026w=468\u0026h=60\u0026i=u2_h3rpj0","date":"2026-09-27T06:29:14.497Z","timestamp":1790490554497,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bakestubborn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 10:45:38 GMT","end":"Sun, 29 Nov 2026 11:44:06 GMT"},"fingerprint":{"sha1":"CC:2C:E2:22:5E:AA:1C:23:69:1C:A8:45:D8:E3:11:DD:72:0F:3A:7F","sha256":"BF:DE:33:C4:70:F3:0B:0C:27:4F:85:FB:EB:B1:8B:DF:D8:F6:7A:95:F2:7D:D9:E6:40:CC:60:74:A0:77:92:D1"}}},"request":{"raw":"GET /sb/notifications/utility/default/us/blog/financeskipper/message_redcircle2/16/img/sale3.jpg HTTP/1.1\r\nHost: cdn.bakestubborn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 06:29:14 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 19 Jan 2024 14:21:26 GMT\r\npriority: u=5,i\r\netag: \"65aa8566-fc82\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\naccept-ranges: bytes\r\nage: 2294179\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j8ikLpPa5L2wvZFExKU%2Bry%2FBhZm7XXe9HrfXFQvEhVFI0HlA4%2FU7d7d09y4Tk%2BJmO2yVTRfbE4rtGmircnYVSMrBxUVMwJFAufPflTmltqx2UuwIU1DqEDDlLS9l5EUHcbMIbmxz7w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a41873ed994f1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 64642\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":64642,"size_decoded":65478,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=242, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=364], progressive, precision 8, 364x242, components 3","md5":"61f7b1fa1698507638df7882e2bdfcaf","sha1":"89134af9a734f4c30d0db01ea36c86895e46b7e3","sha256":"bc0a583f7e3c834e53d5263ecc90d279b27460ea2e9bce56b7ac6b129eb5849c","sha512":"359d9aab944bc2fe6dd5751a385cb4088b39539606e8f460f923ce597823dcfc0472f8ab9662a8808acaff4ed6fe6e5514e98418a9387e718061293b067708c5","ssdeep":"1536:7BNUdceBNUdcVApV4vIfhczULHmQ88PbzaRKg:VzczCLRLrb+RKg","tlshash":"1b53d016cb625c03edc8123a148cc286b2b3afc58b534387b99c7493bfb8a955c65793","first_seen":"2023-04-14T17:39:35Z","last_seen":"2026-10-10T21:16:58.779034Z","times_seen":829,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"cdn.bakestubborn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"cdn.bakestubborn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alterhub.site/logo.png","fqdn":"alterhub.site","domain":"alterhub.site","tld":"site"},"ip":{"addr":"104.21.42.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alterhub.site/","date":"2026-09-27T06:29:11.636Z","timestamp":1790490551636,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alterhub.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 00:28:34 GMT","end":"Sat, 07 Nov 2026 01:28:30 GMT"},"fingerprint":{"sha1":"CC:30:2C:31:6D:59:8D:61:CD:11:F9:93:CE:16:C0:86:EE:F5:4A:5A","sha256":"FD:96:F8:0E:8C:08:48:55:A0:F2:69:BB:EA:8B:3A:98:9A:71:49:5F:30:C6:90:E1:9F:D3:7F:54:A3:38:1A:B6"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: alterhub.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://alterhub.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 35793\r\ncache-control: public, max-age=86400, stale-while-revalidate=3600\r\ncontent-disposition: inline; filename=\"logo.png\"\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; frame-src 'self' https: data: blob:; media-src 'self' https: data: blob:; connect-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self' https:;\r\ncontent-type: image/png\r\ndate: Sun, 27 Sep 2026 06:29:11 GMT\r\netag: \"b30492cf7dcd04f149fdf83974f64f66\"\r\nlast-modified: Thu, 17 Sep 2026 10:29:46 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::2xpvh-1789676779499-158cc54a7863\r\nserver-timing: cfExtPri\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ROX0r%2B%2BvJnsHXMOCL9b5Q6K%2BBKJB%2BLnzQcbxN%2FhXhqKuuWPurrxR8U0hNCo9thQ7zvtonqTVpyXMneryvElrQe4sVQXX2qiRLcpaWq509qdtIhqt%2BXAcsRmEKWA9wEBr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a41873dbbad80b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 36775\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":36775,"size_decoded":38267,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"b30492cf7dcd04f149fdf83974f64f66","sha1":"697f8116ae7258f96fdc8e575d9217d0561a819e","sha256":"48714eead8381395628a7730a417d2d60c7afa2cb7eb48f00cee45ee364115c0","sha512":"7af92369e8b331e67936405d19a9df86bfbccb6b8e76b172edc1697df844dd2e1bd69ce5f02e6ca9ff7e7a0619b2fa300d99582980cf3731e7e9c601da027aa6","ssdeep":"768:O8QZ/xPVFsTJEkZjQZl8CVGOEGFkxQLoXm7pc9lLt+2jf38T6hWze0Xua:O8QTw6CjDCUDLOctPzQea","tlshash":"9af2e1477874607668a308ef34b65b2957a664c0a4a11f355b33bf1a77343f83c9de09","first_seen":"2026-09-27T06:27:52.386786Z","last_seen":"2026-09-27T06:30:56.855844Z","times_seen":4,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ads.alterhub.site/promoframe.html#k=3ae6276d5f69eb697421a09960b7da53\u0026n=28128394\u0026i=n3_ke4tgo","fqdn":"ads.alterhub.site","domain":"alterhub.site","tld":"site"},"ip":{"addr":"104.21.42.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://alterhub.site/","date":"2026-09-27T06:29:12.169Z","timestamp":1790490552169,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alterhub.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 00:28:34 GMT","end":"Sat, 07 Nov 2026 01:28:30 GMT"},"fingerprint":{"sha1":"CC:30:2C:31:6D:59:8D:61:CD:11:F9:93:CE:16:C0:86:EE:F5:4A:5A","sha256":"FD:96:F8:0E:8C:08:48:55:A0:F2:69:BB:EA:8B:3A:98:9A:71:49:5F:30:C6:90:E1:9F:D3:7F:54:A3:38:1A:B6"}}},"request":{"raw":"GET /promoframe.html HTTP/1.1\r\nHost: ads.alterhub.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://alterhub.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=Y3_9Q5s.VO85OlRAqFfB2dTrk0CywSN3jGmQQoIUouE-1790490552-1.2.1.1-0xos2XuR8es9GyM5OWDs6icaJ8unVLMx3YGIrYMXJ7uZmKFCwKUPA2X_EE69pPWzGsd9UQZAum76gnam6AJqqAvKuHLcsw3LcAWcoHJSPilD3DSkTdLv3V3fDXGE1uymM2V31WOv1fiq222__oCOoNBxG0cdwugzeh2bVOHGhsxmITdW_ANygmKCmd077CP_O3YgqnZRe7rswHmUuGXQAkwCPPRg6Pr_2se0001xmCfEPY8VmAYo5meDAQ.M4LZ.rQoq1iZpf_Yk37IueLxOcWhGo_mtxQVhO4wjcUuvmESJty_3CEpNe5uFUo9bwFJsjx6yT.nP2V5GYTwALmA3MWiwpXPHQ.Gelpx8LkCsF0h3dkTPpGy7hlxutFfo2MmkPEH5kl1q_2ojVOMlr3vZ8AUBtJ7eEeqYUIQWqo2d2hI\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 308 \r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/html\r\ndate: Sun, 27 Sep 2026 06:29:12 GMT\r\nlocation: /promoframe\r\nrefresh: 0;url=/promoframe\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-id: arn1::7h8q7-1790490552180-eabeb8ff6a5e\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CR%2BMFbhtjPPp7S2wXYIr9xiMcDCa%2FFb%2BqwRpgSO%2B7e2Z0IBeQ9iL3lxyznkDxYHdZKKfwGwUVHzpdsbc1aq%2FiRqyUICCXHcqfOqJU41NY2FgzxoIqb6tpvXsS4QDlY9F8OYf3Q%3D%3D\"}]}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a41873df0b5c0b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"308","status_text":"Permanent Redirect","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T20:43:33.933419Z","times_seen":19037193,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ads.alterhub.site/promoframe#k=3ae6276d5f69eb697421a09960b7da53\u0026n=28128394\u0026i=n3_ke4tgo","fqdn":"ads.alterhub.site","domain":"alterhub.site","tld":"site"},"ip":{"addr":"104.21.42.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://alterhub.site/","date":"2026-09-27T06:29:12.207Z","timestamp":1790490552207,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alterhub.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 00:28:34 GMT","end":"Sat, 07 Nov 2026 01:28:30 GMT"},"fingerprint":{"sha1":"CC:30:2C:31:6D:59:8D:61:CD:11:F9:93:CE:16:C0:86:EE:F5:4A:5A","sha256":"FD:96:F8:0E:8C:08:48:55:A0:F2:69:BB:EA:8B:3A:98:9A:71:49:5F:30:C6:90:E1:9F:D3:7F:54:A3:38:1A:B6"}}},"request":{"raw":"GET /promoframe HTTP/1.1\r\nHost: ads.alterhub.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://alterhub.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=Y3_9Q5s.VO85OlRAqFfB2dTrk0CywSN3jGmQQoIUouE-1790490552-1.2.1.1-0xos2XuR8es9GyM5OWDs6icaJ8unVLMx3YGIrYMXJ7uZmKFCwKUPA2X_EE69pPWzGsd9UQZAum76gnam6AJqqAvKuHLcsw3LcAWcoHJSPilD3DSkTdLv3V3fDXGE1uymM2V31WOv1fiq222__oCOoNBxG0cdwugzeh2bVOHGhsxmITdW_ANygmKCmd077CP_O3YgqnZRe7rswHmUuGXQAkwCPPRg6Pr_2se0001xmCfEPY8VmAYo5meDAQ.M4LZ.rQoq1iZpf_Yk37IueLxOcWhGo_mtxQVhO4wjcUuvmESJty_3CEpNe5uFUo9bwFJsjx6yT.nP2V5GYTwALmA3MWiwpXPHQ.Gelpx8LkCsF0h3dkTPpGy7hlxutFfo2MmkPEH5kl1q_2ojVOMlr3vZ8AUBtJ7eEeqYUIQWqo2d2hI\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\nage: 753996\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"promoframe\"\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; frame-src 'self' https: data: blob:; media-src 'self' https: data: blob:; connect-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self' https:; frame-ancestors https://alterhub.site https://www.alterhub.site;\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sun, 27 Sep 2026 06:29:12 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 18 Sep 2026 13:02:35 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::7h8q7-1790490552222-834e84f4df8c\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tqa1XRUDIse2soMUDvOfbp31cA%2BZCFv%2FhgJ4XGKeDhUImt0hFnQF%2F5CFMeNs0BCceSoABZfkhlqAZlCq4jsRtwM3G%2BEsWh77x6tZVX1M5dFEHEfAtiPMfdymDAeZsqy%2BBILvSQ%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: a41873df4b640b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3705,"size_decoded":3310,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"1e0d3faf8d68838811acc2295bc4c8bf","sha1":"099464ea459114da3161e81c364578a8e332b3db","sha256":"f9230bb5c891635d4c3605b3a6c4061ba69d39e336e6ffc88aacbde15bf3676e","sha512":"8f7ba179af9896e4c71ba80e5ae5d3bc62d9ef20c472c50e937f85c356420f92f0fd0fb55aa33abdaecca740a60473bb380fcf8710ca8ea66327946d38c494d1","ssdeep":"","tlshash":"cc71943f2ea122b8755302f53abfa1443336c12a6111d9a0bcaee258ffd0e155427fd8","first_seen":"2026-09-27T06:30:15.062796Z","last_seen":"2026-09-27T06:30:56.861643Z","times_seen":2,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tr.rbxcdn.com/180DAY-3afe0aa4d7318f86f753ce97914210f0/256/256/Image/Png/noFilter","fqdn":"tr.rbxcdn.com","domain":"rbxcdn.com","tld":"com"},"ip":{"addr":"143.204.238.74","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://alterhub.site/","date":"2026-09-27T06:29:12.519Z","timestamp":1790490552519,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rbxcdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 09 Sep 2026 00:00:00 GMT","end":"Thu, 25 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"75:D8:06:E9:90:C5:4F:78:20:E1:DC:B0:2D:7F:04:D1:43:36:17:D5","sha256":"3B:CA:A7:4C:D5:BA:BE:D5:47:44:99:0D:4A:D5:DF:17:82:35:B8:6B:67:AF:9F:D7:A1:77:B6:43:87:6A:83:9B"}}},"request":{"raw":"GET /180DAY-3afe0aa4d7318f86f753ce97914210f0/256/256/Image/Png/noFilter HTTP/1.1\r\nHost: tr.rbxcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://alterhub.site/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/Png\r\ncontent-length: 98234\r\ndate: Sat, 19 Sep 2026 20:09:53 GMT\r\nserver: public-gateway\r\ncache-control: no-cache\r\nedge-cache-tag: 180DAY-3afe0aa4d7318f86f753ce97914210f0\r\nstrict-transport-security: max-age=31536000\r\nx-frame-options: SAMEORIGIN\r\nroblox-machine-id: 12ffd2c9-ae1c-2af9-a7d7-c7a135072b6f\r\nx-envoy-attempt-count: 1\r\nx-envoy-upstream-service-time: 249\r\nx-terms-message: Terms apply https://rblx.co/TOU.\r\nx-ratelimit-limit: 300000, 300000;w=60\r\nx-ratelimit-remaining: 263830\r\nx-ratelimit-reset: 7\r\nx-ingress-proxy: true\r\nx-roblox-edge: c088\r\nreport-to: {\"group\":\"network-errors\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://ncs.roblox.com/upload\"}]}\r\nnel: {\"report_to\":\"network-errors\",\"max_age\":604800,\"success_fraction\":0,\"failure_fraction\":0.05,\"response_headers\":[\"Rbx-Cdn-Provider\",\"vary\"]}\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 4888a1b692b693505c9036bc998623cc.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: Mq1wn3kWE3Rr5XaC3_wTzOrp6GvzXm23bU0RdWQVoTk-ZGs1XK0bGw==\r\nage: 641959\r\nrbx-cdn-provider: aws\r\ntiming-allow-origin: *\r\nvary: Origin\r\nserver-timing: cdn-cache-hit,cdn-pop;desc=\"ARN53-P4\",cdn-rid;desc=\"Mq1wn3kWE3Rr5XaC3_wTzOrp6GvzXm23bU0RdWQVoTk-ZGs1XK0bGw==\",cdn-hit-layer;desc=\"EDGE\",cdn-downstream-fbl;dur=5\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":98234,"size_decoded":99544,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGB, non-interlaced","md5":"5b54421160b5c1865f442f729db6172a","sha1":"804e1bb8bfa5dbddbc810f2c29b5f184acd6394e","sha256":"c85da87ad3a377f7539c73fe87196b7ba36798c9b2151bc6bb3aa1c628f84722","sha512":"044ac565f2f7160f5160a14e2f710240686b5123ca2176bf9a9714be172bfcd2c6e28d8debbceda13d022f39cc5adcf3e5ff13979fa9d083f3393810f717d8c4","ssdeep":"1536:21yg0x25KHSYyIkBTJrVF8DUh503ejEBtCCJ8ZdwPwtEJA8h2zbP:2cTVK7BTh5OeQnGfwotgNhAbP","tlshash":"9da302b79cc045245218b6475309cf6ef65984a6834f96b4f04af1f0f7afb5a80ea336","first_seen":"2026-09-27T06:30:15.190015Z","last_seen":"2026-09-27T06:30:57.021641Z","times_seen":2,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":8,"send":0,"wait":38,"receive":3,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portalfluently.com/sfp.js","fqdn":"portalfluently.com","domain":"portalfluently.com","tld":"com"},"ip":{"addr":"23.111.84.228","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ads.alterhub.site/promoframe#k=fdfdd92a59e588025342002253695a24\u0026w=468\u0026h=60\u0026i=u2_h3rpj0","date":"2026-09-27T06:29:12.978Z","timestamp":1790490552978,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"portalfluently.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 23:40:44 GMT","end":"Sun, 15 Nov 2026 23:40:43 GMT"},"fingerprint":{"sha1":"04:7E:87:1C:D4:BF:C8:7A:47:9E:4C:FB:2A:44:D1:25:8D:83:7F:1A","sha256":"0B:F1:DB:9B:8C:77:3E:61:8B:03:C2:BF:97:81:32:72:FC:3C:87:CC:8E:6E:6B:D5:93:EF:4F:11:1C:B6:E2:06"}}},"request":{"raw":"GET /sfp.js HTTP/1.1\r\nHost: portalfluently.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Sun, 27 Sep 2026 06:29:13 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\nx-envoy-upstream-service-time: 1\r\nHost: portalfluently.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 353d785f7530dcc8590ad865c2a5c73f\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":37950,"size_decoded":18372,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (37943), with no line terminators","md5":"8b2235271c16f8771b21b86e1f28b646","sha1":"79076a682bb500cf7ce5a0c3b7791f444f0b4745","sha256":"2c474c90d59dd2f40732e241bcaa6d9dfdcad896d3689f7e3a4d0383aecdc7ae","sha512":"0a0a45fdba13e92501476f4744c492c70dcc537f521bf5e0ab08d58af1a1103327d809cf576eb79563a6499816136234f93a523d78ef709986808215dab780e9","ssdeep":"768:2bau76Vkz0LIRCwNvDVlW2WE2FXgi+7RB6hJgbGNqJXY1ATJSf5Rr+LPL8jvZtd6:2GMtW7Qi+7RB8JMGNqJLLFNZB","tlshash":"510329d87193b03993b718e71477a214b23a1c15300a9983e17e5c863d63e5bd23bfad","first_seen":"2026-09-03T11:38:17.004803Z","last_seen":"2026-10-11T18:33:39.03397Z","times_seen":4850,"resource_available":true,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":19,"send":0,"wait":22,"receive":18,"ssl":68},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"portalfluently.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sleepoverlimitprofound.com/impr.gif?sid=H4sIAAAAAAAC_1RSu28cRRifdU40KSKhCJoUW1CAhM-zj3ssoYp4SQQbkqBIUM1rzeT2djY7s3fnqxyCoHVBQYXWv7NjiSBEKqBDZzoQUrYAuYgp8h-ABJToLicMI8330G_0ze_7ft_H-9UpaaNiJ2-_ZaY6y9hGp03952_qXJqx9Tdv-AFt08v-TZ1348v-ZGHK0UtBFLfpC_7rSgzMRkgDSgMa-K_pUqVmsrFEoYsvk6Cd0HYctoNOjEn5_9xWHizzIEen5Glo2Vx4nL4PLebIh1-_ouzAmeLFV4dVxpwpMZJH7-aD3IxzDM_CtPSQ5ker1zC2IeSzNZj8aNUBzOhg0QG4bsjaM4_A86MVTfDR4ROmPIPKweV5jEdzqGwOzeYQ5i60fEgAIbG5hXx4b9OUY7bzBGULtCGtP_-AHjek9egi8uFXVzI98a-brHLa5BaTtIaezKG35yiqY7jpGvT4GMJ9CC1_JvTZ88iHX7xhRnrgj1Q5gJb1cgY6nYNZD9Xiag9V6qEqPAzliR_TfiwCFnXTRIoejVkcS8Vp0g8pZYnooRJ3oOUeRLmLotzFQO_BSg_WNcR7ZxcjWR_KzIa2viczW_Fg5cOVj-qZcdv77NC4bZUTsHIPpawPdHHb3oVw52bT1L45MwvDuKtnjMt6pqUjKG-fPEcDRlXQl-uMh3S91wnjdRZwtZ4EKY96SRJ2e-lBal1V7xcr7b379__CQJ34EVPdsNeVnbSbKN5NenEYMJokXcp7knUiWF1D27XlcKa6Idd-HaHQDVl_73NwdgybHUPoS2BVADauwT6oMc0fCCN1umNFqQtn25OdKaSpUbgW3I4H5ch-dkouzq7duPL9UteXf_sJSvxIVgeirFGUNW7pHwi2szsPtgqnh3rKFkJfd8ypp8D0w62_IXRDzl96vNw4_xcFUezCFv9WmmW2aMjV_BNYQ8CLc8g0QabOvmK8hv1Pzs_iffsRtssWeNaa8axsHfCszD5tSFpeaMjV_u9L3qvq-sRPIxUKSvu9bhD1UxVEsRRppx8nsstoFCk429z69pvv_hkAQ0uRfQcEAAA=","fqdn":"sleepoverlimitprofound.com","domain":"sleepoverlimitprofound.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ads.alterhub.site/promoframe#k=3ae6276d5f69eb697421a09960b7da53\u0026n=28128394\u0026i=n3_ke4tgo","date":"2026-09-27T06:29:13.235Z","timestamp":1790490553235,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sleepoverlimitprofound.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 04:20:18 GMT","end":"Tue, 24 Nov 2026 04:20:17 GMT"},"fingerprint":{"sha1":"25:9A:58:CA:68:4D:EC:36:88:A4:BC:7F:2C:41:BE:B7:58:63:32:E3","sha256":"08:E4:A1:17:A8:1B:17:9D:84:10:F1:9B:37:A3:57:FE:8C:98:BA:9C:11:0D:A1:97:5C:AA:71:F0:6A:4A:28:5E"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1RSu28cRRifdU40KSKhCJoUW1CAhM-zj3ssoYp4SQQbkqBIUM1rzeT2djY7s3fnqxyCoHVBQYXWv7NjiSBEKqBDZzoQUrYAuYgp8h-ABJToLicMI8330G_0ze_7ft_H-9UpaaNiJ2-_ZaY6y9hGp03952_qXJqx9Tdv-AFt08v-TZ1348v-ZGHK0UtBFLfpC_7rSgzMRkgDSgMa-K_pUqVmsrFEoYsvk6Cd0HYctoNOjEn5_9xWHizzIEen5Glo2Vx4nL4PLebIh1-_ouzAmeLFV4dVxpwpMZJH7-aD3IxzDM_CtPSQ5ker1zC2IeSzNZj8aNUBzOhg0QG4bsjaM4_A86MVTfDR4ROmPIPKweV5jEdzqGwOzeYQ5i60fEgAIbG5hXx4b9OUY7bzBGULtCGtP_-AHjek9egi8uFXVzI98a-brHLa5BaTtIaezKG35yiqY7jpGvT4GMJ9CC1_JvTZ88iHX7xhRnrgj1Q5gJb1cgY6nYNZD9Xiag9V6qEqPAzliR_TfiwCFnXTRIoejVkcS8Vp0g8pZYnooRJ3oOUeRLmLotzFQO_BSg_WNcR7ZxcjWR_KzIa2viczW_Fg5cOVj-qZcdv77NC4bZUTsHIPpawPdHHb3oVw52bT1L45MwvDuKtnjMt6pqUjKG-fPEcDRlXQl-uMh3S91wnjdRZwtZ4EKY96SRJ2e-lBal1V7xcr7b379__CQJ34EVPdsNeVnbSbKN5NenEYMJokXcp7knUiWF1D27XlcKa6Idd-HaHQDVl_73NwdgybHUPoS2BVADauwT6oMc0fCCN1umNFqQtn25OdKaSpUbgW3I4H5ch-dkouzq7duPL9UteXf_sJSvxIVgeirFGUNW7pHwi2szsPtgqnh3rKFkJfd8ypp8D0w62_IXRDzl96vNw4_xcFUezCFv9WmmW2aMjV_BNYQ8CLc8g0QabOvmK8hv1Pzs_iffsRtssWeNaa8axsHfCszD5tSFpeaMjV_u9L3qvq-sRPIxUKSvu9bhD1UxVEsRRppx8nsstoFCk429z69pvv_hkAQ0uRfQcEAAA= HTTP/1.1\r\nHost: sleepoverlimitprofound.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; u_pl28027895=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 27 Sep 2026 06:29:13 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccept-ch: X-Device-User-Agent,X-Operamini-Phone-Ua,User-Agent,Sec-Ch-Ua-Platform-Version,X-Ucbrowser-Device-Ua,Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile,Device-Stock-Ua\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nvary: Origin\r\nx-envoy-upstream-service-time: 1\r\nHost: sleepoverlimitprofound.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: c0bf506a7b1f438dd5eca145ca05bb30\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T20:43:33.933419Z","times_seen":19037193,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-26","alert":"Sinkholed","trigger":"sleepoverlimitprofound.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fizzyacerbitymellow.com/impr.gif?sid=H4sIAAAAAAAC_1RSv48bxR-dva_1pUiBhKLQpNgCEJE436y9tncvXcQviXBHSFAkqGZnZp2JxzubnVnbcXVJEC1XUFChvee7WEKAQBRHOuSjQUhI2e6KXEPBH4CEKJHvLA5Gms8PvdHM-7w3n-yVJ6SJkh2_966ZKq3ZRqdJ_Vdvq0yYsfW3bvkBbdKr_m2VdcOr_mQZitFm0A6b9Ir_luQDs9GiAaUBDfw3VSFTM9k4RaHyr-KgGdNm2GoGnRCT4r-9LT1Y5kGMTsgLUKJ-_rf0Iyi-QDb89nVpB87kr70xLDVzpsBIzD_IBpkZZxiel2nhIc3mq9Mwtibk8zWYbL6aAGa0v5wAiarJ2qVnSLL5iiaS0cEZ00RDZkjEBYxHC0i9gGILcPMISjwlABfY2kY2fLxlijG7f4ayJVqTxp9_QI1r0nh2Ednwm2taTfybRpdOmcxiklZQkwVUf4G8PIKbrkGNj8DdQyjxK6EvXkA2_PJtM1IDfySLAZSoTjVQ6QLMeiiXW3koUw9l7mEojv2QRiEPWLubxoL3aMjCUMiExlGLUhbzHkr-AErsghc7yIsdDNQurPBgXU28GzsYiepAaNuy1WOhbZkEq9xa5XY1M66_xw6M68uMgBW7KES1r_J79hG4-99smtp3ZmYZWOKqGUtENVPCERT3jl-iAaMyiMQ6S7rBeo_RYD2OOr31iEcx7cS9Ng_T_dS6strLV95785-_x0Ae-0zKqBfKVrcnWNoKmIjDuB3xTtylMu2xAFZVUHbtVJypqsmNwyvIVU3WP_wCCTuC1Ufg6jJYGYCNK7A7FabZ10w7Wdwpk6ZVTkKYCrlrwN33IB3Z0yfk4uz9W9d-PPVUHr4MyX8hqwVeVMiLCnfVTwR9_eC77dypoZqypck3HXPy_2Dq6fZf4Koml557ePrbNi9vguc7sPk_N820zWvyypPfYQ1BkjegFYGW50-xpIL9V5-c13v2Y_SLBhLdmCW6aOwnutCf1eR69umSsl-T6_35GXmrjv20LVuc0qjXDdpRKoN2KHjaicJYdBlttyWcre_-cPjk7wEANXR1PQMEAAA=","fqdn":"fizzyacerbitymellow.com","domain":"fizzyacerbitymellow.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ads.alterhub.site/promoframe#k=aee874e267daf21ad94938c5960ef7a1\u0026n=27873862\u0026i=n4_0eh5yg","date":"2026-09-27T06:29:13.534Z","timestamp":1790490553534,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"fizzyacerbitymellow.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 22:02:47 GMT","end":"Fri, 30 Oct 2026 22:02:46 GMT"},"fingerprint":{"sha1":"85:2D:D6:49:43:AB:3A:C0:5E:0D:58:0E:0B:D7:D6:2A:82:8B:E0:41","sha256":"FF:C6:2E:36:C1:47:5E:79:06:79:62:3E:93:9A:4C:D1:A2:35:A6:48:A3:E5:43:F4:74:4F:64:C9:9E:32:17:24"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1RSv48bxR-dva_1pUiBhKLQpNgCEJE436y9tncvXcQviXBHSFAkqGZnZp2JxzubnVnbcXVJEC1XUFChvee7WEKAQBRHOuSjQUhI2e6KXEPBH4CEKJHvLA5Gms8PvdHM-7w3n-yVJ6SJkh2_966ZKq3ZRqdJ_Vdvq0yYsfW3bvkBbdKr_m2VdcOr_mQZitFm0A6b9Ir_luQDs9GiAaUBDfw3VSFTM9k4RaHyr-KgGdNm2GoGnRCT4r-9LT1Y5kGMTsgLUKJ-_rf0Iyi-QDb89nVpB87kr70xLDVzpsBIzD_IBpkZZxiel2nhIc3mq9Mwtibk8zWYbL6aAGa0v5wAiarJ2qVnSLL5iiaS0cEZ00RDZkjEBYxHC0i9gGILcPMISjwlABfY2kY2fLxlijG7f4ayJVqTxp9_QI1r0nh2Ednwm2taTfybRpdOmcxiklZQkwVUf4G8PIKbrkGNj8DdQyjxK6EvXkA2_PJtM1IDfySLAZSoTjVQ6QLMeiiXW3koUw9l7mEojv2QRiEPWLubxoL3aMjCUMiExlGLUhbzHkr-AErsghc7yIsdDNQurPBgXU28GzsYiepAaNuy1WOhbZkEq9xa5XY1M66_xw6M68uMgBW7KES1r_J79hG4-99smtp3ZmYZWOKqGUtENVPCERT3jl-iAaMyiMQ6S7rBeo_RYD2OOr31iEcx7cS9Ng_T_dS6strLV95785-_x0Ae-0zKqBfKVrcnWNoKmIjDuB3xTtylMu2xAFZVUHbtVJypqsmNwyvIVU3WP_wCCTuC1Ufg6jJYGYCNK7A7FabZ10w7Wdwpk6ZVTkKYCrlrwN33IB3Z0yfk4uz9W9d-PPVUHr4MyX8hqwVeVMiLCnfVTwR9_eC77dypoZqypck3HXPy_2Dq6fZf4Koml557ePrbNi9vguc7sPk_N820zWvyypPfYQ1BkjegFYGW50-xpIL9V5-c13v2Y_SLBhLdmCW6aOwnutCf1eR69umSsl-T6_35GXmrjv20LVuc0qjXDdpRKoN2KHjaicJYdBlttyWcre_-cPjk7wEANXR1PQMEAAA= HTTP/1.1\r\nHost: fizzyacerbitymellow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ads.alterhub.site/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; u_pl27773363=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 27 Sep 2026 06:29:13 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccept-ch: X-Operamini-Phone-Ua,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Platform,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile,Device-Stock-Ua,X-Device-User-Agent\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nvary: Origin\r\nx-envoy-upstream-service-time: 4\r\nHost: fizzyacerbitymellow.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: c722016dcd6c715f9aa2f70bfd764c46\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T20:43:33.933419Z","times_seen":19037193,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/cti/ba/61/29/ba6129abebdc29459ff4aec2284b9694/1781174149.jpg","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ads.alterhub.site/promoframe#k=fdfdd92a59e588025342002253695a24\u0026w=468\u0026h=60\u0026i=u2_h3rpj0","date":"2026-09-27T06:29:13.830Z","timestamp":1790490553830,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 02:32:58 GMT","end":"Wed, 02 Dec 2026 02:32:57 GMT"},"fingerprint":{"sha1":"0C:28:A6:45:71:D0:51:55:56:A0:1D:34:71:8C:C4:7C:16:5A:03:5C","sha256":"68:73:EC:1A:D4:78:3E:46:1A:F8:1D:99:8F:CB:9D:46:B9:0E:28:CF:C6:BF:14:EF:F5:90:39:D3:FF:5A:1F:5C"}}},"request":{"raw":"GET /cti/ba/61/29/ba6129abebdc29459ff4aec2284b9694/1781174149.jpg HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 27 Sep 2026 06:29:13 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 29049\r\nserver: nginx/1.21.6\r\nlast-modified: Thu, 11 Jun 2026 10:35:49 GMT\r\netag: \"6a2a8f85-7179\"\r\nexpires: Tue, 29 Sep 2026 06:29:13 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29049,"size_decoded":29397,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 26.3 (Macintosh), datetime=2026:06:09 16:04:59], progressive, precision 8, 468x60, components 3","md5":"fbbb01582b346f5320009bd827ab8b18","sha1":"9443e2d64c0fb47568abb1e5ff0ca2dd8c060a1a","sha256":"28d4dc56d69d04766fe6fe78fbb4065e55d58b8211d70d1c28b67bd611845a6d","sha512":"1b4466e9ad6293d0210a3c4eaffe85b14c895266c847269115a71d1bb35dbdd1c2007cb95d2aaaa9281bdbc9fa20743e51b96ad26354406a165f7297a6e193f2","ssdeep":"768:ZLigvwHl4oiKqEHdi7ocbQjJf/1u0wm2HDVQz0p5:Z7ve+2pdimHfwN+QP","tlshash":"3dd2bf26b713eda3fac1433485fbc2a663265e94e74313927ddea0477b352768c18d82","first_seen":"2026-06-27T04:16:07.980453Z","last_seen":"2026-10-08T03:55:56.994042Z","times_seen":432,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}