{"report_id":"7a546370-f534-4e48-86ef-8cc3017543ae","version":6,"status":"done","tags":[],"date":"2025-10-26T19:54:08Z","url":{"schema":"http","addr":"rip.linkvertise.lol/","fqdn":"rip.linkvertise.lol","domain":"linkvertise.lol","tld":"lol"},"ip":{"addr":"104.21.22.206","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"rip.linkvertise.lol/","fqdn":"rip.linkvertise.lol","domain":"linkvertise.lol","tld":"lol"},"title":"Free Linkvertise Bypass Tool | Bypass Ads Instantly | RIP.LINKVERTISE.LOL","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":""}},"submit":{"url":{"schema":"http","addr":"rip.linkvertise.lol/","fqdn":"rip.linkvertise.lol","domain":"linkvertise.lol","tld":"lol"},"ip":{"addr":"104.21.22.206","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"country_code":"zz"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-30T19:54:08Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":15}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"ukankingwithea.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"ukankingwithea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"ukankingwithea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"catholicncesisp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"catholicncesisp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"catholicncesisp.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"kseseemyresum.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"kseseemyresum.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"kseseemyresum.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"utysolomonaut.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"utysolomonaut.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"utysolomonaut.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"ingajoytowork.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"ingajoytowork.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"ingajoytowork.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-10-19T22:12:30.612025Z","alert_count":0,"request_count":3,"received_data":148101,"sent_data":1677,"comment":"","tags":null,"fingerprints":null},{"fqdn":"catholicncesisp.com","ip":{"addr":"104.21.24.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-06-11","domain_rank":0,"first_seen":"2025-08-31T12:48:13.129017Z","last_seen":"2025-09-07T12:57:05.747471Z","alert_count":3,"request_count":1,"received_data":519,"sent_data":542,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"accounts.google.com","ip":{"addr":"142.250.147.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":103,"first_seen":"2012-05-23T06:57:57Z","last_seen":"2025-10-19T22:32:41.177271Z","alert_count":0,"request_count":6,"received_data":13840,"sent_data":3566,"comment":"","tags":null,"fingerprints":[{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]}]},{"fqdn":"iwoozie.baby","ip":{"addr":"172.67.212.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-10-29","domain_rank":1818965,"first_seen":"2025-01-21T19:09:50.863692Z","last_seen":"2025-07-21T09:34:13.781671Z","alert_count":0,"request_count":1,"received_data":9781,"sent_data":425,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"utysolomonaut.com","ip":{"addr":"104.21.70.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-06-11","domain_rank":0,"first_seen":"2025-08-17T07:31:48.079057Z","last_seen":"2025-08-24T08:22:23.149989Z","alert_count":3,"request_count":1,"received_data":515,"sent_data":542,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ukankingwithea.com","ip":{"addr":"172.67.192.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-01-01","domain_rank":32650,"first_seen":"2024-09-05T12:50:03Z","last_seen":"2025-10-20T04:39:10.173576Z","alert_count":9,"request_count":3,"received_data":2471,"sent_data":1311,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"rip.linkvertise.lol","ip":{"addr":"172.67.206.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-10-28","domain_rank":2518393,"first_seen":"2025-02-18T04:30:27.430402Z","last_seen":"2025-10-26T01:24:51.819383Z","alert_count":0,"request_count":11,"received_data":527960,"sent_data":6925,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]}]},{"fqdn":"undefined","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2020-01-28T19:52:40Z","last_seen":"2025-10-20T05:22:50.863931Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":992,"comment":"","tags":null,"fingerprints":null},{"fqdn":"kseseemyresum.org","ip":{"addr":"54.240.174.48","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2025-08-08","domain_rank":0,"first_seen":"2025-08-30T01:39:11.182406Z","last_seen":"2025-10-14T16:44:07.378736Z","alert_count":3,"request_count":1,"received_data":1179,"sent_data":900,"comment":"","tags":null,"fingerprints":[{"name":"Amazon ALB","description":"Amazon Application Load Balancer (ALB) distributes incoming application traffic to increase availability and support content-based routing.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty:1.17.8.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"static.cloudflareinsights.com","ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-08-30","domain_rank":4073,"first_seen":"2019-09-24T14:34:56Z","last_seen":"2025-10-19T22:13:58.096008Z","alert_count":0,"request_count":1,"received_data":20344,"sent_data":477,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ingajoytowork.org","ip":{"addr":"13.33.235.18","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2025-08-08","domain_rank":0,"first_seen":"2025-08-30T02:30:52.637768Z","last_seen":"2025-08-30T02:30:54.788176Z","alert_count":3,"request_count":1,"received_data":4113,"sent_data":987,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty:1.17.8.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon ALB","description":"Amazon Application Load Balancer (ALB) distributes incoming application traffic to increase availability and support content-based routing.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-10-19T22:12:35.4735Z","alert_count":0,"request_count":1,"received_data":13321,"sent_data":443,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2025-10-19T22:16:36.069876Z","alert_count":0,"request_count":1,"received_data":263042,"sent_data":396,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rip.linkvertise.lol/","fqdn":"rip.linkvertise.lol","domain":"linkvertise.lol","tld":"lol"},"ip":{"addr":"172.67.206.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"073f626806e2642d748ab6114e80bfd3","sha1":"27a72bdb049e1e52b86cdf40d03cf3aefa70ed55","sha256":"a7c08b9b461d47475b3d13278541f5b478dde2533cbc3c7df16f59b15437032b","sha512":"20682f473dbdbefd9d35353b5498b3a0e64ab9228ebfcf24b3abdb9a677e617c0c04e9f162cae70bfde2c291c6abcdb8ed79654b644fd4faf8367f47d4d21f5b","ssdeep":"","tlshash":"f741d8690cd428f505ca04fc123696def376301c3c43a511b822a8d967a6fdee4e2bc9","size":2070,"data":"","first_seen":"2025-10-26T19:54:16.615614Z","last_seen":"2025-10-26T19:54:16.615614Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rip.linkvertise.lol/","fqdn":"rip.linkvertise.lol","domain":"linkvertise.lol","tld":"lol"},"ip":{"addr":"172.67.206.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"893f0c70aec08944f4772af2a8073460","sha1":"33c3f1c60c7336ac6cb1455aa06952f02273dc0a","sha256":"d7a404ccc381e98239889ea73e251bd3b6022d39fbf116a9689fa34107dba798","sha512":"5285db8cc85ddb8b368051a70f057a65e0f68f536ab25cd784f924c398077e5bf22a50d419ae9c438f9f0352880e2137def4273632bad218d990c8cce674df0b","ssdeep":"","tlshash":"41a022ac000020ac002b2cb0223be88833f30203a2c380028208c0b02c38e2fc808aec","size":73,"data":"","first_seen":"2024-10-12T13:56:10.735543Z","last_seen":"2026-04-20T14:19:04.764149Z","times_seen":14890,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rip.linkvertise.lol/cdn-cgi/zaraz/s.js?z=JTdCJTIyZXhlY3V0ZWQlMjIlM0ElNUIlNUQlMkMlMjJ0JTIyJTNBJTIyRnJlZSUyMExpbmt2ZXJ0aXNlJTIwQnlwYXNzJTIwVG9vbCUyMCU3QyUyMEJ5cGFzcyUyMEFkcyUyMEluc3RhbnRseSUyMCU3QyUyMFJJUC5MSU5LVkVSVElTRS5MT0wlMjIlMkMlMjJ4JTIyJTNBMC43MTA2MjE3NTU0Nzc1MjY5JTJDJTIydyUyMiUzQTEyODAlMkMlMjJoJTIyJTNBMTAyNCUyQyUyMmolMjIlM0ExMDI0JTJDJTIyZSUyMiUzQTEyODAlMkMlMjJsJTIyJTNBJTIyaHR0cHMlM0ElMkYlMkZyaXAubGlua3ZlcnRpc2UubG9sJTJGJTIyJTJDJTIyciUyMiUzQSUyMiUyMiUyQyUyMmslMjIlM0EyNCUyQyUyMm4lMjIlM0ElMjJVVEYtOCUyMiUyQyUyMm8lMjIlM0EwJTJDJTIycSUyMiUzQSU1QiU1RCU3RA==","fqdn":"rip.linkvertise.lol","domain":"linkvertise.lol","tld":"lol"},"ip":{"addr":"172.67.206.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"adef529721b5f6023810e507fc4f4bf2","sha1":"004b397e60e9ab789b00c328753532eb3ae96d9b","sha256":"fb697f19f32763c68f9097477eb50c6da4fe6484a94c9b037c73cb8f6203b433","sha512":"7eb75c58a828b306e1ebe09d721dcdfd47c9c406a21af23d08cd973e2a2ce116892fad804537d3b2f72d6c49d16b6091934961d05f345b35384092a0c6e1ecbd","ssdeep":"96:JjbjUiO5cTcrDi5KyFPlQBmMZA5M85YwYM2zWWigGFYY8/Fa4G4Bg0OUGScXGX7O:JjbjUiQdSvFtQEMuTCM2zWhgGCYeNBle","tlshash":"35c1c8692ea5643958ca63bff03e22c0e9bd6134f0235480c84958c5adedf7f61d694c","size":5667,"data":"","first_seen":"2025-10-26T19:54:16.605662Z","last_seen":"2025-10-27T13:55:40.368777Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"ukankingwithea.com/","fqdn":"ukankingwithea.com","domain":"ukankingwithea.com","tld":"com"},"ip":{"addr":"172.67.192.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rip.linkvertise.lol/","date":"2025-10-26T19:53:46.505Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ukankingwithea.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 14:27:37 GMT","end":"Wed, 21 Jan 2026 15:26:07 GMT"},"fingerprint":{"sha1":"9D:07:9C:6F:57:10:86:CD:16:B0:52:82:27:D1:5A:15:62:C4:01:4D","sha256":"45:86:DC:CE:A9:11:84:B3:7C:78:71:DB:1D:F8:E8:6C:0F:4A:58:72:2C:CF:60:ED:8D:11:60:CB:9F:03:63:EF"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ukankingwithea.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://rip.linkvertise.lol\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 26 Oct 2025 19:53:46 GMT\r\ncontent-type: text/plain\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: https://rip.linkvertise.lol\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: X-Requested-With, content-type\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9T5LgS%2Bj7aXbeeVDGtIOt5MyzzI9kcfUNuCjPnbCUWrPBZ7E2xsA92Im819sM1dbWWYmPClsG8%2FxyeQrkmlGN%2FrYRl3ddnIp1oG8ybzSnm3uHw%3D%3D\"}]}\r\ncontent-encoding: br\r\nset-cookie: csu=1699229593392663@1@1761508426; SameSite=None; Secure; Max-Age=31104000\r\ncf-ray: 994c8071a863b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"70c96cbb3d14a28da65857a9b7c37f6e","sha1":"bc275481fda5eda31ce5587bb1bbf40ddac53f8e","sha256":"9979934723539858d1925655371f1adee352ef7f29e0bd81b47f3d2dfbabe9fe","sha512":"51c71bdec7ab67b5d9af0215decdd2297fb2d9f23a97ecd1bd214427c9932d85371b21d84020c644184b6dce44bfc423205b743324815d8105e1a0895b815a2c","ssdeep":"","tlshash":"ef800038abca0ece303c2082c208808820000a080b8ab808ce0208288230b00032f282","first_seen":"2025-10-26T19:54:16.589046Z","last_seen":"2025-10-26T19:54:16.589046Z","times_seen":1,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":13,"dns":4,"connect":1,"send":0,"wait":123,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"ukankingwithea.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"ukankingwithea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"ukankingwithea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@300;400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rip.linkvertise.lol/","date":"2025-10-26T19:53:45.799Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:34:04 GMT","end":"Wed, 24 Dec 2025 14:34:03 GMT"},"fingerprint":{"sha1":"5F:D5:F8:10:14:80:32:78:B6:66:AC:25:01:5E:C2:6B:0C:D6:03:BD","sha256":"66:2A:01:C5:DD:28:0B:66:17:E5:8A:2F:4E:52:AF:74:21:21:65:E1:71:72:47:4B:5D:69:50:8D:B4:16:49:C5"}}},"request":{"raw":"GET /css2?family=Inter:wght@300;400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 26 Oct 2025 19:53:45 GMT\r\ndate: Sun, 26 Oct 2025 19:53:45 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12635,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"f04de8ad1ef740d940ec0f534a8f6474","sha1":"3b31756e84c8887867417c7d6cc64501c9d9193c","sha256":"2f1ac0c31bc3ede8317cf72e9d28051ec727c9a0014aa69cff495abd6256bb4e","sha512":"69afede137c125294044274e463f30c02594f379ec879285e0b3ee41097f503dfb8272487759870f547e4dc4cf8828a2c1efaa806deb2f3124b7f6d67c638783","ssdeep":"192:wNA1cO3lnxirNNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGx:8KYXuM0p2+4","tlshash":"28427892002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-10T18:44:19.218006Z","last_seen":"2026-04-20T13:31:42.617507Z","times_seen":14411,"resource_available":false,"data":null}},"time_used":363,"timings":{"blocked":170,"dns":2,"connect":7,"send":0,"wait":18,"receive":0,"ssl":162},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rip.linkvertise.lol/cdn/dod.js","fqdn":"rip.linkvertise.lol","domain":"linkvertise.lol","tld":"lol"},"ip":{"addr":"172.67.206.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rip.linkvertise.lol/","date":"2025-10-26T19:53:46.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"linkvertise.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Oct 2025 09:29:49 GMT","end":"Thu, 15 Jan 2026 10:27:18 GMT"},"fingerprint":{"sha1":"71:ED:4F:62:93:AA:E3:67:36:0B:0E:0C:9C:87:97:E5:95:05:40:ED","sha256":"B2:81:F8:B6:D5:86:F0:AA:95:11:B2:3D:53:A1:8C:7C:DE:4B:2D:5C:9C:09:B0:0D:27:60:16:53:BD:2B:45:EE"}}},"request":{"raw":"GET /cdn/dod.js HTTP/1.1\r\nHost: rip.linkvertise.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rip.linkvertise.lol/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 26 Oct 2025 19:53:46 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\ncontent-disposition: inline; filename=dod.js\r\nlast-modified: Fri, 24 Oct 2025 22:45:30 GMT\r\ncache-control: public, max-age=14400, immutable\r\nexpires: Sun, 26 Oct 2025 19:53:49 GMT\r\nx-content-type-options: nosniff\r\nx-rg-anticonfig: {\"cached\":true,\"Cf-Cached\":true}\r\nx-rg-cacheid: 0f749dfc-3fa5-424b-ac64-fc35e4f33cdc-56e20ef4-6d0b-46b7-98b7-4e6f0a529e5e\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-RG-AntiConfig, X-RG-CacheID, x-RG-CloudflareChannel, x-RG-MiniTLSHandlerID, x-RG-SecureConnection, x-RG-TorNetworkHandler\r\ncf-cache-status: REVALIDATED\r\npriority: u=3,i=?0\r\nexpect-ct: max-age=86400, enforce\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0IIs2iRox3skmTalNlpMqy%2BxzTJ4Hu8NQXbIPNerFIemIpdsBm2wF7Bpy%2FntQzOxJ7nHVr4kAD92NNcojcHpwWBwqWg6zSLjphNo2vZh4wZb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\netag: W/\"1761345930.4716928-190473-2747534067\"\r\nreferrer-policy: same-origin\r\ncf-ray: 994c806edb42b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":190165,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (43937)","md5":"e8d3ac01828f3411a6f99b79c15833e1","sha1":"768c2647d0b418dcebb4c90e64f9f969ac917b89","sha256":"d37cfc522472c0102c78e669976ac2c723de8a19a9eefc13c6b30dee72582723","sha512":"95fa2708cc28da851f8f3c133066210677583dd1346e5c695eb521fb454b16de04076b1863344552c241cfd012b835d869d5dfa2d6995289a52ea4e1065b6987","ssdeep":"3072:FBUN1qRYRWC9q2HCSzdi+eJUOoedLwREo4bp:FuN8RiWCU2HrZy1","tlshash":"bb045cc9be82346d836374b540bf528a723f4a68b8184cd4e596d4d17db8d0a437bfac","first_seen":"2025-09-20T12:36:02.787647Z","last_seen":"2025-11-08T23:02:49.256637Z","times_seen":4,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":115,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rip.linkvertise.lol/","fqdn":"rip.linkvertise.lol","domain":"linkvertise.lol","tld":"lol"},"ip":{"addr":"172.67.206.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-26T19:53:45.411Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"linkvertise.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Oct 2025 09:29:49 GMT","end":"Thu, 15 Jan 2026 10:27:18 GMT"},"fingerprint":{"sha1":"71:ED:4F:62:93:AA:E3:67:36:0B:0E:0C:9C:87:97:E5:95:05:40:ED","sha256":"B2:81:F8:B6:D5:86:F0:AA:95:11:B2:3D:53:A1:8C:7C:DE:4B:2D:5C:9C:09:B0:0D:27:60:16:53:BD:2B:45:EE"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rip.linkvertise.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 26 Oct 2025 19:53:45 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncf-ray: 994c806b2e8fb4eb-OSL\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, immutable\r\nlast-modified: Sun, 26 Oct 2025 19:53:45 GMT\r\nserver: cloudflare\r\nvary: accept-encoding\r\naccess-control-expose-headers: X-RG-AntiConfig, X-RG-CacheID, x-RG-CloudflareChannel, x-RG-MiniTLSHandlerID, x-RG-SecureConnection, x-RG-TorNetworkHandler\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-rg-anticonfig: {\"cached\":true,\"Cf-Cached\":true}\r\nx-rg-cacheid: 5777a5a2-2632-4a6a-9af4-94ae33ca84e2-e1f8ccd4-c8e1-4386-bd4f-d52ed84aed65\r\nx-xss-protection: 1; mode=block\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver-timing: cfCacheStatus;desc=\"MISS\", cfEdge;dur=104,cfOrigin;dur=0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZTJZCdSWWDUi7L39tN%2BPKVZAtgbwzpYWZeiI%2FgtMQSMCV3R718nMhVXbb6urK3nOK%2FAzwu0A5xJT9oq2OWJl0cXDQUW8%2FCheCoESPxM9IyQs\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]}],"data":{"size":31842,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (28180)","md5":"b8cb3a6fe89b501d985325dc66741707","sha1":"54d997e862394f146cf42a10aa180d5a7d43a689","sha256":"6a63ab5722a8c84340e1180cde0e62187d6ebee12b433221066182337faa1286","sha512":"adfa8e6156d9700b959822b217f52874be931ccbb6c23ce159ea8280d12cf0b6433c6fb59efe0f8bf73226df1048846059aa2f5fe5287bf4884d6666696fb614","ssdeep":"768:AByg/9XzBnra0lN+2Bd8hcOkdhfYVrhPk8tNH6Mc9M7sn:ApNnrJlNRd8hxCJM7sn","tlshash":"f6e22b7626441c3e52878af3f6b4fb6ca276c24fcb1b694df1bd859027c1d984436a34","first_seen":"2025-10-26T19:54:16.596313Z","last_seen":"2025-10-26T19:54:16.596313Z","times_seen":1,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":61,"dns":36,"connect":1,"send":0,"wait":112,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@tailwindcss/browser@4","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rip.linkvertise.lol/","date":"2025-10-26T19:53:45.796Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/@tailwindcss/browser@4 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 26 Oct 2025 19:53:45 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 64554\r\ncf-ray: 994c806d38ee5694-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 4.1.16\r\nx-jsd-version-type: version\r\netag: W/\"3ff12-xyH40FgTlh00QcOONeKg0QKjtb4\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230174-FRA, cache-bma-essb1270026-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 3493\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Yss%2B2icETqd34mdzkniFpABo4zy7PB5bJXIVmD9etY8VEYnTTJdcL7hO%2BwFYu9cIyPk6hQybEGOBXAJdw1LelQ%2FWXNPhv1bN8sz9rj68rDmywK16hrLfsw25CDYSpgFyHEI%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":261906,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65269)","md5":"fdde50e807ac27bf003c84edc2cfe066","sha1":"c721f8d05813961d3441c38e35e2a0d102a3b5be","sha256":"b5dc758ac22ee38a026e617f0c58f4d0b35e40bce33783adbad3ccb2ce90c080","sha512":"907ffd4c1fae05cf154139b8d8339e93862b98518af66358b1ec045e4c1ac841c607794fcd66dbe826a99b175fff37d3bfc67eac7890e84aa429d38bb5ae2024","ssdeep":"3072:Q270V4lZYnKl/LBucygyJKwod0PEzsauR+k0iLNccToV8wMip6oep0EuzT4ZVw7U:nwWxj4TXs5ENUAy2Uub","tlshash":"1f442b317603a03e1fb783da20de6004d63e6b65a65841e9f782d50b15e5af80af7f39","first_seen":"2025-10-24T13:41:21.185791Z","last_seen":"2025-11-07T06:05:19.429077Z","times_seen":69,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":6,"dns":2,"connect":1,"send":0,"wait":16,"receive":6,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rip.linkvertise.lol/","date":"2025-10-26T19:53:46.338Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:34:07 GMT","end":"Wed, 24 Dec 2025 14:34:06 GMT"},"fingerprint":{"sha1":"CE:D7:82:8C:04:B0:E5:F9:3B:52:AC:E2:75:72:A1:31:F8:D2:42:D4","sha256":"B8:54:E9:B3:89:59:D3:D4:18:71:52:99:FF:BB:D7:4C:BF:09:4A:EE:50:59:19:40:A0:6E:17:ED:80:73:3B:22"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://rip.linkvertise.lol\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 22 Oct 2025 17:23:04 GMT\r\nexpires: Thu, 22 Oct 2026 17:23:04 GMT\r\ncache-control: public, max-age=31536000\r\nage: 354642\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-04-20T14:00:50.237279Z","times_seen":147991,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":15,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"undefined/NEtRcllVKTIfZlV2M1QsRidsV2tybmM0PVMqN0A3VzJlFi1VJX8RNVs+NRQrWyUlXDdRP3RAH3ovFwIVYgMIKhdnHighCHUxHUA1fBk8Bm9te2gzP3A4PDchfiUeJmlzHDsrMHsjYTEJTiA2Oi5XbmM0A2AsCzURQyMbCjJVAD8rLHYgCCU8Y3sJPCAEIhYgaRF5FxQdDD4UGTVFKQUVAXMhYEA6XAYwPQFuJwQwDBF5EzkOWAgEG20DBClDE3gyBAUcTAIrOA1xGAQbYUUqAwE7fQgYRh5cHXRAH1EZGzYOWTskKDJuKB0hEAIOOQEtewMXNwtwGnRAH1ceAzc4B2YlRAtYDSExAXIOAzFpXQQ6MBhSeDYlDAQRID9rfggEJTJ+KAQgHH8PYAoLYB0jFx52EgM6F0EROisNZDI2V2tyDAc0NnAcCzULYztmKAxuDTdBNV8OE0I2eCEYKB18cmQ3MlADMx8PXx4QNDdRLHcYKlslIU8jRHkdQGBVCCYbFF8A","fqdn":"undefined","domain":"undefined","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://rip.linkvertise.lol/","date":"2025-10-26T19:53:46.775Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /NEtRcllVKTIfZlV2M1QsRidsV2tybmM0PVMqN0A3VzJlFi1VJX8RNVs+NRQrWyUlXDdRP3RAH3ovFwIVYgMIKhdnHighCHUxHUA1fBk8Bm9te2gzP3A4PDchfiUeJmlzHDsrMHsjYTEJTiA2Oi5XbmM0A2AsCzURQyMbCjJVAD8rLHYgCCU8Y3sJPCAEIhYgaRF5FxQdDD4UGTVFKQUVAXMhYEA6XAYwPQFuJwQwDBF5EzkOWAgEG20DBClDE3gyBAUcTAIrOA1xGAQbYUUqAwE7fQgYRh5cHXRAH1EZGzYOWTskKDJuKB0hEAIOOQEtewMXNwtwGnRAH1ceAzc4B2YlRAtYDSExAXIOAzFpXQQ6MBhSeDYlDAQRID9rfggEJTJ+KAQgHH8PYAoLYB0jFx52EgM6F0EROisNZDI2V2tyDAc0NnAcCzULYztmKAxuDTdBNV8OE0I2eCEYKB18cmQ3MlADMx8PXx4QNDdRLHcYKlslIU8jRHkdQGBVCCYbFF8A HTTP/1.1\r\nHost: undefined\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T13:59:59.325235Z","times_seen":13977692,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ukankingwithea.com/","fqdn":"ukankingwithea.com","domain":"ukankingwithea.com","tld":"com"},"ip":{"addr":"172.67.192.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rip.linkvertise.lol/","date":"2025-10-26T19:53:46.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ukankingwithea.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 14:27:37 GMT","end":"Wed, 21 Jan 2026 15:26:07 GMT"},"fingerprint":{"sha1":"9D:07:9C:6F:57:10:86:CD:16:B0:52:82:27:D1:5A:15:62:C4:01:4D","sha256":"45:86:DC:CE:A9:11:84:B3:7C:78:71:DB:1D:F8:E8:6C:0F:4A:58:72:2C:CF:60:ED:8D:11:60:CB:9F:03:63:EF"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ukankingwithea.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://rip.linkvertise.lol\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: csu=1699229593392663@1@1761508426\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 26 Oct 2025 19:53:46 GMT\r\ncontent-type: text/plain\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: csu=1699229593392663@2@1761508426; SameSite=None; Secure; Max-Age=31104000\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: https://rip.linkvertise.lol\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: X-Requested-With, content-type\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kn1xVqIZxpmNstfZowqhzAJokJjY3ZdjTq6lPdrYnJJmsmiZFnt4vYc8td74dnTn7kFJyPx96YrFImUVnyhusju1UCgpeaOMGms6dZ7ZjpI%3D\"}]}\r\ncf-ray: 994c80734db756a4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"70c96cbb3d14a28da65857a9b7c37f6e","sha1":"bc275481fda5eda31ce5587bb1bbf40ddac53f8e","sha256":"9979934723539858d1925655371f1adee352ef7f29e0bd81b47f3d2dfbabe9fe","sha512":"51c71bdec7ab67b5d9af0215decdd2297fb2d9f23a97ecd1bd214427c9932d85371b21d84020c644184b6dce44bfc423205b743324815d8105e1a0895b815a2c","ssdeep":"","tlshash":"ef800038abca0ece303c2082c208808820000a080b8ab808ce0208288230b00032f282","first_seen":"2025-10-26T19:54:16.589046Z","last_seen":"2025-10-26T19:54:16.589046Z","times_seen":1,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"ukankingwithea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"ukankingwithea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"ukankingwithea.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rip.linkvertise.lol/","date":"2025-10-26T19:53:46.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:34:07 GMT","end":"Wed, 24 Dec 2025 14:34:06 GMT"},"fingerprint":{"sha1":"CE:D7:82:8C:04:B0:E5:F9:3B:52:AC:E2:75:72:A1:31:F8:D2:42:D4","sha256":"B8:54:E9:B3:89:59:D3:D4:18:71:52:99:FF:BB:D7:4C:BF:09:4A:EE:50:59:19:40:A0:6E:17:ED:80:73:3B:22"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://rip.linkvertise.lol\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 22 Oct 2025 17:23:04 GMT\r\nexpires: Thu, 22 Oct 2026 17:23:04 GMT\r\ncache-control: public, max-age=31536000\r\nage: 354642\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-04-20T14:00:50.237279Z","times_seen":147991,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":99,"dns":1,"connect":15,"send":0,"wait":16,"receive":21,"ssl":80},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rip.linkvertise.lol/cdn/workink.ico","fqdn":"rip.linkvertise.lol","domain":"linkvertise.lol","tld":"lol"},"ip":{"addr":"172.67.206.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rip.linkvertise.lol/","date":"2025-10-26T19:53:45.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"linkvertise.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Oct 2025 09:29:49 GMT","end":"Thu, 15 Jan 2026 10:27:18 GMT"},"fingerprint":{"sha1":"71:ED:4F:62:93:AA:E3:67:36:0B:0E:0C:9C:87:97:E5:95:05:40:ED","sha256":"B2:81:F8:B6:D5:86:F0:AA:95:11:B2:3D:53:A1:8C:7C:DE:4B:2D:5C:9C:09:B0:0D:27:60:16:53:BD:2B:45:EE"}}},"request":{"raw":"GET /cdn/workink.ico HTTP/1.1\r\nHost: rip.linkvertise.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rip.linkvertise.lol/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 26 Oct 2025 19:53:45 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\ncontent-disposition: inline; filename=workink.ico\r\nlast-modified: Fri, 24 Oct 2025 22:45:35 GMT\r\ncache-control: public, max-age=14400, immutable\r\nexpires: Sun, 26 Oct 2025 19:53:48 GMT\r\nx-content-type-options: nosniff\r\nx-rg-anticonfig: {\"cached\":true,\"Cf-Cached\":true}\r\nx-rg-cacheid: 097fb94e-8cf2-4db8-9999-ec66fcc10e19-56ee9cfb-3769-4f65-8f9e-a0423a513d7b\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-RG-AntiConfig, X-RG-CacheID, x-RG-CloudflareChannel, x-RG-MiniTLSHandlerID, x-RG-SecureConnection, x-RG-TorNetworkHandler\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nexpect-ct: max-age=86400, enforce\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Gv00TAa2DZpvxps9lk7S3gWSnLyr9ZSnA7UtOTTPB7v%2B6lHWJD1fRQx6HYkzIOHnp6UAb5yRG7e2q%2FqPbuIyfUd5g2b%2B5fymusQEa%2FTAxVpM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\netag: W/\"1761345935.2617857-8774-3805547807\"\r\nreferrer-policy: same-origin\r\ncf-ray: 994c806d1b1fb51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8774,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 1 icon, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel","md5":"e16c7ddf0006e54f9ce875e1fcbbc07a","sha1":"5e198aa00b66be6f1cff4e87ee37e4fa022fb721","sha256":"af8d241d16ce539afd3e5fe99ae35600734ec9489a10ff8d748dd50844624bf4","sha512":"25a85e976d92397c4e20b0e1f669c19d810f60434abded02d13c5d372cd0efa2453079c491b6e36dfce85e860c4e27b8aa2d38048651e27b98d25ffbd351e6c6","ssdeep":"192:jw1lm/Q0znzRRNzLZK7QkR1ka+t2y0SIHXwJOXM/8syLpQIOXKzBbSEb:0vgznzxzLs/G9tWxHgEXdsyLYKlSEb","tlshash":"3302afcdbffe2960fc175a533b07cb48e8c5958974638c595dd7b1390942386506b23e","first_seen":"2025-09-20T12:36:02.785495Z","last_seen":"2026-02-25T15:15:56.850546Z","times_seen":5,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rip.linkvertise.lol/","date":"2025-10-26T19:53:46.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:34:07 GMT","end":"Wed, 24 Dec 2025 14:34:06 GMT"},"fingerprint":{"sha1":"CE:D7:82:8C:04:B0:E5:F9:3B:52:AC:E2:75:72:A1:31:F8:D2:42:D4","sha256":"B8:54:E9:B3:89:59:D3:D4:18:71:52:99:FF:BB:D7:4C:BF:09:4A:EE:50:59:19:40:A0:6E:17:ED:80:73:3B:22"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://rip.linkvertise.lol\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 22 Oct 2025 17:23:04 GMT\r\nexpires: Thu, 22 Oct 2026 17:23:04 GMT\r\ncache-control: public, max-age=31536000\r\nage: 354642\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-04-20T14:00:50.237279Z","times_seen":147991,"resource_available":false,"data":null}},"time_used":348,"timings":{"blocked":161,"dns":1,"connect":28,"send":0,"wait":15,"receive":10,"ssl":127},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"catholicncesisp.com/WE15NjJ3chpFDwoaFVtkNhtLbl5tJShudDwVSwNwPBtAY2gzfV9CWzxwSAQDaXpAAhQoJB0LCn4+DVdGLT5EBxQxIx9ZD347RAYcaWNIDhxrawwLA345CVdVZXxfRkYsIUQHBW58TAYKbH9PAARp","fqdn":"catholicncesisp.com","domain":"catholicncesisp.com","tld":"com"},"ip":{"addr":"104.21.24.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rip.linkvertise.lol/","date":"2025-10-26T19:53:46.788Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catholicncesisp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Oct 2025 10:20:14 GMT","end":"Mon, 05 Jan 2026 11:18:50 GMT"},"fingerprint":{"sha1":"75:1E:65:F1:5C:EA:14:8A:EA:F6:01:F2:C9:E6:CC:B8:9E:62:F5:60","sha256":"68:00:61:75:BA:75:29:B2:E9:04:24:5D:B6:69:23:7C:58:BD:19:C0:35:81:35:2A:23:ED:31:0D:E0:E8:E5:11"}}},"request":{"raw":"GET /WE15NjJ3chpFDwoaFVtkNhtLbl5tJShudDwVSwNwPBtAY2gzfV9CWzxwSAQDaXpAAhQoJB0LCn4+DVdGLT5EBxQxIx9ZD347RAYcaWNIDhxrawwLA345CVdVZXxfRkYsIUQHBW58TAYKbH9PAARp HTTP/1.1\r\nHost: catholicncesisp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sun, 26 Oct 2025 19:53:46 GMT\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Yyi0bF0Xsetxskt5dk%2BVSXAiHrmCZzNsNM0eF3TOt8Oz%2BdRCHOxHvRWSv7crQXGq6sKlelMolOEUGNtUAYqhnwZ6z%2BCOksTswJWqVz8EY%2F0O\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 994c80737f4b5694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T13:59:59.325235Z","times_seen":13977692,"resource_available":true,"data":null}},"time_used":171,"timings":{"blocked":15,"dns":6,"connect":1,"send":0,"wait":125,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"catholicncesisp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"catholicncesisp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"catholicncesisp.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=mail\u0026uilel=3\u0026dsh=S-1221227257:1761508427067005\u0026ifkv=ARESoU2IpuSms3MiOmaQlULtofvW1X4i5w8Aqr0gg3Xf66qt8udBul4L17Q0o6hPJfwSsVGW12bm","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.147.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rip.linkvertise.lol/","date":"2025-10-26T19:53:47.143Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:35:30 GMT","end":"Wed, 24 Dec 2025 14:35:29 GMT"},"fingerprint":{"sha1":"AE:F2:53:4B:65:F0:F4:20:9B:4A:F3:20:5F:7F:F6:54:DD:3C:34:95","sha256":"64:EF:B8:F2:46:69:C8:F7:7C:73:9C:2A:C0:B9:59:CB:56:34:8B:98:72:C2:5B:83:1B:77:58:A6:7D:01:07:73"}}},"request":{"raw":"GET /InteractiveLogin?continue=https://www.google.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=mail\u0026uilel=3\u0026dsh=S-1221227257:1761508427067005\u0026ifkv=ARESoU2IpuSms3MiOmaQlULtofvW1X4i5w8Aqr0gg3Xf66qt8udBul4L17Q0o6hPJfwSsVGW12bm HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: text/html; charset=UTF-8\r\nset-cookie: __Host-GAPS=1:hxYWZXkLT4Z3bVDA26Bq2aKKripV7g:sophZS6DYbA5h2SD;Path=/;Expires=Tue, 26-Oct-2027 19:53:47 GMT;Secure;HttpOnly;Priority=HIGH\r\nx-frame-options: DENY\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sun, 26 Oct 2025 19:53:47 GMT\r\nlocation: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico\u0026dsh=S-1221227257%3A1761508427067005\u0026hl=en\u0026ifkv=ARESoU0tpnl10keApmHIEx3WX22_65AAKaVOmuvOp4IcEY8l-62LUyVEnSiw5HbG4t4cmSRqpxEk\u0026passive=true\u0026service=mail\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: script-src 'nonce-yMUTmiCdM4S-dI0m-UFjyw' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_gse_qebhlk\"\r\nreport-to: {\"group\":\"coop_gse_qebhlk\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gse_qebhlk\"}]}\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 411\r\nserver: GSE\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T13:59:59.325235Z","times_seen":13977692,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iwoozie.baby/api/status/linkvertise.lol","fqdn":"iwoozie.baby","domain":"iwoozie.baby","tld":"baby"},"ip":{"addr":"172.67.212.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rip.linkvertise.lol/","date":"2025-10-26T19:53:47.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwoozie.baby","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Oct 2025 22:14:16 GMT","end":"Fri, 16 Jan 2026 23:11:42 GMT"},"fingerprint":{"sha1":"8B:26:6E:EE:8B:09:B3:0F:1F:8B:06:93:48:14:00:B5:97:77:61:70","sha256":"76:70:CE:42:F1:42:1F:AC:B8:6A:A4:D8:F0:80:C8:67:86:16:86:05:BD:72:DE:41:ED:ED:EC:E3:D2:9B:27:E3"}}},"request":{"raw":"GET /api/status/linkvertise.lol HTTP/1.1\r\nHost: iwoozie.baby\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://rip.linkvertise.lol\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Sun, 26 Oct 2025 19:53:47 GMT\r\ncontent-type: text/html; charset=UTF-8\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=m6TEEAVDfa7e15OY1bUPZNrsgh%2FpSxJxImOQz4KOq%2BgfHgER1I9UatRgtmyikxZbmc1wWBj00CtChKIzrgm8kaVx1peSwrqCG5Y38LLORtaGdWHsBoCLPYLwdQ%2FtbN0%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver: cloudflare\r\ncf-ray: 994c807648144e4c-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: chlray;desc=\"994c807648144e4c\", cfL4;desc=\"?proto=TCP\u0026rtt=517\u0026min_rtt=452\u0026rtt_var=137\u0026sent=7\u0026recv=10\u0026lost=0\u0026retrans=0\u0026sent_bytes=3273\u0026recv_bytes=1206\u0026delivery_rate=7252086\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7ad2ddbe7ae8573b\u0026ts=41\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7658,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (7658), with no line terminators","md5":"610d59ca19bc43660d1d56b63c485a68","sha1":"3cb6638b725ecabe1057102da43bbf6eca938d35","sha256":"6a54726f2c10e442538bbd97bb2413448c658cd381bc41108c7be303cbd3fbbf","sha512":"a58ea8b319732a7521c3874a03b7594ec74c2ef773a3d5330eafecff8535a85d1fdad938b26a25a1b105d484fb54f3aebff0ad92221c79ed55019a4e6ad8e4a1","ssdeep":"192:PNadBXAih5ecL2EtIwjXW1fGokRBxSy/w:0JscL2L0XWlkRb9w","tlshash":"31f16de3eb415027d36f2af3c4bb7314a326a629df00a376f0b1d96ce299d07411a5c9","first_seen":"2025-10-26T19:54:16.601771Z","last_seen":"2025-10-26T19:54:16.601771Z","times_seen":1,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":84,"dns":59,"connect":2,"send":0,"wait":21,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kseseemyresum.org/inter?cs=UVlXZllibm9RbWVtbl5tYW9lVmE\u0026abt=0\u0026red=1\u0026sm=85\u0026k=lootlabs%20with%20fast%20updated%20daily%20tool%20instantly%20work%20admaven%20lockr%20links%20free%20linkvertise%20bypass\u0026v=0.1.18.3\u0026sts=\u0026prn=0\u0026emb=0\u0026tid=1211794\u0026rxy=1280_1024\u0026u=1699229593392663\u0026agec=1761508426\u0026fs=1\u0026ns=1\u0026asi=1\u0026ref=https%3A%2F%2Frip.linkvertise.lol%2F\u0026jst=0\u0026enr=0\u0026lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20rv%3A134.0)%20gecko%2F20100101%20firefox%2F134.0\u0026tzd=0\u0026uloc=\u0026if=0\u0026_X1Aw=1761508427388\u0026crc=1","fqdn":"kseseemyresum.org","domain":"kseseemyresum.org","tld":"org"},"ip":{"addr":"54.240.174.48","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rip.linkvertise.lol/","date":"2025-10-26T19:53:47.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kseseemyresum.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 12 Aug 2025 00:00:00 GMT","end":"Thu, 10 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"75:5E:F6:CA:1C:9D:99:BA:92:2B:F5:12:6C:DB:B8:4C:FD:5A:3A:B2","sha256":"B3:B2:69:1D:0A:79:6D:D0:42:76:7C:F3:0D:F7:DE:B1:AB:48:4D:0F:55:0E:E6:B0:9A:D0:9D:07:3D:32:D9:64"}}},"request":{"raw":"GET /inter?cs=UVlXZllibm9RbWVtbl5tYW9lVmE\u0026abt=0\u0026red=1\u0026sm=85\u0026k=lootlabs%20with%20fast%20updated%20daily%20tool%20instantly%20work%20admaven%20lockr%20links%20free%20linkvertise%20bypass\u0026v=0.1.18.3\u0026sts=\u0026prn=0\u0026emb=0\u0026tid=1211794\u0026rxy=1280_1024\u0026u=1699229593392663\u0026agec=1761508426\u0026fs=1\u0026ns=1\u0026asi=1\u0026ref=https%3A%2F%2Frip.linkvertise.lol%2F\u0026jst=0\u0026enr=0\u0026lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20rv%3A134.0)%20gecko%2F20100101%20firefox%2F134.0\u0026tzd=0\u0026uloc=\u0026if=0\u0026_X1Aw=1761508427388\u0026crc=1 HTTP/1.1\r\nHost: kseseemyresum.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://rip.linkvertise.lol\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 205 Reset Content\r\ncontent-type: text/plain\r\ncontent-length: 0\r\ndate: Sun, 26 Oct 2025 19:53:47 GMT\r\naccept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List\r\nset-cookie: AWSALB=FnrTFbUFOEF5GLR3xzDyeYLnIiWv+JGTuO0vGC1LrFUGtgtOrt1zXNMNv1Gna9TCDe6Qvlihr0/0BZOcN4DXqmUe522UaIWMEYwpvmlNtjNJ4dfcbA84HvMjrBp6; Expires=Sun, 02 Nov 2025 19:53:47 GMT; Path=/\nAWSALBCORS=FnrTFbUFOEF5GLR3xzDyeYLnIiWv+JGTuO0vGC1LrFUGtgtOrt1zXNMNv1Gna9TCDe6Qvlihr0/0BZOcN4DXqmUe522UaIWMEYwpvmlNtjNJ4dfcbA84HvMjrBp6; Expires=Sun, 02 Nov 2025 19:53:47 GMT; Path=/; SameSite=None\ncsu=5948a338-8b45-4846-8816-88060a720977\ncsu=1699229593392663\r\nserver: openresty/1.17.8.2\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://rip.linkvertise.lol\r\ncache-control: no-store, no-cache, must-revalidate, no-transform\r\npragma: no-cache\r\np3p: CP=\"NID DSP ALL COR\"\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: Q9za6lOwZ81cmT11Crd_YV1ofIT2fO79D2bzwOVCbY4EBpa1dI0u7w==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"205","status_text":"Reset Content","fingerprints":[{"name":"Amazon ALB","description":"Amazon Application Load Balancer (ALB) distributes incoming application traffic to increase availability and support content-based routing.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty:1.17.8.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T13:59:59.325235Z","times_seen":13977692,"resource_available":true,"data":null}},"time_used":702,"timings":{"blocked":277,"dns":115,"connect":1,"send":0,"wait":149,"receive":1,"ssl":156},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"kseseemyresum.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"kseseemyresum.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"kseseemyresum.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rip.linkvertise.lol/cdn-cgi/rum?","fqdn":"rip.linkvertise.lol","domain":"linkvertise.lol","tld":"lol"},"ip":{"addr":"172.67.206.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rip.linkvertise.lol/","date":"2025-10-26T19:53:47.593Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"linkvertise.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Oct 2025 09:29:49 GMT","end":"Thu, 15 Jan 2026 10:27:18 GMT"},"fingerprint":{"sha1":"71:ED:4F:62:93:AA:E3:67:36:0B:0E:0C:9C:87:97:E5:95:05:40:ED","sha256":"B2:81:F8:B6:D5:86:F0:AA:95:11:B2:3D:53:A1:8C:7C:DE:4B:2D:5C:9C:09:B0:0D:27:60:16:53:BD:2B:45:EE"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: rip.linkvertise.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rip.linkvertise.lol/\r\ncontent-type: application/json\r\nContent-Length: 1025\r\nOrigin: https://rip.linkvertise.lol\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cfzs_google-analytics_v4=%7B%22vbkC_pageviewCounter%22%3A%7B%22v%22%3A%221%22%7D%7D; cfz_google-analytics_v4=%7B%22vbkC_engagementDuration%22%3A%7B%22v%22%3A%220%22%2C%22e%22%3A1793044426415%7D%2C%22vbkC_engagementStart%22%3A%7B%22v%22%3A%221761508426415%22%2C%22e%22%3A1793044426415%7D%2C%22vbkC_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1793044426415%7D%2C%22vbkC_ga4sid%22%3A%7B%22v%22%3A%221431985558%22%2C%22e%22%3A1761510226415%7D%2C%22vbkC_session_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1793044426415%7D%2C%22vbkC_ga4%22%3A%7B%22v%22%3A%2204824570-1e01-40fd-9fa2-c895abd713b0%22%2C%22e%22%3A1793044426415%7D%2C%22vbkC_let%22%3A%7B%22v%22%3A%221761508426415%22%2C%22e%22%3A1793044426415%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\naccess-control-allow-origin: https://rip.linkvertise.lol\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-max-age: 86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vTxXTYJ89Ga3NXP3kAO8H1WwF1WnrDJMQHNI7nkORC8O3tcuhSX5PXFo1hELtH%2FwIG7S9tsNcHeTDcfqj1Y%2Byf8f2O5hoV595dW8fnis2FSG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 26 Oct 2025 19:53:47 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncf-ray: 994c80786bceb51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T13:59:59.325235Z","times_seen":13977692,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rip.linkvertise.lol/favicon.ico","fqdn":"rip.linkvertise.lol","domain":"linkvertise.lol","tld":"lol"},"ip":{"addr":"172.67.206.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rip.linkvertise.lol/","date":"2025-10-26T19:53:45.801Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"linkvertise.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Oct 2025 09:29:49 GMT","end":"Thu, 15 Jan 2026 10:27:18 GMT"},"fingerprint":{"sha1":"71:ED:4F:62:93:AA:E3:67:36:0B:0E:0C:9C:87:97:E5:95:05:40:ED","sha256":"B2:81:F8:B6:D5:86:F0:AA:95:11:B2:3D:53:A1:8C:7C:DE:4B:2D:5C:9C:09:B0:0D:27:60:16:53:BD:2B:45:EE"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: rip.linkvertise.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rip.linkvertise.lol/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 26 Oct 2025 19:53:45 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\ncontent-disposition: inline; filename=favicon.ico\r\nlast-modified: Fri, 24 Oct 2025 22:44:52 GMT\r\ncache-control: public, max-age=14400, immutable\r\nexpires: Sun, 26 Oct 2025 19:53:48 GMT\r\nx-content-type-options: nosniff\r\nx-rg-anticonfig: {\"cached\":true,\"Cf-Cached\":true}\r\nx-rg-cacheid: e97bbea8-595e-4cf7-9e9f-12db9534b528-12609599-3304-4fe8-abf2-a8d9e6e18d51\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-RG-AntiConfig, X-RG-CacheID, x-RG-CloudflareChannel, x-RG-MiniTLSHandlerID, x-RG-SecureConnection, x-RG-TorNetworkHandler\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nexpect-ct: max-age=86400, enforce\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2ef8Xz8kbBU1wcUQev55QzwytdDGAUMtFN6LpK89TXeL9FXEh5CNWUU6Na2Bu9Jb3LmfVh%2BjMqFZh7M3npeCXn783E44F5hG%2B75U1VzzeCfp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\netag: W/\"1761345892.7289596-96524-2383874633\"\r\nreferrer-policy: same-origin\r\ncf-ray: 994c806d1b1eb51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":96524,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"PNG image data, 501 x 498, 8-bit/color RGBA, non-interlaced","md5":"57fbce86a881885211f90689863dacff","sha1":"03ac5426c9b61d4ed5cd5e0001c4693394036847","sha256":"b9f56b37600a3c97979c4e565a8212cf19dec3506ddaecc1204f7d5b199bbe7b","sha512":"b9decc48c977ff0279ce9bce7cdce9193ab22fe54d06b69c9a14131910cb2c8217c6e84813270adf22dd7506d7ed032feb1790a02a8d1eef46fa1f709c050827","ssdeep":"1536:t23v7MEDpkzKpeGsePq5fukLhrgJGCZG2BMAHCQd65m3Zi7d27jnjK9fPAC3yckM:g/SfOOLI5CkTpih0jnjK9fIyXkDYf","tlshash":"989302621c0c86b051a365c3cebbe4e49472d3ddbf0c122e1daae93e73d568c9dc6619","first_seen":"2025-09-20T12:36:02.754702Z","last_seen":"2026-03-30T03:07:19.006368Z","times_seen":7,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rip.linkvertise.lol/","date":"2025-10-26T19:53:45.820Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Oct 2025 06:18:58 GMT","end":"Tue, 20 Jan 2026 07:18:54 GMT"},"fingerprint":{"sha1":"C7:F8:82:22:3E:BC:9D:F4:7B:0A:EF:A0:EE:C2:C2:D1:34:7E:55:1D","sha256":"EA:85:37:F0:6A:CB:4D:61:4B:3D:2C:58:4B:FF:E5:CE:3C:33:94:71:D8:11:77:5A:C1:99:2F:94:1F:D2:FD:F1"}}},"request":{"raw":"GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://rip.linkvertise.lol\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 26 Oct 2025 19:53:45 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2024.6.1\"\r\nlast-modified: Thu, 06 Jun 2024 15:52:56 GMT\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 994c806d795556b4-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19948,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (19948), with no line terminators","md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-04-20T13:57:39.974061Z","times_seen":333159,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":26,"dns":1,"connect":1,"send":0,"wait":16,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rip.linkvertise.lol/cdn-cgi/zaraz/s.js?z=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","fqdn":"rip.linkvertise.lol","domain":"linkvertise.lol","tld":"lol"},"ip":{"addr":"172.67.206.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rip.linkvertise.lol/","date":"2025-10-26T19:53:46.411Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"linkvertise.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Oct 2025 09:29:49 GMT","end":"Thu, 15 Jan 2026 10:27:18 GMT"},"fingerprint":{"sha1":"71:ED:4F:62:93:AA:E3:67:36:0B:0E:0C:9C:87:97:E5:95:05:40:ED","sha256":"B2:81:F8:B6:D5:86:F0:AA:95:11:B2:3D:53:A1:8C:7C:DE:4B:2D:5C:9C:09:B0:0D:27:60:16:53:BD:2B:45:EE"}}},"request":{"raw":"GET /cdn-cgi/zaraz/s.js?z=JTdCJTIyZXhlY3V0ZWQlMjIlM0ElNUIlNUQlMkMlMjJ0JTIyJTNBJTIyRnJlZSUyMExpbmt2ZXJ0aXNlJTIwQnlwYXNzJTIwVG9vbCUyMCU3QyUyMEJ5cGFzcyUyMEFkcyUyMEluc3RhbnRseSUyMCU3QyUyMFJJUC5MSU5LVkVSVElTRS5MT0wlMjIlMkMlMjJ4JTIyJTNBMC43MTA2MjE3NTU0Nzc1MjY5JTJDJTIydyUyMiUzQTEyODAlMkMlMjJoJTIyJTNBMTAyNCUyQyUyMmolMjIlM0ExMDI0JTJDJTIyZSUyMiUzQTEyODAlMkMlMjJsJTIyJTNBJTIyaHR0cHMlM0ElMkYlMkZyaXAubGlua3ZlcnRpc2UubG9sJTJGJTIyJTJDJTIyciUyMiUzQSUyMiUyMiUyQyUyMmslMjIlM0EyNCUyQyUyMm4lMjIlM0ElMjJVVEYtOCUyMiUyQyUyMm8lMjIlM0EwJTJDJTIycSUyMiUzQSU1QiU1RCU3RA== HTTP/1.1\r\nHost: rip.linkvertise.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rip.linkvertise.lol/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 26 Oct 2025 19:53:46 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\ncontent-encoding: br\r\naccess-control-allow-origin: https://rip.linkvertise.lol\r\nset-cookie: cfzs_google-analytics_v4=%7B%22vbkC_pageviewCounter%22%3A%7B%22v%22%3A%221%22%7D%7D; Domain=linkvertise.lol; Path=/; HttpOnly; Secure; SameSite=Lax\ngoogle-analytics_v4_vbkC__pageviewCounter=; Domain=linkvertise.lol; Path=/; Max-Age=0; HttpOnly; Secure; SameSite=Lax\ngoogle-analytics_v4_vbkC__engagementDuration=; Domain=linkvertise.lol; Path=/; Max-Age=0; HttpOnly; Secure; SameSite=Lax\ngoogle-analytics_v4_vbkC__engagementStart=; Domain=linkvertise.lol; Path=/; Max-Age=0; HttpOnly; Secure; SameSite=Lax\ngoogle-analytics_v4_vbkC__counter=; Domain=linkvertise.lol; Path=/; Max-Age=0; HttpOnly; Secure; SameSite=Lax\ngoogle-analytics_v4_vbkC__ga4sid=; Domain=linkvertise.lol; Path=/; Max-Age=0; HttpOnly; Secure; SameSite=Lax\ngoogle-analytics_v4_vbkC__session_counter=; Domain=linkvertise.lol; Path=/; Max-Age=0; HttpOnly; Secure; SameSite=Lax\ngoogle-analytics_v4_vbkC__ga4=; Domain=linkvertise.lol; Path=/; Max-Age=0; HttpOnly; Secure; SameSite=Lax\ngoogle-analytics_v4_vbkC__let=; Domain=linkvertise.lol; Path=/; Max-Age=0; HttpOnly; Secure; SameSite=Lax\ncfz_google-analytics_v4=%7B%22vbkC_engagementDuration%22%3A%7B%22v%22%3A%220%22%2C%22e%22%3A1793044426415%7D%2C%22vbkC_engagementStart%22%3A%7B%22v%22%3A%221761508426415%22%2C%22e%22%3A1793044426415%7D%2C%22vbkC_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1793044426415%7D%2C%22vbkC_ga4sid%22%3A%7B%22v%22%3A%221431985558%22%2C%22e%22%3A1761510226415%7D%2C%22vbkC_session_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1793044426415%7D%2C%22vbkC_ga4%22%3A%7B%22v%22%3A%2204824570-1e01-40fd-9fa2-c895abd713b0%22%2C%22e%22%3A1793044426415%7D%2C%22vbkC_let%22%3A%7B%22v%22%3A%221761508426415%22%2C%22e%22%3A1793044426415%7D%7D; Domain=linkvertise.lol; Path=/; Max-Age=31536000; HttpOnly; Secure; SameSite=Lax\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Set-Cookie, Cache-Control\r\naccess-control-allow-methods: GET, HEAD, POST, OPTIONS\r\naccess-control-max-age: 600\r\nx-robots-tag: none\r\ncf-ray: 994c8070fb6bb51b-OSL\r\nserver: cloudflare\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=lFfzlw9TogJAgXKsQ1BoOauIl6QedxwMLyGMOP0KgNu750JglGUKRCpU1Fp1ThtoKTKveJDk0jOnLWR%2BlH%2BbBbpeUiECIGy0K9%2FZqksun0%2Flz1ytHzWqbO4P4wyV5Pi4tZXshf5N\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=2081\u0026min_rtt=789\u0026rtt_var=1962\u0026sent=182\u0026recv=25\u0026lost=0\u0026retrans=0\u0026sent_bytes=194256\u0026recv_bytes=3814\u0026delivery_rate=18611838\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=50208\u0026ss_exit_bw=18611838\u0026ss_exit_reason=2\u0026cwnd=35853\u0026unsent_bytes=0\u0026cid=bc4288c886d17fd9\u0026ts=848\u0026inflight_dur=59\u0026x=54\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5667,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3292)","md5":"adef529721b5f6023810e507fc4f4bf2","sha1":"004b397e60e9ab789b00c328753532eb3ae96d9b","sha256":"fb697f19f32763c68f9097477eb50c6da4fe6484a94c9b037c73cb8f6203b433","sha512":"7eb75c58a828b306e1ebe09d721dcdfd47c9c406a21af23d08cd973e2a2ce116892fad804537d3b2f72d6c49d16b6091934961d05f345b35384092a0c6e1ecbd","ssdeep":"96:JjbjUiO5cTcrDi5KyFPlQBmMZA5M85YwYM2zWWigGFYY8/Fa4G4Bg0OUGScXGX7O:JjbjUiQdSvFtQEMuTCM2zWhgGCYeNBle","tlshash":"35c1c8692ea5643958ca63bff03e22c0e9bd6134f0235480c84958c5adedf7f61d694c","first_seen":"2025-10-26T19:54:16.605662Z","last_seen":"2025-10-27T13:55:40.368777Z","times_seen":2,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rip.linkvertise.lol/favicon.ico","fqdn":"rip.linkvertise.lol","domain":"linkvertise.lol","tld":"lol"},"ip":{"addr":"172.67.206.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rip.linkvertise.lol/","date":"2025-10-26T19:53:46.476Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"linkvertise.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Oct 2025 09:29:49 GMT","end":"Thu, 15 Jan 2026 10:27:18 GMT"},"fingerprint":{"sha1":"71:ED:4F:62:93:AA:E3:67:36:0B:0E:0C:9C:87:97:E5:95:05:40:ED","sha256":"B2:81:F8:B6:D5:86:F0:AA:95:11:B2:3D:53:A1:8C:7C:DE:4B:2D:5C:9C:09:B0:0D:27:60:16:53:BD:2B:45:EE"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: rip.linkvertise.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rip.linkvertise.lol/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 26 Oct 2025 19:53:46 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\ncontent-disposition: inline; filename=favicon.ico\r\nlast-modified: Fri, 24 Oct 2025 22:44:52 GMT\r\ncache-control: public, max-age=14400, immutable\r\nexpires: Sun, 26 Oct 2025 19:53:48 GMT\r\nx-content-type-options: nosniff\r\nx-rg-anticonfig: {\"cached\":true,\"Cf-Cached\":true}\r\nx-rg-cacheid: e97bbea8-595e-4cf7-9e9f-12db9534b528-12609599-3304-4fe8-abf2-a8d9e6e18d51\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-RG-AntiConfig, X-RG-CacheID, x-RG-CloudflareChannel, x-RG-MiniTLSHandlerID, x-RG-SecureConnection, x-RG-TorNetworkHandler\r\nage: 0\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nexpect-ct: max-age=86400, enforce\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BiQLGREIz03JoAhnfSqXPYl5Z4eY%2BMKbHjYUXHfyMYg%2FEn0YnV8B5SGKynUrgx3B7rugDoBQcsyq0Ay8DERx4ZoDP6YlgKbNf%2FvAjGcMFFtF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\netag: W/\"1761345892.7289596-96524-2383874633\"\r\nreferrer-policy: same-origin\r\ncf-ray: 994c80715b70b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":96524,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"PNG image data, 501 x 498, 8-bit/color RGBA, non-interlaced","md5":"57fbce86a881885211f90689863dacff","sha1":"03ac5426c9b61d4ed5cd5e0001c4693394036847","sha256":"b9f56b37600a3c97979c4e565a8212cf19dec3506ddaecc1204f7d5b199bbe7b","sha512":"b9decc48c977ff0279ce9bce7cdce9193ab22fe54d06b69c9a14131910cb2c8217c6e84813270adf22dd7506d7ed032feb1790a02a8d1eef46fa1f709c050827","ssdeep":"1536:t23v7MEDpkzKpeGsePq5fukLhrgJGCZG2BMAHCQd65m3Zi7d27jnjK9fPAC3yckM:g/SfOOLI5CkTpih0jnjK9fIyXkDYf","tlshash":"989302621c0c86b051a365c3cebbe4e49472d3ddbf0c122e1daae93e73d568c9dc6619","first_seen":"2025-09-20T12:36:02.754702Z","last_seen":"2026-03-30T03:07:19.006368Z","times_seen":7,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026dsh=S1477010684:1761508427048774\u0026ifkv=ARESoU10PuCSAdXEi4bQXtwRvNmYM28BBvqIQgHyqKdx-rFYuYku3pvpg0NTm860bK0fwj_G1xT0","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.147.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rip.linkvertise.lol/","date":"2025-10-26T19:53:47.094Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:35:30 GMT","end":"Wed, 24 Dec 2025 14:35:29 GMT"},"fingerprint":{"sha1":"AE:F2:53:4B:65:F0:F4:20:9B:4A:F3:20:5F:7F:F6:54:DD:3C:34:95","sha256":"64:EF:B8:F2:46:69:C8:F7:7C:73:9C:2A:C0:B9:59:CB:56:34:8B:98:72:C2:5B:83:1B:77:58:A6:7D:01:07:73"}}},"request":{"raw":"GET /InteractiveLogin?continue=https://www.youtube.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026dsh=S1477010684:1761508427048774\u0026ifkv=ARESoU10PuCSAdXEi4bQXtwRvNmYM28BBvqIQgHyqKdx-rFYuYku3pvpg0NTm860bK0fwj_G1xT0 HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: text/html; charset=UTF-8\r\nset-cookie: __Host-GAPS=1:N6PmxNBzE0AE2RNfL_IMmIf32PDhLg:UlmOMM9Ri95PkVod;Path=/;Expires=Tue, 26-Oct-2027 19:53:47 GMT;Secure;HttpOnly;Priority=HIGH\r\nx-frame-options: DENY\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sun, 26 Oct 2025 19:53:47 GMT\r\nlocation: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico\u0026dsh=S1477010684%3A1761508427048774\u0026hl=en\u0026ifkv=ARESoU1Hzc76mmR44wtSYzQAy6eDsUAgXnNm1n5nE28ca7Z01PNqRNFPZMdjW9BNU8CxTlrQvQ3t\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /cspreport, script-src 'nonce-t6AjVjWZjakhNoVpHQEFSQ' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_gse_qebhlk\"\r\nreport-to: {\"group\":\"coop_gse_qebhlk\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gse_qebhlk\"}]}\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 418\r\nserver: GSE\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T13:59:59.325235Z","times_seen":13977692,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"utysolomonaut.com/aXhmRDZGRwU3CwtLIA1XPy4AFm5YKT8CXisbMHVCMUgCfGMuD0AwXw1FV3UFX0BechAZEQJ5B08LEiVCHAtbdRAAFgArC08OW3UYWkxIdwBHTkAxC1heEjRXDkVXYkYdDAp5B15OV3EGUUxUcgJdTw","fqdn":"utysolomonaut.com","domain":"utysolomonaut.com","tld":"com"},"ip":{"addr":"104.21.70.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rip.linkvertise.lol/","date":"2025-10-26T19:53:46.514Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"utysolomonaut.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Oct 2025 07:15:27 GMT","end":"Mon, 05 Jan 2026 08:12:02 GMT"},"fingerprint":{"sha1":"57:9B:3F:B3:1E:64:0B:B5:56:78:E7:05:9B:89:D4:D2:35:C0:28:C1","sha256":"74:0B:E3:64:4D:AD:0A:85:52:4A:41:BD:A5:D8:BC:CA:66:A4:B3:08:CA:DE:B1:93:F9:24:FF:C5:BF:43:4F:26"}}},"request":{"raw":"GET /aXhmRDZGRwU3CwtLIA1XPy4AFm5YKT8CXisbMHVCMUgCfGMuD0AwXw1FV3UFX0BechAZEQJ5B08LEiVCHAtbdRAAFgArC08OW3UYWkxIdwBHTkAxC1heEjRXDkVXYkYdDAp5B15OV3EGUUxUcgJdTw HTTP/1.1\r\nHost: utysolomonaut.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sun, 26 Oct 2025 19:53:46 GMT\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=acqpXgifnoaEvIzZw4z0xJI5ltI0jds47Yo79boRTqkkbuu7y8teIRUo%2BRw990yOJ0XZp1OKd7SAwDe9cq%2Fe24x4skKrRg9OLII1lMaCK5lE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 994c8071cd295ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T13:59:59.325235Z","times_seen":13977692,"resource_available":true,"data":null}},"time_used":196,"timings":{"blocked":24,"dns":21,"connect":1,"send":0,"wait":124,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"utysolomonaut.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"utysolomonaut.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"utysolomonaut.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rip.linkvertise.lol/cdn/lootlabs.ico","fqdn":"rip.linkvertise.lol","domain":"linkvertise.lol","tld":"lol"},"ip":{"addr":"172.67.206.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rip.linkvertise.lol/","date":"2025-10-26T19:53:45.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"linkvertise.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Oct 2025 09:29:49 GMT","end":"Thu, 15 Jan 2026 10:27:18 GMT"},"fingerprint":{"sha1":"71:ED:4F:62:93:AA:E3:67:36:0B:0E:0C:9C:87:97:E5:95:05:40:ED","sha256":"B2:81:F8:B6:D5:86:F0:AA:95:11:B2:3D:53:A1:8C:7C:DE:4B:2D:5C:9C:09:B0:0D:27:60:16:53:BD:2B:45:EE"}}},"request":{"raw":"GET /cdn/lootlabs.ico HTTP/1.1\r\nHost: rip.linkvertise.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rip.linkvertise.lol/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 26 Oct 2025 19:53:45 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\ncontent-disposition: inline; filename=lootlabs.ico\r\nlast-modified: Fri, 24 Oct 2025 22:45:33 GMT\r\ncache-control: public, max-age=14400, immutable\r\nexpires: Sun, 26 Oct 2025 19:53:48 GMT\r\nx-content-type-options: nosniff\r\nx-rg-anticonfig: {\"cached\":true,\"Cf-Cached\":true}\r\nx-rg-cacheid: 5d3a7e55-608b-4e8c-a681-c1fcb7e1e135-394d18cb-c9c9-40df-8283-495fca975aac\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-RG-AntiConfig, X-RG-CacheID, x-RG-CloudflareChannel, x-RG-MiniTLSHandlerID, x-RG-SecureConnection, x-RG-TorNetworkHandler\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nexpect-ct: max-age=86400, enforce\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KhAU1Rz13xQzJjKOgZPD7p0oSETT%2BoqVj%2BQY3LENlqb5ERLp25L2QTDrvWkkcSGZdEyME29z0uwjFYakjbPlogjWkVZ6O1CaTJlueRv7yJ2n\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\netag: W/\"1761345933.311748-1977-4026469754\"\r\nreferrer-policy: same-origin\r\ncf-ray: 994c806d2b20b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1977,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"8ea6c856c2e6ed9efa73825a51c684bb","sha1":"3586e87be7265a35676a4d416b547771726ee06a","sha256":"21afbdfda4f9fe48eba0b780eb6af33cd9eddcbdde301756fd1245302141e5fb","sha512":"603fb7987bf2ab0dde2f3635068d93229b1a7eed0eda99fc30586fecabeea860cd2cbd1b815887abca96f292a259586b6c26bf9a8afb799d0e8e7b8403c270a9","ssdeep":"","tlshash":"4f414ce807f4dd6a4095954247b441f6d0328dbb610b284efc65fc8d3863674915d1c2","first_seen":"2025-09-20T12:36:02.74473Z","last_seen":"2025-12-27T13:57:34.53218Z","times_seen":4,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico\u0026dsh=S1477010684%3A1761508427048774\u0026hl=en\u0026ifkv=ARESoU1Hzc76mmR44wtSYzQAy6eDsUAgXnNm1n5nE28ca7Z01PNqRNFPZMdjW9BNU8CxTlrQvQ3t\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.147.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rip.linkvertise.lol/","date":"2025-10-26T19:53:47.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:35:30 GMT","end":"Wed, 24 Dec 2025 14:35:29 GMT"},"fingerprint":{"sha1":"AE:F2:53:4B:65:F0:F4:20:9B:4A:F3:20:5F:7F:F6:54:DD:3C:34:95","sha256":"64:EF:B8:F2:46:69:C8:F7:7C:73:9C:2A:C0:B9:59:CB:56:34:8B:98:72:C2:5B:83:1B:77:58:A6:7D:01:07:73"}}},"request":{"raw":"GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico\u0026dsh=S1477010684%3A1761508427048774\u0026hl=en\u0026ifkv=ARESoU1Hzc76mmR44wtSYzQAy6eDsUAgXnNm1n5nE28ca7Z01PNqRNFPZMdjW9BNU8CxTlrQvQ3t\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sun, 26 Oct 2025 19:53:47 GMT\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport, script-src 'nonce-hNcpFNtWKOtMz3A7_zevmw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://www.google.com/tools/feedback/ https://www.gstatic.com/feedback/js/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/ https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://support.google.com/inapp/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"AccountsSignInUi\"\r\nreport-to: {\"group\":\"AccountsSignInUi\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi\"}]}\r\ncontent-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js https://translate.google.com/translate_a/element.js https://www.google.com/recaptcha/api.js https://www.google.com/recaptcha/enterprise.js https://www.gstatic.com/recaptcha/ https://www.google.com/tools/feedback/chat_load.js https://www.google.com/tools/feedback/help_api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.gstatic.com/feedback/js/ https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.Mp9mjkH_buc.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://translate.googleapis.com/_/translate_http/_/js/ https://www.gstatic.com/recaptcha/releases/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T13:59:59.325235Z","times_seen":13977692,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rip.linkvertise.lol/cdn/admaven.ico","fqdn":"rip.linkvertise.lol","domain":"linkvertise.lol","tld":"lol"},"ip":{"addr":"172.67.206.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rip.linkvertise.lol/","date":"2025-10-26T19:53:45.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"linkvertise.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Oct 2025 09:29:49 GMT","end":"Thu, 15 Jan 2026 10:27:18 GMT"},"fingerprint":{"sha1":"71:ED:4F:62:93:AA:E3:67:36:0B:0E:0C:9C:87:97:E5:95:05:40:ED","sha256":"B2:81:F8:B6:D5:86:F0:AA:95:11:B2:3D:53:A1:8C:7C:DE:4B:2D:5C:9C:09:B0:0D:27:60:16:53:BD:2B:45:EE"}}},"request":{"raw":"GET /cdn/admaven.ico HTTP/1.1\r\nHost: rip.linkvertise.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rip.linkvertise.lol/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 26 Oct 2025 19:53:45 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\ncontent-disposition: inline; filename=admaven.ico\r\nlast-modified: Fri, 24 Oct 2025 22:45:35 GMT\r\ncache-control: public, max-age=14400, immutable\r\nexpires: Sun, 26 Oct 2025 19:53:48 GMT\r\nx-content-type-options: nosniff\r\nx-rg-anticonfig: {\"cached\":true,\"Cf-Cached\":true}\r\nx-rg-cacheid: f53b1354-9f6d-48c8-adc4-175b1393fa40-1b5f86dc-c0b2-467b-a441-816ad629f6a7\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-RG-AntiConfig, X-RG-CacheID, x-RG-CloudflareChannel, x-RG-MiniTLSHandlerID, x-RG-SecureConnection, x-RG-TorNetworkHandler\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nexpect-ct: max-age=86400, enforce\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B4MzG6E90oFBzCN%2FuhoXWnY1IEBmyZ%2FGch2%2B7LVU%2BvPXmVOhv66N6GPh3CViB2%2FJIqjdnCND9HJI382NQjL8jYrsAAxCj6Jg5ditZZ7%2FJSLX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\netag: W/\"1761345935.8097963-8910-3777694966\"\r\nreferrer-policy: same-origin\r\ncf-ray: 994c806d2b21b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8910,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"PNG image data, 507 x 473, 8-bit/color RGBA, non-interlaced","md5":"1bdacdab93837a76748481378b4be894","sha1":"210182ac453ed7701492751422134a79d44fee3c","sha256":"d04d8653bb7ac833cab807772b516b83aa8f1f8fef2758de5df9d6693a27179f","sha512":"59c05bf285c8bfe71c159dcd8e22a6ecad9959f1467b132643bc42ff69b92cd2cf8e8dff13ba23697ca85be378dfb5917774bae8c491996f0ac0f1d979f9dc8a","ssdeep":"192:SS6/F6X7iVLU/DLqKVZW73pEemdA7JOfRPWpSNugM5X+:tSF6X7iVU7LqI8DsA7JOZPWpGMV+","tlshash":"e102ad548c9bc474c6a90c7e774785f20d88df0412a8aeb7f51e085678bbf5679f1093","first_seen":"2025-09-20T12:36:02.775023Z","last_seen":"2025-12-27T13:57:34.534075Z","times_seen":4,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rip.linkvertise.lol/cdn/lockr.ico","fqdn":"rip.linkvertise.lol","domain":"linkvertise.lol","tld":"lol"},"ip":{"addr":"172.67.206.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rip.linkvertise.lol/","date":"2025-10-26T19:53:45.818Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"linkvertise.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Oct 2025 09:29:49 GMT","end":"Thu, 15 Jan 2026 10:27:18 GMT"},"fingerprint":{"sha1":"71:ED:4F:62:93:AA:E3:67:36:0B:0E:0C:9C:87:97:E5:95:05:40:ED","sha256":"B2:81:F8:B6:D5:86:F0:AA:95:11:B2:3D:53:A1:8C:7C:DE:4B:2D:5C:9C:09:B0:0D:27:60:16:53:BD:2B:45:EE"}}},"request":{"raw":"GET /cdn/lockr.ico HTTP/1.1\r\nHost: rip.linkvertise.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rip.linkvertise.lol/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 26 Oct 2025 19:53:45 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\ncontent-disposition: inline; filename=lockr.ico\r\nlast-modified: Fri, 24 Oct 2025 22:45:33 GMT\r\ncache-control: public, max-age=14400, immutable\r\nexpires: Sun, 26 Oct 2025 19:53:48 GMT\r\nx-content-type-options: nosniff\r\nx-rg-anticonfig: {\"cached\":true,\"Cf-Cached\":true}\r\nx-rg-cacheid: a4394677-371f-45b8-9034-71765f9d0e3b-80c67cba-7a24-43ec-bd04-957c29ac72a0\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-RG-AntiConfig, X-RG-CacheID, x-RG-CloudflareChannel, x-RG-MiniTLSHandlerID, x-RG-SecureConnection, x-RG-TorNetworkHandler\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nexpect-ct: max-age=86400, enforce\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FnqMwjCSFhvUy3NN5R4%2BMUME6eeZRMxSxhIMQ%2BodHTiALjO70zOZfimldnOyLvgfYMQXZPmNmKpyWMfjckjd6JnGP0TOqIaA5pwmCWDI%2BKcl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\netag: W/\"1761345933.0267425-13054-3352300597\"\r\nreferrer-policy: same-origin\r\ncf-ray: 994c806d2b22b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13054,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 1 icon, 56x56, 32 bits/pixel","md5":"b2c8177996d20a0531272b6e1eb233be","sha1":"4a449393463d27caff5b8bd22ae8399f644e454c","sha256":"f0a528d074dfaaa106670288aadee5e2607b55cb1c60eb736d0f8af3c3194af8","sha512":"55977a49f939ce2fad8b0e29e23792afff177595c27c245f6afe96be6e9d5c2b96710965e6e375dfa9d6bed3c2cd32cf0b851e291defdfb828758ea7209f57dd","ssdeep":"48:MRCDUhv4nct/j4jusQJknZ2Ae0vrueKqg/bGaq6wxVVrHbYwQC:oC4tFMjVQJkZPe6utNUXHbvJ","tlshash":"d2424f11b081e811d8900d3ecc99d8f8935dbe6a9c0a3e97b6547fcd7d7b18a8412a2a","first_seen":"2025-06-24T22:07:29.420828Z","last_seen":"2026-04-15T15:57:31.73878Z","times_seen":83,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rip.linkvertise.lol/cdn/dod2.js","fqdn":"rip.linkvertise.lol","domain":"linkvertise.lol","tld":"lol"},"ip":{"addr":"172.67.206.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rip.linkvertise.lol/","date":"2025-10-26T19:53:46.502Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"linkvertise.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Oct 2025 09:29:49 GMT","end":"Thu, 15 Jan 2026 10:27:18 GMT"},"fingerprint":{"sha1":"71:ED:4F:62:93:AA:E3:67:36:0B:0E:0C:9C:87:97:E5:95:05:40:ED","sha256":"B2:81:F8:B6:D5:86:F0:AA:95:11:B2:3D:53:A1:8C:7C:DE:4B:2D:5C:9C:09:B0:0D:27:60:16:53:BD:2B:45:EE"}}},"request":{"raw":"GET /cdn/dod2.js HTTP/1.1\r\nHost: rip.linkvertise.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rip.linkvertise.lol/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cfzs_google-analytics_v4=%7B%22vbkC_pageviewCounter%22%3A%7B%22v%22%3A%221%22%7D%7D; cfz_google-analytics_v4=%7B%22vbkC_engagementDuration%22%3A%7B%22v%22%3A%220%22%2C%22e%22%3A1793044426415%7D%2C%22vbkC_engagementStart%22%3A%7B%22v%22%3A%221761508426415%22%2C%22e%22%3A1793044426415%7D%2C%22vbkC_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1793044426415%7D%2C%22vbkC_ga4sid%22%3A%7B%22v%22%3A%221431985558%22%2C%22e%22%3A1761510226415%7D%2C%22vbkC_session_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1793044426415%7D%2C%22vbkC_ga4%22%3A%7B%22v%22%3A%2204824570-1e01-40fd-9fa2-c895abd713b0%22%2C%22e%22%3A1793044426415%7D%2C%22vbkC_let%22%3A%7B%22v%22%3A%221761508426415%22%2C%22e%22%3A1793044426415%7D%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 26 Oct 2025 19:53:46 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\ncontent-disposition: inline; filename=dod2.js\r\nlast-modified: Fri, 24 Oct 2025 22:45:30 GMT\r\ncache-control: public, max-age=14400, immutable\r\nexpires: Sun, 26 Oct 2025 19:53:49 GMT\r\nx-content-type-options: nosniff\r\nx-rg-anticonfig: {\"cached\":true,\"Cf-Cached\":true}\r\nx-rg-cacheid: f308300b-4749-4674-979d-57e7444b6530-41912f19-dcea-4751-afd0-f9ec3743f8d6\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-RG-AntiConfig, X-RG-CacheID, x-RG-CloudflareChannel, x-RG-MiniTLSHandlerID, x-RG-SecureConnection, x-RG-TorNetworkHandler\r\ncf-cache-status: REVALIDATED\r\npriority: u=3,i=?0\r\nexpect-ct: max-age=86400, enforce\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ERHD7U3t32qGQ2CvQh%2F%2FUkf5oI%2BBzjlr0L6v0atuT8l5rnIvsZBWvz6uZisgXqunjaAtQYbDAHb7%2B9fMuNVkW6TmhjglJY4kvwxQ7jDFRiJv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\netag: W/\"1761345930.4136918-58514-2926840613\"\r\nreferrer-policy: same-origin\r\ncf-ray: 994c80717b71b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58410,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (16724)","md5":"b454a8c07d94f12fbcac70fd14127594","sha1":"10b1ea07ffc2bb3bf2344c1dae772092e0f5abc0","sha256":"07fe07fba5d95a053fc788d008e9ebf3ea95d9e64e8a3ccb10deee66e8a225b5","sha512":"3d4ece880480255f8c0f5502fedc508a52f9dadc16d2d083fefddae8add5cbbfb016689ed567c4217e35596d8417f37d4c831e686695692d64acf6bf5711e939","ssdeep":"1536:LlI/HntGlHBIDrp8PAuBNbJy9ZqsQlzNXHHqt7:OHtGl7AubbJy96NXHKJ","tlshash":"cf4339897692313183a370f6847f570fb13b54aafd0855a8b096d4d42db8e9d02bbf9c","first_seen":"2025-09-20T12:36:02.776784Z","last_seen":"2025-11-08T23:02:49.249142Z","times_seen":4,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ingajoytowork.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","fqdn":"ingajoytowork.org","domain":"ingajoytowork.org","tld":"org"},"ip":{"addr":"13.33.235.18","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://rip.linkvertise.lol/","date":"2025-10-26T19:53:46.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ingajoytowork.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Tue, 12 Aug 2025 00:00:00 GMT","end":"Thu, 10 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:20:A2:52:47:63:26:D3:51:40:E7:4F:D5:E6:3A:98:31:CA:0C:9D","sha256":"2A:D9:DB:EE:37:D7:A4:B0:E8:1F:6B:B7:D6:34:20:9F:D3:21:3E:DF:0F:94:88:FE:83:51:DE:D3:DB:15:D6:5B"}}},"request":{"raw":"GET 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 HTTP/1.1\r\nHost: ingajoytowork.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\ncontent-length: 1222\r\ndate: Sun, 26 Oct 2025 19:53:47 GMT\r\naccept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List\r\nset-cookie: AWSALB=Ik0gRM9/PSyh+f9XHwKPlBu1rgOql847vVYr2KFVQgNdZqiyeUkwUy6SAtGTcFgsY2pF20mo0DFJgCV0AtNaWn3UTwHIpUB1MOeSCZp2ox+KWJAR5h7U/kTIL41j; Expires=Sun, 02 Nov 2025 19:53:47 GMT; Path=/\nAWSALBCORS=Ik0gRM9/PSyh+f9XHwKPlBu1rgOql847vVYr2KFVQgNdZqiyeUkwUy6SAtGTcFgsY2pF20mo0DFJgCV0AtNaWn3UTwHIpUB1MOeSCZp2ox+KWJAR5h7U/kTIL41j; Expires=Sun, 02 Nov 2025 19:53:47 GMT; Path=/; SameSite=None\r\nserver: openresty/1.17.8.2\r\ncache-control: no-store, no-cache, must-revalidate, no-transform\r\npragma: no-cache\r\np3p: CP=\"NID DSP ALL COR\"\r\ncontent-encoding: gzip\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 5d1844c0587174aadaf5fcb877084596.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: HEL51-P7\r\nx-amz-cf-id: jeiYjndtvG2R1Lb77ft4VkqAOYNeVV4uFj8ILsTY1x8b4FB--m4ZHA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty:1.17.8.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon ALB","description":"Amazon Application Load Balancer (ALB) distributes incoming application traffic to increase availability and support content-based routing.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]}],"data":{"size":3079,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (3079), with no line terminators","md5":"3a5e19321a75b49c6220fdd1cba407f0","sha1":"d15a58e2b4316bd332aebf0bd8b3f437bbf95689","sha256":"2b6f55d5541155489d45785a4edfcce3acec13aac02127b74fc5d5585e7e95c9","sha512":"fe49152e1eb5c599ad2cda696558833a25210bbb9b1431f661fdbabc1e06796439348c7c7651551851a8919158aefdc9269607513d42bf46eabc39f563b9272d","ssdeep":"","tlshash":"ae51018d34f7708282f66064043fb996fa289aa1974ccb18863d96bcbc715e96317f4c","first_seen":"2025-10-26T19:54:16.613419Z","last_seen":"2025-10-26T19:54:16.613419Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1023,"timings":{"blocked":441,"dns":97,"connect":14,"send":0,"wait":132,"receive":0,"ssl":335},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"ingajoytowork.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"ingajoytowork.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"ingajoytowork.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ukankingwithea.com/asd100.bin","fqdn":"ukankingwithea.com","domain":"ukankingwithea.com","tld":"com"},"ip":{"addr":"172.67.192.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rip.linkvertise.lol/","date":"2025-10-26T19:53:46.777Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ukankingwithea.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 14:27:37 GMT","end":"Wed, 21 Jan 2026 15:26:07 GMT"},"fingerprint":{"sha1":"9D:07:9C:6F:57:10:86:CD:16:B0:52:82:27:D1:5A:15:62:C4:01:4D","sha256":"45:86:DC:CE:A9:11:84:B3:7C:78:71:DB:1D:F8:E8:6C:0F:4A:58:72:2C:CF:60:ED:8D:11:60:CB:9F:03:63:EF"}}},"request":{"raw":"GET /asd100.bin HTTP/1.1\r\nHost: ukankingwithea.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://rip.linkvertise.lol\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: csu=1699229593392663@1@1761508426\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Sun, 26 Oct 2025 19:53:46 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BGiSzxV8Be7lHK2Id6Vck572hiZyzgSE7tZExnbiUgr%2FghvzyjebwtaJCwjX9HDajdf6NlSRzvimayBF%2F%2BMvtxKPVJ3ULnc3l9GvO8BPCDM%3D\"}]}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 994c80733db456a4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":159,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"fb9666f93e418b95fea8fdbc20e80af9","sha1":"d4eefca1b299cc266a80e83c9e39c4261cb87583","sha256":"c6252ea6e785c1dc0d44dab86653a7209eb507e45b70d138ce515576743b64f7","sha512":"0755f4cc922e42f766ba52405c9a8df0038cb9fbab8cd3d94eccfb8262ffcf89c21ad29bbd52ea6e52a27c8756372a8cb5d49fcf768f61b41e7a5b3fb56779dd","ssdeep":"","tlshash":"64c02bbd2513bc0c86a3307636c3b090c1978337f57e81110540805730cf2a98ac33ab","first_seen":"2023-04-13T06:05:51Z","last_seen":"2026-04-19T14:41:45.145275Z","times_seen":2737,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"ukankingwithea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"ukankingwithea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"ukankingwithea.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=mail","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.147.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rip.linkvertise.lol/","date":"2025-10-26T19:53:46.960Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:35:30 GMT","end":"Wed, 24 Dec 2025 14:35:29 GMT"},"fingerprint":{"sha1":"AE:F2:53:4B:65:F0:F4:20:9B:4A:F3:20:5F:7F:F6:54:DD:3C:34:95","sha256":"64:EF:B8:F2:46:69:C8:F7:7C:73:9C:2A:C0:B9:59:CB:56:34:8B:98:72:C2:5B:83:1B:77:58:A6:7D:01:07:73"}}},"request":{"raw":"GET /ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=mail HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: application/binary\r\nset-cookie: __Host-GAPS=1:OCKwz8Ez9hbzIEssAa7OUfWLt4lB2A:nLue1U9Y2Nf2BQ_9; Expires=Tue, 26-Oct-2027 19:53:47 GMT; Path=/; Secure; HttpOnly; Priority=HIGH\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sun, 26 Oct 2025 19:53:47 GMT\r\nlocation: https://accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=mail\u0026uilel=3\u0026dsh=S-1221227257:1761508427067005\u0026ifkv=ARESoU2IpuSms3MiOmaQlULtofvW1X4i5w8Aqr0gg3Xf66qt8udBul4L17Q0o6hPJfwSsVGW12bm\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-opener-policy: unsafe-none\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport, script-src 'nonce-3jfiwwB6vKaPnvvNrRNyBw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T13:59:59.325235Z","times_seen":13977692,"resource_available":true,"data":null}},"time_used":235,"timings":{"blocked":98,"dns":0,"connect":22,"send":0,"wait":37,"receive":1,"ssl":69},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=youtube","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.147.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rip.linkvertise.lol/","date":"2025-10-26T19:53:46.962Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:35:30 GMT","end":"Wed, 24 Dec 2025 14:35:29 GMT"},"fingerprint":{"sha1":"AE:F2:53:4B:65:F0:F4:20:9B:4A:F3:20:5F:7F:F6:54:DD:3C:34:95","sha256":"64:EF:B8:F2:46:69:C8:F7:7C:73:9C:2A:C0:B9:59:CB:56:34:8B:98:72:C2:5B:83:1B:77:58:A6:7D:01:07:73"}}},"request":{"raw":"GET /ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=youtube HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: application/binary\r\nset-cookie: __Host-GAPS=1:TmJVHH--Bu4CcCn_c2oCGC8gVaxy5w:Dve5GBUuCtIzKeFF; Expires=Tue, 26-Oct-2027 19:53:47 GMT; Path=/; Secure; HttpOnly; Priority=HIGH\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sun, 26 Oct 2025 19:53:47 GMT\r\nlocation: https://accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026dsh=S1477010684:1761508427048774\u0026ifkv=ARESoU10PuCSAdXEi4bQXtwRvNmYM28BBvqIQgHyqKdx-rFYuYku3pvpg0NTm860bK0fwj_G1xT0\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport, script-src 'nonce-bQuAyHVbAOxT5SZMDFi9Pg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: unsafe-none\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T13:59:59.325235Z","times_seen":13977692,"resource_available":true,"data":null}},"time_used":196,"timings":{"blocked":77,"dns":0,"connect":22,"send":0,"wait":39,"receive":1,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico\u0026dsh=S-1221227257%3A1761508427067005\u0026hl=en\u0026ifkv=ARESoU0tpnl10keApmHIEx3WX22_65AAKaVOmuvOp4IcEY8l-62LUyVEnSiw5HbG4t4cmSRqpxEk\u0026passive=true\u0026service=mail\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.147.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rip.linkvertise.lol/","date":"2025-10-26T19:53:47.343Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:32:04 GMT","end":"Wed, 24 Dec 2025 14:32:03 GMT"},"fingerprint":{"sha1":"FA:B1:EE:2C:7A:C6:EA:B7:3D:61:7F:76:8D:6D:0D:E8:B1:78:C2:A5","sha256":"01:3A:8E:AF:52:74:02:04:D3:F4:0C:22:A9:63:91:1B:7B:F8:C0:67:BC:AB:6C:B1:1E:73:CC:B1:D7:1F:7B:A6"}}},"request":{"raw":"GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico\u0026dsh=S-1221227257%3A1761508427067005\u0026hl=en\u0026ifkv=ARESoU0tpnl10keApmHIEx3WX22_65AAKaVOmuvOp4IcEY8l-62LUyVEnSiw5HbG4t4cmSRqpxEk\u0026passive=true\u0026service=mail\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 Forbidden\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sun, 26 Oct 2025 19:53:47 GMT\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreport-to: {\"group\":\"AccountsSignInUi\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi\"}]}\r\ncontent-security-policy: script-src 'nonce-CCWs5V4zfS9cGn2cQRxQww' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://www.google.com/tools/feedback/ https://www.gstatic.com/feedback/js/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/ https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://support.google.com/inapp/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist, require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport\r\ncontent-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js https://translate.google.com/translate_a/element.js https://www.google.com/recaptcha/api.js https://www.google.com/recaptcha/enterprise.js https://www.gstatic.com/recaptcha/ https://www.google.com/tools/feedback/chat_load.js https://www.google.com/tools/feedback/help_api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.gstatic.com/feedback/js/ https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.Mp9mjkH_buc.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://translate.googleapis.com/_/translate_http/_/js/ https://www.gstatic.com/recaptcha/releases/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"AccountsSignInUi\"\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T13:59:59.325235Z","times_seen":13977692,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}