{"report_id":"833f27d0-6484-4c50-b62d-f749069c3cad","version":6,"status":"done","tags":[],"date":"2025-10-26T20:00:51Z","url":{"schema":"http","addr":"lukesitturn.com/mgflc9vsk669","fqdn":"lukesitturn.com","domain":"lukesitturn.com","tld":"com"},"ip":{"addr":"186.2.163.224","port":0,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"lukesitturn.com/mgflc9vsk669","fqdn":"lukesitturn.com","domain":"lukesitturn.com","tld":"com"},"title":"Watch cssY7B9k9605L9DE2gLv08Cq1YB0W8iRyTn9DKMfLwDIpklOf - VOE | Content Delivery Network (CDN) \u0026 Video Cloud","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":""}},"submit":{"url":{"schema":"http","addr":"lukesitturn.com/mgflc9vsk669","fqdn":"lukesitturn.com","domain":"lukesitturn.com","tld":"com"},"ip":{"addr":"186.2.163.224","port":0,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null,"user":{"country_code":"zz"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-30T20:00:51Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"lukesitturn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"omzarncas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"gigglegrowlworrisome.com","ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"domain_registered":"2025-03-12","domain_rank":169112,"first_seen":"2025-03-20T06:34:20.068584Z","last_seen":"2025-10-26T19:00:50.414715Z","alert_count":0,"request_count":6,"received_data":198582,"sent_data":7234,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"lukesitturn.com","ip":{"addr":"186.2.163.224","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-10-22","domain_rank":0,"first_seen":"2025-10-22T16:45:21.38086Z","last_seen":"2025-10-22T16:45:21.38086Z","alert_count":18,"request_count":18,"received_data":2183187,"sent_data":22282,"comment":"","tags":null,"fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Twitter Ads","description":"Twitter Ads is an advertising platform for Twitter 'microblogging' system.","website":"https://ads.twitter.com","common_platform_enumeration":"","icon":"Twitter.svg","categories":["Advertising"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"ShareThis","description":"ShareThis provides free engagement and growth tools (e.g., share buttons, follow buttons, and reaction buttons) for site owners.","website":"https://sharethis.com","common_platform_enumeration":"","icon":"ShareThis.png","categories":["Widgets"]},{"name":"Bootstrap:5.3.3","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2025-10-19T22:15:30.460323Z","alert_count":0,"request_count":3,"received_data":176471,"sent_data":1355,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"entitlements.jwplayer.com","ip":{"addr":"54.240.174.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2007-09-17","domain_rank":18344,"first_seen":"2016-06-21T17:08:11Z","last_seen":"2025-10-21T01:37:01.518425Z","alert_count":0,"request_count":1,"received_data":576,"sent_data":470,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-10-19T22:12:30.612025Z","alert_count":0,"request_count":3,"received_data":62973,"sent_data":1602,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-10-19T22:12:35.4735Z","alert_count":0,"request_count":1,"received_data":3194,"sent_data":472,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"omzarncas.com","ip":{"addr":"94.242.247.32","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"domain_registered":"2025-10-03","domain_rank":0,"first_seen":"2025-10-26T18:41:25.722057Z","last_seen":"2025-10-26T18:41:25.722057Z","alert_count":1,"request_count":1,"received_data":1572,"sent_data":543,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.pncloudfl.com","ip":{"addr":"172.66.165.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-04-20","domain_rank":95245,"first_seen":"2021-06-07T14:28:03Z","last_seen":"2025-10-21T01:56:01.741727Z","alert_count":0,"request_count":2,"received_data":374645,"sent_data":972,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"imasdk.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":3922,"first_seen":"2014-02-25T09:02:53Z","last_seen":"2025-10-20T02:13:27.906093Z","alert_count":0,"request_count":1,"received_data":469108,"sent_data":430,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"lukesitturn.com/mgflc9vsk669","fqdn":"lukesitturn.com","domain":"lukesitturn.com","tld":"com"},"ip":{"addr":"186.2.163.224","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"7d53c35bebdfd2e9b99cb3c309f638e8","sha1":"6e893e69b0de0a8bacec63f786e437b4ec2279dc","sha256":"25cded4ffc44148366da0d95040f5f285aadab3f4b645c6333df1ccb09fd47af","sha512":"99104d0bb5071eb070c89027ce5fbdfef40751a2b6efd87fdae1bd03d00fe08fc1f8c73f7751c60fe7e1e97581661430d0eeb68e165595a82c139a9fa25b51e1","ssdeep":"","tlshash":"71e02be2d6109f949171701cd129d487ed59711405b1d870f1ec9bb45b80052f4cd9c0","size":421,"data":"","first_seen":"2025-10-22T16:45:38.164513Z","last_seen":"2025-10-28T15:00:53.220512Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lukesitturn.com/mgflc9vsk669","fqdn":"lukesitturn.com","domain":"lukesitturn.com","tld":"com"},"ip":{"addr":"186.2.163.224","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"f646a3bf6021cf9b091ce25e3e02accd","sha1":"fd5856375a2de55c233b98cea458dd45ad731b7f","sha256":"1e03159bafb1e8ba958c5ee6d609084aea470aaa24fe3a05f4da41c152ab6006","sha512":"20427da1608f13ed273d760ae7ba1c6e2603935c9b641b199c69174801bb1ea9683838f9f3196eee6e2eed213fd313235937f9e9b3087f99e8b0934744818bdb","ssdeep":"","tlshash":"3f811eae25f2207397a3707e8aaf9104b23791d7000dae553c4d97807f58a3997b6bd8","size":3938,"data":"","first_seen":"2024-01-10T02:44:29Z","last_seen":"2026-06-06T23:27:04.192966Z","times_seen":894,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lukesitturn.com/mgflc9vsk669","fqdn":"lukesitturn.com","domain":"lukesitturn.com","tld":"com"},"ip":{"addr":"186.2.163.224","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"2115494b641b4e1a14f34d2d64552b29","sha1":"fae5e680c19b68b4e43ced6a9d5b2e16908f6b32","sha256":"8b73c45b8b1af92c506986362978acead1583913f419776f6db2196ec46a3b15","sha512":"0e957317b3213fbc19dfff0d255d5396b7185d40021df708f394950c33cf86dc272a3ab58adf7f4592a499e12d3b48903fe306a451f74bcba78557075c111d33","ssdeep":"","tlshash":"e9e0611dde3edbc502b620d2b282d38aa23e101e95049d12225e80857b71edf49dd604","size":369,"data":"","first_seen":"2025-04-23T04:06:55.142043Z","last_seen":"2026-06-06T23:27:04.198141Z","times_seen":362,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lukesitturn.com/mgflc9vsk669","fqdn":"lukesitturn.com","domain":"lukesitturn.com","tld":"com"},"ip":{"addr":"186.2.163.224","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"df2b5e52de60e369343479e91bb36b29","sha1":"f5d3d73c0ce0255d4899e6151e7a54aef1e26a7b","sha256":"5f82bdc3f3698939df748aa682bc49c5299d1cc25c6afbcc3e16ecf5fd0318f1","sha512":"e49f5ac5a73f8987a56f7adc538aeb1f8760b8e08261487c9f242b31a1fa00c520f658b5854fa265d7e95927641f6fb826d9805c8780a7569ce4205f3a643d4b","ssdeep":"","tlshash":"e811595f1682520844c879eb5e8310a5f134a991fa3da2e8a325a1107efbc1c97bb8cd","size":864,"data":"","first_seen":"2025-04-16T08:02:19.832585Z","last_seen":"2026-06-06T23:27:04.201583Z","times_seen":382,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lukesitturn.com/mgflc9vsk669","fqdn":"lukesitturn.com","domain":"lukesitturn.com","tld":"com"},"ip":{"addr":"186.2.163.224","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"ba04ce282da046cf55192a5e83149805","sha1":"c916ba55455060853a2531909c34c7a079efaa16","sha256":"6ff7bd06bf9aba3e4153d194ef4306ca57da5d933bc98c7c177b62678e97aa2a","sha512":"ad534e053d57453799833f095e6299891b3afe09ab31b9fe18c9149e227eee17c872ab4df2285e329a53acfc100d98d8d7557dcaea195b7438c6533c416f660e","ssdeep":"","tlshash":"3d70000a0802080208a0b80c2202220030003202803000800223a0203008283ac000c0","size":21,"data":"","first_seen":"2025-04-17T20:44:03.876522Z","last_seen":"2026-06-06T23:27:04.202205Z","times_seen":369,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lukesitturn.com/mgflc9vsk669","fqdn":"lukesitturn.com","domain":"lukesitturn.com","tld":"com"},"ip":{"addr":"186.2.163.224","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"38edcd169084947a638748765078b5a4","sha1":"96abcd642a6d010a90a455d5e9860bb4f9f3fbcb","sha256":"40f60e2897ad3f663391765ca231290f9ea3f49dd274ae59299417e6ecb0e961","sha512":"260e95ee55ccfc90dcc242fb9f78a9b71e7bd00bfc2abea4253965d17b09d6a813f1e8e929b9e24247cc97b4c925459f7d8635485ef3da41d9822e542760386b","ssdeep":"","tlshash":"c39002e2cc9158217a73598d36326d89a75535580865e258a0b515e500c9312e123414","size":57,"data":"","first_seen":"2025-10-22T16:45:38.169233Z","last_seen":"2025-10-28T15:00:53.247293Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/vanilla-lazyload/10.17.0/lazyload.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"375e3e0688214ca1595fc28956430dd1","sha1":"09ba8de39859cd17c2701057352dd5b8bc3c07f6","sha256":"a052ce2a1bfa39fd0315ec22b7b123a0097dc99884a5b10c348931a2b0190b1f","sha512":"da84ce21b5de848227f5cc70b591805ab9228a4c796058480a8259378a0c0a8b36137b02310d950faa4440b27330ba0b21518404b2b974d6feb74556837f172e","ssdeep":"96:lncpq9Hqqq0ykOP6WUuBymFCxWPIu4WYdlnlb3W5d1wgip+Aip9DyB9tyqkXlQ9I:VpHlqeOSWU2cxWPElZjJi7DyB9tyFX2K","tlshash":"06b1420cb069b03f656bb036413f130b7236605678958498f578dae9cabc84e2433fbd","size":5124,"data":"","first_seen":"2023-03-10T00:45:43Z","last_seen":"2026-06-06T23:27:04.176501Z","times_seen":499,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lukesitturn.com/js/loader.bc4a6543429.js","fqdn":"lukesitturn.com","domain":"lukesitturn.com","tld":"com"},"ip":{"addr":"186.2.163.224","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"f43b942340f3e45d3ae53d0712b13256","sha1":"e11a4d4c3d7fff07ab752e7cb73342aa156dd66f","sha256":"32113f06d823097d0181fdc56d12e40e3ab7ca9d07609ce3f41c6d2c6b1846e2","sha512":"63a713372921c75df85848b0da2c35c14d12a8348b10263fa035090110417a141d1497edcb989a1f777d9addcc7a6843ce2d270f5e1be873f76cf1ccf2b8320a","ssdeep":"1536:+Im9L7Faw8G/1K+jpw8y5f0HMNz2szEe/XmC2:+Im9fww9Hw8y5f0HWEe/u","tlshash":"2a83c51c26d0b9590b8b9f36b72f28dcf5570e2f6d84c84bc605bc602579a1bede2532","size":83200,"data":"","first_seen":"2025-07-09T03:26:33.467529Z","last_seen":"2026-06-06T23:27:04.148616Z","times_seen":316,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/bootstrap/5.3.3/js/bootstrap.bundle.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2e477967e482f32e65d4ea9b2fd8e106","sha1":"ddc6e9ead6d16ae9237399ce41e8c1620cc59c36","sha256":"0833b2e9c3a26c258476c46266e6877fc75218625162e0460be9a3a098a61c6c","sha512":"ecf8bfa2d7656db091f8b9d6f85ecfc057120c93ae5090773b1b441db838bd232fcef26375ee0fa35bf8051f4675cf5a5cd50d155518f922b9d70593f161741a","ssdeep":"1536:WmwIiEEO+TBR2t4J9RirWDKsVA5y7fy3YJtC/r/45wZbfbXZTb0WU078:HwORx3YCD45wZbDZTb0g8","tlshash":"ce73c5593244b4730ade85b68037430bf2265998b24b812cb57cadde2a7dcc67277f78","size":80721,"data":"","first_seen":"2024-02-25T11:27:02Z","last_seen":"2026-06-12T00:52:04.116856Z","times_seen":27184,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lukesitturn.com/jwplayer/8.38.2/jwpsrv.js","fqdn":"lukesitturn.com","domain":"lukesitturn.com","tld":"com"},"ip":{"addr":"186.2.163.224","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"b7c09a238f43ba40002820079de36b91","sha1":"620bbc4b53e6fd80b6cd5c89271bc09973d51903","sha256":"be32622dbb1e238992fe4d24d3fd2aaf05b5a283f58f249790b673f04e64c24f","sha512":"41864f6164c9375d1a4abcfc0e831b453e963e0f6c109da0a74e34157b59714eb8b9b0ce2c63b59cade937acb560d38b4a328f0e51fe7ce9ec97df10d8a22686","ssdeep":"768:DiDjPSAlvbtXral8WKOR7pr1oJl92LCaA1YL9ncpgW:+nPlZral8WK+EJl92LCcLWpV","tlshash":"4463c78d3685b16a5a6770b8806fb546723d1dd6308dc250ea50eec93c3de5ee237b2c","size":67344,"data":"","first_seen":"2025-04-10T04:03:01.174964Z","last_seen":"2026-06-06T23:27:04.160273Z","times_seen":386,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lukesitturn.com/mgflc9vsk669","fqdn":"lukesitturn.com","domain":"lukesitturn.com","tld":"com"},"ip":{"addr":"186.2.163.224","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"689f2ddc2fd892c8019bb3f3f8ad1bdd","sha1":"2e50fd0e4e32f56135c5fdf3681807b99ddb0e20","sha256":"faadda8fd7be34381cc33d0ba1dda669a083528bbd8fca400c89f69be4a8713b","sha512":"9b002359c6dda7ab118428f7b55b681d60785a0283c61aa61b7185ba05274cd1691063449e62df32eaa969b5f0dae3c0783f399078027fcdc064d48f4e57968d","ssdeep":"","tlshash":"ad21f1db12440c740a9e25d6c757215932b220e9b90ed595987c8de01714a2fd731acd","size":1147,"data":"","first_seen":"2025-10-22T16:45:38.171289Z","last_seen":"2025-10-28T15:00:53.24789Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gigglegrowlworrisome.com/check.html","fqdn":"gigglegrowlworrisome.com","domain":"gigglegrowlworrisome.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"8f2e0cd22b41fa7c9212af0b11f449d3","sha1":"6c552632a2eeaa712496444594c3e8c68eadbbb0","sha256":"d7ca5af269e02e5109a61ef55df0196e2206204d6c742daba5a153defc097fda","sha512":"c90bb9984fc0b2a5374129cb10fc509e937ba565063e2530578430fb0329f8058c145c914de139fa166d8530cfff9799a8c78aa1ad2752d9ec72e24c0fed477c","ssdeep":"","tlshash":"d201685934f5684d5127b630255b22182d32a40325cbd94efb2cdb301f825a7eca8aef","size":762,"data":"","first_seen":"2025-03-07T08:34:13.499254Z","last_seen":"2026-03-04T07:06:03.173543Z","times_seen":7245,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lukesitturn.com/mgflc9vsk669","fqdn":"lukesitturn.com","domain":"lukesitturn.com","tld":"com"},"ip":{"addr":"186.2.163.224","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"49ff2300f43dca2ee8ad9e684f22aae9","sha1":"af3832931ea1cb6faf81664f356a2f7e7fd23ed9","sha256":"4668b1c4be37e700f7fa7f0514795b0e1dfd6c03eaf2d35e499cec8057bc1a01","sha512":"87ea65cc5a5458839efed99b98d2e6090c17dfffda9532d25163c7eac31800e66316b03a9920b954cdc5f7028aab674083198f700c166998233a1c38a852c3b1","ssdeep":"","tlshash":"b4b012fb65c040a83316b8922573dc8b5c0b46cfd9998410c87fe6e13c22219b5415c4","size":102,"data":"","first_seen":"2025-05-16T04:35:40.709687Z","last_seen":"2026-06-06T23:27:04.21621Z","times_seen":353,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lukesitturn.com/jwplayer/8.38.2/provider.hlsjs.js","fqdn":"lukesitturn.com","domain":"lukesitturn.com","tld":"com"},"ip":{"addr":"186.2.163.224","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"28ad7c8f97ec3efd3fc7355f4b7ab863","sha1":"0cc23dd36c89c6c9d47da8957c638583e8a843da","sha256":"061bc2c8535bfb740a2c1a5dab6e4c91c5388b84609282356b6d67cb0d85be73","sha512":"221c0c31d6cb59acb129ca485960e2a56051d668b76926e2cbe1b1241c46c4f0e7b192d571adea369a0d04916f94a162a12806aff5089f954306a31c54263ccf","ssdeep":"6144:caK/sZg+NY3UbNe6rXTQoalFwc3JWPCaEqeeuFBWqWDJkw0dHhbBI7NEpg8kF4e9:zbNPDCFw2BWqWwHpt7Y","tlshash":"21c42ade3795a01683c2b1a5903f5617633a7d0a280cc16cfa2be9d72d79949b03bf74","size":574870,"data":"","first_seen":"2025-07-09T03:26:33.452721Z","last_seen":"2025-12-13T13:26:16.431753Z","times_seen":141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lukesitturn.com/jwplayer/8.38.2/jwplayer.js","fqdn":"lukesitturn.com","domain":"lukesitturn.com","tld":"com"},"ip":{"addr":"186.2.163.224","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"2d3b7e0e4267402d0e259c9a21792258","sha1":"6220167731bbbb87609d184a95f5c4c2b2f8c72c","sha256":"190acb6da87bd161114f93feb270234b6ff00dafa7c98732c452ff447d4cef77","sha512":"4ae57475aa41d82ae52d0204e9978089995d10d72cf1c9beb686e1811a6bb7a7e24140f21ecc073b01e1209a20c5cf4b27f26ae82e981ef8d5374aeb9a1ba75b","ssdeep":"1536:oryPjl9oOHjCyj35oM8j03kwdtxwszufvL3v5qYtwR/iaCttHF3vLGCaUZfkJk80:FHJ1az3LpaUZfkO8bMdhdD5J","tlshash":"59e34ca631c2f4a603e224d6e47b4101f2790949384de9a4f66cecd7795a907b1b3fbc","size":155964,"data":"","first_seen":"2025-07-09T03:26:33.454125Z","last_seen":"2025-12-13T13:26:16.425699Z","times_seen":141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lukesitturn.com/mgflc9vsk669","fqdn":"lukesitturn.com","domain":"lukesitturn.com","tld":"com"},"ip":{"addr":"186.2.163.224","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"30676b5f099207252c31a0cb79eb37d9","sha1":"9945aea026d7a4cb3d28b47407472d46d6b549f8","sha256":"1033280a4cb41f76a2c1f20de4a36251a139b18e2a54344c0d2c3f986eab45e2","sha512":"7aa44800a3ec4dede29aff91fb8910931dd92967fb12723116a61705d37d826a34ea5f7586aa09fc9166eea6595f7b9110f1bd5559d2f806af62826a862b56f7","ssdeep":"1536:iI7Xxg0FsqC7bWLL072UQQP1XICsYt9GjV/yuif2+MfJa71ZPUT2rb92:t7h9FsqaWs7jZPxhVCvi+vAiT28","tlshash":"b7a3c78939d6b84943b2e07501bf2ccbb5bb7d80700c9545c161e9b4fcb1aae91a3d6e","size":105530,"data":"","first_seen":"2025-10-22T16:45:38.179323Z","last_seen":"2025-10-28T15:00:53.249048Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lukesitturn.com/mgflc9vsk669","fqdn":"lukesitturn.com","domain":"lukesitturn.com","tld":"com"},"ip":{"addr":"186.2.163.224","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"ecf42a4679849052ec6761bba51e2329","sha1":"929e311cff35182fe0c2300a1fbb2b97431c3ed7","sha256":"f00f6effa58dbb962e04c5ca18bd02f49a38278905022ec68c2f518fd5a46cf7","sha512":"17eadf26439013f8bd8badefe49df0601b8773169d6f410f18dee40e1119ba24e971384d90dcea1dc01f0dfad22174b83cb488da4c382a8dcd7f0c8550c59910","ssdeep":"","tlshash":"c9e07d7238ce057a44013440e22f353c5d3306023e6d4d19b92c80130f8bc3ce02d9e6","size":410,"data":"","first_seen":"2025-10-26T20:00:56.524022Z","last_seen":"2025-10-26T20:00:56.524022Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lukesitturn.com/mgflc9vsk669","fqdn":"lukesitturn.com","domain":"lukesitturn.com","tld":"com"},"ip":{"addr":"186.2.163.224","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"66e02851ef1bebe419bf153d30d66001","sha1":"ad203d9e8a798570878a6f79f50c483b6bf4d322","sha256":"1681a32093db535db2aa6b5bd0514f2ea72f743840a7897f2bf3d6da92fc9182","sha512":"2b58d273000316cd00ef258930b6b75113f73d0a9d891590d52715c91cc459f745ecd9bfd649a269fb54a58b66965253527df403b7cc289ef80fa8bf472e6ef1","ssdeep":"","tlshash":"e901685bd08a297deafb1a0f625b74d57f1b2811b0c1f82a714c04a0bf2274b72147db","size":827,"data":"","first_seen":"2025-10-22T16:45:38.184879Z","last_seen":"2025-10-28T15:00:53.250515Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lukesitturn.com/jwplayer/8.38.2/jwplayer.core.controls.js","fqdn":"lukesitturn.com","domain":"lukesitturn.com","tld":"com"},"ip":{"addr":"186.2.163.224","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"0a349b8e256b710c33f59804e11824af","sha1":"4124b412899128cb8a2521e4f5c2ac88c2c143b1","sha256":"527933d04090c542ae6bff57a0dc240d927908d890e37b578effa55a310932ce","sha512":"8b8efd834ba24cfe9b0f96247bcbba7f2fc1c939a13ebf2cbb8c1e06bd890e5e07f29b82c3303f5498a2f998642ab7d798ab3eff4a975f9eee47175a5358136d","ssdeep":"3072:VM7nFu+slX/+8CtPIVcSJh0EcYSrJ4MOkVGvSwqzrpxMChYFwSC3G:VMxRU/+TAcSJh0lO0GvSVpGJFwSC3G","tlshash":"a07419322142523596e682da76514604b33a8085f506cfacff7ceddd4c6e98b31fabb4","size":343311,"data":"","first_seen":"2025-07-09T03:26:33.46094Z","last_seen":"2025-12-13T13:26:16.486694Z","times_seen":141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gigglegrowlworrisome.com/get/2060453?id=2060453\u0026jp=_clklzspuubuvwohjkvroqx\u0026dr=102\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.622-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=7IocH7fB4q5zanZXWVsPCTpVIbFIUEQtsql-\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=w2SdZ9faHR0cHM6Ly9sdWtlc2l0dHVybi5jb20vbWdmbGM5dnNrNjY5\u0026afid=2648717033115648\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=8\u0026pi=W1oqmg\u0026dto=2\u0026pload=1946\u0026rlp=%5B0%2C35%2C587%2C468%2C6613%2C6075%2C1567%2C5770%2C1%5D\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0\u0026freq=0","fqdn":"gigglegrowlworrisome.com","domain":"gigglegrowlworrisome.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"787b81599d9d829e933a237b4a48c1d1","sha1":"79919c4abbee17c0274226cf4dbed8943826e36c","sha256":"ce8de670896cc971e85f66485829419ce50ddb1a0b441fcf7f35df7d4b92abbb","sha512":"f261c07b736e827dde646c108ff550ae371071f4c610c8c9bc699a8b3fdc7eaed37c43c654958c18a2691112395f6c6c52dc83a1077bad9eb65f9ba17cfc5cba","ssdeep":"96:mAuaw1oS7me9GZV+R+TGyX+9EN/wbIqdoboI6TEC7CSBoK:mAc1/mV4QGyX+Y2Iqdk46K","tlshash":"50b14c0dd8a8ced4fc849c65e6766d0a7ad515b0bdc30f0ff146e526e1c42b832b28e1","size":5393,"data":"","first_seen":"2025-10-26T20:00:56.486478Z","last_seen":"2025-10-26T20:00:56.486478Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.7.1/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87533,"data":"","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-06-12T01:49:22.010511Z","times_seen":168097,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lukesitturn.com/mgflc9vsk669","fqdn":"lukesitturn.com","domain":"lukesitturn.com","tld":"com"},"ip":{"addr":"186.2.163.224","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"2eeb7079f30878e372bc4cf00bfdb011","sha1":"05433a16d6407b8894fb553c8847941286b6df04","sha256":"ee314ab1bd53abd9c3bc733d94c39dbeff927ace9eeadab08f1d8e5a2b956c1e","sha512":"947edc02008a24e116f9b8edf2ac98e2236b20b09ada352cffbf8ce8efc8b17f6b578948813dd7c2280a5c0edd59abb96a5558d14229edc5c603626928d85060","ssdeep":"192:t07XDMJQIo3NTkI+Lz5NVFm4xd1Y6lwIHMxSsCGIf+8ak9cRSksr6aBvWDGC:tfJQIoZ6pNVFmiee7sxqGI3alRSkU6Zz","tlshash":"a80209b22152993d83a14dedd23d7d68f47a5a00304ac984f0eddda33c66a06d6b2d7e","size":8622,"data":"","first_seen":"2025-10-23T10:54:42.680889Z","last_seen":"2026-03-03T16:04:43.640689Z","times_seen":119,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lukesitturn.com/s/js/site.min.js?fe1eebe79ae88e4bfa6ed669174fca9c","fqdn":"lukesitturn.com","domain":"lukesitturn.com","tld":"com"},"ip":{"addr":"186.2.163.224","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"f221d7962c60ad362e2fbc5e1dacc9e6","sha1":"9e2a0ee15fec83034ee0eedfdc866d2d7472ecee","sha256":"efd0ced2b4c5c6490d8ac3462669df8c5aa143db9ef81fc947dc3ffc739d4088","sha512":"e9e7241c7676af5f648d91446425219f382a6b4b7ac63a47c011d61f0ba8f69f87c16489f7f5b0aa36adc1a7e45830a73f1cec4b5b554fbe46ce29be3c022cf9","ssdeep":"1536:Y2u4R3mNZRo3GiCNIUhxBsSU1UxYs5pfEzS:FRwLzybXotE+","tlshash":"bfa31829b314193252ffa2f7749b2a057336d526ca82c055b878c56c0ef9d8536e3f2e","size":102814,"data":"","first_seen":"2025-10-04T08:15:13.352918Z","last_seen":"2026-06-06T23:27:04.143054Z","times_seen":293,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"omzarncas.com/ohfkrosa?Mo=K20G\u0026mcq=wv\u0026mpbhk=ttkh\u0026mr=_elqypajrsphiugozerqxva\u0026hg=dxozls\u0026xw=4\u0026urangxpv=nslqpy\u0026hvjneaqt=913994\u0026iun=9\u0026cj=5458591\u0026ka=tqawk\u0026mn=yer","fqdn":"omzarncas.com","domain":"omzarncas.com","tld":"com"},"ip":{"addr":"94.242.247.32","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"33e893026a31751e5dd03d8bf6de8f5c","sha1":"f0210064c652b15181e3a3b459e8326f6659e100","sha256":"270434b6c8f9c5b75ae5b0d7626eedbe033d91b2f65243f649948d121b47056b","sha512":"10901d89ada5a9a8d01e24f5415e1d94c28cd6195e5de0f226fb91e28360698f365699b4c5435aed4d3ec5a52708e47741104689561db4ee7071ecd0f72c60da","ssdeep":"","tlshash":"7ef059dad08bc9f26c39d85e67b83e0924e08e0aac230e8c51b0cca1a14b2754167dad","size":535,"data":"","first_seen":"2025-10-26T20:00:56.484565Z","last_seen":"2025-10-26T20:00:56.484565Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lukesitturn.com/mgflc9vsk669","fqdn":"lukesitturn.com","domain":"lukesitturn.com","tld":"com"},"ip":{"addr":"186.2.163.224","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"7bce4b85ba18dce1f6c37ab9c2c16255","sha1":"fc1c599a6b81e0824bebe1a5ebc9417f7d2b88d0","sha256":"3456bffc735bf8d44ef7d5ad73c6dfb15801ddb1c1860e9c2e605acce821ace1","sha512":"2144987b5f80b183207066f1634913f612c6270679d3aab3fc44f652e2922e6225e5dd42dcd8d5cb4447d5ed07cead20267aa6d95cebfca91efbbf8e329ce4f8","ssdeep":"","tlshash":"eae0a90f3cea7968503330ba037782053e2a788b9045de08393c09e00f12336a20a20c","size":293,"data":"","first_seen":"2024-08-19T22:39:34.255809Z","last_seen":"2026-06-03T20:43:25.358091Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lukesitturn.com/build/assets/27-SABxh.js","fqdn":"lukesitturn.com","domain":"lukesitturn.com","tld":"com"},"ip":{"addr":"186.2.163.224","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"0f8d196002a87042ea0937428f428732","sha1":"a51a5552c6d4ecd7cef5eaf692805ed2c63b80bb","sha256":"3b04c518e637741a9132153c76798ce7988d6b3d7062df0e34b639f8016815dd","sha512":"4579e32b820b00129bc56ed5f6b565f9a202bb129167fdbf3ea31e497954e0127a43d49a011b11355fdcf3326068b59384598c5ed9b3bf2965e9399d639ecece","ssdeep":"","tlshash":"9f31b85570f96631c1593859e37bb362b2e00d5b7d253c8160ad0b726e39cc2dd7af88","size":1756,"data":"","first_seen":"2025-07-09T03:26:33.454888Z","last_seen":"2026-06-06T23:27:04.153044Z","times_seen":316,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lukesitturn.com/mgflc9vsk669","fqdn":"lukesitturn.com","domain":"lukesitturn.com","tld":"com"},"ip":{"addr":"186.2.163.224","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"1f2f379634670cd2e6ef53028f19fa75","sha1":"14c0d48221c80dd6cc1749f390c1cb8f94a4324b","sha256":"b278e62ffd0866dc85f456f3013a5139c4e88372bc3016db963c5360d95d42f5","sha512":"3bed6bac577cceb1e53e6e71392d32f99ea5c8d5d64768dfff2efc1b50605d91387c7a98944f5495a510722f588e647835a999e9e96bc3d2e2019d49751cf314","ssdeep":"","tlshash":"94417e953cf234d803e741b33d3be34999863f9fac1487447b9da6090fa0e217ab59a4","size":2100,"data":"","first_seen":"2025-02-05T08:58:33.460793Z","last_seen":"2026-06-06T12:29:48.208282Z","times_seen":87,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lukesitturn.com/mgflc9vsk669","fqdn":"lukesitturn.com","domain":"lukesitturn.com","tld":"com"},"ip":{"addr":"186.2.163.224","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"eventHandler","is_inline":false,"md5":"3e26c540737713ae1761eb98258f5df8","sha1":"6fe02275d481cd704633c54f2351b21cdbe06e90","sha256":"63a5b7d7b54fc202d1534c9d88ede526aa047b31047db536c3df0ed5667d6ea3","sha512":"d02bcd21454cdba85641ba1348d1b7724080f2d8439c8c41713b8c9476237fc914b3a5ae933b5cbccb27612330a4546d3fd281caa75c1d59c01dfc879032e56f","ssdeep":"","tlshash":"b65000000f003000000c03003c000000000000c0000000300c000000003c0003000c00","size":9,"data":"","first_seen":"2025-10-23T10:54:42.646136Z","last_seen":"2026-03-03T16:04:43.641686Z","times_seen":119,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lukesitturn.com/mgflc9vsk669","fqdn":"lukesitturn.com","domain":"lukesitturn.com","tld":"com"},"ip":{"addr":"186.2.163.224","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"0beac54daf16ad2d8235e5ae5b2a712a","sha1":"2c7dceda748b5be34b4b1cc057f8657ef986439f","sha256":"dae7da40b408a6e777d59a00838ae402f4abcf4be082be3b88a9068634a3fd8e","sha512":"ae7a9a036f48a4e1efcc0514710ba90854e26577569a600dbdb9063f92b52a82570523c89888d60b50e4c39b91beb974fc5d548db4c5a89392db1433c33f5373","ssdeep":"","tlshash":"48e0f102346d5660a4cb002f1a72223433a2359b3951885644cdc83b9ca0d44945d2e4","size":397,"data":"","first_seen":"2025-04-04T04:59:30.319262Z","last_seen":"2026-06-06T23:27:04.224859Z","times_seen":419,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gigglegrowlworrisome.com/in.js","fqdn":"gigglegrowlworrisome.com","domain":"gigglegrowlworrisome.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"0f91db452ba8727e57bbcddc33cef053","sha1":"50a4baf84c701d3292ac781fea0c2988e8f1ea5f","sha256":"a2fdcf2a90cb05dfe515229f09eb81cb3352d7d6b1347340fee10e2f00726d8e","sha512":"e0d559dfd304d7fb49d4d9a1a4f2e41a734a959cec9a60b15dd48e9af4ae7ed94e640c1c6c977d044c00fc2bfb5f726eae86bb4f03b3cc5984ac657a4faab7f5","ssdeep":"1536:+ySJx2jjsCcUWfKs+fJEWpcM//jUdEXGWrZQvvA440so7Y0Ql+bFGDvbL9p+WD89:+8tWLMcWMXv80sYU4MnQ0+5fpBx7","tlshash":"cd04969c35ed2077034fc92ee82f76396525a8d1ad9940c0c4eac0dc6db8b05de69be7","size":185906,"data":"","first_seen":"2025-10-23T14:17:41.395296Z","last_seen":"2025-10-28T10:03:12.838626Z","times_seen":89,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gigglegrowlworrisome.com/get/2060453?id=2060453\u0026jp=_clklzspuubuvwohjkvroqx\u0026dr=102\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.622-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=7IocH7fB4q5zanZXWVsPCTpVIbFIUEQtsql-\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=ZMPaTFGaHR0cHM6Ly9sdWtlc2l0dHVybi5jb20vbWdmbGM5dnNrNjY5\u0026afid=5463466800180224\u0026eclog=0\u0026snc=0\u0026ssc=0\u0026vp=8\u0026dto=2\u0026pload=1546\u0026rlp=%5B0%2C35%2C467%2C367%2C3178%2C2971%2C1030%2C2666%2C0%5D\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0\u0026freq=0","fqdn":"gigglegrowlworrisome.com","domain":"gigglegrowlworrisome.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"2713434e0ba43a857bcbf36818a36197","sha1":"8471549d472b7d90523d2c82277fa6e832f31989","sha256":"92c084c43a2449774ae35d9d26c42180c830c6b49a765a87b4c1aadb895af24d","sha512":"4fc1ccae194c8016a0858a5017c93a95fab1cb6210b8cadfd0dde0011f632b8b8f4a2e4e9b0f7aa45448d1131700994b23ad1b874d9962e57aa895d4db771ebf","ssdeep":"","tlshash":"c5f059d0491ae0d298116cd762ffbcea299d68ebae5b9a19cd51fc4a803c37c8313441","size":548,"data":"","first_seen":"2025-10-26T20:00:56.511437Z","last_seen":"2025-10-26T20:00:56.511437Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imasdk.googleapis.com/js/sdkloader/ima3.js","fqdn":"imasdk.googleapis.com","domain":"imasdk.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"11acabf89fdd7b55d8aebe9d281ffe7b","sha1":"b975c2168c8152ab1fcd284c34b67a00cb1da936","sha256":"68c2c90961d0dd0862ca8ff5376b9c1665c6b4bfe3ffccc0c7891b51f7badc25","sha512":"3d5ad434c3cf0ebd3f7c299e824e46428545f600fe4a3ebb5a9c01d6347a428db02373cd43f8be0c38d0602ad099f3d28efa7a24c49b9c560a331f4f418f0a2a","ssdeep":"6144:AkFdmwZuw58NInNlUhThJHbKEI66b+1+tAlZqHwT+/AEb6TpPH9h:9hihThJHbK5t+1XlZ4fb8pPH9h","tlshash":"02a4fbcdb6a674629263f4f5403f010fb23bb866f44888acb249d9e16e749095277f7c","size":468395,"data":"","first_seen":"2025-10-24T14:29:49.431492Z","last_seen":"2025-10-28T10:03:12.825816Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"gigglegrowlworrisome.com/chicken.gif?z=2060453\u0026pb=420c87b526739a72c935380ae297e8061761516030\u0026pbc=87maRFJUvK7-mf5o\u0026pbi=WgnEajJ7l8L-mf5o\u0026pbu=VK-tlu0KuST-mf5o\u0026psp=MvMUd51I6JkwD3g5MOkR6G34ehCBOXz3hSynoAdL6b8KmuatOHnsiDYX62-IE4m7Z_vlMiYorh82CYF3o4I0cTU1orRAqbjGrIuuOt-HbAZt9nCqkW801jchiiyUv_EfqPm2sbX6WcORo6LKh_jVOzNEUFUDOQ9sgSkssk7u2XyEursyU2oGbN-u_QDsATTIkpHqs7xf_KYIodxcPeIqLSgESQ6mVHfc9BU84tsEtrE7oMfx9rwgyuk2J2tCL_IGZyr2mw6UZjyJupq4PQT5YzEIwhZwMlnYN2zjqmTsHvYEmZbuszbZxzCk-21C-6zzxq6QmYr7h9o0Q6A49rALIYGA_Zh4ZIDG5PaU3wX57Tu4eKnAXip1c26ooYZ8WmqY8I5jwBgiMHDutn-mKPtEqI7r0FRZSQuFpfTqXowrUhfp6f8fP_xnjEIKbMpsE1V49w4EeqzopGRf0XcC4IhF-7M7niURtyPLk4ZOKTjteR9fRFsop7416Vd06AVP-DZnCC3WC7aOp_VsYUQdfC0Q-8uOiL_hBp3Z4n9IQPPCDfqAD8rsRyru8H6OiUqule7dRS10ZqFD9d0FXouVOPXmIoxhsFFlNx0kNhjngSndbMuYSZvRxA9l5kR4rxXD3ebfBf5G6csrBXG-I6M8nR8DIAys1eDtlhEQ9wV92zkJ-hx4AhpHcN13CFt_e5Pku-YuzNLaGTrx5x4EtegiPXsD3WU9Ta8XqrFhe_nItzJIX_3tl9GmWiFV9GdsSaWRhyNsepUQsKDM2yAaXX3ZP1btX08sjZg3h9KjSzksyHPxeNkOF_uqEM4M-MnxXOLavZMU5t8DOxXcPUE=\u0026freq=0\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.622-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=7IocH7fB4q5zanZXWVsPCTpVIbFIUEQtsql-\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=3Zlmz0aaHR0cHM6Ly9sdWtlc2l0dHVybi5jb20vbWdmbGM5dnNrNjY5\u0026afid=396917219628032\u0026caifrq=ADQJaQAAAAAAAAAB\u0026eclog=0\u0026snc=0\u0026ssc=4\u0026tp=0\u0026vp=8\u0026pi=W1oqmg\u0026dto=2\u0026pload=1946\u0026rlp=%5B0%2C35%2C587%2C468%2C10972%2C6181%2C1589%2C5876%2C1%5D\u0026im=1\u0026noch=1\u0026cs=5","fqdn":"gigglegrowlworrisome.com","domain":"gigglegrowlworrisome.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lukesitturn.com/mgflc9vsk669","date":"2025-10-26T20:00:33.104Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gigglegrowlworrisome.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 14:25:52 GMT","end":"Wed, 21 Jan 2026 14:25:51 GMT"},"fingerprint":{"sha1":"5D:9F:41:7B:78:25:D4:B3:13:E8:25:E2:7F:55:2F:21:57:20:47:C4","sha256":"72:3D:F0:F6:91:88:C8:C2:48:4F:00:5B:E7:66:01:5B:6F:7A:B2:31:77:49:26:AB:D7:16:D6:57:AF:7C:B0:1B"}}},"request":{"raw":"GET /chicken.gif?z=2060453\u0026pb=420c87b526739a72c935380ae297e8061761516030\u0026pbc=87maRFJUvK7-mf5o\u0026pbi=WgnEajJ7l8L-mf5o\u0026pbu=VK-tlu0KuST-mf5o\u0026psp=MvMUd51I6JkwD3g5MOkR6G34ehCBOXz3hSynoAdL6b8KmuatOHnsiDYX62-IE4m7Z_vlMiYorh82CYF3o4I0cTU1orRAqbjGrIuuOt-HbAZt9nCqkW801jchiiyUv_EfqPm2sbX6WcORo6LKh_jVOzNEUFUDOQ9sgSkssk7u2XyEursyU2oGbN-u_QDsATTIkpHqs7xf_KYIodxcPeIqLSgESQ6mVHfc9BU84tsEtrE7oMfx9rwgyuk2J2tCL_IGZyr2mw6UZjyJupq4PQT5YzEIwhZwMlnYN2zjqmTsHvYEmZbuszbZxzCk-21C-6zzxq6QmYr7h9o0Q6A49rALIYGA_Zh4ZIDG5PaU3wX57Tu4eKnAXip1c26ooYZ8WmqY8I5jwBgiMHDutn-mKPtEqI7r0FRZSQuFpfTqXowrUhfp6f8fP_xnjEIKbMpsE1V49w4EeqzopGRf0XcC4IhF-7M7niURtyPLk4ZOKTjteR9fRFsop7416Vd06AVP-DZnCC3WC7aOp_VsYUQdfC0Q-8uOiL_hBp3Z4n9IQPPCDfqAD8rsRyru8H6OiUqule7dRS10ZqFD9d0FXouVOPXmIoxhsFFlNx0kNhjngSndbMuYSZvRxA9l5kR4rxXD3ebfBf5G6csrBXG-I6M8nR8DIAys1eDtlhEQ9wV92zkJ-hx4AhpHcN13CFt_e5Pku-YuzNLaGTrx5x4EtegiPXsD3WU9Ta8XqrFhe_nItzJIX_3tl9GmWiFV9GdsSaWRhyNsepUQsKDM2yAaXX3ZP1btX08sjZg3h9KjSzksyHPxeNkOF_uqEM4M-MnxXOLavZMU5t8DOxXcPUE=\u0026freq=0\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.622-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=7IocH7fB4q5zanZXWVsPCTpVIbFIUEQtsql-\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=3Zlmz0aaHR0cHM6Ly9sdWtlc2l0dHVybi5jb20vbWdmbGM5dnNrNjY5\u0026afid=396917219628032\u0026caifrq=ADQJaQAAAAAAAAAB\u0026eclog=0\u0026snc=0\u0026ssc=4\u0026tp=0\u0026vp=8\u0026pi=W1oqmg\u0026dto=2\u0026pload=1946\u0026rlp=%5B0%2C35%2C587%2C468%2C10972%2C6181%2C1589%2C5876%2C1%5D\u0026im=1\u0026noch=1\u0026cs=5 HTTP/1.1\r\nHost: gigglegrowlworrisome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cart=1; cart_p=2; CHCK=1; PTS=; UID=2510261500b4bce58c87694071b98cb2cea9; BCAI=ADe9zAAAAAAAAAAB; BMI=AEpxbwAAAAAAAAAB; BCRI=xuKDIgAAAAAAAAAB; IMC_102=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Oct 2025 20:00:33 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nx-route-id: stats.impression\r\nset-cookie: OACICAP=ADQJaQAAAAAAAAAB; Path=/; Expires=Tue, 25 Nov 2025 20:00:33 GMT; Secure; SameSite=None\nOACIBLOCK=ADQJaQAAAABo%2FlOQ; Path=/; Expires=Tue, 25 Nov 2025 20:00:33 GMT; Secure; SameSite=None\nBCAI=ADe9zAAAAAAAAAABADQJaQAAAAAAAAAB; Path=/; Expires=Mon, 27 Oct 2025 20:00:33 GMT; Secure; SameSite=None\nBMI=AEpxbwAAAAAAAAABAEaGLAAAAAAAAAAB; Path=/; Expires=Mon, 27 Oct 2025 20:00:33 GMT; Secure; SameSite=None\nBCRI=xuKDIgAAAAAAAAABAU7CLQAAAAAAAAAB; Path=/; Expires=Mon, 27 Oct 2025 20:00:33 GMT; Secure; SameSite=None\nIMC_102=2; Path=/; Expires=Mon, 27 Oct 2025 20:00:33 GMT; Secure; SameSite=None\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"28e463819a210071de3b45ebe7633613","sha1":"6dccd571828ec0912629119cf7eabfea9f33ddbc","sha256":"44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84","sha512":"8a82ac5a7883cd9b74bdb561cf825ce86474e259ad8c445e538d697b0003e3f2b1d6edcd3dc6512f4ad16e9074da204a79938257c457ecf68f4329eac0182e67","ssdeep":"","tlshash":"04900003e280e082c3a0c0300e0ccb802b88a2308a28030fb0fc2baefc3a3a20c23000","first_seen":"2023-04-05T09:26:54Z","last_seen":"2026-06-12T01:13:03.312736Z","times_seen":22340,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lukesitturn.com/s/images/logos/voe-logo-2.svg","fqdn":"lukesitturn.com","domain":"lukesitturn.com","tld":"com"},"ip":{"addr":"186.2.163.224","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lukesitturn.com/mgflc9vsk669","date":"2025-10-26T20:00:29.226Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lukesitturn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Oct 2025 15:43:45 GMT","end":"Tue, 20 Jan 2026 15:43:44 GMT"},"fingerprint":{"sha1":"17:48:98:3E:C6:84:47:C5:CA:E0:B6:60:A6:73:EA:CF:9C:92:7C:A0","sha256":"7B:DE:48:DF:DD:8C:BA:1F:4F:8C:17:44:3F:C1:F3:E2:78:EB:DF:37:C3:22:FC:A7:D2:F3:1E:04:DF:F7:77:99"}}},"request":{"raw":"GET /s/images/logos/voe-logo-2.svg HTTP/1.1\r\nHost: lukesitturn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lukesitturn.com/mgflc9vsk669\r\nCookie: __ddg8_=LGr9dZRMImE7EMYL; __ddg10_=1761508829; __ddg9_=91.90.42.154; __ddg1_=HZkMGsQCYQ69InN2pcf2; XSRF-TOKEN=eyJpdiI6Ikg5Rk1HTFU2SWdqOUVINDl5a2RIc2c9PSIsInZhbHVlIjoiWG5SQWRYVXlXRENWODhrQ0x6NVJ1aVNsWWd3ZjRtZzZkRVdLc2dTczM3ZG03bEFiNlNjSnNINXVGTjN3UU9BdHE3VVBKMzAzemJ4eGZBTW9Wc05OMkxhZUxHWU03Zk5mUlRnbXhzdHdleHErWXc2aW5ENXdsSVhPSzJnL1BiY3oiLCJtYWMiOiI4ZDJkMTZiOGQzY2NiNGQyYTg1Mjk4MjdjZDgwZjY1ZTFhMGVlODE4ODI3ODcxOTljZDVmY2YxMGRiYWI5NmE1IiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6InhUcnZCV1JkUVFpMjlhSlV3Z1ZwdHc9PSIsInZhbHVlIjoieCtNWm1CTkRTSitKU0krVjk1SVlpL1lQYWs0amJxSFFPWGFNZ2w4V2NWN2Y0VXgzZTNtMXdSOFhHYmd3UHV5c1JPa1BhNlhLaDJMVHBnellwYU82dG9VL1hjd2pLTHcwTEZneU5hY1FpNmxuMENCdVM1dFlJU3lRRy9uZnMxVzAiLCJtYWMiOiIxMmY4MWI5NmNlOGI2NDExODBjMzQ0OWY2Mjg5OGUyZDZmZWRlOGQ5N2JiOTUwNDhjMmRlNTQ5ZjE4M2Q2YzU2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=p8Pr1Eizcssr1co7; Domain=.lukesitturn.com; Path=/; Expires=Sun, 26-Oct-2025 20:20:29 GMT\n__ddg10_=1761508829; Domain=.lukesitturn.com; Path=/; Expires=Sun, 26-Oct-2025 20:20:29 GMT\n__ddg9_=91.90.42.154; Domain=.lukesitturn.com; Path=/; Expires=Sun, 26-Oct-2025 20:20:29 GMT\r\nstrict-transport-security: max-age=2628000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Wed, 22 Oct 2025 16:43:37 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 27 Apr 2025 04:35:03 GMT\r\netag: W/\"680db3f7-193\"\r\nexpires: Fri, 21 Nov 2025 16:43:37 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 357412\r\ncontent-length: 221\r\nddg-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":403,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a638d0dfa6feb7ce4b90e7c91c5b0df4","sha1":"7a0a86f47b51781f48bb9f232f05193936490027","sha256":"38b49bc67e053e96441e62f8423a9ed0e907ef768a0ffbba4370128760f814dc","sha512":"d0d5823062954b3398a974322a7f848f71ba602c2369c79ee16868904c2e66ff1a10152a221bf68d4d0f2abb167c730bacecd0855743c7c3b521523dac0edf54","ssdeep":"","tlshash":"abe06871d4aedc054640cb2ca3e7719124bd911233c03fece7b48e263e43a36512c2b8","first_seen":"2025-04-27T22:01:48.046871Z","last_seen":"2026-06-06T23:27:04.186144Z","times_seen":405,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"lukesitturn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/vanilla-lazyload/10.17.0/lazyload.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lukesitturn.com/mgflc9vsk669","date":"2025-10-26T20:00:29.336Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 19:09:23 GMT","end":"Tue, 16 Dec 2025 20:08:48 GMT"},"fingerprint":{"sha1":"E5:FA:6E:21:DA:AB:92:8F:E0:CB:31:C2:87:D4:E2:CE:9F:23:BF:C1","sha256":"E8:C7:D4:A8:29:E6:45:C0:C5:E3:AD:6A:90:36:30:4A:D7:2E:7C:F7:8F:57:44:E8:3B:2D:AF:F6:80:F7:4B:46"}}},"request":{"raw":"GET /ajax/libs/vanilla-lazyload/10.17.0/lazyload.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lukesitturn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 26 Oct 2025 20:00:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 1810\r\ncf-ray: 994c8a473c8a5696-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb04017-1404\"\r\nlast-modified: Mon, 04 May 2020 16:17:27 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 316295\r\nexpires: Fri, 16 Oct 2026 20:00:29 GMT\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=MfYvZRV4mHzx1idRfVuvmzj0F1uDd4AguUO1N%2B2xeTOCP%2BUKZfuzefwG%2F07Fflu%2BxIAL3TVMhYG6rdsnOGGyXgQNILTOov4d0q8U33fE07%2FqsIrv%2FQ8tswU8cL0y%2F1n34TknaguK\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5124,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5082)","md5":"375e3e0688214ca1595fc28956430dd1","sha1":"09ba8de39859cd17c2701057352dd5b8bc3c07f6","sha256":"a052ce2a1bfa39fd0315ec22b7b123a0097dc99884a5b10c348931a2b0190b1f","sha512":"da84ce21b5de848227f5cc70b591805ab9228a4c796058480a8259378a0c0a8b36137b02310d950faa4440b27330ba0b21518404b2b974d6feb74556837f172e","ssdeep":"96:lncpq9Hqqq0ykOP6WUuBymFCxWPIu4WYdlnlb3W5d1wgip+Aip9DyB9tyqkXlQ9I:VpHlqeOSWU2cxWPElZjJi7DyB9tyFX2K","tlshash":"06b1420cb069b03f656bb036413f130b7236605678958498f578dae9cabc84e2433fbd","first_seen":"2023-03-10T00:45:43Z","last_seen":"2026-06-06T23:27:04.176501Z","times_seen":499,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lukesitturn.com/mgflc9vsk669","fqdn":"lukesitturn.com","domain":"lukesitturn.com","tld":"com"},"ip":{"addr":"186.2.163.224","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-26T20:00:27.948Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lukesitturn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Oct 2025 15:43:45 GMT","end":"Tue, 20 Jan 2026 15:43:44 GMT"},"fingerprint":{"sha1":"17:48:98:3E:C6:84:47:C5:CA:E0:B6:60:A6:73:EA:CF:9C:92:7C:A0","sha256":"7B:DE:48:DF:DD:8C:BA:1F:4F:8C:17:44:3F:C1:F3:E2:78:EB:DF:37:C3:22:FC:A7:D2:F3:1E:04:DF:F7:77:99"}}},"request":{"raw":"GET /mgflc9vsk669 HTTP/1.1\r\nHost: lukesitturn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=EITM5TFh4CgWaRTL; Domain=.lukesitturn.com; Path=/; Expires=Sun, 26-Oct-2025 20:20:28 GMT\n__ddg10_=1761508828; Domain=.lukesitturn.com; Path=/; Expires=Sun, 26-Oct-2025 20:20:28 GMT\n__ddg9_=91.90.42.154; Domain=.lukesitturn.com; Path=/; Expires=Sun, 26-Oct-2025 20:20:28 GMT\n__ddg1_=HZkMGsQCYQ69InN2pcf2; Domain=.lukesitturn.com; HttpOnly; Path=/; Expires=Mon, 26-Oct-2026 20:00:28 GMT\nXSRF-TOKEN=eyJpdiI6Ikg5Rk1HTFU2SWdqOUVINDl5a2RIc2c9PSIsInZhbHVlIjoiWG5SQWRYVXlXRENWODhrQ0x6NVJ1aVNsWWd3ZjRtZzZkRVdLc2dTczM3ZG03bEFiNlNjSnNINXVGTjN3UU9BdHE3VVBKMzAzemJ4eGZBTW9Wc05OMkxhZUxHWU03Zk5mUlRnbXhzdHdleHErWXc2aW5ENXdsSVhPSzJnL1BiY3oiLCJtYWMiOiI4ZDJkMTZiOGQzY2NiNGQyYTg1Mjk4MjdjZDgwZjY1ZTFhMGVlODE4ODI3ODcxOTljZDVmY2YxMGRiYWI5NmE1IiwidGFnIjoiIn0%3D; expires=Sun, 26 Oct 2025 21:30:28 GMT; Max-Age=5400; path=/; secure; samesite=none; partitioned\nvoe_session=eyJpdiI6InhUcnZCV1JkUVFpMjlhSlV3Z1ZwdHc9PSIsInZhbHVlIjoieCtNWm1CTkRTSitKU0krVjk1SVlpL1lQYWs0amJxSFFPWGFNZ2w4V2NWN2Y0VXgzZTNtMXdSOFhHYmd3UHV5c1JPa1BhNlhLaDJMVHBnellwYU82dG9VL1hjd2pLTHcwTEZneU5hY1FpNmxuMENCdVM1dFlJU3lRRy9uZnMxVzAiLCJtYWMiOiIxMmY4MWI5NmNlOGI2NDExODBjMzQ0OWY2Mjg5OGUyZDZmZWRlOGQ5N2JiOTUwNDhjMmRlNTQ5ZjE4M2Q2YzU2IiwidGFnIjoiIn0%3D; expires=Sun, 26 Oct 2025 21:30:28 GMT; Max-Age=5400; path=/; secure; httponly; samesite=none; partitioned\r\nstrict-transport-security: max-age=2628000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Sun, 26 Oct 2025 20:00:28 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"Twitter Ads","description":"Twitter Ads is an advertising platform for Twitter 'microblogging' system.","website":"https://ads.twitter.com","common_platform_enumeration":"","icon":"Twitter.svg","categories":["Advertising"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"ShareThis","description":"ShareThis provides free engagement and growth tools (e.g., share buttons, follow buttons, and reaction buttons) for site owners.","website":"https://sharethis.com","common_platform_enumeration":"","icon":"ShareThis.png","categories":["Widgets"]},{"name":"Bootstrap:5.3.3","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":167231,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (39627)","md5":"f1c611b1a1ce5cfea94d787f1c5a3a28","sha1":"c29253fbf9f84d33b47578643001949e406be755","sha256":"da477fbae53fcc966341b59cb6ce52d750a97fd9295a9234f3789ebba0e999ed","sha512":"4e5c9cd14bcd776ef091d10cb71d9077f77685df7ff21ff1c34786a023682406d27c75961e5f912a1356b854f2e2847f41f6e00d6d52eeb94a62f07d66ce9902","ssdeep":"3072:sjTuj7hXnE8lDC7h9FsqaWs7jZPxhVCvi+vAiT20++PPYPS6HiW:lZO7laWs7lP2i+v80++PU","tlshash":"eef31a9534e2b41903b2d0b5017f29cbb6bb7c82a00d9544f1addab0bfe5e9ad463c1d","first_seen":"2025-10-26T20:00:56.474415Z","last_seen":"2025-10-26T20:00:56.474415Z","times_seen":1,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":65,"dns":1,"connect":28,"send":0,"wait":102,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"lukesitturn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lukesitturn.com/build/assets/DQJFgy2Q.css","fqdn":"lukesitturn.com","domain":"lukesitturn.com","tld":"com"},"ip":{"addr":"186.2.163.224","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lukesitturn.com/mgflc9vsk669","date":"2025-10-26T20:00:28.464Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lukesitturn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Oct 2025 15:43:45 GMT","end":"Tue, 20 Jan 2026 15:43:44 GMT"},"fingerprint":{"sha1":"17:48:98:3E:C6:84:47:C5:CA:E0:B6:60:A6:73:EA:CF:9C:92:7C:A0","sha256":"7B:DE:48:DF:DD:8C:BA:1F:4F:8C:17:44:3F:C1:F3:E2:78:EB:DF:37:C3:22:FC:A7:D2:F3:1E:04:DF:F7:77:99"}}},"request":{"raw":"GET /build/assets/DQJFgy2Q.css HTTP/1.1\r\nHost: lukesitturn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lukesitturn.com/mgflc9vsk669\r\nCookie: __ddg8_=EITM5TFh4CgWaRTL; __ddg10_=1761508828; __ddg9_=91.90.42.154; __ddg1_=HZkMGsQCYQ69InN2pcf2; XSRF-TOKEN=eyJpdiI6Ikg5Rk1HTFU2SWdqOUVINDl5a2RIc2c9PSIsInZhbHVlIjoiWG5SQWRYVXlXRENWODhrQ0x6NVJ1aVNsWWd3ZjRtZzZkRVdLc2dTczM3ZG03bEFiNlNjSnNINXVGTjN3UU9BdHE3VVBKMzAzemJ4eGZBTW9Wc05OMkxhZUxHWU03Zk5mUlRnbXhzdHdleHErWXc2aW5ENXdsSVhPSzJnL1BiY3oiLCJtYWMiOiI4ZDJkMTZiOGQzY2NiNGQyYTg1Mjk4MjdjZDgwZjY1ZTFhMGVlODE4ODI3ODcxOTljZDVmY2YxMGRiYWI5NmE1IiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6InhUcnZCV1JkUVFpMjlhSlV3Z1ZwdHc9PSIsInZhbHVlIjoieCtNWm1CTkRTSitKU0krVjk1SVlpL1lQYWs0amJxSFFPWGFNZ2w4V2NWN2Y0VXgzZTNtMXdSOFhHYmd3UHV5c1JPa1BhNlhLaDJMVHBnellwYU82dG9VL1hjd2pLTHcwTEZneU5hY1FpNmxuMENCdVM1dFlJU3lRRy9uZnMxVzAiLCJtYWMiOiIxMmY4MWI5NmNlOGI2NDExODBjMzQ0OWY2Mjg5OGUyZDZmZWRlOGQ5N2JiOTUwNDhjMmRlNTQ5ZjE4M2Q2YzU2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=t9LSdTrlFnVmlGK5; Domain=.lukesitturn.com; Path=/; Expires=Sun, 26-Oct-2025 20:20:28 GMT\n__ddg10_=1761508828; Domain=.lukesitturn.com; Path=/; Expires=Sun, 26-Oct-2025 20:20:28 GMT\n__ddg9_=91.90.42.154; Domain=.lukesitturn.com; Path=/; Expires=Sun, 26-Oct-2025 20:20:28 GMT\r\nstrict-transport-security: max-age=2628000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Wed, 22 Oct 2025 16:43:37 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 08 Jul 2025 18:22:04 GMT\r\netag: W/\"686d61cc-15e1\"\r\nexpires: Fri, 21 Nov 2025 16:43:37 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 357411\r\ncontent-length: 1496\r\nddg-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":5601,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5600)","md5":"2848a360d8364b7e046a9a5c8e9571c2","sha1":"c8a8a30bbfc66dd82043a720be753726eea3b2cd","sha256":"974c1546dbd5dab88bef845d52eebec9ff7dd471e0f87aa776f03f3c04e17410","sha512":"6e92d7ac1b7052ff55c3d4b6b8999b84298433333cc1265fb12a0278484313da19b91e982f65513bee6b6293ed22bb63e48274079f151b4d30688472eca50474","ssdeep":"96:3+Egyn5WZTllol4lXuZx2AhlFlplXAB1CIDTI:uEgDlol4lXu72ADPrwHCIDTI","tlshash":"a6c12317e741501c7d63c16f62a1a7c9372bd4c2fb726f7efab1e062d69229920e3241","first_seen":"2025-07-09T03:26:33.460144Z","last_seen":"2026-06-06T23:27:04.149138Z","times_seen":316,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"lukesitturn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"entitlements.jwplayer.com/SDtULpKyEeWwxnBWgb9+iQ.json","fqdn":"entitlements.jwplayer.com","domain":"jwplayer.com","tld":"com"},"ip":{"addr":"54.240.174.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lukesitturn.com/mgflc9vsk669","date":"2025-10-26T20:00:29.095Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jwplayer.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Wed, 25 Dec 2024 00:00:00 GMT","end":"Sat, 24 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"73:5F:22:36:72:E7:49:11:8F:B7:80:90:DA:4D:43:52:ED:0A:89:13","sha256":"E0:7A:FC:22:76:89:11:1A:58:F4:9F:05:51:C6:71:29:F8:0B:7B:AB:0B:3B:F9:C3:67:76:84:5E:50:04:C4:DF"}}},"request":{"raw":"GET /SDtULpKyEeWwxnBWgb9+iQ.json HTTP/1.1\r\nHost: entitlements.jwplayer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://lukesitturn.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lukesitturn.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\nserver: nginx\r\ndate: Sun, 26 Oct 2025 19:52:09 GMT\r\ncache-control: max-age=1800, s-maxage=3600\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: w6JXvCDcdzfoDHhQKgVKMheQKEN-6qXYgZIU99VVoglER1tUutCUTg==\r\nage: 500\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":126,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"8f5da2cd33e5fd33ada22ee4ad8a8e50","sha1":"f101c9b357c3bc40d4cea081b8c444df7a3401c2","sha256":"940996b83acb5c949885587e9cf87fc23b3227fa685ad6956113f4348e6e470e","sha512":"bb992b18dead636880a109166ae38257848f0a89c4269af791bd53810fa32dd1794c7b83a79d5c0e47bd9d030109a6540c13658481193fff8484a872b6bd84c7","ssdeep":"","tlshash":"b3b09222fecad47d82e231599203b2008f6142c28618442ae048a8a2b22973b2e90a88","first_seen":"2025-10-04T08:15:13.354344Z","last_seen":"2026-06-11T22:49:40.158489Z","times_seen":204,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":50,"dns":1,"connect":1,"send":0,"wait":6,"receive":0,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lukesitturn.com/engine/storyboard/mgflc9vsk669?t=0","fqdn":"lukesitturn.com","domain":"lukesitturn.com","tld":"com"},"ip":{"addr":"186.2.163.224","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lukesitturn.com/mgflc9vsk669","date":"2025-10-26T20:00:29.787Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lukesitturn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Oct 2025 15:43:45 GMT","end":"Tue, 20 Jan 2026 15:43:44 GMT"},"fingerprint":{"sha1":"17:48:98:3E:C6:84:47:C5:CA:E0:B6:60:A6:73:EA:CF:9C:92:7C:A0","sha256":"7B:DE:48:DF:DD:8C:BA:1F:4F:8C:17:44:3F:C1:F3:E2:78:EB:DF:37:C3:22:FC:A7:D2:F3:1E:04:DF:F7:77:99"}}},"request":{"raw":"GET /engine/storyboard/mgflc9vsk669?t=0 HTTP/1.1\r\nHost: lukesitturn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lukesitturn.com/mgflc9vsk669\r\nCookie: __ddg8_=M0MxwQNseRXFPgLN; __ddg10_=1761508829; __ddg9_=91.90.42.154; __ddg1_=HZkMGsQCYQ69InN2pcf2; XSRF-TOKEN=eyJpdiI6Ikg5Rk1HTFU2SWdqOUVINDl5a2RIc2c9PSIsInZhbHVlIjoiWG5SQWRYVXlXRENWODhrQ0x6NVJ1aVNsWWd3ZjRtZzZkRVdLc2dTczM3ZG03bEFiNlNjSnNINXVGTjN3UU9BdHE3VVBKMzAzemJ4eGZBTW9Wc05OMkxhZUxHWU03Zk5mUlRnbXhzdHdleHErWXc2aW5ENXdsSVhPSzJnL1BiY3oiLCJtYWMiOiI4ZDJkMTZiOGQzY2NiNGQyYTg1Mjk4MjdjZDgwZjY1ZTFhMGVlODE4ODI3ODcxOTljZDVmY2YxMGRiYWI5NmE1IiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6InhUcnZCV1JkUVFpMjlhSlV3Z1ZwdHc9PSIsInZhbHVlIjoieCtNWm1CTkRTSitKU0krVjk1SVlpL1lQYWs0amJxSFFPWGFNZ2w4V2NWN2Y0VXgzZTNtMXdSOFhHYmd3UHV5c1JPa1BhNlhLaDJMVHBnellwYU82dG9VL1hjd2pLTHcwTEZneU5hY1FpNmxuMENCdVM1dFlJU3lRRy9uZnMxVzAiLCJtYWMiOiIxMmY4MWI5NmNlOGI2NDExODBjMzQ0OWY2Mjg5OGUyZDZmZWRlOGQ5N2JiOTUwNDhjMmRlNTQ5ZjE4M2Q2YzU2IiwidGFnIjoiIn0%3D; UGVyc2lzdFN0b3JhZ2U=%7B%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=8XVSFzr4Q8OQzHVY; Domain=.lukesitturn.com; Path=/; Expires=Sun, 26-Oct-2025 20:20:29 GMT\n__ddg10_=1761508829; Domain=.lukesitturn.com; Path=/; Expires=Sun, 26-Oct-2025 20:20:29 GMT\n__ddg9_=91.90.42.154; Domain=.lukesitturn.com; Path=/; Expires=Sun, 26-Oct-2025 20:20:29 GMT\nXSRF-TOKEN=eyJpdiI6IkVLSStxaldKdThEaVdBaWZaRHloRGc9PSIsInZhbHVlIjoiK2xQT3V2YXlTd2l1RnVSMXBlT0JROEFHOEx5dFQ2dXZ4MVRsOU9KMFhkbkV4SnVSaXpsOVJmL0hsVXlmUnR1N25qeGR4eCtCeU1MZHBTUkdSLzJSd1lydldKVG5nelVZWVZZZHl2QkgrTG9Kd25LVEVjT3FGL0RpUWt1OGZaajAiLCJtYWMiOiIxMGNjYzI5ZWFjYWU4MjM3ZjgzMmUzMWZjNjQ5MDMyYzY4NjVjNjQ3OWI0YmM5OTE2NDIzZWVkNjNkNTQ2YTgxIiwidGFnIjoiIn0%3D; expires=Sun, 26 Oct 2025 21:30:29 GMT; Max-Age=5400; path=/; secure; samesite=none; partitioned\nvoe_session=eyJpdiI6IkhsdjZVRzZUTzJmdlVnRnFIeDF1YUE9PSIsInZhbHVlIjoiNlZxQ3MvcUt5OHMvb043RDlkRnhFMlBWTUhneGlFQVpYL0MxVmZBRXkwTUcweHJkaGs3WDUvd3pSWGdnQ1FqM3lhTlZLMCtzdE50b1NHdGI5YkNXVHF6QTFic2I5RkRKeVdsV2JhbS84WW9VYmlmU3ppcjhaZTVIU1NsdytUZmkiLCJtYWMiOiJkYTQ0OTdiMDc0ZDBiNWI2MDI1MWNjYjljODUzOTkzODRhNDhkNTE5ZDViMWVkN2RmZWNmZDY3ODdjNzY4MTJkIiwidGFnIjoiIn0%3D; expires=Sun, 26 Oct 2025 21:30:29 GMT; Max-Age=5400; path=/; secure; httponly; samesite=none; partitioned\r\nstrict-transport-security: max-age=2628000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: text/vtt; charset=UTF-8\r\ncache-control: no-cache, private\r\ndate: Sun, 26 Oct 2025 20:00:29 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11470,"size_decoded":0,"mime_type":"text/vtt; charset=UTF-8","magic":"WebVTT subtitles, ASCII text","md5":"41f4f56066a2339d436272ad13e07f54","sha1":"c3de7956e636fec41e2ff6857b7793a3833ed5a3","sha256":"032fc78ef8fe81f630fdcdd31788948deb4db66173f9ef09d36dd45f6e833530","sha512":"a1d2400e2f0f0ea1ec6efb33e87e5b52263354e8b658ab5b2ca7ada3ddda296c6850050abad8147292885d8666f5327812f807724a93c2142cd450a416550cf5","ssdeep":"96:LbCN9f2XNAJl+bjBOrswcXM6zBw24o3fddZinHCFLiVUh/FEJqCyzFiIsIaWOSdq:OV21GrVYWM2","tlshash":"8c320cf1c159fca19ef51a1c92d43b8d9311f4ce1fecd08539d666e49c9b9339a3a802","first_seen":"2025-10-26T20:00:56.479788Z","last_seen":"2025-10-26T20:00:56.479788Z","times_seen":1,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"lukesitturn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lukesitturn.com/cache/mgflc9vsk669_storyboard_L0.jpg","fqdn":"lukesitturn.com","domain":"lukesitturn.com","tld":"com"},"ip":{"addr":"186.2.163.224","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lukesitturn.com/mgflc9vsk669","date":"2025-10-26T20:00:29.902Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lukesitturn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Oct 2025 15:43:45 GMT","end":"Tue, 20 Jan 2026 15:43:44 GMT"},"fingerprint":{"sha1":"17:48:98:3E:C6:84:47:C5:CA:E0:B6:60:A6:73:EA:CF:9C:92:7C:A0","sha256":"7B:DE:48:DF:DD:8C:BA:1F:4F:8C:17:44:3F:C1:F3:E2:78:EB:DF:37:C3:22:FC:A7:D2:F3:1E:04:DF:F7:77:99"}}},"request":{"raw":"GET /cache/mgflc9vsk669_storyboard_L0.jpg HTTP/1.1\r\nHost: lukesitturn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lukesitturn.com/mgflc9vsk669\r\nCookie: __ddg8_=8XVSFzr4Q8OQzHVY; __ddg10_=1761508829; __ddg9_=91.90.42.154; __ddg1_=HZkMGsQCYQ69InN2pcf2; XSRF-TOKEN=eyJpdiI6IkVLSStxaldKdThEaVdBaWZaRHloRGc9PSIsInZhbHVlIjoiK2xQT3V2YXlTd2l1RnVSMXBlT0JROEFHOEx5dFQ2dXZ4MVRsOU9KMFhkbkV4SnVSaXpsOVJmL0hsVXlmUnR1N25qeGR4eCtCeU1MZHBTUkdSLzJSd1lydldKVG5nelVZWVZZZHl2QkgrTG9Kd25LVEVjT3FGL0RpUWt1OGZaajAiLCJtYWMiOiIxMGNjYzI5ZWFjYWU4MjM3ZjgzMmUzMWZjNjQ5MDMyYzY4NjVjNjQ3OWI0YmM5OTE2NDIzZWVkNjNkNTQ2YTgxIiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6IkhsdjZVRzZUTzJmdlVnRnFIeDF1YUE9PSIsInZhbHVlIjoiNlZxQ3MvcUt5OHMvb043RDlkRnhFMlBWTUhneGlFQVpYL0MxVmZBRXkwTUcweHJkaGs3WDUvd3pSWGdnQ1FqM3lhTlZLMCtzdE50b1NHdGI5YkNXVHF6QTFic2I5RkRKeVdsV2JhbS84WW9VYmlmU3ppcjhaZTVIU1NsdytUZmkiLCJtYWMiOiJkYTQ0OTdiMDc0ZDBiNWI2MDI1MWNjYjljODUzOTkzODRhNDhkNTE5ZDViMWVkN2RmZWNmZDY3ODdjNzY4MTJkIiwidGFnIjoiIn0%3D; UGVyc2lzdFN0b3JhZ2U=%7B%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=MoaredRprqezWwpZ; Domain=.lukesitturn.com; Path=/; Expires=Sun, 26-Oct-2025 20:20:29 GMT\n__ddg10_=1761508829; Domain=.lukesitturn.com; Path=/; Expires=Sun, 26-Oct-2025 20:20:29 GMT\n__ddg9_=91.90.42.154; Domain=.lukesitturn.com; Path=/; Expires=Sun, 26-Oct-2025 20:20:29 GMT\r\nstrict-transport-security: max-age=2628000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sun, 26 Oct 2025 16:04:53 GMT\r\ncontent-type: image/jpeg; charset=UTF-8\r\ncontent-length: 235589\r\ncache-control: max-age=2592000\r\nexpires: Tue, 25 Nov 2025 16:04:53 GMT\r\nlast-modified: Wed, 19 Jul 2023 18:30:01 GMT\r\netag: \"64b82ba9-39845\"\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-headers: cache-control, content-range, accept, origin, session-id, content-disposition, x-requested-with, content-type, content-description, referer, user-agent\r\nx-cache-status: MISS\r\nage: 14136\r\nddg-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":235589,"size_decoded":0,"mime_type":"image/jpeg; charset=UTF-8","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1250x700, components 3","md5":"880b93bf3cb4b2f6507f233b2f33a9ee","sha1":"926017db36799aabaa7dadbbbbb6f99fac8b2179","sha256":"7d5cea3d1a961cf4e85c764efea9f9bc485cb9c8310995a7ba3e9c4d14c298e0","sha512":"40c940cf320e1a8148d5d21bec2d9c7d436a2cd0db34814d73ca41f43471006a7a0ff5150e8663cbf0538fd8f2e0051cf50d3df34db963c18969bfd214be0c96","ssdeep":"6144:Hq/BsLzt8ZpFChU4rdt4aodJmeAxKiZ29nB:K/eLyIJp6zdJm2isB","tlshash":"0b342266d1173492e0dac9933b36775c762bdb4520e280cddb490ee23baf3512dd9b82","first_seen":"2025-10-26T20:00:56.482099Z","last_seen":"2025-10-26T20:00:56.482099Z","times_seen":1,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"lukesitturn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"omzarncas.com/ohfkrosa?Mo=K20G\u0026mcq=wv\u0026mpbhk=ttkh\u0026mr=_elqypajrsphiugozerqxva\u0026hg=dxozls\u0026xw=4\u0026urangxpv=nslqpy\u0026hvjneaqt=913994\u0026iun=9\u0026cj=5458591\u0026ka=tqawk\u0026mn=yer","fqdn":"omzarncas.com","domain":"omzarncas.com","tld":"com"},"ip":{"addr":"94.242.247.32","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lukesitturn.com/mgflc9vsk669","date":"2025-10-26T20:00:29.908Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"omzarncas.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Oct 2025 07:17:05 GMT","end":"Thu, 01 Jan 2026 07:17:04 GMT"},"fingerprint":{"sha1":"04:01:12:DD:F0:48:89:E0:AC:0D:2F:2C:D1:16:46:2F:8E:9B:AF:94","sha256":"A7:55:C9:E7:7F:D7:AB:E9:47:45:6D:0F:5B:98:2D:57:29:1D:05:96:BC:01:EB:D9:57:B1:71:E0:EE:2A:11:E4"}}},"request":{"raw":"GET /ohfkrosa?Mo=K20G\u0026mcq=wv\u0026mpbhk=ttkh\u0026mr=_elqypajrsphiugozerqxva\u0026hg=dxozls\u0026xw=4\u0026urangxpv=nslqpy\u0026hvjneaqt=913994\u0026iun=9\u0026cj=5458591\u0026ka=tqawk\u0026mn=yer HTTP/1.1\r\nHost: omzarncas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lukesitturn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Oct 2025 20:00:29 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: CHCK=1; Path=/; Expires=Sun, 29 Nov 2026 20:00:29 GMT; Secure; SameSite=None\nPTS=; Path=/; Expires=Sun, 29 Nov 2026 20:00:29 GMT; Secure; SameSite=None\nUID=2510261500210f9417f30d44d5a56e8cd5ed; Path=/; Expires=Sun, 29 Nov 2026 20:00:29 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":535,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (535), with no line terminators","md5":"33e893026a31751e5dd03d8bf6de8f5c","sha1":"f0210064c652b15181e3a3b459e8326f6659e100","sha256":"270434b6c8f9c5b75ae5b0d7626eedbe033d91b2f65243f649948d121b47056b","sha512":"10901d89ada5a9a8d01e24f5415e1d94c28cd6195e5de0f226fb91e28360698f365699b4c5435aed4d3ec5a52708e47741104689561db4ee7071ecd0f72c60da","ssdeep":"","tlshash":"7ef059dad08bc9f26c39d85e67b83e0924e08e0aac230e8c51b0cca1a14b2754167dad","first_seen":"2025-10-26T20:00:56.484565Z","last_seen":"2025-10-26T20:00:56.484565Z","times_seen":1,"resource_available":true,"data":null}},"time_used":111,"timings":{"blocked":46,"dns":1,"connect":17,"send":0,"wait":18,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"omzarncas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gigglegrowlworrisome.com/get/2060453?id=2060453\u0026jp=_clklzspuubuvwohjkvroqx\u0026dr=102\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.622-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=7IocH7fB4q5zanZXWVsPCTpVIbFIUEQtsql-\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=w2SdZ9faHR0cHM6Ly9sdWtlc2l0dHVybi5jb20vbWdmbGM5dnNrNjY5\u0026afid=2648717033115648\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=8\u0026pi=W1oqmg\u0026dto=2\u0026pload=1946\u0026rlp=%5B0%2C35%2C587%2C468%2C6613%2C6075%2C1567%2C5770%2C1%5D\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0\u0026freq=0","fqdn":"gigglegrowlworrisome.com","domain":"gigglegrowlworrisome.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lukesitturn.com/mgflc9vsk669","date":"2025-10-26T20:00:30.017Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gigglegrowlworrisome.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 14:25:52 GMT","end":"Wed, 21 Jan 2026 14:25:51 GMT"},"fingerprint":{"sha1":"5D:9F:41:7B:78:25:D4:B3:13:E8:25:E2:7F:55:2F:21:57:20:47:C4","sha256":"72:3D:F0:F6:91:88:C8:C2:48:4F:00:5B:E7:66:01:5B:6F:7A:B2:31:77:49:26:AB:D7:16:D6:57:AF:7C:B0:1B"}}},"request":{"raw":"GET /get/2060453?id=2060453\u0026jp=_clklzspuubuvwohjkvroqx\u0026dr=102\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.622-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=7IocH7fB4q5zanZXWVsPCTpVIbFIUEQtsql-\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=w2SdZ9faHR0cHM6Ly9sdWtlc2l0dHVybi5jb20vbWdmbGM5dnNrNjY5\u0026afid=2648717033115648\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=8\u0026pi=W1oqmg\u0026dto=2\u0026pload=1946\u0026rlp=%5B0%2C35%2C587%2C468%2C6613%2C6075%2C1567%2C5770%2C1%5D\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0\u0026freq=0 HTTP/1.1\r\nHost: gigglegrowlworrisome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lukesitturn.com/\r\nCookie: cart=1; cart_p=2; CHCK=1; PTS=; UID=2510261500b4bce58c87694071b98cb2cea9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Oct 2025 20:00:29 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: CHCK=1; Path=/; Expires=Sun, 29 Nov 2026 20:00:30 GMT; Secure; SameSite=None\nPTS=; Path=/; Expires=Sun, 29 Nov 2026 20:00:30 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5393,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (5393), with no line terminators","md5":"787b81599d9d829e933a237b4a48c1d1","sha1":"79919c4abbee17c0274226cf4dbed8943826e36c","sha256":"ce8de670896cc971e85f66485829419ce50ddb1a0b441fcf7f35df7d4b92abbb","sha512":"f261c07b736e827dde646c108ff550ae371071f4c610c8c9bc699a8b3fdc7eaed37c43c654958c18a2691112395f6c6c52dc83a1077bad9eb65f9ba17cfc5cba","ssdeep":"96:mAuaw1oS7me9GZV+R+TGyX+9EN/wbIqdoboI6TEC7CSBoK:mAc1/mV4QGyX+Y2Iqdk46K","tlshash":"50b14c0dd8a8ced4fc849c65e6766d0a7ad515b0bdc30f0ff146e526e1c42b832b28e1","first_seen":"2025-10-26T20:00:56.486478Z","last_seen":"2025-10-26T20:00:56.486478Z","times_seen":1,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gigglegrowlworrisome.com/chicken.gif?z=2060453\u0026pb=420c87b526739a72c935380ae297e8061761516030\u0026pbc=87maRFJUvK7-mf5o\u0026pbi=WgnEajJ7l8L-mf5o\u0026pbu=VK-tlu0KuST-mf5o\u0026psp=FXx9jkqW0wvhBfgs6dWQ2Esd_EmOaD22TO921mMrLwjTXvk37sCOu9LZdLqaTSr8_rlQDzPaKnousQAOxdn_0Fm5PYXMMO0sW4UQi4AWjiB_IuBWQVXmHrV7OZJbyKtYxZ8xcBfQg9HlVpSHHLipAR7iqz-jIGV6xqVKW_hocjGvBLyR4sQRteOmL3xuv-5BccSHRK3hts1eDYhtTa-iLxXePoClFsU4Q644TF_VT3OMYV11Ba5MY0AH2sLFvExTldRwygZwh07069WKhpYGu-nqQeFyrsC-G1zntTije9QnHDqdoc5UsLpK195uwSsITkiNtQMbxtvSo1GTMTY6n4FWb_RFA3-zuIlxkmT-UBJJw_81Z_IgK8hWvL9yOlS_MtPbtJxAcR68ABGrs0LphFnZMPFNUBOt1yng8FRpm9iYeAWUe8lZN3qHYXtE_pAHcppchUVdaj-skoRvA2l06NsF1YL0E1LTHE5kTwzejeL9rgr-Hehn6mxjJZTDn6JNrU9iCXUaibUqwNCiQsvaySMFAcmiq-vPYR9PbIYpVo2ZRjVHXoo-YB-8jaD48-pdUzJvtMg5CsWpZYbK-9p64AA_KCzIoMdXt4e7wMJDocLEgjy7CqWWm9sbOnfhMTfWtuCXZgl8Un-uazHMw653HEfgSOYfxXqV2XUGzQs5M-3EU5ol_-BorRSj87lx-mLDq4MnFUImOL6nP6Fg7-1Xpi1A5xSX4vu9hQy6fqsn9MaN0imlFKtiQL8ng_jYusEXDKGMMGXUW4RJlAFdqAsGJ1-wXfLR-Yuwte4DKryCb6Zl6ccYAadhLC_1_ZKTBLpOGttAPLZNBdBY_gA=\u0026freq=0\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.622-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=7IocH7fB4q5zanZXWVsPCTpVIbFIUEQtsql-\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=QHk0rOkaHR0cHM6Ly9sdWtlc2l0dHVybi5jb20vbWdmbGM5dnNrNjY5\u0026afid=2367242056541696\u0026eclog=0\u0026snc=0\u0026ssc=3\u0026tp=0\u0026vp=8\u0026pi=W1oqmg\u0026dto=2\u0026pload=1946\u0026rlp=%5B0%2C35%2C587%2C468%2C10972%2C6181%2C1589%2C5876%2C1%5D\u0026im=1\u0026noch=1\u0026cs=5","fqdn":"gigglegrowlworrisome.com","domain":"gigglegrowlworrisome.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lukesitturn.com/mgflc9vsk669","date":"2025-10-26T20:00:32.085Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gigglegrowlworrisome.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 14:25:52 GMT","end":"Wed, 21 Jan 2026 14:25:51 GMT"},"fingerprint":{"sha1":"5D:9F:41:7B:78:25:D4:B3:13:E8:25:E2:7F:55:2F:21:57:20:47:C4","sha256":"72:3D:F0:F6:91:88:C8:C2:48:4F:00:5B:E7:66:01:5B:6F:7A:B2:31:77:49:26:AB:D7:16:D6:57:AF:7C:B0:1B"}}},"request":{"raw":"GET /chicken.gif?z=2060453\u0026pb=420c87b526739a72c935380ae297e8061761516030\u0026pbc=87maRFJUvK7-mf5o\u0026pbi=WgnEajJ7l8L-mf5o\u0026pbu=VK-tlu0KuST-mf5o\u0026psp=FXx9jkqW0wvhBfgs6dWQ2Esd_EmOaD22TO921mMrLwjTXvk37sCOu9LZdLqaTSr8_rlQDzPaKnousQAOxdn_0Fm5PYXMMO0sW4UQi4AWjiB_IuBWQVXmHrV7OZJbyKtYxZ8xcBfQg9HlVpSHHLipAR7iqz-jIGV6xqVKW_hocjGvBLyR4sQRteOmL3xuv-5BccSHRK3hts1eDYhtTa-iLxXePoClFsU4Q644TF_VT3OMYV11Ba5MY0AH2sLFvExTldRwygZwh07069WKhpYGu-nqQeFyrsC-G1zntTije9QnHDqdoc5UsLpK195uwSsITkiNtQMbxtvSo1GTMTY6n4FWb_RFA3-zuIlxkmT-UBJJw_81Z_IgK8hWvL9yOlS_MtPbtJxAcR68ABGrs0LphFnZMPFNUBOt1yng8FRpm9iYeAWUe8lZN3qHYXtE_pAHcppchUVdaj-skoRvA2l06NsF1YL0E1LTHE5kTwzejeL9rgr-Hehn6mxjJZTDn6JNrU9iCXUaibUqwNCiQsvaySMFAcmiq-vPYR9PbIYpVo2ZRjVHXoo-YB-8jaD48-pdUzJvtMg5CsWpZYbK-9p64AA_KCzIoMdXt4e7wMJDocLEgjy7CqWWm9sbOnfhMTfWtuCXZgl8Un-uazHMw653HEfgSOYfxXqV2XUGzQs5M-3EU5ol_-BorRSj87lx-mLDq4MnFUImOL6nP6Fg7-1Xpi1A5xSX4vu9hQy6fqsn9MaN0imlFKtiQL8ng_jYusEXDKGMMGXUW4RJlAFdqAsGJ1-wXfLR-Yuwte4DKryCb6Zl6ccYAadhLC_1_ZKTBLpOGttAPLZNBdBY_gA=\u0026freq=0\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.622-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=7IocH7fB4q5zanZXWVsPCTpVIbFIUEQtsql-\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=QHk0rOkaHR0cHM6Ly9sdWtlc2l0dHVybi5jb20vbWdmbGM5dnNrNjY5\u0026afid=2367242056541696\u0026eclog=0\u0026snc=0\u0026ssc=3\u0026tp=0\u0026vp=8\u0026pi=W1oqmg\u0026dto=2\u0026pload=1946\u0026rlp=%5B0%2C35%2C587%2C468%2C10972%2C6181%2C1589%2C5876%2C1%5D\u0026im=1\u0026noch=1\u0026cs=5 HTTP/1.1\r\nHost: gigglegrowlworrisome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cart=1; cart_p=2; CHCK=1; PTS=; UID=2510261500b4bce58c87694071b98cb2cea9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Oct 2025 20:00:32 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nx-route-id: stats.impression\r\nset-cookie: BCAI=ADe9zAAAAAAAAAAB; Path=/; Expires=Mon, 27 Oct 2025 20:00:32 GMT; Secure; SameSite=None\nBMI=AEpxbwAAAAAAAAAB; Path=/; Expires=Mon, 27 Oct 2025 20:00:32 GMT; Secure; SameSite=None\nBCRI=xuKDIgAAAAAAAAAB; Path=/; Expires=Mon, 27 Oct 2025 20:00:32 GMT; Secure; SameSite=None\nIMC_102=1; Path=/; Expires=Mon, 27 Oct 2025 20:00:32 GMT; Secure; SameSite=None\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"28e463819a210071de3b45ebe7633613","sha1":"6dccd571828ec0912629119cf7eabfea9f33ddbc","sha256":"44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84","sha512":"8a82ac5a7883cd9b74bdb561cf825ce86474e259ad8c445e538d697b0003e3f2b1d6edcd3dc6512f4ad16e9074da204a79938257c457ecf68f4329eac0182e67","ssdeep":"","tlshash":"04900003e280e082c3a0c0300e0ccb802b88a2308a28030fb0fc2baefc3a3a20c23000","first_seen":"2023-04-05T09:26:54Z","last_seen":"2026-06-12T01:13:03.312736Z","times_seen":22340,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/figtree/v9/_Xms-HUzqDCFdgfMm4S9DQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://lukesitturn.com/mgflc9vsk669","date":"2025-10-26T20:00:29.329Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:34:07 GMT","end":"Wed, 24 Dec 2025 14:34:06 GMT"},"fingerprint":{"sha1":"CE:D7:82:8C:04:B0:E5:F9:3B:52:AC:E2:75:72:A1:31:F8:D2:42:D4","sha256":"B8:54:E9:B3:89:59:D3:D4:18:71:52:99:FF:BB:D7:4C:BF:09:4A:EE:50:59:19:40:A0:6E:17:ED:80:73:3B:22"}}},"request":{"raw":"GET /s/figtree/v9/_Xms-HUzqDCFdgfMm4S9DQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://lukesitturn.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20156\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 23 Oct 2025 17:02:47 GMT\r\nexpires: Fri, 23 Oct 2026 17:02:47 GMT\r\ncache-control: public, max-age=31536000\r\nage: 269862\r\nlast-modified: Wed, 10 Sep 2025 17:04:00 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20156,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20156, version 1.0","md5":"202cfb54d4e66d1702404ade49339ceb","sha1":"57fd1acf8d9651d9c38c0d4af7b78bc399be0652","sha256":"4ba7d3d096695818fe0686be4f1e82c6b05134e18a22260336130335027462dd","sha512":"2b323bc185114cbb7b0e2d92b7daf844d5dbe1e79f65d5b358f50bdf973ea60e8303e45ce7af23ce09b5e64149402065f0194f795e22dcd55c86ce1e05a11451","ssdeep":"384:gqwJbbuIcjx0eifRE1S0B1FbjeXpvgwFU2F5TfB3Qj0UWAB3XZ/ol:SJrK+hqvBjbyXpvgMUuVFHdK3p/Q","tlshash":"0e92e0eb83b3abc474ccb2a1349002e960e3524213b79df0c59375f0e9bd7da1a8522d","first_seen":"2025-05-14T03:12:47.210807Z","last_seen":"2026-06-12T01:34:36.947045Z","times_seen":7232,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lukesitturn.com/jwplayer/8.38.2/jwplayer.js","fqdn":"lukesitturn.com","domain":"lukesitturn.com","tld":"com"},"ip":{"addr":"186.2.163.224","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lukesitturn.com/mgflc9vsk669","date":"2025-10-26T20:00:28.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lukesitturn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Oct 2025 15:43:45 GMT","end":"Tue, 20 Jan 2026 15:43:44 GMT"},"fingerprint":{"sha1":"17:48:98:3E:C6:84:47:C5:CA:E0:B6:60:A6:73:EA:CF:9C:92:7C:A0","sha256":"7B:DE:48:DF:DD:8C:BA:1F:4F:8C:17:44:3F:C1:F3:E2:78:EB:DF:37:C3:22:FC:A7:D2:F3:1E:04:DF:F7:77:99"}}},"request":{"raw":"GET /jwplayer/8.38.2/jwplayer.js HTTP/1.1\r\nHost: lukesitturn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lukesitturn.com/mgflc9vsk669\r\nCookie: __ddg8_=EITM5TFh4CgWaRTL; __ddg10_=1761508828; __ddg9_=91.90.42.154; __ddg1_=HZkMGsQCYQ69InN2pcf2; XSRF-TOKEN=eyJpdiI6Ikg5Rk1HTFU2SWdqOUVINDl5a2RIc2c9PSIsInZhbHVlIjoiWG5SQWRYVXlXRENWODhrQ0x6NVJ1aVNsWWd3ZjRtZzZkRVdLc2dTczM3ZG03bEFiNlNjSnNINXVGTjN3UU9BdHE3VVBKMzAzemJ4eGZBTW9Wc05OMkxhZUxHWU03Zk5mUlRnbXhzdHdleHErWXc2aW5ENXdsSVhPSzJnL1BiY3oiLCJtYWMiOiI4ZDJkMTZiOGQzY2NiNGQyYTg1Mjk4MjdjZDgwZjY1ZTFhMGVlODE4ODI3ODcxOTljZDVmY2YxMGRiYWI5NmE1IiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6InhUcnZCV1JkUVFpMjlhSlV3Z1ZwdHc9PSIsInZhbHVlIjoieCtNWm1CTkRTSitKU0krVjk1SVlpL1lQYWs0amJxSFFPWGFNZ2w4V2NWN2Y0VXgzZTNtMXdSOFhHYmd3UHV5c1JPa1BhNlhLaDJMVHBnellwYU82dG9VL1hjd2pLTHcwTEZneU5hY1FpNmxuMENCdVM1dFlJU3lRRy9uZnMxVzAiLCJtYWMiOiIxMmY4MWI5NmNlOGI2NDExODBjMzQ0OWY2Mjg5OGUyZDZmZWRlOGQ5N2JiOTUwNDhjMmRlNTQ5ZjE4M2Q2YzU2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=OcgrRAiBUQDx9JRA; Domain=.lukesitturn.com; Path=/; Expires=Sun, 26-Oct-2025 20:20:28 GMT\n__ddg10_=1761508828; Domain=.lukesitturn.com; Path=/; Expires=Sun, 26-Oct-2025 20:20:28 GMT\n__ddg9_=91.90.42.154; Domain=.lukesitturn.com; Path=/; Expires=Sun, 26-Oct-2025 20:20:28 GMT\r\nstrict-transport-security: max-age=2628000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Wed, 22 Oct 2025 16:43:37 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 08 Jul 2025 18:22:04 GMT\r\netag: W/\"686d61cc-2613c\"\r\nexpires: Fri, 21 Nov 2025 16:43:37 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 357411\r\ncontent-length: 53113\r\nddg-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":155964,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"2d3b7e0e4267402d0e259c9a21792258","sha1":"6220167731bbbb87609d184a95f5c4c2b2f8c72c","sha256":"190acb6da87bd161114f93feb270234b6ff00dafa7c98732c452ff447d4cef77","sha512":"4ae57475aa41d82ae52d0204e9978089995d10d72cf1c9beb686e1811a6bb7a7e24140f21ecc073b01e1209a20c5cf4b27f26ae82e981ef8d5374aeb9a1ba75b","ssdeep":"1536:oryPjl9oOHjCyj35oM8j03kwdtxwszufvL3v5qYtwR/iaCttHF3vLGCaUZfkJk80:FHJ1az3LpaUZfkO8bMdhdD5J","tlshash":"59e34ca631c2f4a603e224d6e47b4101f2790949384de9a4f66cecd7795a907b1b3fbc","first_seen":"2025-07-09T03:26:33.454125Z","last_seen":"2025-12-13T13:26:16.425699Z","times_seen":141,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"lukesitturn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lukesitturn.com/cache/mgflc9vsk669_storyboard_L2.jpg","fqdn":"lukesitturn.com","domain":"lukesitturn.com","tld":"com"},"ip":{"addr":"186.2.163.224","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lukesitturn.com/mgflc9vsk669","date":"2025-10-26T20:00:29.803Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lukesitturn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Oct 2025 15:43:45 GMT","end":"Tue, 20 Jan 2026 15:43:44 GMT"},"fingerprint":{"sha1":"17:48:98:3E:C6:84:47:C5:CA:E0:B6:60:A6:73:EA:CF:9C:92:7C:A0","sha256":"7B:DE:48:DF:DD:8C:BA:1F:4F:8C:17:44:3F:C1:F3:E2:78:EB:DF:37:C3:22:FC:A7:D2:F3:1E:04:DF:F7:77:99"}}},"request":{"raw":"GET /cache/mgflc9vsk669_storyboard_L2.jpg HTTP/1.1\r\nHost: lukesitturn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lukesitturn.com/mgflc9vsk669\r\nCookie: __ddg8_=M0MxwQNseRXFPgLN; __ddg10_=1761508829; __ddg9_=91.90.42.154; __ddg1_=HZkMGsQCYQ69InN2pcf2; XSRF-TOKEN=eyJpdiI6Ikg5Rk1HTFU2SWdqOUVINDl5a2RIc2c9PSIsInZhbHVlIjoiWG5SQWRYVXlXRENWODhrQ0x6NVJ1aVNsWWd3ZjRtZzZkRVdLc2dTczM3ZG03bEFiNlNjSnNINXVGTjN3UU9BdHE3VVBKMzAzemJ4eGZBTW9Wc05OMkxhZUxHWU03Zk5mUlRnbXhzdHdleHErWXc2aW5ENXdsSVhPSzJnL1BiY3oiLCJtYWMiOiI4ZDJkMTZiOGQzY2NiNGQyYTg1Mjk4MjdjZDgwZjY1ZTFhMGVlODE4ODI3ODcxOTljZDVmY2YxMGRiYWI5NmE1IiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6InhUcnZCV1JkUVFpMjlhSlV3Z1ZwdHc9PSIsInZhbHVlIjoieCtNWm1CTkRTSitKU0krVjk1SVlpL1lQYWs0amJxSFFPWGFNZ2w4V2NWN2Y0VXgzZTNtMXdSOFhHYmd3UHV5c1JPa1BhNlhLaDJMVHBnellwYU82dG9VL1hjd2pLTHcwTEZneU5hY1FpNmxuMENCdVM1dFlJU3lRRy9uZnMxVzAiLCJtYWMiOiIxMmY4MWI5NmNlOGI2NDExODBjMzQ0OWY2Mjg5OGUyZDZmZWRlOGQ5N2JiOTUwNDhjMmRlNTQ5ZjE4M2Q2YzU2IiwidGFnIjoiIn0%3D; UGVyc2lzdFN0b3JhZ2U=%7B%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=2QUA3m1cbNhbOgQw; Domain=.lukesitturn.com; Path=/; Expires=Sun, 26-Oct-2025 20:20:29 GMT\n__ddg10_=1761508829; Domain=.lukesitturn.com; Path=/; Expires=Sun, 26-Oct-2025 20:20:29 GMT\n__ddg9_=91.90.42.154; Domain=.lukesitturn.com; Path=/; Expires=Sun, 26-Oct-2025 20:20:29 GMT\r\nstrict-transport-security: max-age=2628000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sun, 26 Oct 2025 16:04:53 GMT\r\ncontent-type: image/jpeg; charset=UTF-8\r\ncontent-length: 136957\r\ncache-control: max-age=2592000\r\nexpires: Tue, 25 Nov 2025 16:04:53 GMT\r\nlast-modified: Wed, 19 Jul 2023 18:30:01 GMT\r\netag: \"64b82ba9-216fd\"\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-headers: cache-control, content-range, accept, origin, session-id, content-disposition, x-requested-with, content-type, content-description, referer, user-agent\r\nx-cache-status: MISS\r\nage: 14136\r\nddg-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":136957,"size_decoded":0,"mime_type":"image/jpeg; charset=UTF-8","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1279x539, components 3","md5":"e3ba92243c2fed263a25213681d6834a","sha1":"d244cf344d8dfda206faaeb7a0f4414d9eb39a36","sha256":"b4eee3821b4e18507561399b492b1c611bc918d548939fff134eb4fca2e3fbff","sha512":"5b374acdccd547481019f2c398ce816ebe8a52bb7a65dca50e6be86dcc6a91ed0cde69ddd90033a78d3b0f7f41682a26bc403fd991a2a11f4e066ad530e35b83","ssdeep":"3072:Kedp9EDfGbTYt7z8UcT2JmFJ9ix7YL2KRRn2SOGgrf7C:KedrE7U67zs2S6o12SEC","tlshash":"8fd3121a4b15ce1bb98ef0be433197361280dd29d0a60a6392d394583bb53ff8c56d8b","first_seen":"2025-10-26T20:00:56.490746Z","last_seen":"2025-10-26T20:00:56.490746Z","times_seen":1,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"lukesitturn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Figtree:wght@400;600;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lukesitturn.com/mgflc9vsk669","date":"2025-10-26T20:00:28.452Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:34:12 GMT","end":"Wed, 24 Dec 2025 14:34:11 GMT"},"fingerprint":{"sha1":"A8:1F:72:36:24:F2:F6:E0:7B:67:5F:39:3B:77:D6:8D:FC:AA:91:DF","sha256":"C0:8F:C7:95:96:3C:18:D4:60:5F:92:EC:FE:5D:AB:58:62:6D:05:D5:A1:3F:B1:EC:B0:88:5F:E3:9E:21:52:BF"}}},"request":{"raw":"GET /css2?family=Figtree:wght@400;600;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lukesitturn.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 26 Oct 2025 20:00:28 GMT\r\ndate: Sun, 26 Oct 2025 20:00:28 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2508,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"3aa2ab6d0fb8d300056983c0ffb25f19","sha1":"b991567dda2fc5ff930ee96daf48ff4344436144","sha256":"1243dafebfbffbba4c76b4c374ba4ca071e8b3e951b9944962e78822c13e2770","sha512":"2610f46796da1f3821906bbb194acab4f6f18b33487695c0d341405fba6cd953e2f344d6fc20764d2d485e7c286d5a1ce41a285ad4956364816ce700d2248cd3","ssdeep":"","tlshash":"4951ce81086ba504df930dc152cd7e33ef5ea390684599349efe189cacead675312b4d","first_seen":"2025-09-12T16:05:45.649556Z","last_seen":"2026-06-06T23:27:04.142347Z","times_seen":306,"resource_available":false,"data":null}},"time_used":498,"timings":{"blocked":214,"dns":1,"connect":16,"send":0,"wait":48,"receive":0,"ssl":215},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gigglegrowlworrisome.com/in.js","fqdn":"gigglegrowlworrisome.com","domain":"gigglegrowlworrisome.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lukesitturn.com/mgflc9vsk669","date":"2025-10-26T20:00:28.471Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gigglegrowlworrisome.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 14:25:52 GMT","end":"Wed, 21 Jan 2026 14:25:51 GMT"},"fingerprint":{"sha1":"5D:9F:41:7B:78:25:D4:B3:13:E8:25:E2:7F:55:2F:21:57:20:47:C4","sha256":"72:3D:F0:F6:91:88:C8:C2:48:4F:00:5B:E7:66:01:5B:6F:7A:B2:31:77:49:26:AB:D7:16:D6:57:AF:7C:B0:1B"}}},"request":{"raw":"GET /in.js HTTP/1.1\r\nHost: gigglegrowlworrisome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lukesitturn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Oct 2025 20:00:28 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 23 Oct 2025 11:54:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68fa1784-2d632\"\r\nexpires: Sun, 02 Nov 2025 20:00:28 GMT\r\ncache-control: max-age=604800\r\nx-js-ab: current\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":185906,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"0f91db452ba8727e57bbcddc33cef053","sha1":"50a4baf84c701d3292ac781fea0c2988e8f1ea5f","sha256":"a2fdcf2a90cb05dfe515229f09eb81cb3352d7d6b1347340fee10e2f00726d8e","sha512":"e0d559dfd304d7fb49d4d9a1a4f2e41a734a959cec9a60b15dd48e9af4ae7ed94e640c1c6c977d044c00fc2bfb5f726eae86bb4f03b3cc5984ac657a4faab7f5","ssdeep":"1536:+ySJx2jjsCcUWfKs+fJEWpcM//jUdEXGWrZQvvA440so7Y0Ql+bFGDvbL9p+WD89:+8tWLMcWMXv80sYU4MnQ0+5fpBx7","tlshash":"cd04969c35ed2077034fc92ee82f76396525a8d1ad9940c0c4eac0dc6db8b05de69be7","first_seen":"2025-10-23T14:17:41.395296Z","last_seen":"2025-10-28T10:03:12.838626Z","times_seen":89,"resource_available":true,"data":null}},"time_used":144,"timings":{"blocked":43,"dns":10,"connect":17,"send":0,"wait":34,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lukesitturn.com/s/images/logos/voe-logo-2.svg?v=2","fqdn":"lukesitturn.com","domain":"lukesitturn.com","tld":"com"},"ip":{"addr":"186.2.163.224","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lukesitturn.com/mgflc9vsk669","date":"2025-10-26T20:00:28.475Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lukesitturn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Oct 2025 15:43:45 GMT","end":"Tue, 20 Jan 2026 15:43:44 GMT"},"fingerprint":{"sha1":"17:48:98:3E:C6:84:47:C5:CA:E0:B6:60:A6:73:EA:CF:9C:92:7C:A0","sha256":"7B:DE:48:DF:DD:8C:BA:1F:4F:8C:17:44:3F:C1:F3:E2:78:EB:DF:37:C3:22:FC:A7:D2:F3:1E:04:DF:F7:77:99"}}},"request":{"raw":"GET /s/images/logos/voe-logo-2.svg?v=2 HTTP/1.1\r\nHost: lukesitturn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lukesitturn.com/mgflc9vsk669\r\nCookie: __ddg8_=EITM5TFh4CgWaRTL; __ddg10_=1761508828; __ddg9_=91.90.42.154; __ddg1_=HZkMGsQCYQ69InN2pcf2; XSRF-TOKEN=eyJpdiI6Ikg5Rk1HTFU2SWdqOUVINDl5a2RIc2c9PSIsInZhbHVlIjoiWG5SQWRYVXlXRENWODhrQ0x6NVJ1aVNsWWd3ZjRtZzZkRVdLc2dTczM3ZG03bEFiNlNjSnNINXVGTjN3UU9BdHE3VVBKMzAzemJ4eGZBTW9Wc05OMkxhZUxHWU03Zk5mUlRnbXhzdHdleHErWXc2aW5ENXdsSVhPSzJnL1BiY3oiLCJtYWMiOiI4ZDJkMTZiOGQzY2NiNGQyYTg1Mjk4MjdjZDgwZjY1ZTFhMGVlODE4ODI3ODcxOTljZDVmY2YxMGRiYWI5NmE1IiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6InhUcnZCV1JkUVFpMjlhSlV3Z1ZwdHc9PSIsInZhbHVlIjoieCtNWm1CTkRTSitKU0krVjk1SVlpL1lQYWs0amJxSFFPWGFNZ2w4V2NWN2Y0VXgzZTNtMXdSOFhHYmd3UHV5c1JPa1BhNlhLaDJMVHBnellwYU82dG9VL1hjd2pLTHcwTEZneU5hY1FpNmxuMENCdVM1dFlJU3lRRy9uZnMxVzAiLCJtYWMiOiIxMmY4MWI5NmNlOGI2NDExODBjMzQ0OWY2Mjg5OGUyZDZmZWRlOGQ5N2JiOTUwNDhjMmRlNTQ5ZjE4M2Q2YzU2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=MS6gQhAT5tmX8HHV; Domain=.lukesitturn.com; Path=/; Expires=Sun, 26-Oct-2025 20:20:28 GMT\n__ddg10_=1761508828; Domain=.lukesitturn.com; Path=/; Expires=Sun, 26-Oct-2025 20:20:28 GMT\n__ddg9_=91.90.42.154; Domain=.lukesitturn.com; Path=/; Expires=Sun, 26-Oct-2025 20:20:28 GMT\r\nstrict-transport-security: max-age=2628000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 24 Oct 2025 10:05:38 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 27 Apr 2025 04:35:04 GMT\r\netag: W/\"680db3f8-193\"\r\nexpires: Sun, 23 Nov 2025 10:05:38 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 208490\r\ncontent-length: 221\r\nddg-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":403,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a638d0dfa6feb7ce4b90e7c91c5b0df4","sha1":"7a0a86f47b51781f48bb9f232f05193936490027","sha256":"38b49bc67e053e96441e62f8423a9ed0e907ef768a0ffbba4370128760f814dc","sha512":"d0d5823062954b3398a974322a7f848f71ba602c2369c79ee16868904c2e66ff1a10152a221bf68d4d0f2abb167c730bacecd0855743c7c3b521523dac0edf54","ssdeep":"","tlshash":"abe06871d4aedc054640cb2ca3e7719124bd911233c03fece7b48e263e43a36512c2b8","first_seen":"2025-04-27T22:01:48.046871Z","last_seen":"2026-06-06T23:27:04.186144Z","times_seen":405,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"lukesitturn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lukesitturn.com/s/js/site.min.js?fe1eebe79ae88e4bfa6ed669174fca9c","fqdn":"lukesitturn.com","domain":"lukesitturn.com","tld":"com"},"ip":{"addr":"186.2.163.224","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lukesitturn.com/mgflc9vsk669","date":"2025-10-26T20:00:28.478Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lukesitturn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Oct 2025 15:43:45 GMT","end":"Tue, 20 Jan 2026 15:43:44 GMT"},"fingerprint":{"sha1":"17:48:98:3E:C6:84:47:C5:CA:E0:B6:60:A6:73:EA:CF:9C:92:7C:A0","sha256":"7B:DE:48:DF:DD:8C:BA:1F:4F:8C:17:44:3F:C1:F3:E2:78:EB:DF:37:C3:22:FC:A7:D2:F3:1E:04:DF:F7:77:99"}}},"request":{"raw":"GET /s/js/site.min.js?fe1eebe79ae88e4bfa6ed669174fca9c HTTP/1.1\r\nHost: lukesitturn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lukesitturn.com/mgflc9vsk669\r\nCookie: __ddg8_=EITM5TFh4CgWaRTL; __ddg10_=1761508828; __ddg9_=91.90.42.154; __ddg1_=HZkMGsQCYQ69InN2pcf2; XSRF-TOKEN=eyJpdiI6Ikg5Rk1HTFU2SWdqOUVINDl5a2RIc2c9PSIsInZhbHVlIjoiWG5SQWRYVXlXRENWODhrQ0x6NVJ1aVNsWWd3ZjRtZzZkRVdLc2dTczM3ZG03bEFiNlNjSnNINXVGTjN3UU9BdHE3VVBKMzAzemJ4eGZBTW9Wc05OMkxhZUxHWU03Zk5mUlRnbXhzdHdleHErWXc2aW5ENXdsSVhPSzJnL1BiY3oiLCJtYWMiOiI4ZDJkMTZiOGQzY2NiNGQyYTg1Mjk4MjdjZDgwZjY1ZTFhMGVlODE4ODI3ODcxOTljZDVmY2YxMGRiYWI5NmE1IiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6InhUcnZCV1JkUVFpMjlhSlV3Z1ZwdHc9PSIsInZhbHVlIjoieCtNWm1CTkRTSitKU0krVjk1SVlpL1lQYWs0amJxSFFPWGFNZ2w4V2NWN2Y0VXgzZTNtMXdSOFhHYmd3UHV5c1JPa1BhNlhLaDJMVHBnellwYU82dG9VL1hjd2pLTHcwTEZneU5hY1FpNmxuMENCdVM1dFlJU3lRRy9uZnMxVzAiLCJtYWMiOiIxMmY4MWI5NmNlOGI2NDExODBjMzQ0OWY2Mjg5OGUyZDZmZWRlOGQ5N2JiOTUwNDhjMmRlNTQ5ZjE4M2Q2YzU2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=RPjYiiSQe9EKTSuD; Domain=.lukesitturn.com; Path=/; Expires=Sun, 26-Oct-2025 20:20:28 GMT\n__ddg10_=1761508828; Domain=.lukesitturn.com; Path=/; Expires=Sun, 26-Oct-2025 20:20:28 GMT\n__ddg9_=91.90.42.154; Domain=.lukesitturn.com; Path=/; Expires=Sun, 26-Oct-2025 20:20:28 GMT\r\nstrict-transport-security: max-age=2628000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Wed, 22 Oct 2025 16:43:37 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 21:05:04 GMT\r\netag: W/\"68e03a80-1919e\"\r\nexpires: Fri, 21 Nov 2025 16:43:37 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 357411\r\ncontent-length: 23509\r\nddg-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":102814,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (52119)","md5":"f221d7962c60ad362e2fbc5e1dacc9e6","sha1":"9e2a0ee15fec83034ee0eedfdc866d2d7472ecee","sha256":"efd0ced2b4c5c6490d8ac3462669df8c5aa143db9ef81fc947dc3ffc739d4088","sha512":"e9e7241c7676af5f648d91446425219f382a6b4b7ac63a47c011d61f0ba8f69f87c16489f7f5b0aa36adc1a7e45830a73f1cec4b5b554fbe46ce29be3c022cf9","ssdeep":"1536:Y2u4R3mNZRo3GiCNIUhxBsSU1UxYs5pfEzS:FRwLzybXotE+","tlshash":"bfa31829b314193252ffa2f7749b2a057336d526ca82c055b878c56c0ef9d8536e3f2e","first_seen":"2025-10-04T08:15:13.352918Z","last_seen":"2026-06-06T23:27:04.143054Z","times_seen":293,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"lukesitturn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/figtree/v9/_Xms-HUzqDCFdgfMm4S9DQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://lukesitturn.com/mgflc9vsk669","date":"2025-10-26T20:00:29.032Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:34:07 GMT","end":"Wed, 24 Dec 2025 14:34:06 GMT"},"fingerprint":{"sha1":"CE:D7:82:8C:04:B0:E5:F9:3B:52:AC:E2:75:72:A1:31:F8:D2:42:D4","sha256":"B8:54:E9:B3:89:59:D3:D4:18:71:52:99:FF:BB:D7:4C:BF:09:4A:EE:50:59:19:40:A0:6E:17:ED:80:73:3B:22"}}},"request":{"raw":"GET /s/figtree/v9/_Xms-HUzqDCFdgfMm4S9DQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://lukesitturn.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20156\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 23 Oct 2025 17:02:47 GMT\r\nexpires: Fri, 23 Oct 2026 17:02:47 GMT\r\ncache-control: public, max-age=31536000\r\nage: 269862\r\nlast-modified: Wed, 10 Sep 2025 17:04:00 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20156,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20156, version 1.0","md5":"202cfb54d4e66d1702404ade49339ceb","sha1":"57fd1acf8d9651d9c38c0d4af7b78bc399be0652","sha256":"4ba7d3d096695818fe0686be4f1e82c6b05134e18a22260336130335027462dd","sha512":"2b323bc185114cbb7b0e2d92b7daf844d5dbe1e79f65d5b358f50bdf973ea60e8303e45ce7af23ce09b5e64149402065f0194f795e22dcd55c86ce1e05a11451","ssdeep":"384:gqwJbbuIcjx0eifRE1S0B1FbjeXpvgwFU2F5TfB3Qj0UWAB3XZ/ol:SJrK+hqvBjbyXpvgMUuVFHdK3p/Q","tlshash":"0e92e0eb83b3abc474ccb2a1349002e960e3524213b79df0c59375f0e9bd7da1a8522d","first_seen":"2025-05-14T03:12:47.210807Z","last_seen":"2026-06-12T01:34:36.947045Z","times_seen":7232,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":120,"dns":1,"connect":16,"send":0,"wait":17,"receive":5,"ssl":100},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.pncloudfl.com/pn/8d7/728/3a8/8d77283a87040eaf49ba672b6b7acf3c01956ea6.jpg","fqdn":"cdn.pncloudfl.com","domain":"pncloudfl.com","tld":"com"},"ip":{"addr":"172.66.165.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lukesitturn.com/mgflc9vsk669","date":"2025-10-26T20:00:30.061Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.pncloudfl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 11:22:47 GMT","end":"Sat, 10 Jan 2026 12:22:44 GMT"},"fingerprint":{"sha1":"5F:F3:87:DA:78:FE:FC:D5:F7:1B:E2:6F:99:A9:F5:88:06:1F:6D:0C","sha256":"9E:1C:41:AF:6B:2C:22:66:DB:77:8A:92:75:A0:FC:E8:37:90:0A:A6:EA:FB:D6:6D:72:71:80:40:DD:CE:20:36"}}},"request":{"raw":"GET /pn/8d7/728/3a8/8d77283a87040eaf49ba672b6b7acf3c01956ea6.jpg HTTP/1.1\r\nHost: cdn.pncloudfl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lukesitturn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 26 Oct 2025 20:00:30 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 4651\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncache-control: max-age=432000\r\ncf-bgj: imgq:100,h2pri\r\naccept-ranges: bytes\r\ncf-polished: origSize=5960\r\naccess-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization\r\naccess-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp\r\netag: 69a7989368f7957ac54307b7e9a559ca\r\nexpires: Tue, 28 Oct 2025 03:22:54 GMT\r\nlast-modified: Thu, 17 Apr 2025 13:13:19 GMT\r\nx-cdn-host-id: ds5951,ds5833\r\nx-openstack-request-id: tx0f0f8ad658ad45139ef5d-006800fea0\r\nx-proxy-cache: HIT\r\nx-timestamp: 1744895598.46967\r\nx-trans-id: tx0f0f8ad658ad45139ef5d-006800fea0\r\ncf-cache-status: HIT\r\nage: 59856\r\ncf-ray: 994c8a4bf9a5120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4651,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 192x192, components 3","md5":"7657cad16249b7313c8a789216fbc2ae","sha1":"b0b9d559ce187c10605c0f89cfda4ad82e70317a","sha256":"323b03fb6e9692c5e4849c80fd2f677cd7c8edf5f1dc284b5f63335c9730d447","sha512":"7dfa269d296bae2be111282dee7b85e20ddcb263910a0fd1890e4dffa8180af9aa9fb873ac4da01546831fd0d76baa177dc53418336a3c62747d01bec563c95d","ssdeep":"96:cQ0Hd1zpY2JzcM+V+TjWImNpRPrQhAPtZATy20xoCcvt:nSd2MN/cQt22bF","tlshash":"cda118620254a3b1e98e55f4ca8847c46620dbcd84b0eb8f5e6e1738ef157830e8d1f7","first_seen":"2025-05-30T14:19:29.56472Z","last_seen":"2025-12-03T17:47:58.63085Z","times_seen":171,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":21,"dns":0,"connect":1,"send":0,"wait":7,"receive":1,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.pncloudfl.com/pn/f68/143/511/f68143511a06646c89aeafb3c68bf08cc4c2c795.gif","fqdn":"cdn.pncloudfl.com","domain":"pncloudfl.com","tld":"com"},"ip":{"addr":"172.66.165.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lukesitturn.com/mgflc9vsk669","date":"2025-10-26T20:00:30.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.pncloudfl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 11:22:47 GMT","end":"Sat, 10 Jan 2026 12:22:44 GMT"},"fingerprint":{"sha1":"5F:F3:87:DA:78:FE:FC:D5:F7:1B:E2:6F:99:A9:F5:88:06:1F:6D:0C","sha256":"9E:1C:41:AF:6B:2C:22:66:DB:77:8A:92:75:A0:FC:E8:37:90:0A:A6:EA:FB:D6:6D:72:71:80:40:DD:CE:20:36"}}},"request":{"raw":"GET /pn/f68/143/511/f68143511a06646c89aeafb3c68bf08cc4c2c795.gif HTTP/1.1\r\nHost: cdn.pncloudfl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lukesitturn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 26 Oct 2025 20:00:30 GMT\r\ncontent-type: image/gif\r\ncontent-length: 367890\r\nserver: cloudflare\r\ncache-control: max-age=432000\r\ncf-bgj: imgq:100,h2pri\r\naccept-ranges: bytes\r\ncf-polished: origSize=453555\r\nvary: accept\r\naccess-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization\r\naccess-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp\r\netag: 97a843f28bd4c1ebca4768043e43bf08\r\nexpires: Tue, 28 Oct 2025 11:00:02 GMT\r\nlast-modified: Tue, 14 Oct 2025 08:34:06 GMT\r\nx-cdn-host-id: DS7288,DS5833\r\nx-openstack-request-id: txc1a3054fde974c7088a75-0068ee0c5a\r\nx-proxy-cache: HIT\r\nx-timestamp: 1760430845.74701\r\nx-trans-id: txc1a3054fde974c7088a75-0068ee0c5a\r\ncf-cache-status: HIT\r\nage: 32428\r\ncf-ray: 994c8a4bf9c9120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":367890,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 192 x 192","md5":"ece1a216d92eeeecb434b49f28d6a571","sha1":"2715d7a8f8f772290a97c9522d40383d9eb2a63e","sha256":"48d21dbfbed41a51719a2a9e799c92b55ee467bf4e09356651111b94812e8ba9","sha512":"1aaaed896c4c42a968619f18a64707d0f594be14366c2bbdcb3db0066d3dc07cc710471696a11e426793736c92711a79aed84a0075749aae7322db8c17e126b1","ssdeep":"6144:rIRnQm/y1w9QToxBdL1rdsGivdPtuOpGnDPXot/uhO/8wRW8cdpBqQ2kN7ofYGmD:ro/y1wy4l1rIpQPXot/YmRME3eGmApUP","tlshash":"ce742323b406b001e864d87d3dc6866a7375dcb32979368bd18c71b326f9867a5dd3c8","first_seen":"2025-10-25T14:00:47.156354Z","last_seen":"2025-10-31T00:55:26.883574Z","times_seen":9,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":20,"dns":1,"connect":1,"send":0,"wait":7,"receive":15,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.7.1/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lukesitturn.com/mgflc9vsk669","date":"2025-10-26T20:00:28.459Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 19:09:23 GMT","end":"Tue, 16 Dec 2025 20:08:48 GMT"},"fingerprint":{"sha1":"E5:FA:6E:21:DA:AB:92:8F:E0:CB:31:C2:87:D4:E2:CE:9F:23:BF:C1","sha256":"E8:C7:D4:A8:29:E6:45:C0:C5:E3:AD:6A:90:36:30:4A:D7:2E:7C:F7:8F:57:44:E8:3B:2D:AF:F6:80:F7:4B:46"}}},"request":{"raw":"GET /ajax/libs/jquery/3.7.1/jquery.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://lukesitturn.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 26 Oct 2025 20:00:28 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 27446\r\ncf-ray: 994c8a41eed35688-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"64ed75bb-6b36\"\r\nlast-modified: Tue, 29 Aug 2023 04:36:11 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 227273\r\nexpires: Fri, 16 Oct 2026 20:00:28 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=von0l9089WazZ7y%2BotAGPr29Dc6BLd%2FzHBVD0BkbqbgpjyUfT%2F58ZDKzqjF0x2oCtfr6s6IG%2BTfnbsw%2FkylGOZIGBtoSEto%2BhjgEI6nFafeItt8%2FnIMfelNLFZFF7%2BQwa%2FC4syr4\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87533,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-06-12T01:49:22.010511Z","times_seen":168097,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":12,"dns":1,"connect":1,"send":0,"wait":16,"receive":2,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lukesitturn.com/android-icon-192x192.png","fqdn":"lukesitturn.com","domain":"lukesitturn.com","tld":"com"},"ip":{"addr":"186.2.163.224","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lukesitturn.com/mgflc9vsk669","date":"2025-10-26T20:00:29.365Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lukesitturn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Oct 2025 15:43:45 GMT","end":"Tue, 20 Jan 2026 15:43:44 GMT"},"fingerprint":{"sha1":"17:48:98:3E:C6:84:47:C5:CA:E0:B6:60:A6:73:EA:CF:9C:92:7C:A0","sha256":"7B:DE:48:DF:DD:8C:BA:1F:4F:8C:17:44:3F:C1:F3:E2:78:EB:DF:37:C3:22:FC:A7:D2:F3:1E:04:DF:F7:77:99"}}},"request":{"raw":"GET /android-icon-192x192.png HTTP/1.1\r\nHost: lukesitturn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lukesitturn.com/mgflc9vsk669\r\nCookie: __ddg8_=LGr9dZRMImE7EMYL; __ddg10_=1761508829; __ddg9_=91.90.42.154; __ddg1_=HZkMGsQCYQ69InN2pcf2; XSRF-TOKEN=eyJpdiI6Ikg5Rk1HTFU2SWdqOUVINDl5a2RIc2c9PSIsInZhbHVlIjoiWG5SQWRYVXlXRENWODhrQ0x6NVJ1aVNsWWd3ZjRtZzZkRVdLc2dTczM3ZG03bEFiNlNjSnNINXVGTjN3UU9BdHE3VVBKMzAzemJ4eGZBTW9Wc05OMkxhZUxHWU03Zk5mUlRnbXhzdHdleHErWXc2aW5ENXdsSVhPSzJnL1BiY3oiLCJtYWMiOiI4ZDJkMTZiOGQzY2NiNGQyYTg1Mjk4MjdjZDgwZjY1ZTFhMGVlODE4ODI3ODcxOTljZDVmY2YxMGRiYWI5NmE1IiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6InhUcnZCV1JkUVFpMjlhSlV3Z1ZwdHc9PSIsInZhbHVlIjoieCtNWm1CTkRTSitKU0krVjk1SVlpL1lQYWs0amJxSFFPWGFNZ2w4V2NWN2Y0VXgzZTNtMXdSOFhHYmd3UHV5c1JPa1BhNlhLaDJMVHBnellwYU82dG9VL1hjd2pLTHcwTEZneU5hY1FpNmxuMENCdVM1dFlJU3lRRy9uZnMxVzAiLCJtYWMiOiIxMmY4MWI5NmNlOGI2NDExODBjMzQ0OWY2Mjg5OGUyZDZmZWRlOGQ5N2JiOTUwNDhjMmRlNTQ5ZjE4M2Q2YzU2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=8jhBdYSr9wBfSKjw; Domain=.lukesitturn.com; Path=/; Expires=Sun, 26-Oct-2025 20:20:29 GMT\n__ddg10_=1761508829; Domain=.lukesitturn.com; Path=/; Expires=Sun, 26-Oct-2025 20:20:29 GMT\n__ddg9_=91.90.42.154; Domain=.lukesitturn.com; Path=/; Expires=Sun, 26-Oct-2025 20:20:29 GMT\r\nstrict-transport-security: max-age=2628000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Wed, 22 Oct 2025 16:43:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 7068\r\nlast-modified: Mon, 20 May 2024 13:32:00 GMT\r\netag: \"664b50d0-1b9c\"\r\nexpires: Fri, 21 Nov 2025 16:43:37 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 357412\r\nddg-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7068,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"6e09fa5e43f9f169c8b65bdba9683b46","sha1":"e986e9353a404b28a522b85dc0b7afb480b6cb27","sha256":"7940cbb7ef222596bef1a1d1db04e8a1b745dfdeb769ff9a46f4e3717396af0b","sha512":"877c8c593b415b7ee70c698c429bde02a0448c94a1500f202ea9f6c0c54ac4fa36c3bfc0d449d0dcd1b00802e494464ca38d45b98ce21c9829fec1d90806af8f","ssdeep":"192:0l+appIc5YmxlmChBC6QOANGVZQcyefhMD0Jdg5FadQzf:0lFpjFAeGGVRyS5S0K","tlshash":"ffe1aed7100650cc4e7f96dfe5af84c0672702ae4d6a1ab3047c23359b291ea9e19628","first_seen":"2023-05-08T15:55:48Z","last_seen":"2026-06-06T23:27:04.156907Z","times_seen":987,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"lukesitturn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/bootstrap/5.3.3/js/bootstrap.bundle.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lukesitturn.com/mgflc9vsk669","date":"2025-10-26T20:00:28.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 19:09:23 GMT","end":"Tue, 16 Dec 2025 20:08:48 GMT"},"fingerprint":{"sha1":"E5:FA:6E:21:DA:AB:92:8F:E0:CB:31:C2:87:D4:E2:CE:9F:23:BF:C1","sha256":"E8:C7:D4:A8:29:E6:45:C0:C5:E3:AD:6A:90:36:30:4A:D7:2E:7C:F7:8F:57:44:E8:3B:2D:AF:F6:80:F7:4B:46"}}},"request":{"raw":"GET /ajax/libs/bootstrap/5.3.3/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://lukesitturn.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 26 Oct 2025 20:00:28 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 21170\r\ncf-ray: 994c8a41fee85688-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"65d4c5f6-52b2\"\r\nlast-modified: Tue, 20 Feb 2024 15:32:06 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 239441\r\nexpires: Fri, 16 Oct 2026 20:00:28 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=BGV7Bzaa9jdD017kdtexpePHaaTi7BEw3PmQ5edFonpdTjSxJlSvQMkTkJSLBCOPc3JBDKJ2%2BxPbgdDAN4YDk3OF4GUf76cd%2FChaw5vmZ6PTscZiW6vSsAYDdLWXcCKWowFGm7Q3\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80721,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"2e477967e482f32e65d4ea9b2fd8e106","sha1":"ddc6e9ead6d16ae9237399ce41e8c1620cc59c36","sha256":"0833b2e9c3a26c258476c46266e6877fc75218625162e0460be9a3a098a61c6c","sha512":"ecf8bfa2d7656db091f8b9d6f85ecfc057120c93ae5090773b1b441db838bd232fcef26375ee0fa35bf8051f4675cf5a5cd50d155518f922b9d70593f161741a","ssdeep":"1536:WmwIiEEO+TBR2t4J9RirWDKsVA5y7fy3YJtC/r/45wZbfbXZTb0WU078:HwORx3YCD45wZbDZTb0g8","tlshash":"ce73c5593244b4730ade85b68037430bf2265998b24b812cb57cadde2a7dcc67277f78","first_seen":"2024-02-25T11:27:02Z","last_seen":"2026-06-12T00:52:04.116856Z","times_seen":27184,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":8,"dns":1,"connect":1,"send":0,"wait":18,"receive":1,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lukesitturn.com/favicon-16x16.png","fqdn":"lukesitturn.com","domain":"lukesitturn.com","tld":"com"},"ip":{"addr":"186.2.163.224","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lukesitturn.com/mgflc9vsk669","date":"2025-10-26T20:00:29.367Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lukesitturn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Oct 2025 15:43:45 GMT","end":"Tue, 20 Jan 2026 15:43:44 GMT"},"fingerprint":{"sha1":"17:48:98:3E:C6:84:47:C5:CA:E0:B6:60:A6:73:EA:CF:9C:92:7C:A0","sha256":"7B:DE:48:DF:DD:8C:BA:1F:4F:8C:17:44:3F:C1:F3:E2:78:EB:DF:37:C3:22:FC:A7:D2:F3:1E:04:DF:F7:77:99"}}},"request":{"raw":"GET /favicon-16x16.png HTTP/1.1\r\nHost: lukesitturn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lukesitturn.com/mgflc9vsk669\r\nCookie: __ddg8_=LGr9dZRMImE7EMYL; __ddg10_=1761508829; __ddg9_=91.90.42.154; __ddg1_=HZkMGsQCYQ69InN2pcf2; XSRF-TOKEN=eyJpdiI6Ikg5Rk1HTFU2SWdqOUVINDl5a2RIc2c9PSIsInZhbHVlIjoiWG5SQWRYVXlXRENWODhrQ0x6NVJ1aVNsWWd3ZjRtZzZkRVdLc2dTczM3ZG03bEFiNlNjSnNINXVGTjN3UU9BdHE3VVBKMzAzemJ4eGZBTW9Wc05OMkxhZUxHWU03Zk5mUlRnbXhzdHdleHErWXc2aW5ENXdsSVhPSzJnL1BiY3oiLCJtYWMiOiI4ZDJkMTZiOGQzY2NiNGQyYTg1Mjk4MjdjZDgwZjY1ZTFhMGVlODE4ODI3ODcxOTljZDVmY2YxMGRiYWI5NmE1IiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6InhUcnZCV1JkUVFpMjlhSlV3Z1ZwdHc9PSIsInZhbHVlIjoieCtNWm1CTkRTSitKU0krVjk1SVlpL1lQYWs0amJxSFFPWGFNZ2w4V2NWN2Y0VXgzZTNtMXdSOFhHYmd3UHV5c1JPa1BhNlhLaDJMVHBnellwYU82dG9VL1hjd2pLTHcwTEZneU5hY1FpNmxuMENCdVM1dFlJU3lRRy9uZnMxVzAiLCJtYWMiOiIxMmY4MWI5NmNlOGI2NDExODBjMzQ0OWY2Mjg5OGUyZDZmZWRlOGQ5N2JiOTUwNDhjMmRlNTQ5ZjE4M2Q2YzU2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=M0MxwQNseRXFPgLN; Domain=.lukesitturn.com; Path=/; Expires=Sun, 26-Oct-2025 20:20:29 GMT\n__ddg10_=1761508829; Domain=.lukesitturn.com; Path=/; Expires=Sun, 26-Oct-2025 20:20:29 GMT\n__ddg9_=91.90.42.154; Domain=.lukesitturn.com; Path=/; Expires=Sun, 26-Oct-2025 20:20:29 GMT\r\nstrict-transport-security: max-age=2628000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Wed, 22 Oct 2025 16:43:40 GMT\r\ncontent-type: image/png\r\ncontent-length: 533\r\nlast-modified: Mon, 14 Aug 2023 01:22:26 GMT\r\netag: \"64d981d2-215\"\r\nexpires: Fri, 21 Nov 2025 16:43:40 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 357409\r\nddg-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":533,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"4a1c219d978909f413ca1b9a39f7523d","sha1":"08859f796b01690ee81a13e4bcc0976f16c473ca","sha256":"dc91f3be29e28fa5aa027f4c3165a5df794424e66c1627b90a204482b470f0be","sha512":"898c1447a0dd59b40541b9720d28b191d01ce9e4e1d1c5e3ccae3e879a2249183fc74e752760f3ae0c16639c9dad6e8b5d00c627bbb4c5965c99aff1ec0aeada","ssdeep":"","tlshash":"fef020bc3323583cddcd9db641f51094a913d88c86c42d3cbec672ec44356a8c9e4036","first_seen":"2023-05-08T15:55:48Z","last_seen":"2026-06-06T23:27:04.187602Z","times_seen":1018,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"lukesitturn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gigglegrowlworrisome.com/check.html","fqdn":"gigglegrowlworrisome.com","domain":"gigglegrowlworrisome.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://lukesitturn.com/mgflc9vsk669","date":"2025-10-26T20:00:29.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gigglegrowlworrisome.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 14:25:52 GMT","end":"Wed, 21 Jan 2026 14:25:51 GMT"},"fingerprint":{"sha1":"5D:9F:41:7B:78:25:D4:B3:13:E8:25:E2:7F:55:2F:21:57:20:47:C4","sha256":"72:3D:F0:F6:91:88:C8:C2:48:4F:00:5B:E7:66:01:5B:6F:7A:B2:31:77:49:26:AB:D7:16:D6:57:AF:7C:B0:1B"}}},"request":{"raw":"GET /check.html HTTP/1.1\r\nHost: gigglegrowlworrisome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lukesitturn.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Oct 2025 20:00:29 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlast-modified: Thu, 23 Oct 2025 09:18:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68f9f2c9-39e\"\r\nx-js-ab: current\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":926,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"088dba8e97eede53134c93219f7ebbae","sha1":"adb707654d1fe0af7d0d7a9f55660d22bd3625e4","sha256":"6da0120b4c7bc45b63fcbb87595c3c1ea2cdca482b0c48d4d2ab434f9e897aff","sha512":"23a1f87731e8aee4658993cd1ce35ec179fea80b89bf52aca7634488f1bdfcf88b9cabca4859481357a9fee06cbb49df64bbe0878b1dae0e5df4fa34003c6d80","ssdeep":"","tlshash":"6211d04934e1684c1127a6301597a2183c32a40315cbd949fb9cd7301f815a7dc596df","first_seen":"2024-11-22T16:59:41.974716Z","last_seen":"2026-03-04T10:11:28.020186Z","times_seen":13721,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lukesitturn.com/build/assets/27-SABxh.js","fqdn":"lukesitturn.com","domain":"lukesitturn.com","tld":"com"},"ip":{"addr":"186.2.163.224","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lukesitturn.com/mgflc9vsk669","date":"2025-10-26T20:00:28.466Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lukesitturn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Oct 2025 15:43:45 GMT","end":"Tue, 20 Jan 2026 15:43:44 GMT"},"fingerprint":{"sha1":"17:48:98:3E:C6:84:47:C5:CA:E0:B6:60:A6:73:EA:CF:9C:92:7C:A0","sha256":"7B:DE:48:DF:DD:8C:BA:1F:4F:8C:17:44:3F:C1:F3:E2:78:EB:DF:37:C3:22:FC:A7:D2:F3:1E:04:DF:F7:77:99"}}},"request":{"raw":"GET /build/assets/27-SABxh.js HTTP/1.1\r\nHost: lukesitturn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lukesitturn.com/mgflc9vsk669\r\nCookie: __ddg8_=EITM5TFh4CgWaRTL; __ddg10_=1761508828; __ddg9_=91.90.42.154; __ddg1_=HZkMGsQCYQ69InN2pcf2; XSRF-TOKEN=eyJpdiI6Ikg5Rk1HTFU2SWdqOUVINDl5a2RIc2c9PSIsInZhbHVlIjoiWG5SQWRYVXlXRENWODhrQ0x6NVJ1aVNsWWd3ZjRtZzZkRVdLc2dTczM3ZG03bEFiNlNjSnNINXVGTjN3UU9BdHE3VVBKMzAzemJ4eGZBTW9Wc05OMkxhZUxHWU03Zk5mUlRnbXhzdHdleHErWXc2aW5ENXdsSVhPSzJnL1BiY3oiLCJtYWMiOiI4ZDJkMTZiOGQzY2NiNGQyYTg1Mjk4MjdjZDgwZjY1ZTFhMGVlODE4ODI3ODcxOTljZDVmY2YxMGRiYWI5NmE1IiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6InhUcnZCV1JkUVFpMjlhSlV3Z1ZwdHc9PSIsInZhbHVlIjoieCtNWm1CTkRTSitKU0krVjk1SVlpL1lQYWs0amJxSFFPWGFNZ2w4V2NWN2Y0VXgzZTNtMXdSOFhHYmd3UHV5c1JPa1BhNlhLaDJMVHBnellwYU82dG9VL1hjd2pLTHcwTEZneU5hY1FpNmxuMENCdVM1dFlJU3lRRy9uZnMxVzAiLCJtYWMiOiIxMmY4MWI5NmNlOGI2NDExODBjMzQ0OWY2Mjg5OGUyZDZmZWRlOGQ5N2JiOTUwNDhjMmRlNTQ5ZjE4M2Q2YzU2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=tIdCYok5QVXSETfi; Domain=.lukesitturn.com; Path=/; Expires=Sun, 26-Oct-2025 20:20:28 GMT\n__ddg10_=1761508828; Domain=.lukesitturn.com; Path=/; Expires=Sun, 26-Oct-2025 20:20:28 GMT\n__ddg9_=91.90.42.154; Domain=.lukesitturn.com; Path=/; Expires=Sun, 26-Oct-2025 20:20:28 GMT\r\nstrict-transport-security: max-age=2628000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Wed, 22 Oct 2025 16:43:37 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 08 Jul 2025 18:22:04 GMT\r\netag: W/\"686d61cc-6dc\"\r\nexpires: Fri, 21 Nov 2025 16:43:37 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 357411\r\ncontent-length: 743\r\nddg-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1756,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1755)","md5":"0f8d196002a87042ea0937428f428732","sha1":"a51a5552c6d4ecd7cef5eaf692805ed2c63b80bb","sha256":"3b04c518e637741a9132153c76798ce7988d6b3d7062df0e34b639f8016815dd","sha512":"4579e32b820b00129bc56ed5f6b565f9a202bb129167fdbf3ea31e497954e0127a43d49a011b11355fdcf3326068b59384598c5ed9b3bf2965e9399d639ecece","ssdeep":"","tlshash":"9f31b85570f96631c1593859e37bb362b2e00d5b7d253c8160ad0b726e39cc2dd7af88","first_seen":"2025-07-09T03:26:33.454888Z","last_seen":"2026-06-06T23:27:04.153044Z","times_seen":316,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"lukesitturn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lukesitturn.com/js/loader.bc4a6543429.js","fqdn":"lukesitturn.com","domain":"lukesitturn.com","tld":"com"},"ip":{"addr":"186.2.163.224","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lukesitturn.com/mgflc9vsk669","date":"2025-10-26T20:00:28.470Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lukesitturn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Oct 2025 15:43:45 GMT","end":"Tue, 20 Jan 2026 15:43:44 GMT"},"fingerprint":{"sha1":"17:48:98:3E:C6:84:47:C5:CA:E0:B6:60:A6:73:EA:CF:9C:92:7C:A0","sha256":"7B:DE:48:DF:DD:8C:BA:1F:4F:8C:17:44:3F:C1:F3:E2:78:EB:DF:37:C3:22:FC:A7:D2:F3:1E:04:DF:F7:77:99"}}},"request":{"raw":"GET /js/loader.bc4a6543429.js HTTP/1.1\r\nHost: lukesitturn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lukesitturn.com/mgflc9vsk669\r\nCookie: __ddg8_=EITM5TFh4CgWaRTL; __ddg10_=1761508828; __ddg9_=91.90.42.154; __ddg1_=HZkMGsQCYQ69InN2pcf2; XSRF-TOKEN=eyJpdiI6Ikg5Rk1HTFU2SWdqOUVINDl5a2RIc2c9PSIsInZhbHVlIjoiWG5SQWRYVXlXRENWODhrQ0x6NVJ1aVNsWWd3ZjRtZzZkRVdLc2dTczM3ZG03bEFiNlNjSnNINXVGTjN3UU9BdHE3VVBKMzAzemJ4eGZBTW9Wc05OMkxhZUxHWU03Zk5mUlRnbXhzdHdleHErWXc2aW5ENXdsSVhPSzJnL1BiY3oiLCJtYWMiOiI4ZDJkMTZiOGQzY2NiNGQyYTg1Mjk4MjdjZDgwZjY1ZTFhMGVlODE4ODI3ODcxOTljZDVmY2YxMGRiYWI5NmE1IiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6InhUcnZCV1JkUVFpMjlhSlV3Z1ZwdHc9PSIsInZhbHVlIjoieCtNWm1CTkRTSitKU0krVjk1SVlpL1lQYWs0amJxSFFPWGFNZ2w4V2NWN2Y0VXgzZTNtMXdSOFhHYmd3UHV5c1JPa1BhNlhLaDJMVHBnellwYU82dG9VL1hjd2pLTHcwTEZneU5hY1FpNmxuMENCdVM1dFlJU3lRRy9uZnMxVzAiLCJtYWMiOiIxMmY4MWI5NmNlOGI2NDExODBjMzQ0OWY2Mjg5OGUyZDZmZWRlOGQ5N2JiOTUwNDhjMmRlNTQ5ZjE4M2Q2YzU2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=icckSqoDE6ZZAzMA; Domain=.lukesitturn.com; Path=/; Expires=Sun, 26-Oct-2025 20:20:28 GMT\n__ddg10_=1761508828; Domain=.lukesitturn.com; Path=/; Expires=Sun, 26-Oct-2025 20:20:28 GMT\n__ddg9_=91.90.42.154; Domain=.lukesitturn.com; Path=/; Expires=Sun, 26-Oct-2025 20:20:28 GMT\r\nstrict-transport-security: max-age=2628000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Wed, 22 Oct 2025 16:43:37 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 08 Jul 2025 18:22:04 GMT\r\netag: W/\"686d61cc-14500\"\r\nexpires: Fri, 21 Nov 2025 16:43:37 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 357411\r\ncontent-length: 26491\r\nddg-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":83200,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"f43b942340f3e45d3ae53d0712b13256","sha1":"e11a4d4c3d7fff07ab752e7cb73342aa156dd66f","sha256":"32113f06d823097d0181fdc56d12e40e3ab7ca9d07609ce3f41c6d2c6b1846e2","sha512":"63a713372921c75df85848b0da2c35c14d12a8348b10263fa035090110417a141d1497edcb989a1f777d9addcc7a6843ce2d270f5e1be873f76cf1ccf2b8320a","ssdeep":"1536:+Im9L7Faw8G/1K+jpw8y5f0HMNz2szEe/XmC2:+Im9fww9Hw8y5f0HWEe/u","tlshash":"2a83c51c26d0b9590b8b9f36b72f28dcf5570e2f6d84c84bc605bc602579a1bede2532","first_seen":"2025-07-09T03:26:33.467529Z","last_seen":"2026-06-06T23:27:04.148616Z","times_seen":316,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"lukesitturn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imasdk.googleapis.com/js/sdkloader/ima3.js","fqdn":"imasdk.googleapis.com","domain":"imasdk.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lukesitturn.com/mgflc9vsk669","date":"2025-10-26T20:00:28.679Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:34:12 GMT","end":"Wed, 24 Dec 2025 14:34:11 GMT"},"fingerprint":{"sha1":"A8:1F:72:36:24:F2:F6:E0:7B:67:5F:39:3B:77:D6:8D:FC:AA:91:DF","sha256":"C0:8F:C7:95:96:3C:18:D4:60:5F:92:EC:FE:5D:AB:58:62:6D:05:D5:A1:3F:B1:EC:B0:88:5F:E3:9E:21:52:BF"}}},"request":{"raw":"GET /js/sdkloader/ima3.js HTTP/1.1\r\nHost: imasdk.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lukesitturn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\ndate: Sun, 26 Oct 2025 20:00:28 GMT\r\nexpires: Sun, 26 Oct 2025 20:00:28 GMT\r\ncache-control: private, max-age=900, stale-while-revalidate=3600\r\ncontent-type: text/javascript; charset=UTF-8\r\netag: 109053292326173736\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\ncontent-disposition: attachment; filename=\"f.txt\"\r\ncontent-encoding: br\r\nserver: cafe\r\ncontent-length: 147803\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":468395,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2836)","md5":"11acabf89fdd7b55d8aebe9d281ffe7b","sha1":"b975c2168c8152ab1fcd284c34b67a00cb1da936","sha256":"68c2c90961d0dd0862ca8ff5376b9c1665c6b4bfe3ffccc0c7891b51f7badc25","sha512":"3d5ad434c3cf0ebd3f7c299e824e46428545f600fe4a3ebb5a9c01d6347a428db02373cd43f8be0c38d0602ad099f3d28efa7a24c49b9c560a331f4f418f0a2a","ssdeep":"6144:AkFdmwZuw58NInNlUhThJHbKEI66b+1+tAlZqHwT+/AEb6TpPH9h:9hihThJHbK5t+1XlZ4fb8pPH9h","tlshash":"02a4fbcdb6a674629263f4f5403f010fb23bb866f44888acb249d9e16e749095277f7c","first_seen":"2025-10-24T14:29:49.431492Z","last_seen":"2025-10-28T10:03:12.825816Z","times_seen":28,"resource_available":true,"data":null}},"time_used":227,"timings":{"blocked":52,"dns":22,"connect":15,"send":0,"wait":50,"receive":47,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lukesitturn.com/jwplayer/8.38.2/jwplayer.core.controls.js","fqdn":"lukesitturn.com","domain":"lukesitturn.com","tld":"com"},"ip":{"addr":"186.2.163.224","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lukesitturn.com/mgflc9vsk669","date":"2025-10-26T20:00:29.224Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lukesitturn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Oct 2025 15:43:45 GMT","end":"Tue, 20 Jan 2026 15:43:44 GMT"},"fingerprint":{"sha1":"17:48:98:3E:C6:84:47:C5:CA:E0:B6:60:A6:73:EA:CF:9C:92:7C:A0","sha256":"7B:DE:48:DF:DD:8C:BA:1F:4F:8C:17:44:3F:C1:F3:E2:78:EB:DF:37:C3:22:FC:A7:D2:F3:1E:04:DF:F7:77:99"}}},"request":{"raw":"GET /jwplayer/8.38.2/jwplayer.core.controls.js HTTP/1.1\r\nHost: lukesitturn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lukesitturn.com/mgflc9vsk669\r\nCookie: __ddg8_=LGr9dZRMImE7EMYL; __ddg10_=1761508829; __ddg9_=91.90.42.154; __ddg1_=HZkMGsQCYQ69InN2pcf2; XSRF-TOKEN=eyJpdiI6Ikg5Rk1HTFU2SWdqOUVINDl5a2RIc2c9PSIsInZhbHVlIjoiWG5SQWRYVXlXRENWODhrQ0x6NVJ1aVNsWWd3ZjRtZzZkRVdLc2dTczM3ZG03bEFiNlNjSnNINXVGTjN3UU9BdHE3VVBKMzAzemJ4eGZBTW9Wc05OMkxhZUxHWU03Zk5mUlRnbXhzdHdleHErWXc2aW5ENXdsSVhPSzJnL1BiY3oiLCJtYWMiOiI4ZDJkMTZiOGQzY2NiNGQyYTg1Mjk4MjdjZDgwZjY1ZTFhMGVlODE4ODI3ODcxOTljZDVmY2YxMGRiYWI5NmE1IiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6InhUcnZCV1JkUVFpMjlhSlV3Z1ZwdHc9PSIsInZhbHVlIjoieCtNWm1CTkRTSitKU0krVjk1SVlpL1lQYWs0amJxSFFPWGFNZ2w4V2NWN2Y0VXgzZTNtMXdSOFhHYmd3UHV5c1JPa1BhNlhLaDJMVHBnellwYU82dG9VL1hjd2pLTHcwTEZneU5hY1FpNmxuMENCdVM1dFlJU3lRRy9uZnMxVzAiLCJtYWMiOiIxMmY4MWI5NmNlOGI2NDExODBjMzQ0OWY2Mjg5OGUyZDZmZWRlOGQ5N2JiOTUwNDhjMmRlNTQ5ZjE4M2Q2YzU2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=2sCrXOfV5Wz4Hk7B; Domain=.lukesitturn.com; Path=/; Expires=Sun, 26-Oct-2025 20:20:29 GMT\n__ddg10_=1761508829; Domain=.lukesitturn.com; Path=/; Expires=Sun, 26-Oct-2025 20:20:29 GMT\n__ddg9_=91.90.42.154; Domain=.lukesitturn.com; Path=/; Expires=Sun, 26-Oct-2025 20:20:29 GMT\r\nstrict-transport-security: max-age=2628000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Wed, 22 Oct 2025 16:43:37 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 08 Jul 2025 18:22:04 GMT\r\netag: W/\"686d61cc-53d0f\"\r\nexpires: Fri, 21 Nov 2025 16:43:37 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 357412\r\ncontent-length: 87236\r\nddg-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":343311,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"0a349b8e256b710c33f59804e11824af","sha1":"4124b412899128cb8a2521e4f5c2ac88c2c143b1","sha256":"527933d04090c542ae6bff57a0dc240d927908d890e37b578effa55a310932ce","sha512":"8b8efd834ba24cfe9b0f96247bcbba7f2fc1c939a13ebf2cbb8c1e06bd890e5e07f29b82c3303f5498a2f998642ab7d798ab3eff4a975f9eee47175a5358136d","ssdeep":"3072:VM7nFu+slX/+8CtPIVcSJh0EcYSrJ4MOkVGvSwqzrpxMChYFwSC3G:VMxRU/+TAcSJh0lO0GvSVpGJFwSC3G","tlshash":"a07419322142523596e682da76514604b33a8085f506cfacff7ceddd4c6e98b31fabb4","first_seen":"2025-07-09T03:26:33.46094Z","last_seen":"2025-12-13T13:26:16.486694Z","times_seen":141,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"lukesitturn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lukesitturn.com/jwplayer/8.38.2/provider.hlsjs.js","fqdn":"lukesitturn.com","domain":"lukesitturn.com","tld":"com"},"ip":{"addr":"186.2.163.224","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lukesitturn.com/mgflc9vsk669","date":"2025-10-26T20:00:29.228Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lukesitturn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Oct 2025 15:43:45 GMT","end":"Tue, 20 Jan 2026 15:43:44 GMT"},"fingerprint":{"sha1":"17:48:98:3E:C6:84:47:C5:CA:E0:B6:60:A6:73:EA:CF:9C:92:7C:A0","sha256":"7B:DE:48:DF:DD:8C:BA:1F:4F:8C:17:44:3F:C1:F3:E2:78:EB:DF:37:C3:22:FC:A7:D2:F3:1E:04:DF:F7:77:99"}}},"request":{"raw":"GET /jwplayer/8.38.2/provider.hlsjs.js HTTP/1.1\r\nHost: lukesitturn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lukesitturn.com/mgflc9vsk669\r\nCookie: __ddg8_=LGr9dZRMImE7EMYL; __ddg10_=1761508829; __ddg9_=91.90.42.154; __ddg1_=HZkMGsQCYQ69InN2pcf2; XSRF-TOKEN=eyJpdiI6Ikg5Rk1HTFU2SWdqOUVINDl5a2RIc2c9PSIsInZhbHVlIjoiWG5SQWRYVXlXRENWODhrQ0x6NVJ1aVNsWWd3ZjRtZzZkRVdLc2dTczM3ZG03bEFiNlNjSnNINXVGTjN3UU9BdHE3VVBKMzAzemJ4eGZBTW9Wc05OMkxhZUxHWU03Zk5mUlRnbXhzdHdleHErWXc2aW5ENXdsSVhPSzJnL1BiY3oiLCJtYWMiOiI4ZDJkMTZiOGQzY2NiNGQyYTg1Mjk4MjdjZDgwZjY1ZTFhMGVlODE4ODI3ODcxOTljZDVmY2YxMGRiYWI5NmE1IiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6InhUcnZCV1JkUVFpMjlhSlV3Z1ZwdHc9PSIsInZhbHVlIjoieCtNWm1CTkRTSitKU0krVjk1SVlpL1lQYWs0amJxSFFPWGFNZ2w4V2NWN2Y0VXgzZTNtMXdSOFhHYmd3UHV5c1JPa1BhNlhLaDJMVHBnellwYU82dG9VL1hjd2pLTHcwTEZneU5hY1FpNmxuMENCdVM1dFlJU3lRRy9uZnMxVzAiLCJtYWMiOiIxMmY4MWI5NmNlOGI2NDExODBjMzQ0OWY2Mjg5OGUyZDZmZWRlOGQ5N2JiOTUwNDhjMmRlNTQ5ZjE4M2Q2YzU2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=GepbejLqTXs1NVhi; Domain=.lukesitturn.com; Path=/; Expires=Sun, 26-Oct-2025 20:20:29 GMT\n__ddg10_=1761508829; Domain=.lukesitturn.com; Path=/; Expires=Sun, 26-Oct-2025 20:20:29 GMT\n__ddg9_=91.90.42.154; Domain=.lukesitturn.com; Path=/; Expires=Sun, 26-Oct-2025 20:20:29 GMT\r\nstrict-transport-security: max-age=2628000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Wed, 22 Oct 2025 16:43:37 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 08 Jul 2025 18:22:04 GMT\r\netag: W/\"686d61cc-8c596\"\r\nexpires: Fri, 21 Nov 2025 16:43:37 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 357412\r\ncontent-length: 161921\r\nddg-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":574870,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"28ad7c8f97ec3efd3fc7355f4b7ab863","sha1":"0cc23dd36c89c6c9d47da8957c638583e8a843da","sha256":"061bc2c8535bfb740a2c1a5dab6e4c91c5388b84609282356b6d67cb0d85be73","sha512":"221c0c31d6cb59acb129ca485960e2a56051d668b76926e2cbe1b1241c46c4f0e7b192d571adea369a0d04916f94a162a12806aff5089f954306a31c54263ccf","ssdeep":"6144:caK/sZg+NY3UbNe6rXTQoalFwc3JWPCaEqeeuFBWqWDJkw0dHhbBI7NEpg8kF4e9:zbNPDCFw2BWqWwHpt7Y","tlshash":"21c42ade3795a01683c2b1a5903f5617633a7d0a280cc16cfa2be9d72d79949b03bf74","first_seen":"2025-07-09T03:26:33.452721Z","last_seen":"2025-12-13T13:26:16.431753Z","times_seen":141,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"lukesitturn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/figtree/v9/_Xms-HUzqDCFdgfMm4S9DQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://lukesitturn.com/mgflc9vsk669","date":"2025-10-26T20:00:29.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:34:07 GMT","end":"Wed, 24 Dec 2025 14:34:06 GMT"},"fingerprint":{"sha1":"CE:D7:82:8C:04:B0:E5:F9:3B:52:AC:E2:75:72:A1:31:F8:D2:42:D4","sha256":"B8:54:E9:B3:89:59:D3:D4:18:71:52:99:FF:BB:D7:4C:BF:09:4A:EE:50:59:19:40:A0:6E:17:ED:80:73:3B:22"}}},"request":{"raw":"GET /s/figtree/v9/_Xms-HUzqDCFdgfMm4S9DQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://lukesitturn.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20156\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 23 Oct 2025 17:02:47 GMT\r\nexpires: Fri, 23 Oct 2026 17:02:47 GMT\r\ncache-control: public, max-age=31536000\r\nage: 269862\r\nlast-modified: Wed, 10 Sep 2025 17:04:00 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20156,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20156, version 1.0","md5":"202cfb54d4e66d1702404ade49339ceb","sha1":"57fd1acf8d9651d9c38c0d4af7b78bc399be0652","sha256":"4ba7d3d096695818fe0686be4f1e82c6b05134e18a22260336130335027462dd","sha512":"2b323bc185114cbb7b0e2d92b7daf844d5dbe1e79f65d5b358f50bdf973ea60e8303e45ce7af23ce09b5e64149402065f0194f795e22dcd55c86ce1e05a11451","ssdeep":"384:gqwJbbuIcjx0eifRE1S0B1FbjeXpvgwFU2F5TfB3Qj0UWAB3XZ/ol:SJrK+hqvBjbyXpvgMUuVFHdK3p/Q","tlshash":"0e92e0eb83b3abc474ccb2a1349002e960e3524213b79df0c59375f0e9bd7da1a8522d","first_seen":"2025-05-14T03:12:47.210807Z","last_seen":"2026-06-12T01:34:36.947045Z","times_seen":7232,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lukesitturn.com/s/css/site.min.css?cb42e55bbdab3f11540fa3b620a6e66e","fqdn":"lukesitturn.com","domain":"lukesitturn.com","tld":"com"},"ip":{"addr":"186.2.163.224","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lukesitturn.com/mgflc9vsk669","date":"2025-10-26T20:00:28.454Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lukesitturn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Oct 2025 15:43:45 GMT","end":"Tue, 20 Jan 2026 15:43:44 GMT"},"fingerprint":{"sha1":"17:48:98:3E:C6:84:47:C5:CA:E0:B6:60:A6:73:EA:CF:9C:92:7C:A0","sha256":"7B:DE:48:DF:DD:8C:BA:1F:4F:8C:17:44:3F:C1:F3:E2:78:EB:DF:37:C3:22:FC:A7:D2:F3:1E:04:DF:F7:77:99"}}},"request":{"raw":"GET /s/css/site.min.css?cb42e55bbdab3f11540fa3b620a6e66e HTTP/1.1\r\nHost: lukesitturn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lukesitturn.com/mgflc9vsk669\r\nCookie: __ddg8_=EITM5TFh4CgWaRTL; __ddg10_=1761508828; __ddg9_=91.90.42.154; __ddg1_=HZkMGsQCYQ69InN2pcf2; XSRF-TOKEN=eyJpdiI6Ikg5Rk1HTFU2SWdqOUVINDl5a2RIc2c9PSIsInZhbHVlIjoiWG5SQWRYVXlXRENWODhrQ0x6NVJ1aVNsWWd3ZjRtZzZkRVdLc2dTczM3ZG03bEFiNlNjSnNINXVGTjN3UU9BdHE3VVBKMzAzemJ4eGZBTW9Wc05OMkxhZUxHWU03Zk5mUlRnbXhzdHdleHErWXc2aW5ENXdsSVhPSzJnL1BiY3oiLCJtYWMiOiI4ZDJkMTZiOGQzY2NiNGQyYTg1Mjk4MjdjZDgwZjY1ZTFhMGVlODE4ODI3ODcxOTljZDVmY2YxMGRiYWI5NmE1IiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6InhUcnZCV1JkUVFpMjlhSlV3Z1ZwdHc9PSIsInZhbHVlIjoieCtNWm1CTkRTSitKU0krVjk1SVlpL1lQYWs0amJxSFFPWGFNZ2w4V2NWN2Y0VXgzZTNtMXdSOFhHYmd3UHV5c1JPa1BhNlhLaDJMVHBnellwYU82dG9VL1hjd2pLTHcwTEZneU5hY1FpNmxuMENCdVM1dFlJU3lRRy9uZnMxVzAiLCJtYWMiOiIxMmY4MWI5NmNlOGI2NDExODBjMzQ0OWY2Mjg5OGUyZDZmZWRlOGQ5N2JiOTUwNDhjMmRlNTQ5ZjE4M2Q2YzU2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=NdXVBLrDwEy5LHe4; Domain=.lukesitturn.com; Path=/; Expires=Sun, 26-Oct-2025 20:20:28 GMT\n__ddg10_=1761508828; Domain=.lukesitturn.com; Path=/; Expires=Sun, 26-Oct-2025 20:20:28 GMT\n__ddg9_=91.90.42.154; Domain=.lukesitturn.com; Path=/; Expires=Sun, 26-Oct-2025 20:20:28 GMT\r\nstrict-transport-security: max-age=2628000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Wed, 22 Oct 2025 16:43:37 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 25 Aug 2024 05:41:47 GMT\r\netag: W/\"66cac41b-42120\"\r\nexpires: Fri, 21 Nov 2025 16:43:37 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 357411\r\ncontent-length: 36626\r\nddg-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":270624,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65271)","md5":"c71fa701386844028fe6595289427599","sha1":"8be981f11be9f5aab5fd100ee58b8a9332674382","sha256":"39710492ff4eb2fd207455f6edca3b9649b46fd2644021344afdf1d4c9a5ca11","sha512":"eb59d640b418acd5a06c791f80e3e98916cf53953477cdaab70b938c09a9d596ce18771910af42227e052d95251f5fce7c0ef1db0bcacc9b63c749d72ef29bf1","ssdeep":"3072:7nL9Df9J/RNOokVsdmrjY82oUXpPzfjzntD:7nL9Df9DN/vdmrjY82oUXpPzfjzntD","tlshash":"fb4492e6f9d0307d2c67c259a690fefd6a2ea545db120ea6f003672487c96d309739cc","first_seen":"2025-04-08T05:57:49.888306Z","last_seen":"2026-06-06T23:27:04.175507Z","times_seen":447,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"lukesitturn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lukesitturn.com/s/images/logos/voe-logo.svg?v=2","fqdn":"lukesitturn.com","domain":"lukesitturn.com","tld":"com"},"ip":{"addr":"186.2.163.224","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lukesitturn.com/mgflc9vsk669","date":"2025-10-26T20:00:28.462Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lukesitturn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Oct 2025 15:43:45 GMT","end":"Tue, 20 Jan 2026 15:43:44 GMT"},"fingerprint":{"sha1":"17:48:98:3E:C6:84:47:C5:CA:E0:B6:60:A6:73:EA:CF:9C:92:7C:A0","sha256":"7B:DE:48:DF:DD:8C:BA:1F:4F:8C:17:44:3F:C1:F3:E2:78:EB:DF:37:C3:22:FC:A7:D2:F3:1E:04:DF:F7:77:99"}}},"request":{"raw":"GET /s/images/logos/voe-logo.svg?v=2 HTTP/1.1\r\nHost: lukesitturn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lukesitturn.com/mgflc9vsk669\r\nCookie: __ddg8_=EITM5TFh4CgWaRTL; __ddg10_=1761508828; __ddg9_=91.90.42.154; __ddg1_=HZkMGsQCYQ69InN2pcf2; XSRF-TOKEN=eyJpdiI6Ikg5Rk1HTFU2SWdqOUVINDl5a2RIc2c9PSIsInZhbHVlIjoiWG5SQWRYVXlXRENWODhrQ0x6NVJ1aVNsWWd3ZjRtZzZkRVdLc2dTczM3ZG03bEFiNlNjSnNINXVGTjN3UU9BdHE3VVBKMzAzemJ4eGZBTW9Wc05OMkxhZUxHWU03Zk5mUlRnbXhzdHdleHErWXc2aW5ENXdsSVhPSzJnL1BiY3oiLCJtYWMiOiI4ZDJkMTZiOGQzY2NiNGQyYTg1Mjk4MjdjZDgwZjY1ZTFhMGVlODE4ODI3ODcxOTljZDVmY2YxMGRiYWI5NmE1IiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6InhUcnZCV1JkUVFpMjlhSlV3Z1ZwdHc9PSIsInZhbHVlIjoieCtNWm1CTkRTSitKU0krVjk1SVlpL1lQYWs0amJxSFFPWGFNZ2w4V2NWN2Y0VXgzZTNtMXdSOFhHYmd3UHV5c1JPa1BhNlhLaDJMVHBnellwYU82dG9VL1hjd2pLTHcwTEZneU5hY1FpNmxuMENCdVM1dFlJU3lRRy9uZnMxVzAiLCJtYWMiOiIxMmY4MWI5NmNlOGI2NDExODBjMzQ0OWY2Mjg5OGUyZDZmZWRlOGQ5N2JiOTUwNDhjMmRlNTQ5ZjE4M2Q2YzU2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=5LxLeLj3nphnuDCG; Domain=.lukesitturn.com; Path=/; Expires=Sun, 26-Oct-2025 20:20:28 GMT\n__ddg10_=1761508828; Domain=.lukesitturn.com; Path=/; Expires=Sun, 26-Oct-2025 20:20:28 GMT\n__ddg9_=91.90.42.154; Domain=.lukesitturn.com; Path=/; Expires=Sun, 26-Oct-2025 20:20:28 GMT\r\nstrict-transport-security: max-age=2628000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Wed, 22 Oct 2025 16:43:37 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 27 Apr 2025 04:35:03 GMT\r\nvary: Accept-Encoding\r\netag: W/\"680db3f7-74f\"\r\nexpires: Fri, 21 Nov 2025 16:43:37 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: br\r\nage: 357411\r\ncontent-length: 958\r\nddg-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1871,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bd6af39ad5f6b06bf2f48d4381f7e2d2","sha1":"446e69b85868537aea68fdca15b5a10694f894ed","sha256":"acf82d320d156d54ca827f03a45c073e0c00103dc78f1750cf011bc61e5216f6","sha512":"4d55b4c934ed6e3b4eae1e0f710f0866a2103a8dbfc13c6b957e85f763e51de0951091e41807bb6586a8865ace0e0a7bbc465bc48121c4c74c178780adfc5609","ssdeep":"","tlshash":"a2314445924ae339dda54338a39638d679e7dc4851b4e2e0b6cf2855f00c8f5d48cbba","first_seen":"2025-05-28T10:36:56.305059Z","last_seen":"2026-06-06T12:52:55.920884Z","times_seen":130,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"lukesitturn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lukesitturn.com/jwplayer/8.38.2/jwpsrv.js","fqdn":"lukesitturn.com","domain":"lukesitturn.com","tld":"com"},"ip":{"addr":"186.2.163.224","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lukesitturn.com/mgflc9vsk669","date":"2025-10-26T20:00:29.133Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lukesitturn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Oct 2025 15:43:45 GMT","end":"Tue, 20 Jan 2026 15:43:44 GMT"},"fingerprint":{"sha1":"17:48:98:3E:C6:84:47:C5:CA:E0:B6:60:A6:73:EA:CF:9C:92:7C:A0","sha256":"7B:DE:48:DF:DD:8C:BA:1F:4F:8C:17:44:3F:C1:F3:E2:78:EB:DF:37:C3:22:FC:A7:D2:F3:1E:04:DF:F7:77:99"}}},"request":{"raw":"GET /jwplayer/8.38.2/jwpsrv.js HTTP/1.1\r\nHost: lukesitturn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lukesitturn.com/mgflc9vsk669\r\nCookie: __ddg8_=MS6gQhAT5tmX8HHV; __ddg10_=1761508828; __ddg9_=91.90.42.154; __ddg1_=HZkMGsQCYQ69InN2pcf2; XSRF-TOKEN=eyJpdiI6Ikg5Rk1HTFU2SWdqOUVINDl5a2RIc2c9PSIsInZhbHVlIjoiWG5SQWRYVXlXRENWODhrQ0x6NVJ1aVNsWWd3ZjRtZzZkRVdLc2dTczM3ZG03bEFiNlNjSnNINXVGTjN3UU9BdHE3VVBKMzAzemJ4eGZBTW9Wc05OMkxhZUxHWU03Zk5mUlRnbXhzdHdleHErWXc2aW5ENXdsSVhPSzJnL1BiY3oiLCJtYWMiOiI4ZDJkMTZiOGQzY2NiNGQyYTg1Mjk4MjdjZDgwZjY1ZTFhMGVlODE4ODI3ODcxOTljZDVmY2YxMGRiYWI5NmE1IiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6InhUcnZCV1JkUVFpMjlhSlV3Z1ZwdHc9PSIsInZhbHVlIjoieCtNWm1CTkRTSitKU0krVjk1SVlpL1lQYWs0amJxSFFPWGFNZ2w4V2NWN2Y0VXgzZTNtMXdSOFhHYmd3UHV5c1JPa1BhNlhLaDJMVHBnellwYU82dG9VL1hjd2pLTHcwTEZneU5hY1FpNmxuMENCdVM1dFlJU3lRRy9uZnMxVzAiLCJtYWMiOiIxMmY4MWI5NmNlOGI2NDExODBjMzQ0OWY2Mjg5OGUyZDZmZWRlOGQ5N2JiOTUwNDhjMmRlNTQ5ZjE4M2Q2YzU2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=LGr9dZRMImE7EMYL; Domain=.lukesitturn.com; Path=/; Expires=Sun, 26-Oct-2025 20:20:29 GMT\n__ddg10_=1761508829; Domain=.lukesitturn.com; Path=/; Expires=Sun, 26-Oct-2025 20:20:29 GMT\n__ddg9_=91.90.42.154; Domain=.lukesitturn.com; Path=/; Expires=Sun, 26-Oct-2025 20:20:29 GMT\r\nstrict-transport-security: max-age=2628000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Wed, 22 Oct 2025 16:43:37 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 08 Jul 2025 18:22:04 GMT\r\netag: W/\"686d61cc-10710\"\r\nexpires: Fri, 21 Nov 2025 16:43:37 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 357412\r\ncontent-length: 20026\r\nddg-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":67344,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"b7c09a238f43ba40002820079de36b91","sha1":"620bbc4b53e6fd80b6cd5c89271bc09973d51903","sha256":"be32622dbb1e238992fe4d24d3fd2aaf05b5a283f58f249790b673f04e64c24f","sha512":"41864f6164c9375d1a4abcfc0e831b453e963e0f6c109da0a74e34157b59714eb8b9b0ce2c63b59cade937acb560d38b4a328f0e51fe7ce9ec97df10d8a22686","ssdeep":"768:DiDjPSAlvbtXral8WKOR7pr1oJl92LCaA1YL9ncpgW:+nPlZral8WK+EJl92LCcLWpV","tlshash":"4463c78d3685b16a5a6770b8806fb546723d1dd6308dc250ea50eec93c3de5ee237b2c","first_seen":"2025-04-10T04:03:01.174964Z","last_seen":"2026-06-06T23:27:04.160273Z","times_seen":386,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"lukesitturn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gigglegrowlworrisome.com/get/2060453?id=2060453\u0026jp=_clklzspuubuvwohjkvroqx\u0026dr=102\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.622-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=7IocH7fB4q5zanZXWVsPCTpVIbFIUEQtsql-\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=ZMPaTFGaHR0cHM6Ly9sdWtlc2l0dHVybi5jb20vbWdmbGM5dnNrNjY5\u0026afid=5463466800180224\u0026eclog=0\u0026snc=0\u0026ssc=0\u0026vp=8\u0026dto=2\u0026pload=1546\u0026rlp=%5B0%2C35%2C467%2C367%2C3178%2C2971%2C1030%2C2666%2C0%5D\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0\u0026freq=0","fqdn":"gigglegrowlworrisome.com","domain":"gigglegrowlworrisome.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lukesitturn.com/mgflc9vsk669","date":"2025-10-26T20:00:29.877Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gigglegrowlworrisome.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 14:25:52 GMT","end":"Wed, 21 Jan 2026 14:25:51 GMT"},"fingerprint":{"sha1":"5D:9F:41:7B:78:25:D4:B3:13:E8:25:E2:7F:55:2F:21:57:20:47:C4","sha256":"72:3D:F0:F6:91:88:C8:C2:48:4F:00:5B:E7:66:01:5B:6F:7A:B2:31:77:49:26:AB:D7:16:D6:57:AF:7C:B0:1B"}}},"request":{"raw":"GET /get/2060453?id=2060453\u0026jp=_clklzspuubuvwohjkvroqx\u0026dr=102\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.622-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=7IocH7fB4q5zanZXWVsPCTpVIbFIUEQtsql-\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=ZMPaTFGaHR0cHM6Ly9sdWtlc2l0dHVybi5jb20vbWdmbGM5dnNrNjY5\u0026afid=5463466800180224\u0026eclog=0\u0026snc=0\u0026ssc=0\u0026vp=8\u0026dto=2\u0026pload=1546\u0026rlp=%5B0%2C35%2C467%2C367%2C3178%2C2971%2C1030%2C2666%2C0%5D\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0\u0026freq=0 HTTP/1.1\r\nHost: gigglegrowlworrisome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lukesitturn.com/\r\nCookie: cart=1; cart_p=2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Oct 2025 20:00:29 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: CHCK=1; Path=/; Expires=Sun, 29 Nov 2026 20:00:29 GMT; Secure; SameSite=None\nPTS=; Path=/; Expires=Sun, 29 Nov 2026 20:00:29 GMT; Secure; SameSite=None\nUID=2510261500b4bce58c87694071b98cb2cea9; Path=/; Expires=Sun, 29 Nov 2026 20:00:29 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":548,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (548), with no line terminators","md5":"2713434e0ba43a857bcbf36818a36197","sha1":"8471549d472b7d90523d2c82277fa6e832f31989","sha256":"92c084c43a2449774ae35d9d26c42180c830c6b49a765a87b4c1aadb895af24d","sha512":"4fc1ccae194c8016a0858a5017c93a95fab1cb6210b8cadfd0dde0011f632b8b8f4a2e4e9b0f7aa45448d1131700994b23ad1b874d9962e57aa895d4db771ebf","ssdeep":"","tlshash":"c5f059d0491ae0d298116cd762ffbcea299d68ebae5b9a19cd51fc4a803c37c8313441","first_seen":"2025-10-26T20:00:56.511437Z","last_seen":"2025-10-26T20:00:56.511437Z","times_seen":1,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}