{"report_id":"875977fe-49f6-42d4-b119-87fb1919fb47","version":6,"status":"done","tags":[],"date":"2026-05-03T08:44:10Z","url":{"schema":"https","addr":"to-get-free-roblox.pages.dev","fqdn":"to-get-free-roblox.pages.dev","domain":"to-get-free-roblox.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.45.44","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"to-get-free-roblox.pages.dev/","fqdn":"to-get-free-roblox.pages.dev","domain":"to-get-free-roblox.pages.dev","tld":"pages.dev"},"title":"Easy Ways To Get Free Roblox [Legit Tips] | To Get Free Roblox","dom":{"size":8483,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (3952)","md5":"34a3c77c1ab252a1f86335408f2fd42c","sha1":"73e5acd40bb653912ef672685ec2b7ca821c5761","sha256":"9cfd4a4337164f147214aa03f78e94446bd042389bb898d99ca684f2bea3cb2d","sha512":"ae1940f973a846ed1d157b22ca2b84d10ab3f6a13877858f51fcfe2ca1ad146ba81f0f463b25323be7494771a7f498251295b3fb9f2b61d5739bd9e72e0fb32b","ssdeep":"192:WcgUIkbcaxtoyfkjxomC9G+zOaxtoyfkjxovSV3VCkCaO:Aaft+SbzNt+tl2","tlshash":"86024b7bccc849bd99d9b9b7647ab9d86f54a1223a11cc00fdac83402f7076c25bbd94","dom_hash":"domhashdc54fbe1ae197f2d0347c91caad45e38","first_seen":"2026-05-03T08:44:19.117884Z","last_seen":"2026-05-03T08:44:19.117884Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"to-get-free-roblox.pages.dev","fqdn":"to-get-free-roblox.pages.dev","domain":"to-get-free-roblox.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.45.44","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-07T08:44:10Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":25}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-05-03T08:43:48Z","timestamp":1777797828,"ip_dst":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":47506,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)","source":"{\"timestamp\":\"2026-05-03T08:43:48.027423+0000\",\"flow_id\":1843769511261753,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.23\",\"src_port\":47506,\"dest_ip\":\"188.114.96.1\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2057746,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_11_20\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\"],\"updated_at\":[\"2024_11_20\"]}},\"tls\":{\"sni\":\"to-get-free-roblox.pages.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":930,\"bytes_toclient\":3569,\"start\":\"2026-05-03T08:43:48.013881+0000\"}}"}],"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-05-03","alert":"Hunting_JS_WebAssembly","trigger":"www.youtube.com/s/player/0980151a/player_embed_es6_tcc.vflset/en_US/base.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"immigrationacre.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"immigrationacre.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"immigrationacre.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"cdn.show-creative1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"cdn.show-creative1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"mtevor.com","ip":{"addr":"172.67.199.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-10-31","domain_rank":3995008,"first_seen":"2019-11-04T00:42:52Z","last_seen":"2026-04-27T10:27:56.081875Z","alert_count":0,"request_count":1,"received_data":7812,"sent_data":427,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"kettledroopingcontinuation.com","ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2024-09-01","domain_rank":196057,"first_seen":"2025-07-30T15:18:19.355595Z","last_seen":"2026-04-30T14:34:03.513143Z","alert_count":15,"request_count":5,"received_data":211258,"sent_data":6603,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.show-sb.com","ip":{"addr":"172.67.170.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-08-20","domain_rank":187612,"first_seen":"2024-08-31T03:46:04Z","last_seen":"2026-04-30T11:37:55.11212Z","alert_count":3,"request_count":1,"received_data":2094,"sent_data":522,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"adxpy.pages.dev","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-02","domain_rank":0,"first_seen":"2025-12-08T23:25:40.439519Z","last_seen":"2026-04-27T10:27:55.96716Z","alert_count":0,"request_count":4,"received_data":13697,"sent_data":1776,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"skinnycrawlinglax.com","ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2024-09-01","domain_rank":38609,"first_seen":"2025-07-09T22:28:05.771371Z","last_seen":"2026-04-30T12:49:09.989707Z","alert_count":64,"request_count":16,"received_data":42371,"sent_data":18872,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-04-26T22:16:47.246638Z","alert_count":0,"request_count":6,"received_data":257768,"sent_data":3342,"comment":"","tags":null,"fingerprints":null},{"fqdn":"to-get-free-roblox.pages.dev","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-02","domain_rank":0,"first_seen":"2026-05-03T08:44:15.459186Z","last_seen":"2026-05-03T08:44:15.459186Z","alert_count":0,"request_count":4,"received_data":58286,"sent_data":1961,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]}]},{"fqdn":"jnn-pa.googleapis.com","ip":{"addr":"142.251.143.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":1579,"first_seen":"2021-11-16T06:12:21Z","last_seen":"2026-04-27T01:34:56.96102Z","alert_count":0,"request_count":2,"received_data":1201,"sent_data":1185,"comment":"","tags":null,"fingerprints":null},{"fqdn":"links.mtevor.com","ip":{"addr":"172.67.199.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-10-31","domain_rank":0,"first_seen":"2026-03-10T23:35:42.996415Z","last_seen":"2026-04-30T20:02:02.018788Z","alert_count":0,"request_count":1,"received_data":727,"sent_data":467,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.storageimagedisplay.com","ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2024-09-13","domain_rank":170153,"first_seen":"2024-09-13T12:56:32Z","last_seen":"2026-05-01T00:53:34.616312Z","alert_count":0,"request_count":3,"received_data":235843,"sent_data":1385,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"immigrationacre.com","ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2026-01-21","domain_rank":0,"first_seen":"2026-01-30T08:57:45.831225Z","last_seen":"2026-05-03T03:57:43.096954Z","alert_count":12,"request_count":4,"received_data":295010,"sent_data":1856,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"cdn.nightdestruct.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-30","domain_rank":0,"first_seen":"2026-03-30T18:41:21.656654Z","last_seen":"2026-04-27T21:04:33.759813Z","alert_count":0,"request_count":10,"received_data":282377,"sent_data":4957,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"tse1.mm.bing.net","ip":{"addr":"150.171.28.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"domain_registered":"1997-09-03","domain_rank":17960,"first_seen":"2014-03-13T14:42:52Z","last_seen":"2026-04-30T00:28:48.277101Z","alert_count":0,"request_count":1,"received_data":47806,"sent_data":493,"comment":"","tags":null,"fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}]},{"fqdn":"protrafficinspector.com","ip":{"addr":"18.195.43.118","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2025-06-18","domain_rank":614186,"first_seen":"2025-07-25T22:45:21.95813Z","last_seen":"2026-04-29T21:12:11.35333Z","alert_count":0,"request_count":2,"received_data":1416,"sent_data":944,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.google.com","ip":{"addr":"142.251.155.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-04-26T22:38:44.781388Z","alert_count":0,"request_count":1,"received_data":62943,"sent_data":455,"comment":"","tags":null,"fingerprints":null},{"fqdn":"i.ytimg.com","ip":{"addr":"142.251.143.150","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2007-12-11","domain_rank":436,"first_seen":"2012-10-03T19:11:04Z","last_seen":"2026-04-27T01:34:56.80606Z","alert_count":0,"request_count":1,"received_data":46019,"sent_data":560,"comment":"","tags":null,"fingerprints":null},{"fqdn":"flushpersist.com","ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2025-07-01","domain_rank":23810,"first_seen":"2025-07-08T10:43:12.76905Z","last_seen":"2026-04-30T10:40:07.857935Z","alert_count":4,"request_count":2,"received_data":1060,"sent_data":1558,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"wayfarerorthodox.com","ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2024-09-03","domain_rank":0,"first_seen":"2025-08-08T11:06:50.216151Z","last_seen":"2026-05-01T11:00:58.799244Z","alert_count":2,"request_count":1,"received_data":802,"sent_data":512,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-04-26T22:44:22.368934Z","alert_count":0,"request_count":1,"received_data":1224,"sent_data":485,"comment":"","tags":null,"fingerprints":null},{"fqdn":"preferencenail.com","ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-07-01","domain_rank":20606,"first_seen":"2025-07-08T12:55:47.271261Z","last_seen":"2026-04-30T10:40:07.827721Z","alert_count":6,"request_count":3,"received_data":257868,"sent_data":1278,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.143.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-04-26T22:20:29.825994Z","alert_count":0,"request_count":2,"received_data":34862,"sent_data":860,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"sourshaped.com","ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2024-09-03","domain_rank":0,"first_seen":"2025-10-06T14:35:38.581947Z","last_seen":"2026-04-26T15:03:11.062041Z","alert_count":12,"request_count":4,"received_data":3184,"sent_data":2295,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.youtube.com","ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-02-15","domain_rank":286,"first_seen":"2013-04-13T07:43:20Z","last_seen":"2026-04-27T01:45:38.866329Z","alert_count":1,"request_count":10,"received_data":3592941,"sent_data":6920,"comment":"","tags":null,"fingerprints":[{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.show-creative1.com","ip":{"addr":"104.21.15.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-08-20","domain_rank":392451,"first_seen":"2024-08-27T12:23:01Z","last_seen":"2026-04-30T15:02:10.084882Z","alert_count":2,"request_count":1,"received_data":2219,"sent_data":540,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"9287a4d278aa14fa8420e954d63f437e","sha1":"f9224c5fd3db7d563161baab660a906b92251c6c","sha256":"0e787a0bb13af0468457c1b72fe82e7340d3560e1503d51a2e0ae227ffb9f3ac","sha512":"8ac7221455ca737729122743abe30350ca25f2447a435abdefff3bbdcee0b6bbf4ee41f5b75684d1dee9c2704a981865321f72a0dff322c522a9433304d1893c","ssdeep":"","tlshash":"87e068e933f2a0a425b2a4a6c9eb1084202c35f45500dc2ec1b3229656b3ff64818f22","size":344,"data":"","first_seen":"2026-04-29T23:46:16.570862Z","last_seen":"2026-05-04T07:00:28.506026Z","times_seen":1796,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"to-get-free-roblox.pages.dev/","fqdn":"to-get-free-roblox.pages.dev","domain":"to-get-free-roblox.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d52f43845ee9e1b08b8bd93441b7f10c","sha1":"7f4299aae08439c9d05ebb796e16df22554a517c","sha256":"51dc270c4f474a503c5093bc25df811500c2cb6d3fc32680b5667a333f216b9d","sha512":"3ed7cfea6f3982a5ca21cbecd1e36618b087bdbba1ad2d27ed5cbe3f41638120673677f1781dbf00b141e5423494d10421b97f314c1e4e60eaacbbd6364bddfe","ssdeep":"","tlshash":"c4a022e8efe20ca03028303ec302e0800b88e0c0aa8f020c8c30b080a0cc30e88308c8","size":71,"data":"","first_seen":"2026-05-03T08:44:19.159363Z","last_seen":"2026-05-03T08:44:19.159363Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"to-get-free-roblox.pages.dev/","fqdn":"to-get-free-roblox.pages.dev","domain":"to-get-free-roblox.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"81f04c41f8acbe1896a04adf683a5f50","sha1":"c43780b476488b7b723c6e463397263d268c0612","sha256":"d7c38975e1b16aa76895318026d67c2ca83a41ae43b9419041a898facd34720b","sha512":"f477f31fc8d52891075cc8889855386d8705476038e9d646ca0b6001cefab5bd0f438c72c4fd0d9654bf25092223c7a4dd7d25ff9419f97744adecec35990616","ssdeep":"","tlshash":"58d05b340d00021604721dec6c959fb47e367c41b3742160f9bcd91591d1947c162feb","size":258,"data":"","first_seen":"2023-03-09T05:07:28Z","last_seen":"2026-08-13T05:13:28.252544Z","times_seen":1681,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"6247dd5d2d787d98a0d5e4966146d550","sha1":"51dcfa67e8318f689e1a4589a9def15c6f9a23bd","sha256":"cbb9ab7439a233ff75c44799819b7a7de5fdb18f4e30f0236430bc751530c211","sha512":"bcdab3f3db437167cf01baaa88913e053ea2ac769bf14381fb70e62ae10544ef8f11c327a24e01218936ae2800ed21453d065820542d1222b87117980536c637","ssdeep":"","tlshash":"92b0922e6c926024a05c1116a01c008a6b8cc9bb83c814a862054cb5ea9a0ba03847b0","size":108,"data":"","first_seen":"2023-08-01T01:42:54Z","last_seen":"2026-08-15T21:45:01.558668Z","times_seen":299206,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e18eb9d0972d240f1a5456179bb6523b","sha1":"65255f106adcff2907a98e295a8e7a38fe2884c4","sha256":"3d68db2b85d5a2915743399f09dc438963f0c50f68b02df05d47a372661603e8","sha512":"bcd5a6c26fa1f7a77f5614a7b28e238701d698cc0c96ac5d03d97628d8622125cd0cfdaf54b1db96ef25320a3fca7584abd343d67bdfb9f272ca3ef8572b360a","ssdeep":"","tlshash":"d4c04c38402080e98659101c7434fb80bd7d3b973163e047da3c621c65f5d017c94b11","size":134,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-08-15T21:45:01.55997Z","times_seen":262917,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"2871741dc37fd098df8ff06fbfe09bcf","sha1":"1242f611d521fb41c32c997ad0b2ea7e50b08220","sha256":"d3383f5c318f0484fa84fbd002d3760e945a877d36837dd4964477f901d42d04","sha512":"da6f711d547f1719a373a1bb625194bed299b5b65a7c5bc2671bba213997c92215628ba66804b79f0ddbcf921e921be060eb078e3cd497e871511e59b4140eb6","ssdeep":"","tlshash":"58c08cad2c3222d22c42ee108a6b8939c1acf05a8a841e5e58832f6d8c52584767286b","size":157,"data":"","first_seen":"2026-04-29T23:46:16.62625Z","last_seen":"2026-05-04T07:01:12.40479Z","times_seen":1796,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"8218aa45a809e3aa425ace5c372228cd","sha1":"65fff21b6e45dd422fdc5ecc1668951cc7a989b3","sha256":"839267212282d12f65f1ca8bd221ba34078b578520e7c2ee1dd33d01f8399d2b","sha512":"cfb406020ff3b494121b0f0642c5d394f4b5c86cadfb0c6ddf11ca1235e0573304731d9fbe4dfc9e8e36e773786d91cdadd71c86eff4c7f899a6176b25179c54","ssdeep":"","tlshash":"61c08ce87052b86178327ae1054e000558a7eec8c80d0c08501914709b7a7210032eb7","size":145,"data":"","first_seen":"2026-04-30T03:36:41.727873Z","last_seen":"2026-05-04T06:58:38.4994Z","times_seen":813,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"44c29edb103a2872f519ad0c9a0fdaaa","sha1":"511993d3c99719e38a6779073019dacd7178ddb9","sha256":"5c62e091b8c0565f1bafad0dad5934276143ae2ccef7a5381e8ada5b1a8d26d2","sha512":"ebecf27f9d01a31e1b7fde7d28befe992491ca5678e5c1faf59d688171ff0dc120e75c888213ce340cf8d3bae4c431fbfb6992719a4372b51b9dd88b81547f01","ssdeep":"","tlshash":"c700003000000000c0000030000000000000000000000000c000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:20:09Z","last_seen":"2026-08-15T20:02:09.386382Z","times_seen":65884,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e24ee53bfaf90c9a10c3e68155779801","sha1":"d1755941d14e830bc86c9bf29ad9dda8a126ba55","sha256":"00d19621eed0f8c63ca13d25c9a42e8177c2fb1fb6a7e2ed18e3d105f77e63fa","sha512":"70da31e3b9f10c1038b3147401d0186ad6b30034092d2d66361f9f7a08e61693f765deb25a74df54453c69f4e69a8cd6b88725a6215cd5054aa7465abb08a584","ssdeep":"","tlshash":"8cd0970cad080060d03f60820d0bdc39a392800331a0fae9c10b7cd198ea0b9922bd0b","size":244,"data":"","first_seen":"2026-04-30T03:36:41.735486Z","last_seen":"2026-05-04T06:58:38.453031Z","times_seen":819,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"96d66a4d9708fdb6dd5597f3bbc7d624","sha1":"e10a66fa8a836f6f948941262b70e1fc928a446e","sha256":"3cabac574ada654802fc1c4518d870f0791a9a3ac31371677e75fb683e47ce89","sha512":"06c25bc4dba52367cbe19252c1a013e1714a198141d139939944422266aaaed60ea3953c5d0f890a7f9ce7887c5f2a4cbb47173d06f829d50ac33f6f353c015d","ssdeep":"","tlshash":"ebd023cb729c1114574337141eef0448bc64b4d70dbc941d8649581058011ede03aecf","size":195,"data":"","first_seen":"2023-03-08T14:47:45Z","last_seen":"2026-08-15T21:45:01.76487Z","times_seen":210482,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"4e7268e57a109668e83f60927154d812","sha1":"f4db9dfad6d5a29d6fa4e7b5b17bb36b008ddb60","sha256":"4c5ebcb57b64b15dbbe83c978831cada8722f0b26af56b22b4a47ce1ce418760","sha512":"e5a2a734e79b90e87a9fa17512ce2f7af55b1754e400ca6876f1196592b047e4a62d0eb39308020964ccc5040becbed6fbd0255a433e45b77a931f9710bbd8ae","ssdeep":"","tlshash":"c710000000000000000000000000000000000000300000000000000300000000000000","size":2,"data":"","first_seen":"2023-06-08T20:01:55Z","last_seen":"2026-07-09T14:08:33.90058Z","times_seen":3162,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"immigrationacre.com/6dd5e3d7ac37d33b5abc87810f6ac7f3/invoke.js","fqdn":"immigrationacre.com","domain":"immigrationacre.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e609339b8123b13519ef68ccf94d74da","sha1":"fa23bc1ae1cc5ee0881ad97627ea1605f3d3c359","sha256":"063f54e22a5cc8ad214b853463aeb8ec14dcf1a3eabd3157ab6afb0b4a5ad99d","sha512":"f4254a4b675bc0a95d151165d4afcc4e64dd2832c0097db7bc7d8a95bde6e3b0f1840e093b5e327d969c6e6d561b28448fdafa0b940f40c61e27fb6a0e160030","ssdeep":"768:Uj7jxeEGWHp9GAuNWlpBCHpDBRKO8doFtXj9H6sgT:8xeEGWHp9AA7BCHpDBcV+fz9H6sS","tlshash":"6b3317887fa1b0b503b67473623f9046f25c0d0955ecd8dcd087a8a87ea87e9d1b7b25","size":51186,"data":"","first_seen":"2026-05-03T08:40:46.541175Z","last_seen":"2026-05-03T08:44:19.127862Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"07a4f00eb309efb4797bfce46e753691","sha1":"1cb99127f2be283c26e95046b16c3f79df9dd1ed","sha256":"29bdae405ad712212441c48ff2316b48b73e3da30d83d6c5d5542dd47910f3f9","sha512":"4b1dfc9375dd7af7fc756db8bf8902d89b62e0c43182d08d9b4e1de7e07df45218e47e41b4fc8c63c56bfaf246fe3353e6dcd893cff31c47563e924aaee82f45","ssdeep":"","tlshash":"9b31f97b006862d62c6ff673000f6208de3254478e291aca5d37c39274769a943bdd1c","size":1536,"data":"","first_seen":"2026-05-03T08:44:19.165153Z","last_seen":"2026-05-03T08:44:19.165153Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e3f0e9c166f365ea627b08d5aba73fe1","sha1":"9364536a7174e8a1038008b293593df8386fb5ad","sha256":"20bd4ab6779a1f42a63c1a5c87bc5ed4c12892b2dfe45c79fd3b0ed9ac40f104","sha512":"e3af62fabdcfdc60ce8052e309eceee38b9d6555cac07b71d70e09aa8eb389a8adfe2daeee1a4c8b67963b4523bbee7330b7d8a561f3f94de5aba5ff749c02f4","ssdeep":"","tlshash":"89e07dca332a1e371a84d956f01733f33501d822660f2c0e9603d604cfb4ed70153a0a","size":328,"data":"","first_seen":"2026-04-30T03:36:41.779776Z","last_seen":"2026-05-04T07:01:12.558337Z","times_seen":837,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"to-get-free-roblox.pages.dev/","fqdn":"to-get-free-roblox.pages.dev","domain":"to-get-free-roblox.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fb73c9c1f5ecb08f9a0205a14e2841e0","sha1":"dd5807b9d4c32d9dff08f8f14c726804f49bfd5e","sha256":"63578fe671a2d9eeff56bb7df57695eb7728b49bfb50db91bf2cf74430df93c9","sha512":"b18875be5353ae7972e16617a0eadc0adbe806c68cd098cd54f462b4308c7dff48e7ce73da68968f66d9dcc00ac1cc891e8d1b1312298a75990eeecdbc8187ca","ssdeep":"","tlshash":"7fc08cf68004b21820e7caf02028c0c0a324ec20300a383166e0081082ac50d0cb2bb8","size":146,"data":"","first_seen":"2025-12-16T03:50:13.724775Z","last_seen":"2026-08-11T01:12:56.779948Z","times_seen":329,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"8046de5a21ba3472eaa8962718f692f3","sha1":"1eac61325248755b0636b6e7b22692dc8ac05fdd","sha256":"445fa4e2145a62e3b3856fca6b384489a004fd52075f01c403eaf6190e6629f0","sha512":"592d6fcab624d7ebbf686619c9ea43e83ee9d3e25b6d28aed05837eeb682860d490649a49bbf119e17c6581ecd69f9172f1e2381184b18e5952a3c05f1f1d801","ssdeep":"","tlshash":"07700088ac28280008223230000bca0c022200822000020080082882ac3200b800280c","size":22,"data":"","first_seen":"2026-04-29T23:46:16.589526Z","last_seen":"2026-05-04T07:01:12.529504Z","times_seen":1792,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"27791fb46bea15c962b6b9e0d5ab479f","sha1":"ed77411a9805e9acdde811c24d70ef0fc19c4b90","sha256":"1a2c16c7931fccb98fa7dae6b02e2392a81717cc2468049853b64e4831b22331","sha512":"5c3a0ea355caadba7d4424e08f7f01b1eaa6e0a4df73cf00a7b6ba16b5c6940a3fffeb8a22d6344a2877c3c9b16db931e914bdd2cb31c6c66885b402be09f703","ssdeep":"","tlshash":"c710000000000000000000000000000000000000000300000000000000300000000000","size":2,"data":"","first_seen":"2023-03-10T09:35:58Z","last_seen":"2026-07-29T04:56:13.277584Z","times_seen":7304,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"ec7e53845feb375870343182efd0b929","sha1":"63e71d0c5bcadc37a725d971054eb55e017f6989","sha256":"a2253e1fad60aa1ccf31416ca8cde6ffaa5af2510733c7186adc04a503346c5b","sha512":"339f50fe30462dd6204552b2d3d3fe5cbaeea2cadcfbde096f16b40f1d985a5a68ebb227dbbb9f37c9451a36376ed392b7fb50c6e661963124146bac7e03284a","ssdeep":"","tlshash":"cf50003cc00000c0000f03000300000cc0000c00c0c00300c3cc000c3c0cc00c000000","size":11,"data":"","first_seen":"2024-07-23T18:45:21Z","last_seen":"2026-08-15T21:45:01.71583Z","times_seen":175894,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f9b827e95da9136ff220c90b53d9b04a","sha1":"ba9ca8e89d127bba857658f1b699699156f549f3","sha256":"a2a01a696d4bbd0a292ca42302ece851b6b9255841a5cc7e1be9ceabde2c7f0f","sha512":"eb0cfc3f8e764e358a53762daf6a70a878139368ce65d31c1484c8bb53cccedca80d51d128a8b83d67901d3f9413fcacc2f1490eebd1a1c7549ecda3453e09d8","ssdeep":"96:LC9GhozoBClkI1SotoyPXk/n6Dpp0tsUkww1jDSV3VCfMEDaH:LC9G+zOaxtoyfkjxovSV3VCkCaH","tlshash":"7d912a7bccc449bd9896b5bb257ab9983f50e1172911dc01fd9cc2402f70bac29bbe94","size":4521,"data":"","first_seen":"2026-05-03T08:44:19.168762Z","last_seen":"2026-05-03T08:44:19.168762Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"017010486840b0fee88353151baca723","sha1":"056a91b744e5b09c1302a4f76a799ac8c0101638","sha256":"d2ace9ac3d3b8c587cbcfd0c6e1a3b05c9296a9fe00d909f2160db0ac29b4686","sha512":"4437e962ac69fa4c4f4b1797cdcdf69d6e4ce3125dd7c8437f70d36bad33c5e689d84861591ab3f5e6ff549bc3775bba7ca059eb502a4b516966c672d496b48e","ssdeep":"","tlshash":"37a0128dac1c58001d52540014030140023900832065153dc50af05a06710c50065c97","size":79,"data":"","first_seen":"2026-04-29T23:46:16.537014Z","last_seen":"2026-05-04T07:00:28.551085Z","times_seen":1781,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"f73a1002ffa97edf68fff0f3a229f6b1","sha1":"b12b51c92ca7998c1fa7083c6250086cae2336c2","sha256":"eb1275bdbcbb96c140a9b17f7252c04eb56537b4e605db36b279458026fa952d","sha512":"d1fa9e043c5f5eb4a486c6c8a23402c4c004d7c3a8d1853af0004cee6a085b4c5e2f0532d9224b872c48a75abfbca9cd2f86bc31ecc8f2581f95054b8716cc8d","ssdeep":"","tlshash":"3eb012acf85c2e18115a01a1650f671801f9002f8085ce15d240bc42272804e41529bb","size":97,"data":"","first_seen":"2026-04-30T01:20:30.175208Z","last_seen":"2026-05-04T06:58:46.339894Z","times_seen":823,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"ebdd9be6514ddc2811f55595fc02cf00","sha1":"372460c9c903e840b5b6237588a41faa65db29a0","sha256":"433c48b19a31c24f9b7727564816475e2f2e3b6bc2cbecd870838d58769ad179","sha512":"39b153167c0e7345e90e95c6f6a4b3ca328668b8f0a28f3bb0ec0d762b1a4135682bb5613017fc2b7c548e09f3a0fbb1e4208e554eca67b0648b05e19a688c75","ssdeep":"","tlshash":"f4e07df00c38547f208b1411b7db8cec1e85302067554b0d09f660888390534f4e7fe7","size":322,"data":"","first_seen":"2026-04-29T23:46:16.573758Z","last_seen":"2026-05-04T07:00:28.534538Z","times_seen":1793,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d11fd4f5e84304758ca1694f700fa671","sha1":"ce45a7ba15355cea0834c2f386dab31046f48c23","sha256":"4577df5c08628c6300ca82e2421d8c01ca22544309f54b81a11dd8f444b4644e","sha512":"7c8b8b8fd3e3093a22a39dab4cdffeb7b8e5c2c101c0a0d2039cff7d5d2ceb74c6b513fe8b73007d7b533c43495091be9b8fbad9d06bf3991b97623aabbecb40","ssdeep":"","tlshash":"c71000000000000000000000000000000000c000000000000000000000300000000000","size":2,"data":"","first_seen":"2023-03-26T01:44:17Z","last_seen":"2026-08-05T00:33:08.942943Z","times_seen":3245,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"58ab444e97bb4426f8c3f32e31941654","sha1":"91f1d199642a21c0e745873840eea88af4a7e54e","sha256":"a3636628ad11a76a8a400ac083f02ba9701c51a82fd0f5ebc544ea167aa47d5f","sha512":"55b91723d419bf78dcdaf7ef40adb4b6a0d12f8d2d76eeaf2933e390eaf53952beb064effeb8f0fa63794af375fdd733401f0ee1a9865fc433cd76fbd9f64af3","ssdeep":"","tlshash":"2fe07dc933261e3b1a84a947f46363b33500d811350f2c0ec707d5048f70a870693f0a","size":320,"data":"","first_seen":"2026-04-29T23:46:16.593064Z","last_seen":"2026-05-04T07:01:12.562576Z","times_seen":1784,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"a2d5cf2afb4c15330e2b30d2dc77365e","sha1":"6eaabf9a514877f96e9cbc9a8b148c8144161977","sha256":"f8cedde966253127d4273ee2fdb0e9376c717de22d12a788be989c1ed1c1ac2d","sha512":"3a4904c91d27fc8c0321b855a282f1da3293724d06d0bb127a29e158706717919dfbdb9a96da3e41676e1e795139535e6d119c2154f8e80413e8bb8de89bc607","ssdeep":"","tlshash":"e9d09586d231c5704e8c415570b72b2d795934ddd4156e13033ab07dcd3005f7415e72","size":265,"data":"","first_seen":"2026-04-29T23:46:16.637766Z","last_seen":"2026-05-04T07:01:12.491885Z","times_seen":1805,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"fb440bb0c29906c737665ecb2391d750","sha1":"9a1c56c2a43067b3b289e23feb8145b8ad191fd1","sha256":"09d9d666e5eb76db6e8fc5ff4f71a45b5ddeabe780b4d98072d0fcf6a60f24bd","sha512":"99cee29f07dccd600214c32fce4c9b0e0fcedf8ca9b2bd2432b1bfcea98b802ce64eea9e09c2eac2247c4edafeaf27ac74a426edbb6648e8ce97ed923bca2cce","ssdeep":"","tlshash":"830141cab3d55672dec801c630f7535a193b76dbce478c0ea80ed669e21c933d083a59","size":822,"data":"","first_seen":"2026-05-02T07:01:37.947067Z","last_seen":"2026-05-04T06:58:38.498874Z","times_seen":791,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"9f567505e34615fa1d71c43aee42517f","sha1":"2476d933b9f6c87a340ceed789b17c3f45d46617","sha256":"e0d1a05f1b118b13c14794502b678a377d6cb75f8b56dc803fc7ae35c9d094b6","sha512":"b3a5fa7b93904af8b491b6cfe345bdc89364df1de8a7b454ed358add74c71973fba112c1b5c56425be319130bf45fa1a2a58820884b12a961f3de6bc650a99d4","ssdeep":"","tlshash":"bbf04914e32513f4d27ba764af6f63461622060dc188821e20ec37e73cb361a42d6c65","size":612,"data":"","first_seen":"2026-03-07T00:25:55.223951Z","last_seen":"2026-08-09T15:18:51.967699Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/js/th/k7Fh94JIqt4sAfXXXewZGsK2XC2th2lRdK_OW2ln9uY.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.155.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"644647a0536bb06cf1937a72b9970f44","sha1":"88cde526087d38001e0da2faf096da9772dd3f75","sha256":"93b161f78248aade2c01f5d75dec191ac2b65c2dad87695174afce5b6967f6e6","sha512":"86943a919e7e0c30842a5918d51378fe4304a80d80ab03c8acd7b1395917d5ac1bed94b0bb76e331597449bfafe6e17296f0005bb70c09533ad5f70a6e17b273","ssdeep":"1536:jaV3za1NpDCO0pU21mwVwW2W0ZFUVl3X5X+tWmLa:YaxCREW2W0ZWVT+4t","tlshash":"ca5339ceb2e2677518d261e1005f420a737fa455ac890c9fba12e6f49eb4d47903bf36","size":62111,"data":"","first_seen":"2026-04-29T20:16:16.494059Z","last_seen":"2026-05-04T07:01:12.1065Z","times_seen":1874,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"b17eac01d7a9b1fd392e36bc24a4ac8d","sha1":"51d09ed641e0acbdf4ffe3192f4e190197f93b61","sha256":"8f312be92317066753862e3ee6d0ea43e505836598105fa984173f7e60e1f8f9","sha512":"0201bc5b707f7027cdadcbb700ffe2380b57122718debf4d64d0b30d93c2fb353aa73fffbf2ec0bb23019e1de15f5b5729a958ddb52d2e8f2886a0dafa0e80b0","ssdeep":"","tlshash":"c710000000000000000000000000000000000000330000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-08T08:11:36Z","last_seen":"2026-07-26T04:03:39.45238Z","times_seen":4059,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"3830cb252620d0a9d1b5318bb3c1f432","sha1":"f11ad60e48badfdfda4f9721710b8e3aacb80ec1","sha256":"33f724b8f67c26c1ed8d5ae1bbfe5963790de45de98263ba980b41e0693ba7ef","sha512":"e9424df19cd57212e44034fde00745c85a00daeb9dba8e8fbef68ab301804332ac001768a1fe2838d59a0c9a6ef0b4bcfad40bc67ca6fe52cad864905ad41589","ssdeep":"","tlshash":"c7100000c000000000000000000c000000000000000000000000003000000000000000","size":2,"data":"","first_seen":"2023-03-11T15:20:27Z","last_seen":"2026-07-31T20:21:00.670116Z","times_seen":11279,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"to-get-free-roblox.pages.dev/","fqdn":"to-get-free-roblox.pages.dev","domain":"to-get-free-roblox.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b73f73772a980d0b71c8097aeb93ba73","sha1":"dbd8ebdebe2e0f452407bb38a76deec742b80027","sha256":"496ed8b94f856087f1a4384dc7fa33b769c1c9439932825b506455b5bf4930b7","sha512":"a00b2f097b0624952e4c5ca29ba1c6fddd0187080cadb301185692695abe516a7d3c38d3a4d2d8f1357c0f6ffd80fb61519dbe59f028ee25fba80f30d19720c9","ssdeep":"","tlshash":"b9019eff24004c7448de19eeb2a8778ae8b6005b7d19142424194c7576a4b7603d2fb6","size":668,"data":"","first_seen":"2023-03-09T05:07:28Z","last_seen":"2026-08-13T05:13:28.25519Z","times_seen":1653,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"immigrationacre.com/c2/07/ec/c207ec84c2456af201cc563cadc36c46.js","fqdn":"immigrationacre.com","domain":"immigrationacre.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"77d2eae780579b688f8af48b5cd2a061","sha1":"671820c0c980a80c496e39110d4c479415a4d5d8","sha256":"75b099ba5ba2a53575deed1fd0a5c56bfd4886e05301761eed89b1ce91eb4366","sha512":"fbe5bbc7458bb09b6d575220cede4933d76da2b3b824156765ef1389686316407e3b6c089ed85b9f6bb1fbe796632eba903ab8666a75e9ab15832fedfefe89aa","ssdeep":"1536:2l2eABAdWrl7QJWX8jlvjw31PTz5Ysk5qMUP+04b:2dSAkrdQJoYlLwlBFkLt","tlshash":"3c93c78c7f92f0f5039a24b3232fac16f2ab1d5124fce444d903a9e5ae25319d57ad6c","size":92490,"data":"","first_seen":"2026-05-03T08:44:19.137958Z","last_seen":"2026-05-03T08:45:43.447595Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"3830cb252620d0a9d1b5318bb3c1f432","sha1":"f11ad60e48badfdfda4f9721710b8e3aacb80ec1","sha256":"33f724b8f67c26c1ed8d5ae1bbfe5963790de45de98263ba980b41e0693ba7ef","sha512":"e9424df19cd57212e44034fde00745c85a00daeb9dba8e8fbef68ab301804332ac001768a1fe2838d59a0c9a6ef0b4bcfad40bc67ca6fe52cad864905ad41589","ssdeep":"","tlshash":"c7100000c000000000000000000c000000000000000000000000003000000000000000","size":2,"data":"","first_seen":"2023-03-11T15:20:27Z","last_seen":"2026-07-31T20:21:00.670116Z","times_seen":11279,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d8544ba1b053e41368fa915864c6ea1c","sha1":"6b7658601d2015ceada87ba07dd284ebc04d4a20","sha256":"fa37de9da4b13b3a18882ece23d6bee24a329b77d488b984d6f5587ce3f0f6cf","sha512":"d7e36c01f69e7ef56146cea853a8a8e4401a9b135a7ccf3c772da80fa1adbcce53769c33edd65c22d233e5ac00f2c02c3f2c5432261bf806fef36324342d4433","ssdeep":"","tlshash":"c710000300000000000000000000000000000000000000000003000000000000000000","size":2,"data":"","first_seen":"2023-03-13T12:38:27Z","last_seen":"2026-08-11T11:45:31.351694Z","times_seen":4318,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"58fc360d5aa854ea1ef337839c113821","sha1":"87943297128e7491127c1e779e280d48f788c36e","sha256":"f23c29767b4051b1c30a5753b302bce494abf572b206cc47480a911f8db3d7f1","sha512":"486e1a0a4be367df0ca2d822315389d1cc7c21a75c81ef96a990d849c927f6f1a58f9e44625dbcebd080420b3f7e8ca64344de9f36951419a1d1fe6ec88a3ab5","ssdeep":"","tlshash":"d8d02bc07956413c4451cb790017108058678434d6298eb15612f72ad4713234e7b6e3","size":249,"data":"","first_seen":"2026-04-30T03:36:41.770562Z","last_seen":"2026-05-04T07:01:12.544042Z","times_seen":829,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e795f2b1b495c31028edb86cb4f4e7b5","sha1":"d5d0d2d9e1538e5869ff9828d64664b94d6de653","sha256":"02c0ff09b0683b8853beac78e1dd6a3af9a8e10691130f6e1ff99647756e541f","sha512":"1cba9dc68dc86057efe7d75d45a8e4decc5cc620fe727688d90c1296a4498ab19425aa6de6ed4ab88f8216c266f70e39a30bf849715ad7c174910f4414d406f3","ssdeep":"","tlshash":"6f41427ea3a4193b45fa787e21af560620726654e0158c0c813e76846cb1a4b21dbf5f","size":2084,"data":"","first_seen":"2023-10-25T23:30:09Z","last_seen":"2026-06-07T08:19:02.131151Z","times_seen":267242,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"5c4cc0a588cdcbd844a9adaeadec7437","sha1":"9f10c58c2efeeef1114dff8d423ef437665f00a7","sha256":"08faaaa0c20780b893cc868900b99834b0fe2f30c7ea2ca049baa19b27627720","sha512":"23d8c5f2597fbb462ec67a232b910735952326f6928bdee6c3b92bf26afec2018c6746a7d63d77b654d111c150c9bda54e44e5ae7756a71a8ede8b404c12ed9c","ssdeep":"","tlshash":"20e061635682707c219ba795648a1db2f415f1e118bb3b4d74ef05d84d20106e073f71","size":402,"data":"","first_seen":"2026-04-29T23:46:16.55724Z","last_seen":"2026-05-04T07:01:12.502511Z","times_seen":1797,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"96fc1fb963c70e2d9d433ea047967aa9","sha1":"a9cfb85be0ce426702d8b6b9604ccc0fc26de0d5","sha256":"b9c8156e715eea8264e5fde97b3ad2429513f59221e8477684a51cedfa55b8cb","sha512":"ef98841233a6e1854c2d004bf1b9c6930d2d3591a76304c393486d8662bc2311f543aae0ba8bae5eefc1b0dd7769a675449d8a9ae898b18ad19875ae864c9832","ssdeep":"","tlshash":"ac700088ac28280200223230000bca0c002280822200020880080882ac3200b000288c","size":22,"data":"","first_seen":"2026-05-02T07:04:31.351867Z","last_seen":"2026-05-04T07:01:12.380057Z","times_seen":815,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"immigrationacre.com/52f212bca95373aed7ead32398143db7/invoke.js","fqdn":"immigrationacre.com","domain":"immigrationacre.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7cee939f902071855c42d2477aadf2a5","sha1":"98ad4b01a1613b36d79dc0149877385473251f54","sha256":"db7443700b00f7aa59118a490223b8dc676b8a75c827396d85da3daf0cc8ba63","sha512":"ee46c293dacf4a49d6b16ecb0570a10a6a0c1e85d3bbc110b4a144981843c7dd7ed1a10d7389298e5c8e2a2ddb57c40371c0be265e83e1e224fc0cd5e0a1900b","ssdeep":"768:Uu7DFxehMHp9GzuNWlpBCHpDBRKO8doFtXj9H6sgT:nFxehMHp9zA7BCHpDBcV+fz9H6sS","tlshash":"273317887fa1b07503b67473623f9046f25c0d0856ecd8dcd087a8a87ea87e9d1b7b25","size":51096,"data":"","first_seen":"2026-04-30T22:05:07.878582Z","last_seen":"2026-05-03T08:45:53.633873Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"de070e2a9e382c7ea54d2905481a9b07","sha1":"a38944fcf0cf52ddfc74309b6f8d4391f587518d","sha256":"21d194fc7c6893a89d9e2bb663f0a627305e4d9cf2a9b9833de44fd66088fa17","sha512":"b977074b3aa1fdd54710ae19a041a6746eb108a2b30c72dfedd3d95c7f74b78e4a1718165f1d6351fff4640f8977ab29ddd994da82c3d7de0cb35ad27fd29925","ssdeep":"768:AsyhGD497WHwfGDV7+hMllJzNfOmJPmq9d8yo4Zu8w2u0hKfQhBTfN2uKfEj/2K4:XILMrOmsyxZtwr0hLNS2E5T","tlshash":"7b7364644868a872c8939407deb5ff3e9cf816790bc89a6dbcb7975c01ec6610e9f413","size":78497,"data":"","first_seen":"2026-05-03T08:44:19.177936Z","last_seen":"2026-05-03T08:44:19.177936Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/_/ytembeds/_/js/k=ytembeds.base.en_US.jCqEhtrZtB0.2021.O/am=AAAABA/d=1/exm=base,root/ed=1/br=1/rs=AGKMywEhW0-Lnggvkj9sdEAhZwS6T0ejZA/m=r78Drb","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0d775ef3b7b3052b0c492d7ce8aaae5","sha1":"65136562d3222f8283263c431523a1edf8884a9c","sha256":"6cf835db18b14acd72a21a9c2535719d487932144a1c66297193f4abba6c0662","sha512":"bbe3e9471bbd44c6f59aad8d4001373b20b9dc09f793cd962aef0bfc029b63b184f5f57ebb30f9c18dd1402ecaa3907b70c852335fca9209e467ad8f4282811f","ssdeep":"12288:D9miHLGEqYL+E8aFRV3wVQCAt1lDxBJKQhVrdN8Z:pmiZqYCaFb3wVQCAtDrdNQ","tlshash":"73d46dd4b292b0b687866d66e47f4053b17f5d42f1044878f0f66eec14f8e4ca1bab29","size":644400,"data":"","first_seen":"2026-05-01T13:17:55.952129Z","last_seen":"2026-05-04T17:22:13.694848Z","times_seen":2566,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"f09564c9ca56850d4cd6b3319e541aee","sha1":"c3156e00d3c2588c639e0d3cf6821258b05761c7","sha256":"4ae81572f06e1b88fd5ced7a1a000945432e83e1551e6f721ee9c00b8cc33260","sha512":"2ddcd5fd66f62c38135603defc728493bc9012c9ea6abc8a9823165792136513b2c53722d2a79c0d6ea31467308bbb49eb217d151d79baf4b2085f487d0abfae","ssdeep":"","tlshash":"c700000000000300c00000300000000000000000000000000000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:15:12Z","last_seen":"2026-08-14T12:42:56.668942Z","times_seen":58627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"be530615c56b94c2b41943255998ebd9","sha1":"853b8a6f28cad57a610c0fc8d4a2e07f264afbd2","sha256":"6faeb853e5fe2a3db7a230d84bdf40a0aa899f28c0d0aa744f2a048f3544a46d","sha512":"2928938a39cf5c4fbdca72e9cd746050b335ff10866a7f6a8082cd1fb87427492e24a1e7b4383da1724ff908ed2e261ff14b58ac544c5080028f96cf633941fd","ssdeep":"","tlshash":"16f081cee0bdb5db9a235694045b0439523fe950dd170d08c15341dabc75f39c0a2f6a","size":553,"data":"","first_seen":"2026-04-30T03:36:41.738415Z","last_seen":"2026-05-04T06:58:46.280483Z","times_seen":803,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"a5c244fde4e6f1ade71beed5c11edb59","sha1":"6bc634a7f8505a2ce340807aecfa1e50c2a578b3","sha256":"d561924e4295103128924509bbe71b3eed6625592d75ba3cc35c365189d6081d","sha512":"6ed66e7a246ab961cedd150553b6a9aa692988813dd4ee30c8b7d78d80bb8765a828112c6860d08eb382cae34e22bdd76ecda5ee1c9c7ee25a49b1d2639474f9","ssdeep":"","tlshash":"966000300c000330c0000c00000c0000003300000000003003000c0000300c0000000f","size":13,"data":"","first_seen":"2024-07-23T18:45:20Z","last_seen":"2026-08-15T21:45:01.65935Z","times_seen":177045,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"4e226125e429d79c4c368581aa455eee","sha1":"79fa2f523a0ffb2867b44afef3e154c3dc1fb5cc","sha256":"d50c6291d73f2c5ba6b2dc494e09fe070ea0a6c0c4ce3b3c6bc4156ab944dd72","sha512":"06a7818b0a33701b90d20662e1d1a85f90f78af228c2efcf6717d56f93b7502a5cd540d471f113376717d6bd8a8b0b9f198e16a65d6412f3f946dc0e6c87ed28","ssdeep":"","tlshash":"96c08c69d3040b704270a810ab0b3b4f253700228020c845b210a60038d0b078d703e2","size":145,"data":"","first_seen":"2026-02-05T15:28:48.153036Z","last_seen":"2026-08-15T21:45:01.567105Z","times_seen":114528,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"45000b022d8948e563f50bd7c3c60936","sha1":"57c338f7ef1a042567fa1f33afd607639ec9e9ab","sha256":"7b080ca5e85e3a227ea78e90a354b51ba86ec9da8cd760ec8145eb4bcfe14d05","sha512":"0e80d1c50c559302050759e1661d6e9e908294c8de7f95726ff53e7ea2531be76cc8f0f4737321fe9dce28ddb2c8b998bbddbcd958843a19ee0dfb4d96ad4b30","ssdeep":"","tlshash":"ae7000883c0c2082000232a0028f8b080823a08808000e20088082820c3200aa022a0a","size":25,"data":"","first_seen":"2026-04-29T20:16:16.590195Z","last_seen":"2026-05-04T07:01:12.568587Z","times_seen":1867,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"17b1d70602916835e8c88de59f0b3764","sha1":"e044eebda6361e65922d2a52bd920627ebd5043b","sha256":"c4888cfcf936cb54e2acf754adaf35155c071f1ff6a11c6532f4ed904976f3b4","sha512":"36c7da3f773943bc18dda2db513cc4622d2fab2d5f47069f1cf4a8f251d87b7214cf0d352cad23485cdf3a513685cbcb77854cbac1702b9f305f4ead19ccf3b4","ssdeep":"","tlshash":"c710000000000000000000000000000000000000300000c00000000000003000300000","size":2,"data":"","first_seen":"2023-03-07T01:02:15Z","last_seen":"2026-07-15T18:12:11.366504Z","times_seen":3612,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"f05e43947edbff3f8b97071dd807598b","sha1":"d4db7398146d4854ec2077b65359b7ec10a26379","sha256":"ea29aff4f763a1dbbe46bc514fcb1b30a3242b07a477117fc79e2e476c94e449","sha512":"d4dba6e5ced10525239fe1d15300b470be594cfeca9eced98bb36887516044a4a2e92b41968139689a4491002c3daaab7bd317adb26c568a90174295e6452ead","ssdeep":"","tlshash":"c71000000000000000000c0000c000000000000000000c000000000000000000000000","size":2,"data":"","first_seen":"2023-03-13T01:43:34Z","last_seen":"2026-08-15T06:13:30.025721Z","times_seen":5360,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"51792c67c588ce8139b246f015ed8a85","sha1":"d3148f014e0f4790ff65a8004585d17ed319833f","sha256":"6f70d853ba1dee4fc189490cfe4b6b1ab59f5853344cd85576bd2a4af2b506fe","sha512":"963ef7a25d5437d1a045dedfe34afbab41db4c620e4378606ca3b7b0c4219e51fda11b9b0e0b761093eda33aeac0e532a27b3f1a1ee110c13ba1433cdb28c067","ssdeep":"","tlshash":"cb60003f03000003300003ff0c0cf30030fc0c0c000c033c0c003330000300000c0000","size":15,"data":"","first_seen":"2024-07-23T18:45:20Z","last_seen":"2026-08-15T21:45:01.625429Z","times_seen":179148,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"f0e976b756b6afe7f40bca206a2d7150","sha1":"db9bee9a7bba93a60330ec5ef1334d9c164fcd56","sha256":"029b84af88c5d6ced58173997a15fa47011e198e5449027d87e2f7b871f332c2","sha512":"486596b8b7d88539b3147ed55749794ab08962047191f33ff9915fd4e4a8a9a24bc164c0d44f24357b6e9dd72d1ccd88f981aa0cf2c7df585a83000d4baccc9f","ssdeep":"","tlshash":"3f8000883cbab30e8222283223ab200aa2ae28c232088e00a00080803a3003a8032c0c","size":29,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-08-15T21:45:01.72828Z","times_seen":249600,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"fe81353f0c3e106bb59598d92fd49a12","sha1":"cd09955588a1d236a25a76d3f774418a829cb5c4","sha256":"a366197fa3629365ab26195a99befce51c8f8ec90252df02e0b4cb44bd52d020","sha512":"91e97b195ebad1859d88fadc65abbc0fa276dc9677360385b98b783ab0530df5b002a775fbaf9e7d410fd4eae4110ac653c4459c3fbbc125c7e2b93d5082fc8d","ssdeep":"","tlshash":"991135251b715c27806a296232dfb309b8262372583c91dc8a81e365933661bbc3235e","size":1033,"data":"","first_seen":"2023-06-13T01:22:29Z","last_seen":"2026-06-07T08:19:02.155739Z","times_seen":241207,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"to-get-free-roblox.pages.dev/","fqdn":"to-get-free-roblox.pages.dev","domain":"to-get-free-roblox.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3043924babea44e8e94b0aa19f11d89d","sha1":"c6ccf78fba768952994a37ad33a8309fe9454b5f","sha256":"5f96af838dd14f1b76712ba6f84df12026e8c0431a381c5e062361d390970d36","sha512":"9c78e351a02bfcc7181420b6ec071906e24734f3421c5d1b8e4a92a9973fd5125242fb6b22d6cfa53dea13a2aa99685055b52bcc8cc4a2fe88c8e0742621b6c5","ssdeep":"","tlshash":"7dd02bb1d12c0332029da14a7423c394713434daf3423080a01f87f950c4f96d41fcbd","size":273,"data":"","first_seen":"2023-03-09T05:07:28Z","last_seen":"2026-08-15T10:14:24.498833Z","times_seen":1703,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"173a08c5d6adc5c93611a599bcb2c717","sha1":"735a7301e66ae2c3584357f7bf0bf09eefb62df0","sha256":"271e6368679a21c3416e2a0325db33d6bc445d601c72a49914081b5efd0cdf3f","sha512":"cf15a9aa7e406207f3b85c7ab7d6453fd2351616b4dbb2db767ad854f866ae8256045b8cb74948f44d09fedb6c200c56fa2e2ab83d1ab997f5b0068edee7349b","ssdeep":"","tlshash":"b0800000c08a0030c3200c082008c28038802002a8f2002208200000a0032fca0020ca","size":26,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-08-15T21:45:01.572161Z","times_seen":261006,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"0fabd84f9ed28eb00c685d682aaa5880","sha1":"c514d5b985bb309f0f18194ee791c1d43c6ea153","sha256":"ca1bfe931ded29ea5179b7b222403353ac5f65ff6cd92946201d1f491580494d","sha512":"9bbd97a6b97ef4f7ac3fa93bdcbc18573d63c697a4fdd8a8f226dc10e8f8a95ba7a196c7da3a7f8c70b990a74c11c9e6c31bf2bfd5e2250aca0be81fc7426832","ssdeep":"","tlshash":"3b9002886043b4a1459ab8b5527f1125b915bc8418545c3740001044b859019d011d78","size":49,"data":"","first_seen":"2026-04-29T23:46:16.522103Z","last_seen":"2026-05-04T07:01:12.3993Z","times_seen":1810,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d4300b9969fdbf4f2aa53c10078df43d","sha1":"bde1d008b088685f4ba1760ff1d701e6b09acde6","sha256":"8348a41a1a7c204f401286a9007f570f869b997757a1864e95c517b5814d2f38","sha512":"6b1335ced591a21c0e83829177a660702a65701d511be8df0289ff8c322a4cdcc03abdc3b84eace778ac4f374b3c29c3787ca58fa630c0c9badf0595650adf68","ssdeep":"","tlshash":"7aa0125c0c444d5600225b300407431810b1300300c0451240dce09313752df0016c06","size":77,"data":"","first_seen":"2026-05-02T07:01:37.964954Z","last_seen":"2026-05-04T07:01:12.584679Z","times_seen":818,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"849b9fe33364f9255609e515e77492c7","sha1":"9a9cf3e49d4035d2aa587a13965a9d0df54d801b","sha256":"10cfc8d496e1fce4ba1446945bd6f7f6735284413d2b323863305a3551233b2e","sha512":"656b474a578f3968b529cb10f73de58c67b40f4a7ad3f8f60d839c11b2800ab6aa458b75b1f7e63749d68f189065828953f391bec91338d6c8a264ca8207edb2","ssdeep":"","tlshash":"26d0a743736e2a9249093e344d07e5921932f4143e4404ca5295dbfd0d5004756e6e3b","size":243,"data":"","first_seen":"2026-04-30T01:20:30.069009Z","last_seen":"2026-05-04T07:01:12.554198Z","times_seen":770,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"02e356b1199fbff1282a6f138787f8be","sha1":"d0e11076c55e02c40114d85abd44984cce0c81cb","sha256":"e00ced4d645ee0289a7536f2affaef3239a1c50e326864b98875f30e3bdb39a1","sha512":"0351ee9219e3b794b5c7873af4ce98ea840fd97359808272660e83edb7d171142f47fc40379f11d07f677b332477fd4c7a1c9cf3b3a6d9084ba0cae28bb2ea29","ssdeep":"","tlshash":"bbf0a37bd81e117204ba3095d1baeb5e1fd6740b29c0f1d3e015b0a586778554067c04","size":443,"data":"","first_seen":"2026-04-30T03:36:41.705787Z","last_seen":"2026-05-04T06:58:38.459638Z","times_seen":796,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"to-get-free-roblox.pages.dev/","fqdn":"to-get-free-roblox.pages.dev","domain":"to-get-free-roblox.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"349edacf65d0ff272bf6fd11233c1ead","sha1":"34b1fdbc95156d9d6b499a739a7ce1f8b57926b4","sha256":"82eb474cb30703539541a5d27d13890cc5d5af5633f642fb4d24666b4ff98848","sha512":"c474a12003f50e2206febb6e7d8fd2ca37e5dfee3b949c9fdbf5288207c1932bcfb5b78ed46706ea8675c34ed493dca4c05e3886a5685a6826f82307630581a3","ssdeep":"","tlshash":"2ed0c23a1d110b7104c619ea38d8a6987a3d384577293450e47ed900a0a4a898063ff7","size":276,"data":"","first_seen":"2023-03-09T05:07:28Z","last_seen":"2026-08-13T05:13:28.256693Z","times_seen":1642,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"f1290186a5d0b1ceab27f4e77c0c5d68","sha1":"aff024fe4ab0fece4091de044c58c9ae4233383a","sha256":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","sha512":"aa66509891ad28030349ba9581e8c92528faab6a34349061a44b6f8fcd8d6877a67b05508983f12f8610302d1783401a07ec41c7e9ebd656de34ec60d84d9511","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000000000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:15:11Z","last_seen":"2026-08-13T14:13:35.722405Z","times_seen":88478,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"55e159e3926a53b3747df8fe094cef7b","sha1":"21343b4293529e68e2de0bd413f6eace8177a5e4","sha256":"1f69387cf5a276775b7f3aad2d3c7e4dcc6cbfd19de9efa118d291c320d5137e","sha512":"38d7d5845fb603ea5ad677db4891f90b20c880cb8f57279a41d8a6f0cb9654ee356d63499598d861e1ff78861dd713014f59df06a50a72c23ce958e1d7a09bbe","ssdeep":"","tlshash":"7cc02bc275601148c381507a84360510669f0484c000c08081c7f4adb533326483cf22","size":130,"data":"","first_seen":"2026-04-29T23:46:16.523844Z","last_seen":"2026-05-04T07:00:28.548073Z","times_seen":1777,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"94059bb88074d280b6902283edb526c7","sha1":"4f3bf4fe5c453c85c249ca3d76044cec4a8e7d4c","sha256":"924e2294eaf7f56dcd0db4fafac1895ab1f73f118bb7bb2d8b976f92287054ad","sha512":"8ec9c5f1616e88ddf96bf9c365d404ee637ee33d9f163d3535ac00d1acf55f49c27ba0ba0586bc847eb102155d60691b0693e59606c7485c6af07614c836e8f9","ssdeep":"","tlshash":"c710000000000000000000000000000000000000000000000000030000300000000000","size":2,"data":"","first_seen":"2023-03-08T15:47:57Z","last_seen":"2026-08-07T05:53:37.938188Z","times_seen":6302,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","size":85379,"data":"","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-08-15T22:04:29.242352Z","times_seen":26554,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"4007f63e6b95badc1046f9cf84d5784c","sha1":"32d76b7c27fbad0ab7043101a1a39cf253d3075c","sha256":"a59cc514d3206a112b111bce1c72eb965541b470d57e20f8abf42fa2c13cad96","sha512":"799ace1657e7b8f30c27745aaeab1ed435ecece2a5c614d914d1eb95743e6ac0ffa4615e546e0b1f93ae45dd288a1956ee906fb9821e743b1d7eae5e0e4afa90","ssdeep":"","tlshash":"a6d0976210cd4008de123e4a2583f4704e22b003111cefb28005330d5430006c13f80b","size":233,"data":"","first_seen":"2026-04-29T23:46:16.499541Z","last_seen":"2026-05-04T07:01:12.547713Z","times_seen":1818,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"2db95e8e1a9267b7a1188556b2013b33","sha1":"07c342be6e560e7f43842e2e21b774e61d85f047","sha256":"acac86c0e609ca906f632b0e2dacccb2b77d22b0621f20ebece1a4835b93f6f0","sha512":"f10127742e07a7705735572f823574b89aaf1cbe071935cb9e75e5cfeb817700cb484d1100a10ad5c32b59c3d6565211108aa9ef0611d7ec830c1b66f60e614d","ssdeep":"","tlshash":"c700000003000000c00000300000000000000000000000000000000000000000000300","size":1,"data":"","first_seen":"2023-03-07T01:15:12Z","last_seen":"2026-08-13T06:59:11.011693Z","times_seen":57941,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"08fe4e2ece50e490fa2f583345efeb69","sha1":"5b40e78b9c7519d5c027f76bced20a62462ea70e","sha256":"4c9820eb68534e53f967fc2238f51a7f3ffdb9bce9e4edabff90f5971fc8e90e","sha512":"bfe68407c91461a784751992f000bae59a47fe7cf30bfed74ca17236c2a96e3908ef6a7ce3aee5eed7837d5dddb54499f1b00b376a3687605fd2825b9586deba","ssdeep":"","tlshash":"52d097b4a0088011f0179a4a34cba82206e4600330a03b21c86cbab908e2e3ac20ca62","size":236,"data":"","first_seen":"2026-04-29T23:46:16.532742Z","last_seen":"2026-05-04T07:01:12.42655Z","times_seen":1821,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"4c62bc4fd3c4e105cb3fb62fb748d59c","sha1":"f6e2d1e74e35ec4c4740ba02e890b98bda11417f","sha256":"9f4a6a370cd350425d8ac08047e7646116468672e99765ca198e6d463ee5286d","sha512":"5cb125ce0b7fdde81c6df58f6e27943a130f0d9e2a366d94ea8ed926da635dfe2b2c5778a14ed99bb35c7b2a48dcd12090cbac18370611d1c0438e1c2621efb4","ssdeep":"","tlshash":"6cd0129b738060e3d797fea709580020c1ef0b8402d2753d42d5d51070fe9ce83461e3","size":203,"data":"","first_seen":"2023-06-16T07:31:00Z","last_seen":"2026-08-15T21:45:01.729065Z","times_seen":193710,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"b9ece18c950afbfa6b0fdbfa4ff731d3","sha1":"c2c53d66948214258a26ca9ca845d7ac0c17f8e7","sha256":"e632b7095b0bf32c260fa4c539e9fd7b852d0de454e9be26f24d0d6f91d069d3","sha512":"b2396a002fe7aec008808687d7cbacb340b7f7a090008382f3c95870f6fb10415f61f5737c102d4bfec58fe525407ea2001e761dab1da8a501d9523921f0ec21","ssdeep":"","tlshash":"c700000000000000c000003000000000000000000000000000000c0000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:02:18Z","last_seen":"2026-08-15T21:45:01.60214Z","times_seen":54041,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"c4e2c40a3dd10f54a52a744cea85f113","sha1":"6116f50384c62a866b6cc0d9019a1e5a284d0828","sha256":"e8d37e2c2051ff5a9e598febd5e838cb5ce9335158833aac70b2a345e4e8da30","sha512":"b05a70fcb468aa633a6f99c58092bf0e4218b36f984dfd3d164215ec439806c48a0ff91a5986f318f936cfdfe8f2afa57450dfff008eaf947adf4a95a7510efb","ssdeep":"","tlshash":"0ae0dfd434010337109285b8e067236baf23e49e971e4869d646dd228e75e8b1eafd23","size":352,"data":"","first_seen":"2026-04-29T23:46:16.493921Z","last_seen":"2026-05-04T07:01:12.51341Z","times_seen":1794,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"4a8a08f09d37b73795649038408b5f33","sha1":"84a516841ba77a5b4648de2cd0dfcb30ea46dbb4","sha256":"2e7d2c03a9507ae265ecf5b5356885a53393a2029d241394997265a1a25aefc6","sha512":"acc28db2beb7b42baa1cb0243d401ccb4e3fce44d7b02879a52799aadff541522d8822598b2fa664f9d5156c00c924805d75c3868bd56c2acb81d37e98e35adc","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000000000000c00000c00000000","size":1,"data":"","first_seen":"2023-03-07T01:15:05Z","last_seen":"2026-08-15T21:45:01.722172Z","times_seen":78142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"800618943025315f869e4e1f09471012","sha1":"e69f20e9f683920d3fb4329abd951e878b1f9372","sha256":"f67ab10ad4e4c53121b6a5fe4da9c10ddee905b978d3788d2723d7bfacbe28a9","sha512":"d21ec9146c3c327211b8b7fd44003916b938d751d458fece25ef51fa9c8896c97ceb22d032e6dc7388c6143a3b3157764949a7b2cbb062e005dd5f009310ab00","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000c00000000000000000300000","size":1,"data":"","first_seen":"2023-03-07T01:15:05Z","last_seen":"2026-08-13T14:31:24.950316Z","times_seen":56232,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7085dfd1b997e610a6601c2dd01cfeed","sha1":"934cf5de2320804da97705988b8e005d45bfe7a1","sha256":"d1accc9b087e690ecba7c376bda00c96c65ccf279032ebfd473f4e2d0badf7bc","sha512":"68183510b841b1dd7db8fb2500729c4d457887232fe4a314417e81ffd069fdd8c0be6feea8d200f3390c56948f75056452f75e2ed5e2051d5796eafa104b5c62","ssdeep":"","tlshash":"2b9002846c5d9a7a753138b101e78a1891a258c254559620d9f8619907710cf7512c95","size":57,"data":"","first_seen":"2026-04-30T03:36:41.856123Z","last_seen":"2026-05-04T06:58:38.493639Z","times_seen":795,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"157066c5f7c89152fd9b221213b402a3","sha1":"e57096dea7b411910b74c756373a098960429788","sha256":"eadc8accdb4dbcc43fae4552f467cea1802d4154ced60640c89f9fa1a93a617d","sha512":"f385b568de4897361df11ccccdd8fb64cf767afe6fd3fa884013b41736fb91e3e675bde4b0d8dafde65aff4341d08420292ef2d42e05fb84d4533e72c8c33625","ssdeep":"","tlshash":"99b012b8bc582e18005641a1640f671901e6002b40d5ce25c280bc422b2804e41529ab","size":96,"data":"","first_seen":"2026-04-29T23:46:16.633171Z","last_seen":"2026-05-04T07:00:28.571024Z","times_seen":1785,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e4b5cd115b5e2fa0e86ec63dc68de643","sha1":"575aa28b803975ed5405b98fc63ff8cde19d0574","sha256":"5d2518cf57af35fc513722b14bc8d7370c8884d03c2a76089a15e047d8b4eae1","sha512":"23f408126233d0c887cdd4844743366854126f4d2ed9644c9e583c65ae4e054ae25efe3243a4f1e5c7281685ff3aef0ecc0bf63ed0b412b46570e468cbd69022","ssdeep":"","tlshash":"b9a012941e183f2004c44004040f4768007c0047c0556c00913465a0153ac8700b5815","size":82,"data":"","first_seen":"2026-04-30T01:20:30.166896Z","last_seen":"2026-05-04T07:00:28.488583Z","times_seen":822,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"64d8c858156192a16a990983d35fb3f9","sha1":"1ae03179ebb040c510ecf6f785c0002f21932433","sha256":"bdfd55577f7056ab007e88fcfe9352e9805fc05f504131193cbe81c001162fd3","sha512":"e6c8b62010e24ed3c7a59b3d92aa3165bc2270274b755e8ecee06a238fe29682b08510402a6e8b7b3f85027d7e403447ed4694ec2bc43c136d5c0f1cb1b3f23a","ssdeep":"","tlshash":"cd60000c3f003000000000030000cc30c30cc3c0c0f000f3c003000000000000003f0c","size":15,"data":"","first_seen":"2024-07-23T18:45:21Z","last_seen":"2026-08-15T21:45:01.600305Z","times_seen":174778,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"cc4e68d8235cdcbb751d632c7758372e","sha1":"398925dbd74b8d1ea854974fc265e86092f923c4","sha256":"708876268227f19e212822deabc3428f74345bb4dc27646ae80bc2d1094e57ec","sha512":"993a46e97b61ce373ce27bec5b3b11cbac0fed2b7b4288fd205857534a323286fda81bba03b02e9a3b5a7222886ebc707217f14c1f13d242293a15923da35587","ssdeep":"","tlshash":"8521e77e906dc2dd136b8a9606bf0278eaa3481fe0531b2510347e50e0321340706fd4","size":1266,"data":"","first_seen":"2026-05-03T08:44:19.196417Z","last_seen":"2026-05-03T08:44:19.196417Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adxpy.pages.dev/ads.js","fqdn":"adxpy.pages.dev","domain":"adxpy.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"28a8ee5b231d6993efeaeb288506fba6","sha1":"185e282511210752916a8d4fcc28642f02e4dc5e","sha256":"81496c62f33c7090e09cd8ea1d016980fc4432fb6ca00450ccea59b926daa7e1","sha512":"b1cf24abc589692314ada61a5a266b280ce2ad1297f5be58b94ececb90e2d718021795ca3998cb142e5937cff260d4aaeaffe5759bb8e67dff20e76bec939658","ssdeep":"","tlshash":"cb81011920a100651eb7236a7be3625dfba43053b81281a4bdccdb185fb9d1091f7fed","size":4034,"data":"","first_seen":"2025-10-25T03:17:17.993778Z","last_seen":"2026-08-11T01:12:56.750204Z","times_seen":414,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"7d0463f4857f55f98e1e304862b8b1f8","sha1":"24d71875020e19223b8f095f929929ac5196546b","sha256":"6fa3bd06cde8aec230d105ed08e7107225f1bf994395c64fdba8a5995d1aa19a","sha512":"8dc020909002c34e2c2daacdea0869b599a3c8ca477f7a0883c11106c14a8c268d269c7fa74b2077755f73b482e69927f46192ba11ce71737d55e0b816d72a84","ssdeep":"","tlshash":"4601440c06047d9ce9069cdccbc6a6619b9c9267be413125f82f494dbae3bfb9870857","size":684,"data":"","first_seen":"2026-04-30T18:35:45.004034Z","last_seen":"2026-05-05T22:32:28.559176Z","times_seen":4018,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"79d749842789ae086d4f562a225dfa12","sha1":"48c1dd81aa1f6034f0567961c25546eaa25d76df","sha256":"c4edf5393ba8ff3074a5dc9a4c01bc26023ceba2f3b06064fc913130c04b5e05","sha512":"dd2b676ed33d75abf75f9c124c05cca364c695eb4bc66abe5160d67f8bb67ef6cdb66acaac9ec238e9d14cdd4ec416fe6686d827ce24e73c6588785f691edc45","ssdeep":"","tlshash":"16700088ae28280000233230000bca0c002200822000020080080882ac3200b000380c","size":22,"data":"","first_seen":"2026-04-29T23:46:16.623746Z","last_seen":"2026-05-04T07:01:12.577657Z","times_seen":1793,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"6f8f57715090da2632453988d9a1501b","sha1":"6b0d31c0d563223024da45691584643ac78c96e8","sha256":"62c66a7a5dd70c3146618063c344e531e6d4b59e379808443ce962b3abd63c5a","sha512":"f14aae6a0e050b74e4b7b9a5b2ef1a60ceccbbca39b132ae3e8bf88d3a946c6d8687f3266fd2b626419d8b67dcf1d8d7c0fe72d4919d9bd05efbd37070cfb41a","ssdeep":"","tlshash":"c700000000000000c00000300000000000003000000000003000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T12:09:42Z","last_seen":"2026-08-12T12:38:45.011831Z","times_seen":61475,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d0a14e0bd1bb118664031b02595ec091","sha1":"37191b4f2a36aa9db15497b095b72ea9e7ed6f5e","sha256":"0a3c1e627991f8c4f7ab13d3df69f568020cf3ba102e2b999a94a273fc92ba20","sha512":"cfabf960754ad113c4e20778516ec732294bef9d2dc3e134f2afddeeece9867a0d4a0eec32643ef290a1328d4feb7bc7694c7010087f23e603a00cde646e4f86","ssdeep":"","tlshash":"8ba0128dac1c58001d52540014030140023900836061153dc56af0a206710c50065c87","size":79,"data":"","first_seen":"2026-04-29T23:46:16.525344Z","last_seen":"2026-05-04T07:00:28.513986Z","times_seen":1781,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/af/25/da/af25da8381e0bd0494ba4018c76898a2.js","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c084358037a4f809089e22f1c2c1c457","sha1":"37df93309a57c211d5636b5135ab943dc0ac54ac","sha256":"243fb44c29b49b21097ea5d2077d691dc7f5166219ad9549013821c7a6c43209","sha512":"b7fa3b94b6c3a08647f26f83639a453851f5191944037ea6c9383ec55e3261859a7ff21e7cfd5c076b1e7d1771f783dcb26809c19f3614ae5393538c6edc99a7","ssdeep":"1536:2l2eABAdWrl7QJWX8jlvpwF1PTz5Ysk5qMUPKLyF:2dSAkrdQJoYlBwfBFkhm","tlshash":"8793c78c7f92f0f5039a24b3232f9c16f2ab1d5124fce444d903a9e5ae25319d57ae6c","size":92468,"data":"","first_seen":"2026-05-03T08:42:10.131198Z","last_seen":"2026-05-03T08:44:19.149421Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"12d082a5d277c179bcfc2c45f99b425f","sha1":"68625ceade7129d39193a039b5ea67288c5ddbe9","sha256":"4902b81593c70ca1bdea648da34ee3a11dd8b37d89e8c654ebaf68df9174ffeb","sha512":"5a925993680ccc0d98aa547a3db05a76dd4488a5b27b0b8ca30caccb266f9874cf3589fbf3a12af9796caae69d07bdf0438a580a53a2857505ae4f04ccd15f3f","ssdeep":"","tlshash":"1ca022cff8af3030080aaf220c3bc328b2be20022082ce00ea2000c30b3c00c300b0e3","size":72,"data":"","first_seen":"2026-04-29T20:16:16.606343Z","last_seen":"2026-05-04T07:01:12.385325Z","times_seen":1868,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"149aba7f8a0e4fc7de8c4c7cdc7b4564","sha1":"ac6e69df9d41355dfdbbed8c7fd84d8967c241e3","sha256":"cc7a31a68f238488bb8d153d4f13cc07017eb473b49dea37f023726007e0d6da","sha512":"8372a77488474c7fdea8ea13e211d4438f3b5fe0d1ddaf0ca17e82fa0cdd83fd2282174af66fcfd77cf037e661d094b4d9eaf89b7184eae71a101f675559c546","ssdeep":"","tlshash":"ffb0121e1b18e2b680827245c46b4252fcf61d644d482c1cc361109804f4f8100dff3e","size":109,"data":"","first_seen":"2026-04-29T23:46:16.504655Z","last_seen":"2026-05-04T07:01:12.405401Z","times_seen":1865,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"0a40e3c91a3a55c9a37428c6d194d0e5","sha1":"560040c54a3bfeaf24c4a4096cee1de719cd87cd","sha256":"11fb682be0a0233d5fb899721ecfc1827d20f0d2ff2e093310efa61efca8af1c","sha512":"8a342b674710e02bb0b06a7bab7212b2fd44828a21ebb17bbb3d3a74adee26d8e0d213e6a93bd6e47fc827a671e06bca3b4e2289ece56dc754164cb1a9083030","ssdeep":"","tlshash":"c710000030000c0000003000000000000000c000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-10T11:48:59Z","last_seen":"2026-05-19T06:47:10.323507Z","times_seen":2160,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","size":85379,"data":"","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-08-15T22:04:29.242352Z","times_seen":26554,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.nightdestruct.com/sb/ssp/vpn/classic-push/small/js/jquery.min.js","fqdn":"cdn.nightdestruct.com","domain":"nightdestruct.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4a356126b9573eb7bd1e9a7494737410","sha1":"8258d046f17dd3c15a5d3984e1868b7b5d1db329","sha256":"22642f202577f0ba2f22cbe56b6cf291a09374487567cd3563e0d2a29f75c0c5","sha512":"005c3102459dbf145df6a858629d6a6de4598fafe24cd989d86170731b0c3b3c304da470cf66bfd935f6db911b723df0857b5ed561906f7f1c5c4e63ed9430de","ssdeep":"1536:/P10iSi65U/dXXeyhzeBuG+HYE0mdkuJO1z6Oy4sh3J1A72BjmN7TwpDKba98HrZ:++414Jiz6fh6lTqya98HrZ","tlshash":"dc83d6d9b2c67062977734b851bf510bb17a98dab40c8c60f0a4d8e47eb4a8d517bf2c","size":84380,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-08-15T20:54:56.438353Z","times_seen":20127,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"to-get-free-roblox.pages.dev/","fqdn":"to-get-free-roblox.pages.dev","domain":"to-get-free-roblox.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"558c3779ce5aac4481c86687cd8f15c3","sha1":"474fa56198ee722ebad4041dce2dcfc716fd923d","sha256":"7b2515a2c400be25e6daa78e4c6f35f43d67d244acb76818f1599f815b1995a8","sha512":"280f5da312b232e8638235a1b6094abc4abf38d94b8c327c668a848d830d0fe94d2b2830fb53be53076a724286b3c5b3f290f0e240267a71a57bddf00c8cd6e2","ssdeep":"","tlshash":"e1019c3d326407bb22ee0e3b23779e5476732844b40210b05e2d9da86410df112afabe","size":797,"data":"","first_seen":"2023-10-28T10:41:14Z","last_seen":"2026-08-11T01:12:56.76846Z","times_seen":421,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"26652d91bcd6beee3afeb783c34cd38b","sha1":"9144f0001af5f37b01a76738fe34d589bd55587e","sha256":"a171e692c683d57a5dfea8c6d8b2611bbc3d0c4e35d6fa61cb2e3a9c3edf8302","sha512":"d5f5673b167d64d56a214410568681ffbf3c95ebd97a3a0ce987ed8d6095e283ab71d4a0b125af28e7bf57917b342a4cc95c823faa6e88115918854079135d27","ssdeep":"192:yzEjQfb/44Tmlavb+Nvyv8kYh0sxVjocbVW27sTM73Mc3Udq6bRXnLNy9nwQiFJX:+OQfbwxavBv5YisxVMcU27sTMDpXiFJX","tlshash":"9d22b70fa39579fcd7c15598b7a36b036cf4821b53082b1988cba0582cddf5942ab9ed","size":10007,"data":"","first_seen":"2026-03-19T22:23:51.236573Z","last_seen":"2026-05-07T21:22:57.902944Z","times_seen":34607,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"931a965de737a1e1a939b7d1c5376b6f","sha1":"afc076b7c6a5e105f3c690100043b62a9d03bf3c","sha256":"c18ae437cf67ad5084b69ce1a36cf6a608a3544b8aaf718da6d1e1c8b03be032","sha512":"82595080a4e326b481a896553a5a44829494a6246b8039d567b1be0fcc26b84e76f4fdbb4c1b1d5392b76623f2a622e501a2c93fbf8f6d35589b1e1e5f9322df","ssdeep":"","tlshash":"28f081cee0bdb5db9a235694045b0439523fe950dd170d04c15341dabc75f39c0a2f5a","size":551,"data":"","first_seen":"2026-04-29T23:46:16.512784Z","last_seen":"2026-05-04T07:01:12.546227Z","times_seen":1794,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7fc56270e7a70fa81a5935b72eacbe29","sha1":"6dcd4ce23d88e2ee9568ba546c007c63d9131c1b","sha256":"559aead08264d5795d3909718cdd05abd49572e84fe55590eef31a88a08fdffd","sha512":"21b4f4bd9e64ed355c3eb676a28ebedaf6d8f17bdc365995b319097153044080516bd083bfcce66121a3072646994c8430cc382b8dc543e84880183bf856cff5","ssdeep":"","tlshash":"c700000030000c00c0000030000000000000c000000000000000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:15:06Z","last_seen":"2026-08-15T21:45:01.603073Z","times_seen":74798,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"c1d9f50f86825a1a2302ec2449c17196","sha1":"7cf184f4c67ad58283ecb19349720b0cae756829","sha256":"44bd7ae60f478fae1061e11a7739f4b94d1daf917982d33b6fc8a01a63f89c21","sha512":"9032fb94055d4d14e42185bdff59642b98fe6073f68f29d394620c4e698a86fb2e51351ca6997e6a164aae0b871cf789fbc6e0d863733d05903b4eb11be58d9c","ssdeep":"","tlshash":"c700000000000000c00000300000000000030000000000000000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:11:48Z","last_seen":"2026-08-15T21:45:01.597689Z","times_seen":97979,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"61a6f2652a0b6db05139abddb9b96ab7","sha1":"05548eab56f32db3c8c42fd2487a3f3b3ccf0ee1","sha256":"cc6e0d6af3dc4f620458aa79c4f4c0631ebc1bd55a148f5e9a06ea8874885831","sha512":"f2f89b1252cfe849de0cb4e8e8b7ee29cf99c563c5113ede3c45d470d5d14c45e0a3e30e560a79d14bfd4c46943c24a8444a1e81e4a0e93addf71ebdeaccaef4","ssdeep":"","tlshash":"4780047cdd4c5c350f157415001740441177700d50150005170004c44f311c5140fddc","size":38,"data":"","first_seen":"2023-03-11T13:53:37Z","last_seen":"2026-08-15T21:45:01.679334Z","times_seen":270213,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"17b1d70602916835e8c88de59f0b3764","sha1":"e044eebda6361e65922d2a52bd920627ebd5043b","sha256":"c4888cfcf936cb54e2acf754adaf35155c071f1ff6a11c6532f4ed904976f3b4","sha512":"36c7da3f773943bc18dda2db513cc4622d2fab2d5f47069f1cf4a8f251d87b7214cf0d352cad23485cdf3a513685cbcb77854cbac1702b9f305f4ead19ccf3b4","ssdeep":"","tlshash":"c710000000000000000000000000000000000000300000c00000000000003000300000","size":2,"data":"","first_seen":"2023-03-07T01:02:15Z","last_seen":"2026-07-15T18:12:11.366504Z","times_seen":3612,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"219505d4d5ae5b145370ed3cef98cfa3","sha1":"89498e7304c8074715c729700b3955fc065531b0","sha256":"d298bd11845e65f3a66d13d3a5ab32c91d5430be6dd23c2bb70ef16c03e21751","sha512":"c169611018ff9ff3e5d894a922f07106d329ca6d9668b9dab35bed80b825bbe371edd8cbb5a63171e6f300470e690bf74d7704b7109cf78b286207e396916335","ssdeep":"","tlshash":"314000000000000000c3c000000000000000c000000300000030c00000000000c00000","size":6,"data":"","first_seen":"2024-07-23T18:45:21Z","last_seen":"2026-08-15T21:45:01.614376Z","times_seen":178018,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"7c0c9539f4e9f23114e2f4536c9bcef6","sha1":"2e5d2f46c89cca7dec107083096313ce691af40d","sha256":"a93b13d393d9b5dbf6fb6285b83817cf0e9917b1acb9e7886c73d3249ce28e34","sha512":"6cf97c8234efd1cb7888a367d40a1f7cbc75fff3e6ec2abb14e28c5afeb052cece72feaab9b834ccc73a145631220690d5cb7188d0b6e04b033334bd82686d17","ssdeep":"","tlshash":"2d31d87b92841a768cacf7e3566666883f28e6513a286881a91183401925fdd203b9e9","size":1651,"data":"","first_seen":"2026-05-03T08:44:19.209468Z","last_seen":"2026-05-03T08:44:19.209468Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","size":85379,"data":"","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-08-15T22:04:29.242352Z","times_seen":26554,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7fa8c69be6eb96417771695a9388bd69","sha1":"4173457bbeaefb68eb1fd718cc670ce362930ff3","sha256":"86bcc578f44c5dd78764576abc15da9b092f77d8f4bb90ceba9a97ee1d90074c","sha512":"2c4d07ee293c850faf5dc9a5dd99a550625976d9ee6c3e00d44c069df4c84a0ffe3d0d68b2dd01e7d1aeb0c3d46d681f82846ce9329482aa8de9a6d8444d59ad","ssdeep":"","tlshash":"3fe0dfd434010337109285b8e067236baf23e49e971e4869d646dd229e75e8b1eafd23","size":354,"data":"","first_seen":"2026-04-29T23:46:16.501482Z","last_seen":"2026-05-04T07:01:12.419983Z","times_seen":842,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"f1aebbbb0bb92787d9d0e1e6d6be0121","sha1":"daed47dc676341839fe812fb38f747775ff04a3b","sha256":"d27877de6988926ec2efcfc9c3670af63470d3bedae946bcd265c6b474bb5048","sha512":"74ef88b2e707c8d187489aba372d8d93642fddf35c11f0b68b3046e30d99d43b0a42e0d11b3a948067a44d3ca4156890487db8d5155e951182d90a78be3c28c6","ssdeep":"","tlshash":"829002a83ca9b45209152228895f4675be571adfe8884151e852dd6a2c3091d58e5444","size":56,"data":"","first_seen":"2026-05-03T08:44:19.211591Z","last_seen":"2026-05-03T08:44:19.211591Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"a931635074a5017da74948b67e16c76f","sha1":"a6799582ad16a7c1ab8221c166268130df6691d2","sha256":"1fb437ac78114eda813a7c4d5771b6d3aa34908a5ca3b743d5eb5c79088cf82c","sha512":"7c96bb515bdba9ad60854b433d24e77982a321dd7ca71599fd8f79acee580802f56829a5dbb7f64932a51ad50d18a9438251a6ad8127ad2b2e332811033d2c7b","ssdeep":"","tlshash":"a5d023cc3941f262d06274b9041704dfd173384a1e1cdf4184154875667c5d9407f4c4","size":206,"data":"","first_seen":"2023-03-07T01:02:15Z","last_seen":"2026-08-15T21:45:01.641489Z","times_seen":210447,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"to-get-free-roblox.pages.dev/","fqdn":"to-get-free-roblox.pages.dev","domain":"to-get-free-roblox.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"a73d26dd421e931fcd8e269f07769d64","sha1":"1a82dcc6914fcd0bde9ad067afe327f864f417ef","sha256":"dbec47c6cca1b7f4d56e8ceb1d4cfa69d78067c7480a8c04bd9b96afe74e0af9","sha512":"f02e979135efca3b320a922788bfa4647013506e61a50d0e000b576eb984bca5f399213ee9ea56ba4a33825ab8c3aaf4c212ab233d340107df27759b16a5347e","ssdeep":"","tlshash":"107000080a0ae0a8080a0a023822c00c02800082000ae0a200000a0020000088820220","size":18,"data":"","first_seen":"2025-01-05T08:04:41.550371Z","last_seen":"2026-08-11T01:12:56.777023Z","times_seen":390,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"2dd9e61b4a53e75147f0ac1c61f5375b","sha1":"f9f59e35f48fab09c8b31d00eed8eaa7ba9f714f","sha256":"5ba0e5866201e7b273161ebe17bacd63bc88a8175a1dcaf5c2f1597a8924ba09","sha512":"e997e371a25f7974e4d6b51c34ce0c01e1545948ab503d2fffe078d3cbef89c4a72e2b8a15bd57222e0865e0edceb7eefd880e4639eb10497feac4b626e9dff0","ssdeep":"","tlshash":"c7a011ac0c080aaa0022aba0080b822820b2200300c08a0280eee0a323b22ef002ac0a","size":76,"data":"","first_seen":"2026-04-29T23:46:16.517847Z","last_seen":"2026-05-04T07:01:12.505953Z","times_seen":1799,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"f657554f5bc8a4272806e3cd9924bbcf","sha1":"70a3edb39f53ede557e2d3ddaecdff5c12b35b0a","sha256":"e331f0424feab1a735903bc2874f7696381b25f7a6569f05743b12fa37293bf7","sha512":"a35fe0df0aedc7896adeb4b812028fcbf2a5d246bcca048b807bf5353c98b0ecad19b01b7d6e1539deaf7ba179f5734a4befdc1f45fcae99509b73c1dc568717","ssdeep":"","tlshash":"eca022be2a383e20002b00280c0388a0803830833a82e80082a0c8b38a3b0b2a32bc03","size":71,"data":"","first_seen":"2026-04-29T23:46:16.497478Z","last_seen":"2026-05-04T07:00:28.49477Z","times_seen":1791,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"3af0c9a4ec09dfb47697041f2c881087","sha1":"611c331e13292c309b2a39b1be9675494af97e44","sha256":"a19e3c58098771d9c7e2aac765d563a2a29a912fbd8de3acfb131fcb5a701928","sha512":"e3c539531122fbf3053582dae771f439349d425092ab640cdfdbc3d0393aa8c56203bf692c722eb2a49d15f657988084db141d344ccc344192789f2752c5914f","ssdeep":"","tlshash":"33e07dca332a1e371a84d956f01733f33501d822660f2c0e9603d604cfb4ed70153a0a","size":326,"data":"","first_seen":"2026-04-29T23:46:16.643263Z","last_seen":"2026-05-04T07:01:12.59858Z","times_seen":1788,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e6fc8ce107f2bdf0955f021a391514ce","sha1":"5200bdfc01a139a753c6eb52ee1911cadd069dd9","sha256":"9449a7aaa80c99ead5ca08d4c72f0905780cb5008036127b26fe20da07419ac0","sha512":"9cdfec782fa2e474348c56a9171dee7544dab4e47671f3949beaabec816b54aae9f73061321d81e2457000e2a7858cf41c06e83b54efc7b8a08598748e9b33b0","ssdeep":"","tlshash":"c710000000000000000000000000000000030000030000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-26T01:30:12Z","last_seen":"2026-08-04T21:48:11.55664Z","times_seen":4237,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"24b42528838209ff4ac611b5e1854f33","sha1":"832259b032633a34dcd4fa2ae03142413df2a97d","sha256":"97bbe064e2e7b4ff6471f8dbe1f196652969e0771f7e205924d2c965e6f9b63d","sha512":"4f3b0904b60b0fb7ded56c18275e9a24d9a92db8c307d9aaeffd2003c539b8ea20c2ad1c1230ac7548f7b0a991cdc4b39dd5a2e47f0e46cced9d313d18d0dfb9","ssdeep":"","tlshash":"817000cc2c08280808ba3222000bca0c00aa00a2000002000000e0820c3220a020a82a","size":22,"data":"","first_seen":"2026-04-30T03:36:41.765216Z","last_seen":"2026-05-04T07:00:18.223347Z","times_seen":807,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"to-get-free-roblox.pages.dev/","fqdn":"to-get-free-roblox.pages.dev","domain":"to-get-free-roblox.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bb27232549abd814635dde5a338cbc9e","sha1":"90b24ec16b789453aec40bcd9b3b620ac4721335","sha256":"2f136d970baa2f3c28b182172051502e723fd8ce872321a266be73da9cf97afa","sha512":"7575109e4beefb0aadde26992f1016198461e154e0a5b94d05dc718373963f73de511184d1e072acf5bbb6ccb4feef0184d2d26e61497c22f18e2abda1285bc4","ssdeep":"","tlshash":"cfc04cad5044b54830b2cdf42979c644e120cdd4354abc3526e2541155cc64e9c7677d","size":147,"data":"","first_seen":"2025-12-18T23:27:07.103769Z","last_seen":"2026-08-11T01:12:56.772107Z","times_seen":353,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"cda114382125e09ec6976a6ba69f88ae","sha1":"79e2e7474d3cd4b81f7f1852550d78bf7150e56e","sha256":"ed0ac62b41ffae226ea649338f9bbd0d1e8227f64fc4fe876f3c2dd151b02932","sha512":"d941a74f63b5fecb6a13616e90f7c90f8316fb0532696a8fbcfaaa48ca5788aa49a4af886524dd4a6e28a1712bdf553cc94f85b61fd973ccb4ac8c3fd98376e6","ssdeep":"","tlshash":"cb70008a3c082008000332a002cf0a0c00a3a08808000a000aa0828a0c3302a8002e08","size":25,"data":"","first_seen":"2026-04-29T20:16:16.634476Z","last_seen":"2026-05-04T07:01:12.497774Z","times_seen":1868,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"0d80d99d7f209071a284c9ab6d14accf","sha1":"c91e7389c28a7b35eeb114484808a20cddb8c20e","sha256":"0cb21d1de060008bab472c15c63e6f15828de601f85deff00d701d26c0f6819a","sha512":"59df0ea3f533182f0884e52768ba3b5b1dea918c81a430aed117aa60584df1bfc3569ba05dc9c95426cd97513318e2bc4272ec2771e3528117cefce002576740","ssdeep":"","tlshash":"0aa012b01c1dd3d81271c03118250410d6cc2205f8260d086219825248a81067f02014","size":83,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-08-15T21:45:01.636748Z","times_seen":342707,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"2f5a8fe1ce9f324369e48addaedc6e3f","sha1":"a484e720f485f0e53d18c6b6d0fa476f4fbab5ad","sha256":"94cb7235fe9cad9be4e9d1b2b5bb0eab59aa5f09164e7024607973f2c49a6eae","sha512":"97d71a877092ba807d80ca072d50f93c745d29a31590eeca71ddd66744ef7c0bd17251c551a7304189131b469e99c098f6feeeea9ed7b414468737afda4da1e8","ssdeep":"","tlshash":"bba0128dac1c58001d42540014030140063e008320611d3ec50af05206710c50065c87","size":79,"data":"","first_seen":"2026-04-29T23:46:16.630824Z","last_seen":"2026-05-04T07:00:28.540176Z","times_seen":1781,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"775260418efbe49471aa424adcf94142","sha1":"d6d4160ef03dbbd96fc2368161dffc70ccbda7d3","sha256":"921c106f1d1c008ab9179a999868e6160fd25b0550cdcd1a78f06c2daf759edc","sha512":"2560c68fa32dafce89f3cfe0521ecf83d6a0069e05d1b3cdd7a35cf6a4ca7535d5e7997e887a597b3b7b5c36597591563cdfea341086a724790063fed1ead853","ssdeep":"","tlshash":"57c08ccc2c4ca4b6600ba8662407161a0bba6407a1d50b48a06600a23f30aea936fd2c","size":163,"data":"","first_seen":"2026-04-29T23:46:16.619698Z","last_seen":"2026-05-04T07:01:12.54704Z","times_seen":1822,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"a529894d3286d527219ac471e1cd5a47","sha1":"4ac04d024d5e097b20a2ec99493a5b40a07def7f","sha256":"de7f25c63f8aee85b80dc11ecb1878e4487e52e537205d76023746f9786aea27","sha512":"c0ac07fabc2441e29f9db33a992c001edce654c4d7341f71a75ea85824d38231a304d8463bca7c03cfaf9341c0e3104e9d73c634267a94ba30ce855ef9a6b9a2","ssdeep":"","tlshash":"e0c08ca4eb04087071ac3ebd330aa3e2e8e876123030088296948090e2b92330420c80","size":145,"data":"","first_seen":"2025-12-16T03:50:13.718611Z","last_seen":"2026-08-11T01:12:56.773024Z","times_seen":307,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"449826925005fb3c24b0c92214f2e503","sha1":"4680a6f7f2279bcde9cd8c3d9bdc03029192e02a","sha256":"6c49617652831722d96d0286a8981d88ffd372d2f9c996112a89d20f1cd44ac5","sha512":"144c0c499c8610619f8b31513bdfd40c2ffbb52cd40bbbb2124411accd838113525aba9b2d5e78fdfe840039dfca619abc8d28a49ad1d26cf0eee0f5ce0a3310","ssdeep":"","tlshash":"a80141cab3d55672dec801c630f7535a193b76dbce478c0ea80e9669e21c933d083a49","size":820,"data":"","first_seen":"2026-04-30T01:20:30.201002Z","last_seen":"2026-05-04T07:01:12.586679Z","times_seen":1782,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"95a1a9df1a90357a818c224cfe2cc101","sha1":"ebb35ac13d6aa8e33720355f9a667f1f4db45f65","sha256":"adf633c6a142e807b025a654bedb6067aea7f38db4ce46f3549d9c1e6a3adc8e","sha512":"86b99238f48c15fe3276a94f4678b9195796fb37c681c479a47c15cd8a114a1deb8022a3af640f39f2087d5cd7b0dad0fcd34929a2a8b049321440db823b2d53","ssdeep":"","tlshash":"ca700088ac28280808223232000bca0c002200822000020080088882ac3220b020280c","size":22,"data":"","first_seen":"2026-04-30T03:36:41.939303Z","last_seen":"2026-05-04T06:58:46.279434Z","times_seen":804,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/_/ytembeds/_/js/k=ytembeds.base.en_US.jCqEhtrZtB0.2021.O/am=AAAABA/d=1/br=1/rs=AGKMywEhW0-Lnggvkj9sdEAhZwS6T0ejZA/m=root,base","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5dbc7231ae8cfd60a041e2be1c239fdb","sha1":"dafe829d4035f8424235f07bdce3105c844bc83f","sha256":"92989f6a997d03e79a9a7ac8a8e8f8b2a22a2ab2187f476d9aad5887f63567c9","sha512":"9b9c54f26c7290e0c999b3e5a4183aa4a277adcbecaf6623eecda8caac140cf8a532f85623b86e0d81a8f47cbc5d2b31837e81bff46a96da14ce23840f29a9a4","ssdeep":"6144:pAUmeSZuDdIdrJaeqJZzm8KZ1uW698+3YXSB9sSnnXWCWI/5:p5arJaeECwvXWCWI/5","tlshash":"61944cd977a2707392a2f5a5902f0103b17a6896f40c8c7cb788ddd16eb494942fbf38","size":423043,"data":"","first_seen":"2026-05-01T13:17:55.93309Z","last_seen":"2026-05-04T17:22:13.682967Z","times_seen":2601,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"58277a466a7156e9c2a06a0798daa0a5","sha1":"aa642c60e7ebadeec5c2997ea3c78ada9b74d9ed","sha256":"f1a8374c629235716bc9a07217fda74fc74a07e9d3a01a194ac2026aafc922f7","sha512":"724e7d5e7037be5943964713f7020419e347a2f876de7b3d0c6c98483a73406bec718fbf422f279818a08f3db3b6257ec8d315ba7040fed6e57e75db435f5bda","ssdeep":"","tlshash":"0f7000cc2c082800002e3220000bca0c00aa80a2002002000000a0820c3282a000ac2a","size":22,"data":"","first_seen":"2026-04-30T01:20:30.073635Z","last_seen":"2026-05-04T07:01:12.549163Z","times_seen":1797,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"4e7268e57a109668e83f60927154d812","sha1":"f4db9dfad6d5a29d6fa4e7b5b17bb36b008ddb60","sha256":"4c5ebcb57b64b15dbbe83c978831cada8722f0b26af56b22b4a47ce1ce418760","sha512":"e5a2a734e79b90e87a9fa17512ce2f7af55b1754e400ca6876f1196592b047e4a62d0eb39308020964ccc5040becbed6fbd0255a433e45b77a931f9710bbd8ae","ssdeep":"","tlshash":"c710000000000000000000000000000000000000300000000000000300000000000000","size":2,"data":"","first_seen":"2023-06-08T20:01:55Z","last_seen":"2026-07-09T14:08:33.90058Z","times_seen":3162,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"b75f63121dab4f0f2dad4368404636db","sha1":"00c55e3ceccf2d2763c6e8015db5ad43e25ea30e","sha256":"64974455159a332c41f18ab8f7648c3da7dd077a8aba836c5703d251b6f496a1","sha512":"5a6018837a634294197651788d33ff555563850b58e10ecab54e9caf20880ed3a841a3ae3dabafd50dc793507382415f9e7158e5768ac81005383e1ce6286a03","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000c000c0000000000","size":2,"data":"","first_seen":"2023-03-08T22:41:13Z","last_seen":"2026-07-20T03:19:47.128542Z","times_seen":4335,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"25400724d7370b0b29c9369d9af3dd21","sha1":"46680a665d08484a28860b87789df9db712f8f84","sha256":"292c1980ba2805512acfef5d0cf8f43fba5c7b9b73a5a7afad1c37cfacad3c98","sha512":"67c059d09fb2dae6f24da6a886215796a9a58222e54ee46e6e4947052f93b667ecf8db6e6987a2d0d43cf5d0f9c0be6944e0300c958dfee5e782a4b3239d14af","ssdeep":"","tlshash":"c71000000000000000000000000000000000f000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-08-03T04:30:13Z","last_seen":"2026-05-04T07:01:12.383014Z","times_seen":14111,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"4007f63e6b95badc1046f9cf84d5784c","sha1":"32d76b7c27fbad0ab7043101a1a39cf253d3075c","sha256":"a59cc514d3206a112b111bce1c72eb965541b470d57e20f8abf42fa2c13cad96","sha512":"799ace1657e7b8f30c27745aaeab1ed435ecece2a5c614d914d1eb95743e6ac0ffa4615e546e0b1f93ae45dd288a1956ee906fb9821e743b1d7eae5e0e4afa90","ssdeep":"","tlshash":"a6d0976210cd4008de123e4a2583f4704e22b003111cefb28005330d5430006c13f80b","size":233,"data":"","first_seen":"2026-04-29T23:46:16.499541Z","last_seen":"2026-05-04T07:01:12.547713Z","times_seen":1818,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d8fb965e7ead2924508e97e5326bd3b1","sha1":"fae376d0cb54d4433b7bdc9aba04690cd6cb5d27","sha256":"57bb660c2fdf4369ff8e37f99b26963dba87c120b80c443ff3d31e030ab3a0f5","sha512":"c03eb6a1004f9dfcd1f960a6ca70a77932794808f72476b276bb16f02d0a1855fb2d93d07aab7c0c040d4b3c0eb4f861a4c1a9368a27e3a6430e425ff6ed2568","ssdeep":"","tlshash":"8e60000c00000000033000fc0000ccf00300000cc003c0c0000000000f0000c3c00000","size":13,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-08-15T21:45:01.580474Z","times_seen":257672,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"8673dabfddfa6347e822f593dfa1d916","sha1":"24feb390ef779b4c8d9596eceb50bba1d0ae03fa","sha256":"7418d3cb701381f05be89fb705d663a4455a26035c0dfd80576a4f716390454f","sha512":"236700f570a1ce92777c3f878d6fd174732a5786e1004dc4d95fea38b679de84d97a3de2f4ad7915815087aee4682b47e471113e9e6fedf69a85003e6c728e1e","ssdeep":"","tlshash":"c7100000000000000000000300000000000000000000000000000000c0000000000000","size":2,"data":"","first_seen":"2023-03-26T07:09:39Z","last_seen":"2026-07-28T07:04:56.429354Z","times_seen":2856,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"4b110604865b013dd13d9ce3f66046f2","sha1":"ebc3b18e39c91b866cdd7c266014f266e27d9245","sha256":"a29d84f0185eac917b8cb0a675f3b0b12ab6fe6e8ee9a6a5902f05a3a5cb9fbd","sha512":"8da927fdb6f4fcf39fbee0cad3326d312606f8d9648c77587f920f68bc991585acd81d0bf23f3a77e59bc8774a1b235c1889fb6b349a25d0063aa22750c6ea86","ssdeep":"","tlshash":"c7100000000000000030000000000000000000000000000c0000000000000000000000","size":2,"data":"","first_seen":"2023-03-26T01:43:02Z","last_seen":"2026-08-10T06:57:42.754913Z","times_seen":2982,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"d6c61116072a3aed150693303749f3a3","sha1":"5ffb5b5427225efd2d592d1bf4bf3613027e69e8","sha256":"7f098ee0db613906e057c8814237ba1a33c352d04c1fd2b72ab5235d24082287","sha512":"f3498eb18f02a60e53e802581e42658f2d0b280610791645ebcd50374bc951aeab13f30e244c6167f3bfd1c1c38eb3aa52ec2f0aba865742abeadf817bffc8d8","ssdeep":"","tlshash":"0dc09b8c9f00185575327cdd7b261384fcd542dbb836dd555297c04265cd36bf04157c","size":145,"data":"","first_seen":"2025-12-18T23:27:07.113909Z","last_seen":"2026-08-11T01:12:56.773748Z","times_seen":310,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"7b85523175d05d1909ca767fef36b05d","sha1":"659a3982767c87e2277a472b571577a686b4f493","sha256":"1c82200906a0c8f26f73fe515956b64a1485fb114edb203159783c8d8bf0ce44","sha512":"a1f4feec0fd937b7538458fc5e86dbb925a49858ee2cab09131e175ca16a31aa08494b60fd41517ed4419ae0eb1c1b6d37ed99a99bd7347c7a2b990b918209a1","ssdeep":"96:V9aA5ozZJjLCzzMK3CGrkk/7sHWoGyCiUY4/R1jDUCfMEDaH:V9aA2zqMSCWkkqhI7vUCkCaH","tlshash":"d891092e5ddcd2b93427b4bf117b520cee61804f58059e46786cd691af30ba80e6de9c","size":4288,"data":"","first_seen":"2026-05-03T08:44:19.228314Z","last_seen":"2026-05-03T08:44:19.228314Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"to-get-free-roblox.pages.dev/","fqdn":"to-get-free-roblox.pages.dev","domain":"to-get-free-roblox.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"a73d26dd421e931fcd8e269f07769d64","sha1":"1a82dcc6914fcd0bde9ad067afe327f864f417ef","sha256":"dbec47c6cca1b7f4d56e8ceb1d4cfa69d78067c7480a8c04bd9b96afe74e0af9","sha512":"f02e979135efca3b320a922788bfa4647013506e61a50d0e000b576eb984bca5f399213ee9ea56ba4a33825ab8c3aaf4c212ab233d340107df27759b16a5347e","ssdeep":"","tlshash":"107000080a0ae0a8080a0a023822c00c02800082000ae0a200000a0020000088820220","size":18,"data":"","first_seen":"2025-01-05T08:04:41.550371Z","last_seen":"2026-08-11T01:12:56.777023Z","times_seen":390,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/1b/50/e5/1b50e57a5911fd0a5b46962ab48ca22b.js","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.127.243","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a141d4cc0ea62b7e58f726a49c7b649e","sha1":"ca9a28b3d7e06f192f20989c96c710bd243d512e","sha256":"42554c0284cc374e33e51ba1c2980fad64bd7600955788facf38b137a1668c80","sha512":"148f99f86db9534dc360f8b266d2d648f7554e616703ff93c369a32f2540eb4d3fad86b449b34e9c19e0805d1aa38dd2cf00412d5569df4fb92a018f70fbbfe4","ssdeep":"96:ctGAdiByQnKauwtTMpX8TxnOgV27JBrHVtH41:c4fycnsgUDpl41","tlshash":"8db1858c3f81f2d407b270af2f2f1509f16d5c20ba89d498d01b95d03e5862adaa7f71","size":5146,"data":"","first_seen":"2026-04-30T15:37:40.418293Z","last_seen":"2026-05-04T13:42:54.864213Z","times_seen":154,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"3ed9f48ab53271f9494c12eebe0e2534","sha1":"76902ec4ec7affbeada0910c307cad19809da9d8","sha256":"3b83a8d2ad8cf6bbb5f5725796321fb69ef57ca851988d35e09aedd050cd7744","sha512":"4bdc1a79095966e71161068bcd4c25f26809fb5d4bfde97bfd9b5be517aef2f232377930ad2245f0ee4cd4d0afdcf135bd2bc6859e0ef19cf5118dff5af31cea","ssdeep":"768:Z6ShObLZOLLDcp07TMZO5xsG8fhBD5LxQ9zxt6J9UA:eL0LLgifMEMHizxGx","tlshash":"a9f2e197d49dc7ea28244d5a982fb69c9aff9767b004dcc132e1f004d3bea15a52ee40","size":36573,"data":"","first_seen":"2026-05-03T08:44:19.229373Z","last_seen":"2026-05-03T08:44:19.229373Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"5394c4f6a06ef2566187a4870eaab6e7","sha1":"e06b38f9bac57a402922a1589feb2418f31cb29c","sha256":"94c8cad3918052e04c46cb1391dbc2cfbe89bd46dbb62bb493f581e39b6eabd6","sha512":"c8f68a12a647d8f6dbdc618ca5cb9af4f77afdf9c171bc09c5d89595082356c636a123ea9a0d0f080227fcece75448a41bab4419702c45c7072c3f1cdc797b4c","ssdeep":"","tlshash":"24d023f91d7831eff04120d1644d55844e57a05198c770c557113cb29c51936cc27c15","size":214,"data":"","first_seen":"2026-04-29T23:46:16.554745Z","last_seen":"2026-05-04T07:01:12.544744Z","times_seen":1826,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"4269e3ceafaf5eabc320c8011a1a671c","sha1":"06f1b7a2c7f56c7ed232ade9633d7ad9aef587e1","sha256":"353dc9685ce23dcb07389e3368f18b0207a8ff238961cd45bdc6ecdba085e09d","sha512":"ad17cd799c3a4e96f52b4318c4ca67d63a9a0a35d2a1086463b3dd38261f0b0eea4a6f42989ed07663ab4d2848a1bcdf5b5479cff76199b97e916173ffbc4b79","ssdeep":"","tlshash":"5ae068772327e463c4e250e520036d8da228ac47e8e8a484c270f0116518e82d85d9d3","size":355,"data":"","first_seen":"2026-04-30T01:20:30.067674Z","last_seen":"2026-05-04T07:01:12.444644Z","times_seen":1622,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"69691c7bdcc3ce6d5d8a1361f22d04ac","sha1":"c63ae6dd4fc9f9dda66970e827d13f7c73fe841c","sha256":"08f271887ce94707da822d5263bae19d5519cb3614e0daedc4c7ce5dab7473f1","sha512":"253405e03b91441a6dd354a9b72e040068b1bfe10e83eb1a64a086c05525d8ccae2bf09130c624af50d55c3522a4fbb7c18cfc8dd843e5f4801d9ad2b5164b12","ssdeep":"","tlshash":"c700000000000000c00000300000c000000000000000000000c0000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:15:12Z","last_seen":"2026-08-15T06:53:22.522092Z","times_seen":58575,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"4fb80e130ad18d39dde1d462227abee4","sha1":"1829be3a482458786ab1617508ee248185bbb7e9","sha256":"25acb6ec324aaccf64d25bb78bbf33cf023ca619a95c532d655ee98ccd4f1dc1","sha512":"74570db34853e74da8e29fbaa322a3a31a3385b56839f915a1f1c65fb55de2576a932403d92f1eb907ab840fbf1439ca303ad6955a559ad7f9efa908ad5bfe41","ssdeep":"","tlshash":"f521083bc4c9cadecb83ac96acf8acf44f5012355553c574c96e81013ee033c26d6a20","size":1385,"data":"","first_seen":"2026-05-03T08:44:19.231922Z","last_seen":"2026-05-03T08:44:19.231922Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/player/0980151a/player_embed_es6_tcc.vflset/en_US/base.js","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"073ae7a4bf093382d2e9f158a14e451f","sha1":"c0c3b1ad92455c47e1056918b1e4b5a589e6359a","sha256":"eac72f3205f72bdfeaf9ca05f8571d035213e3f4974c35074ae6b3c2ea841ef2","sha512":"a7a09eda80dce352244f24ccdca1947a8b7d1a66745c5a45abacf8500ab1f05bfb1600c7e9ab663d1ae8aed0dffbeedb1dddf1e4659893d7c63dfc7914d23d7c","ssdeep":"24576:JNggb92I8CHnkt5OTFnQQrdRVbyuMTX0JyWtFYjOCdLCrj:Lgokt5YFnQQrdRVb6TtLyj","tlshash":"ff657dd93296a4774292f0e9186f0106f63a1549b088d16cf62edffa5ca6c07913ffb4","size":1493134,"data":"","first_seen":"2026-04-27T07:46:14.669881Z","last_seen":"2026-05-04T16:00:15.671063Z","times_seen":3333,"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-05-03","alert":"Hunting_JS_WebAssembly","trigger":"www.youtube.com/s/player/0980151a/player_embed_es6_tcc.vflset/en_US/base.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"adxpy.pages.dev/magic.js","fqdn":"adxpy.pages.dev","domain":"adxpy.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9bcbb02a6bf94ae8762ddcda5d1c80d3","sha1":"fade830681bb5b7b138db5482e7a495c1c9b296a","sha256":"b26277e44f2fe29283a55a632166f8a45dd1407a0970c13e08287406f94a0772","sha512":"54914b0f4d7625f4e40e13b11bb2bfd47c87dc6a14714c427c48c75e955980826d6605abbac7b3ca6c043356f1b91618b6f16abaf6be339be38d8ffa825e71e5","ssdeep":"","tlshash":"c101fe6e229200a84d7a509803a3fa0cfda832577160c0e1bacedb602f35f20419e4d8","size":671,"data":"","first_seen":"2025-12-08T23:25:47.209165Z","last_seen":"2026-08-11T01:12:56.740212Z","times_seen":394,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"f529202a265ac92ad7ffc27f953273ba","sha1":"87b938214a51e8a2b4df662686467e71b04b783d","sha256":"c7e172007cea4bfab14755edeae83d41d0f762d64961001e71222dc20f1af8df","sha512":"726b9f2132f1343f2c06c76fa28b7afbb37f8bdbf41b953e053425996f87dad0b24cb8614062e751ee7424d88329da45487b54bee00f46e19a65697bd4a061cd","ssdeep":"","tlshash":"38a02233c228ca230038002000833002e02803208802a00c030a830830e880bfe8c08a","size":62,"data":"","first_seen":"2023-12-22T06:50:45Z","last_seen":"2026-08-14T22:42:35.455069Z","times_seen":5882,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"immigrationacre.com/c6/4a/a1/c64aa11db612c16c65959b87a44dac81.js","fqdn":"immigrationacre.com","domain":"immigrationacre.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6a574ace0c50991cb421ab9c319add9e","sha1":"ab290b96ad37658413b608b96e82a7adc1c8cce7","sha256":"0c1d45b87e48310935d95daf650f1cd3a6bdace48473f1d702374d9b8b36cef7","sha512":"564347f9f2f3a0f17eca21c6eedaa8682906738b1af7d47502ee910f66972951e05d8d95b3f5280396f620d149d685ef81c9a763d5f2bdd3afc71e0c8d5ecc88","ssdeep":"1536:8G6g/qn/325q6EWa8oN39IRnG1VDpN6CwkMDCF9q+hkxx89Y:vIeZB0mdc5pSgqJ","tlshash":"c493e8c8bf80f16443f26836222f501ff0a90c5552dcd18de9a2b8af7fb9b48e635594","size":96858,"data":"","first_seen":"2026-05-03T08:44:19.121857Z","last_seen":"2026-05-03T08:44:19.121857Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"6a5328957e13577b00d4695791ad5218","sha1":"bfe7a32fa38b33980fe5ceffe7f9404d6aa79915","sha256":"95451b99a4b8de021ead0bd41cbb152fbb9d919499df4053a1fe28bc95a7b153","sha512":"bfe1b514608b0d3629c54d1faea7ba64eaf577288f39c30a4cef5502428a4f69212e77721a9343025b413f79e53c0a4dab05cb6365c12da975a5062653c7b0db","ssdeep":"","tlshash":"91d02bc07956413c4451cb790017108058678434d6298eb15612f72ac4713134e7b6d3","size":247,"data":"","first_seen":"2026-04-29T23:46:16.542096Z","last_seen":"2026-05-04T07:01:12.421685Z","times_seen":1802,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"13207e3d5722030f6c97d69b4904d39d","sha1":"1b9645e71bb4d1ce9c48520b78a3d94f3f9a6a62","sha256":"ab71fc4c8a1c4d62b9202b36ee7c07dd398a0907a37037bd8c3959d6af573608","sha512":"035b9208bf3867d5acd74fc15dcb249ee1e7bfcd4d0a2a0e3a3de58bd5f4bb763da483626e31f60d81a55528e2990dd05fd004db284bc7be17d0cdb4769e3434","ssdeep":"","tlshash":"c710000000000000000000000000000000000000000000000000000000000000000c00","size":2,"data":"","first_seen":"2023-03-26T01:44:17Z","last_seen":"2026-08-02T06:28:54.433075Z","times_seen":3483,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"900aaab886b1c22ab4ad6a5c6d127eab","sha1":"05fe27d0954582258e8f7ea7625eccf12cabec31","sha256":"f8c4ad34deb2580e2103db88845f1809e6a8fb2f44650374ca7ea2834389ca98","sha512":"62924703dd7fb9968cfd0be18cc36ea90bd4cdef2a044412c7b7afd402eb0326bb72820d08053f733c8c09907e0ed5f93edb9c8622bec209c06b68e3768d9024","ssdeep":"","tlshash":"c71000000000000000000000c00000000000000000000000000000030000c000000000","size":2,"data":"","first_seen":"2023-04-06T16:00:30Z","last_seen":"2026-08-05T02:26:45.047295Z","times_seen":2917,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"4427f99d1259eb9b6b7d20ed4dcac2fe","sha1":"46809a712aeeb7dd441ac3becad84541ba09c563","sha256":"52fec46a24056495f4b4688b8a5ccb2a2b702149277eb702603da56005299c77","sha512":"bec81718486eebb1c9ba4ce6bdf21c02de4eb2625f6823886d092a357cea51b5d0c8a35f7ee9aace4be6dbb89ad8774ba2851d19f67399beea6f924f78fe4a30","ssdeep":"","tlshash":"55c02bc279701148c381507a88360510669f0484c000c08081c7f4adb533326483cf32","size":132,"data":"","first_seen":"2026-04-30T03:36:41.817742Z","last_seen":"2026-05-04T07:00:18.212112Z","times_seen":790,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"5c2d5d1aac7377c4665009e03d0713fb","sha1":"7a043ba10b738e2f5e72379f31b07ea5277aa64b","sha256":"7d8190f66f0328fb9893c2bcc31331cd0bcbd655a66c824cbe8fa101c0fbbb17","sha512":"71af59c1f439c8aa0ba0609e94a7675d99502b124c18f63c1f0690d37d9741d7e05fa9120729ef7e164223783e3230ca54b00aaf456ca820989675bb748218cc","ssdeep":"","tlshash":"4fd097091f83e00e5b2231a8602b2209200400b8be532832c33dc34b6ba19d91053e23","size":233,"data":"","first_seen":"2026-04-29T23:46:16.544547Z","last_seen":"2026-05-04T07:01:12.552313Z","times_seen":1797,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"243e90820a9b903e8a14638528cd905a","sha1":"4daf11ea15a532a4f8293c66251fb9ecbe3aca01","sha256":"81c6eb82a05cbbbd0ae31ea1ed403704d3ed5e80125ddd1c18465b45bca8a662","sha512":"e63b80efe4662856bf7c7922f27498a5abdfe26c15c923e5a8e72b5dc5816ca498b07a30e4a31e6f5465159e81623ebf19402003fce32670e47a56f6002b4b61","ssdeep":"","tlshash":"c710000c00000000000000000300000000000000000000000000000000000000000300","size":2,"data":"","first_seen":"2023-03-07T17:52:57Z","last_seen":"2026-07-21T06:35:43.244891Z","times_seen":4686,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d97a5d5ab646edd8108e2ecdd02cf3a2","sha1":"a33740c63b9d00bd3adab9ccd8b11520f36be46f","sha256":"5dd88471054c8615e287dee8e3e822df15f8bd3db089c9f55a8d83d78bf5f50e","sha512":"826c5c6c8774384e5ba4ab0fffc9fc476065ab1ef427d0e2cc9e3576cd53686d3ea3cf83b9a5e3209e593e91feb797ddfef2add4aec916d95e36874421998fbd","ssdeep":"","tlshash":"c71000000300330000000c000000000000000000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-07T01:15:11Z","last_seen":"2026-07-28T05:14:50.006015Z","times_seen":2134,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/d0/89/ea/d089ea049f0f7b1eacfa2b5bb99d3bdc.js","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"724f24efe1eb3c0d54d8c5a7338bb531","sha1":"fb0af8ef602817a217fe5f80f12242f33aa57ac4","sha256":"a7be01b08a30f530b4ed62720967697820d73b73717ef9792c511fd6180f948a","sha512":"21840fc26ab16ef61c0e2f6bb315dd43ffed04422ba36d6001879c2060d35b910ac06725b72ef905a67c6641f8fe045f9a21977ed075dacbb4f1926367e7a858","ssdeep":"1536:kHLBN82ttARd5zkYcWZ+u9DJvDWaBBl2qcQt7MrHYeCz6Q3d3icPS6YBB37o:cBQ8u91v7Hl1cQt7MrHysPE","tlshash":"9aa3c68cbf50f55852f62432222f940af0e90c5641dcd198fa52b8ea7f7cf48e9769a4","size":103355,"data":"","first_seen":"2026-05-03T08:44:19.146662Z","last_seen":"2026-05-03T08:44:19.146662Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d6823faedfb01b628a5516595ce61b97","sha1":"62001ecce422685b8293e9bcd18e4c46531c1c88","sha256":"238e0067060456f7c90d0e58181f229eb114704fbccc94412540045fd68fedd5","sha512":"4655ec5cf3ddc6161b03fa5eed65336a0b72678a2a50f2431b8ab9ee811963dbc01779ad2cd2933fa21190e37525242e428727047c93a409ac3cdeb5365ef162","ssdeep":"","tlshash":"67c08cc2b251913c038358aa0a2a0a02a3ae08c8c5088010871ae82eb0bb31ca83a912","size":147,"data":"","first_seen":"2026-04-29T23:46:16.616872Z","last_seen":"2026-05-04T07:01:12.595112Z","times_seen":1800,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"be5d14fc1cdfc4b650e7ac504b3d9426","sha1":"68e8cc53ea7cbadcfa0447ea98f10dd1949f6ecf","sha256":"df86abdcca1fbaf41808f60b7cd35d972d5efcfa609d2f8ab750081cb3e5b4f6","sha512":"abee09030e60d359da9b831ef318b3b8cace9d9be7029648f01dd67687ea5e65bf8db5a6975c020c4cb5f0c87b072559373a4c68fa904f27f17ccbf6dc50c78c","ssdeep":"","tlshash":"53c09b49b5048375960903d0650647fa89a149c77c113a5dc553455fc6353c2509bd36","size":130,"data":"","first_seen":"2026-04-29T23:46:16.507862Z","last_seen":"2026-05-04T07:01:12.437492Z","times_seen":1801,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"fc55f7812ff414608e43bcb822271c4a","sha1":"44b3bce647e010279c89dc4e2ea0df55fdea0343","sha256":"2bdd94c004581aa9f0d47b502c1e4e1bb83a7c2cf245b1b3c5d2670d9ae64ec4","sha512":"76845dfbd85ff7ff52c51450a46825cbe5cbf0859fdfe1de85a8eebfd4f2bc94e5a884d7a985f555cbab9aedc18a8a0529919c5dfc4782bb113c8cb4e81c5258","ssdeep":"","tlshash":"c7100000000003000000000000000000000000000000000000c0000300000000000000","size":2,"data":"","first_seen":"2023-03-07T13:57:01Z","last_seen":"2026-08-07T05:53:37.868336Z","times_seen":2756,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"2fb9d9f348fa0a0990998b66b89c4ec2","sha1":"8481e9b564ff4e2fa90683619d91eda81e1aed13","sha256":"9f5ec1e50a5d95990fe2387d7f3d364febb0cca8ff70b58cc3f3e9b78c342a8e","sha512":"0ae6b7bddc57879c8eeea09d7d37c35a0b60315cee9f6d604b1d01929e13a006bfc06a878f2a7e28ff839d5c336da46000fa0e9a4346c8bb00d48b582d1ef0eb","ssdeep":"","tlshash":"9821bb6b276543f1766af137b10a5bcbd5211a8ab485520f392cc18e0ee237533f9792","size":1276,"data":"","first_seen":"2026-01-05T23:26:03.820576Z","last_seen":"2026-07-18T05:45:03.63046Z","times_seen":57,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"cbc1b48aff6ce09cd55ab0b5f87404df","sha1":"4bc9966063bb15b74237e1cf8daf755c3946ab4e","sha256":"35ef17a73d384d85711340469a271e7c3b55b6d8ae525be16de063e4a80a0d19","sha512":"2b493eb138feeed49e987f0f4a54e1b6f39ee1cab3259c73af838b128dacec868b5b468b1c9ead3cfa590c526ca531104f3eafb86f2284448ab10758eb629d90","ssdeep":"1536:rr3za1NxDCO0pUw1mwVwW2W0ZFUVl3X5X+tkmL6:zaZCrEW2W0ZWVT++J","tlshash":"065317cef2e2677518d261f1005f410a727fa055ec890c9eba16e6f49ab4d47903bf36","size":63243,"data":"","first_seen":"2026-05-02T11:25:15.89387Z","last_seen":"2026-05-03T08:44:19.240514Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"4b110604865b013dd13d9ce3f66046f2","sha1":"ebc3b18e39c91b866cdd7c266014f266e27d9245","sha256":"a29d84f0185eac917b8cb0a675f3b0b12ab6fe6e8ee9a6a5902f05a3a5cb9fbd","sha512":"8da927fdb6f4fcf39fbee0cad3326d312606f8d9648c77587f920f68bc991585acd81d0bf23f3a77e59bc8774a1b235c1889fb6b349a25d0063aa22750c6ea86","ssdeep":"","tlshash":"c7100000000000000030000000000000000000000000000c0000000000000000000000","size":2,"data":"","first_seen":"2023-03-26T01:43:02Z","last_seen":"2026-08-10T06:57:42.754913Z","times_seen":2982,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"dd9cfece1f436d778e11355f768fd33e","sha1":"ddf4486b745fcfe69edfcd2c9202538c1b7f26dc","sha256":"f9af7db07a72698a42e6dce934f560aa97f042da496eb7747c5d7cb6f362f6d7","sha512":"83f6aac21cfe8e9a99e3c5a2775cbd6c442e9961cd1bff5e92216ca277ee759f0bcb345cab08ef906a88a4d00c622775a0c1e0313a87e9cbe26ee3dfb1551b77","ssdeep":"","tlshash":"c710000000000000000000000000000000000000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-26T07:06:04Z","last_seen":"2026-06-11T00:24:04.612061Z","times_seen":3241,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mtevor.com/hg/pages-dev.js","fqdn":"mtevor.com","domain":"mtevor.com","tld":"com"},"ip":{"addr":"172.67.199.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"63f71502fe125358818a0825aae4ee16","sha1":"98934593ae75876db5a51fbb4a0d6f990576a2c9","sha256":"5dedd670c8604a3b077f14aac976a0b91441afe370ecc449c9e3df2cf077027b","sha512":"d426126273d42b38f24bd9b8d1780346cc1b6cee83468b887e0eaeecaff19e4a89a0636620ab41efc977e6c2b559e88e55b670f3dfd5b7c7205f848a55e2ebdc","ssdeep":"192:c4Mpsto0LV8YteZbDVj/poiPqpyj4ZYzwIxpsQkhHC:/++j8YteZfJ/ptPqcj46zNxpsQ8C","tlshash":"0ee1d6a9bc8f89390bf2f758d6358519fd3cc0221602505af0c8525b8a69f1e471ffd8","size":7180,"data":"","first_seen":"2026-03-10T23:35:48.093011Z","last_seen":"2026-08-11T01:12:56.754825Z","times_seen":137,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d97a5d5ab646edd8108e2ecdd02cf3a2","sha1":"a33740c63b9d00bd3adab9ccd8b11520f36be46f","sha256":"5dd88471054c8615e287dee8e3e822df15f8bd3db089c9f55a8d83d78bf5f50e","sha512":"826c5c6c8774384e5ba4ab0fffc9fc476065ab1ef427d0e2cc9e3576cd53686d3ea3cf83b9a5e3209e593e91feb797ddfef2add4aec916d95e36874421998fbd","ssdeep":"","tlshash":"c71000000300330000000c000000000000000000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-07T01:15:11Z","last_seen":"2026-07-28T05:14:50.006015Z","times_seen":2134,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"0a40e3c91a3a55c9a37428c6d194d0e5","sha1":"560040c54a3bfeaf24c4a4096cee1de719cd87cd","sha256":"11fb682be0a0233d5fb899721ecfc1827d20f0d2ff2e093310efa61efca8af1c","sha512":"8a342b674710e02bb0b06a7bab7212b2fd44828a21ebb17bbb3d3a74adee26d8e0d213e6a93bd6e47fc827a671e06bca3b4e2289ece56dc754164cb1a9083030","ssdeep":"","tlshash":"c710000030000c0000003000000000000000c000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-10T11:48:59Z","last_seen":"2026-05-19T06:47:10.323507Z","times_seen":2160,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7e9c6b9bcb2267f6aad00e8aeacf27d2","sha1":"7f29b858745edfdf90ab62f044e5d95aa29a92eb","sha256":"6ad515c01f9298be518db890275e57ca3d25e4b9eee0f373812b43682311c69c","sha512":"507626933b599046939bbc7fde7d02127eb81e1d496e3698c27981a2577030ffc7d7a67895bd21433c08895791e05ba995aae16547aa91e8fbb7106f36e38a15","ssdeep":"","tlshash":"91e068ea33f2a0a425b2a4a6c9eb1084202c35f45500dc2ec1b3229656b7ff64818f22","size":346,"data":"","first_seen":"2026-04-30T01:20:30.132285Z","last_seen":"2026-05-04T06:58:46.314286Z","times_seen":793,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/impr.gif?sid=H4sIAAAAAAAC_1RSu28cRRyedQIFFLyRaNAWKYjEnmdv36SLeAhBbJSHUlDNa83gvZ3Nzu7d5SqHoNQWUhAN0vo7Oy4SIfgP0BkJCQSSr7sibqiokUKLzjnJZIrfY76fRt83v-_eXntCemjZ4rMrZqKLgq1HPeq-c1OX0oysu3Hd9WmPXnJv6jIOL7njZaiH7_lB2KMX3Y-U2DbrfepT6lPf_VDXKjfj9VMUunqU-b2M9sJ-z49CjOtne9s6sMyBHJ6QV6Hl_KW_8s-hxQzl4Mf3ld1uTPXuB4O2YI2pMZSHN8rt0oxKDM7KvHaQl4eraRg7J-S7NZjycKUAZri_VACu52Ttzcfg5eGKJvjw4ClTXkCV4PJFjIYzqOIIms0gzF1oeUwAIbGxiXLwYMPUI3b7KcqW6Jycf_IP9GhOzj9-HeXgh8uFHrvXTNE22pQW47yDHs-gt2ao2iM0kzXo0RFE8xW0_JOsP_kU5WB_0xYGWi4uiCAMo5hSL5Jx5oW-Uh6jQd-TKVVKiiRKZHT6RTqfgdk1tNZBqx20uYO2cjCQCzekaSh8FsR5JkVCQxaGUnGapX1KWSYStOIOtNyFqHdQ1TvY1t8cv_VwTpw3rsBKB7YhGMruQBa2b7sHsrAt91e5v8pBNzXN1h47MM2WKglYvYtadvu6umXvQjTnppPcyqlZBsabbsq47KZaNgT1rcUF6mdSSdr3fC6El6gw8Xjup14e8iDMWJjHfbmf26Z9ZpQmXhJT5WW-EF4WqSCOg1Sk3N-rTsgry304979_iG21cGMpIxXIhIkgkUHAI8ZFmqQ-zWMmkjyA1R20XQOzDiZ6Tj7JL6LSc_L2vb_B2RFscQShz4G1z4GNpgGlYF9M-xHFpHyU61IOtVA9YQaQpkPVnEdz29krTshr06vXL_98ao6rf9yAEr-T1YGoO1R1hy_1LwRbxZ2fNqtGD_SELd1yrWGNeh5MH6vfIPScvHzfObVt7-NvIaod2OrsJWsIeEVQaIJCnd0z3sH-r-dn9Z79Glu1A144U17UZJ8XdbELqxduHqi-oDRNYj9Ic-UHoRR5lIaZjBkNAoXGzvW_L_z6XwAAAP__HnIejy8EAAA=","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://to-get-free-roblox.pages.dev/","date":"2026-05-03T08:43:51.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 21:50:47 GMT","end":"Thu, 23 Jul 2026 21:50:46 GMT"},"fingerprint":{"sha1":"23:74:93:25:BB:94:6A:F0:09:05:7F:57:73:50:14:CD:19:AA:AF:20","sha256":"13:12:D4:15:47:A9:32:60:B9:69:04:44:B0:1C:A6:FF:80:89:A8:57:85:61:DB:5D:BC:87:06:24:86:84:51:44"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1RSu28cRRyedQIFFLyRaNAWKYjEnmdv36SLeAhBbJSHUlDNa83gvZ3Nzu7d5SqHoNQWUhAN0vo7Oy4SIfgP0BkJCQSSr7sibqiokUKLzjnJZIrfY76fRt83v-_eXntCemjZ4rMrZqKLgq1HPeq-c1OX0oysu3Hd9WmPXnJv6jIOL7njZaiH7_lB2KMX3Y-U2DbrfepT6lPf_VDXKjfj9VMUunqU-b2M9sJ-z49CjOtne9s6sMyBHJ6QV6Hl_KW_8s-hxQzl4Mf3ld1uTPXuB4O2YI2pMZSHN8rt0oxKDM7KvHaQl4eraRg7J-S7NZjycKUAZri_VACu52Ttzcfg5eGKJvjw4ClTXkCV4PJFjIYzqOIIms0gzF1oeUwAIbGxiXLwYMPUI3b7KcqW6Jycf_IP9GhOzj9-HeXgh8uFHrvXTNE22pQW47yDHs-gt2ao2iM0kzXo0RFE8xW0_JOsP_kU5WB_0xYGWi4uiCAMo5hSL5Jx5oW-Uh6jQd-TKVVKiiRKZHT6RTqfgdk1tNZBqx20uYO2cjCQCzekaSh8FsR5JkVCQxaGUnGapX1KWSYStOIOtNyFqHdQ1TvY1t8cv_VwTpw3rsBKB7YhGMruQBa2b7sHsrAt91e5v8pBNzXN1h47MM2WKglYvYtadvu6umXvQjTnppPcyqlZBsabbsq47KZaNgT1rcUF6mdSSdr3fC6El6gw8Xjup14e8iDMWJjHfbmf26Z9ZpQmXhJT5WW-EF4WqSCOg1Sk3N-rTsgry304979_iG21cGMpIxXIhIkgkUHAI8ZFmqQ-zWMmkjyA1R20XQOzDiZ6Tj7JL6LSc_L2vb_B2RFscQShz4G1z4GNpgGlYF9M-xHFpHyU61IOtVA9YQaQpkPVnEdz29krTshr06vXL_98ao6rf9yAEr-T1YGoO1R1hy_1LwRbxZ2fNqtGD_SELd1yrWGNeh5MH6vfIPScvHzfObVt7-NvIaod2OrsJWsIeEVQaIJCnd0z3sH-r-dn9Z79Glu1A144U17UZJ8XdbELqxduHqi-oDRNYj9Ic-UHoRR5lIaZjBkNAoXGzvW_L_z6XwAAAP__HnIejy8EAAA= HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=c3445600-5d69-41ee-a032-d80eedc757d5:2:1; ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.FQfjBon4tRZU9dtm4HYzCZWTDAe7qtA8cMI3ADMKGRk; pdhtkv=true; uncs=1; pdhtkv5=true; uncs5=1; u_pl26582443=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:43:51 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-UA-Mobile,X-Device-User-Agent,User-Agent,Sec-CH-UA-Platform-Version,Sec-CH-UA,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Platform,Device-Stock-UA,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 3\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 3a2f37e528f9780361f262823ca32a8f\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T22:04:31.086022Z","times_seen":17907918,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.show-sb.com/sb/au/0c/c8/e1/0cc8e13ba9d5dbc867b982993e805a9d/1632728593.html","fqdn":"cdn.show-sb.com","domain":"show-sb.com","tld":"com"},"ip":{"addr":"172.67.170.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://to-get-free-roblox.pages.dev/","date":"2026-05-03T08:43:52.463Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"show-sb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Apr 2026 00:48:28 GMT","end":"Fri, 03 Jul 2026 01:44:30 GMT"},"fingerprint":{"sha1":"21:8F:F6:2A:0C:60:8F:CF:6C:90:BD:69:DB:F8:82:BF:D5:02:9E:2A","sha256":"20:0D:6D:8F:30:A5:C6:F8:45:FA:9B:D0:D8:76:12:30:CC:08:8F:44:47:0D:A2:CA:80:14:E3:AA:E1:AF:EA:5F"}}},"request":{"raw":"GET /sb/au/0c/c8/e1/0cc8e13ba9d5dbc867b982993e805a9d/1632728593.html HTTP/1.1\r\nHost: cdn.show-sb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://to-get-free-roblox.pages.dev/\r\nOrigin: https://to-get-free-roblox.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 08:43:53 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Mon, 27 Sep 2021 07:43:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3Zy0bw99xNx4ozzWOVJ6AVqGW7F1LXNUsU4WKp9Xxq4lFArB36xJJVF6ov9CDCjIDo3KzEQn6jYFJb0R%2BwO11QBgVEgU3GqDwz7shqadeV1idxCxkjFiZsgP5fH%2Bno%2BU%2B34%3D\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9f5dfb050db83181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":1325,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"f6990569c7ffeac1f4a3f6d9eee5da44","sha1":"e7d5e37acf89a8faee252c36fc2c9d6615501d76","sha256":"cc2a9756c81bd570fff8b32e48a413687c33f8abe9c934e743a0769178b4f690","sha512":"be3ebced9d65b29fef8caab46e95f54f1ca645ea5942331c84c964ec033fb7c78506d14eda131948b7f664f1635deaa8d82a63169f9214f72035b087ea104bda","ssdeep":"","tlshash":"a52105692df9c97311e750947b352f1bed92ea87c80a6e0173bc9d684f9ad84cd23407","first_seen":"2023-06-26T22:59:31Z","last_seen":"2026-08-15T10:14:25.116469Z","times_seen":3718,"resource_available":false,"data":null}},"time_used":629,"timings":{"blocked":17,"dns":1,"connect":1,"send":0,"wait":594,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/si/af/8b/74/af8b74def5e24f9582f73ba12bab9177/1680148975.png","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://to-get-free-roblox.pages.dev/","date":"2026-05-03T08:43:53.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 02:33:25 GMT","end":"Fri, 05 Jun 2026 02:33:24 GMT"},"fingerprint":{"sha1":"4A:66:11:51:1F:1F:F3:84:B6:E4:4F:81:C1:03:83:9F:01:17:7E:82","sha256":"DA:55:E3:02:D5:3C:4E:3A:51:ED:21:0D:F4:32:52:C2:C5:31:87:50:DC:AB:13:D9:93:4A:15:0C:D9:8C:D6:4F"}}},"request":{"raw":"GET /si/af/8b/74/af8b74def5e24f9582f73ba12bab9177/1680148975.png HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 08:43:53 GMT\r\ncontent-type: image/png\r\ncontent-length: 65159\r\nserver: nginx/1.21.6\r\nlast-modified: Thu, 30 Mar 2023 04:03:04 GMT\r\netag: \"642509f8-fe87\"\r\nexpires: Tue, 05 May 2026 08:43:53 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":65159,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"c6a1f91858a0ead000fd923888b0b941","sha1":"ef5ec08b41a7a8618ae2bb8003f5d6cad068a57c","sha256":"19fc121de270074fd89cd824f91c2cee3720e6c0f7511e70c7b4c4443223f41b","sha512":"63aedb3703d2068bcfaf828bde70ddef2f702b27addaf6bb137f5aa4c0c16e8aa7c060700492df232718253edd13a1bdb0bdf0736a77329d83ceb675d536ffef","ssdeep":"1536:8x27FaAV8n9zA6qluyyswoPmlA0PcQ8SknbDzTY1Ow0Kz:8x274s8n9z9qQiPmi0t0nbDz6Ow7","tlshash":"7153022b88264f87b9d2991296f8144557f53b16f53ea1dcaf18b462c3b40cef484ba3","first_seen":"2023-06-24T15:50:35Z","last_seen":"2026-08-15T10:14:25.232727Z","times_seen":1290,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adxpy.pages.dev/magic.js","fqdn":"adxpy.pages.dev","domain":"adxpy.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://to-get-free-roblox.pages.dev/","date":"2026-05-03T08:43:48.907Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adxpy.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 00:44:54 GMT","end":"Sat, 04 Jul 2026 01:43:34 GMT"},"fingerprint":{"sha1":"B9:0E:27:18:36:32:2C:B8:F2:E5:2F:50:96:88:4F:CF:54:4C:10:3C","sha256":"ED:9F:40:13:F5:DC:3F:FE:75:A2:AF:61:F4:2D:D7:17:14:E2:C8:D4:C5:19:DB:9E:88:D1:73:59:BF:13:F7:D1"}}},"request":{"raw":"GET /magic.js HTTP/1.1\r\nHost: adxpy.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://to-get-free-roblox.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 03 May 2026 08:43:48 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zAF0oF3X79fUe0SBeUQLw9VHp%2Fg2MY%2F3G0xfQjZloKkFcJSu6WD22H%2Fz2zFMv%2F4Z%2BwPefs90kAE9ayke96gIC6Wo2PgskS8x1D%2BAp%2BOc5MwEHTzCcBbMp0vCJgXiI1SE9R0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"c49d59185af245830cb91e4818c56238\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f5dfaeeaf4756b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":671,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"9bcbb02a6bf94ae8762ddcda5d1c80d3","sha1":"fade830681bb5b7b138db5482e7a495c1c9b296a","sha256":"b26277e44f2fe29283a55a632166f8a45dd1407a0970c13e08287406f94a0772","sha512":"54914b0f4d7625f4e40e13b11bb2bfd47c87dc6a14714c427c48c75e955980826d6605abbac7b3ca6c043356f1b91618b6f16abaf6be339be38d8ffa825e71e5","ssdeep":"","tlshash":"c101fe6e229200a84d7a509803a3fa0cfda832577160c0e1bacedb602f35f20419e4d8","first_seen":"2025-12-08T23:25:47.209165Z","last_seen":"2026-08-11T01:12:56.740212Z","times_seen":394,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adxpy.pages.dev/adx-mainstream.json","fqdn":"adxpy.pages.dev","domain":"adxpy.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://to-get-free-roblox.pages.dev/","date":"2026-05-03T08:43:48.841Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adxpy.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 00:44:54 GMT","end":"Sat, 04 Jul 2026 01:43:34 GMT"},"fingerprint":{"sha1":"B9:0E:27:18:36:32:2C:B8:F2:E5:2F:50:96:88:4F:CF:54:4C:10:3C","sha256":"ED:9F:40:13:F5:DC:3F:FE:75:A2:AF:61:F4:2D:D7:17:14:E2:C8:D4:C5:19:DB:9E:88:D1:73:59:BF:13:F7:D1"}}},"request":{"raw":"GET /adx-mainstream.json HTTP/1.1\r\nHost: adxpy.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://to-get-free-roblox.pages.dev/\r\nOrigin: https://to-get-free-roblox.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 08:43:48 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XBBmUq6tz%2BYlDku5gJ8jCTtGdRkpXBzqCXXCZGb67CvQIB%2Bk76raWr8GjAv95WrrFL3s%2FG3Qjrs3zTli0UEV3n%2FdBNxVXGV25LIvHAp1hDoJp23RlO3CHR7%2BaBbZqmw8sng%3D\"}]}\r\netag: W/\"7b49849f40013f93e7f062a5ea9f812c\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f5dfaee5e1c8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1453,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"6ffbb69834723feb9c7113271b1c2ea2","sha1":"8bfa604b64d94fad6bbeaf5c580175e4001d4dc5","sha256":"46498f749be8fd2b102eb3563d490c7890b94ed1d0b5b133e2cc3c444ed048c2","sha512":"7b15f328c00533c83fa7c65fff45e5fff27b012955d49affd579a7c7eb14a66839822b50b7947d609d53e08419128bef2773fcb5bc6f95b77731662acf7cb001","ssdeep":"","tlshash":"f9319e999f1cf29410b24ad23c33e0bef598be063908dc9551dc9c6ac2a43e04d57666","first_seen":"2026-01-30T08:57:52.033645Z","last_seen":"2026-08-11T01:12:56.711122Z","times_seen":297,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":14,"dns":1,"connect":1,"send":0,"wait":14,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"immigrationacre.com/c6/4a/a1/c64aa11db612c16c65959b87a44dac81.js","fqdn":"immigrationacre.com","domain":"immigrationacre.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://to-get-free-roblox.pages.dev/","date":"2026-05-03T08:43:48.967Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"immigrationacre.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 22:44:59 GMT","end":"Sat, 20 Jun 2026 22:44:58 GMT"},"fingerprint":{"sha1":"C5:C0:F1:09:DF:66:79:21:CE:6B:25:C3:DC:5A:3B:4E:6C:24:00:FD","sha256":"14:5E:A4:DE:46:F2:FF:8F:7D:14:D8:7C:E6:33:BC:41:57:AD:BF:24:AC:C4:3C:0F:A7:EE:34:BE:D3:48:56:5B"}}},"request":{"raw":"GET /c6/4a/a1/c64aa11db612c16c65959b87a44dac81.js HTTP/1.1\r\nHost: immigrationacre.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://to-get-free-roblox.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:43:49 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 34786\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: X-OperaMini-Phone-UA,X-UCBrowser-Device-UA,User-Agent,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Mobile,Device-Stock-UA,X-Device-User-Agent,Sec-CH-UA-Platform-Version,Sec-CH-UA,Sec-CH-UA-PlatformUser-Agent\r\nx-envoy-upstream-service-time: 3\r\nHost: immigrationacre.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 690fef5394d41d690b09bd68e87f1e6b\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":96858,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"6a574ace0c50991cb421ab9c319add9e","sha1":"ab290b96ad37658413b608b96e82a7adc1c8cce7","sha256":"0c1d45b87e48310935d95daf650f1cd3a6bdace48473f1d702374d9b8b36cef7","sha512":"564347f9f2f3a0f17eca21c6eedaa8682906738b1af7d47502ee910f66972951e05d8d95b3f5280396f620d149d685ef81c9a763d5f2bdd3afc71e0c8d5ecc88","ssdeep":"1536:8G6g/qn/325q6EWa8oN39IRnG1VDpN6CwkMDCF9q+hkxx89Y:vIeZB0mdc5pSgqJ","tlshash":"c493e8c8bf80f16443f26836222f501ff0a90c5552dcd18de9a2b8af7fb9b48e635594","first_seen":"2026-05-03T08:44:19.121857Z","last_seen":"2026-05-03T08:44:19.121857Z","times_seen":1,"resource_available":true,"data":null}},"time_used":785,"timings":{"blocked":295,"dns":0,"connect":95,"send":0,"wait":100,"receive":95,"ssl":197},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"immigrationacre.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"immigrationacre.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"immigrationacre.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.show-creative1.com%2Fsb%2Finterstitial%2Futility%2Fdefault%2Fblog%2Fflip_icon_fullpage%2Fmar24%2F1%2Findex.html\u0026l=1439\u0026fd=173","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://to-get-free-roblox.pages.dev/","date":"2026-05-03T08:43:50.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 22:18:41 GMT","end":"Thu, 23 Jul 2026 22:18:40 GMT"},"fingerprint":{"sha1":"85:96:BC:41:7A:67:17:33:3C:0F:33:72:BB:3D:4F:F3:56:97:46:09","sha256":"DD:49:0E:2F:27:46:7A:6C:59:AD:4C:03:B8:50:05:CE:D0:BE:26:63:2C:98:45:1E:56:85:0C:E8:27:00:7A:19"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.show-creative1.com%2Fsb%2Finterstitial%2Futility%2Fdefault%2Fblog%2Fflip_icon_fullpage%2Fmar24%2F1%2Findex.html\u0026l=1439\u0026fd=173 HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://to-get-free-roblox.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=874004e8-16e8-42a6-bfc4-cefd562675a5:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl26582471=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:43:50 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: Device-Stock-UA, X-UCBrowser-Device-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, X-Device-User-Agent, X-OperaMini-Phone-UA, User-Agent, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-PlatformUser-Agent, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Model\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T22:04:31.086022Z","times_seen":17907918,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"immigrationacre.com/52f212bca95373aed7ead32398143db7/invoke.js","fqdn":"immigrationacre.com","domain":"immigrationacre.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://to-get-free-roblox.pages.dev/","date":"2026-05-03T08:43:53.964Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"immigrationacre.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 22:44:59 GMT","end":"Sat, 20 Jun 2026 22:44:58 GMT"},"fingerprint":{"sha1":"C5:C0:F1:09:DF:66:79:21:CE:6B:25:C3:DC:5A:3B:4E:6C:24:00:FD","sha256":"14:5E:A4:DE:46:F2:FF:8F:7D:14:D8:7C:E6:33:BC:41:57:AD:BF:24:AC:C4:3C:0F:A7:EE:34:BE:D3:48:56:5B"}}},"request":{"raw":"GET /52f212bca95373aed7ead32398143db7/invoke.js HTTP/1.1\r\nHost: immigrationacre.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://to-get-free-roblox.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:43:54 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 20143\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Sec-CH-UA-Model,Sec-CH-UA-Mobile,Device-Stock-UA,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA,User-Agent,Sec-CH-UA-Platform-Version,Sec-CH-UA,Sec-CH-UA-Platform,X-Device-User-Agent,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List\r\nx-envoy-upstream-service-time: 2\r\nHost: immigrationacre.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 13ad2b858bdf5898614fd4989b0d58fa\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":51096,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (51096), with no line terminators","md5":"7cee939f902071855c42d2477aadf2a5","sha1":"98ad4b01a1613b36d79dc0149877385473251f54","sha256":"db7443700b00f7aa59118a490223b8dc676b8a75c827396d85da3daf0cc8ba63","sha512":"ee46c293dacf4a49d6b16ecb0570a10a6a0c1e85d3bbc110b4a144981843c7dd7ed1a10d7389298e5c8e2a2ddb57c40371c0be265e83e1e224fc0cd5e0a1900b","ssdeep":"768:Uu7DFxehMHp9GzuNWlpBCHpDBRKO8doFtXj9H6sgT:nFxehMHp9zA7BCHpDBcV+fz9H6sS","tlshash":"273317887fa1b07503b67473623f9046f25c0d0856ecd8dcd087a8a87ea87e9d1b7b25","first_seen":"2026-04-30T22:05:07.878582Z","last_seen":"2026-05-03T08:45:53.633873Z","times_seen":5,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":99,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"immigrationacre.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"immigrationacre.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"immigrationacre.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/cti/5e/97/ea/5e97eadb0ea0fb32430761d361da6aa8/1716369602.jpg","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://to-get-free-roblox.pages.dev/","date":"2026-05-03T08:43:54.446Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 02:33:25 GMT","end":"Fri, 05 Jun 2026 02:33:24 GMT"},"fingerprint":{"sha1":"4A:66:11:51:1F:1F:F3:84:B6:E4:4F:81:C1:03:83:9F:01:17:7E:82","sha256":"DA:55:E3:02:D5:3C:4E:3A:51:ED:21:0D:F4:32:52:C2:C5:31:87:50:DC:AB:13:D9:93:4A:15:0C:D9:8C:D6:4F"}}},"request":{"raw":"GET /cti/5e/97/ea/5e97eadb0ea0fb32430761d361da6aa8/1716369602.jpg HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 08:43:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 22387\r\nserver: nginx/1.21.6\r\nlast-modified: Wed, 22 May 2024 09:20:10 GMT\r\netag: \"664db8ca-5773\"\r\nexpires: Tue, 05 May 2026 08:43:54 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22387,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 320x50, components 3","md5":"e8470dc7f4e7cdba835cb5d781df620b","sha1":"a99bce902145904554f64da43b5f9393e5916a0b","sha256":"3ff623c5cdecb355a7d53629b43561ff47f232b094a4b294d7b23dddf2326303","sha512":"ba9581ea420920aefe691701b48e98d625b946e0732e52a8cffccc5b50040d8a1a48b04b6a6d0e6e49703eaaa628f8a47cdf7bc4a6bb0d47b02b7d2c9627eb0e","ssdeep":"384:nEK4NVBe8cT0x75NqaP/XjyBbLHbVShi66/mNoAq3eW3uyhaqsrszLdR:Euy75gTBbKC/mNox3eW+oaqc6dR","tlshash":"01a2e100f6b75010e917abbc8335014095a04bfd64ab962fc57a729ada284c727f36fe","first_seen":"2024-07-28T22:41:50Z","last_seen":"2026-06-06T19:08:41.531189Z","times_seen":94,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/ren.gif?sid=H4sIAAAAAAAC_1RSvYskRRytXg8DDcTzAwyUBi_wxJmt7qnu6fayw49Ab1e8kwsMpLqqei23p6uvq3tmbqI9Ty4xOQVBBKHnzext4CH6H8isaCAI29kEu4mRsXBGgszuwGoFv496RfF-7_fuTesT0kXNl-9dMxOdZXwz6FL3lZs6l2Zk3a0brke79Ip7U-chu-KOV6Ecvu71WJdedt9WYtds-tSj1KOe-5YuVWrGm6codPEw9rox7TK_6wUM4_L_va0dWO5ADk_IRWjZPvVH-iG0WCAf_PCGsruVKV57c1BnvDIlhvLgg3w3N6Mcg_MyLR2k-cH6NYxtCfl6AyY_WE8AM5yvJkCiW7Lx_DGS_GBNE8lw_4xpkkHlSOSTGA0XUNkCmi8gzF1oeUQAIbG1jXzwYMuUI377DOUrtCUXHv0FPWrJheNnkQ--v5rpsXvdZHWlTW4xThvo8QJ6Z4GiPkQ12YAeHUJUn0LL38nmo3eRD-bbNjPQcnkp6jNKmYo6XqiiDvN52ElSwTpCpTII_bAf8OBUIp0uwO0Gauug1g7q1EFdOBjIpctoxITHe2EaS9GnjDMmVULjyKeUx6KPWtyBlvchyj0U5R529ZdHL3zXEue5a7DSga0IhrLZl5n1bfNAZrZOvHX217nXzEy1M-X7ptpROQEv76OUzVwXt-xdiOqx2SS1cmZWgSdVM-OJbGZaVgTlreUl6sVSSep3vFD4nb4fy04c8KiTRp6MBQuE8vx5aqu6mRYn5OmV1M5X3_6KXbV0hU_7SkRM-CwIeepTT4gg7AkuRS8ULITVDbTdALcOJrol76SXUeiWvHTvTyT8EDY7hNAOeP0i-KgB_7jBJH-Y6lwOtVBdYQaQpkFRXUB125lmJ-SZ2fs3rv50uvGPXv0cSvxG1geibFCUDT7RPxPsZHd-3C4qPdATvrLA9YpX6nFwffSyD6FbcvEbderF4J9jiGIPtjj_yRqCpHCQaYJMnd_zpIH9T5-c11P7GXZKB0nmzJKsdOZJVmZfnJG0eukGftILoyhUaSjTnuz5PRkHVMWMxyGLWYDKtvrvJ375NwAA__-32U7XCQQAAA==","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://to-get-free-roblox.pages.dev/","date":"2026-05-03T08:43:50.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 22:18:41 GMT","end":"Thu, 23 Jul 2026 22:18:40 GMT"},"fingerprint":{"sha1":"85:96:BC:41:7A:67:17:33:3C:0F:33:72:BB:3D:4F:F3:56:97:46:09","sha256":"DD:49:0E:2F:27:46:7A:6C:59:AD:4C:03:B8:50:05:CE:D0:BE:26:63:2C:98:45:1E:56:85:0C:E8:27:00:7A:19"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_1RSvYskRRytXg8DDcTzAwyUBi_wxJmt7qnu6fayw49Ab1e8kwsMpLqqei23p6uvq3tmbqI9Ty4xOQVBBKHnzext4CH6H8isaCAI29kEu4mRsXBGgszuwGoFv496RfF-7_fuTesT0kXNl-9dMxOdZXwz6FL3lZs6l2Zk3a0brke79Ip7U-chu-KOV6Ecvu71WJdedt9WYtds-tSj1KOe-5YuVWrGm6codPEw9rox7TK_6wUM4_L_va0dWO5ADk_IRWjZPvVH-iG0WCAf_PCGsruVKV57c1BnvDIlhvLgg3w3N6Mcg_MyLR2k-cH6NYxtCfl6AyY_WE8AM5yvJkCiW7Lx_DGS_GBNE8lw_4xpkkHlSOSTGA0XUNkCmi8gzF1oeUQAIbG1jXzwYMuUI377DOUrtCUXHv0FPWrJheNnkQ--v5rpsXvdZHWlTW4xThvo8QJ6Z4GiPkQ12YAeHUJUn0LL38nmo3eRD-bbNjPQcnkp6jNKmYo6XqiiDvN52ElSwTpCpTII_bAf8OBUIp0uwO0Gauug1g7q1EFdOBjIpctoxITHe2EaS9GnjDMmVULjyKeUx6KPWtyBlvchyj0U5R529ZdHL3zXEue5a7DSga0IhrLZl5n1bfNAZrZOvHX217nXzEy1M-X7ptpROQEv76OUzVwXt-xdiOqx2SS1cmZWgSdVM-OJbGZaVgTlreUl6sVSSep3vFD4nb4fy04c8KiTRp6MBQuE8vx5aqu6mRYn5OmV1M5X3_6KXbV0hU_7SkRM-CwIeepTT4gg7AkuRS8ULITVDbTdALcOJrol76SXUeiWvHTvTyT8EDY7hNAOeP0i-KgB_7jBJH-Y6lwOtVBdYQaQpkFRXUB125lmJ-SZ2fs3rv50uvGPXv0cSvxG1geibFCUDT7RPxPsZHd-3C4qPdATvrLA9YpX6nFwffSyD6FbcvEbderF4J9jiGIPtjj_yRqCpHCQaYJMnd_zpIH9T5-c11P7GXZKB0nmzJKsdOZJVmZfnJG0eukGftILoyhUaSjTnuz5PRkHVMWMxyGLWYDKtvrvJ375NwAA__-32U7XCQQAAA== HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://to-get-free-roblox.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=874004e8-16e8-42a6-bfc4-cefd562675a5:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl26582471=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:43:50 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\nvary: Origin\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-UA-Mobile,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA,Sec-CH-UA-Platform-Version,Sec-CH-UA,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Full-Version,Sec-CH-UA-Platform,Device-Stock-UA,X-Device-User-Agent,User-Agent\r\nx-envoy-upstream-service-time: 2\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 124c0f0ce0cc8bb6891eebdbb04e7230\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T22:04:31.086022Z","times_seen":17907918,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://to-get-free-roblox.pages.dev/","date":"2026-05-03T08:43:54.144Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 05:19:27 GMT","end":"Wed, 01 Jul 2026 05:19:26 GMT"},"fingerprint":{"sha1":"BF:D8:14:32:18:86:B9:95:54:75:8D:F9:5F:29:DE:4E:F8:F8:F7:13","sha256":"0E:FA:80:0B:F4:13:81:81:4D:CF:50:35:5A:DD:DB:FA:00:0B:34:B2:2D:5D:28:08:E4:45:1F:2C:EF:D2:21:C2"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://to-get-free-roblox.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 29 Apr 2026 22:40:32 GMT\r\nexpires: Thu, 29 Apr 2027 22:40:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 295402\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-08-15T22:04:47.637196Z","times_seen":263173,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://to-get-free-roblox.pages.dev/","date":"2026-05-03T08:43:51.596Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"preferencenail.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 01:34:17 GMT","end":"Mon, 27 Jul 2026 01:34:16 GMT"},"fingerprint":{"sha1":"95:86:03:59:0E:03:98:91:87:F0:07:36:44:10:95:8E:67:97:47:D8","sha256":"51:F3:91:79:18:08:9A:FD:A7:80:AD:AA:80:FB:C8:8B:AE:27:FD:79:25:B6:37:2F:1B:C5:60:67:25:A8:A7:02"}}},"request":{"raw":"GET /sfp.js HTTP/1.1\r\nHost: preferencenail.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://to-get-free-roblox.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:43:51 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nContent-Length: 32181\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nVary: Accept-Encoding\r\nHost: preferencenail.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 65ccbba21770fbeb5d28abea6721ea02\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":85379,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-08-15T22:04:29.242352Z","times_seen":26554,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.nightdestruct.com/sb/ssp/vpn/classic-push/small/css/animate.css","fqdn":"cdn.nightdestruct.com","domain":"nightdestruct.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://to-get-free-roblox.pages.dev/","date":"2026-05-03T08:43:53.130Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nightdestruct.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 16:21:26 GMT","end":"Sun, 28 Jun 2026 16:21:25 GMT"},"fingerprint":{"sha1":"77:BA:39:E3:87:1C:89:74:C5:36:C2:0F:E9:4C:0E:35:C4:92:A6:BA","sha256":"5F:17:E6:F7:42:E9:5F:B9:9E:03:47:36:9F:79:03:3B:E2:C2:66:ED:E9:3D:14:AB:29:B0:52:4A:62:57:C4:91"}}},"request":{"raw":"GET /sb/ssp/vpn/classic-push/small/css/animate.css HTTP/1.1\r\nHost: cdn.nightdestruct.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://to-get-free-roblox.pages.dev/\r\nOrigin: https://to-get-free-roblox.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 08:43:53 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:19:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"65aa84fe-13361\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R51f8ZUNp2Vs19mEns1A4zpLzyDvCqeEWUpXhPoPmBxz4fA2ZJBu%2FrBonm5WhioW6AvgvfH7%2B%2BY6txz6MpJHSVZs8UCzQ2hB4h5qNEYdbq%2BoUgnmuu30zZ23t%2BYGk%2BEpTE50eUha4zk%3D\"}]}\r\ncf-ray: 9f5dfb090b535691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78689,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"3d4123dbfb33d27a5cfdfcfa91df6783","sha1":"e7d0eeeec54b848f0bc3da8685fa3bc88429d660","sha256":"cb7d1393b65701b2f97d8da244c2c6023e9cbc3463ecb0136b915cfc775c6887","sha512":"75c8a48dc207595e201b50b87ff68782112a21aded9f15f14185c07d40f0151d6afe74a2b278aa575caf12ac422e8166316296ed7b6573ea24e667cca4af51dd","ssdeep":"384:jvuAuF81dghu3ublZlX/m/Gu7uNUtrL4VrbZJgBhLYNKwZiMUL6Vpaj7F:jvuAu21dghu3uLu7uNKwZiMUL6Vpaj7F","tlshash":"22731bad399115845263861d83df9e68273ce5731826acef73c2488bcf8bf9867c9147","first_seen":"2024-01-20T06:37:31Z","last_seen":"2026-08-15T22:08:24.721084Z","times_seen":13382,"resource_available":false,"data":null}},"time_used":501,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":501,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.nightdestruct.com/sb/ssp/vpn/classic-push/small/css/style.css","fqdn":"cdn.nightdestruct.com","domain":"nightdestruct.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://to-get-free-roblox.pages.dev/","date":"2026-05-03T08:43:53.135Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nightdestruct.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 16:21:26 GMT","end":"Sun, 28 Jun 2026 16:21:25 GMT"},"fingerprint":{"sha1":"77:BA:39:E3:87:1C:89:74:C5:36:C2:0F:E9:4C:0E:35:C4:92:A6:BA","sha256":"5F:17:E6:F7:42:E9:5F:B9:9E:03:47:36:9F:79:03:3B:E2:C2:66:ED:E9:3D:14:AB:29:B0:52:4A:62:57:C4:91"}}},"request":{"raw":"GET /sb/ssp/vpn/classic-push/small/css/style.css HTTP/1.1\r\nHost: cdn.nightdestruct.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://to-get-free-roblox.pages.dev/\r\nOrigin: https://to-get-free-roblox.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 08:43:53 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:19:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"65aa84fe-d1b\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zb90rrmjYkC72QpekQzJMMX1Elqa5d3ESGvFzYrig32M1IVpr37Wwei43gbToxa1ohhyc63tR%2F7Epd2A2pwm0vS6ZbfSz8VQXgOAu1fDa%2Fufp8tS34MTgV9yENCp52H6NczfbeMcwg4%3D\"}]}\r\ncf-ray: 9f5dfb091b595691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3355,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"039a6734d79ed9aa51cf81c52479c5fe","sha1":"9cf29c4ea1a3880681d50c7228374f8073b7778b","sha256":"a15bad73fc8907795285b78a4a1a1bf5e7f68b4d39988b9bb165444819cf9eb1","sha512":"879f067d02f582c2ff8f9c0308cbb44b24964136c4d8074f1a1b200169b520bb49fdd2b290772dfbc3ca432fba2ce9d5b1a398eb14746613cc942dd7567fa1d9","ssdeep":"","tlshash":"3a61ba966b670a04b51ad0ab3f667b4723084007995fed757fc8620ccfc92a8d6d378e","first_seen":"2024-02-12T03:25:01Z","last_seen":"2026-08-15T10:14:25.127099Z","times_seen":3465,"resource_available":false,"data":null}},"time_used":479,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":479,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:300,400,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.143.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://to-get-free-roblox.pages.dev/","date":"2026-05-03T08:43:53.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 05:19:27 GMT","end":"Wed, 01 Jul 2026 05:19:26 GMT"},"fingerprint":{"sha1":"E9:E5:B7:DA:0A:AE:59:02:EA:10:61:71:9B:52:3A:08:42:A0:67:A5","sha256":"F6:1D:CE:31:AA:9C:7B:58:1D:1D:14:96:99:B6:58:CC:FB:AE:D5:3C:F8:FB:40:E3:45:2D:4A:54:11:B4:E2:F3"}}},"request":{"raw":"GET /css?family=Roboto:300,400,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 03 May 2026 08:43:53 GMT\r\ndate: Sun, 03 May 2026 08:43:53 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16755,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"1936a90eef3ebd4c6b40eb59d72e164d","sha1":"4c698f8dc97e2e6186d46215e209aca1b1194a5d","sha256":"412d98c2f4410a048131a7d9362fb38456ce2ff67cd4731ea411708a7996a021","sha512":"07ad2431175e5566ae435738d94d4da3e96e4856a1fe1d5917c52474cab28808cd940fec0e8f75eb2f3d573e6fe8497fc12636ef4738d1b67e9144725192b580","ssdeep":"384:p9f59g9P9r9yU9/qY4+949Y9p9fM919W969yh9/qY4X9N9t949fd9k9D939yQ9/O:pDS99YURRuWDyjooYhREHPWP2ZZYQRVs","tlshash":"48721091041704009b834ce223cebf35fe1f52117142d0b5abfd9b6b9ddbca6526939d","first_seen":"2026-02-19T22:28:01.752187Z","last_seen":"2026-08-15T21:44:09.667226Z","times_seen":10656,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.nightdestruct.com/sb/ssp/vpn/classic-push/small/js/script.js","fqdn":"cdn.nightdestruct.com","domain":"nightdestruct.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://to-get-free-roblox.pages.dev/","date":"2026-05-03T08:43:53.273Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nightdestruct.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 16:21:26 GMT","end":"Sun, 28 Jun 2026 16:21:25 GMT"},"fingerprint":{"sha1":"77:BA:39:E3:87:1C:89:74:C5:36:C2:0F:E9:4C:0E:35:C4:92:A6:BA","sha256":"5F:17:E6:F7:42:E9:5F:B9:9E:03:47:36:9F:79:03:3B:E2:C2:66:ED:E9:3D:14:AB:29:B0:52:4A:62:57:C4:91"}}},"request":{"raw":"GET /sb/ssp/vpn/classic-push/small/js/script.js HTTP/1.1\r\nHost: cdn.nightdestruct.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://to-get-free-roblox.pages.dev/\r\nOrigin: https://to-get-free-roblox.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 03 May 2026 08:43:53 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:19:42 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t5SLrCYdZ9sx3QwXWB%2Fw4aTfg6VjDFxVZhrPpzUKkCWua1%2B5t0szUgSssNQfjQD1D05cq1tKIBBpcJAf0SUhILzl2XS0cT5oVK38Pe%2FSzWkDxs8DaJvEI%2B5b%2BmZAkPUk8658yRxWDlQ%3D\"}]}\r\netag: W/\"65aa84fe-3c2\"\r\ncontent-encoding: br\r\ncf-ray: 9f5dfb09fafa2678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":962,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"0013fbb3bd9e7300fa1bc9f62501dcf0","sha1":"447e4a8994979e2e158b9beff79b94e7d1b29508","sha256":"4cf18df81115ddab6967dc82096077ee024223dac3c6ffc9b810bffb7780a20e","sha512":"288a5e82fdbfdadf11f5a15ed40b54b67dd43fd83f0666abf85ebc0f14ef3b6e5e9104c3491fdb85b40e5556b252d933ee8cbe6e381e96e01170e76c60003dc6","ssdeep":"","tlshash":"e7117d37156882f06257f027a15729d6ee32029ee81a5707721c06cd0ec47b913fa6e7","first_seen":"2023-06-25T06:36:24Z","last_seen":"2026-08-15T10:14:25.093466Z","times_seen":3562,"resource_available":false,"data":null}},"time_used":471,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":471,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://to-get-free-roblox.pages.dev/","date":"2026-05-03T08:43:54.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 05:19:27 GMT","end":"Wed, 01 Jul 2026 05:19:26 GMT"},"fingerprint":{"sha1":"BF:D8:14:32:18:86:B9:95:54:75:8D:F9:5F:29:DE:4E:F8:F8:F7:13","sha256":"0E:FA:80:0B:F4:13:81:81:4D:CF:50:35:5A:DD:DB:FA:00:0B:34:B2:2D:5D:28:08:E4:45:1F:2C:EF:D2:21:C2"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://to-get-free-roblox.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 29 Apr 2026 22:40:32 GMT\r\nexpires: Thu, 29 Apr 2027 22:40:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 295402\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-08-15T22:04:47.637196Z","times_seen":263173,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/impr.gif?sid=H4sIAAAAAAAC_1RTPW8cRRietS0KKCI-JRq0hQsi5c4zs7NfpIsIFBA7kKAUEULztc5we7ubnd27y1UOQaG1hJDSIO29d7ZBWAj-ATpTBQnJR3UScUNFQ4MUWnT2SU62eD_2eTTP-46eeTiqT1Abaj6_fi0fmjTlG34bu2_fMpnK-9bdvOkS3MaX3VsmC9hld7AIZe8d4rE2vui-r2Un36CYYEwwcd8zpU7ywcYpCqY4jEk7xm1G28RnMCif7229CpY7oHon6BUwanbhr-Q2GDmFrPvTu9p2qry4dLVbp7zKS-ipg0-yTpb3M-iel0npQJIdLNmQ2xlCj1Ygzw6WG0Demyw2AGFmaOWNJyCyg-WYIHp7Z5OKFHQGQr0E_d4UdHoEhk9B5g_AqGMEIBVsbkHW3d_Myz6_d4byBTpDa0__BdOfobUnr0HW_fFKagbujTytK5NnFgZJA2YwBbM9haI-gmq4AqZ_BLL6Aoz6HW08_RCy7mTLpjkYNV-PQoYx01GLBDpqMcqDlkgka0mdKD-gQehz__SKTDIFblegtg7UxoE6caAuHOiquctwxCThXpDESoaYccaUFjiOKMY8liHU8j4YtQuy_Oq7Qt2pOj0aT6qy1vt1Ji2NR_Sw_qxIaeBHlIVkRM7aiJIgYv6IzNdtqiVPqK945EVEY6Ewi5ngDJNIhkEUR5x-f5t51As98un-mcipxGQhMaJQlDvQMV8f-8PjN3-YIef1a2DVKthqhpyPdqCnmj2VWmqbfZXaWpBlpsvsNeO82h7xvbza1hkCXu5CqZqJKe7aByCr1fEwsWqcLwIXVTPmQjVjoyoE5d35Oiax0grTFg2waIVhGLWiUPktomLKSMiTwNeTxFb1s1Q_Fq1Q6qAVswWfYYylVJgwMipO0MsLOzjffDuBjp67Pk0ooULy2PdCj2sVaq486sURYZ4SIVjTgLErwK0DQzNDHyQXoTAz9NbDv0HwI7DpEUjjAK9d4P2xRzHwO-BjGGaHiclUz0jdlnkXVN5AUa1Bdc8ZpSfo1fHHN6_8cmrN61cfgZa_oeUHsmygKBv43PyKYDu9__NWUZmuGfKFV29UvNIvADfH-jFIM0MX_vnz9NFc-oOCLHbAFucn2RyBKBCkBkGqz_9z0YB9phfn9ch-CdulAyJ1xiIt0USkZboL1szdxNNUYhyFAfGiRBOPKZn4EYtVwLHnaajszPz34uP_AwAA__-RTaeprQQAAA==","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.127.243","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://to-get-free-roblox.pages.dev/","date":"2026-05-03T08:43:54.449Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 22:18:41 GMT","end":"Thu, 23 Jul 2026 22:18:40 GMT"},"fingerprint":{"sha1":"85:96:BC:41:7A:67:17:33:3C:0F:33:72:BB:3D:4F:F3:56:97:46:09","sha256":"DD:49:0E:2F:27:46:7A:6C:59:AD:4C:03:B8:50:05:CE:D0:BE:26:63:2C:98:45:1E:56:85:0C:E8:27:00:7A:19"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1RTPW8cRRietS0KKCI-JRq0hQsi5c4zs7NfpIsIFBA7kKAUEULztc5we7ubnd27y1UOQaG1hJDSIO29d7ZBWAj-ATpTBQnJR3UScUNFQ4MUWnT2SU62eD_2eTTP-46eeTiqT1Abaj6_fi0fmjTlG34bu2_fMpnK-9bdvOkS3MaX3VsmC9hld7AIZe8d4rE2vui-r2Un36CYYEwwcd8zpU7ywcYpCqY4jEk7xm1G28RnMCif7229CpY7oHon6BUwanbhr-Q2GDmFrPvTu9p2qry4dLVbp7zKS-ipg0-yTpb3M-iel0npQJIdLNmQ2xlCj1Ygzw6WG0Demyw2AGFmaOWNJyCyg-WYIHp7Z5OKFHQGQr0E_d4UdHoEhk9B5g_AqGMEIBVsbkHW3d_Myz6_d4byBTpDa0__BdOfobUnr0HW_fFKagbujTytK5NnFgZJA2YwBbM9haI-gmq4AqZ_BLL6Aoz6HW08_RCy7mTLpjkYNV-PQoYx01GLBDpqMcqDlkgka0mdKD-gQehz__SKTDIFblegtg7UxoE6caAuHOiquctwxCThXpDESoaYccaUFjiOKMY8liHU8j4YtQuy_Oq7Qt2pOj0aT6qy1vt1Ji2NR_Sw_qxIaeBHlIVkRM7aiJIgYv6IzNdtqiVPqK945EVEY6Ewi5ngDJNIhkEUR5x-f5t51As98un-mcipxGQhMaJQlDvQMV8f-8PjN3-YIef1a2DVKthqhpyPdqCnmj2VWmqbfZXaWpBlpsvsNeO82h7xvbza1hkCXu5CqZqJKe7aByCr1fEwsWqcLwIXVTPmQjVjoyoE5d35Oiax0grTFg2waIVhGLWiUPktomLKSMiTwNeTxFb1s1Q_Fq1Q6qAVswWfYYylVJgwMipO0MsLOzjffDuBjp67Pk0ooULy2PdCj2sVaq486sURYZ4SIVjTgLErwK0DQzNDHyQXoTAz9NbDv0HwI7DpEUjjAK9d4P2xRzHwO-BjGGaHiclUz0jdlnkXVN5AUa1Bdc8ZpSfo1fHHN6_8cmrN61cfgZa_oeUHsmygKBv43PyKYDu9__NWUZmuGfKFV29UvNIvADfH-jFIM0MX_vnz9NFc-oOCLHbAFucn2RyBKBCkBkGqz_9z0YB9phfn9ch-CdulAyJ1xiIt0USkZboL1szdxNNUYhyFAfGiRBOPKZn4EYtVwLHnaajszPz34uP_AwAA__-RTaeprQQAAA== HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=874004e8-16e8-42a6-bfc4-cefd562675a5:2:1; pdhtkv=true; uncs=3; pdhtkv29=true; uncs29=2; u_pl26582471=1; u_pl28216845=1; slecaf25da8381e0bd0494ba4018c76898a2=[4323731]; ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.twtNFiZIYqnn47KdYzDJoW8eDHWfpPoiVWBTyKH6zdA; iprc_l+9985ebf3f8093d45ed65cdd4db7276c2=4323731; iprc_l:4323731=1; pdhtkv32=true; uncs32=1; u_pl26582436=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:43:54 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-UA-Mobile,X-Device-User-Agent,User-Agent,Sec-CH-UA-Platform-Version,Sec-CH-UA,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Platform,Device-Stock-UA,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 2\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 03f5a6f2b073e2b65d4490bd34a30d35\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T22:04:31.086022Z","times_seen":17907918,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://to-get-free-roblox.pages.dev/","date":"2026-05-03T08:43:49.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"preferencenail.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 01:34:17 GMT","end":"Mon, 27 Jul 2026 01:34:16 GMT"},"fingerprint":{"sha1":"95:86:03:59:0E:03:98:91:87:F0:07:36:44:10:95:8E:67:97:47:D8","sha256":"51:F3:91:79:18:08:9A:FD:A7:80:AD:AA:80:FB:C8:8B:AE:27:FD:79:25:B6:37:2F:1B:C5:60:67:25:A8:A7:02"}}},"request":{"raw":"GET /sfp.js HTTP/1.1\r\nHost: preferencenail.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://to-get-free-roblox.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:43:49 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nContent-Length: 32181\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nVary: Accept-Encoding\r\nHost: preferencenail.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 3de5924bf39ba2ed5749a2cd8f2ae5cf\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":85379,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-08-15T22:04:29.242352Z","times_seen":26554,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":58,"dns":0,"connect":17,"send":0,"wait":21,"receive":19,"ssl":39},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"immigrationacre.com/6dd5e3d7ac37d33b5abc87810f6ac7f3/invoke.js","fqdn":"immigrationacre.com","domain":"immigrationacre.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://to-get-free-roblox.pages.dev/","date":"2026-05-03T08:43:50.963Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"immigrationacre.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 22:44:59 GMT","end":"Sat, 20 Jun 2026 22:44:58 GMT"},"fingerprint":{"sha1":"C5:C0:F1:09:DF:66:79:21:CE:6B:25:C3:DC:5A:3B:4E:6C:24:00:FD","sha256":"14:5E:A4:DE:46:F2:FF:8F:7D:14:D8:7C:E6:33:BC:41:57:AD:BF:24:AC:C4:3C:0F:A7:EE:34:BE:D3:48:56:5B"}}},"request":{"raw":"GET /6dd5e3d7ac37d33b5abc87810f6ac7f3/invoke.js HTTP/1.1\r\nHost: immigrationacre.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://to-get-free-roblox.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:43:51 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 20229\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Mobile,Device-Stock-UA,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA,User-Agent,Sec-CH-UA-Platform-Version,Sec-CH-UA,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List\r\nx-envoy-upstream-service-time: 4\r\nHost: immigrationacre.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: ab8025b160eb091cb628207d4efbf818\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":51186,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (51186), with no line terminators","md5":"e609339b8123b13519ef68ccf94d74da","sha1":"fa23bc1ae1cc5ee0881ad97627ea1605f3d3c359","sha256":"063f54e22a5cc8ad214b853463aeb8ec14dcf1a3eabd3157ab6afb0b4a5ad99d","sha512":"f4254a4b675bc0a95d151165d4afcc4e64dd2832c0097db7bc7d8a95bde6e3b0f1840e093b5e327d969c6e6d561b28448fdafa0b940f40c61e27fb6a0e160030","ssdeep":"768:Uj7jxeEGWHp9GAuNWlpBCHpDBRKO8doFtXj9H6sgT:8xeEGWHp9AA7BCHpDBcV+fz9H6sS","tlshash":"6b3317887fa1b0b503b67473623f9046f25c0d0955ecd8dcd087a8a87ea87e9d1b7b25","first_seen":"2026-05-03T08:40:46.541175Z","last_seen":"2026-05-03T08:44:19.127862Z","times_seen":4,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":102,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"immigrationacre.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"immigrationacre.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"immigrationacre.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/watch.146235150587.js?key=6dd5e3d7ac37d33b5abc87810f6ac7f3\u0026kw=%5B%22easy%22%2C%22ways%22%2C%22to%22%2C%22get%22%2C%22free%22%2C%22roblox%22%2C%22legit%22%2C%22tips%22%5D\u0026refer=https%3A%2F%2Fto-get-free-roblox.pages.dev%2F\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=c3445600-5d69-41ee-a032-d80eedc757d5%3A2%3A1","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://to-get-free-roblox.pages.dev/","date":"2026-05-03T08:43:51.087Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 21:50:47 GMT","end":"Thu, 23 Jul 2026 21:50:46 GMT"},"fingerprint":{"sha1":"23:74:93:25:BB:94:6A:F0:09:05:7F:57:73:50:14:CD:19:AA:AF:20","sha256":"13:12:D4:15:47:A9:32:60:B9:69:04:44:B0:1C:A6:FF:80:89:A8:57:85:61:DB:5D:BC:87:06:24:86:84:51:44"}}},"request":{"raw":"GET /watch.146235150587.js?key=6dd5e3d7ac37d33b5abc87810f6ac7f3\u0026kw=%5B%22easy%22%2C%22ways%22%2C%22to%22%2C%22get%22%2C%22free%22%2C%22roblox%22%2C%22legit%22%2C%22tips%22%5D\u0026refer=https%3A%2F%2Fto-get-free-roblox.pages.dev%2F\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=c3445600-5d69-41ee-a032-d80eedc757d5%3A2%3A1 HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://to-get-free-roblox.pages.dev/\r\nOrigin: https://to-get-free-roblox.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 307 Temporary Redirect\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:43:51 GMT\r\nContent-Type: text/html\r\nContent-Length: 0\r\nConnection: keep-alive\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: X-UCBrowser-Device-UA,User-Agent,Sec-CH-UA-Platform-Version,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform,Sec-CH-UA-Model,X-Device-User-Agent,Sec-CH-UA,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Mobile,Device-Stock-UA,X-OperaMini-Phone-UA\r\naccess-control-allow-origin: https://to-get-free-roblox.pages.dev\r\naccess-control-allow-credentials: true\r\nlocation: https://kettledroopingcontinuation.com/watch.146235150587.js?key=6dd5e3d7ac37d33b5abc87810f6ac7f3\u0026kw=%5B%22easy%22%2C%22ways%22%2C%22to%22%2C%22get%22%2C%22free%22%2C%22roblox%22%2C%22legit%22%2C%22tips%22%5D\u0026refer=https%3A%2F%2Fto-get-free-roblox.pages.dev%2F\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=c3445600-5d69-41ee-a032-d80eedc757d5%3A2%3A1\u0026rmtc=t\u0026shv=2\u0026sht=wjUXe0tkPnGhBGLCNgj4JVzhsPTOoNgw97DXFoZmvW4\u0026fstu=019ded02-1b07-760e-91cc-95e36638c8b1\u0026st1=e8fc851ee63504de15665f611b12a82b\u0026ps1=1777797831\r\nset-cookie: uid_id2=c3445600-5d69-41ee-a032-d80eedc757d5:2:1; expires=Sun, 10 May 2026 08:43:51 GMT; path=/; secure; SameSite=None\nain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.FQfjBon4tRZU9dtm4HYzCZWTDAe7qtA8cMI3ADMKGRk; expires=Sun, 03 May 2026 08:44:51 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 1\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 8c7d5af572db84ee0ae812906f28af26\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4321,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T22:04:31.086022Z","times_seen":17907918,"resource_available":true,"data":null}},"time_used":696,"timings":{"blocked":299,"dns":0,"connect":95,"send":0,"wait":99,"receive":0,"ssl":201},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.nightdestruct.com%2Fsb%2Finterstitial%2Futility%2Fdefault%2Fblog%2Fflip_icon_fullpage%2Fmar24%2F1%2Fcss%2Fstyle.css\u0026l=4754\u0026fd=526","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.127.243","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://to-get-free-roblox.pages.dev/","date":"2026-05-03T08:43:51.207Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 22:18:41 GMT","end":"Thu, 23 Jul 2026 22:18:40 GMT"},"fingerprint":{"sha1":"85:96:BC:41:7A:67:17:33:3C:0F:33:72:BB:3D:4F:F3:56:97:46:09","sha256":"DD:49:0E:2F:27:46:7A:6C:59:AD:4C:03:B8:50:05:CE:D0:BE:26:63:2C:98:45:1E:56:85:0C:E8:27:00:7A:19"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.nightdestruct.com%2Fsb%2Finterstitial%2Futility%2Fdefault%2Fblog%2Fflip_icon_fullpage%2Fmar24%2F1%2Fcss%2Fstyle.css\u0026l=4754\u0026fd=526 HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://to-get-free-roblox.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=874004e8-16e8-42a6-bfc4-cefd562675a5:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl26582471=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:43:51 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Device-Stock-UA, User-Agent, Sec-CH-UA, Sec-CH-UA-PlatformUser-Agent, Sec-CH-UA-Model, Sec-CH-UA-Mobile, X-Device-User-Agent, X-OperaMini-Phone-UA, X-UCBrowser-Device-UA, Sec-CH-UA-Platform-Version\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T22:04:31.086022Z","times_seen":17907918,"resource_available":true,"data":null}},"time_used":671,"timings":{"blocked":287,"dns":1,"connect":93,"send":0,"wait":97,"receive":0,"ssl":190},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sourshaped.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.nightdestruct.com%2Fsb%2Fssp%2Fvpn%2Fclassic-push%2Fsmall%2Fcss%2Fstyle.css\u0026l=3355\u0026fd=494","fqdn":"sourshaped.com","domain":"sourshaped.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://to-get-free-roblox.pages.dev/","date":"2026-05-03T08:43:53.613Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sourshaped.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 00:05:19 GMT","end":"Mon, 27 Jul 2026 00:05:18 GMT"},"fingerprint":{"sha1":"9E:9D:89:63:27:09:09:E1:DE:EF:A3:53:5A:4C:B4:8F:37:96:26:12","sha256":"0D:74:F5:C7:12:ED:B6:75:69:22:A8:F1:16:86:18:85:88:22:BF:39:04:76:47:0E:7B:64:51:C3:94:F0:5A:7F"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.nightdestruct.com%2Fsb%2Fssp%2Fvpn%2Fclassic-push%2Fsmall%2Fcss%2Fstyle.css\u0026l=3355\u0026fd=494 HTTP/1.1\r\nHost: sourshaped.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://to-get-free-roblox.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:43:53 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: Sec-CH-UA-Platform-Version, Device-Stock-UA, Sec-CH-UA, Sec-CH-UA-PlatformUser-Agent, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Mobile, X-Device-User-Agent, X-OperaMini-Phone-UA, X-UCBrowser-Device-UA, User-Agent\r\nHost: sourshaped.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T22:04:31.086022Z","times_seen":17907918,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sourshaped.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.nightdestruct.com%2Fsb%2Fssp%2Fvpn%2Fclassic-push%2Fsmall%2Fcss%2Fanimate.css\u0026l=78689\u0026fd=514","fqdn":"sourshaped.com","domain":"sourshaped.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://to-get-free-roblox.pages.dev/","date":"2026-05-03T08:43:53.635Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sourshaped.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 00:05:19 GMT","end":"Mon, 27 Jul 2026 00:05:18 GMT"},"fingerprint":{"sha1":"9E:9D:89:63:27:09:09:E1:DE:EF:A3:53:5A:4C:B4:8F:37:96:26:12","sha256":"0D:74:F5:C7:12:ED:B6:75:69:22:A8:F1:16:86:18:85:88:22:BF:39:04:76:47:0E:7B:64:51:C3:94:F0:5A:7F"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.nightdestruct.com%2Fsb%2Fssp%2Fvpn%2Fclassic-push%2Fsmall%2Fcss%2Fanimate.css\u0026l=78689\u0026fd=514 HTTP/1.1\r\nHost: sourshaped.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://to-get-free-roblox.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:43:53 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: Sec-CH-UA-Platform-Version, Device-Stock-UA, Sec-CH-UA, Sec-CH-UA-PlatformUser-Agent, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Mobile, X-Device-User-Agent, X-OperaMini-Phone-UA, X-UCBrowser-Device-UA, User-Agent\r\nHost: sourshaped.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T22:04:31.086022Z","times_seen":17907918,"resource_available":true,"data":null}},"time_used":172,"timings":{"blocked":76,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tse1.mm.bing.net/th?q=to%20get%20free%20roblox\u0026w=720\u0026h=405\u0026c=5\u0026rs=1\u0026p=0","fqdn":"tse1.mm.bing.net","domain":"bing.net","tld":"net"},"ip":{"addr":"150.171.28.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://to-get-free-roblox.pages.dev/","date":"2026-05-03T08:43:48.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mm.bing.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft TLS G2 RSA CA OCSP 02","organization":"Microsoft Corporation"},"validity":{"start":"Thu, 16 Apr 2026 05:53:02 GMT","end":"Tue, 13 Oct 2026 05:53:02 GMT"},"fingerprint":{"sha1":"24:F3:B1:CE:29:AF:66:D1:5D:3B:14:70:5D:E2:07:95:7C:41:70:E7","sha256":"F8:C7:F0:64:A9:0F:66:DB:B5:45:C8:CA:A8:72:A1:0A:8A:68:92:9D:6F:46:02:47:A2:2D:24:45:61:F5:C8:2E"}}},"request":{"raw":"GET /th?q=to%20get%20free%20roblox\u0026w=720\u0026h=405\u0026c=5\u0026rs=1\u0026p=0 HTTP/1.1\r\nHost: tse1.mm.bing.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://to-get-free-roblox.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=5184000\r\ncontent-length: 46847\r\ncontent-type: image/jpeg\r\nx-cache: TCP_MISS\r\nhttpcacheability: 4\r\nx-resolved-thumbnail-id: OIP.vmg1Sfa4T8PNbQvEisqcoQHaEK\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ntiming-allow-origin: *\r\nreport-to: {\"group\":\"network-errors\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://aefd.nelreports.net/api/report?cat=bingth\u0026ndcParam=nadatio\"}]}\r\nnel: {\"report_to\":\"network-errors\",\"max_age\":604800,\"success_fraction\":0.001,\"failure_fraction\":1.0}\r\nx-powered-by: ASP.NET\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nx-msedge-ref: Ref A: FFA3A3EF79144E5181D1E166BDE9B4DB Ref B: OSL231050214054 Ref C: 2026-05-03T08:43:48Z\r\ndate: Sun, 03 May 2026 08:43:48 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":46847,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 720x405, components 3","md5":"b0172454e84750169758732a02241bcf","sha1":"104cd7bc7286f4b1130b37f5c68523328abf419f","sha256":"3524e613a3273d4fa376a48a6d3260f321204264f4194921ec194c76d6af063b","sha512":"b889111dc3d97234ccbd51514fe33af23824588d75f73d48ba828157f27609db6c0203da47a1cee6494e918f4440c2bf260f39a322efad2d44a32f3ffba3348b","ssdeep":"768:hswHdJArIHvJE5nd8V4jWDBIE3P4kQrEnSSoha+9I99IJaHPsN0S83px57cpY:hswHderIP6tO4CBIE3PBBSxhuH0NL8nJ","tlshash":"cb23f10b0e59824f5c1a36fb0f3a7e1ab7a4e3e28c0274607f2867f5721d1e950ed469","first_seen":"2026-05-03T08:44:19.128897Z","last_seen":"2026-05-03T08:44:19.128897Z","times_seen":1,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":21,"dns":13,"connect":2,"send":0,"wait":42,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/_/ytembeds/_/js/k=ytembeds.base.en_US.jCqEhtrZtB0.2021.O/am=AAAABA/d=1/exm=base,root/ed=1/br=1/rs=AGKMywEhW0-Lnggvkj9sdEAhZwS6T0ejZA/m=r78Drb","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","date":"2026-05-03T08:43:49.571Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 05:17:21 GMT","end":"Wed, 01 Jul 2026 05:17:20 GMT"},"fingerprint":{"sha1":"2F:4C:57:A4:4A:60:44:C4:08:82:D4:9D:9C:A9:1A:8F:89:5F:E8:F0","sha256":"BE:DC:F0:E9:A5:84:8F:67:24:9D:57:FE:79:42:FA:AA:A7:F8:1D:5F:B1:EB:36:BF:36:EE:24:98:71:31:97:4A"}}},"request":{"raw":"GET /s/_/ytembeds/_/js/k=ytembeds.base.en_US.jCqEhtrZtB0.2021.O/am=AAAABA/d=1/exm=base,root/ed=1/br=1/rs=AGKMywEhW0-Lnggvkj9sdEAhZwS6T0ejZA/m=r78Drb HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/youtube-main-app-web-scs-key\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"youtube-main-app-web-scs-key\"\r\nreport-to: {\"group\":\"youtube-main-app-web-scs-key\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube-main-app-web-scs-key\"}]}\r\ncontent-length: 188386\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 02 May 2026 18:19:51 GMT\r\nexpires: Sun, 02 May 2027 18:19:51 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Fri, 01 May 2026 05:08:46 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 51838\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":644400,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2125)","md5":"f0d775ef3b7b3052b0c492d7ce8aaae5","sha1":"65136562d3222f8283263c431523a1edf8884a9c","sha256":"6cf835db18b14acd72a21a9c2535719d487932144a1c66297193f4abba6c0662","sha512":"bbe3e9471bbd44c6f59aad8d4001373b20b9dc09f793cd962aef0bfc029b63b184f5f57ebb30f9c18dd1402ecaa3907b70c852335fca9209e467ad8f4282811f","ssdeep":"12288:D9miHLGEqYL+E8aFRV3wVQCAt1lDxBJKQhVrdN8Z:pmiZqYCaFb3wVQCAtDrdNQ","tlshash":"73d46dd4b292b0b687866d66e47f4053b17f5d42f1044878f0f66eec14f8e4ca1bab29","first_seen":"2026-05-01T13:17:55.952129Z","last_seen":"2026-05-04T17:22:13.694848Z","times_seen":2566,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ytimg.com/vi/jtWChGOUols/maxresdefault.jpg?sqp=-oaymwEoCIAKENAF8quKqQMcGADwAQH4AbYIgAKAD4oCDAgAEAEYciA7KDowDw==\u0026rs=AOn4CLB6RWQPShLv9_ArVMIlV3gJ4Ze7gQ","fqdn":"i.ytimg.com","domain":"ytimg.com","tld":"com"},"ip":{"addr":"142.251.143.150","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","date":"2026-05-03T08:43:49.841Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgestatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 05:17:20 GMT","end":"Wed, 01 Jul 2026 05:17:19 GMT"},"fingerprint":{"sha1":"B5:72:47:31:D1:57:21:70:68:13:4D:16:58:F1:9C:61:8C:D0:CA:E2","sha256":"37:5F:72:AD:EB:E1:DD:55:B3:5D:EE:37:44:D4:0D:C6:74:9E:5A:8A:0D:C1:02:57:90:06:7C:8B:46:58:B2:86"}}},"request":{"raw":"GET /vi/jtWChGOUols/maxresdefault.jpg?sqp=-oaymwEoCIAKENAF8quKqQMcGADwAQH4AbYIgAKAD4oCDAgAEAEYciA7KDowDw==\u0026rs=AOn4CLB6RWQPShLv9_ArVMIlV3gJ4Ze7gQ HTTP/1.1\r\nHost: i.ytimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-type: image/jpeg\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 45355\r\ndate: Sun, 03 May 2026 08:43:49 GMT\r\nexpires: Sun, 03 May 2026 10:43:49 GMT\r\ncache-control: public, max-age=7200\r\netag: \"1733381689\"\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":45355,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x720, components 3","md5":"a0dd7458da04730522ab56376623dbe6","sha1":"fc1ee7e5dd39ff58ff14ec5940250293da642a6e","sha256":"8ff504e71f14044fa2f35199eb1d0964f93a2a4c1ea7244949c3de42b82249b2","sha512":"887c5e8aa0006a08cedee4277dbef361bd5351528bebc34aeb08755e8133f9167ddd4ebc19cd72242887025e3561eb1eaaa07624632be53dd68526bfbb56d3d2","ssdeep":"768:forV1M7gmGqI3UKUAKmu1rnayi2ktrbqJ0SNqJQ4jMv3NEkcgkkMVnI1sPl2jK+s:W1IgNq9bAKTdKxR2bv409JqD+p+","tlshash":"9b13d063eb969548d789973249d30f38bfa7b77c9fa85a133784402084f8bac1e1e640","first_seen":"2025-12-07T19:26:05.187607Z","last_seen":"2026-05-03T08:44:19.130502Z","times_seen":4,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":87,"dns":1,"connect":8,"send":0,"wait":33,"receive":29,"ssl":75},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.show-creative1.com/sb/interstitial/utility/default/blog/flip_icon_fullpage/mar24/1/index.html","fqdn":"cdn.show-creative1.com","domain":"show-creative1.com","tld":"com"},"ip":{"addr":"104.21.15.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://to-get-free-roblox.pages.dev/","date":"2026-05-03T08:43:50.484Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"show-creative1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Apr 2026 01:42:43 GMT","end":"Thu, 02 Jul 2026 02:41:28 GMT"},"fingerprint":{"sha1":"E5:DE:57:6E:2B:86:96:31:27:7E:74:48:4B:76:32:AA:86:9A:48:06","sha256":"9A:F1:DF:30:DB:8E:88:16:44:D7:78:1A:9B:36:AB:CD:11:72:FF:FC:89:21:83:88:2D:A7:D7:CF:92:F1:49:CB"}}},"request":{"raw":"GET /sb/interstitial/utility/default/blog/flip_icon_fullpage/mar24/1/index.html HTTP/1.1\r\nHost: cdn.show-creative1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://to-get-free-roblox.pages.dev/\r\nOrigin: https://to-get-free-roblox.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 08:43:50 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Mon, 04 Mar 2024 15:58:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9uiw9QB3Zb39rIcwXkVIO6N34apex4WCmz5TknxYznL0spQAj%2Fz6%2B%2BKrCOnwjbY%2BuqVMnG4k1uFtX1Mi2F0ctcjla2EjLNt6R%2BO1AQWwdHlkcOKafX7O0a8NQMqieV7lB3EXXFWMHaR3\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9f5dfaf8a80f0b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1439,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"e5dade43b86f31b8993a02f130929288","sha1":"4c8a7869561d81f24ddbdd1f67d29c70d317fdec","sha256":"1f5f2bf464ffa7b60533301f07bc348200edbda010a6a8300b9bff19f2ec44a6","sha512":"5b3e0d34603883df4ae2cde3e6c215bf2f6cf8f6d90666116b15eba9ec3eb47daa8c87248ba22dcdcf5c2f729fe16b4b0b602de2799e5c22065e56da2e7bb367","ssdeep":"","tlshash":"cf21bb50a9eeea32019341867f303f23d981ec839d46285172bc8a54dbe2ad6c92730b","first_seen":"2025-10-16T22:58:39.340672Z","last_seen":"2026-07-04T23:06:50.355021Z","times_seen":125,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":20,"dns":1,"connect":1,"send":0,"wait":137,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"cdn.show-creative1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"cdn.show-creative1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sourshaped.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.nightdestruct.com%2Fsb%2Fssp%2Fvpn%2Fclassic-push%2Fsmall%2Fjs%2Fscript.js\u0026l=962\u0026fd=476","fqdn":"sourshaped.com","domain":"sourshaped.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://to-get-free-roblox.pages.dev/","date":"2026-05-03T08:43:53.750Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sourshaped.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 00:05:19 GMT","end":"Mon, 27 Jul 2026 00:05:18 GMT"},"fingerprint":{"sha1":"9E:9D:89:63:27:09:09:E1:DE:EF:A3:53:5A:4C:B4:8F:37:96:26:12","sha256":"0D:74:F5:C7:12:ED:B6:75:69:22:A8:F1:16:86:18:85:88:22:BF:39:04:76:47:0E:7B:64:51:C3:94:F0:5A:7F"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.nightdestruct.com%2Fsb%2Fssp%2Fvpn%2Fclassic-push%2Fsmall%2Fjs%2Fscript.js\u0026l=962\u0026fd=476 HTTP/1.1\r\nHost: sourshaped.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://to-get-free-roblox.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:43:53 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: Sec-CH-UA-Model, X-Device-User-Agent, X-UCBrowser-Device-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA-Mobile, Device-Stock-UA, X-OperaMini-Phone-UA, User-Agent, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-PlatformUser-Agent\r\nHost: sourshaped.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T22:04:31.086022Z","times_seen":17907918,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":57,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"to-get-free-roblox.pages.dev/favicon.svg","fqdn":"to-get-free-roblox.pages.dev","domain":"to-get-free-roblox.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://to-get-free-roblox.pages.dev/","date":"2026-05-03T08:43:48.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"to-get-free-roblox.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Apr 2026 20:17:24 GMT","end":"Thu, 23 Jul 2026 21:17:13 GMT"},"fingerprint":{"sha1":"69:8D:7E:C0:21:55:45:43:9F:6C:83:71:AD:E8:14:B9:34:7A:CB:6B","sha256":"C9:FF:F5:85:6F:54:AF:5A:CF:97:12:2C:77:BE:D9:52:7B:F1:CA:7F:A2:B8:08:99:EB:99:4D:13:BB:91:44:6C"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: to-get-free-roblox.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://to-get-free-roblox.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 03 May 2026 08:43:48 GMT\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=6,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BqybeFbfnjjzqLlcOCYyf7e9Txc753qsytLraqdV5%2FQahCWh9eBxnUB4Tf3frK8zXlCyihG329ipaGbb1ItasQLPAgj6numBAEwNuaMOLTB6LErgRPQgxG3K47E7%2BeY0D1IfBPc2XQeYbevnbIbs\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"c32bf1839a02c28417636e2fbfe32b83\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f5dfaed5aff56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1039,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3e5eb335b0265fa668f3b7a8bb83dd62","sha1":"3a7497bfe01d5f0dd7f93b25400ff8dd4410b033","sha256":"4183fc50d0ecbe4f28d32f897b93b712a6e90df092b0b5d921b51ce9da6931ee","sha512":"b3fb01f8dce34190449c733e25a5818ce09b3957fbe5088be6877f89d0f32ed35e793a245ae2d736cd17031d8183183d0e4188b2d93f7faaa286b5b88f8179e6","ssdeep":"","tlshash":"bf11ef5fc341983af23ed341eab4da49863568cb91f523d8fed06d29b43a5d61409788","first_seen":"2025-05-31T11:23:43.744066Z","last_seen":"2026-08-11T01:12:56.70129Z","times_seen":497,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adxpy.pages.dev/ads.js","fqdn":"adxpy.pages.dev","domain":"adxpy.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://to-get-free-roblox.pages.dev/","date":"2026-05-03T08:43:48.940Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adxpy.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 00:44:54 GMT","end":"Sat, 04 Jul 2026 01:43:34 GMT"},"fingerprint":{"sha1":"B9:0E:27:18:36:32:2C:B8:F2:E5:2F:50:96:88:4F:CF:54:4C:10:3C","sha256":"ED:9F:40:13:F5:DC:3F:FE:75:A2:AF:61:F4:2D:D7:17:14:E2:C8:D4:C5:19:DB:9E:88:D1:73:59:BF:13:F7:D1"}}},"request":{"raw":"GET /ads.js HTTP/1.1\r\nHost: adxpy.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://to-get-free-roblox.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 03 May 2026 08:43:48 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ejdt12s6JgyyrahJcCwM1brGdyNanPTUmVfEk6kD6tPU6LfdQEn2yVrcDrYvuvpubut81rYQdgiDJFSUQ81Tz6%2FUKGwMeQ0aEIQFGYc4aqC5gzHI2oiPa0sYxU1la1Rr1MA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"1bc4a8b41519c6fae69917cf3ea9f576\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f5dfaeeef7856b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4034,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"28a8ee5b231d6993efeaeb288506fba6","sha1":"185e282511210752916a8d4fcc28642f02e4dc5e","sha256":"81496c62f33c7090e09cd8ea1d016980fc4432fb6ca00450ccea59b926daa7e1","sha512":"b1cf24abc589692314ada61a5a266b280ce2ad1297f5be58b94ececb90e2d718021795ca3998cb142e5937cff260d4aaeaffe5759bb8e67dff20e76bec939658","ssdeep":"","tlshash":"cb81011920a100651eb7236a7be3625dfba43053b81281a4bdccdb185fb9d1091f7fed","first_seen":"2025-10-25T03:17:17.993778Z","last_seen":"2026-08-11T01:12:56.750204Z","times_seen":414,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"protrafficinspector.com/stats","fqdn":"protrafficinspector.com","domain":"protrafficinspector.com","tld":"com"},"ip":{"addr":"18.195.43.118","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://to-get-free-roblox.pages.dev/","date":"2026-05-03T08:43:49.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"statistics.it.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 14 Apr 2026 00:00:00 GMT","end":"Wed, 28 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:66:77:D7:9E:99:80:D4:C4:22:4B:79:2F:16:2B:49:2C:08:07:99","sha256":"54:26:39:E0:45:11:B3:20:EE:6C:3E:B3:C0:57:5D:F2:28:8C:E0:E1:C4:F0:BD:56:E7:8C:91:6B:40:CC:0E:0D"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: protrafficinspector.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://to-get-free-roblox.pages.dev/\r\nOrigin: https://to-get-free-roblox.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 08:43:49 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\nserver: fasthttp\r\naccept-ch: Sec-CH-UA-Platform,Sec-CH-UA-Model,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA,Sec-CH-UA-Platform-Version,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Mobile,Device-Stock-UA,User-Agent,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Full-Version-List\r\naccess-control-allow-origin: https://to-get-free-roblox.pages.dev\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nset-cookie: uid_id2=c3445600-5d69-41ee-a032-d80eedc757d5:2:1; expires=Wed, 30 Apr 2036 08:43:49 GMT; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"63b6593c7e75f34470d7af3f0d3ec41f","sha1":"09d7235e67a3ed787dd2560304f6210ebcfe15c1","sha256":"eba8ac942e87d2ab819153f76cb70f0bbb9260d1b236672f7159e961de1e4cd3","sha512":"048bf2dea76b7ddcfc1b55e92d970d18969af3ac27b4f6f83d51a59475c0df7fb2abbbd2a3751618402ee6df27995dc16fc0b3bc04d8bec9ab8494f26897cf44","ssdeep":"","tlshash":"ea90044c3010500474005037304774cc5344450c15dc34f4147dc47071550413514141","first_seen":"2026-05-03T08:44:19.133331Z","last_seen":"2026-05-03T08:44:19.133331Z","times_seen":1,"resource_available":false,"data":null}},"time_used":435,"timings":{"blocked":205,"dns":1,"connect":21,"send":0,"wait":22,"receive":0,"ssl":183},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/sbar.json?key=c207ec84c2456af201cc563cadc36c46\u0026uuid=874004e8-16e8-42a6-bfc4-cefd562675a5%3A2%3A1","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://to-get-free-roblox.pages.dev/","date":"2026-05-03T08:43:49.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 22:18:41 GMT","end":"Thu, 23 Jul 2026 22:18:40 GMT"},"fingerprint":{"sha1":"85:96:BC:41:7A:67:17:33:3C:0F:33:72:BB:3D:4F:F3:56:97:46:09","sha256":"DD:49:0E:2F:27:46:7A:6C:59:AD:4C:03:B8:50:05:CE:D0:BE:26:63:2C:98:45:1E:56:85:0C:E8:27:00:7A:19"}}},"request":{"raw":"GET /sbar.json?key=c207ec84c2456af201cc563cadc36c46\u0026uuid=874004e8-16e8-42a6-bfc4-cefd562675a5%3A2%3A1 HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://to-get-free-roblox.pages.dev/\r\nOrigin: https://to-get-free-roblox.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:43:50 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 3862\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Sec-CH-UA-Mobile,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA,Sec-CH-UA-Platform-Version,Sec-CH-UA,Sec-CH-UA-Model,Device-Stock-UA,User-Agent,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform\r\naccess-control-allow-origin: https://to-get-free-roblox.pages.dev\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\nset-cookie: uid_id2=874004e8-16e8-42a6-bfc4-cefd562675a5:2:1; expires=Sun, 10 May 2026 08:43:50 GMT; path=/; secure; SameSite=None\npdhtkv=true; expires=Mon, 04 May 2026 08:43:50 GMT; path=/; secure; SameSite=None\nuncs=1; expires=Mon, 04 May 2026 08:43:50 GMT; path=/; secure; SameSite=None\npdhtkv29=true; expires=Mon, 04 May 2026 08:43:50 GMT; path=/; secure; SameSite=None\nuncs29=1; expires=Mon, 04 May 2026 08:43:50 GMT; path=/; secure; SameSite=None\nu_pl26582471=1; expires=Mon, 04 May 2026 08:43:50 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 7\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: d476dd55aae7b38b05d4cccc2e96f684\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":5267,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"JSON text data","md5":"ea7e9906245d3e1caaa8ea6eba8b3433","sha1":"501fb4fb1e64d85d00e7083cdf92e22204cee001","sha256":"dc8f0c4b26f9621316288b03b51e92b0dc02061264cf766afb10d5701b084312","sha512":"9698104d0f51e51b6a4e474f2ddb192c37970f27a88b4c86977ee0b83c0eddd1a28adf108f90e4f9f81daf6f0fb42c09719a823ab47d128621ef2f710b790bdb","ssdeep":"96:9yNdeolMk8LHJIdJeVUz+nQ9LOytv48n3mmKmBJLDNj8:9XolMkWMKo+Q9LOyV2mjB9e","tlshash":"1eb15d703a91219077e31fb665a7bdfc09451c1b3d591a0cce27f71f24ada02e90a2f9","first_seen":"2026-05-03T08:44:19.134314Z","last_seen":"2026-05-03T08:44:19.134314Z","times_seen":1,"resource_available":false,"data":null}},"time_used":743,"timings":{"blocked":297,"dns":1,"connect":96,"send":0,"wait":147,"receive":2,"ssl":197},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/js/th/k7Fh94JIqt4sAfXXXewZGsK2XC2th2lRdK_OW2ln9uY.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.155.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","date":"2026-05-03T08:43:50.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 05:20:28 GMT","end":"Wed, 01 Jul 2026 05:20:27 GMT"},"fingerprint":{"sha1":"B4:91:17:84:3C:D9:FA:84:A4:40:60:C3:B9:3F:CD:5B:78:3A:50:7A","sha256":"8C:FB:DA:65:E4:DD:E6:17:CA:EA:AE:21:0F:37:5C:D0:D8:A3:71:77:C6:1E:C5:E2:4B:59:EB:19:51:C9:A5:8D"}}},"request":{"raw":"GET /js/th/k7Fh94JIqt4sAfXXXewZGsK2XC2th2lRdK_OW2ln9uY.js HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"botguard-scs\"\r\nreport-to: {\"group\":\"botguard-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/botguard-scs\"}]}\r\ncontent-length: 23639\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 03 May 2026 05:13:17 GMT\r\nexpires: Mon, 03 May 2027 05:13:17 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 27 Apr 2026 14:00:00 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 12633\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":62111,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (60860)","md5":"644647a0536bb06cf1937a72b9970f44","sha1":"88cde526087d38001e0da2faf096da9772dd3f75","sha256":"93b161f78248aade2c01f5d75dec191ac2b65c2dad87695174afce5b6967f6e6","sha512":"86943a919e7e0c30842a5918d51378fe4304a80d80ab03c8acd7b1395917d5ac1bed94b0bb76e331597449bfafe6e17296f0005bb70c09533ad5f70a6e17b273","ssdeep":"1536:jaV3za1NpDCO0pU21mwVwW2W0ZFUVl3X5X+tWmLa:YaxCREW2W0ZWVT+4t","tlshash":"ca5339ceb2e2677518d261e1005f420a737fa455ac890c9fba12e6f49eb4d47903bf36","first_seen":"2026-04-29T20:16:16.494059Z","last_seen":"2026-05-04T07:01:12.1065Z","times_seen":1874,"resource_available":true,"data":null}},"time_used":212,"timings":{"blocked":98,"dns":1,"connect":10,"send":0,"wait":9,"receive":6,"ssl":83},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.nightdestruct.com/sb/interstitial/utility/default/blog/flip_icon_fullpage/mar24/1/css/animate.css","fqdn":"cdn.nightdestruct.com","domain":"nightdestruct.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://to-get-free-roblox.pages.dev/","date":"2026-05-03T08:43:50.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nightdestruct.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 16:21:26 GMT","end":"Sun, 28 Jun 2026 16:21:25 GMT"},"fingerprint":{"sha1":"77:BA:39:E3:87:1C:89:74:C5:36:C2:0F:E9:4C:0E:35:C4:92:A6:BA","sha256":"5F:17:E6:F7:42:E9:5F:B9:9E:03:47:36:9F:79:03:3B:E2:C2:66:ED:E9:3D:14:AB:29:B0:52:4A:62:57:C4:91"}}},"request":{"raw":"GET /sb/interstitial/utility/default/blog/flip_icon_fullpage/mar24/1/css/animate.css HTTP/1.1\r\nHost: cdn.nightdestruct.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://to-get-free-roblox.pages.dev/\r\nOrigin: https://to-get-free-roblox.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 08:43:51 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Mon, 04 Mar 2024 15:58:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"65e5efc1-13591\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FG3WyLGwtB9sOq0vDYpAfVBQ6P7tl5dS1zHR3o9x4crixMTdCVd16js02YP9B4HeYjlC2%2FFutqiMyLKEzgMXYXjcm71n%2FVp4ahT7Imy6NdNLZiH51jHQz9tGIlJ7O50b17S14o8TKFU%3D\"}]}\r\ncf-ray: 9f5dfaf9d9285691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":79249,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"e1d8acd5ee9d1a90ea09313cbd8f2b02","sha1":"8a8327b115d1356715e63270d1ce6d46124c7b1a","sha256":"3028c87fc798ac3741f02079034e6c23462afc0c5e6c8d321188ce3716c8472a","sha512":"b942379b39b29577123ce4017a6566c046fe68c5a862f234302ddfdb08127e9e2d6b22bbf660ebcd5a196f63df0b34e4eaaa13c5f728e28b7cedfab2669f52f3","ssdeep":"384:ZFu8uVWgnu5uLlFlH/O/Qu7u/sjzbg/jxXlIPfL4jKgZQMkL0Vvaj7Z:ZFu8uEgnu5uBu7uhKgZQMkL0Vvaj7Z","tlshash":"bc731fad2991148452638a1d83df8e68673ce573181a9cef73c2488bcf8bf9c67c9147","first_seen":"2023-04-05T07:35:42Z","last_seen":"2026-08-09T15:18:51.925854Z","times_seen":4328,"resource_available":false,"data":null}},"time_used":534,"timings":{"blocked":20,"dns":1,"connect":1,"send":0,"wait":491,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT","fqdn":"jnn-pa.googleapis.com","domain":"jnn-pa.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.143.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","date":"2026-05-03T08:43:50.687Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 05:19:27 GMT","end":"Wed, 01 Jul 2026 05:19:26 GMT"},"fingerprint":{"sha1":"E9:E5:B7:DA:0A:AE:59:02:EA:10:61:71:9B:52:3A:08:42:A0:67:A5","sha256":"F6:1D:CE:31:AA:9C:7B:58:1D:1D:14:96:99:B6:58:CC:FB:AE:D5:3C:F8:FB:40:E3:45:2D:4A:54:11:B4:E2:F3"}}},"request":{"raw":"OPTIONS /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1\r\nHost: jnn-pa.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-goog-api-key\r\nReferer: https://www.youtube.com/\r\nOrigin: https://www.youtube.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: https://www.youtube.com\r\nvary: origin, referer, x-origin\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT\r\naccess-control-allow-headers: content-type,x-goog-api-key\r\naccess-control-max-age: 3600\r\ndate: Sun, 03 May 2026 08:43:50 GMT\r\ncontent-type: text/html\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T22:04:31.086022Z","times_seen":17907918,"resource_available":true,"data":null}},"time_used":300,"timings":{"blocked":133,"dns":3,"connect":21,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/pixel/sbs?c=1","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.127.243","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://to-get-free-roblox.pages.dev/","date":"2026-05-03T08:43:51.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 22:18:41 GMT","end":"Thu, 23 Jul 2026 22:18:40 GMT"},"fingerprint":{"sha1":"85:96:BC:41:7A:67:17:33:3C:0F:33:72:BB:3D:4F:F3:56:97:46:09","sha256":"DD:49:0E:2F:27:46:7A:6C:59:AD:4C:03:B8:50:05:CE:D0:BE:26:63:2C:98:45:1E:56:85:0C:E8:27:00:7A:19"}}},"request":{"raw":"GET /pixel/sbs?c=1 HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://to-get-free-roblox.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=874004e8-16e8-42a6-bfc4-cefd562675a5:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl26582471=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:43:51 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Device-Stock-UA, User-Agent, Sec-CH-UA, Sec-CH-UA-PlatformUser-Agent, Sec-CH-UA-Model, Sec-CH-UA-Mobile, X-Device-User-Agent, X-OperaMini-Phone-UA, X-UCBrowser-Device-UA, Sec-CH-UA-Platform-Version\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T22:04:31.086022Z","times_seen":17907918,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"to-get-free-roblox.pages.dev/","fqdn":"to-get-free-roblox.pages.dev","domain":"to-get-free-roblox.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-03T08:43:47.983Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"to-get-free-roblox.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Apr 2026 20:17:24 GMT","end":"Thu, 23 Jul 2026 21:17:13 GMT"},"fingerprint":{"sha1":"69:8D:7E:C0:21:55:45:43:9F:6C:83:71:AD:E8:14:B9:34:7A:CB:6B","sha256":"C9:FF:F5:85:6F:54:AF:5A:CF:97:12:2C:77:BE:D9:52:7B:F1:CA:7F:A2:B8:08:99:EB:99:4D:13:BB:91:44:6C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: to-get-free-roblox.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 08:43:48 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y8nS1jeG6C%2FK88n3JTAAlDwkg7L%2BtgfV3eY3cI3hpFof2QD9k8rDX4UodtfzfRYzjmweCSGZKSFjqT7Y8NNeXvZ7HwHslvOx8DtuXPbpFcM60N3ZjROQdoldL6YkT0IZiuSKfHxqIXmUlt9Mq948\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f5dfae9398a56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]}],"data":{"size":33086,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (11935)","md5":"f326f7a28732760e7d59f43b71cd69f1","sha1":"cdc13c61452e1e2219c3121d8307c8af6610d8b9","sha256":"d7220c167d3fce2ccee81df25b13995680dbaf42fc9561ceee48d8d1c3faadff","sha512":"62ab419164048c48cfd1921378e30e76f4cacfc9340b048e45258c2acddee2459cf880f3193d5b2fc5a57b3eb51279352ce07dba123d38db28478f93afe7c136","ssdeep":"768:BROS+wZI2RPYWeWURmlSl9R4zdz3Jn/QSI:jZIOP1eWMmg4pRQb","tlshash":"95e25cffd750413a124315a8a74a7adc6f27005b675a8878fc1cd71c7285abf82368da","first_seen":"2026-05-03T08:44:19.136909Z","last_seen":"2026-05-03T08:44:19.136909Z","times_seen":1,"resource_available":false,"data":null}},"time_used":338,"timings":{"blocked":56,"dns":33,"connect":1,"send":0,"wait":224,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"immigrationacre.com/c2/07/ec/c207ec84c2456af201cc563cadc36c46.js","fqdn":"immigrationacre.com","domain":"immigrationacre.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://to-get-free-roblox.pages.dev/","date":"2026-05-03T08:43:48.969Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"immigrationacre.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 22:44:59 GMT","end":"Sat, 20 Jun 2026 22:44:58 GMT"},"fingerprint":{"sha1":"C5:C0:F1:09:DF:66:79:21:CE:6B:25:C3:DC:5A:3B:4E:6C:24:00:FD","sha256":"14:5E:A4:DE:46:F2:FF:8F:7D:14:D8:7C:E6:33:BC:41:57:AD:BF:24:AC:C4:3C:0F:A7:EE:34:BE:D3:48:56:5B"}}},"request":{"raw":"GET /c2/07/ec/c207ec84c2456af201cc563cadc36c46.js HTTP/1.1\r\nHost: immigrationacre.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://to-get-free-roblox.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:43:49 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 34785\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: X-UCBrowser-Device-UA,User-Agent,Sec-CH-UA-Platform-Version,Sec-CH-UA-Full-Version,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Device-Stock-UA,X-Device-User-Agent,X-OperaMini-Phone-UA\r\nx-envoy-upstream-service-time: 4\r\nHost: immigrationacre.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: ca7f0fea5d0b38115612a1d2a895466d\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":92490,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"77d2eae780579b688f8af48b5cd2a061","sha1":"671820c0c980a80c496e39110d4c479415a4d5d8","sha256":"75b099ba5ba2a53575deed1fd0a5c56bfd4886e05301761eed89b1ce91eb4366","sha512":"fbe5bbc7458bb09b6d575220cede4933d76da2b3b824156765ef1389686316407e3b6c089ed85b9f6bb1fbe796632eba903ab8666a75e9ab15832fedfefe89aa","ssdeep":"1536:2l2eABAdWrl7QJWX8jlvjw31PTz5Ysk5qMUP+04b:2dSAkrdQJoYlLwlBFkLt","tlshash":"3c93c78c7f92f0f5039a24b3232fac16f2ab1d5124fce444d903a9e5ae25319d57ad6c","first_seen":"2026-05-03T08:44:19.137958Z","last_seen":"2026-05-03T08:45:43.447595Z","times_seen":2,"resource_available":true,"data":null}},"time_used":787,"timings":{"blocked":293,"dns":1,"connect":93,"send":0,"wait":103,"receive":94,"ssl":200},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"immigrationacre.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"immigrationacre.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"immigrationacre.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/player/0980151a/www-player.css","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","date":"2026-05-03T08:43:49.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 05:17:21 GMT","end":"Wed, 01 Jul 2026 05:17:20 GMT"},"fingerprint":{"sha1":"2F:4C:57:A4:4A:60:44:C4:08:82:D4:9D:9C:A9:1A:8F:89:5F:E8:F0","sha256":"BE:DC:F0:E9:A5:84:8F:67:24:9D:57:FE:79:42:FA:AA:A7:F8:1D:5F:B1:EB:36:BF:36:EE:24:98:71:31:97:4A"}}},"request":{"raw":"GET /s/player/0980151a/www-player.css HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ncontent-length: 59120\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 02 May 2026 20:54:27 GMT\r\nexpires: Sun, 02 May 2027 20:54:27 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 27 Apr 2026 04:19:17 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding, Origin\r\nage: 42562\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":518755,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"66ef061729b27a4257a868ada7f49f37","sha1":"3d7b5e2bb844723e8e834a26e74169f53b86d32c","sha256":"f140b6831469664f09fb07ae991e983b46752deaa9d8a8b214852f235ea6e7d0","sha512":"0decb25ecfbf4819354251af5188e52fa9b5333c9828998606993817b52a6e43793f7c6ebfb87ffab61c628fa709c858898723f01e1c8d666dc7f7cf2df818fb","ssdeep":"6144:Q8d5Fe/qoMOg7USBfrIoI3M5Kdl5+Oi4f7:jYxMOg7USZIoIc5Kdl5FD","tlshash":"6fb4d972f0e1233cb2278d5997d9954d7339d983e2e22afff11166dacbc76811326206","first_seen":"2026-04-21T05:00:52.033852Z","last_seen":"2026-05-04T16:00:15.625159Z","times_seen":10312,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/player/0980151a/player_embed_es6_tcc.vflset/en_US/base.js","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","date":"2026-05-03T08:43:49.098Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 05:17:21 GMT","end":"Wed, 01 Jul 2026 05:17:20 GMT"},"fingerprint":{"sha1":"2F:4C:57:A4:4A:60:44:C4:08:82:D4:9D:9C:A9:1A:8F:89:5F:E8:F0","sha256":"BE:DC:F0:E9:A5:84:8F:67:24:9D:57:FE:79:42:FA:AA:A7:F8:1D:5F:B1:EB:36:BF:36:EE:24:98:71:31:97:4A"}}},"request":{"raw":"GET /s/player/0980151a/player_embed_es6_tcc.vflset/en_US/base.js HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ncontent-length: 446538\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 02 May 2026 20:57:20 GMT\r\nexpires: Sun, 02 May 2027 20:57:20 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 27 Apr 2026 04:19:17 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Origin\r\nage: 42389\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1493134,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (879)","md5":"d6949562aab26c98fdd006c301ef790b","sha1":"4aa427d6727d119893b5ccb0ab88de2cfd078312","sha256":"4080a882080bdea5ebb1263356b2869408ffdad889fa7bc7b7f0e3fbbac25aa8","sha512":"dda95e3aff1f620b6eedfcc92f3e1a7b0dd486886c85705c747cf00bf2091f5e9c626c901e01cd434ab02e61534edd1b65f2b23fce727a25b97aade8a79063c2","ssdeep":"12288:Gz0uLH/i1ngqO9Cb/92aPhLU9LThCHcBedOQIT5FcTFnQQrd9jLwY3+CyuM:JNggb92I8CHnkt5OTFnQQrdRVbyuM","tlshash":"74254bd93296b47743a3f0e8186f010af67a1905b088d45cb65edafa1cb6847817ff78","first_seen":"2026-04-27T07:46:14.204739Z","last_seen":"2026-05-04T16:00:15.652081Z","times_seen":3376,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-05-03","alert":"Hunting_JS_WebAssembly","trigger":"www.youtube.com/s/player/0980151a/player_embed_es6_tcc.vflset/en_US/base.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://to-get-free-roblox.pages.dev/","date":"2026-05-03T08:43:49.526Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"preferencenail.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 01:34:17 GMT","end":"Mon, 27 Jul 2026 01:34:16 GMT"},"fingerprint":{"sha1":"95:86:03:59:0E:03:98:91:87:F0:07:36:44:10:95:8E:67:97:47:D8","sha256":"51:F3:91:79:18:08:9A:FD:A7:80:AD:AA:80:FB:C8:8B:AE:27:FD:79:25:B6:37:2F:1B:C5:60:67:25:A8:A7:02"}}},"request":{"raw":"GET /sfp.js HTTP/1.1\r\nHost: preferencenail.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://to-get-free-roblox.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:43:49 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nContent-Length: 32181\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nVary: Accept-Encoding\r\nHost: preferencenail.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 5843300459b296845aaa72deaeee370b\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":85379,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-08-15T22:04:29.242352Z","times_seen":26554,"resource_available":true,"data":null}},"time_used":172,"timings":{"blocked":62,"dns":1,"connect":17,"send":0,"wait":21,"receive":18,"ssl":49},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flushpersist.com/pxf.gif?uuid=c3445600-5d69-41ee-a032-d80eedc757d5\u0026eb=bff3d6bf6d16c0bb5e58232c1a99ef63\u0026te=fe015aeda515c30449c87b1701cc307f\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=c64aa11db612c16c65959b87a44dac81\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=8","fqdn":"flushpersist.com","domain":"flushpersist.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://to-get-free-roblox.pages.dev/","date":"2026-05-03T08:43:50.192Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"flushpersist.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 22:15:44 GMT","end":"Sun, 26 Jul 2026 22:15:43 GMT"},"fingerprint":{"sha1":"A4:CC:8E:38:1E:86:20:D5:CF:AC:A0:E9:32:E9:DF:AA:71:7A:98:E5","sha256":"B2:02:B9:E5:21:88:DB:AF:AE:5F:6C:FB:16:F4:3A:D8:44:9D:C2:FF:BE:D7:7B:A1:08:43:78:33:05:96:96:7F"}}},"request":{"raw":"GET /pxf.gif?uuid=c3445600-5d69-41ee-a032-d80eedc757d5\u0026eb=bff3d6bf6d16c0bb5e58232c1a99ef63\u0026te=fe015aeda515c30449c87b1701cc307f\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=c64aa11db612c16c65959b87a44dac81\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=8 HTTP/1.1\r\nHost: flushpersist.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://to-get-free-roblox.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:43:50 GMT\r\nContent-Type: image/gif\r\nContent-Length: 1\r\nConnection: keep-alive\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\nx-envoy-upstream-service-time: 1\r\nHost: flushpersist.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 17174417b145200e3b1a3c0bb4667047\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T22:04:31.086022Z","times_seen":17907918,"resource_available":true,"data":null}},"time_used":676,"timings":{"blocked":285,"dns":1,"connect":92,"send":0,"wait":103,"receive":0,"ssl":193},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.nightdestruct.com/sb/interstitial/utility/default/blog/flip_icon_fullpage/mar24/1/img/close.svg","fqdn":"cdn.nightdestruct.com","domain":"nightdestruct.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://to-get-free-roblox.pages.dev/","date":"2026-05-03T08:43:50.779Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nightdestruct.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 16:21:26 GMT","end":"Sun, 28 Jun 2026 16:21:25 GMT"},"fingerprint":{"sha1":"77:BA:39:E3:87:1C:89:74:C5:36:C2:0F:E9:4C:0E:35:C4:92:A6:BA","sha256":"5F:17:E6:F7:42:E9:5F:B9:9E:03:47:36:9F:79:03:3B:E2:C2:66:ED:E9:3D:14:AB:29:B0:52:4A:62:57:C4:91"}}},"request":{"raw":"GET /sb/interstitial/utility/default/blog/flip_icon_fullpage/mar24/1/img/close.svg HTTP/1.1\r\nHost: cdn.nightdestruct.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 08:43:50 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Mon, 04 Mar 2024 15:59:00 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dygarX5jP5NjlNONcgT0Gz5lFQPtI7RMI3MHnGsRuq4LLWZFjT43gXSUg8p0Jx7nGmKOERlAmECV3CoHDcVYFebDyz3IodBQ3%2BBs7xXYl4AhH%2Foz29WhbnRIBw2aZFZxv1Bi3ywNx0s%3D\"}]}\r\nage: 2902067\r\ncf-cache-status: HIT\r\netag: W/\"65e5efc4-4ff\"\r\ncontent-encoding: br\r\ncf-ray: 9f5dfafa59e15691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1279,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"369850b9873659adf0951d845f57dba1","sha1":"a64257186daa33b6b318943a457b6cf8d80b26b6","sha256":"9630c142a8c074cc1809ebf4109538cf29cc0baeb6c27726191f1cf5376e2e21","sha512":"6441b40e85c86e21362c7061a6b9610f52a5c801b274b246711546ad45c68c3e7f2f242f1621b90967eaeebf52709545d06283c2015d6b9ad7f6f7d37fb14a88","ssdeep":"","tlshash":"6821d8dc958f223ef324ff6189b316606ba423f6bb18c5bcb199a8157e1cb910c48e14","first_seen":"2023-04-07T22:39:47Z","last_seen":"2026-08-15T21:04:16.676615Z","times_seen":10380,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.nightdestruct.com%2Fsb%2Finterstitial%2Futility%2Fdefault%2Fblog%2Fflip_icon_fullpage%2Fmar24%2F1%2Fcss%2Fanimate.css\u0026l=79249\u0026fd=523","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://to-get-free-roblox.pages.dev/","date":"2026-05-03T08:43:51.195Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 22:18:41 GMT","end":"Thu, 23 Jul 2026 22:18:40 GMT"},"fingerprint":{"sha1":"85:96:BC:41:7A:67:17:33:3C:0F:33:72:BB:3D:4F:F3:56:97:46:09","sha256":"DD:49:0E:2F:27:46:7A:6C:59:AD:4C:03:B8:50:05:CE:D0:BE:26:63:2C:98:45:1E:56:85:0C:E8:27:00:7A:19"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.nightdestruct.com%2Fsb%2Finterstitial%2Futility%2Fdefault%2Fblog%2Fflip_icon_fullpage%2Fmar24%2F1%2Fcss%2Fanimate.css\u0026l=79249\u0026fd=523 HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://to-get-free-roblox.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=874004e8-16e8-42a6-bfc4-cefd562675a5:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl26582471=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:43:51 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: Sec-CH-UA-Platform-Version, Device-Stock-UA, Sec-CH-UA, Sec-CH-UA-PlatformUser-Agent, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Mobile, X-Device-User-Agent, X-OperaMini-Phone-UA, X-UCBrowser-Device-UA, User-Agent\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T22:04:31.086022Z","times_seen":17907918,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.nightdestruct.com/sb/interstitial/utility/default/blog/flip_icon_fullpage/mar24/1/js/script.js","fqdn":"cdn.nightdestruct.com","domain":"nightdestruct.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://to-get-free-roblox.pages.dev/","date":"2026-05-03T08:43:50.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nightdestruct.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 16:21:26 GMT","end":"Sun, 28 Jun 2026 16:21:25 GMT"},"fingerprint":{"sha1":"77:BA:39:E3:87:1C:89:74:C5:36:C2:0F:E9:4C:0E:35:C4:92:A6:BA","sha256":"5F:17:E6:F7:42:E9:5F:B9:9E:03:47:36:9F:79:03:3B:E2:C2:66:ED:E9:3D:14:AB:29:B0:52:4A:62:57:C4:91"}}},"request":{"raw":"GET /sb/interstitial/utility/default/blog/flip_icon_fullpage/mar24/1/js/script.js HTTP/1.1\r\nHost: cdn.nightdestruct.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://to-get-free-roblox.pages.dev/\r\nOrigin: https://to-get-free-roblox.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 08:43:51 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 04 Mar 2024 15:59:03 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YTF1YvRoxIYvrMPB3q%2F1SGkIsfFIMsfzZ%2FW%2Bi5P1oDnjiRB1XS%2BhTuzsYFHvl6UYdYRDHhEjOcKiG%2BIzPvjyIeHAi9YQAj%2FrxPaByrHa%2FqCng9KCZzp7jBOpD4YKETIKqPJuNf%2FPWYc%3D\"}]}\r\ncf-cache-status: MISS\r\netag: W/\"65e5efc7-18d\"\r\ncontent-encoding: br\r\ncf-ray: 9f5dfaf9f9485691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":397,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"999af189e50c58f1a44d672e4b3d5a3f","sha1":"a69c7a4d68885a14d01d33c26d136b95b42313d6","sha256":"28ec866098b037343646399a597ae93e16b11b66f90426ffb5cf743a3c41e38f","sha512":"c529c76b23058a6d81c9ab4a61460669f1a8175b35428a5be422eb933ba4d34820cf3c9eafdad1cd132d699bac6966414c0f27d561393b520eaa55cd679521ab","ssdeep":"","tlshash":"ede02b3861685234c7b7d1a2628f679f2630425fd00a425e702c174f0ee1fa612c1dab","first_seen":"2023-05-07T17:52:21Z","last_seen":"2026-08-09T15:18:51.8884Z","times_seen":576,"resource_available":false,"data":null}},"time_used":616,"timings":{"blocked":21,"dns":3,"connect":1,"send":0,"wait":574,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/cti/e1/83/9d/e1839d843a99cfa613ebc9452c4d1890/1722092047.png","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://to-get-free-roblox.pages.dev/","date":"2026-05-03T08:43:51.772Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 02:33:25 GMT","end":"Fri, 05 Jun 2026 02:33:24 GMT"},"fingerprint":{"sha1":"4A:66:11:51:1F:1F:F3:84:B6:E4:4F:81:C1:03:83:9F:01:17:7E:82","sha256":"DA:55:E3:02:D5:3C:4E:3A:51:ED:21:0D:F4:32:52:C2:C5:31:87:50:DC:AB:13:D9:93:4A:15:0C:D9:8C:D6:4F"}}},"request":{"raw":"GET /cti/e1/83/9d/e1839d843a99cfa613ebc9452c4d1890/1722092047.png HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 08:43:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 147247\r\nserver: nginx/1.21.6\r\nlast-modified: Sat, 27 Jul 2024 14:54:07 GMT\r\netag: \"66a50a0f-23f2f\"\r\nexpires: Tue, 05 May 2026 08:43:51 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":147247,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 250, 8-bit/color RGBA, non-interlaced","md5":"4624a6845ee89c1d1519a1204b926401","sha1":"559922621a3a3a6d87b6da6c052d6b29aedd9695","sha256":"41870d8a667affc8f0ee08a6bcff3f69089a68997f95e646cad3e77a5a6c1894","sha512":"0f66743553e279339d09027042857d4b416bb39e1e4a8a5d496cce7a15c4ec796bdae8ec5858ad93d6e6e1e098d2192375667a70400dcd464603251aaa9fa597","ssdeep":"3072:jfab4Vvi2nWa8jslmiTQaNCtyo5DX1cz15H9sIG4Q2lSTbcVFaOaaDG+:jf7TnJ8js4iTQaotycDy15yINQ3cVbhx","tlshash":"a0e3120bba42217f65bd76902cbbf0646fe6d143e7ff7437a3840448a60a665a85f30d","first_seen":"2024-08-20T04:44:39Z","last_seen":"2026-05-19T00:50:42.704179Z","times_seen":136,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":46,"dns":1,"connect":19,"send":0,"wait":19,"receive":66,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/ren.gif?sid=H4sIAAAAAAAC_1RSu48bVR-946T6PhDiKVGAXKQgEvbeGc-MZ0gREREQj-wCCUpBge5rNhePZyZzZ2zHNBtCUqIADVCNj727SKwi-A-QlwJpBVKmc5FtqKiRguiQvZYCp_g9dE5xfveeO5PymLRRssW7l9KxjmO24bVp86WrOpHp0DQ3rzRt2qbnmld14rvnmqNlyQev2B23Tc8231Cil2441KbUpnbzdZ2rKB1trFjo7CC02yFtu07b9lyM8v_upmzAsAbk4Jg8BS3rJ36PPoQWcyT9H15Tplek2csX-2XMijTHQO5_kPSSdJig_2iMcgtRsr9WIzU1IV83kCb76wuQDmbLC8B1TRrPPQBP9tc2wQe7J055DJWAy_9jOJhDxXNoNodIb0HL-wQQEptbSPp7m2k-ZDdOWLZka3L64Z_Qw5qcfvAMkv69C7EeNS-ncVnoNDEYRRX0aA69PUdWHqIYN6CHhxDFp9DyN7Lx8B0k_dmWiVNouTgTdF1KXRW0bF8FLddhfotHwm0JFUnPd_yux7zVE-loDmYaKI2FUlsoIwtlZqEvF02XBq6wWcePQim61GWuKxWnYeBQykLRRSluQsu7EPnt7zJ5regNnHBW5KXaKxNhnHBiH5QfZbHje4Hjdu2JvXeiWmlmS83ERpbvoKe_vP_89zWxnr0EIxswRU2s93YwkNWujI1jqj0Zm5Lb6-6se6eapsX2hO2mxbZKCFh-F7msZjq7bm5BFKem48jIabosjBfVlHFZTbUsCPLrizPUDqWS1GnZUqhWl3thK4g6Tkt1bMcTgna5688iU5TVJDsmTy7_ybr3-ePoqUWTRY4nWdAJbEW5pG7ocuZSOxBdPwgD5sDoCto0wIyFsa7J29FZZLomL975A5wdwsSHENoCK18AG1Zg1yqMk4NIJ3KghWqLtA-ZVsiK0yhuWJP4mDw9ff_KhZ9WcXn176-gxNH5xTdLfAuRV8jyCh_rnwm245s_bmWF7usxW-bncsEKdQpM18T65FcIXZPH3rq4ivKZN29DZDsw2dH5w84KMCkBzyzEmiBWR2QNMF7B_Gvnj-aJ-QzbuQUeW1Me59aMx3n8xYlNoxdNz-EdPwh8Ffky6siO05GhR1XostB3Q9dDYWr91_9--ScAAP__drh260gEAAA=","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.127.243","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://to-get-free-roblox.pages.dev/","date":"2026-05-03T08:43:52.461Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 22:18:41 GMT","end":"Thu, 23 Jul 2026 22:18:40 GMT"},"fingerprint":{"sha1":"85:96:BC:41:7A:67:17:33:3C:0F:33:72:BB:3D:4F:F3:56:97:46:09","sha256":"DD:49:0E:2F:27:46:7A:6C:59:AD:4C:03:B8:50:05:CE:D0:BE:26:63:2C:98:45:1E:56:85:0C:E8:27:00:7A:19"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_1RSu48bVR-946T6PhDiKVGAXKQgEvbeGc-MZ0gREREQj-wCCUpBge5rNhePZyZzZ2zHNBtCUqIADVCNj727SKwi-A-QlwJpBVKmc5FtqKiRguiQvZYCp_g9dE5xfveeO5PymLRRssW7l9KxjmO24bVp86WrOpHp0DQ3rzRt2qbnmld14rvnmqNlyQev2B23Tc8231Cil2441KbUpnbzdZ2rKB1trFjo7CC02yFtu07b9lyM8v_upmzAsAbk4Jg8BS3rJ36PPoQWcyT9H15Tplek2csX-2XMijTHQO5_kPSSdJig_2iMcgtRsr9WIzU1IV83kCb76wuQDmbLC8B1TRrPPQBP9tc2wQe7J055DJWAy_9jOJhDxXNoNodIb0HL-wQQEptbSPp7m2k-ZDdOWLZka3L64Z_Qw5qcfvAMkv69C7EeNS-ncVnoNDEYRRX0aA69PUdWHqIYN6CHhxDFp9DyN7Lx8B0k_dmWiVNouTgTdF1KXRW0bF8FLddhfotHwm0JFUnPd_yux7zVE-loDmYaKI2FUlsoIwtlZqEvF02XBq6wWcePQim61GWuKxWnYeBQykLRRSluQsu7EPnt7zJ5regNnHBW5KXaKxNhnHBiH5QfZbHje4Hjdu2JvXeiWmlmS83ERpbvoKe_vP_89zWxnr0EIxswRU2s93YwkNWujI1jqj0Zm5Lb6-6se6eapsX2hO2mxbZKCFh-F7msZjq7bm5BFKem48jIabosjBfVlHFZTbUsCPLrizPUDqWS1GnZUqhWl3thK4g6Tkt1bMcTgna5688iU5TVJDsmTy7_ybr3-ePoqUWTRY4nWdAJbEW5pG7ocuZSOxBdPwgD5sDoCto0wIyFsa7J29FZZLomL975A5wdwsSHENoCK18AG1Zg1yqMk4NIJ3KghWqLtA-ZVsiK0yhuWJP4mDw9ff_KhZ9WcXn176-gxNH5xTdLfAuRV8jyCh_rnwm245s_bmWF7usxW-bncsEKdQpM18T65FcIXZPH3rq4ivKZN29DZDsw2dH5w84KMCkBzyzEmiBWR2QNMF7B_Gvnj-aJ-QzbuQUeW1Me59aMx3n8xYlNoxdNz-EdPwh8Ffky6siO05GhR1XostB3Q9dDYWr91_9--ScAAP__drh260gEAAA= HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://to-get-free-roblox.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=874004e8-16e8-42a6-bfc4-cefd562675a5:2:1; pdhtkv=true; uncs=2; pdhtkv29=true; uncs29=2; u_pl26582471=1; u_pl28216845=1; slecaf25da8381e0bd0494ba4018c76898a2=[4323731]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:43:52 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: User-Agent,Sec-CH-UA-Platform-Version,X-UCBrowser-Device-UA,Sec-CH-UA,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Mobile,Device-Stock-UA,X-Device-User-Agent,X-OperaMini-Phone-UA\r\nx-envoy-upstream-service-time: 2\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 1eb3c45ab3a627aa203b5bf7b1440d68\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T22:04:31.086022Z","times_seen":17907918,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/watch.1175265506277.js?key=52f212bca95373aed7ead32398143db7\u0026kw=%5B%221%22%2C%22new%22%2C%22message%22%5D\u0026refer=https%3A%2F%2Fto-get-free-roblox.pages.dev%2F\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=c3445600-5d69-41ee-a032-d80eedc757d5%3A2%3A1","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://to-get-free-roblox.pages.dev/","date":"2026-05-03T08:43:54.093Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 22:18:41 GMT","end":"Thu, 23 Jul 2026 22:18:40 GMT"},"fingerprint":{"sha1":"85:96:BC:41:7A:67:17:33:3C:0F:33:72:BB:3D:4F:F3:56:97:46:09","sha256":"DD:49:0E:2F:27:46:7A:6C:59:AD:4C:03:B8:50:05:CE:D0:BE:26:63:2C:98:45:1E:56:85:0C:E8:27:00:7A:19"}}},"request":{"raw":"GET /watch.1175265506277.js?key=52f212bca95373aed7ead32398143db7\u0026kw=%5B%221%22%2C%22new%22%2C%22message%22%5D\u0026refer=https%3A%2F%2Fto-get-free-roblox.pages.dev%2F\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=c3445600-5d69-41ee-a032-d80eedc757d5%3A2%3A1 HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://to-get-free-roblox.pages.dev/\r\nOrigin: https://to-get-free-roblox.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=874004e8-16e8-42a6-bfc4-cefd562675a5:2:1; pdhtkv=true; uncs=2; pdhtkv29=true; uncs29=2; u_pl26582471=1; u_pl28216845=1; slecaf25da8381e0bd0494ba4018c76898a2=[4323731]\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 307 Temporary Redirect\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:43:54 GMT\r\nContent-Type: text/html\r\nContent-Length: 0\r\nConnection: keep-alive\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: User-Agent,Sec-CH-UA,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Full-Version,Sec-CH-UA-Platform,X-Device-User-Agent,X-UCBrowser-Device-UA,Sec-CH-UA-Platform-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-UA-Mobile,Device-Stock-UA,X-OperaMini-Phone-UA\r\naccess-control-allow-origin: https://to-get-free-roblox.pages.dev\r\naccess-control-allow-credentials: true\r\nlocation: https://skinnycrawlinglax.com/watch.1175265506277.js?key=52f212bca95373aed7ead32398143db7\u0026kw=%5B%221%22%2C%22new%22%2C%22message%22%5D\u0026refer=https%3A%2F%2Fto-get-free-roblox.pages.dev%2F\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=c3445600-5d69-41ee-a032-d80eedc757d5%3A2%3A1\u0026rmtc=t\u0026shv=2\u0026sht=U4xT_aHn_3MYo9bBlEQuPt9JrlE1VLOr3Xou1MYsFsA\u0026fstu=019ded02-259b-7ce6-9478-84000ccd0141\u0026st1=16cd5218823148b7ebd06902ab53e06d\u0026ps1=1777797834\r\nset-cookie: uid_id2=874004e8-16e8-42a6-bfc4-cefd562675a5:2:1; expires=Sun, 10 May 2026 08:43:54 GMT; path=/; secure; SameSite=None\nain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.twtNFiZIYqnn47KdYzDJoW8eDHWfpPoiVWBTyKH6zdA; expires=Sun, 03 May 2026 08:44:54 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 2\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: f97393212dee5dc59ddf06d43972a131\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4553,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T22:04:31.086022Z","times_seen":17907918,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mtevor.com/hg/pages-dev.js","fqdn":"mtevor.com","domain":"mtevor.com","tld":"com"},"ip":{"addr":"172.67.199.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://to-get-free-roblox.pages.dev/","date":"2026-05-03T08:43:48.405Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mtevor.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 16:10:55 GMT","end":"Thu, 25 Jun 2026 17:08:44 GMT"},"fingerprint":{"sha1":"1D:90:33:9C:3D:4D:50:02:77:2C:32:67:1E:87:33:CC:BD:89:04:6D","sha256":"72:55:21:53:6A:A2:E9:F9:08:9D:13:A1:4F:FC:E2:CD:E9:5C:53:05:B8:B0:36:72:24:AB:FD:DA:7A:F9:7C:C4"}}},"request":{"raw":"GET /hg/pages-dev.js HTTP/1.1\r\nHost: mtevor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://to-get-free-roblox.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 08:43:48 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 466601\r\nlast-modified: Tue, 28 Apr 2026 05:33:37 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nWS7TBn2Hg97lY3ExTbzlnszGL4Qs9F4Y65hHO26CBzaeuHxP8rqMDyo4nyA7lB3j5vTVeYuP3d87KBSYflrQyEg2OD6b39sVEt0WPAxZ3yFFcOjOqUZTyv1YGVO\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9f5dfaebade756af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7180,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"63f71502fe125358818a0825aae4ee16","sha1":"98934593ae75876db5a51fbb4a0d6f990576a2c9","sha256":"5dedd670c8604a3b077f14aac976a0b91441afe370ecc449c9e3df2cf077027b","sha512":"d426126273d42b38f24bd9b8d1780346cc1b6cee83468b887e0eaeecaff19e4a89a0636620ab41efc977e6c2b559e88e55b670f3dfd5b7c7205f848a55e2ebdc","ssdeep":"192:c4Mpsto0LV8YteZbDVj/poiPqpyj4ZYzwIxpsQkhHC:/++j8YteZfJ/ptPqcj46zNxpsQ8C","tlshash":"0ee1d6a9bc8f89390bf2f758d6358519fd3cc0221602505af0c8525b8a69f1e471ffd8","first_seen":"2026-03-10T23:35:48.093011Z","last_seen":"2026-08-11T01:12:56.754825Z","times_seen":137,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":14,"dns":1,"connect":1,"send":0,"wait":11,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://to-get-free-roblox.pages.dev/","date":"2026-05-03T08:43:48.902Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 05:17:21 GMT","end":"Wed, 01 Jul 2026 05:17:20 GMT"},"fingerprint":{"sha1":"2F:4C:57:A4:4A:60:44:C4:08:82:D4:9D:9C:A9:1A:8F:89:5F:E8:F0","sha256":"BE:DC:F0:E9:A5:84:8F:67:24:9D:57:FE:79:42:FA:AA:A7:F8:1D:5F:B1:EB:36:BF:36:EE:24:98:71:31:97:4A"}}},"request":{"raw":"GET /embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0 HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://to-get-free-roblox.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=utf-8\r\nx-content-type-options: nosniff\r\ncontent-security-policy: script-src 'unsafe-eval' 'self' 'unsafe-inline' https://www.google.com https://apis.google.com https://ssl.gstatic.com https://www.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com https://*.youtube.com https://*.google.com https://*.gstatic.com https://youtube.com https://www.youtube.com https://google.com https://*.doubleclick.net https://*.googleapis.com https://www.googleadservices.com https://tpc.googlesyndication.com https://www.youtubekids.com https://www.youtube-nocookie.com https://www.youtubeeducation.com https://www-onepick-opensocial.googleusercontent.com;report-uri https://csp.withgoogle.com/csp/youtube_main/allowlist, require-trusted-types-for 'script', base-uri 'self';object-src 'none';script-src 'nonce-kADpMwp5FkebokihQkh9VA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';report-uri https://csp.withgoogle.com/csp/youtube_main/strict\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sun, 03 May 2026 08:43:48 GMT\r\np3p: CP=\"This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info.\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncross-origin-resource-policy: cross-origin\r\norigin-trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9, AiDEBptUfVeO93q48VdVMe/ubupazdAl8AaHP+NBzdnW8quUcHdzJUyGSfrmtpKJu7EOvwRp9ug2rEo3XU+WMAMAAAB2eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJEZXZpY2VCb3VuZFNlc3Npb25DcmVkZW50aWFsczIiLCJleHBpcnkiOjE3NzQzMTA0MDAsImlzU3ViZG9tYWluIjp0cnVlfQ==\r\ncross-origin-embedder-policy-report-only: require-corp; report-to=\"youtube_main\"\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube_main\"\r\nreport-to: {\"group\":\"youtube_main\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube_main\"}]}\r\ncontent-encoding: br\r\nserver: ESF\r\nx-xss-protection: 0\r\nset-cookie: __Secure-YNID=18.YT=QT-eM163qvGa6sudo9wsKjDQgs1zUVSh4pBsXUU8Nhb0gcdwuo2euzcLsaEO8buAjgxdtwgw8BtNSZ2yXO8NpQL3A7YYG6Dvy9DKyUdEAEgorAZwJm9ydkhIrRQ-gQzhoqT7mVr6Xkm9SgGynmBpouR61zQSfeLs4j1-cqalKwG3ScvZ-AZq17aiC26eXy3xcCnzBKjN1oPmreGR0yIY8YSJ2Y7VBy_Y35J3HjQHZUx1usedjbbhEVBqxSlLUDDs1ebEVieMYCc7avfq_3gwQWeoGJ85WbwHqksM0iphWNvX6DWoNe7UzgQJjOv_Ae5IjwjuLZiZPYN359CPAcNbJA; expires=Fri, 30-Oct-2026 08:43:48 GMT; path=/; domain=.youtube.com; Secure; HttpOnly; SameSite=none\nYSC=UEzzteV-BrE; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none\n__Secure-YEC=; Domain=.youtube.com; Expires=Mon, 07-Aug-2023 08:43:48 GMT; Path=/; Secure; HttpOnly; SameSite=lax\nVISITOR_INFO1_LIVE=8ur0pq1LH9E; Domain=.youtube.com; Expires=Fri, 30-Oct-2026 08:43:48 GMT; Path=/; Secure; HttpOnly; SameSite=none\nVISITOR_PRIVACY_METADATA=CgJOTxIiEh4SHAsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJicgIg%3D%3D; Domain=.youtube.com; Expires=Fri, 30-Oct-2026 08:43:48 GMT; Path=/; Secure; HttpOnly; SameSite=none\n__Secure-ROLLOUT_TOKEN=CLeK1euK88KZbBDEr82A3ZyUAxjEr82A3ZyUAw%3D%3D; Domain=youtube.com; Expires=Fri, 30-Oct-2026 08:43:48 GMT; Path=/; Secure; HttpOnly; SameSite=none; Partitioned\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":141530,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (52117)","md5":"b4cf758bd5a361931f713f7799f68a40","sha1":"8e7427b86147bb162e377129000441cd00e9dae2","sha256":"35f3f63cae2048bacbd109c6ab7d6474616fdd5dbb1fef7f2df8db691ebd91c1","sha512":"3898b85db27b0ae220f14fb28adfb89886970f1b7c0fcd6d411aa1382cf66a08c6f332fa9931a0024739eb3fb867359ff3fba2fa07e89d286f6a0ff5caea341d","ssdeep":"1536:+ILMrOmsyxZtwr0hLNS2E5Gd4jU2wguL0LLgifMEMHizxGa:+iNy5LNw5Gv2wguQgLlCtL","tlshash":"a4d30a254868a876c5939807edbaff3e5cf8023947c8956dbcbb975c01ec6610eaf413","first_seen":"2026-05-03T08:44:19.14222Z","last_seen":"2026-05-03T08:44:19.14222Z","times_seen":1,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"protrafficinspector.com/stats","fqdn":"protrafficinspector.com","domain":"protrafficinspector.com","tld":"com"},"ip":{"addr":"18.195.43.118","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://to-get-free-roblox.pages.dev/","date":"2026-05-03T08:43:49.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"statistics.it.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 14 Apr 2026 00:00:00 GMT","end":"Wed, 28 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:66:77:D7:9E:99:80:D4:C4:22:4B:79:2F:16:2B:49:2C:08:07:99","sha256":"54:26:39:E0:45:11:B3:20:EE:6C:3E:B3:C0:57:5D:F2:28:8C:E0:E1:C4:F0:BD:56:E7:8C:91:6B:40:CC:0E:0D"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: protrafficinspector.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://to-get-free-roblox.pages.dev/\r\nOrigin: https://to-get-free-roblox.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 08:43:49 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\nserver: fasthttp\r\naccept-ch: Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Mobile,User-Agent,Sec-CH-UA-Platform-Version,Sec-CH-UA,Sec-CH-UA-Full-Version-List,Device-Stock-UA,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Full-Version\r\naccess-control-allow-origin: https://to-get-free-roblox.pages.dev\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nset-cookie: uid_id2=874004e8-16e8-42a6-bfc4-cefd562675a5:2:1; expires=Wed, 30 Apr 2036 08:43:49 GMT; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"47ef82644490b6b767d30979e73a1920","sha1":"8817c313f970e1824c4313a4312b0c881101221f","sha256":"aa6b1158e978c95137b8e4dc75f3080076a25dd43ec3ad0ce20f278a635c0fb1","sha512":"ebb566718e01d4725cf5c151fea1c741830647f65cf1f57515ddfe988f7796992fbefc8d3c6fb99a0aa77a17b65454ec2d5c8ea580160008557a0caa57f91365","ssdeep":"","tlshash":"549004d55c40054d4150c1137004c1cf304105144c1d504444c3cf7d530f0111d15344","first_seen":"2026-05-03T08:44:19.143244Z","last_seen":"2026-05-03T08:44:19.143244Z","times_seen":1,"resource_available":false,"data":null}},"time_used":280,"timings":{"blocked":128,"dns":0,"connect":21,"send":0,"wait":22,"receive":0,"ssl":105},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/watch.1175265506277.js?key=52f212bca95373aed7ead32398143db7\u0026kw=%5B%221%22%2C%22new%22%2C%22message%22%5D\u0026refer=https%3A%2F%2Fto-get-free-roblox.pages.dev%2F\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=c3445600-5d69-41ee-a032-d80eedc757d5%3A2%3A1\u0026rmtc=t\u0026shv=2\u0026sht=U4xT_aHn_3MYo9bBlEQuPt9JrlE1VLOr3Xou1MYsFsA\u0026fstu=019ded02-259b-7ce6-9478-84000ccd0141\u0026st1=16cd5218823148b7ebd06902ab53e06d\u0026ps1=1777797834","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://to-get-free-roblox.pages.dev/","date":"2026-05-03T08:43:54.200Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 22:18:41 GMT","end":"Thu, 23 Jul 2026 22:18:40 GMT"},"fingerprint":{"sha1":"85:96:BC:41:7A:67:17:33:3C:0F:33:72:BB:3D:4F:F3:56:97:46:09","sha256":"DD:49:0E:2F:27:46:7A:6C:59:AD:4C:03:B8:50:05:CE:D0:BE:26:63:2C:98:45:1E:56:85:0C:E8:27:00:7A:19"}}},"request":{"raw":"GET /watch.1175265506277.js?key=52f212bca95373aed7ead32398143db7\u0026kw=%5B%221%22%2C%22new%22%2C%22message%22%5D\u0026refer=https%3A%2F%2Fto-get-free-roblox.pages.dev%2F\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=c3445600-5d69-41ee-a032-d80eedc757d5%3A2%3A1\u0026rmtc=t\u0026shv=2\u0026sht=U4xT_aHn_3MYo9bBlEQuPt9JrlE1VLOr3Xou1MYsFsA\u0026fstu=019ded02-259b-7ce6-9478-84000ccd0141\u0026st1=16cd5218823148b7ebd06902ab53e06d\u0026ps1=1777797834 HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://to-get-free-roblox.pages.dev\r\nReferer: https://to-get-free-roblox.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=874004e8-16e8-42a6-bfc4-cefd562675a5:2:1; pdhtkv=true; uncs=2; pdhtkv29=true; uncs29=2; u_pl26582471=1; u_pl28216845=1; slecaf25da8381e0bd0494ba4018c76898a2=[4323731]; ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.twtNFiZIYqnn47KdYzDJoW8eDHWfpPoiVWBTyKH6zdA\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:43:54 GMT\r\nContent-Type: text/html\r\nContent-Length: 3233\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: X-OperaMini-Phone-UA,User-Agent,Sec-CH-UA,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Full-Version,Sec-CH-UA-Model,Sec-CH-UA-Mobile,X-Device-User-Agent,X-UCBrowser-Device-UA,Sec-CH-UA-Platform-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform,Device-Stock-UA\r\naccess-control-allow-origin: https://to-get-free-roblox.pages.dev\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\nset-cookie: uid_id2=874004e8-16e8-42a6-bfc4-cefd562675a5:2:1; expires=Sun, 10 May 2026 08:43:54 GMT; path=/; secure; SameSite=None\nuncs=3; expires=Mon, 04 May 2026 08:43:54 GMT; path=/; secure; SameSite=None\npdhtkv32=true; expires=Mon, 04 May 2026 08:43:54 GMT; path=/; secure; SameSite=None\nuncs32=1; expires=Mon, 04 May 2026 08:43:54 GMT; path=/; secure; SameSite=None\nu_pl26582436=1; expires=Mon, 04 May 2026 08:43:54 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 10\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 4c349a034e9c5c416b2926767b03e6ed\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4553,"size_decoded":0,"mime_type":"text/html","magic":"JavaScript source, ASCII text, with very long lines (3677)","md5":"e3ce2914b0e28a1b7f363daeef00d685","sha1":"e0dd63275749ad79976dfefb9db18a575340ef8c","sha256":"60a0a517e666920a2371821e777a9a8697e8c7b6643122eb0af5aae189536486","sha512":"c183f1659ed9fadb5846b2159d3d4c4f6a357ae2bcb3f99b1f30eebf8fd7edc3423b190f281dcf76ee93142db23d74dec5c509ab76a93ec673ea26afd64388e5","ssdeep":"96:QC9GhozoBClkI1SotoyPXk/n6Dpp0tsUkww1ZDSV3VCfMEDaH:QC9G+zOaxtoyfkjxoVSV3VCkCaH","tlshash":"52911a7bccc449bc9896b5ab257ab9983e50e1163610dc01fd5cc2402f70b6c29bbe98","first_seen":"2026-05-03T08:44:19.144104Z","last_seen":"2026-05-03T08:44:19.144104Z","times_seen":1,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"adxpy.pages.dev/arrow-up.gif","fqdn":"adxpy.pages.dev","domain":"adxpy.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://to-get-free-roblox.pages.dev/","date":"2026-05-03T08:43:48.905Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adxpy.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 00:44:54 GMT","end":"Sat, 04 Jul 2026 01:43:34 GMT"},"fingerprint":{"sha1":"B9:0E:27:18:36:32:2C:B8:F2:E5:2F:50:96:88:4F:CF:54:4C:10:3C","sha256":"ED:9F:40:13:F5:DC:3F:FE:75:A2:AF:61:F4:2D:D7:17:14:E2:C8:D4:C5:19:DB:9E:88:D1:73:59:BF:13:F7:D1"}}},"request":{"raw":"GET /arrow-up.gif HTTP/1.1\r\nHost: adxpy.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://to-get-free-roblox.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 03 May 2026 08:43:48 GMT\r\ncontent-type: image/gif\r\ncontent-length: 4491\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"abc38753b71c3201854a4e8b3ffdce52\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hggYW8ggSQSS0kaMsW%2BXpjpvB1OrfzmShovxNTAeonhBZQhGwVciCSLS2ZIFYBMjXBfd38tnSk1W%2F1h6xWBcv3o9DLQOEzm95vS2FF8FTUKUStl5QmNoF6OEvFPdLR5HFAs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9f5dfaeeaf4456b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4491,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 28 x 150","md5":"8b78a541eaa521c8bd946b84a46feb92","sha1":"31a6411c7051332a4aff0d338cf721f513bd1f8b","sha256":"8794063dced5ec3d5035d4fd6e7cce885671224284469fe85e7b392a0fabf0a8","sha512":"ca4f07b46c061bcc141b763e32da638e835f207106f8d5ea90dfab473487114081fbd3e12768cfe3d374c0eecba53e2a085fd0af4cb068f4efed559fbd9fa26d","ssdeep":"96:kRXW9wwXp9lM6jb7xLD3hFG2G/3dtGSQp60NfzpAMK:kVW9Jp9JjbBDRFG2G/3mjrpAMK","tlshash":"c791e7121a798d4cf0335934c9a8ac5f332a5da2811183db29d4329ee93c4bd596e67c","first_seen":"2025-05-30T17:14:42.053302Z","last_seen":"2026-08-11T01:12:56.723299Z","times_seen":501,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","date":"2026-05-03T08:43:49.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 05:19:27 GMT","end":"Wed, 01 Jul 2026 05:19:26 GMT"},"fingerprint":{"sha1":"BF:D8:14:32:18:86:B9:95:54:75:8D:F9:5F:29:DE:4E:F8:F8:F7:13","sha256":"0E:FA:80:0B:F4:13:81:81:4D:CF:50:35:5A:DD:DB:FA:00:0B:34:B2:2D:5D:28:08:E4:45:1F:2C:EF:D2:21:C2"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.youtube.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 02 May 2026 15:12:13 GMT\r\nexpires: Sun, 02 May 2027 15:12:13 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nage: 63096\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-08-15T22:04:49.859764Z","times_seen":966078,"resource_available":false,"data":null}},"time_used":328,"timings":{"blocked":126,"dns":1,"connect":21,"send":0,"wait":22,"receive":45,"ssl":110},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","date":"2026-05-03T08:43:49.103Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 05:19:27 GMT","end":"Wed, 01 Jul 2026 05:19:26 GMT"},"fingerprint":{"sha1":"BF:D8:14:32:18:86:B9:95:54:75:8D:F9:5F:29:DE:4E:F8:F8:F7:13","sha256":"0E:FA:80:0B:F4:13:81:81:4D:CF:50:35:5A:DD:DB:FA:00:0B:34:B2:2D:5D:28:08:E4:45:1F:2C:EF:D2:21:C2"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.youtube.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 02 May 2026 15:12:13 GMT\r\nexpires: Sun, 02 May 2027 15:12:13 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nage: 63096\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-08-15T22:04:49.859764Z","times_seen":966078,"resource_available":false,"data":null}},"time_used":343,"timings":{"blocked":143,"dns":1,"connect":25,"send":0,"wait":48,"receive":2,"ssl":121},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/d0/89/ea/d089ea049f0f7b1eacfa2b5bb99d3bdc.js","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://to-get-free-roblox.pages.dev/","date":"2026-05-03T08:43:51.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 21:50:47 GMT","end":"Thu, 23 Jul 2026 21:50:46 GMT"},"fingerprint":{"sha1":"23:74:93:25:BB:94:6A:F0:09:05:7F:57:73:50:14:CD:19:AA:AF:20","sha256":"13:12:D4:15:47:A9:32:60:B9:69:04:44:B0:1C:A6:FF:80:89:A8:57:85:61:DB:5D:BC:87:06:24:86:84:51:44"}}},"request":{"raw":"GET /d0/89/ea/d089ea049f0f7b1eacfa2b5bb99d3bdc.js HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://to-get-free-roblox.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:43:51 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 37610\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Sec-CH-UA-Platform,Device-Stock-UA,Sec-CH-UA-Platform-Version,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Model,Sec-CH-UA-Mobile,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA,User-Agent,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Full-Version-List\r\nx-envoy-upstream-service-time: 3\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 05264e8e78ea55af6aeb3e512df4aa80\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":103355,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"724f24efe1eb3c0d54d8c5a7338bb531","sha1":"fb0af8ef602817a217fe5f80f12242f33aa57ac4","sha256":"a7be01b08a30f530b4ed62720967697820d73b73717ef9792c511fd6180f948a","sha512":"21840fc26ab16ef61c0e2f6bb315dd43ffed04422ba36d6001879c2060d35b910ac06725b72ef905a67c6641f8fe045f9a21977ed075dacbb4f1926367e7a858","ssdeep":"1536:kHLBN82ttARd5zkYcWZ+u9DJvDWaBBl2qcQt7MrHYeCz6Q3d3icPS6YBB37o:cBQ8u91v7Hl1cQt7MrHysPE","tlshash":"9aa3c68cbf50f55852f62432222f940af0e90c5641dcd198fa52b8ea7f7cf48e9769a4","first_seen":"2026-05-03T08:44:19.146662Z","last_seen":"2026-05-03T08:44:19.146662Z","times_seen":1,"resource_available":true,"data":null}},"time_used":808,"timings":{"blocked":300,"dns":0,"connect":96,"send":0,"wait":112,"receive":96,"ssl":202},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.nightdestruct.com%2Fsb%2Finterstitial%2Futility%2Fdefault%2Fblog%2Fflip_icon_fullpage%2Fmar24%2F1%2Fjs%2Fscript.js\u0026l=397\u0026fd=612","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://to-get-free-roblox.pages.dev/","date":"2026-05-03T08:43:51.291Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 22:18:41 GMT","end":"Thu, 23 Jul 2026 22:18:40 GMT"},"fingerprint":{"sha1":"85:96:BC:41:7A:67:17:33:3C:0F:33:72:BB:3D:4F:F3:56:97:46:09","sha256":"DD:49:0E:2F:27:46:7A:6C:59:AD:4C:03:B8:50:05:CE:D0:BE:26:63:2C:98:45:1E:56:85:0C:E8:27:00:7A:19"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.nightdestruct.com%2Fsb%2Finterstitial%2Futility%2Fdefault%2Fblog%2Fflip_icon_fullpage%2Fmar24%2F1%2Fjs%2Fscript.js\u0026l=397\u0026fd=612 HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://to-get-free-roblox.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=874004e8-16e8-42a6-bfc4-cefd562675a5:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl26582471=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:43:51 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: X-Device-User-Agent, X-UCBrowser-Device-UA, User-Agent, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Mobile, X-OperaMini-Phone-UA, Sec-CH-UA, Sec-CH-UA-PlatformUser-Agent, Device-Stock-UA\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T22:04:31.086022Z","times_seen":17907918,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/watch.146235150587.js?key=6dd5e3d7ac37d33b5abc87810f6ac7f3\u0026kw=%5B%22easy%22%2C%22ways%22%2C%22to%22%2C%22get%22%2C%22free%22%2C%22roblox%22%2C%22legit%22%2C%22tips%22%5D\u0026refer=https%3A%2F%2Fto-get-free-roblox.pages.dev%2F\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=c3445600-5d69-41ee-a032-d80eedc757d5%3A2%3A1\u0026rmtc=t\u0026shv=2\u0026sht=wjUXe0tkPnGhBGLCNgj4JVzhsPTOoNgw97DXFoZmvW4\u0026fstu=019ded02-1b07-760e-91cc-95e36638c8b1\u0026st1=e8fc851ee63504de15665f611b12a82b\u0026ps1=1777797831","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://to-get-free-roblox.pages.dev/","date":"2026-05-03T08:43:51.578Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 21:50:47 GMT","end":"Thu, 23 Jul 2026 21:50:46 GMT"},"fingerprint":{"sha1":"23:74:93:25:BB:94:6A:F0:09:05:7F:57:73:50:14:CD:19:AA:AF:20","sha256":"13:12:D4:15:47:A9:32:60:B9:69:04:44:B0:1C:A6:FF:80:89:A8:57:85:61:DB:5D:BC:87:06:24:86:84:51:44"}}},"request":{"raw":"GET /watch.146235150587.js?key=6dd5e3d7ac37d33b5abc87810f6ac7f3\u0026kw=%5B%22easy%22%2C%22ways%22%2C%22to%22%2C%22get%22%2C%22free%22%2C%22roblox%22%2C%22legit%22%2C%22tips%22%5D\u0026refer=https%3A%2F%2Fto-get-free-roblox.pages.dev%2F\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=c3445600-5d69-41ee-a032-d80eedc757d5%3A2%3A1\u0026rmtc=t\u0026shv=2\u0026sht=wjUXe0tkPnGhBGLCNgj4JVzhsPTOoNgw97DXFoZmvW4\u0026fstu=019ded02-1b07-760e-91cc-95e36638c8b1\u0026st1=e8fc851ee63504de15665f611b12a82b\u0026ps1=1777797831 HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://to-get-free-roblox.pages.dev\r\nReferer: https://to-get-free-roblox.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=c3445600-5d69-41ee-a032-d80eedc757d5:2:1; ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.FQfjBon4tRZU9dtm4HYzCZWTDAe7qtA8cMI3ADMKGRk\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:43:51 GMT\r\nContent-Type: text/html\r\nContent-Length: 3019\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Mobile,X-Device-User-Agent,User-Agent,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,Device-Stock-UA,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA,Sec-CH-UA\r\naccess-control-allow-origin: https://to-get-free-roblox.pages.dev\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\nset-cookie: uid_id2=c3445600-5d69-41ee-a032-d80eedc757d5:2:1; expires=Sun, 10 May 2026 08:43:51 GMT; path=/; secure; SameSite=None\npdhtkv=true; expires=Mon, 04 May 2026 08:43:51 GMT; path=/; secure; SameSite=None\nuncs=1; expires=Mon, 04 May 2026 08:43:51 GMT; path=/; secure; SameSite=None\npdhtkv5=true; expires=Mon, 04 May 2026 08:43:51 GMT; path=/; secure; SameSite=None\nuncs5=1; expires=Mon, 04 May 2026 08:43:51 GMT; path=/; secure; SameSite=None\nu_pl26582443=1; expires=Mon, 04 May 2026 08:43:51 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 55\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: c629828d95d4ddd44ea7c59287a900da\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":4321,"size_decoded":0,"mime_type":"text/html","magic":"JavaScript source, ASCII text, with very long lines (3445)","md5":"9dc34059f45506af4a58e29596582306","sha1":"c13ef4d6740621fad93f787b656c8363d66b39d1","sha256":"254e410dd6a8ef12a425ebb02324b500e3ba9cb6445b441d9b83be66252d7ecd","sha512":"05533503d5628fe465ffe5978d2a944cd2091b4cce77eef57946a31a648ffe0949fbb4d0914392eb2135161ce8677c05f124cd4b51815ea1cc464bcd0922dd18","ssdeep":"96:y9aA5ozZJjLCzzMK3CGrkk/7sHWoGyCiUY4/R1ZDUCfMEDaH:y9aA2zqMSCWkkqhI7VUCkCaH","tlshash":"fb911a2e4d9cd2b83427b47f117b520cee61804f58059e46786cd651af20ba80e6de9c","first_seen":"2026-05-03T08:44:19.147855Z","last_seen":"2026-05-03T08:44:19.147855Z","times_seen":1,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/_/ytembeds/_/ss/k=ytembeds.base.FcgmWwy29Ls.L.F4.O/am=AAAABA/d=0/br=1/rs=AGKMywGCnhBtnQKrhYoaeTyYWGYRqxKoRA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","date":"2026-05-03T08:43:49.092Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 05:17:21 GMT","end":"Wed, 01 Jul 2026 05:17:20 GMT"},"fingerprint":{"sha1":"2F:4C:57:A4:4A:60:44:C4:08:82:D4:9D:9C:A9:1A:8F:89:5F:E8:F0","sha256":"BE:DC:F0:E9:A5:84:8F:67:24:9D:57:FE:79:42:FA:AA:A7:F8:1D:5F:B1:EB:36:BF:36:EE:24:98:71:31:97:4A"}}},"request":{"raw":"GET /s/_/ytembeds/_/ss/k=ytembeds.base.FcgmWwy29Ls.L.F4.O/am=AAAABA/d=0/br=1/rs=AGKMywGCnhBtnQKrhYoaeTyYWGYRqxKoRA HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/youtube-main-app-web-scs-key\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"youtube-main-app-web-scs-key\"\r\nreport-to: {\"group\":\"youtube-main-app-web-scs-key\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube-main-app-web-scs-key\"}]}\r\ncontent-length: 44443\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 02 May 2026 15:06:47 GMT\r\nexpires: Sun, 02 May 2027 15:06:47 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Fri, 01 May 2026 05:08:46 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 63422\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":363825,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (57661)","md5":"39829b214002b1965718baf7c6eda069","sha1":"9eee51daf8484ad901cee74cb922812d8f45b9df","sha256":"1663f5de6ff1b590fae92fa629dd0bf4c6003b92cba4e78efec05f658bdc6d64","sha512":"f07ee02b65e378deab2249b4d63ab8151f8b515c1e40a638d5611d4a0485e205fad79f8a42684a9ec26796861e2b00fafaccd7541f58fc9842d3be62921fce70","ssdeep":"6144:VpEp341Z+zlrEBtLzum3gszR8ri24typauQz0yeSE4dk+46HnhF4xdXcXaGlaxAG:a41Z+zlrEBtLzum3gszR8ri24typauQ4","tlshash":"b574b97355121228f0179671fbe1fe4ab526c117c25a3aafe442be2cc6df5e12e2360d","first_seen":"2026-05-01T13:17:55.919083Z","last_seen":"2026-05-04T17:22:13.682049Z","times_seen":2618,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:300,400,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://to-get-free-roblox.pages.dev/","date":"2026-05-03T08:43:50.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 05:19:27 GMT","end":"Wed, 01 Jul 2026 05:19:26 GMT"},"fingerprint":{"sha1":"E9:E5:B7:DA:0A:AE:59:02:EA:10:61:71:9B:52:3A:08:42:A0:67:A5","sha256":"F6:1D:CE:31:AA:9C:7B:58:1D:1D:14:96:99:B6:58:CC:FB:AE:D5:3C:F8:FB:40:E3:45:2D:4A:54:11:B4:E2:F3"}}},"request":{"raw":"GET /css?family=Roboto:300,400,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 03 May 2026 08:43:50 GMT\r\ndate: Sun, 03 May 2026 08:43:50 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16755,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"1936a90eef3ebd4c6b40eb59d72e164d","sha1":"4c698f8dc97e2e6186d46215e209aca1b1194a5d","sha256":"412d98c2f4410a048131a7d9362fb38456ce2ff67cd4731ea411708a7996a021","sha512":"07ad2431175e5566ae435738d94d4da3e96e4856a1fe1d5917c52474cab28808cd940fec0e8f75eb2f3d573e6fe8497fc12636ef4738d1b67e9144725192b580","ssdeep":"384:p9f59g9P9r9yU9/qY4+949Y9p9fM919W969yh9/qY4X9N9t949fd9k9D939yQ9/O:pDS99YURRuWDyjooYhREHPWP2ZZYQRVs","tlshash":"48721091041704009b834ce223cebf35fe1f52117142d0b5abfd9b6b9ddbca6526939d","first_seen":"2026-02-19T22:28:01.752187Z","last_seen":"2026-08-15T21:44:09.667226Z","times_seen":10656,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":65,"dns":1,"connect":21,"send":0,"wait":33,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/af/25/da/af25da8381e0bd0494ba4018c76898a2.js","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://to-get-free-roblox.pages.dev/","date":"2026-05-03T08:43:51.090Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 21:50:47 GMT","end":"Thu, 23 Jul 2026 21:50:46 GMT"},"fingerprint":{"sha1":"23:74:93:25:BB:94:6A:F0:09:05:7F:57:73:50:14:CD:19:AA:AF:20","sha256":"13:12:D4:15:47:A9:32:60:B9:69:04:44:B0:1C:A6:FF:80:89:A8:57:85:61:DB:5D:BC:87:06:24:86:84:51:44"}}},"request":{"raw":"GET /af/25/da/af25da8381e0bd0494ba4018c76898a2.js HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://to-get-free-roblox.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:43:51 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 34757\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform,Sec-CH-UA-Model,X-Device-User-Agent,X-UCBrowser-Device-UA,User-Agent,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Mobile,Device-Stock-UA,X-OperaMini-Phone-UA\r\nx-envoy-upstream-service-time: 6\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 190e81e279e1f632042c5fb3ad9c2f42\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":92468,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"c084358037a4f809089e22f1c2c1c457","sha1":"37df93309a57c211d5636b5135ab943dc0ac54ac","sha256":"243fb44c29b49b21097ea5d2077d691dc7f5166219ad9549013821c7a6c43209","sha512":"b7fa3b94b6c3a08647f26f83639a453851f5191944037ea6c9383ec55e3261859a7ff21e7cfd5c076b1e7d1771f783dcb26809c19f3614ae5393538c6edc99a7","ssdeep":"1536:2l2eABAdWrl7QJWX8jlvpwF1PTz5Ysk5qMUPKLyF:2dSAkrdQJoYlBwfBFkhm","tlshash":"8793c78c7f92f0f5039a24b3232f9c16f2ab1d5124fce444d903a9e5ae25319d57ae6c","first_seen":"2026-05-03T08:42:10.131198Z","last_seen":"2026-05-03T08:44:19.149421Z","times_seen":2,"resource_available":true,"data":null}},"time_used":766,"timings":{"blocked":283,"dns":0,"connect":93,"send":0,"wait":101,"receive":95,"ssl":191},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/impr.gif?sid=H4sIAAAAAAAC_1RSvYskRRytXg8DDcTzAwyUBi_wxJmt_pxuLzv8CPR2xTu5wECqq6rHcnq6-rq6Z-Ym2vPkEpNTEEQQet7M3gYeov-BzIoGgrCdTbCbGBkLZyTI7A6sVvD7qFcU7_d-796sPiFd1Gz13jU9VVnGtoMutV-5qXKhx8beuWE7tEuv2DdVHvpX7Mk6lKPXHc_v0sv225IP9LZLHUod6thvqVKmerJ9ikIVD2OnG9Ou73adwMek_H9vaguGWRCjE3IRSrRP_ZF-CMWXyIc_vCHNoNLFa28O64xVusRIHHyQD3I9zjE8L9PSQpofbF5Dm5aQr7eg84PNBNCjxXoCJKolW88fI8kPNjSRjPbPmCYZZI5EPInxaAmZLaHYElzfhRJHBOACO7vIhw92dDlmt89QtkZbcuHRX1Djllw4fhb58PurmZrY13VWV0rnBpO0gZosofpLFPUhqukW1PgQvPoUSvxOth-9i3y42DWZhhKrS1HPp9SXUccJZdTxXRZ2kpT7HS5TEYRu2AtYcCqRSpdgZgu1sVArC3VqoS4sDMXK9mnkc4d5YRoL3qM-830hExpHLqUs5j3U_A6UuA9e7qEo9zBQXx698F1LrOeuwQgLpiIYiWZfZMY1zQORmTpxNtndZK-Z66o_Y_u66sucgJX3UYpmoYpb5i549dh8mhox1-vAkqqZs0Q0cyUqgvLW6hJ1YiEFdTtOyN1Oz41FJw5Y1EkjR8TcD7h03EVqqrqZFSfk6bXU1lff_oqBXNncpT3JI5-7fhCy1KUO50HocSa4F3I_hFENlNkCMxamqiXvpJdRqJa8dO9PJOwQJjsEVxZY_SLYuAH7uME0f5iqXIwUl12uhxC6QVFdQHXbmmUn5Jn5-zeu_nS68Y9e_RyS_0Y2B7xsUJQNPlE_E_SzOz_uFpUaqilbW-B6xSr5OJg6etkFVy25-I089WLwzzF4sQdTnP9kNEFSWMgUQSbP71nSwPynT87rmfkM_dJCklnzJCutRZKV2RdnJI1a2aknXU5p1AsdL0ql4_mCp0HkxyJk1PMkKtOqv5_45d8AAAD__0ux3gkJBAAA","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://to-get-free-roblox.pages.dev/","date":"2026-05-03T08:43:51.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 22:18:41 GMT","end":"Thu, 23 Jul 2026 22:18:40 GMT"},"fingerprint":{"sha1":"85:96:BC:41:7A:67:17:33:3C:0F:33:72:BB:3D:4F:F3:56:97:46:09","sha256":"DD:49:0E:2F:27:46:7A:6C:59:AD:4C:03:B8:50:05:CE:D0:BE:26:63:2C:98:45:1E:56:85:0C:E8:27:00:7A:19"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1RSvYskRRytXg8DDcTzAwyUBi_wxJmt_pxuLzv8CPR2xTu5wECqq6rHcnq6-rq6Z-Ym2vPkEpNTEEQQet7M3gYeov-BzIoGgrCdTbCbGBkLZyTI7A6sVvD7qFcU7_d-796sPiFd1Gz13jU9VVnGtoMutV-5qXKhx8beuWE7tEuv2DdVHvpX7Mk6lKPXHc_v0sv225IP9LZLHUod6thvqVKmerJ9ikIVD2OnG9Ou73adwMek_H9vaguGWRCjE3IRSrRP_ZF-CMWXyIc_vCHNoNLFa28O64xVusRIHHyQD3I9zjE8L9PSQpofbF5Dm5aQr7eg84PNBNCjxXoCJKolW88fI8kPNjSRjPbPmCYZZI5EPInxaAmZLaHYElzfhRJHBOACO7vIhw92dDlmt89QtkZbcuHRX1Djllw4fhb58PurmZrY13VWV0rnBpO0gZosofpLFPUhqukW1PgQvPoUSvxOth-9i3y42DWZhhKrS1HPp9SXUccJZdTxXRZ2kpT7HS5TEYRu2AtYcCqRSpdgZgu1sVArC3VqoS4sDMXK9mnkc4d5YRoL3qM-830hExpHLqUs5j3U_A6UuA9e7qEo9zBQXx698F1LrOeuwQgLpiIYiWZfZMY1zQORmTpxNtndZK-Z66o_Y_u66sucgJX3UYpmoYpb5i549dh8mhox1-vAkqqZs0Q0cyUqgvLW6hJ1YiEFdTtOyN1Oz41FJw5Y1EkjR8TcD7h03EVqqrqZFSfk6bXU1lff_oqBXNncpT3JI5-7fhCy1KUO50HocSa4F3I_hFENlNkCMxamqiXvpJdRqJa8dO9PJOwQJjsEVxZY_SLYuAH7uME0f5iqXIwUl12uhxC6QVFdQHXbmmUn5Jn5-zeu_nS68Y9e_RyS_0Y2B7xsUJQNPlE_E_SzOz_uFpUaqilbW-B6xSr5OJg6etkFVy25-I089WLwzzF4sQdTnP9kNEFSWMgUQSbP71nSwPynT87rmfkM_dJCklnzJCutRZKV2RdnJI1a2aknXU5p1AsdL0ql4_mCp0HkxyJk1PMkKtOqv5_45d8AAAD__0ux3gkJBAAA HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://to-get-free-roblox.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=874004e8-16e8-42a6-bfc4-cefd562675a5:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl26582471=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:43:52 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: X-UCBrowser-Device-UA,Sec-CH-UA-Platform-Version,Sec-CH-UA,Sec-CH-UA-Mobile,User-Agent,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform,Sec-CH-UA-Model,Device-Stock-UA,X-Device-User-Agent,X-OperaMini-Phone-UA\r\nx-envoy-upstream-service-time: 3\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 55d061997f9d991cef0097241baa7e3d\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T22:04:31.086022Z","times_seen":17907918,"resource_available":true,"data":null}},"time_used":463,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":463,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wayfarerorthodox.com/pixel/purst?dl=0\u0026th=0\u0026sc=0\u0026rs=1501\u0026rd=1501\u0026fd=499\u0026bv=2026.4.2\u0026tmpl=70","fqdn":"wayfarerorthodox.com","domain":"wayfarerorthodox.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://to-get-free-roblox.pages.dev/","date":"2026-05-03T08:43:49.517Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"wayfarerorthodox.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 00:39:42 GMT","end":"Mon, 27 Jul 2026 00:39:41 GMT"},"fingerprint":{"sha1":"72:D3:68:BC:A4:4E:55:26:DB:11:49:E2:96:21:2A:F6:6D:D9:43:08","sha256":"32:C2:2C:23:81:37:C1:17:20:76:3E:3A:3C:7A:DB:DC:43:10:FE:F6:F2:BA:21:05:A6:7F:B0:88:91:D5:10:02"}}},"request":{"raw":"GET /pixel/purst?dl=0\u0026th=0\u0026sc=0\u0026rs=1501\u0026rd=1501\u0026fd=499\u0026bv=2026.4.2\u0026tmpl=70 HTTP/1.1\r\nHost: wayfarerorthodox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://to-get-free-roblox.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:43:49 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: Sec-CH-UA-PlatformUser-Agent, Sec-CH-UA-Platform, Sec-CH-UA-Model, Device-Stock-UA, X-Device-User-Agent, X-OperaMini-Phone-UA, X-UCBrowser-Device-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, User-Agent, Sec-CH-UA-Platform-Version, Sec-CH-UA\r\nHost: wayfarerorthodox.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T22:04:31.086022Z","times_seen":17907918,"resource_available":true,"data":null}},"time_used":677,"timings":{"blocked":289,"dns":4,"connect":93,"send":0,"wait":95,"receive":1,"ssl":190},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/generate_204?qELUyA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","date":"2026-05-03T08:43:50.471Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 05:17:21 GMT","end":"Wed, 01 Jul 2026 05:17:20 GMT"},"fingerprint":{"sha1":"2F:4C:57:A4:4A:60:44:C4:08:82:D4:9D:9C:A9:1A:8F:89:5F:E8:F0","sha256":"BE:DC:F0:E9:A5:84:8F:67:24:9D:57:FE:79:42:FA:AA:A7:F8:1D:5F:B1:EB:36:BF:36:EE:24:98:71:31:97:4A"}}},"request":{"raw":"GET /generate_204?qELUyA HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-length: 0\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sun, 03 May 2026 08:43:50 GMT\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T22:04:31.086022Z","times_seen":17907918,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://to-get-free-roblox.pages.dev/","date":"2026-05-03T08:43:51.697Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 05:19:27 GMT","end":"Wed, 01 Jul 2026 05:19:26 GMT"},"fingerprint":{"sha1":"BF:D8:14:32:18:86:B9:95:54:75:8D:F9:5F:29:DE:4E:F8:F8:F7:13","sha256":"0E:FA:80:0B:F4:13:81:81:4D:CF:50:35:5A:DD:DB:FA:00:0B:34:B2:2D:5D:28:08:E4:45:1F:2C:EF:D2:21:C2"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://to-get-free-roblox.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 29 Apr 2026 22:40:32 GMT\r\nexpires: Thu, 29 Apr 2027 22:40:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 295399\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-08-15T22:04:47.637196Z","times_seen":263173,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/sbar.json?key=af25da8381e0bd0494ba4018c76898a2\u0026uuid=c3445600-5d69-41ee-a032-d80eedc757d5%3A2%3A1","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.127.243","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://to-get-free-roblox.pages.dev/","date":"2026-05-03T08:43:52.095Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 22:18:41 GMT","end":"Thu, 23 Jul 2026 22:18:40 GMT"},"fingerprint":{"sha1":"85:96:BC:41:7A:67:17:33:3C:0F:33:72:BB:3D:4F:F3:56:97:46:09","sha256":"DD:49:0E:2F:27:46:7A:6C:59:AD:4C:03:B8:50:05:CE:D0:BE:26:63:2C:98:45:1E:56:85:0C:E8:27:00:7A:19"}}},"request":{"raw":"GET /sbar.json?key=af25da8381e0bd0494ba4018c76898a2\u0026uuid=c3445600-5d69-41ee-a032-d80eedc757d5%3A2%3A1 HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://to-get-free-roblox.pages.dev/\r\nOrigin: https://to-get-free-roblox.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=874004e8-16e8-42a6-bfc4-cefd562675a5:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl26582471=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:43:52 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 4215\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,X-Device-User-Agent,X-OperaMini-Phone-UA,Sec-CH-UA-Platform-Version,Sec-CH-UA-Full-Version,Sec-CH-UA-Platform,Sec-CH-UA-Model,Device-Stock-UA,X-UCBrowser-Device-UA,User-Agent,Sec-CH-UA\r\naccess-control-allow-origin: https://to-get-free-roblox.pages.dev\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\nset-cookie: uid_id2=874004e8-16e8-42a6-bfc4-cefd562675a5:2:1; expires=Sun, 10 May 2026 08:43:52 GMT; path=/; secure; SameSite=None\nuncs=2; expires=Mon, 04 May 2026 08:43:52 GMT; path=/; secure; SameSite=None\nuncs29=2; expires=Mon, 04 May 2026 08:43:52 GMT; path=/; secure; SameSite=None\nu_pl28216845=1; expires=Mon, 04 May 2026 08:43:52 GMT; path=/; secure; SameSite=None\nslecaf25da8381e0bd0494ba4018c76898a2=[4323731]; expires=Sun, 03 May 2026 08:43:57 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 261\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: a76462c869cb3829033b123bbfe7bf3b\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5821,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"JSON text data","md5":"12cddb2fc85c97fa8c5d956ada2f5fa7","sha1":"ec703a25c0adf9a297c9efff9b90d5f5d224c120","sha256":"ccca3367311e5e1bdbf2b640676c7bc7a6c56823e6ba00fd624c11e4fc3e48a0","sha512":"bbbfdb7c4448cd2c2fc5dcd7a2ae424edd1132c502b3f683709162a7388d4c88f2fcd58e919c60736ab55f8ea63fb8c7d58f48e38aa573a7f2213fadfe506c7f","ssdeep":"96:9zGnoSdAZxLAB0YNfcvHZlfsaveFqOMOJe8aPYbjObpyY67njRzLY5:9z1SiZxLABZ2HZVVgsPgjOVyYCRfq","tlshash":"f8c18d2b059e30d689c30cee35083dfe9dc8956bd816e096fa2dc7df743355e1185258","first_seen":"2026-05-03T08:44:19.149989Z","last_seen":"2026-05-03T08:44:19.149989Z","times_seen":1,"resource_available":false,"data":null}},"time_used":357,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":357,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.nightdestruct.com/sb/ssp/vpn/classic-push/small/js/jquery.min.js","fqdn":"cdn.nightdestruct.com","domain":"nightdestruct.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://to-get-free-roblox.pages.dev/","date":"2026-05-03T08:43:53.235Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nightdestruct.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 16:21:26 GMT","end":"Sun, 28 Jun 2026 16:21:25 GMT"},"fingerprint":{"sha1":"77:BA:39:E3:87:1C:89:74:C5:36:C2:0F:E9:4C:0E:35:C4:92:A6:BA","sha256":"5F:17:E6:F7:42:E9:5F:B9:9E:03:47:36:9F:79:03:3B:E2:C2:66:ED:E9:3D:14:AB:29:B0:52:4A:62:57:C4:91"}}},"request":{"raw":"GET /sb/ssp/vpn/classic-push/small/js/jquery.min.js HTTP/1.1\r\nHost: cdn.nightdestruct.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 03 May 2026 08:43:53 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:19:42 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nage: 2902762\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1k525O5iAf76qvSf4WrraLNLeoewcCcn9VmTB6FgsMObTWiKhphSDgO7cuH%2Bsp3qkmUopr%2FzZu3B8oVAdWsYcf2QMGUN97dxxKPRxC8NnTWv2VW2RN62jjgVA87ocr0Xj1YXUDBpJMk%3D\"}]}\r\netag: W/\"65aa84fe-1499c\"\r\ncontent-encoding: br\r\ncf-ray: 9f5dfb09baad568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84380,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32025)","md5":"4a356126b9573eb7bd1e9a7494737410","sha1":"8258d046f17dd3c15a5d3984e1868b7b5d1db329","sha256":"22642f202577f0ba2f22cbe56b6cf291a09374487567cd3563e0d2a29f75c0c5","sha512":"005c3102459dbf145df6a858629d6a6de4598fafe24cd989d86170731b0c3b3c304da470cf66bfd935f6db911b723df0857b5ed561906f7f1c5c4e63ed9430de","ssdeep":"1536:/P10iSi65U/dXXeyhzeBuG+HYE0mdkuJO1z6Oy4sh3J1A72BjmN7TwpDKba98HrZ:++414Jiz6fh6lTqya98HrZ","tlshash":"dc83d6d9b2c67062977734b851bf510bb17a98dab40c8c60f0a4d8e47eb4a8d517bf2c","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-08-15T20:54:56.438353Z","times_seen":20127,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/1b/50/e5/1b50e57a5911fd0a5b46962ab48ca22b.js","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.127.243","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://to-get-free-roblox.pages.dev/","date":"2026-05-03T08:43:54.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 22:18:41 GMT","end":"Thu, 23 Jul 2026 22:18:40 GMT"},"fingerprint":{"sha1":"85:96:BC:41:7A:67:17:33:3C:0F:33:72:BB:3D:4F:F3:56:97:46:09","sha256":"DD:49:0E:2F:27:46:7A:6C:59:AD:4C:03:B8:50:05:CE:D0:BE:26:63:2C:98:45:1E:56:85:0C:E8:27:00:7A:19"}}},"request":{"raw":"GET /1b/50/e5/1b50e57a5911fd0a5b46962ab48ca22b.js HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://to-get-free-roblox.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=874004e8-16e8-42a6-bfc4-cefd562675a5:2:1; pdhtkv=true; uncs=2; pdhtkv29=true; uncs29=2; u_pl26582471=1; u_pl28216845=1; slecaf25da8381e0bd0494ba4018c76898a2=[4323731]\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:43:54 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 2574\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: X-UCBrowser-Device-UA,User-Agent,Sec-CH-UA-Platform-Version,Sec-CH-UA-Full-Version,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Device-Stock-UA,X-Device-User-Agent,X-OperaMini-Phone-UA\r\nx-envoy-upstream-service-time: 7\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 494886c1b8397ab891aa1d4397fef088\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5146,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5146), with no line terminators","md5":"a141d4cc0ea62b7e58f726a49c7b649e","sha1":"ca9a28b3d7e06f192f20989c96c710bd243d512e","sha256":"42554c0284cc374e33e51ba1c2980fad64bd7600955788facf38b137a1668c80","sha512":"148f99f86db9534dc360f8b266d2d648f7554e616703ff93c369a32f2540eb4d3fad86b449b34e9c19e0805d1aa38dd2cf00412d5569df4fb92a018f70fbbfe4","ssdeep":"96:ctGAdiByQnKauwtTMpX8TxnOgV27JBrHVtH41:c4fycnsgUDpl41","tlshash":"8db1858c3f81f2d407b270af2f2f1509f16d5c20ba89d498d01b95d03e5862adaa7f71","first_seen":"2026-04-30T15:37:40.418293Z","last_seen":"2026-05-04T13:42:54.864213Z","times_seen":154,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/impr.gif?sid=H4sIAAAAAAAC_1RSu48bVR-942z1fSDEU6IATbEFkbD3zsPjGVJERATEI7tAglJQoDv33tlcPJ6ZzJ2xHdNsCEmJAjRANT727iKxiuA_QDYF0gqkTOci21BRIwXRIXstBU7xe5wzxfnNPXfG5QlpoWSLdy-lIxXHbKvdouZLV1Ui0oE2t6-YFm3Rc-ZVlXjuOXO4LHn_FctxW_Ss-Ybk3XTLphalFrXM11Uuo3S4tVKhsqPAagW05dotq-1imP9312UDmjUg-ifkKShRP_F79CEUnyHp_fCa1N0izV6-2CtjVqQ5-uLwg6SbpIMEvUdjlBuIksP110h1TcjXDaTJ4foCpP3p8gKEqiaN5x4gTA7XNhH290-dhjFkglD8H4P-DDKeQbEZeHoLStwnABfY3kHSO9hO8wG7caqypVqTjYd_Qg1qsvHgGSS9exdiNTQvp3FZqDTRGEYV1HAGtTtDVs5RjBpQgzl48SmU-I1sPXwHSW-6o-MUSiw2_Y5LqSv9puVJv-nazGuGEXebXEai7dlep83aq1-kohmYbqDUBkploIwMlJmBnliYLvVdbjHHiwLBO9RlritkSAPfppQFvIOS34QSd8Hz2weZuFZ0-9MiL-W0TLgeW9-dUnawIg-WpB2MraPyoyy2vbZvux1rbCHL99BVX95__vuaGM9eghYN6KImxnt76ItqX8Ta1tWBiHUZWutur7tTTdJid8z202JXJgQsv4tcVFOVXde3wIszk1GkxSRdFhYW1YSFopooURDk1xeb1AqEFNRuWoLLZidsB00_cuymdCy7zTnthK43jXRRVuPshDy5fCfj3uePoysXJovstmC-41uShoK6gRsyl1o-73h-4DMbWlVQugGmDYxUTd6OziJTNXnxzh8I2Rw6noMrA6x8AWxQgV2rMEqOIpWIvuKyxdMeRFohKzZQ3DDG8Ql5evL-lQs_reLy6t9fQfLj84tvlvgWPK-Q5RU-Vj8T7MY3f9zJCtVTI7bMz-WCFfIMmKqJ8cmv4Komj711cRXlzTdvg2d70Nnx-bmzAnRKEGYGYkUQy2OyBlhYQf9rDx_NY_0ZdnMDYWxMwjg3pmGcx1-c2tRqYUaOtDmlfsezHD-SluMKHrV9NxAeo44jUeha_fW_X_4JAAD__0KpmRZIBAAA","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.127.243","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://to-get-free-roblox.pages.dev/","date":"2026-05-03T08:43:54.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 22:18:41 GMT","end":"Thu, 23 Jul 2026 22:18:40 GMT"},"fingerprint":{"sha1":"85:96:BC:41:7A:67:17:33:3C:0F:33:72:BB:3D:4F:F3:56:97:46:09","sha256":"DD:49:0E:2F:27:46:7A:6C:59:AD:4C:03:B8:50:05:CE:D0:BE:26:63:2C:98:45:1E:56:85:0C:E8:27:00:7A:19"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1RSu48bVR-942z1fSDEU6IATbEFkbD3zsPjGVJERATEI7tAglJQoDv33tlcPJ6ZzJ2xHdNsCEmJAjRANT727iKxiuA_QDYF0gqkTOci21BRIwXRIXstBU7xe5wzxfnNPXfG5QlpoWSLdy-lIxXHbKvdouZLV1Ui0oE2t6-YFm3Rc-ZVlXjuOXO4LHn_FctxW_Ss-Ybk3XTLphalFrXM11Uuo3S4tVKhsqPAagW05dotq-1imP9312UDmjUg-ifkKShRP_F79CEUnyHp_fCa1N0izV6-2CtjVqQ5-uLwg6SbpIMEvUdjlBuIksP110h1TcjXDaTJ4foCpP3p8gKEqiaN5x4gTA7XNhH290-dhjFkglD8H4P-DDKeQbEZeHoLStwnABfY3kHSO9hO8wG7caqypVqTjYd_Qg1qsvHgGSS9exdiNTQvp3FZqDTRGEYV1HAGtTtDVs5RjBpQgzl48SmU-I1sPXwHSW-6o-MUSiw2_Y5LqSv9puVJv-nazGuGEXebXEai7dlep83aq1-kohmYbqDUBkploIwMlJmBnliYLvVdbjHHiwLBO9RlritkSAPfppQFvIOS34QSd8Hz2weZuFZ0-9MiL-W0TLgeW9-dUnawIg-WpB2MraPyoyy2vbZvux1rbCHL99BVX95__vuaGM9eghYN6KImxnt76ItqX8Ta1tWBiHUZWutur7tTTdJid8z202JXJgQsv4tcVFOVXde3wIszk1GkxSRdFhYW1YSFopooURDk1xeb1AqEFNRuWoLLZidsB00_cuymdCy7zTnthK43jXRRVuPshDy5fCfj3uePoysXJovstmC-41uShoK6gRsyl1o-73h-4DMbWlVQugGmDYxUTd6OziJTNXnxzh8I2Rw6noMrA6x8AWxQgV2rMEqOIpWIvuKyxdMeRFohKzZQ3DDG8Ql5evL-lQs_reLy6t9fQfLj84tvlvgWPK-Q5RU-Vj8T7MY3f9zJCtVTI7bMz-WCFfIMmKqJ8cmv4Komj711cRXlzTdvg2d70Nnx-bmzAnRKEGYGYkUQy2OyBlhYQf9rDx_NY_0ZdnMDYWxMwjg3pmGcx1-c2tRqYUaOtDmlfsezHD-SluMKHrV9NxAeo44jUeha_fW_X_4JAAD__0KpmRZIBAAA HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://to-get-free-roblox.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=874004e8-16e8-42a6-bfc4-cefd562675a5:2:1; pdhtkv=true; uncs=2; pdhtkv29=true; uncs29=2; u_pl26582471=1; u_pl28216845=1; slecaf25da8381e0bd0494ba4018c76898a2=[4323731]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:43:54 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,X-Device-User-Agent,X-OperaMini-Phone-UA,Sec-CH-UA-Platform-Version,Sec-CH-UA-Full-Version,Sec-CH-UA-Platform,Sec-CH-UA-Model,Device-Stock-UA,X-UCBrowser-Device-UA,User-Agent,Sec-CH-UA\r\nset-cookie: iprc_l+9985ebf3f8093d45ed65cdd4db7276c2=4323731; expires=Mon, 04 May 2026 08:43:54 GMT; path=/; secure; SameSite=None\niprc_l:4323731=1; expires=Mon, 04 May 2026 08:43:54 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 2\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 0f2fd9eb64bd85dda963517263949dcb\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T22:04:31.086022Z","times_seen":17907918,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"links.mtevor.com/api.php","fqdn":"links.mtevor.com","domain":"mtevor.com","tld":"com"},"ip":{"addr":"172.67.199.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://to-get-free-roblox.pages.dev/","date":"2026-05-03T08:43:48.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mtevor.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 16:10:55 GMT","end":"Thu, 25 Jun 2026 17:08:44 GMT"},"fingerprint":{"sha1":"1D:90:33:9C:3D:4D:50:02:77:2C:32:67:1E:87:33:CC:BD:89:04:6D","sha256":"72:55:21:53:6A:A2:E9:F9:08:9D:13:A1:4F:FC:E2:CD:E9:5C:53:05:B8:B0:36:72:24:AB:FD:DA:7A:F9:7C:C4"}}},"request":{"raw":"GET /api.php HTTP/1.1\r\nHost: links.mtevor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://to-get-free-roblox.pages.dev/\r\nOrigin: https://to-get-free-roblox.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 08:43:48 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wFL21yI3ITFGgJ7VgTEtfkdseiVPc3Swen7JRHhsWM8bOWKLnPNvAFbBNaDiZcedl2dkkYRJumX8gPZJlJmgDevujzlWhMTqFiB5fABUtLDTnPjNXuUXzegb44bU1KaBQi8e\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9f5dfaec7e29568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"061f03784313efebdfd89e1e047d7f5f","sha1":"83cdf5aca220010db5bd5130a74bd120923f22ff","sha256":"c39532e469458caee08d20dc626bf7970f9b54ad6b56d80018f252b77e9840d2","sha512":"dcdc0e26787a591df9d3e385e00d6ce423f6b1891ea0be9bf931852fd9ab2e57c6ef4ab808221e34a459ed09fb15357117fa33b31afbf81362e8f037f17d49ca","ssdeep":"","tlshash":"12c02bf9f380119435b005d6d5012414beaf1d4c1f0300c1bb43a7db4d005da818d1e3","first_seen":"2026-05-03T08:44:19.151888Z","last_seen":"2026-05-03T08:44:19.151888Z","times_seen":1,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":22,"dns":1,"connect":1,"send":0,"wait":146,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.nightdestruct.com/sb/interstitial/utility/default/blog/flip_icon_fullpage/mar24/1/css/style.css","fqdn":"cdn.nightdestruct.com","domain":"nightdestruct.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://to-get-free-roblox.pages.dev/","date":"2026-05-03T08:43:50.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nightdestruct.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 16:21:26 GMT","end":"Sun, 28 Jun 2026 16:21:25 GMT"},"fingerprint":{"sha1":"77:BA:39:E3:87:1C:89:74:C5:36:C2:0F:E9:4C:0E:35:C4:92:A6:BA","sha256":"5F:17:E6:F7:42:E9:5F:B9:9E:03:47:36:9F:79:03:3B:E2:C2:66:ED:E9:3D:14:AB:29:B0:52:4A:62:57:C4:91"}}},"request":{"raw":"GET /sb/interstitial/utility/default/blog/flip_icon_fullpage/mar24/1/css/style.css HTTP/1.1\r\nHost: cdn.nightdestruct.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://to-get-free-roblox.pages.dev/\r\nOrigin: https://to-get-free-roblox.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 08:43:51 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Mon, 04 Mar 2024 15:58:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"65e5efc1-1292\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XxCEh8zyKmc6PYskQAsQ5kXga3tAqAZNKinZq94QUXNJqeAypzRIto8YEJK7uzMooGQbugd4j9edJopzv6gu8ZPY6KHvzeZdsD7ZoH%2BE2XtHl5Ek9erSOmRafnjgupSH%2BqyT%2FqDXDsQ%3D\"}]}\r\ncf-ray: 9f5dfaf9d92a5691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4754,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"976bcb3f5381721ea1d6fb9cd6498950","sha1":"a2c51ff836db6f9192f81da1b16ba61541c0b432","sha256":"8cd6710d53278772584c4aab18388dc3d265b326de2d005a5166c3f62fb2ca9f","sha512":"615e70486ab5a9134cfb069135496bd9bb640d0ba330962d11c260b2e92d2e8a78c3489ce6a2a2ea2609f7b44f860c2f0f1f670057fe6b400de834aeb9f09fec","ssdeep":"96:iTMXsWxKysZ7Ur8nOHGrX45dUqbLvXVSWnO9PAs3xt4fAQn:IMXlKOr8e2od/bTFRO9PAs3LuAQn","tlshash":"8ca12196aa630844751be4a63f33274663184447aa0bc9697fc4738c8fc61dd85e3b9e","first_seen":"2025-10-16T22:58:39.296674Z","last_seen":"2026-07-04T23:06:50.350562Z","times_seen":115,"resource_available":false,"data":null}},"time_used":529,"timings":{"blocked":17,"dns":1,"connect":1,"send":0,"wait":493,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.nightdestruct.com/sb/interstitial/utility/default/blog/flip_icon_fullpage/mar24/1/img/icon.jpg","fqdn":"cdn.nightdestruct.com","domain":"nightdestruct.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://to-get-free-roblox.pages.dev/","date":"2026-05-03T08:43:50.781Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nightdestruct.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 16:21:26 GMT","end":"Sun, 28 Jun 2026 16:21:25 GMT"},"fingerprint":{"sha1":"77:BA:39:E3:87:1C:89:74:C5:36:C2:0F:E9:4C:0E:35:C4:92:A6:BA","sha256":"5F:17:E6:F7:42:E9:5F:B9:9E:03:47:36:9F:79:03:3B:E2:C2:66:ED:E9:3D:14:AB:29:B0:52:4A:62:57:C4:91"}}},"request":{"raw":"GET /sb/interstitial/utility/default/blog/flip_icon_fullpage/mar24/1/img/icon.jpg HTTP/1.1\r\nHost: cdn.nightdestruct.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 08:43:50 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 20630\r\nserver: cloudflare\r\nlast-modified: Mon, 04 Mar 2024 15:59:00 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"65e5efc4-5096\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\naccept-ranges: bytes\r\nage: 2084798\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WLvP%2BanW5UqFtoroMuKWGL7xHPIN9N9ogsf2mV7GxzENaWSsZ73DQrh8jeI7yOXWRzutfQYvLewHkqBzD%2FbbvNMULOHFp8vthDX%2B6oOK%2B9hgygf6nspopkI7D50zcIbEEk2GPkt2k08%3D\"}]}\r\ncf-ray: 9f5dfafa69e55691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20630,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x333, components 3","md5":"a5541c9b68c9d6d3314c6da023a927d2","sha1":"3ed99e326c00982916d61a9a7c547efbaf366403","sha256":"a2a4cadceba37be21623ef4cd7ee10b49d3426c967fee720878c8ba6a46623d0","sha512":"6c5c6ebefff18fbc2adfab9783c9e0727dfe69c85c5b0bad477d56b9dfd60c2507619e6b86f4c31db5b055372919dd02b6da8b93beb4ad1b65ba6b8661e30516","ssdeep":"384:HjsJ0qm3HVC99+lYWkJf0EJHPJeafNUiDDlwYXXGeZqXvFKdhAe+SQMQ0paMMMnH:DF1Kpf0SO8lXHg9Kdue+SQMQ0pXMMnkc","tlshash":"9292d045a1ecc631c9d96170bd8092bb705d7ab02ef8178399cb3ffe8e52950f6075a4","first_seen":"2025-10-16T22:58:39.102459Z","last_seen":"2026-07-04T23:06:50.347517Z","times_seen":119,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://to-get-free-roblox.pages.dev/","date":"2026-05-03T08:43:51.694Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 05:19:27 GMT","end":"Wed, 01 Jul 2026 05:19:26 GMT"},"fingerprint":{"sha1":"BF:D8:14:32:18:86:B9:95:54:75:8D:F9:5F:29:DE:4E:F8:F8:F7:13","sha256":"0E:FA:80:0B:F4:13:81:81:4D:CF:50:35:5A:DD:DB:FA:00:0B:34:B2:2D:5D:28:08:E4:45:1F:2C:EF:D2:21:C2"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://to-get-free-roblox.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 29 Apr 2026 22:40:32 GMT\r\nexpires: Thu, 29 Apr 2027 22:40:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 295399\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-08-15T22:04:47.637196Z","times_seen":263173,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":22,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sourshaped.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.show-sb.com%2Fsb%2Fau%2F0c%2Fc8%2Fe1%2F0cc8e13ba9d5dbc867b982993e805a9d%2F1632728593.html\u0026l=1325\u0026fd=618","fqdn":"sourshaped.com","domain":"sourshaped.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://to-get-free-roblox.pages.dev/","date":"2026-05-03T08:43:53.119Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sourshaped.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 00:05:19 GMT","end":"Mon, 27 Jul 2026 00:05:18 GMT"},"fingerprint":{"sha1":"9E:9D:89:63:27:09:09:E1:DE:EF:A3:53:5A:4C:B4:8F:37:96:26:12","sha256":"0D:74:F5:C7:12:ED:B6:75:69:22:A8:F1:16:86:18:85:88:22:BF:39:04:76:47:0E:7B:64:51:C3:94:F0:5A:7F"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.show-sb.com%2Fsb%2Fau%2F0c%2Fc8%2Fe1%2F0cc8e13ba9d5dbc867b982993e805a9d%2F1632728593.html\u0026l=1325\u0026fd=618 HTTP/1.1\r\nHost: sourshaped.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://to-get-free-roblox.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:43:53 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: X-Device-User-Agent, X-UCBrowser-Device-UA, User-Agent, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Mobile, X-OperaMini-Phone-UA, Sec-CH-UA, Sec-CH-UA-PlatformUser-Agent, Device-Stock-UA\r\nHost: sourshaped.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T22:04:31.086022Z","times_seen":17907918,"resource_available":true,"data":null}},"time_used":672,"timings":{"blocked":286,"dns":1,"connect":95,"send":0,"wait":96,"receive":0,"ssl":192},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://to-get-free-roblox.pages.dev/","date":"2026-05-03T08:43:48.541Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 05:17:21 GMT","end":"Wed, 01 Jul 2026 05:17:20 GMT"},"fingerprint":{"sha1":"2F:4C:57:A4:4A:60:44:C4:08:82:D4:9D:9C:A9:1A:8F:89:5F:E8:F0","sha256":"BE:DC:F0:E9:A5:84:8F:67:24:9D:57:FE:79:42:FA:AA:A7:F8:1D:5F:B1:EB:36:BF:36:EE:24:98:71:31:97:4A"}}},"request":{"raw":"GET /embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0 HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://to-get-free-roblox.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T22:04:31.086022Z","times_seen":17907918,"resource_available":true,"data":null}},"time_used":246,"timings":{"blocked":123,"dns":0,"connect":21,"send":0,"wait":0,"receive":0,"ssl":97},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/youtubei/v1/log_event?alt=json","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","date":"2026-05-03T08:43:52.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 05:17:21 GMT","end":"Wed, 01 Jul 2026 05:17:20 GMT"},"fingerprint":{"sha1":"2F:4C:57:A4:4A:60:44:C4:08:82:D4:9D:9C:A9:1A:8F:89:5F:E8:F0","sha256":"BE:DC:F0:E9:A5:84:8F:67:24:9D:57:FE:79:42:FA:AA:A7:F8:1D:5F:B1:EB:36:BF:36:EE:24:98:71:31:97:4A"}}},"request":{"raw":"POST /youtubei/v1/log_event?alt=json HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Goog-Request-Time: 1777797832926\r\nContent-Type: application/json\r\nX-Goog-Visitor-Id: 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%3D%3D\r\nX-YouTube-Client-Name: 56\r\nX-YouTube-Client-Version: 2.20260501.01.00\r\nX-YouTube-Device: cbr=Firefox\u0026cbrver=134.0\u0026ceng=Gecko\u0026cengver=134.0\u0026cos=Windows\u0026cosver=10.0\u0026cplatform=DESKTOP\r\nX-YouTube-Page-CL: 908576431\r\nX-YouTube-Page-Label: youtube.embeds.web_20260501_01_RC00\r\nX-YouTube-Utc-Offset: 0\r\nX-YouTube-Time-Zone: UTC\r\nX-YouTube-Ad-Signals: dt=1777797829483\u0026flash=0\u0026frm=2\u0026u_tz\u0026u_his=3\u0026u_h=1024\u0026u_w=1280\u0026u_ah=1024\u0026u_aw=1280\u0026u_cd=24\u0026bc=31\u0026bih=-12245933\u0026biw=-12245933\u0026brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C720%2C405\u0026vis=1\u0026wgl=true\u0026ca_type=image\r\nContent-Length: 12309\r\nOrigin: https://www.youtube.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":12309,"data":"{\"context\":{\"client\":{\"hl\":\"en\",\"gl\":\"NO\",\"clientName\":56,\"clientVersion\":\"2.20260501.01.00\",\"configInfo\":{\"appInstallData\":\"CMSV3M8GEIv3zxwQlIPQHBCu1s8cEJWi0RwQvYqwBRCs9dAcENzPgBMQuOTOHBCU_rAFEM-o0RwQ9quwBRCw_tAcEL2ZsAUQlLbQHBCHrM4cEJ7QsAUQibDOHBDnldEcELWl0RwQxsbPHBDevM4cEJ_PgBMQkrHRHBD8ss4cEPG00BwQmY2xBRD79tAcEMGP0BwQwonRHBDI988cELnggBMQzPnQHBC8pNAcEIHNzhwQw96AExCLj9EcEL6E0RwQs5HRHBC9tq4FEMzfrgUQ2vfOHBDLo9EcEMOM0BwQjrWAExDOjtEcEM3l0BwQ86HRHCpYQ0FNU1BSVS0tWnEtRE1lVUVwVUNuQTc1RlhKRFdkMERpd29zMTZUd0N6S2dyQVFEemY4Rnk3Y0cteWEyNUFhZmlRMkVaZTZiQnBlVUJzeENtcVVHSFFjPTAA\"},\"userAgent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"browserName\":\"Firefox\",\"browserVersion\":\"134.0\",\"osName\":\"Windows\",\"osVersion\":\"10.0\",\"platform\":\"DESKTOP\"},\"thirdParty\":{\"embedUrl\":\"https://to-get-free-roblox.pages.dev/\"}},\"events\":[{\"eventTimeMs\":1777797829300,\"latencyActionTicked\":{\"tickName\":\"mm_is\",\"clientActionNonce\":\"tAzcZgVMPq_8IEIJ\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777797829305,\"latencyActionTicked\":{\"tickName\":\"mm_ie\",\"clientActionNonce\":\"tAzcZgVMPq_8IEIJ\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777797829311,\"latencyActionTicked\":{\"tickName\":\"ep_init_cus\",\"clientActionNonce\":\"tAzcZgVMPq_8IEIJ\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777797829312,\"latencyActionTicked\":{\"tickName\":\"ep_init_eps\",\"clientActionNonce\":\"tAzcZgVMPq_8IEIJ\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777797829313,\"latencyActionTicked\":{\"tickName\":\"ep_init_epe\",\"clientActionNonce\":\"tAzcZgVMPq_8IEIJ\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777797829313,\"latencyActionTicked\":{\"tickName\":\"ep_init_cue\",\"clientActionNonce\":\"tAzcZgVMPq_8IEIJ\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777797829528,\"latencyActionTicked\":{\"tickName\":\"pe\",\"clientActionNonce\":\"tAzcZgVMPq_8IEIJ\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777797829529,\"latencyActionTicked\":{\"tickName\":\"ep_init_wes\",\"clientActionNonce\":\"tAzcZgVMPq_8IEIJ\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777797828988,\"latencyActionTicked\":{\"tickName\":\"srt\",\"clientActionNonce\":\"tAzcZgVMPq_8IEIJ\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777797828893,\"latencyActionBaselined\":{\"clientActionNonce\":\"tAzcZgVMPq_8IEIJ\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777797828900,\"latencyActionTicked\":{\"tickName\":\"nreqs\",\"clientActionNonce\":\"tAzcZgVMPq_8IEIJ\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777797828988,\"latencyActionTicked\":{\"tickName\":\"nress\",\"clientActionNonce\":\"tAzcZgVMPq_8IEIJ\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777797829002,\"latencyActionTicked\":{\"tickName\":\"nrese\",\"clientActionNonce\":\"tAzcZgVMPq_8IEIJ\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777797829069,\"latencyActionTicked\":{\"tickName\":\"wffs\",\"clientActionNonce\":\"tAzcZgVMPq_8IEIJ\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777797829295,\"latencyActionTicked\":{\"tickName\":\"wffe\",\"clientActionNonce\":\"tAzcZgVMPq_8IEIJ\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777797829054,\"latencyActionTicked\":{\"tickName\":\"rsf_pj\",\"clientActionNonce\":\"tAzcZgVMPq_8IEIJ\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777797829162,\"latencyActionTicked\":{\"tickName\":\"rse_pj\",\"clientActionNonce\":\"tAzcZgVMPq_8IEIJ\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777797829053,\"latencyActionTicked\":{\"tickName\":\"rsf_pc\",\"clientActionNonce\":\"tAzcZgVMPq_8IEIJ\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777797829120,\"latencyActionTicked\":{\"tickName\":\"rse_pc\",\"clientActionNonce\":\"tAzcZgVMPq_8IEIJ\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777797829054,\"latencyActionTicked\":{\"tickName\":\"rsf_ecj\",\"clientActionNonce\":\"tAzcZgVMPq_8IEIJ\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777797829143,\"latencyActionTicked\":{\"tickName\":\"rse_ecj\",\"clientActionNonce\":\"tAzcZgVMPq_8IEIJ\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777797829053,\"latencyActionTicked\":{\"tickName\":\"rsf_ecc\",\"clientActionNonce\":\"tAzcZgVMPq_8IEIJ\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777797829118,\"latencyActionTicked\":{\"tickName\":\"rse_ecc\",\"clientActionNonce\":\"tAzcZgVMPq_8IEIJ\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777797829537,\"latencyActionInfo\":{\"isNavigation\":true,\"actionType\":\"LATENCY_ACTION_VIDEO_PREVIEW\",\"httpProtocol\":\"h2\",\"transportProtocol\":\"tcp\",\"isVisible\":true,\"loadType\":\"cold\",\"clientActionNonce\":\"tAzcZgVMPq_8IEIJ\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777797829280,\"latencyActionTicked\":{\"tickName\":\"rses_dpj\",\"clientActionNonce\":\"tAzcZgVMPq_8IEIJ\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777797829540,\"latencyActionTicked\":{\"tickName\":\"ep_init_wee\",\"clientActionNonce\":\"tAzcZgVMPq_8IEIJ\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777797829545,\"latencyActionInfo\":{\"serverTimeMs\":56,\"clientActionNonce\":\"tAzcZgVMPq_8IEIJ\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777797829597,\"screenCreated\":{\"csn\":\"b0TVOCGKVSaFXwGy\",\"pageVe\":{\"veType\":16623,\"youtubeData\":{\"servletData\":{\"serializedServletEventId\":\"xAr3afuoOOqDjNgP79zkiQc\"}}}},\"context\":{\"lastActivityMs\":\"25\"}},{\"eventTimeMs\":1777797829597,\"latencyActionInfo\":{\"clientScreenNonce\":\"b0TVOCGKVSaFXwGy\",\"clientActionNonce\":\"tAzcZgVMPq_8IEIJ\"},\"context\":{\"lastActivityMs\":\"25\"}},{\"eventTimeMs\":1777797829598,\"screenCreated\":{\"csn\":\"B85mh5J_VSY7-CYm\",\"pageVe\":{\"veType\":32594},\"implicitGesture\":{\"parentCsn\":\"b0TVOCGKVSaFXwGy\",\"gesturedVe\":{\"veType\":16623},\"gestureType\":\"INTERACTION_LOGGING_GESTURE_TYPE_AUTOMATED\"}},\"context\":{\"lastActivityMs\":\"25\"}},{\"eventTimeMs\":1777797829598,\"visualElementHidden\":{\"csn\":\"b0TVOCGKVSaFXwGy\",\"ve\":{\"veType\":16623},\"eventType\":16},\"context\":{\"lastActivityMs\":\"26\"}},{\"eventTimeMs\":1777797829598,\"latencyActionInfo\":{\"clientScreenNonce\":\"B85mh5J_VSY7-CYm\",\"clientActionNonce\":\"tAzcZgVMPq_8IEIJ\"},\"context\":{\"lastActivityMs\":\"26\"}},{\"eventTimeMs\":1777797829598,\"visualElementAttached\":{\"csn\":\"B85mh5J_VSY7-CYm\",\"parentVe\":{\"veType\":32594},\"childVes\":[{\"trackingParams\":\"CAAQru4BIhMI_q_OgN2clAMVpf9PCB3IzyXxygEEeH1ajw==\"}]},\"context\":{\"lastActivityMs\":\"26\"}},{\"eventTimeMs\":1777797829601,\"latencyActionTicked\":{\"tickName\":\"qoes\",\"clientActionNonce\":\"tAzcZgVMPq_8IEIJ\"},\"context\":{\"lastActivityMs\":\"29\"}},{\"eventTimeMs\":1777797829603,\"latencyActionTicked\":{\"tickName\":\"fs\",\"clientActionNonce\":\"tAzcZgVMPq_8IEIJ\"},\"context\":{\"lastActivityMs\":\"30\"}},{\"eventTimeMs\":1777797829634,\"latencyActionInfo\":{\"clientPlaybackNonce\":\"1imKLjGouHSmlgpR\",\"clientActionNonce\":\"tAzcZgVMPq_8IEIJ\"},\"context\":{\"lastActivityMs\":\"63\"}},{\"eventTimeMs\":1777797829638,\"latencyActionTicked\":{\"tickName\":\"ep_init_pr\",\"clientActionNonce\":\"tAzcZgVMPq_8IEIJ\"},\"context\":{\"lastActivityMs\":\"66\"}},{\"eventTimeMs\":1777797829731,\"latencyActionTicked\":{\"tickName\":\"ep_init_ijs\",\"clientActionNonce\":\"tAzcZgVMPq_8IEIJ\"},\"context\":{\"lastActivityMs\":\"159\"}},{\"eventTimeMs\":1777797829732,\"latencyActionTicked\":{\"tickName\":\"ep_init_ije\",\"clientActionNonce\":\"tAzcZgVMPq_8IEIJ\"},\"context\":{\"lastActivityMs\":\"160\"}},{\"eventTimeMs\":1777797829734,\"latencyActionTicked\":{\"tickName\":\"ep_init_rs\",\"clientActionNonce\":\"tAzcZgVMPq_8IEIJ\"},\"context\":{\"lastActivityMs\":\"162\"}},{\"eventTimeMs\":1777797829742,\"latencyActionTicked\":{\"tickName\":\"ep_init_re\",\"clientActionNonce\":\"tAzcZgVMPq_8IEIJ\"},\"context\":{\"lastActivityMs\":\"170\"}},{\"eventTimeMs\":1777797829773,\"visualElementAttached\":{\"csn\":\"B85mh5J_VSY7-CYm\",\"parentVe\":{\"veType\":32594},\"childVes\":[{\"veType\":28572,\"veCounter\":2,\"elementIndex\":0}]},\"context\":{\"lastActivityMs\":\"201\"}},{\"eventTimeMs\":1777797829774,\"visualElementShown\":{\"csn\":\"B85mh5J_VSY7-CYm\",\"ve\":{\"veType\":28572,\"veCounter\":2,\"elementIndex\":0},\"eventType\":1},\"context\":{\"lastActivityMs\":\"201\"}},{\"eventTimeMs\":1777797829836,\"latencyActionTicked\":{\"tickName\":\"ftr\",\"clientActionNonce\":\"tAzcZgVMPq_8IEIJ\"},\"context\":{\"lastActivityMs\":\"264\"}},{\"eventTimeMs\":1777797830029,\"visualElementAttached\":{\"csn\":\"B85mh5J_VSY7-CYm\",\"parentVe\":{\"veType\":32594},\"childVes\":[{\"veType\":23851,\"veCounter\":3,\"elementIndex\":0}]},\"context\":{\"lastActivityMs\":\"456\"}},{\"eventTimeMs\":1777797830029,\"visualElementShown\":{\"csn\":\"B85mh5J_VSY7-CYm\",\"ve\":{\"veType\":23851,\"veCounter\":3,\"elementIndex\":0},\"eventType\":1},\"context\":{\"lastActivityMs\":\"457\"}},{\"eventTimeMs\":1777797830029,\"visualElementAttached\":{\"csn\":\"B85mh5J_VSY7-CYm\",\"parentVe\":{\"veType\":32594},\"childVes\":[{\"veType\":36925,\"veCounter\":4,\"elementIndex\":0}]},\"context\":{\"lastActivityMs\":\"457\"}},{\"eventTimeMs\":1777797830029,\"visualElementShown\":{\"csn\":\"B85mh5J_VSY7-CYm\",\"ve\":{\"veType\":36925,\"veCounter\":4,\"elementIndex\":0},\"eventType\":1},\"context\":{\"lastActivityMs\":\"457\"}},{\"eventTimeMs\":1777797830030,\"foregroundHeartbeatScreenAssociated\":{\"clientDocumentNonce\":\"QjgtLorr3HeKzVvz\",\"clientScreenNonce\":\"b0TVOCGKVSaFXwGy\"},\"context\":{\"lastActivityMs\":\"458\"}},{\"eventTimeMs\":1777797830030,\"foregroundHeartbeatScreenAssociated\":{\"clientDocumentNonce\":\"QjgtLorr3HeKzVvz\",\"clientScreenNonce\":\"B85mh5J_VSY7-CYm\"},\"context\":{\"lastActivityMs\":\"458\"}},{\"eventTimeMs\":1777797830030,\"latencyActionTicked\":{\"tickName\":\"ol\",\"clientActionNonce\":\"tAzcZgVMPq_8IEIJ\"},\"context\":{\"lastActivityMs\":\"458\"}},{\"eventTimeMs\":1777797830030,\"latencyActionTicked\":{\"tickName\":\"ol\",\"clientActionNonce\":\"tAzcZgVMPq_8IEIJ\"},\"context\":{\"lastActivityMs\":\"458\"}},{\"eventTimeMs\":1777797830030,\"latencyActionTicked\":{\"tickName\":\"ftl\",\"clientActionNonce\":\"tAzcZgVMPq_8IEIJ\"},\"context\":{\"lastActivityMs\":\"458\"}},{\"eventTimeMs\":1777797830041,\"latencyActionTicked\":{\"tickName\":\"pot_ist\",\"clientActionNonce\":\"tAzcZgVMPq_8IEIJ\"},\"context\":{\"lastActivityMs\":\"469\"}},{\"eventTimeMs\":1777797830630,\"streamzIncremented\":{\"serializedIncrementBatch\":\"ChUvY2xpZW50X3N0cmVhbXovYmcvZWMSEAoOCghib3RndWFyZBICNTMaAmVuGgJtayIRCgMKAW8KBgoEYUdJZhICCAEiEQoDCgF0CgYKBGFHSWYSAggBIhEKAwoBaAoGCgRhR0lmEgIIFw==\"},\"context\":{\"lastActivityMs\":\"1058\"}},{\"eventTimeMs\":1777797830636,\"streamzIncremented\":{\"serializedIncrementBatch\":\"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\"},\"context\":{\"lastActivityMs\":\"1064\"}},{\"eventTimeMs\":1777797830924,\"latencyActionTicked\":{\"tickName\":\"pot_if\",\"clientActionNonce\":\"tAzcZgVMPq_8IEIJ\"},\"context\":{\"lastActivityMs\":\"1352\"}},{\"eventTimeMs\":1777797830924,\"latencyActionTicked\":{\"tickName\":\"pot_cms\",\"clientActionNonce\":\"tAzcZgVMPq_8IEIJ\"},\"context\":{\"lastActivityMs\":\"1352\"}},{\"eventTimeMs\":1777797830927,\"latencyActionTicked\":{\"tickName\":\"pot_cmf\",\"clientActionNonce\":\"tAzcZgVMPq_8IEIJ\"},\"context\":{\"lastActivityMs\":\"1354\"}},{\"eventTimeMs\":1777797831638,\"streamzIncremented\":{\"serializedIncrementBatch\":\"ChYvY2xpZW50X3N0cmVhbXovYmcvZnJzEhAKDgoIYm90Z3VhcmQSAjUzGgJtayITCgYKBGFHSWYSCREAAAAAAHCaQA==\"},\"context\":{\"lastActivityMs\":\"2065\"}},{\"eventTimeMs\":1777797831639,\"streamzIncremented\":{\"serializedIncrementBatch\":\"ChUvY2xpZW50X3N0cmVhbXovYmcvZWMSEAoOCghib3RndWFyZBICNTMaAmVuGgJtayIRCgMKAW4KBgoEYUdJZhICCAEiEQoDCgFtCgYKBGFHSWYSAggB\"},\"context\":{\"lastActivityMs\":\"2066\"}},{\"eventTimeMs\":1777797831639,\"streamzIncremented\":{\"serializedIncrementBatch\":\"ChUvY2xpZW50X3N0cmVhbXovYmcvZWwSEAoOCghib3RndWFyZBICNTMaAmVuGgJtayIYCgMKAW4KBgoEYUdJZhIJEQAAAAAAADxAIhgKAwoBaQoGCgRhR0lmEgkRAAAAAAAA8D8iGAoDCgFvCgYKBGFHSWYSCREAAAAAAJCLQCIYCgMKAWMKBgoEYUdJZhIJEQAAAAAAAAAAIhgKAwoBQwoGCgRhR0lmEgkRAAAAAAAA8D8iGAoDCgF4CgYKBGFHSWYSCREAAAAAAAAAACIYCgMKAW0KBgoEYUdJZhIJEQAAAAAAAPA/\"},\"context\":{\"lastActivityMs\":\"2067\"}}],\"serializedClientEventId\":{\"serializedEventId\":\"xAr3afuoOOqDjNgP79zkiQc\",\"clientCounter\":\"31134\"}}"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json; charset=UTF-8\r\nvary: Origin, X-Origin, Referer\r\ncontent-encoding: br\r\ndate: Sun, 03 May 2026 08:43:52 GMT\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 31\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"5e1fa6fd9abd549a576f3f24b1d3c8d4","sha1":"d5335d7f7d33be6a0b663f03b2df4df2521c4a87","sha256":"d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336","sha512":"96e6938256b8e5924210f8e8e54a85d783fa2c01d5fbe5d2a8df7655fed9ef8be73c7cd8bf042c3c84302134b7418711397eece32f081eb7e824a519cc06b4e3","ssdeep":"","tlshash":"1c800038a8200b22232000ea202888322ac8c8203200ca28830200280cc0a0000a2282","first_seen":"2023-04-05T04:40:08Z","last_seen":"2026-08-15T21:45:01.448706Z","times_seen":285149,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.nightdestruct.com/sb/ssp/vpn/classic-push/small/img/close.png","fqdn":"cdn.nightdestruct.com","domain":"nightdestruct.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://to-get-free-roblox.pages.dev/","date":"2026-05-03T08:43:53.232Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nightdestruct.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 16:21:26 GMT","end":"Sun, 28 Jun 2026 16:21:25 GMT"},"fingerprint":{"sha1":"77:BA:39:E3:87:1C:89:74:C5:36:C2:0F:E9:4C:0E:35:C4:92:A6:BA","sha256":"5F:17:E6:F7:42:E9:5F:B9:9E:03:47:36:9F:79:03:3B:E2:C2:66:ED:E9:3D:14:AB:29:B0:52:4A:62:57:C4:91"}}},"request":{"raw":"GET /sb/ssp/vpn/classic-push/small/img/close.png HTTP/1.1\r\nHost: cdn.nightdestruct.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 03 May 2026 08:43:53 GMT\r\ncontent-type: image/png\r\ncontent-length: 591\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:19:42 GMT\r\npriority: u=4,i=?0\r\netag: \"65aa84fe-24f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\naccept-ranges: bytes\r\nage: 2902763\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bNV%2FmGmeIaER6gyw8ialKF1H8rPYEpSrtlYeecWx34Ht9avZw%2BX1Cgm3kckb7U5sshi%2BcNSqOwMVlri86RQ75kEZnhEjWLKUFOw1VAKI%2BKibhdxw2texRwczQELMVefKMpkY8Y4ap5U%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f5dfb09baa4568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":591,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 12 x 12, 8-bit/color RGBA, non-interlaced","md5":"9fd5bcb6103d86e317bd1eb019bcbe71","sha1":"6b5a52ea669dcb74946f2bed4bdd7ec985026113","sha256":"0ddd3be104ac7945fb062096df62034a6a24ecc76ba92493c35c62c3c25982ae","sha512":"e244a8842c009fa83e8d9d1088ec5b76ca2a42660568b7886e01724977b9ebd4e43690e0c651e25287c64dcc4826391b34cae6a106e2148139450dd05fc5a562","ssdeep":"","tlshash":"b0f0414e7c5903a1874caf3b18dd00119c27898077c82e0db689eed20e008e215471da","first_seen":"2023-04-11T11:09:41Z","last_seen":"2026-08-15T10:14:25.165507Z","times_seen":6410,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/pixel/sbs?c=1","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.127.243","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://to-get-free-roblox.pages.dev/","date":"2026-05-03T08:43:54.131Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 22:18:41 GMT","end":"Thu, 23 Jul 2026 22:18:40 GMT"},"fingerprint":{"sha1":"85:96:BC:41:7A:67:17:33:3C:0F:33:72:BB:3D:4F:F3:56:97:46:09","sha256":"DD:49:0E:2F:27:46:7A:6C:59:AD:4C:03:B8:50:05:CE:D0:BE:26:63:2C:98:45:1E:56:85:0C:E8:27:00:7A:19"}}},"request":{"raw":"GET /pixel/sbs?c=1 HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://to-get-free-roblox.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=874004e8-16e8-42a6-bfc4-cefd562675a5:2:1; pdhtkv=true; uncs=2; pdhtkv29=true; uncs29=2; u_pl26582471=1; u_pl28216845=1; slecaf25da8381e0bd0494ba4018c76898a2=[4323731]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:43:54 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: Device-Stock-UA, X-UCBrowser-Device-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, X-Device-User-Agent, X-OperaMini-Phone-UA, User-Agent, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-PlatformUser-Agent, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Model\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T22:04:31.086022Z","times_seen":17907918,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":57,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"to-get-free-roblox.pages.dev/assets/css/stylesheet.a482bf00fa5c046040ef7973ad5fdf5657890cacb596c93f1382f664ca542074.css","fqdn":"to-get-free-roblox.pages.dev","domain":"to-get-free-roblox.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://to-get-free-roblox.pages.dev/","date":"2026-05-03T08:43:48.408Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"to-get-free-roblox.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Apr 2026 20:17:24 GMT","end":"Thu, 23 Jul 2026 21:17:13 GMT"},"fingerprint":{"sha1":"69:8D:7E:C0:21:55:45:43:9F:6C:83:71:AD:E8:14:B9:34:7A:CB:6B","sha256":"C9:FF:F5:85:6F:54:AF:5A:CF:97:12:2C:77:BE:D9:52:7B:F1:CA:7F:A2:B8:08:99:EB:99:4D:13:BB:91:44:6C"}}},"request":{"raw":"GET /assets/css/stylesheet.a482bf00fa5c046040ef7973ad5fdf5657890cacb596c93f1382f664ca542074.css HTTP/1.1\r\nHost: to-get-free-roblox.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://to-get-free-roblox.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 03 May 2026 08:43:48 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FKR7gjVo%2Bh7aymPidLTTs767%2FLzig1iQGzAr2jj0gBi1JSnvQLt5GFnw2JSrNxHBZ%2Bd444obK65fJtcNsBI%2BM%2BnfZio%2BVjz4CONkb1JugZDjOJ7R5HxFPN%2FURg%2FrcUTofjpFd48gR3%2FlRd0%2BBIM1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"53e05fd175c1632d3f6826cdf1c8006d\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f5dfaeb892a56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17668,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (17469), with CRLF line terminators","md5":"189fdafdfba1b07922505146944ac218","sha1":"e593713c0ec16032efdad79024e07b769cf999d7","sha256":"a482bf00fa5c046040ef7973ad5fdf5657890cacb596c93f1382f664ca542074","sha512":"78e5dfa85fe07a10600f8e1f0060db0b5aff6482bcd25850bdae13ff5579b248d15119e5fa200b836f5f0abc2fe0b9cb5bff43ee26bca7e40a9d96494bdf6a82","ssdeep":"192:pgLxsLb4X3I1fG2pmOTq7zSeyf5rTZFsGR57Vpvj82p7Y97F+QNBARfWiVWo6yyT:KyLb4eEbzSDBP9R5lKmRD723FRdZ","tlshash":"7e82757e9220263cfb33cc026689755d3614f963da5247f9fa99a3a885c2ff71171a0c","first_seen":"2025-10-29T04:02:15.901982Z","last_seen":"2026-08-11T01:12:56.719787Z","times_seen":410,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"to-get-free-roblox.pages.dev/favicon-96x96.png","fqdn":"to-get-free-roblox.pages.dev","domain":"to-get-free-roblox.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://to-get-free-roblox.pages.dev/","date":"2026-05-03T08:43:48.691Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"to-get-free-roblox.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Apr 2026 20:17:24 GMT","end":"Thu, 23 Jul 2026 21:17:13 GMT"},"fingerprint":{"sha1":"69:8D:7E:C0:21:55:45:43:9F:6C:83:71:AD:E8:14:B9:34:7A:CB:6B","sha256":"C9:FF:F5:85:6F:54:AF:5A:CF:97:12:2C:77:BE:D9:52:7B:F1:CA:7F:A2:B8:08:99:EB:99:4D:13:BB:91:44:6C"}}},"request":{"raw":"GET /favicon-96x96.png HTTP/1.1\r\nHost: to-get-free-roblox.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://to-get-free-roblox.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 03 May 2026 08:43:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 3415\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"207249c5b01c104202965011f95037dc\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BaXRXWWqHhemUDoBif%2FST7SP%2Bs6GMf3Nc%2BaCClQSUNwKuIlGvoY6BWj7%2F8MIEIAa12aN6QWz7vE4TXoIwvbBdhCMU%2FC2vyeCQs1c83ZYWq9rqD%2BcLjqJhzIhLL8e17egPO23YvTDOi%2B%2BuTIKLS%2F3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\ncf-ray: 9f5dfaed5afe56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3415,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"18432ea15c0c7b7ef50ee1b42b9b29e3","sha1":"2b656e7a76d7a8d11ff020bd8bac15c6780c39ec","sha256":"27a2d2727b2c93679c945f8107ce5bd270d8dfc426c7abca1e975e46ac0d78e9","sha512":"0d9dfdd5af753545acac4819105170d4358fa8a619ee99f9754eaec45b48cbc8875409744d35d10676843b635bf1b065c0129e1ffdac68d921a39bd7e4632f87","ssdeep":"","tlshash":"0d615be0818b9c3abc969201820ac603fb35a0ce0e5a1a7e54f717c87f133bbb52c157","first_seen":"2025-10-29T04:02:15.906591Z","last_seen":"2026-08-11T01:12:56.730434Z","times_seen":409,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/youtube/img/icons/mweb/youtube_fill/logo/v2/67px.svg","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","date":"2026-05-03T08:43:50.036Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 05:19:27 GMT","end":"Wed, 01 Jul 2026 05:19:26 GMT"},"fingerprint":{"sha1":"BF:D8:14:32:18:86:B9:95:54:75:8D:F9:5F:29:DE:4E:F8:F8:F7:13","sha256":"0E:FA:80:0B:F4:13:81:81:4D:CF:50:35:5A:DD:DB:FA:00:0B:34:B2:2D:5D:28:08:E4:45:1F:2C:EF:D2:21:C2"}}},"request":{"raw":"GET /youtube/img/icons/mweb/youtube_fill/logo/v2/67px.svg HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.youtube.com/\r\nOrigin: https://www.youtube.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\naccess-control-allow-origin: https://www.youtube.com\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ncontent-length: 272\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 02 May 2026 20:59:53 GMT\r\nexpires: Sun, 02 May 2027 20:59:53 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 06 Sep 2023 03:18:00 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding, Origin\r\nage: 42237\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":478,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1e78ea4caa31c35bac97a41e5930ffe8","sha1":"dbf99131b9b5087e664b9fdc7097c97655474517","sha256":"6fa88a20839537ae66da730e5bd183035265176d972bc8df075b89da0c6186ea","sha512":"cf798ef67c90f90f23635beb202095a2c76052d491c224aa14535bb9b16f28fa9a850b8db887f158afd01d634aecb9e2b05a27efdfd225d3583e6297bdd78b43","ssdeep":"","tlshash":"2ef09e6d577829d8930f87c0be5974127d9f23e85194b3b541d4f9326138ee2d141cd9","first_seen":"2025-05-26T15:52:21.952281Z","last_seen":"2026-08-15T21:45:01.461827Z","times_seen":49682,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":40,"dns":2,"connect":7,"send":0,"wait":9,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://to-get-free-roblox.pages.dev/","date":"2026-05-03T08:43:48.836Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 05:17:21 GMT","end":"Wed, 01 Jul 2026 05:17:20 GMT"},"fingerprint":{"sha1":"2F:4C:57:A4:4A:60:44:C4:08:82:D4:9D:9C:A9:1A:8F:89:5F:E8:F0","sha256":"BE:DC:F0:E9:A5:84:8F:67:24:9D:57:FE:79:42:FA:AA:A7:F8:1D:5F:B1:EB:36:BF:36:EE:24:98:71:31:97:4A"}}},"request":{"raw":"GET /embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0 HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://to-get-free-roblox.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T22:04:31.086022Z","times_seen":17907918,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/_/ytembeds/_/js/k=ytembeds.base.en_US.jCqEhtrZtB0.2021.O/am=AAAABA/d=1/br=1/rs=AGKMywEhW0-Lnggvkj9sdEAhZwS6T0ejZA/m=root,base","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","date":"2026-05-03T08:43:49.093Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 05:17:21 GMT","end":"Wed, 01 Jul 2026 05:17:20 GMT"},"fingerprint":{"sha1":"2F:4C:57:A4:4A:60:44:C4:08:82:D4:9D:9C:A9:1A:8F:89:5F:E8:F0","sha256":"BE:DC:F0:E9:A5:84:8F:67:24:9D:57:FE:79:42:FA:AA:A7:F8:1D:5F:B1:EB:36:BF:36:EE:24:98:71:31:97:4A"}}},"request":{"raw":"GET /s/_/ytembeds/_/js/k=ytembeds.base.en_US.jCqEhtrZtB0.2021.O/am=AAAABA/d=1/br=1/rs=AGKMywEhW0-Lnggvkj9sdEAhZwS6T0ejZA/m=root,base HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/youtube-main-app-web-scs-key\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"youtube-main-app-web-scs-key\"\r\nreport-to: {\"group\":\"youtube-main-app-web-scs-key\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube-main-app-web-scs-key\"}]}\r\ncontent-length: 143288\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 02 May 2026 21:13:09 GMT\r\nexpires: Sun, 02 May 2027 21:13:09 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Fri, 01 May 2026 05:08:46 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 41440\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":423043,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (534)","md5":"5dbc7231ae8cfd60a041e2be1c239fdb","sha1":"dafe829d4035f8424235f07bdce3105c844bc83f","sha256":"92989f6a997d03e79a9a7ac8a8e8f8b2a22a2ab2187f476d9aad5887f63567c9","sha512":"9b9c54f26c7290e0c999b3e5a4183aa4a277adcbecaf6623eecda8caac140cf8a532f85623b86e0d81a8f47cbc5d2b31837e81bff46a96da14ce23840f29a9a4","ssdeep":"6144:pAUmeSZuDdIdrJaeqJZzm8KZ1uW698+3YXSB9sSnnXWCWI/5:p5arJaeECwvXWCWI/5","tlshash":"61944cd977a2707392a2f5a5902f0103b17a6896f40c8c7cb788ddd16eb494942fbf38","first_seen":"2026-05-01T13:17:55.93309Z","last_seen":"2026-05-04T17:22:13.682967Z","times_seen":2601,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flushpersist.com/pxf.gif?uuid=c3445600-5d69-41ee-a032-d80eedc757d5\u0026eb=bff3d6bf6d16c0bb5e58232c1a99ef63\u0026te=fe015aeda515c30449c87b1701cc307f\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=c207ec84c2456af201cc563cadc36c46\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=8","fqdn":"flushpersist.com","domain":"flushpersist.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://to-get-free-roblox.pages.dev/","date":"2026-05-03T08:43:50.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"flushpersist.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 22:15:44 GMT","end":"Sun, 26 Jul 2026 22:15:43 GMT"},"fingerprint":{"sha1":"A4:CC:8E:38:1E:86:20:D5:CF:AC:A0:E9:32:E9:DF:AA:71:7A:98:E5","sha256":"B2:02:B9:E5:21:88:DB:AF:AE:5F:6C:FB:16:F4:3A:D8:44:9D:C2:FF:BE:D7:7B:A1:08:43:78:33:05:96:96:7F"}}},"request":{"raw":"GET /pxf.gif?uuid=c3445600-5d69-41ee-a032-d80eedc757d5\u0026eb=bff3d6bf6d16c0bb5e58232c1a99ef63\u0026te=fe015aeda515c30449c87b1701cc307f\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=c207ec84c2456af201cc563cadc36c46\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=8 HTTP/1.1\r\nHost: flushpersist.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://to-get-free-roblox.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:43:50 GMT\r\nContent-Type: image/gif\r\nContent-Length: 1\r\nConnection: keep-alive\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\nx-envoy-upstream-service-time: 1\r\nHost: flushpersist.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 82e0030557e88148ca5762feba4353f3\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T22:04:31.086022Z","times_seen":17907918,"resource_available":true,"data":null}},"time_used":746,"timings":{"blocked":326,"dns":3,"connect":93,"send":0,"wait":96,"receive":0,"ssl":225},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT","fqdn":"jnn-pa.googleapis.com","domain":"jnn-pa.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.143.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.youtube.com/embed/jtWChGOUols?autoplay=0\u0026controls=1\u0026end=0\u0026loop=0\u0026mute=0\u0026start=0","date":"2026-05-03T08:43:50.881Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 05:19:27 GMT","end":"Wed, 01 Jul 2026 05:19:26 GMT"},"fingerprint":{"sha1":"E9:E5:B7:DA:0A:AE:59:02:EA:10:61:71:9B:52:3A:08:42:A0:67:A5","sha256":"F6:1D:CE:31:AA:9C:7B:58:1D:1D:14:96:99:B6:58:CC:FB:AE:D5:3C:F8:FB:40:E3:45:2D:4A:54:11:B4:E2:F3"}}},"request":{"raw":"POST /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1\r\nHost: jnn-pa.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw\r\nContent-Type: application/json+protobuf\r\nContent-Length: 1719\r\nOrigin: https://www.youtube.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1719,"data":"[\"O43z0dpjhgX20SCx4KAo\",\"$WcY5xqJRAAbWHTrR9h3ekD8Q8A27lDKnAEABEArZ1AzO6fh3nOrQFx3f0kG9jDG4viu8tPZj3ttqDbvRGeHLhxGojdfWP4ZwCjmngTo-274Y-oV0Hal1m1ikngAAAZbOAAAAGfQBB-IAUmzWepEgm6TGPZ9uCQ3xDNQyZM3S7cFboZAvBWJcBw7eTGNWKGKJlYSirw40PLGg0f7CPw3VYo-_QbmyJmRnP9p9a7BFq-KFHCOLW5MbidOkRHMFBDXHforC98JXCSIxdkP-O4sXrOC4EuV0vjp9B7KaaH2uUHq54ctN5Ne3BzG9lqIOqtKX9u4G3ijr4r9ZQYoM_qIepjBByZeB0DXv5lTaDBh_mB3aVOwdFy0fAOXLczOWsv_WmH4mXq-Oc8wtRJodDyI-aGFUAGTWTFpT8xzquUofqrYaUMQXjxn-zO7yQQOGWkDZxyIpPDH9gdZuQ7Uo5YeOwTwIx7nVSh-N7dGQalljPrn0lYIkyZfmkcXHxV3qbh9VNEPT-dBas67LRaFKJSwZfDAd9FsCphARR_ThYS59KlUKx1BPli61KaPMIZ5Q0FxoQEJQoZxTdoDfugEgBKL4wKJLxZFCmvwrTsM1NidyB4-L2HX7wDurx-BH7ETkfxBCJjodHaokohKAkkn10lpHDI-lnBoj3tOY5i7IZtmAMNvUBVU--CFuwK1IBJP02PYS4H0VSZq1Ek8V2w5YD6rN-w8U3rHlOEdXKgZgRkJt1iG5hAfjURGcg6761fLn7jyL-7bn-iGHb_6RGkDg2WHuIKBlFbPfFInq7pu6PGPe9hB0zAL4s60nk797_gu8jsEN0c6w1P4FjBQ5me2DBpLS1JdDitf4VEx23o-alBX79GOK7q0CbxmL1u1GzvLfyXNHTLK4xSDb2U7Ieryd07b8kfHYZtvr0nmqEdGSNMBZbEnMflmAc39ElX-2eczx_58EtiqeNRn8SvHIFUReucBihveDytPidnFjqmhKwLiFaINqho5WKxEaXfqf64OQOlVA-DZTzw9Hqd8I_KIwZuyNtmUFJmk1JVa7PR2kljgpYht_6SHR2Rhb5oUlbeSXTwkOVGHYMvzaCzvNPbBp5fm8ThPkQgAfDmgwnmKynMi4buFvO3N6P_wf2mEDSD9c8hp8_w6EvGggvgwmQ98avK4RzAKdFUs-vjnyde7Hcl5CAUSNPSv_chrYa2wqhLAXkmFR3iOoCNj8NXZCiBV97alqkjSLtnq70W52LzjBzuBYO4Fa8UG8U0ELJyK7iNX7iwpbWGPLnSs9YUnh8GDoqL1MXa1pWDswZDC-aj1y1qmHvLJn54oVcSGRnzvsIP1Gop7Lv-rkzq_0ZmsVPKoav4lQg7V7zR8QJSyuQYYwjhSLv1sodzov-jeplOHS5xOau1EFo1QklNGRj7e-5CL0OEfugxiqZtMNznXOPxx_05wHP7yP8FgWOlX67Qb5P1cQHJi3J4cL7ulCpgMFurKlfRBuyIJoYsgrGrxR95bvc6YwrlDBsXlyGeKunCn_H2Jabdapmq7_4KbyaStG4NgDhHYgASLHJgYuOfnu8GwQo59OFvSMOeEbg6QlofUBh37TYv6tdbrO9t4lUF4H6iQMpbmF9X4P3CiFZD6HV2REsh0OlZlDDWmvr2Qlgm2YeeT0tIb7p_u677Y9ie7pRE1G9T8PLcDk0vc\"]"}},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json+protobuf; charset=UTF-8\r\nvary: Origin, X-Origin, Referer\r\ncontent-encoding: gzip\r\ndate: Sun, 03 May 2026 08:43:50 GMT\r\nserver: ESF\r\ncontent-length: 118\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://www.youtube.com\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":98,"size_decoded":0,"mime_type":"application/json+protobuf; charset=UTF-8","magic":"JSON text data","md5":"d6e0e36674668ae8594a94dacab0486d","sha1":"a7081a83432268c71746d840965f3cc0d5c745bf","sha256":"9fffa60f2794765bcbcf7a036d680f91b03365a534716f7611cb9b30ed78bf6f","sha512":"bba3ce3c31e20ca62dade9c39b515b1af111dfe3d43f3dbef57b4ef3d2be67b01168347ab2bf07d0156cc3da5f62c460d6af045360e8f51c94ab7ab921c931b3","ssdeep":"","tlshash":"b7b01250cb0001a83431b500a7de00d2571850c9bc304494fcd58b8593e5c49e4c801b","first_seen":"2026-05-03T08:44:19.157557Z","last_seen":"2026-05-03T08:44:19.157557Z","times_seen":1,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
