{"report_id":"9b023935-a7d3-4b44-9fc4-22d6ab6e4408","version":0,"status":"done","tags":[],"date":"2026-08-17T09:04:14Z","url":{"schema":"https","addr":"codedetrichelattaquedeszombieroblox.blogspot.com/","fqdn":"codedetrichelattaquedeszombieroblox.blogspot.com","domain":"codedetrichelattaquedeszombieroblox.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"216.58.201.161","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"codedetrichelattaquedeszombieroblox.blogspot.com/","fqdn":"codedetrichelattaquedeszombieroblox.blogspot.com","domain":"codedetrichelattaquedeszombieroblox.blogspot.com","tld":"blogspot.com"},"title":"(1) New Message!","dom":{"size":7571,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (3490)","md5":"b2f80bd6d52a09d73810af7d78aed553","sha1":"fe05fdf923b4378761dc61641792910541bbc1be","sha256":"8331079a76ccecd7475a02fbcc1d03910c66f5ecca031bd77dfb01312b2b21ac","sha512":"1f5534ac42edf3f66d584e0765727169d60405fefc8e41e40b97c707a63be0a7c481223df886d3bc379b020e1b32c2a52eedfc33433754e5406c3c20a4e66d50","ssdeep":"192:WcgUCwF/7k34W9mCzc/7k34W9vSV3VCkCaO:Kw1w37zQw3Ol2","tlshash":"70f14df6ef4505a4085ab137362fb1e86db562cb25108994fdec9b5467313f08de0ec5","dom_hash":"domhashdc54fbe1ae197f2d0347c91caad45e38","first_seen":"2026-08-17T09:04:20.100314Z","last_seen":"2026-08-17T09:04:20.100314Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"codedetrichelattaquedeszombieroblox.blogspot.com/","fqdn":"codedetrichelattaquedeszombieroblox.blogspot.com","domain":"codedetrichelattaquedeszombieroblox.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"216.58.201.161","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-21T09:04:14Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":15}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"immigrationacre.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"immigrationacre.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"spendsdetachment.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"spendsdetachment.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"portalfluently.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"codedetrichelattaquedeszombieroblox.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-17","alert":"Phishing Block","trigger":"codedetrichelattaquedeszombieroblox.blogspot.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"codedetrichelattaquedeszombieroblox.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"workdeadlinededicate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"workdeadlinededicate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"cdn.show-creative1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"spendsdetachment.com","ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2024-09-03","domain_rank":0,"first_seen":"2025-10-05T07:40:04.892598Z","last_seen":"2026-08-15T18:36:23.583016Z","alert_count":20,"request_count":10,"received_data":13194,"sent_data":9085,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"codedetrichelattaquedeszombieroblox.blogspot.com","ip":{"addr":"142.250.178.65","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2000-07-31","domain_rank":0,"first_seen":"2026-06-21T06:50:59.293661Z","last_seen":"2026-07-21T21:17:08.688891Z","alert_count":9,"request_count":3,"received_data":184092,"sent_data":1588,"comment":"","tags":null,"fingerprints":[{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"Blogger","description":"Blogger is a blog-publishing service that allows multi-user blogs with time-stamped entries.","website":"https://www.blogger.com","common_platform_enumeration":"","icon":"Blogger.png","categories":["Blogs"]},{"name":"Python","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]}]},{"fqdn":"links.mtevor.com","ip":{"addr":"104.21.21.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-10-31","domain_rank":0,"first_seen":"2026-03-10T23:35:42.996415Z","last_seen":"2026-08-16T11:29:13.486569Z","alert_count":0,"request_count":1,"received_data":749,"sent_data":532,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"tagivi.com","ip":{"addr":"104.21.61.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-11-10","domain_rank":0,"first_seen":"2026-06-06T09:24:46.497737Z","last_seen":"2026-08-15T04:42:46.202463Z","alert_count":0,"request_count":3,"received_data":84865,"sent_data":2260,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.blogger.com","ip":{"addr":"142.250.178.105","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1999-06-22","domain_rank":9514,"first_seen":"2012-05-22T07:35:03Z","last_seen":"2026-08-10T21:52:14.050119Z","alert_count":0,"request_count":3,"received_data":185217,"sent_data":1653,"comment":"","tags":null,"fingerprints":null},{"fqdn":"workdeadlinededicate.com","ip":{"addr":"23.111.84.4","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"domain_registered":"2024-09-03","domain_rank":0,"first_seen":"2025-11-13T08:41:33.674059Z","last_seen":"2026-08-12T23:02:46.569595Z","alert_count":8,"request_count":4,"received_data":10058,"sent_data":6614,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"lh3.googleusercontent.com","ip":{"addr":"142.250.178.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-11-17","domain_rank":303,"first_seen":"2012-05-22T07:35:05Z","last_seen":"2026-08-10T09:53:04.143078Z","alert_count":0,"request_count":5,"received_data":78665,"sent_data":3469,"comment":"","tags":null,"fingerprints":null},{"fqdn":"i.ytimg.com","ip":{"addr":"142.250.178.118","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2007-12-11","domain_rank":436,"first_seen":"2012-10-03T19:11:04Z","last_seen":"2026-08-10T09:08:31.567192Z","alert_count":0,"request_count":6,"received_data":24994,"sent_data":3504,"comment":"","tags":null,"fingerprints":null},{"fqdn":"protrafficinspector.com","ip":{"addr":"18.196.51.86","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2025-06-18","domain_rank":614186,"first_seen":"2025-07-25T22:45:21.95813Z","last_seen":"2026-08-13T05:13:24.754032Z","alert_count":0,"request_count":1,"received_data":551,"sent_data":554,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"blogger.googleusercontent.com","ip":{"addr":"142.250.178.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-11-17","domain_rank":4332,"first_seen":"2012-05-25T17:41:01Z","last_seen":"2026-08-11T06:00:53.225842Z","alert_count":0,"request_count":3,"received_data":3514,"sent_data":2267,"comment":"","tags":null,"fingerprints":null},{"fqdn":"adxpy.pages.dev","ip":{"addr":"172.66.44.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-02","domain_rank":0,"first_seen":"2025-12-08T23:25:40.439519Z","last_seen":"2026-08-16T11:29:14.842575Z","alert_count":0,"request_count":4,"received_data":13686,"sent_data":2089,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"netdna.bootstrapcdn.com","ip":{"addr":"104.18.10.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-25","domain_rank":41692,"first_seen":"2012-09-07T15:11:00Z","last_seen":"2026-08-11T07:23:54.497265Z","alert_count":0,"request_count":1,"received_data":22979,"sent_data":559,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.show-sb.com","ip":{"addr":"172.67.170.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-08-20","domain_rank":187612,"first_seen":"2024-08-31T03:46:04Z","last_seen":"2026-08-14T10:39:49.043339Z","alert_count":2,"request_count":1,"received_data":2066,"sent_data":572,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.show-creative1.com","ip":{"addr":"104.21.15.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-08-20","domain_rank":392451,"first_seen":"2024-08-27T12:23:01Z","last_seen":"2026-08-15T10:14:18.511609Z","alert_count":1,"request_count":1,"received_data":2195,"sent_data":590,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.redgarto.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2026-06-09","domain_rank":0,"first_seen":"2026-06-10T14:51:12.515203Z","last_seen":"2026-08-12T23:28:21.464228Z","alert_count":0,"request_count":9,"received_data":156242,"sent_data":5030,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-16T22:20:46.906465Z","alert_count":0,"request_count":4,"received_data":175796,"sent_data":2348,"comment":"","tags":null,"fingerprints":null},{"fqdn":"portalfluently.com","ip":{"addr":"23.111.84.116","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"domain_registered":"2026-06-18","domain_rank":0,"first_seen":"2026-06-19T16:11:46.270184Z","last_seen":"2026-08-15T01:00:04.80442Z","alert_count":3,"request_count":3,"received_data":257757,"sent_data":1464,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"flushpersist.com","ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2025-07-01","domain_rank":23810,"first_seen":"2025-07-08T10:43:12.76905Z","last_seen":"2026-08-14T10:39:49.082423Z","alert_count":4,"request_count":2,"received_data":908,"sent_data":1806,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-16T22:23:57.509837Z","alert_count":0,"request_count":1,"received_data":17439,"sent_data":487,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.storageimagedisplay.com","ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2024-09-13","domain_rank":170153,"first_seen":"2024-09-13T12:56:32Z","last_seen":"2026-08-14T10:05:52.591041Z","alert_count":0,"request_count":3,"received_data":159160,"sent_data":1567,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"mtevor.com","ip":{"addr":"104.21.21.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-10-31","domain_rank":3995008,"first_seen":"2019-11-04T00:42:52Z","last_seen":"2026-08-16T11:29:13.717023Z","alert_count":0,"request_count":1,"received_data":7702,"sent_data":513,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"immigrationacre.com","ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2026-01-21","domain_rank":0,"first_seen":"2026-01-30T08:57:45.831225Z","last_seen":"2026-08-16T11:29:13.609868Z","alert_count":6,"request_count":3,"received_data":202790,"sent_data":1579,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"static.nresystems.com","ip":{"addr":"104.18.19.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2001-02-22","domain_rank":0,"first_seen":"2026-05-13T20:38:27.678612Z","last_seen":"2026-08-12T14:05:41.472806Z","alert_count":0,"request_count":2,"received_data":2492,"sent_data":1336,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"createlouisville.org","ip":{"addr":"104.21.82.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-04-13","domain_rank":0,"first_seen":"2026-07-27T06:36:47.467121Z","last_seen":"2026-08-14T15:16:21.860539Z","alert_count":0,"request_count":14,"received_data":129265,"sent_data":14491,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"codedetrichelattaquedeszombieroblox.blogspot.com/","fqdn":"codedetrichelattaquedeszombieroblox.blogspot.com","domain":"codedetrichelattaquedeszombieroblox.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.250.178.65","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"48fe9d8162be4c2c40d0f7e8bdd62729","sha1":"abb0f733648de9a3d970a3023d6f2d78cca614cb","sha256":"f26e9f705193706cac03502cb0d322a4fc520c9b251841f1bbc68b19f7f7a89b","sha512":"58c43081608087e885846b8f89f9594538a7e18d06c4fbc3f432cd09994dfb95b53026ff07ffdf0c1d410721e923f939090de2bdc7f0f9e4c7bd4b4b5f3e104a","ssdeep":"1536:anWi6p4BmVLFijGb2gXke71t5tgPBHlxNLIJBanUEwf7rmvsMn3lhMv:yUL5uxNL/4Cr3lOv","tlshash":"4e83f9dd73c2b06257bb20b9006f640ff2364d6a280d8564f125d8e9bcb5a4d827bf6d","size":83629,"data":"","first_seen":"2026-06-21T03:53:24.799846Z","last_seen":"2026-08-17T09:04:20.218609Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"codedetrichelattaquedeszombieroblox.blogspot.com/","fqdn":"codedetrichelattaquedeszombieroblox.blogspot.com","domain":"codedetrichelattaquedeszombieroblox.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.250.178.65","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"a826eac42ea9bf7644d33848f7cb7e7e","sha1":"bcc785e86fbb7fc97536e0dab15eb3cfebbd0c80","sha256":"ec1a43651fc3651dd9504baefe7449038a9023580bfa7798c690cda42655633b","sha512":"04ab1c2a30740b3da96f08f172fab6a8a667c008023b3d68871f8bacdcdd7bb1cc69af52f2c5400a038a6e03d86f939df2c5b62afecf085ca4b1760a626e89bf","ssdeep":"","tlshash":"ae51b5f6385010e326ac75944d6b438e3dea115e2e2c87b0f4ade9c067422cc22db70b","size":3167,"data":"","first_seen":"2023-03-07T01:07:18Z","last_seen":"2026-08-17T09:04:20.221348Z","times_seen":103,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"codedetrichelattaquedeszombieroblox.blogspot.com/","fqdn":"codedetrichelattaquedeszombieroblox.blogspot.com","domain":"codedetrichelattaquedeszombieroblox.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.250.178.65","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ab3d2afab10aea2fe4b2c1a2794cec56","sha1":"1e3087ded6185752c8ec472e4b85725c40836da6","sha256":"91d6f20598fbe846b22e30b7eb87b06e9e8c926effb6a133fb63e202e974d132","sha512":"9265bb69b0d150a36eb9c795683ecb65ca74ea65c14768dd97ab747c4d15bd96d08c07915276c6e4d6f0064e000e15a3a54fd9be86a385d4d870046abab038f1","ssdeep":"","tlshash":"ba11af89f338204df1f3549655157a86f033216bd9004ac5f2918dba5cfe9494267d1f","size":867,"data":"","first_seen":"2026-06-14T04:33:25.749518Z","last_seen":"2026-08-17T09:04:20.222725Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"codedetrichelattaquedeszombieroblox.blogspot.com/","fqdn":"codedetrichelattaquedeszombieroblox.blogspot.com","domain":"codedetrichelattaquedeszombieroblox.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.250.178.65","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"7b43a2b95b23a317fce20d7f4f15a423","sha1":"fc250563eb1799d6c73fcb29bdd48a570a326290","sha256":"51c7c8934666e0e0f435958c49d59a7eaad444a90cae3e253a0436602fab3630","sha512":"6bb5defced2a3b3fc38af3ec6b24cc85ee17ee5a57daa859803f9ac8dc72cfab442723e89dd0e65c25e129c7573836e4ddf293dbde76a885d88c4974e07881d8","ssdeep":"","tlshash":"1090026deed4626d0225105503be554c9f5ca11111c71a48440c56457f372a81561409","size":57,"data":"","first_seen":"2026-06-14T04:33:25.750993Z","last_seen":"2026-08-17T09:04:20.22367Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"codedetrichelattaquedeszombieroblox.blogspot.com/","fqdn":"codedetrichelattaquedeszombieroblox.blogspot.com","domain":"codedetrichelattaquedeszombieroblox.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.250.178.65","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"7973c198c5568524f32c6708842f96b5","sha1":"5e39ed60b3b285d347a4f5cbcc8994ef7c2fb1bb","sha256":"7f11d111acf4573c8cca248425113b273668badb1503ff2da70ebceb4ba570eb","sha512":"58f4c26dc2f07e3e4d94139be207134b7011d9bd6ceffbe0c7f5ad5b869af03ad1c83567adca63b371200a05440252386a1d891bda8150ee0270624e199926d1","ssdeep":"","tlshash":"bae06809799142682b8318792a7fe340bc31103460d4a100c95f90989876f8f63b9ecd","size":389,"data":"","first_seen":"2026-06-21T03:53:24.804148Z","last_seen":"2026-08-17T09:04:20.225188Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"codedetrichelattaquedeszombieroblox.blogspot.com/","fqdn":"codedetrichelattaquedeszombieroblox.blogspot.com","domain":"codedetrichelattaquedeszombieroblox.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.250.178.65","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"720b1a3c441d1dbf59eb7ffd65998ef1","sha1":"32757078ebbda89939e710b8750df4aa53a69c83","sha256":"a610869aa11188ac6820c0abc394de9003aceff5807f46fc7f7cd225a1e815e4","sha512":"204d7411ea9dacb17c0b7f1d6f7e7edc6be0b85bdc42d19f557e1b424a3dc76f581e8feb7ab782310f07241952976a1464aedd8ac1957675a6741bf143a31886","ssdeep":"","tlshash":"67e0df71016947043a12ba24ba0c72485dcaa035912ad35ec57ce7280988272b1f568f","size":344,"data":"","first_seen":"2026-06-21T03:53:24.805287Z","last_seen":"2026-08-17T09:04:20.226717Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"codedetrichelattaquedeszombieroblox.blogspot.com/","fqdn":"codedetrichelattaquedeszombieroblox.blogspot.com","domain":"codedetrichelattaquedeszombieroblox.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.250.178.65","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"40bedf5460232f41ee5a69d893eb5b46","sha1":"cd647e347e67d8f68e105435d9a69408f2ebfe01","sha256":"8cfa475f76a42ad112ff8ccedb6834289d40b03690af8b010c6c693f54db8c19","sha512":"298a3d49fa0b3815098b4b8edf468115f2928f90e3683550b2decbb1c525b9e83458ef9bf46b5091d4ca33df2ffc113369d227fa53581b67c13d83ecf442d9f9","ssdeep":"","tlshash":"7a11e1e47423d067e1b31896b08b18085dc5b65f9026e308f58c90d20fa41f56aa61f2","size":1016,"data":"","first_seen":"2026-06-21T03:53:24.820042Z","last_seen":"2026-08-17T09:04:20.22844Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"codedetrichelattaquedeszombieroblox.blogspot.com/","fqdn":"codedetrichelattaquedeszombieroblox.blogspot.com","domain":"codedetrichelattaquedeszombieroblox.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.250.178.65","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"fd4eaf44eed63d107cc8d7972f058ad4","sha1":"f3e7064ede12a1438f5cf31044e490b2d1c62ed5","sha256":"2349d7a205ff995f5ecea3974c310537c2bf4d5df43e9bb1865cc791680a569e","sha512":"aba47828d5a385da5e13edfebf7c11cd19298f5cf917b41ceb9a8abe255a05f7eab4e8a0115028000ce2a69ba676714bc9de2b1ebfc9d2d19a95ba55ca86e751","ssdeep":"","tlshash":"7cc02bbb3c256c28a2090080481271942f3f76ecc881f741b001d1020a7c8c9f134174","size":138,"data":"","first_seen":"2026-06-21T03:53:24.821018Z","last_seen":"2026-08-17T09:04:20.230722Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"codedetrichelattaquedeszombieroblox.blogspot.com/","fqdn":"codedetrichelattaquedeszombieroblox.blogspot.com","domain":"codedetrichelattaquedeszombieroblox.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.250.178.65","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ae8b783d03df4f5bccd726779210460b","sha1":"5f6e02209bf8f6001d11594c9f381524bacf83e7","sha256":"7727026ee24af529e8e17c013087c013745da40ba76ab356d6a68563ea053700","sha512":"d00311c257b27eff87361ba53cd27e7f09615ce248b7a468822978bf991b7d04b7866e9cf499e5c09bdb7bcbb0338040924fd91d106a735b32bbd7c21ececbdb","ssdeep":"","tlshash":"2ee02dfab2b42a404d3ec6bac060f6be3c2a80e4cd9301fde840146ca2304117dc83e0","size":328,"data":"","first_seen":"2026-06-21T03:53:24.821881Z","last_seen":"2026-08-17T09:04:20.232131Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"codedetrichelattaquedeszombieroblox.blogspot.com/","fqdn":"codedetrichelattaquedeszombieroblox.blogspot.com","domain":"codedetrichelattaquedeszombieroblox.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.250.178.65","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"2dc8021fb358c583be18ac42f679a8c6","sha1":"107949a06999f6b0bd6c3f72020fb1f9efb78103","sha256":"4890a9af190a3be0030c659544ce64d227055848e0d5402486a61791afa99f86","sha512":"44269d910db1707bff73f7146f189d3fb20450e5e1b405693a5018c12f95a56f3b9124a7ff573b8994b8b5c5b6745fbc1f62b24251f89ed73c078a48a5a23919","ssdeep":"","tlshash":"56b022b3f0ae000a2a0000a80802b2ec0ba28338c002b282802ab0230c082e2f022ae0","size":122,"data":"","first_seen":"2026-06-21T03:53:24.822746Z","last_seen":"2026-08-17T09:04:20.233033Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"codedetrichelattaquedeszombieroblox.blogspot.com/","fqdn":"codedetrichelattaquedeszombieroblox.blogspot.com","domain":"codedetrichelattaquedeszombieroblox.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.250.178.65","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"5de729c3c2224015946c62a4feb72f4d","sha1":"a5b2eaf7a1de9df3767a43d22b9b05852a5f062d","sha256":"2ee92472979a3191a3c94c2d75e25581c298a58f9e234bfff5419b872b659242","sha512":"c5a20514e06fe38922e5b9cb05de570c5a228edf5f944e4c9b5f8ef6916aac1c80044bb6ae4e913f0f24b25ad1a03cf7961c7cbef5d2f44bc893840590eb1a96","ssdeep":"","tlshash":"23c0c07f330aa135321021fc8c053450bd7fa328c947de17424b34100e1c49b920a3cc","size":190,"data":"","first_seen":"2026-06-21T03:53:24.823575Z","last_seen":"2026-08-17T09:04:20.233853Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"codedetrichelattaquedeszombieroblox.blogspot.com/","fqdn":"codedetrichelattaquedeszombieroblox.blogspot.com","domain":"codedetrichelattaquedeszombieroblox.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.250.178.65","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"282d835d0958b258f65f7169f524e086","sha1":"9e0682ffdc0ae205937ac4d63b7821319372068f","sha256":"879451ace1967c36ebcf187c97604c15d4ab3b85ec34b2c1f56bf117006affd8","sha512":"0451a1408cc3ee58b8573f71cf08044933c8e0ffcc855d8239d66f72c882675493596f410ece91a4d5aaaabc8010f3a62c8361b057566b168e5fd5daee943ff2","ssdeep":"","tlshash":"62b09bb662594425574185c9481376b8191d4774c841a5454106956509844dab1514a0","size":115,"data":"","first_seen":"2026-06-21T03:53:24.82469Z","last_seen":"2026-08-17T09:04:20.235612Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"codedetrichelattaquedeszombieroblox.blogspot.com/","fqdn":"codedetrichelattaquedeszombieroblox.blogspot.com","domain":"codedetrichelattaquedeszombieroblox.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.250.178.65","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1cd78043201049d788a493b1f986371b","sha1":"bcdb863f2aabd4b8738c266604f015680ef00021","sha256":"da8880ab50f689a559bf934689ef1daf5eb31fe3da21711c5ae14b6fd556a0c5","sha512":"674f2aedb98126277aa752f5be869268b88666d15e91bf88cda77f12cc75eaf280db70113e0ea51977c2de04c3d006698a13f0d49b4566282a96a59fb59df7cd","ssdeep":"","tlshash":"68b09bb7f965411c7d40005c6c6373649d5a437dc64eb7458045f4940e484f6e1425a4","size":122,"data":"","first_seen":"2026-06-21T03:53:24.825451Z","last_seen":"2026-08-17T09:04:20.237395Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"codedetrichelattaquedeszombieroblox.blogspot.com/","fqdn":"codedetrichelattaquedeszombieroblox.blogspot.com","domain":"codedetrichelattaquedeszombieroblox.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.250.178.65","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"3d58ff65e64c034c7e6cf3d4a9867936","sha1":"467329be6dc9a272292e605810efc077310e0dcb","sha256":"ec7c38845dd1fc67e03455a9776d56eaf26ee45c68256aeb3e851ffce4032e08","sha512":"1303f4d58d2479d79672c3b1e2995b845fdc286b2d6d93cc1bda6c322a232f2892de475615ce35975780be8c4e94c3e995e6bec65f7f3e7972ab17d3aa33d3da","ssdeep":"","tlshash":"efb022e2a202803c0a008080080a30ec0a2833b8c808ba0a800a80228a808eef0832c0","size":113,"data":"","first_seen":"2026-06-21T03:53:24.827008Z","last_seen":"2026-08-17T09:04:20.239942Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"codedetrichelattaquedeszombieroblox.blogspot.com/","fqdn":"codedetrichelattaquedeszombieroblox.blogspot.com","domain":"codedetrichelattaquedeszombieroblox.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.250.178.65","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"6bd43cf0ae158526c6ab93dc3be79f28","sha1":"15c289e342bd3fdf5b1e95f7abf25a2bc78bf357","sha256":"7a13d5ae0755d86c09084ec300c4a0f1a0a06921f74d9980eba9d966ff17ad38","sha512":"5190eb107c27f5d655eab378cd468228aa031d088f59082f257f41d464a29fbdb23594043afe89a3f9b63ce86d91efad6c2901c816d85196389293a6a5a28521","ssdeep":"","tlshash":"df90040100513554711530d00134c3dd157df075dc4dd335754f57004040405c53c401","size":40,"data":"","first_seen":"2023-03-07T01:02:07Z","last_seen":"2026-08-17T11:39:48.430592Z","times_seen":32690,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"codedetrichelattaquedeszombieroblox.blogspot.com/","fqdn":"codedetrichelattaquedeszombieroblox.blogspot.com","domain":"codedetrichelattaquedeszombieroblox.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.250.178.65","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"f2c4d027c921978e68be161234ba2bac","sha1":"a2ab1a3b6043b0cb93fc3a7f0f6baa5d74f77fa4","sha256":"2a8729216b4f6bb2c6c7868661fb98f0a240d3ee211fcbeb168a49eb1d11ab2e","sha512":"a806c8ae3737ea893cbd6ab295f8a88bf1fe52a708116a11a3ab6bd7d175f339479993cfac9343e949ad67995ec196fb61a4fb6c316735041a5bf064e85bda48","ssdeep":"","tlshash":"39e068157a9285181aa314782e7bf755b822243890e8f485cc4fa41d98baece027eecc","size":395,"data":"","first_seen":"2026-06-21T03:53:24.828414Z","last_seen":"2026-08-17T09:04:20.242385Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"codedetrichelattaquedeszombieroblox.blogspot.com/","fqdn":"codedetrichelattaquedeszombieroblox.blogspot.com","domain":"codedetrichelattaquedeszombieroblox.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.250.178.65","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"87fecb72fc66afeed4e3c67d8bf07348","sha1":"1a6e5c407df475125d22da377dc5fffc306d9c35","sha256":"46fc7d54c764103aa52d10c56764fdf7b07f2adf9d81d1be2dee1a686534c24b","sha512":"c6394150fe784d323d1984c6b79de6279396c58576504af9f42610a034eba9ffc34615f10278471f7d65d697052ea500fc171fed1c9819a1f8e5d2d09728beb4","ssdeep":"","tlshash":"5701bd137008e71421a314307b8bba18fd2ac2520895453b391cf5324f07b63ced6be3","size":790,"data":"","first_seen":"2026-05-25T18:38:39.709469Z","last_seen":"2026-08-17T09:04:20.243573Z","times_seen":10801,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"codedetrichelattaquedeszombieroblox.blogspot.com/","fqdn":"codedetrichelattaquedeszombieroblox.blogspot.com","domain":"codedetrichelattaquedeszombieroblox.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.250.178.65","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"9deb70fed96236dd77c6130511a29b22","sha1":"ab12c3bd685355729c2ee656c2c8d18cc16e9786","sha256":"b40fe0ea957b2fe9900a137ee58177208335284d19b8ea16e5dd1d1e2c4f7f48","sha512":"3ff1b4c7af3e214aa2e3e967a81648b40f324d11e52c16fd7d8d0062a4fd3a6ddce9cb42f16602bfeb0dca23dd57a595787626e04771ffa24cf332699ff6d47f","ssdeep":"192:nJFVRV3VLbVjUlh97BfPyI/BRq2E/ChqcpllLOaFgVRbi/nGEtsMxvdnGM0SGAGW:nJFVRV3VLbVjUh7BS2LdllKaFgVARsMn","tlshash":"83d193d361fdb0f51fa9a95ef018bba4bace4c06d843ec96dc143574264ab8344b8f61","size":6522,"data":"","first_seen":"2026-08-17T09:04:20.245148Z","last_seen":"2026-08-17T09:04:20.245148Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adxpy.pages.dev/ads.js","fqdn":"adxpy.pages.dev","domain":"adxpy.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"28a8ee5b231d6993efeaeb288506fba6","sha1":"185e282511210752916a8d4fcc28642f02e4dc5e","sha256":"81496c62f33c7090e09cd8ea1d016980fc4432fb6ca00450ccea59b926daa7e1","sha512":"b1cf24abc589692314ada61a5a266b280ce2ad1297f5be58b94ececb90e2d718021795ca3998cb142e5937cff260d4aaeaffe5759bb8e67dff20e76bec939658","ssdeep":"","tlshash":"cb81011920a100651eb7236a7be3625dfba43053b81281a4bdccdb185fb9d1091f7fed","size":4034,"data":"","first_seen":"2025-10-25T03:17:17.993778Z","last_seen":"2026-08-17T09:04:20.152829Z","times_seen":416,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"4d2142f025f0775b37befe05d546f66c","sha1":"0cf190d6e62ec59983fbdd462fe37ff8d507b885","sha256":"04448a6ac4e21b34d80a76e478f9e0157e9d417d960767b324e3c1531a4126e4","sha512":"f09c11772d9c1d5d4be0621124d8438863b92d1de3317362cba3eeedcbee982787c0f6b4b621a22e66331a1c023ff8386b7b9ef221c1b09eb71aac8459840ef8","ssdeep":"","tlshash":"b421c83bdcae125e22d43dfa3f244cb45d2129bb70af940852265175a2705c027ed8b6","size":1284,"data":"","first_seen":"2026-08-17T09:04:20.247953Z","last_seen":"2026-08-17T09:04:20.247953Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"immigrationacre.com/c6/4a/a1/c64aa11db612c16c65959b87a44dac81.js","fqdn":"immigrationacre.com","domain":"immigrationacre.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c3e272c793657c3ac62c77ef0804d9b7","sha1":"fb587e07aec9262e516e9afabfc6a00e4f4855ac","sha256":"a2ec70ef1905698c8cd2a1a2b22195f305bb523a4a1edfe560e3adc711b61dea","sha512":"c0437487fd4747d577ab1d5f50b8f3b8563f33778a902acb84c2ee0357605740d3eb1ce203fbf932a45ff96f980119fe4c7e05e947e2a2e071e7a7f28ed44045","ssdeep":"1536:Mtv3d1QZ4sIu326JIlHyokfhaGDGvvTZLWc59M3VFqkIi:M1c4PlHyokfhaGDGvbb58b","tlshash":"f563f5c97fa9f53e16c4a07f310da263e01d0c81548de4a4fcb778a4aa99758f8bc572","size":67684,"data":"","first_seen":"2026-08-17T09:04:20.153472Z","last_seen":"2026-08-17T09:04:20.153472Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"d0fc94ab3583ead74aa8cd2cc03eacb5","sha1":"dae5b5c2539d4295620ad8451bbd4073229bc29c","sha256":"fcf0c52d85d1769261fd7ddb392f6e603fd4c077c937355d1f694c3c81918eb0","sha512":"da53c216b22e42a9a8dc03f175e606ce2944e107bca2eac486534f4b61b9573b0310649c125424fc266924aa0d5236b159f8a688e3ceb7d1991f68c4a2422fc5","ssdeep":"","tlshash":"2b312a3f19653076e9fab9c51547a3e4bd9a8a870c884ac742e089882c9c2a942b5e44","size":1554,"data":"","first_seen":"2026-08-17T09:04:20.249916Z","last_seen":"2026-08-17T09:04:20.249916Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tagivi.com/9/d089ea049f0f7b1eacfa2b5bb99d3bdc","fqdn":"tagivi.com","domain":"tagivi.com","tld":"com"},"ip":{"addr":"104.21.61.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"eedf8fd34c13f41ddccf73935e0db387","sha1":"36810730a5b428eab385cd5e98afc2ae356622d0","sha256":"edf6385c50c068b449dee60b511ffdc20eeead46e27f0b4db316b66686530ff7","sha512":"a9c3de9944a80b4d273fc1d578fce88b3ccd3f492024281929831a811c60d21c4096245411babc62d835cb135ab06b2c5ef5aaef1a059b4c8c684f236d97ba0c","ssdeep":"1536:6ZcdVPSv2svGyudslTKG+qiUhP+iuIEausCJMt89w5p:o12svGRslTKG+qiUhP+iuDsCJMy6p","tlshash":"8a73d5886f2ea16c0ff1e03b221ef562e65e0c4640dce45cf8377875aaa9756b47e071","size":80545,"data":"","first_seen":"2026-08-17T09:04:20.172719Z","last_seen":"2026-08-17T09:04:20.172719Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"9f567505e34615fa1d71c43aee42517f","sha1":"2476d933b9f6c87a340ceed789b17c3f45d46617","sha256":"e0d1a05f1b118b13c14794502b678a377d6cb75f8b56dc803fc7ae35c9d094b6","sha512":"b3a5fa7b93904af8b491b6cfe345bdc89364df1de8a7b454ed358add74c71973fba112c1b5c56425be319130bf45fa1a2a58820884b12a961f3de6bc650a99d4","ssdeep":"","tlshash":"bbf04914e32513f4d27ba764af6f63461622060dc188821e20ec37e73cb361a42d6c65","size":612,"data":"","first_seen":"2026-03-07T00:25:55.223951Z","last_seen":"2026-08-17T09:04:20.252454Z","times_seen":51,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.blogger.com/static/v1/widgets/4033524873-widgets.js","fqdn":"www.blogger.com","domain":"blogger.com","tld":"com"},"ip":{"addr":"142.250.178.105","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"819440bc14eea1466567efee814a608a","sha1":"76b0a14c33d8cd187ba7499e3c036fecc0ed301c","sha256":"be602a4fea168f951b795d9436c82569722a24eb6a887a62ab7fca41f35eecd1","sha512":"08eb9d2eb9adaa821e48fba555ae404d08f7947c19e07b70ab50620c180f65b675d093f9769c8930ae3c5697650ce3d4b1cd86c0710c86f579920c6770924445","ssdeep":"1536:5ORYIwGQrkr+onsQ8yTrrINWqealNcx+mw0WApGKA4V5bcglSW4SooTirqDh2Nu8:gr+SqWqeuP0WDKZ4gyJ7w2NuEwIrTiyZ","tlshash":"ede3f9c8b79670628373b4b5003f010ff13ab9aaf848896cb188d9e56d749695277f7c","size":151284,"data":"","first_seen":"2026-08-01T13:17:15.677216Z","last_seen":"2026-08-17T11:32:51.665044Z","times_seen":1331,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portalfluently.com/sfp.js","fqdn":"portalfluently.com","domain":"portalfluently.com","tld":"com"},"ip":{"addr":"23.111.84.116","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","size":85379,"data":"","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-08-17T09:05:29.410793Z","times_seen":26755,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"d6c61116072a3aed150693303749f3a3","sha1":"5ffb5b5427225efd2d592d1bf4bf3613027e69e8","sha256":"7f098ee0db613906e057c8814237ba1a33c352d04c1fd2b72ab5235d24082287","sha512":"f3498eb18f02a60e53e802581e42658f2d0b280610791645ebcd50374bc951aeab13f30e244c6167f3bfd1c1c38eb3aa52ec2f0aba865742abeadf817bffc8d8","ssdeep":"","tlshash":"0dc09b8c9f00185575327cdd7b261384fcd542dbb836dd555297c04265cd36bf04157c","size":145,"data":"","first_seen":"2025-12-18T23:27:07.113909Z","last_seen":"2026-08-17T09:04:20.254828Z","times_seen":312,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"codedetrichelattaquedeszombieroblox.blogspot.com/","fqdn":"codedetrichelattaquedeszombieroblox.blogspot.com","domain":"codedetrichelattaquedeszombieroblox.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.250.178.65","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fb73c9c1f5ecb08f9a0205a14e2841e0","sha1":"dd5807b9d4c32d9dff08f8f14c726804f49bfd5e","sha256":"63578fe671a2d9eeff56bb7df57695eb7728b49bfb50db91bf2cf74430df93c9","sha512":"b18875be5353ae7972e16617a0eadc0adbe806c68cd098cd54f462b4308c7dff48e7ce73da68968f66d9dcc00ac1cc891e8d1b1312298a75990eeecdbc8187ca","ssdeep":"","tlshash":"7fc08cf68004b21820e7caf02028c0c0a324ec20300a383166e0081082ac50d0cb2bb8","size":146,"data":"","first_seen":"2025-12-16T03:50:13.724775Z","last_seen":"2026-08-17T09:04:20.255651Z","times_seen":331,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"immigrationacre.com/6dd5e3d7ac37d33b5abc87810f6ac7f3/invoke.js","fqdn":"immigrationacre.com","domain":"immigrationacre.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ba8f85447667049c85c1f77d804636c3","sha1":"8a4fda4435774f44b11f2f2ef0e85b3369dcad1d","sha256":"f51a7730c93c02232cb21eaaabcece8bde7c5c7fafb2c254e504219185ea157e","sha512":"6c42e3b3c6be9e1524d7330e4e838031be9152218987688dfadf2f092fe1af2c201b4350ead424e6896ce79103e31fbf741e90601198c1b808f56697c25d64d6","ssdeep":"768:y+QGHr9qbxrW34GKDLr5IzOVeYcxPy+XuYE+5d/raP4QEAG:Jy04GKPr5ISVcwA7n5dzatEAG","tlshash":"e8f2d5c83fe1d06f17b664a3332be52ba05a1e41578de8a8e877b41ce904f15f87a160","size":35514,"data":"","first_seen":"2026-08-17T09:04:20.140333Z","last_seen":"2026-08-17T09:04:20.140333Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"codedetrichelattaquedeszombieroblox.blogspot.com/","fqdn":"codedetrichelattaquedeszombieroblox.blogspot.com","domain":"codedetrichelattaquedeszombieroblox.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.250.178.65","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eventHandler","is_inline":false,"md5":"a73d26dd421e931fcd8e269f07769d64","sha1":"1a82dcc6914fcd0bde9ad067afe327f864f417ef","sha256":"dbec47c6cca1b7f4d56e8ceb1d4cfa69d78067c7480a8c04bd9b96afe74e0af9","sha512":"f02e979135efca3b320a922788bfa4647013506e61a50d0e000b576eb984bca5f399213ee9ea56ba4a33825ab8c3aaf4c212ab233d340107df27759b16a5347e","ssdeep":"","tlshash":"107000080a0ae0a8080a0a023822c00c02800082000ae0a200000a0020000088820220","size":18,"data":"","first_seen":"2025-01-05T08:04:41.550371Z","last_seen":"2026-08-17T09:04:20.257783Z","times_seen":392,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"codedetrichelattaquedeszombieroblox.blogspot.com/","fqdn":"codedetrichelattaquedeszombieroblox.blogspot.com","domain":"codedetrichelattaquedeszombieroblox.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.250.178.65","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"85db27906ab42bae987f36e7af985ecf","sha1":"8f5695bbc2eef2bcc4196ed68464866c4029e5fc","sha256":"829462f248743b16714172d3e598266a34e812142b16c34521a14a280a247612","sha512":"58ff4789e9064e3c54f996494582d089f150101c5591897c4dd834acc56889cdd7cbf5956ab861f4272e127a8c568855d0fcb46499e8af8117635a893fe729d2","ssdeep":"","tlshash":"635121e0a6b005dec67053e012ff35dafc3c5a161d4ee9319a41c5c855a2b1635bbd4c","size":2664,"data":"","first_seen":"2023-03-07T01:07:18Z","last_seen":"2026-08-17T09:04:20.259202Z","times_seen":122,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"createlouisville.org/15/af25da8381e0bd0494ba4018c76898a2","fqdn":"createlouisville.org","domain":"createlouisville.org","tld":"org"},"ip":{"addr":"104.21.82.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d335f7be02a5a9aba46c8d48e8920e8d","sha1":"eade71e55f77787efc6fe46a5a848bdaf4aa849d","sha256":"afee64af696d2b6a4bef2cf67f6c6d8bfaee81bef6ebda0df6c2e3b4fea22f04","sha512":"248d236076c5e8133ae63a55626af24f9ec686f8d8cd147c3688c70b6303a67fbb258665d352009d9553f8c6b83e2ed1c94f4c850a54536e00d29e2bc6523904","ssdeep":"1536:2irZW7aOocgTURPONt/zVQMVkHP+gGLHKCZchU6FPPYuRWhiAYsPC197EJO5CPze:2m07aOoZgRPkqvTJxguRWhiAYsPe1v","tlshash":"a2a33ac42f097a680280b0b7217f550bf3ed7d06129ee499dd5bb8582b9cb6c693d732","size":107324,"data":"","first_seen":"2026-08-17T09:04:20.201102Z","last_seen":"2026-08-17T09:04:20.201102Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"codedetrichelattaquedeszombieroblox.blogspot.com/","fqdn":"codedetrichelattaquedeszombieroblox.blogspot.com","domain":"codedetrichelattaquedeszombieroblox.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.250.178.65","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7e58c75dc5c814b8584596366d7fbbc0","sha1":"402ed5cabf7e193cec0bc119f0f80573fbdfd213","sha256":"a4b7e137da8e508158dde25998a84af33c206e06aa964412416123bda0ab5048","sha512":"04a0ccf32e05eebb0eeb6f1e00bf487fa26d7adf7baa279ce5b9df28cb5ae3b5c0f1dcd32853a681336194c8aec9de9049812f38b5eedd62e638556e28dad3b6","ssdeep":"","tlshash":"8e41b6f1789118f3277565000a7b83c239aa261f7c2dd470e4b5d9c4ab8129a67e730f","size":2313,"data":"","first_seen":"2023-03-07T01:07:18Z","last_seen":"2026-08-17T09:04:20.262658Z","times_seen":106,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"codedetrichelattaquedeszombieroblox.blogspot.com/js/cookienotice.js","fqdn":"codedetrichelattaquedeszombieroblox.blogspot.com","domain":"codedetrichelattaquedeszombieroblox.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.250.178.65","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a705132a2174f88e196ec3610d68faa8","sha1":"3bad57a48d973a678fec600d45933010f6edc659","sha256":"068ffe90977f2b5b2dc2ef18572166e85281bd0ecb31c4902464b23db54d2568","sha512":"e947d33e0e9c5e6516f05e0ea696406e4e09b458f85021bc3a217071ae14879b2251e65aec5d1935ca9af2433d023356298321564e1a41119d41be7c2b2d36d5","ssdeep":"96:q54UPzHFcJZ7haKemb/m2GzrzCXAl/MStzo41Pm+YsttcVcbYhyjcso13EZDjiat:q5rPzHgxm2GzaXeMnuzYstyryPhZD9","tlshash":"4fd1630938a7127d125fa03fb6bf515ab66410238101db08786dfa785fd5f42a8e4ffa","size":6513,"data":"","first_seen":"2023-03-07T01:02:24Z","last_seen":"2026-08-17T11:32:51.657566Z","times_seen":135091,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adxpy.pages.dev/magic.js","fqdn":"adxpy.pages.dev","domain":"adxpy.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9bcbb02a6bf94ae8762ddcda5d1c80d3","sha1":"fade830681bb5b7b138db5482e7a495c1c9b296a","sha256":"b26277e44f2fe29283a55a632166f8a45dd1407a0970c13e08287406f94a0772","sha512":"54914b0f4d7625f4e40e13b11bb2bfd47c87dc6a14714c427c48c75e955980826d6605abbac7b3ca6c043356f1b91618b6f16abaf6be339be38d8ffa825e71e5","ssdeep":"","tlshash":"c101fe6e229200a84d7a509803a3fa0cfda832577160c0e1bacedb602f35f20419e4d8","size":671,"data":"","first_seen":"2025-12-08T23:25:47.209165Z","last_seen":"2026-08-17T09:04:20.166453Z","times_seen":396,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"codedetrichelattaquedeszombieroblox.blogspot.com/","fqdn":"codedetrichelattaquedeszombieroblox.blogspot.com","domain":"codedetrichelattaquedeszombieroblox.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.250.178.65","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bb27232549abd814635dde5a338cbc9e","sha1":"90b24ec16b789453aec40bcd9b3b620ac4721335","sha256":"2f136d970baa2f3c28b182172051502e723fd8ce872321a266be73da9cf97afa","sha512":"7575109e4beefb0aadde26992f1016198461e154e0a5b94d05dc718373963f73de511184d1e072acf5bbb6ccb4feef0184d2d26e61497c22f18e2abda1285bc4","ssdeep":"","tlshash":"cfc04cad5044b54830b2cdf42979c644e120cdd4354abc3526e2541155cc64e9c7677d","size":147,"data":"","first_seen":"2025-12-18T23:27:07.103769Z","last_seen":"2026-08-17T09:04:20.264088Z","times_seen":355,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"immigrationacre.com/c2/07/ec/c207ec84c2456af201cc563cadc36c46.js","fqdn":"immigrationacre.com","domain":"immigrationacre.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5a485ed5d8865f20772eccf3c95fb36c","sha1":"2202a7629de1074f93f1a1f1bd25e30b7a4dd559","sha256":"f55c2300bd3eec811c5746fe0606376870fcc409d08653d3102255ba81108bf8","sha512":"2b4fc1e1ac54a41f8156f1438ea75cbe40a463f59fd6423b5b48b9b6c17831188220c361c024c197cce9f31c625c7cdeade43fc919d1bb1baa5ffa425c3aa875","ssdeep":"1536:7V4VKmwg+YVfsgELIUlsgjJMODRr2EJt7jQW3j:7+ZMIUCgjJvDRr2EJt4Wz","tlshash":"1293d9983fbba87d03d97077762f9417f26d1c01008dd8bcd943b8acb968b54a476a36","size":97079,"data":"","first_seen":"2026-08-17T09:04:20.116082Z","last_seen":"2026-08-17T09:04:20.116082Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"20a6559b2ca37c2c1a6b68196b7ba6b4","sha1":"2bf16221e5031dd9acb2ffc1e89dd7973a1d0587","sha256":"2469ab083920bdf06f3c5f8c09b12593ce21de3abf149db5fb98d6ab03a45c65","sha512":"991f7b31a662232c1524699330c0459ce8c9986e899b84ac306109a7a110b71eac5a8138bf640a75e9a2eeb067bfeb458fac7752cc1610973d7bb61c8d07181d","ssdeep":"","tlshash":"eb813b2e5ce9117874e238fe3b3691d87c20918b2448dd86b69cd5451f647e047fdde8","size":4057,"data":"","first_seen":"2026-08-17T09:04:20.269448Z","last_seen":"2026-08-17T09:04:20.269448Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mtevor.com/cluster-v2/roblox-crn.js","fqdn":"mtevor.com","domain":"mtevor.com","tld":"com"},"ip":{"addr":"104.21.21.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"42a43bf2124380170d07e0507ee29fac","sha1":"4d90e94646cd9ba489b5df68648b6948945a350a","sha256":"fdad733857eb0bfaf88fffb3cefd364c40a44a8e3e7570f672133eecdf6bb536","sha512":"3087ca9856f04c1e9ec70d89c385b17cdb93cb286f2d818f384090a92ca25bf5852b4075c50b0a5099917706d1cc83c1517aa51398af2b89b57b952913aed2f9","ssdeep":"192:rMnsho0LV8YteZbDVj/poiPqpyj4ZYzwIxpsQkhHC:rYwj8YteZfJ/ptPqcj46zNxpsQ8C","tlshash":"54e1c6a5bc4f89390bf2f758e2358a19fd3cd0221602505af4c892578a69f1e4b1ffd8","size":7054,"data":"","first_seen":"2026-03-21T08:49:48.937482Z","last_seen":"2026-08-17T09:04:20.203523Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"250","filename":"https://codedetrichelattaquedeszombieroblox.blogspot.com/ line 661 \u003e eval","line_number":1,"column_number":90},{"level":"log","text":"Handle Script Load!","filename":"https://mtevor.com/cluster-v2/roblox-crn.js","line_number":56,"column_number":10}]},"http":[{"url":{"schema":"https","addr":"immigrationacre.com/c2/07/ec/c207ec84c2456af201cc563cadc36c46.js","fqdn":"immigrationacre.com","domain":"immigrationacre.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://codedetrichelattaquedeszombieroblox.blogspot.com/","date":"2026-08-17T09:03:41.599Z","timestamp":1786957421599,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"immigrationacre.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 23:39:43 GMT","end":"Mon, 19 Oct 2026 23:39:42 GMT"},"fingerprint":{"sha1":"C1:91:2C:A2:09:50:EA:46:73:30:29:21:F8:00:6B:34:D6:E7:22:0C","sha256":"16:2D:04:C4:AB:1A:73:B4:E0:46:E9:09:AC:29:97:4F:4E:E1:BE:B2:16:19:EE:25:5A:5A:47:51:FE:36:8B:2B"}}},"request":{"raw":"GET /c2/07/ec/c207ec84c2456af201cc563cadc36c46.js HTTP/1.1\r\nHost: immigrationacre.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://codedetrichelattaquedeszombieroblox.blogspot.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Mon, 17 Aug 2026 09:03:42 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\naccept-ch: Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua,Sec-Ch-Ua-Platform,X-Ucbrowser-Device-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile,Device-Stock-Ua,X-Device-User-Agent,X-Operamini-Phone-Ua,User-Agent\r\naccess-control-allow-origin: *\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\nx-envoy-upstream-service-time: 4\r\nHost: immigrationacre.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 2187c7b65efb56562937a8355ff17256\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":97079,"size_decoded":35598,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"5a485ed5d8865f20772eccf3c95fb36c","sha1":"2202a7629de1074f93f1a1f1bd25e30b7a4dd559","sha256":"f55c2300bd3eec811c5746fe0606376870fcc409d08653d3102255ba81108bf8","sha512":"2b4fc1e1ac54a41f8156f1438ea75cbe40a463f59fd6423b5b48b9b6c17831188220c361c024c197cce9f31c625c7cdeade43fc919d1bb1baa5ffa425c3aa875","ssdeep":"1536:7V4VKmwg+YVfsgELIUlsgjJMODRr2EJt7jQW3j:7+ZMIUCgjJvDRr2EJt4Wz","tlshash":"1293d9983fbba87d03d97077762f9417f26d1c01008dd8bcd943b8acb968b54a476a36","first_seen":"2026-08-17T09:04:20.116082Z","last_seen":"2026-08-17T09:04:20.116082Z","times_seen":1,"resource_available":true,"data":null}},"time_used":555,"timings":{"blocked":0,"dns":2,"connect":91,"send":0,"wait":97,"receive":91,"ssl":274},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"immigrationacre.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"immigrationacre.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.nresystems.com/img.gif?h1id=1\u0026h3id=0\u0026key=d089ea049f0f7b1eacfa2b5bb99d3bdc\u0026uuid=01a00ef6-64d8-76a5-957b-90106a8fea02","fqdn":"static.nresystems.com","domain":"nresystems.com","tld":"com"},"ip":{"addr":"104.18.19.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://codedetrichelattaquedeszombieroblox.blogspot.com/","date":"2026-08-17T09:03:43.863Z","timestamp":1786957423863,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nresystems.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 12:58:44 GMT","end":"Mon, 02 Nov 2026 12:58:43 GMT"},"fingerprint":{"sha1":"0E:57:2C:95:2B:9D:FA:A8:6A:D7:DB:94:38:89:F4:B7:FB:6B:6A:91","sha256":"08:66:34:AB:C3:2D:3C:3D:C1:2D:A0:7E:E3:FF:30:B9:03:C0:3F:57:99:3E:A4:52:16:4F:B4:54:36:BC:41:DD"}}},"request":{"raw":"GET /img.gif?h1id=1\u0026h3id=0\u0026key=d089ea049f0f7b1eacfa2b5bb99d3bdc\u0026uuid=01a00ef6-64d8-76a5-957b-90106a8fea02 HTTP/1.1\r\nHost: static.nresystems.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://codedetrichelattaquedeszombieroblox.blogspot.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 17 Aug 2026 09:03:44 GMT\r\ncontent-type: image/gif\r\ncontent-length: 7\r\nserver: cloudflare\r\nx-envoy-upstream-service-time: 5\r\nexpires: Mon, 17 Aug 2026 13:03:43 GMT\r\ncache-control: public, max-age=14400\r\nvary: Origin\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,X-Forwarded-For,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1728000\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nset-cookie: uid_id2=01a00ef6-64d8-76a5-957b-90106a8fea02; Path=/; Expires=Thu, 14 Aug 2036 09:03:43 GMT; Secure; SameSite=None\n__cf_bm=kudtPs.z.iKS1.XAOZFDFErrRpy7WSFdPEmBswSeXBY-1786957423.8795803-1.0.1.1-YMq.dACo4BnWtn6VZWktBeCbMoR5y9XcQMgWXVXcTXLNnk.A8UH5QFXEAKjJ8i7xsJZK_LMNyf2H7Uj7_1pVt88LKRi2vRLJhjZ1sxhDG7W_MeEaVWVzxInQpQGV1YvM; HttpOnly; SameSite=None; Secure; Path=/; Domain=nresystems.com; Expires=Mon, 17 Aug 2026 09:33:43 GMT\r\ncf-cache-status: BYPASS\r\ncf-ray: a2c781db3b0fb51d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"uid_id2","value":"01a00ef6-64d8-76a5-957b-90106a8fea02","quoted":false,"path":"/","expires":"2036-08-14T09:03:43Z","raw_expires":"Thu, 14 Aug 2036 09:03:43 GMT","max_age":0,"secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uid_id2=01a00ef6-64d8-76a5-957b-90106a8fea02; Path=/; Expires=Thu, 14 Aug 2036 09:03:43 GMT; Secure; SameSite=None"},{"name":"__cf_bm","value":"kudtPs.z.iKS1.XAOZFDFErrRpy7WSFdPEmBswSeXBY-1786957423.8795803-1.0.1.1-YMq.dACo4BnWtn6VZWktBeCbMoR5y9XcQMgWXVXcTXLNnk.A8UH5QFXEAKjJ8i7xsJZK_LMNyf2H7Uj7_1pVt88LKRi2vRLJhjZ1sxhDG7W_MeEaVWVzxInQpQGV1YvM","quoted":false,"path":"/","domain":"nresystems.com","expires":"2026-08-17T09:33:43Z","raw_expires":"Mon, 17 Aug 2026 09:33:43 GMT","max_age":0,"secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=kudtPs.z.iKS1.XAOZFDFErrRpy7WSFdPEmBswSeXBY-1786957423.8795803-1.0.1.1-YMq.dACo4BnWtn6VZWktBeCbMoR5y9XcQMgWXVXcTXLNnk.A8UH5QFXEAKjJ8i7xsJZK_LMNyf2H7Uj7_1pVt88LKRi2vRLJhjZ1sxhDG7W_MeEaVWVzxInQpQGV1YvM; HttpOnly; SameSite=None; Secure; Path=/; Domain=nresystems.com; Expires=Mon, 17 Aug 2026 09:33:43 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T11:42:41.491216Z","times_seen":17936532,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.redgarto.com/sb/notifications/dating/default/us/desk-all/js/script.js","fqdn":"cdn.redgarto.com","domain":"redgarto.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://codedetrichelattaquedeszombieroblox.blogspot.com/","date":"2026-08-17T09:03:45.185Z","timestamp":1786957425185,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /sb/notifications/dating/default/us/desk-all/js/script.js HTTP/1.1\r\nHost: cdn.redgarto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://codedetrichelattaquedeszombieroblox.blogspot.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://codedetrichelattaquedeszombieroblox.blogspot.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T11:42:41.491216Z","times_seen":17936532,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"createlouisville.org/pixel/sbls?bv=\u0026tmpl=942\u0026u=https%3A%2F%2Fcdn.show-sb.com%2Fsb%2Fau%2F24%2F54%2F4e%2F24544ed07f7394384bbb75023b9b0b3a%2F1591713925.html\u0026l=1274\u0026fd=510","fqdn":"createlouisville.org","domain":"createlouisville.org","tld":"org"},"ip":{"addr":"104.21.82.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://codedetrichelattaquedeszombieroblox.blogspot.com/","date":"2026-08-17T09:03:45.186Z","timestamp":1786957425186,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"createlouisville.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 13:27:52 GMT","end":"Mon, 28 Sep 2026 14:27:43 GMT"},"fingerprint":{"sha1":"2D:37:E6:26:86:DD:C7:63:98:BA:52:2A:97:8E:4F:F2:DD:7B:2D:05","sha256":"23:6E:87:DD:91:58:54:57:87:1C:E8:C2:31:3D:17:3D:A4:68:F2:7B:F6:AA:0E:FC:74:94:08:04:E2:2B:5C:AC"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=942\u0026u=https%3A%2F%2Fcdn.show-sb.com%2Fsb%2Fau%2F24%2F54%2F4e%2F24544ed07f7394384bbb75023b9b0b3a%2F1591713925.html\u0026l=1274\u0026fd=510 HTTP/1.1\r\nHost: createlouisville.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://codedetrichelattaquedeszombieroblox.blogspot.com/\r\nCookie: uidm=01a00ef6-64d8-76a5-957b-90106a8fea02_2; __cf_bm=PKc27USQADFY1iq5UAKPamMDsc2S6xYS4Jp9gXlecCw-1786957423.7305145-1.0.1.1-GMpPhNHSFnqKGUfpRri8PfQL89cXFB7KhTkvW.kQzpie0kojjuk48wBsOVv1LRI46hLbK0_qy8EcqDZ.tEjm.HxpVGDG5uKWvcWINnBn4kxhSt7EcQ.0q9JUaTpJz0vf; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl28216845=1; slecaf25da8381e0bd0494ba4018c76898a2=[6655446]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 17 Aug 2026 09:03:45 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\naccept-ch: X-Operamini-Phone-Ua, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Platformuser-Agent, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Ua-Full-Version, Sec-Ch-Ua-Model, X-Device-User-Agent, X-Ucbrowser-Device-Ua, User-Agent, Sec-Ch-Ua, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, Device-Stock-Ua\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\naccess-control-expose-headers: Content-Length,Content-Range\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a2c781e369c676ef-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":820,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T11:42:41.491216Z","times_seen":17936532,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"createlouisville.org/pixel/ase","fqdn":"createlouisville.org","domain":"createlouisville.org","tld":"org"},"ip":{"addr":"104.21.82.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://codedetrichelattaquedeszombieroblox.blogspot.com/","date":"2026-08-17T09:03:46.195Z","timestamp":1786957426195,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"createlouisville.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 13:27:52 GMT","end":"Mon, 28 Sep 2026 14:27:43 GMT"},"fingerprint":{"sha1":"2D:37:E6:26:86:DD:C7:63:98:BA:52:2A:97:8E:4F:F2:DD:7B:2D:05","sha256":"23:6E:87:DD:91:58:54:57:87:1C:E8:C2:31:3D:17:3D:A4:68:F2:7B:F6:AA:0E:FC:74:94:08:04:E2:2B:5C:AC"}}},"request":{"raw":"OPTIONS /pixel/ase HTTP/1.1\r\nHost: createlouisville.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://codedetrichelattaquedeszombieroblox.blogspot.com/\r\nOrigin: https://codedetrichelattaquedeszombieroblox.blogspot.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\ndate: Mon, 17 Aug 2026 09:03:46 GMT\r\nserver: cloudflare\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: no-cache, max-age=0, private, no-cache\r\nx-request-id: 2a15d5a3bdf2ba86cc245e780717ba0e\r\npragma: no-cache\r\naccess-control-allow-origin: https://codedetrichelattaquedeszombieroblox.blogspot.com\r\nvary: Origin\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,X-Forwarded-For,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1728000\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=rGFmOK4hWr7Z2eqsd3ry87mo2l8.BSIN44scJC_jWKY-1786957426.192035-1.0.1.1-eqNAwdkM8sHTwHgf5gs4ktMR6R14YlNyLIpXUFqgrNJTHWc1ob0rxzjUqI7btXWNJDWwqqghrGpJT4VQ_hT_39OHNHggF3RRakSSmvHL97wBjOSJT55dQN12xRRTDyMV; HttpOnly; SameSite=None; Secure; Path=/; Domain=createlouisville.org; Expires=Mon, 17 Aug 2026 09:33:46 GMT\r\ncf-ray: a2c781e9beae76ef-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"rGFmOK4hWr7Z2eqsd3ry87mo2l8.BSIN44scJC_jWKY-1786957426.192035-1.0.1.1-eqNAwdkM8sHTwHgf5gs4ktMR6R14YlNyLIpXUFqgrNJTHWc1ob0rxzjUqI7btXWNJDWwqqghrGpJT4VQ_hT_39OHNHggF3RRakSSmvHL97wBjOSJT55dQN12xRRTDyMV","quoted":false,"path":"/","domain":"createlouisville.org","expires":"2026-08-17T09:33:46Z","raw_expires":"Mon, 17 Aug 2026 09:33:46 GMT","max_age":0,"secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=rGFmOK4hWr7Z2eqsd3ry87mo2l8.BSIN44scJC_jWKY-1786957426.192035-1.0.1.1-eqNAwdkM8sHTwHgf5gs4ktMR6R14YlNyLIpXUFqgrNJTHWc1ob0rxzjUqI7btXWNJDWwqqghrGpJT4VQ_hT_39OHNHggF3RRakSSmvHL97wBjOSJT55dQN12xRRTDyMV; HttpOnly; SameSite=None; Secure; Path=/; Domain=createlouisville.org; Expires=Mon, 17 Aug 2026 09:33:46 GMT"}],"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":1101,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T11:42:41.491216Z","times_seen":17936532,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://codedetrichelattaquedeszombieroblox.blogspot.com/","date":"2026-08-17T09:03:46.219Z","timestamp":1786957426219,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://codedetrichelattaquedeszombieroblox.blogspot.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 13 Aug 2026 10:17:38 GMT\r\nexpires: Fri, 13 Aug 2027 10:17:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 341168\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":43949,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-08-17T11:41:02.740768Z","times_seen":264918,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lh3.googleusercontent.com/3Xe9tFr3J8Z7AUOSm42Qu7hFKrVBKFVGSeeJTvS008KLG8LygEwo0JXCcto_W8hzr3U=s72-c-h500","fqdn":"lh3.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.178.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://codedetrichelattaquedeszombieroblox.blogspot.com/","date":"2026-08-17T09:03:34.425Z","timestamp":1786957414425,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:55 GMT","end":"Wed, 28 Oct 2026 20:43:54 GMT"},"fingerprint":{"sha1":"95:6D:D6:E8:EA:27:36:99:96:C8:37:25:61:78:95:F0:BC:6E:46:2D","sha256":"8F:F4:8A:1B:BB:05:CC:8F:B6:25:25:33:E8:DB:2A:83:0B:16:55:83:6D:52:5E:68:33:FC:CB:92:F2:D3:7D:C6"}}},"request":{"raw":"GET /3Xe9tFr3J8Z7AUOSm42Qu7hFKrVBKFVGSeeJTvS008KLG8LygEwo0JXCcto_W8hzr3U=s72-c-h500 HTTP/1.1\r\nHost: lh3.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://codedetrichelattaquedeszombieroblox.blogspot.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/jpeg\r\ncross-origin-resource-policy: cross-origin\r\nvary: Origin\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: Content-Length\r\netag: \"v1\"\r\nexpires: Tue, 18 Aug 2026 09:03:34 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"unnamed.jpg\"\r\nx-content-type-options: nosniff\r\ndate: Mon, 17 Aug 2026 09:03:34 GMT\r\nserver: fife\r\ncontent-length: 64236\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":64236,"size_decoded":64799,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 500x500, components 3","md5":"2c9977bac55826a09f137ae3cf756e71","sha1":"aaf0d810e0530bcd9738f8a159df6b0b918553f6","sha256":"752ae1e1616d0f1b3ba7189a7830e9319466e38be070e274e3285193c676b126","sha512":"d392107ffbfa6d3e2408623d4df792e84c52f19ffcff634d9c514e5d245b3b751b82f755421e8196106093c473b2a4b3a22ce1a19656b51d1276ec3a3f4999ad","ssdeep":"1536:ol6+SEDUGZSORe+mW3OuCvnldN4U5jxASt29Pt0S1Qa9:olXS4CoOuCPdA6cPiCF","tlshash":"e853f19126bace7fd63087759e892605674b24bdb31d1bb6b9d7fa2fd102318d48f400","first_seen":"2026-07-21T21:17:10.958662Z","last_seen":"2026-08-17T09:04:20.125192Z","times_seen":3,"resource_available":false,"data":null}},"time_used":414,"timings":{"blocked":161,"dns":0,"connect":17,"send":0,"wait":181,"receive":21,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ytimg.com/vi/ACAzBLnEWbk/default.jpg","fqdn":"i.ytimg.com","domain":"ytimg.com","tld":"com"},"ip":{"addr":"142.250.178.118","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://codedetrichelattaquedeszombieroblox.blogspot.com/","date":"2026-08-17T09:03:41.204Z","timestamp":1786957421204,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgestatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:42:12 GMT","end":"Wed, 28 Oct 2026 20:42:11 GMT"},"fingerprint":{"sha1":"04:97:82:6E:6F:83:BA:65:6C:F8:A1:6F:2B:13:CF:40:80:F6:0F:22","sha256":"BF:31:32:75:15:2D:DC:A4:CA:A8:6C:51:A2:83:2A:5B:FB:7D:1B:BB:B2:48:F1:1C:4D:15:76:8A:B3:9F:0F:31"}}},"request":{"raw":"GET /vi/ACAzBLnEWbk/default.jpg HTTP/1.1\r\nHost: i.ytimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://codedetrichelattaquedeszombieroblox.blogspot.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-type: image/jpeg\r\ndate: Mon, 17 Aug 2026 09:03:41 GMT\r\nexpires: Mon, 17 Aug 2026 09:04:11 GMT\r\ncache-control: public, max-age=30\r\nx-content-type-options: nosniff\r\nserver: sffe\r\ncontent-length: 1097\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":1097,"size_decoded":1497,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 120x90, components 3","md5":"e2ddfee11ae7edcae257da47f3a78a70","sha1":"6e902fa6302eb30cd204579bca6a59b37233e262","sha256":"20e9aab22032d85684d7d916a1013f7c577a132a5b10ea3fd3578e8d0b28a711","sha512":"c97040681510ad0184ccf903708ca9edd0a6b49dfef62c0d8a569425de60c8087637f6510fc9bda938d323b430590663467b140ab31f2a8ed42c296ae566f718","ssdeep":"","tlshash":"5d113ee6ba6a46bbc82203b0973103f3c7521ea7408a627526c8053238e9b8ba810825","first_seen":"2023-04-05T13:42:35Z","last_seen":"2026-08-17T09:04:20.130825Z","times_seen":6286,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spendsdetachment.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.show-creative1.com%2Fsb%2Finterstitial%2Futility%2Fdefault%2Fblog%2Fflip_icon_fullpage%2Fmar24%2F4%2Findex.html\u0026l=1417\u0026fd=517","fqdn":"spendsdetachment.com","domain":"spendsdetachment.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://codedetrichelattaquedeszombieroblox.blogspot.com/","date":"2026-08-17T09:03:43.693Z","timestamp":1786957423693,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"spendsdetachment.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 02:47:50 GMT","end":"Fri, 25 Sep 2026 02:47:49 GMT"},"fingerprint":{"sha1":"ED:7A:AE:D7:41:6B:59:34:BC:24:1A:71:55:02:F6:3E:BB:AB:82:0B","sha256":"E0:B2:A3:F1:B9:7C:A9:81:4F:7A:12:BA:2B:56:9A:DB:6D:7F:DC:37:71:1C:4D:EA:08:FB:A8:46:A6:C3:D1:53"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.show-creative1.com%2Fsb%2Finterstitial%2Futility%2Fdefault%2Fblog%2Fflip_icon_fullpage%2Fmar24%2F4%2Findex.html\u0026l=1417\u0026fd=517 HTTP/1.1\r\nHost: spendsdetachment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://codedetrichelattaquedeszombieroblox.blogspot.com/\r\nCookie: uid_id2=51d37b75-bb9e-4afa-8055-4f4d0beef1d1:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl26582471=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Mon, 17 Aug 2026 09:03:43 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: Sec-Ch-Ua-Mobile, X-Device-User-Agent, X-Ucbrowser-Device-Ua, Sec-Ch-Ua-Platformuser-Agent, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Ua-Platform, Device-Stock-Ua, X-Operamini-Phone-Ua, User-Agent, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua, Sec-Ch-Ua-Full-Version, Sec-Ch-Ua-Model\r\nHost: spendsdetachment.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":802,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T11:42:41.491216Z","times_seen":17936532,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"spendsdetachment.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"spendsdetachment.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portalfluently.com/sfp.js","fqdn":"portalfluently.com","domain":"portalfluently.com","tld":"com"},"ip":{"addr":"23.111.84.116","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://codedetrichelattaquedeszombieroblox.blogspot.com/","date":"2026-08-17T09:03:43.878Z","timestamp":1786957423878,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"portalfluently.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Jun 2026 10:51:11 GMT","end":"Wed, 16 Sep 2026 10:51:10 GMT"},"fingerprint":{"sha1":"4C:59:13:2E:71:EC:2C:13:DB:DC:E0:9C:09:5F:B6:92:AE:E0:AE:1B","sha256":"7B:33:44:1A:37:E0:26:00:C9:1A:0C:93:61:FF:49:14:7B:7F:82:27:76:99:C7:FE:74:D6:43:5A:20:70:42:F4"}}},"request":{"raw":"GET /sfp.js HTTP/1.1\r\nHost: portalfluently.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://codedetrichelattaquedeszombieroblox.blogspot.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Mon, 17 Aug 2026 09:03:43 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\nx-envoy-upstream-service-time: 1\r\nHost: portalfluently.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 300e048a3f51c76ac5299f40197bcede\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":85379,"size_decoded":31089,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-08-17T09:05:29.410793Z","times_seen":26755,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"portalfluently.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"createlouisville.org/pixel/sbls?bv=\u0026tmpl=942\u0026u=https%3A%2F%2Fcdn.redgarto.com%2Fsb%2Finterstitial%2Futility%2Fdefault%2Fblog%2Fflip_icon_fullpage%2Fmar24%2F4%2Fjs%2Fscript.js\u0026l=397\u0026fd=516","fqdn":"createlouisville.org","domain":"createlouisville.org","tld":"org"},"ip":{"addr":"104.21.82.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://codedetrichelattaquedeszombieroblox.blogspot.com/","date":"2026-08-17T09:03:44.213Z","timestamp":1786957424213,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"createlouisville.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 13:27:52 GMT","end":"Mon, 28 Sep 2026 14:27:43 GMT"},"fingerprint":{"sha1":"2D:37:E6:26:86:DD:C7:63:98:BA:52:2A:97:8E:4F:F2:DD:7B:2D:05","sha256":"23:6E:87:DD:91:58:54:57:87:1C:E8:C2:31:3D:17:3D:A4:68:F2:7B:F6:AA:0E:FC:74:94:08:04:E2:2B:5C:AC"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=942\u0026u=https%3A%2F%2Fcdn.redgarto.com%2Fsb%2Finterstitial%2Futility%2Fdefault%2Fblog%2Fflip_icon_fullpage%2Fmar24%2F4%2Fjs%2Fscript.js\u0026l=397\u0026fd=516 HTTP/1.1\r\nHost: createlouisville.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://codedetrichelattaquedeszombieroblox.blogspot.com/\r\nCookie: uidm=01a00ef6-64a0-7ebf-aa1c-809fdb936315_1; __cf_bm=PKc27USQADFY1iq5UAKPamMDsc2S6xYS4Jp9gXlecCw-1786957423.7305145-1.0.1.1-GMpPhNHSFnqKGUfpRri8PfQL89cXFB7KhTkvW.kQzpie0kojjuk48wBsOVv1LRI46hLbK0_qy8EcqDZ.tEjm.HxpVGDG5uKWvcWINnBn4kxhSt7EcQ.0q9JUaTpJz0vf\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 17 Aug 2026 09:03:44 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\naccept-ch: Sec-Ch-Ua-Model, Sec-Ch-Ua-Mobile, Device-Stock-Ua, X-Device-User-Agent, X-Operamini-Phone-Ua, X-Ucbrowser-Device-Ua, User-Agent, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Platform, Sec-Ch-Ua, Sec-Ch-Ua-Platformuser-Agent, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Ua-Full-Version\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\naccess-control-expose-headers: Content-Length,Content-Range\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a2c781dd4e5276ef-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":820,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T11:42:41.491216Z","times_seen":17936532,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ytimg.com/vi/WQJVlebVN68/default.jpg","fqdn":"i.ytimg.com","domain":"ytimg.com","tld":"com"},"ip":{"addr":"142.250.178.118","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://codedetrichelattaquedeszombieroblox.blogspot.com/","date":"2026-08-17T09:03:41.203Z","timestamp":1786957421203,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgestatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:42:12 GMT","end":"Wed, 28 Oct 2026 20:42:11 GMT"},"fingerprint":{"sha1":"04:97:82:6E:6F:83:BA:65:6C:F8:A1:6F:2B:13:CF:40:80:F6:0F:22","sha256":"BF:31:32:75:15:2D:DC:A4:CA:A8:6C:51:A2:83:2A:5B:FB:7D:1B:BB:B2:48:F1:1C:4D:15:76:8A:B3:9F:0F:31"}}},"request":{"raw":"GET /vi/WQJVlebVN68/default.jpg HTTP/1.1\r\nHost: i.ytimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://codedetrichelattaquedeszombieroblox.blogspot.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-type: image/jpeg\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 3716\r\ndate: Mon, 17 Aug 2026 09:03:41 GMT\r\nexpires: Mon, 17 Aug 2026 11:03:41 GMT\r\ncache-control: public, max-age=7200\r\netag: \"1595151792\"\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3716,"size_decoded":4357,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 120x90, components 3","md5":"6e6658dde711b9e297583fc94285cecc","sha1":"08f878b68574a00e9bee89aee8e3abef8e0dd310","sha256":"b501dc89bb675d98b743cdd6c1502280362cfedeb72e364728639541fe90c42e","sha512":"098013ab9edfd6571a3823500697f82709c6c7a4bc3ff2f7a81c73b2fc8edc2643a2a84e5f934827227ca159948a7f26647aa17c906271f021ea7861dde565c4","ssdeep":"","tlshash":"dd717dadeb50a8f9e40402f6b23da20b9364f74198f7d89b114d189b1d248b10219e2b","first_seen":"2026-06-21T03:53:24.783465Z","last_seen":"2026-08-17T09:04:20.133892Z","times_seen":5,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portalfluently.com/sfp.js","fqdn":"portalfluently.com","domain":"portalfluently.com","tld":"com"},"ip":{"addr":"23.111.84.116","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://codedetrichelattaquedeszombieroblox.blogspot.com/","date":"2026-08-17T09:03:42.173Z","timestamp":1786957422173,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"portalfluently.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Jun 2026 10:51:11 GMT","end":"Wed, 16 Sep 2026 10:51:10 GMT"},"fingerprint":{"sha1":"4C:59:13:2E:71:EC:2C:13:DB:DC:E0:9C:09:5F:B6:92:AE:E0:AE:1B","sha256":"7B:33:44:1A:37:E0:26:00:C9:1A:0C:93:61:FF:49:14:7B:7F:82:27:76:99:C7:FE:74:D6:43:5A:20:70:42:F4"}}},"request":{"raw":"GET /sfp.js HTTP/1.1\r\nHost: portalfluently.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://codedetrichelattaquedeszombieroblox.blogspot.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Mon, 17 Aug 2026 09:03:42 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\nx-envoy-upstream-service-time: 2\r\nHost: portalfluently.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: ed40f9da4294dc720ac2afe634f4a525\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":85379,"size_decoded":31089,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-08-17T09:05:29.410793Z","times_seen":26755,"resource_available":true,"data":null}},"time_used":168,"timings":{"blocked":0,"dns":3,"connect":19,"send":0,"wait":23,"receive":56,"ssl":68},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"portalfluently.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"protrafficinspector.com/stats","fqdn":"protrafficinspector.com","domain":"protrafficinspector.com","tld":"com"},"ip":{"addr":"18.196.51.86","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://codedetrichelattaquedeszombieroblox.blogspot.com/","date":"2026-08-17T09:03:42.176Z","timestamp":1786957422176,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"protrafficinspector.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 26 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A5:A0:EB:57:26:41:24:03:DD:F3:2D:91:FB:6B:49:B6:53:8B:5F:86","sha256":"82:7E:C7:50:5F:EC:61:E0:5F:7F:ED:2E:10:87:9B:31:A9:8F:4B:DF:E8:99:CC:2E:A1:13:31:E7:45:CE:89:25"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: protrafficinspector.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://codedetrichelattaquedeszombieroblox.blogspot.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://codedetrichelattaquedeszombieroblox.blogspot.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 17 Aug 2026 09:03:42 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://codedetrichelattaquedeszombieroblox.blogspot.com\r\nset-cookie: uid_id2=51d37b75-bb9e-4afa-8055-4f4d0beef1d1:2:1; Path=/; Expires=Thu, 14 Aug 2036 09:03:42 GMT; Secure; SameSite=None\r\nvary: Origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"uid_id2","value":"51d37b75-bb9e-4afa-8055-4f4d0beef1d1:2:1","quoted":false,"path":"/","expires":"2036-08-14T09:03:42Z","raw_expires":"Thu, 14 Aug 2036 09:03:42 GMT","max_age":0,"secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uid_id2=51d37b75-bb9e-4afa-8055-4f4d0beef1d1:2:1; Path=/; Expires=Thu, 14 Aug 2036 09:03:42 GMT; Secure; SameSite=None"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40,"size_decoded":551,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"71eefbfebb018e72c7619bccac82932c","sha1":"38270c032491f29ac398fe0a0c4f8ae225466b32","sha256":"dbf2246887c2e9a22418b237bed3a98112667b0fa7c6e09677e17c9c9490df0b","sha512":"b11e4c7990c2e1e5a3c268289db89379966ff4465b08893ea0002695e2e21f9ee19273cbe97a6cdaa3ee470615b1c9b2aeee2abf38d53077a42561bedf1891eb","ssdeep":"","tlshash":"d39004101531f5d04c34100403c574fd10540d7d0c4f01d004c1500310d4c140450453","first_seen":"2026-08-17T09:04:20.135967Z","last_seen":"2026-08-17T09:04:20.135967Z","times_seen":1,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":0,"dns":4,"connect":24,"send":0,"wait":25,"receive":0,"ssl":75},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portalfluently.com/sfp.js","fqdn":"portalfluently.com","domain":"portalfluently.com","tld":"com"},"ip":{"addr":"23.111.84.116","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://codedetrichelattaquedeszombieroblox.blogspot.com/","date":"2026-08-17T09:03:42.494Z","timestamp":1786957422494,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"portalfluently.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Jun 2026 10:51:11 GMT","end":"Wed, 16 Sep 2026 10:51:10 GMT"},"fingerprint":{"sha1":"4C:59:13:2E:71:EC:2C:13:DB:DC:E0:9C:09:5F:B6:92:AE:E0:AE:1B","sha256":"7B:33:44:1A:37:E0:26:00:C9:1A:0C:93:61:FF:49:14:7B:7F:82:27:76:99:C7:FE:74:D6:43:5A:20:70:42:F4"}}},"request":{"raw":"GET /sfp.js HTTP/1.1\r\nHost: portalfluently.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://codedetrichelattaquedeszombieroblox.blogspot.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Mon, 17 Aug 2026 09:03:42 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\nx-envoy-upstream-service-time: 2\r\nHost: portalfluently.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: c86b679e584647ea2fb8b9bb0318f098\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":85379,"size_decoded":31089,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-08-17T09:05:29.410793Z","times_seen":26755,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"portalfluently.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"immigrationacre.com/6dd5e3d7ac37d33b5abc87810f6ac7f3/invoke.js","fqdn":"immigrationacre.com","domain":"immigrationacre.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://codedetrichelattaquedeszombieroblox.blogspot.com/","date":"2026-08-17T09:03:43.599Z","timestamp":1786957423599,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"immigrationacre.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 23:39:43 GMT","end":"Mon, 19 Oct 2026 23:39:42 GMT"},"fingerprint":{"sha1":"C1:91:2C:A2:09:50:EA:46:73:30:29:21:F8:00:6B:34:D6:E7:22:0C","sha256":"16:2D:04:C4:AB:1A:73:B4:E0:46:E9:09:AC:29:97:4F:4E:E1:BE:B2:16:19:EE:25:5A:5A:47:51:FE:36:8B:2B"}}},"request":{"raw":"GET /6dd5e3d7ac37d33b5abc87810f6ac7f3/invoke.js HTTP/1.1\r\nHost: immigrationacre.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://codedetrichelattaquedeszombieroblox.blogspot.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Mon, 17 Aug 2026 09:03:43 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\naccept-ch: Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Platform,Device-Stock-Ua,X-Device-User-Agent,X-Operamini-Phone-Ua,Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version-List\r\naccess-control-allow-origin: *\r\ncontent-encoding: zstd\r\nset-cookie: pip_3124968e5a0bdea9c6cebdbc72b5c4e0=1; Path=/; Expires=Tue, 18 Aug 2026 09:03:43 GMT; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nx-envoy-upstream-service-time: 8\r\nHost: immigrationacre.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: f891c53582dc6a40d2c22b8ecde8c464\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":[{"name":"pip_3124968e5a0bdea9c6cebdbc72b5c4e0","value":"1","quoted":false,"path":"/","expires":"2026-08-18T09:03:43Z","raw_expires":"Tue, 18 Aug 2026 09:03:43 GMT","max_age":0,"secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"pip_3124968e5a0bdea9c6cebdbc72b5c4e0=1; Path=/; Expires=Tue, 18 Aug 2026 09:03:43 GMT; Secure; SameSite=None"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35514,"size_decoded":16309,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (35514), with no line terminators","md5":"ba8f85447667049c85c1f77d804636c3","sha1":"8a4fda4435774f44b11f2f2ef0e85b3369dcad1d","sha256":"f51a7730c93c02232cb21eaaabcece8bde7c5c7fafb2c254e504219185ea157e","sha512":"6c42e3b3c6be9e1524d7330e4e838031be9152218987688dfadf2f092fe1af2c201b4350ead424e6896ce79103e31fbf741e90601198c1b808f56697c25d64d6","ssdeep":"768:y+QGHr9qbxrW34GKDLr5IzOVeYcxPy+XuYE+5d/raP4QEAG:Jy04GKPr5ISVcwA7n5dzatEAG","tlshash":"e8f2d5c83fe1d06f17b664a3332be52ba05a1e41578de8a8e877b41ce904f15f87a160","first_seen":"2026-08-17T09:04:20.140333Z","last_seen":"2026-08-17T09:04:20.140333Z","times_seen":1,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"immigrationacre.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"immigrationacre.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.redgarto.com/sb/interstitial/utility/default/blog/flip_icon_fullpage/mar24/4/img/icon.jpg","fqdn":"cdn.redgarto.com","domain":"redgarto.com","tld":"com"},"ip":{"addr":"172.67.151.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://codedetrichelattaquedeszombieroblox.blogspot.com/","date":"2026-08-17T09:03:43.826Z","timestamp":1786957423826,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redgarto.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 14:01:04 GMT","end":"Thu, 05 Nov 2026 15:00:52 GMT"},"fingerprint":{"sha1":"7C:BC:79:D9:68:83:B8:37:9E:CC:BA:8F:27:B7:E6:30:D0:CC:5C:D7","sha256":"C7:1A:1B:B8:98:AD:22:5C:50:DD:66:BC:40:9A:82:01:4C:2B:75:DE:91:17:5D:48:DB:0C:B0:5A:69:6E:4E:9E"}}},"request":{"raw":"GET /sb/interstitial/utility/default/blog/flip_icon_fullpage/mar24/4/img/icon.jpg HTTP/1.1\r\nHost: cdn.redgarto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 17 Aug 2026 09:03:43 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 05 Mar 2024 08:56:11 GMT\r\npriority: u=5,i\r\netag: \"65e6de2b-ed67\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\naccept-ranges: bytes\r\nage: 1415271\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nl3pDDNwyvPerktmRYAcFiRVjKGgsg9wcdeqTkdBPo%2BQOIjSrW8fDph9e%2F0Zm%2Boeuds4nMler8T1C3cSEoOYJFCPDyLtNwJgIAPbVoMnAP5R6zi6xDdqj0uZ6CInswUGY7Mt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2c781daed2d5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 60775\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60775,"size_decoded":61597,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=821, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=1232], progressive, precision 8, 500x333, components 3","md5":"ac0cd535f3d65fc693c5ebd29e04654f","sha1":"e83c6f5b3b02ce4e7339141d3dca6c070170c8f4","sha256":"25a24801fb185bed5d709d9cb3e483a6cdfb86229aaa1406cbe04fa9b2c794e1","sha512":"867301efa6af9b2ffc71e8848ada5f3999259503adcce4644eec3447187cce0f48ce88fd0b6bda37f5de07beae6c6b28df44d21f69e4bd0ab318b4aaa27234ed","ssdeep":"1536:enWyNTKuAswh+zNPTmKguaV7J4NMCreq0t:enWqKuAZmNPT2hy1rF0t","tlshash":"3053e12663a0cf13e2d56179d1b8d3a1e723bdd145b313827a9c2cc23bbd6938d09663","first_seen":"2025-11-17T23:38:06.540512Z","last_seen":"2026-08-17T09:04:20.142428Z","times_seen":115,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.nresystems.com/img.gif?h1id=1\u0026h3id=0\u0026key=af25da8381e0bd0494ba4018c76898a2\u0026uuid=01a00ef6-64d8-76a5-957b-90106a8fea02","fqdn":"static.nresystems.com","domain":"nresystems.com","tld":"com"},"ip":{"addr":"104.18.19.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://codedetrichelattaquedeszombieroblox.blogspot.com/","date":"2026-08-17T09:03:43.881Z","timestamp":1786957423881,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /img.gif?h1id=1\u0026h3id=0\u0026key=af25da8381e0bd0494ba4018c76898a2\u0026uuid=01a00ef6-64d8-76a5-957b-90106a8fea02 HTTP/1.1\r\nHost: static.nresystems.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://codedetrichelattaquedeszombieroblox.blogspot.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 17 Aug 2026 09:03:44 GMT\r\ncontent-type: image/gif\r\ncontent-length: 7\r\nserver: cloudflare\r\nx-envoy-upstream-service-time: 6\r\nexpires: Mon, 17 Aug 2026 13:03:43 GMT\r\ncache-control: public, max-age=14400\r\nvary: Origin\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,X-Forwarded-For,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1728000\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nset-cookie: uid_id2=01a00ef6-64d8-76a5-957b-90106a8fea02; Path=/; Expires=Thu, 14 Aug 2036 09:03:43 GMT; Secure; SameSite=None\n__cf_bm=Ppa8pwDvWZ.An.F_ROipqH_Q5WsaggVLGI7IZqnAHDg-1786957423.8804245-1.0.1.1-4UypgWG_xqwjD6sNICqv6f6kYwCAo9W8AWAA2AKuLUciSmmuEkTcgibw68VQjalRFSgpIxjcLc_VWohUF9mPbBMJ7ts9_9_trV.Gft2PibVevgGABu37q07Q_pdm5OIM; HttpOnly; SameSite=None; Secure; Path=/; Domain=nresystems.com; Expires=Mon, 17 Aug 2026 09:33:43 GMT\r\ncf-cache-status: BYPASS\r\ncf-ray: a2c781db3b11b51d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"uid_id2","value":"01a00ef6-64d8-76a5-957b-90106a8fea02","quoted":false,"path":"/","expires":"2036-08-14T09:03:43Z","raw_expires":"Thu, 14 Aug 2036 09:03:43 GMT","max_age":0,"secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uid_id2=01a00ef6-64d8-76a5-957b-90106a8fea02; Path=/; Expires=Thu, 14 Aug 2036 09:03:43 GMT; Secure; SameSite=None"},{"name":"__cf_bm","value":"Ppa8pwDvWZ.An.F_ROipqH_Q5WsaggVLGI7IZqnAHDg-1786957423.8804245-1.0.1.1-4UypgWG_xqwjD6sNICqv6f6kYwCAo9W8AWAA2AKuLUciSmmuEkTcgibw68VQjalRFSgpIxjcLc_VWohUF9mPbBMJ7ts9_9_trV.Gft2PibVevgGABu37q07Q_pdm5OIM","quoted":false,"path":"/","domain":"nresystems.com","expires":"2026-08-17T09:33:43Z","raw_expires":"Mon, 17 Aug 2026 09:33:43 GMT","max_age":0,"secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=Ppa8pwDvWZ.An.F_ROipqH_Q5WsaggVLGI7IZqnAHDg-1786957423.8804245-1.0.1.1-4UypgWG_xqwjD6sNICqv6f6kYwCAo9W8AWAA2AKuLUciSmmuEkTcgibw68VQjalRFSgpIxjcLc_VWohUF9mPbBMJ7ts9_9_trV.Gft2PibVevgGABu37q07Q_pdm5OIM; HttpOnly; SameSite=None; Secure; Path=/; Domain=nresystems.com; Expires=Mon, 17 Aug 2026 09:33:43 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T11:42:41.491216Z","times_seen":17936532,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"createlouisville.org/3/af25da8381e0bd0494ba4018c76898a2?uidm=01a00ef6-64d8-76a5-957b-90106a8fea02_1","fqdn":"createlouisville.org","domain":"createlouisville.org","tld":"org"},"ip":{"addr":"104.21.82.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://codedetrichelattaquedeszombieroblox.blogspot.com/","date":"2026-08-17T09:03:43.883Z","timestamp":1786957423883,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"createlouisville.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 13:27:52 GMT","end":"Mon, 28 Sep 2026 14:27:43 GMT"},"fingerprint":{"sha1":"2D:37:E6:26:86:DD:C7:63:98:BA:52:2A:97:8E:4F:F2:DD:7B:2D:05","sha256":"23:6E:87:DD:91:58:54:57:87:1C:E8:C2:31:3D:17:3D:A4:68:F2:7B:F6:AA:0E:FC:74:94:08:04:E2:2B:5C:AC"}}},"request":{"raw":"GET /3/af25da8381e0bd0494ba4018c76898a2?uidm=01a00ef6-64d8-76a5-957b-90106a8fea02_1 HTTP/1.1\r\nHost: createlouisville.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://codedetrichelattaquedeszombieroblox.blogspot.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://codedetrichelattaquedeszombieroblox.blogspot.com/\r\nCookie: uidm=01a00ef6-64a0-7ebf-aa1c-809fdb936315_1; __cf_bm=PKc27USQADFY1iq5UAKPamMDsc2S6xYS4Jp9gXlecCw-1786957423.7305145-1.0.1.1-GMpPhNHSFnqKGUfpRri8PfQL89cXFB7KhTkvW.kQzpie0kojjuk48wBsOVv1LRI46hLbK0_qy8EcqDZ.tEjm.HxpVGDG5uKWvcWINnBn4kxhSt7EcQ.0q9JUaTpJz0vf\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 17 Aug 2026 09:03:43 GMT\r\ncontent-type: text/plain\r\nserver: cloudflare\r\naccept-ch: Sec-Ch-Ua-Model,X-Device-User-Agent,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Mobile,Device-Stock-Ua,X-Operamini-Phone-Ua,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Platform\r\nvary: Accept-Encoding, Origin\r\nx-envoy-upstream-service-time: 5\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: no-cache, max-age=0, private, no-cache\r\nx-request-id: bda3b4d8286bd4a000330edc0fcad3c1\r\npragma: no-cache\r\naccess-control-allow-origin: https://codedetrichelattaquedeszombieroblox.blogspot.com\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,X-Forwarded-For,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1728000\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: gzip\r\ncf-ray: a2c781db482176ef-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":76,"size_decoded":1240,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"b642f1588d7ed8a10fef44aced84ba89","sha1":"987464384c07d6450cf388e6641ae3b891bdff12","sha256":"e33decbb6b267efe934d2f6a664807048c45a5120f1903a144fcac1164643765","sha512":"e8b0993b1b8b37a511bf10a91aada6b31d7d0c0bc361200940f13ddce6eaf8ef96c254e18daea901c1a1e2784754b4662e6e4d89f969a97d1e065810ebc673b4","ssdeep":"","tlshash":"e1a0220838afe00efb80c0a0b2032eca80030acc00e33f00feb000a238c0a2cb0e3308","first_seen":"2026-08-17T09:04:20.144198Z","last_seen":"2026-08-17T09:04:20.144198Z","times_seen":1,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"codedetrichelattaquedeszombieroblox.blogspot.com/","fqdn":"codedetrichelattaquedeszombieroblox.blogspot.com","domain":"codedetrichelattaquedeszombieroblox.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.250.178.65","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-17T09:03:33.191Z","timestamp":1786957413191,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.blogspot.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:41 GMT","end":"Wed, 28 Oct 2026 20:43:40 GMT"},"fingerprint":{"sha1":"A8:10:55:6D:0C:33:69:E1:2E:38:42:97:31:C0:28:2B:E7:23:20:A8","sha256":"B5:46:F4:44:91:12:83:39:8E:6A:F3:61:0F:6D:A3:59:87:90:86:9C:5B:AE:7A:9C:80:AD:04:09:D8:80:20:BF"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: codedetrichelattaquedeszombieroblox.blogspot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html; charset=UTF-8\r\nexpires: Mon, 17 Aug 2026 09:03:34 GMT\r\ndate: Mon, 17 Aug 2026 09:03:34 GMT\r\ncache-control: private, max-age=0\r\nlast-modified: Fri, 08 Nov 2024 14:58:19 GMT\r\netag: W/\"6f01cb21569e9af01c6dd147bd22680bed0949436a3ec720339dae4a9ab79658\"\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 49688\r\nserver: GSE\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"Blogger","description":"Blogger is a blog-publishing service that allows multi-user blogs with time-stamped entries.","website":"https://www.blogger.com","common_platform_enumeration":"","icon":"Blogger.png","categories":["Blogs"]},{"name":"Python","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]}],"data":{"size":172307,"size_decoded":50180,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (32023)","md5":"4d130e72b24993e2699212fe50291789","sha1":"b485c6ffd1572121b93fa4cdfa191133d18cca7e","sha256":"483315a6cb8ff14270601b3573d49f02098694c82502e944217f2f17c861a56b","sha512":"81b37f7d1086b2746e23d080da30fa9c227df25e4309e26d6924284f5940e581ed8b3d71175d9e3738fe4ca33046f3e7b01460d6565a1e05a7f0483af6c6af26","ssdeep":"3072:riJA6p9X47UL5uxNL/4Cr3lOQc+pVPldzjvir3F9Ro:e9X47A5uxNLQCTsM","tlshash":"83f31affb2d1b01166b310f92427764cf47a481a940a90d0f0adf7a96ed4e4a5137fae","first_seen":"2026-08-17T09:04:20.145915Z","last_seen":"2026-08-17T09:04:20.145915Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1122,"timings":{"blocked":-1,"dns":35,"connect":16,"send":0,"wait":882,"receive":156,"ssl":33},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"codedetrichelattaquedeszombieroblox.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-17","alert":"Phishing Block","trigger":"codedetrichelattaquedeszombieroblox.blogspot.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"codedetrichelattaquedeszombieroblox.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"links.mtevor.com/api.php","fqdn":"links.mtevor.com","domain":"mtevor.com","tld":"com"},"ip":{"addr":"104.21.21.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://codedetrichelattaquedeszombieroblox.blogspot.com/","date":"2026-08-17T09:03:34.634Z","timestamp":1786957414634,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mtevor.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Jul 2026 01:59:40 GMT","end":"Thu, 22 Oct 2026 02:56:00 GMT"},"fingerprint":{"sha1":"6A:F3:44:7E:EF:0B:6B:E8:C9:51:64:F7:C9:1B:00:B5:0A:F7:9D:69","sha256":"93:CE:02:3E:CE:C7:73:B5:7A:A0:85:75:C7:D4:58:D1:A5:BD:16:F8:CD:79:D6:E9:CE:3A:3C:2A:F1:23:16:79"}}},"request":{"raw":"GET /api.php HTTP/1.1\r\nHost: links.mtevor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://codedetrichelattaquedeszombieroblox.blogspot.com/\r\nOrigin: https://codedetrichelattaquedeszombieroblox.blogspot.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 17 Aug 2026 09:03:34 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tVJZjik0V3wo9n0E36QG9NRGeDDSvzV%2FS%2FHfywB0rKcgmFVK%2F7vGGxjLp%2Frp42dXwgpu88giJP3td4Bpkspf8iOef7IxpbPrKXwRkenjWTe6A9A6potGIPQA4V94e2X9OdEt\"}]}\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2c781a19f4d2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":135,"size_decoded":727,"mime_type":"application/json","magic":"JSON text data","md5":"8d2aef117dde72e5df27ca7f2bf9fb8a","sha1":"901c07ee05420e2d1ab13abf006ef4519a6e04da","sha256":"deadf2120dd8127b870ddd23d782cf8ba983a8bb1c11f8345b1b29a9a5774843","sha512":"14f08097c7e59459f8227bfb6d3be2800dcd09e6d0ba6877f2c0d775fa85d60527b49380fdfb21b67c13b84f957d38f4ed88c4aa4121aa7c4eab6197f3a299b7","ssdeep":"","tlshash":"1ec02b5bde88440a12c840db01f3ed245d0e20442630e005169d84317001bd5f8bcc0b","first_seen":"2026-08-17T09:04:20.14769Z","last_seen":"2026-08-17T09:04:20.14769Z","times_seen":1,"resource_available":false,"data":null}},"time_used":322,"timings":{"blocked":-1,"dns":9,"connect":14,"send":0,"wait":298,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ytimg.com/vi/rWUbmR9EmLU/default.jpg","fqdn":"i.ytimg.com","domain":"ytimg.com","tld":"com"},"ip":{"addr":"142.250.178.118","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://codedetrichelattaquedeszombieroblox.blogspot.com/","date":"2026-08-17T09:03:41.206Z","timestamp":1786957421206,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgestatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:42:12 GMT","end":"Wed, 28 Oct 2026 20:42:11 GMT"},"fingerprint":{"sha1":"04:97:82:6E:6F:83:BA:65:6C:F8:A1:6F:2B:13:CF:40:80:F6:0F:22","sha256":"BF:31:32:75:15:2D:DC:A4:CA:A8:6C:51:A2:83:2A:5B:FB:7D:1B:BB:B2:48:F1:1C:4D:15:76:8A:B3:9F:0F:31"}}},"request":{"raw":"GET /vi/rWUbmR9EmLU/default.jpg HTTP/1.1\r\nHost: i.ytimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://codedetrichelattaquedeszombieroblox.blogspot.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-type: image/jpeg\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 4442\r\ndate: Mon, 17 Aug 2026 09:03:41 GMT\r\nexpires: Mon, 17 Aug 2026 11:03:41 GMT\r\ncache-control: public, max-age=7200\r\netag: \"1567286517\"\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4442,"size_decoded":5083,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 120x90, components 3","md5":"0438866a416ce7488e907488d2be5a36","sha1":"33c558c09f85890e7508fcf89c0c67be00c60f29","sha256":"aa644f79d253c6d69ea2dae4b99c4f0841f1d7a8fd09e0fdd1faa2e8cd5a7890","sha512":"25195dfb9f8fe7db8cff3823d166843c3f7d3381b6c95c5cac0f4640275826f0517be366356dfc7af32823f8a15095b864a9f36968d22ff2e5e6a97be6621097","ssdeep":"96:w19nkllv0jJQXHv6ZNjgtfcnyf81RaFh9H3YmQt:KW+jJ2v6DFnyE1UFhFdQt","tlshash":"d5916cbb76e8c9d7d8fa0f760eb82cb12107af915173779d463a01880deb427455a3a4","first_seen":"2024-02-16T07:59:16Z","last_seen":"2026-08-17T09:04:20.149189Z","times_seen":8,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"createlouisville.org/pixel/sbls?bv=\u0026tmpl=942\u0026u=https%3A%2F%2Fcdn.redgarto.com%2Fsb%2Finterstitial%2Futility%2Fdefault%2Fblog%2Fflip_icon_fullpage%2Fmar24%2F4%2Fcss%2Fstyle.css\u0026l=4763\u0026fd=520","fqdn":"createlouisville.org","domain":"createlouisville.org","tld":"org"},"ip":{"addr":"104.21.82.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://codedetrichelattaquedeszombieroblox.blogspot.com/","date":"2026-08-17T09:03:44.212Z","timestamp":1786957424212,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"createlouisville.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 13:27:52 GMT","end":"Mon, 28 Sep 2026 14:27:43 GMT"},"fingerprint":{"sha1":"2D:37:E6:26:86:DD:C7:63:98:BA:52:2A:97:8E:4F:F2:DD:7B:2D:05","sha256":"23:6E:87:DD:91:58:54:57:87:1C:E8:C2:31:3D:17:3D:A4:68:F2:7B:F6:AA:0E:FC:74:94:08:04:E2:2B:5C:AC"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=942\u0026u=https%3A%2F%2Fcdn.redgarto.com%2Fsb%2Finterstitial%2Futility%2Fdefault%2Fblog%2Fflip_icon_fullpage%2Fmar24%2F4%2Fcss%2Fstyle.css\u0026l=4763\u0026fd=520 HTTP/1.1\r\nHost: createlouisville.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://codedetrichelattaquedeszombieroblox.blogspot.com/\r\nCookie: uidm=01a00ef6-64a0-7ebf-aa1c-809fdb936315_1; __cf_bm=PKc27USQADFY1iq5UAKPamMDsc2S6xYS4Jp9gXlecCw-1786957423.7305145-1.0.1.1-GMpPhNHSFnqKGUfpRri8PfQL89cXFB7KhTkvW.kQzpie0kojjuk48wBsOVv1LRI46hLbK0_qy8EcqDZ.tEjm.HxpVGDG5uKWvcWINnBn4kxhSt7EcQ.0q9JUaTpJz0vf\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 17 Aug 2026 09:03:44 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\naccept-ch: Sec-Ch-Ua, Sec-Ch-Ua-Platformuser-Agent, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Ua-Full-Version, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Model, Sec-Ch-Ua-Mobile, Device-Stock-Ua, User-Agent, Sec-Ch-Ua-Platform-Version, X-Device-User-Agent, X-Operamini-Phone-Ua, X-Ucbrowser-Device-Ua\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\naccess-control-expose-headers: Content-Length,Content-Range\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a2c781dd4e5176ef-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":820,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T11:42:41.491216Z","times_seen":17936532,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://codedetrichelattaquedeszombieroblox.blogspot.com/","date":"2026-08-17T09:03:46.217Z","timestamp":1786957426217,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://codedetrichelattaquedeszombieroblox.blogspot.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 13 Aug 2026 10:17:38 GMT\r\nexpires: Fri, 13 Aug 2027 10:17:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 341168\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":43949,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-08-17T11:41:02.740768Z","times_seen":264918,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhHNMXd9aBpuHMKPwx7hWMBDiGagukB0OpnBIjDXlUHYcb26olVXWzdfHhO8h4Y-Qgbs2Qs_Bb52FDXas1Vmut_XgP93IPNzgTKRphAdiz5kOVtv3t8ts1OAn7uL3N3THZp4Re7_uMCqtc/s1600/hiasan.png","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.178.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://codedetrichelattaquedeszombieroblox.blogspot.com/","date":"2026-08-17T09:03:41.188Z","timestamp":1786957421188,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:55 GMT","end":"Wed, 28 Oct 2026 20:43:54 GMT"},"fingerprint":{"sha1":"95:6D:D6:E8:EA:27:36:99:96:C8:37:25:61:78:95:F0:BC:6E:46:2D","sha256":"8F:F4:8A:1B:BB:05:CC:8F:B6:25:25:33:E8:DB:2A:83:0B:16:55:83:6D:52:5E:68:33:FC:CB:92:F2:D3:7D:C6"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEhHNMXd9aBpuHMKPwx7hWMBDiGagukB0OpnBIjDXlUHYcb26olVXWzdfHhO8h4Y-Qgbs2Qs_Bb52FDXas1Vmut_XgP93IPNzgTKRphAdiz5kOVtv3t8ts1OAn7uL3N3THZp4Re7_uMCqtc/s1600/hiasan.png HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://codedetrichelattaquedeszombieroblox.blogspot.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/png\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"v16d\"\r\nexpires: Tue, 18 Aug 2026 09:03:41 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"hiasan.png\"\r\nx-content-type-options: nosniff\r\ndate: Mon, 17 Aug 2026 09:03:41 GMT\r\nserver: fife\r\ncontent-length: 454\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":454,"size_decoded":895,"mime_type":"image/png","magic":"PNG image data, 945 x 2, 8-bit/color RGBA, non-interlaced","md5":"e5207001ab6b64d8d51e1855c92ed515","sha1":"d2d7ef89e1ac897f8ff9cba97278af6651d4bd3e","sha256":"9f2d5f4166a274291e1a4234d6be39190b270004ef1fc030b358aad5e1bf2978","sha512":"5a1818b87be7cde57ddf5f9e33b8e2dc691462fa0b4502ca6556d178f2e00d78df22cbda5b903eb79e17eda6a287f20b947e30ea7008eb508ee05b8f0165feed","ssdeep":"","tlshash":"e6f0dc83ef90581ce45ce648013789a092ede9e22b228fa4a024e2361cab753c9f1244","first_seen":"2024-05-21T08:41:41Z","last_seen":"2026-08-17T09:04:20.151087Z","times_seen":35,"resource_available":false,"data":null}},"time_used":639,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":639,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adxpy.pages.dev/ads.js","fqdn":"adxpy.pages.dev","domain":"adxpy.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://codedetrichelattaquedeszombieroblox.blogspot.com/","date":"2026-08-17T09:03:41.520Z","timestamp":1786957421520,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adxpy.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 05:18:17 GMT","end":"Fri, 30 Oct 2026 06:16:46 GMT"},"fingerprint":{"sha1":"8D:43:4D:D7:86:01:CA:27:86:FA:7D:C2:CC:D2:28:AA:8B:23:B6:D5","sha256":"7C:CF:37:C6:8E:F4:FA:9D:BD:6F:4B:19:25:E6:79:CA:A5:FA:57:31:AD:F5:49:0E:E8:51:D1:04:35:AE:DC:68"}}},"request":{"raw":"GET /ads.js HTTP/1.1\r\nHost: adxpy.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://codedetrichelattaquedeszombieroblox.blogspot.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 17 Aug 2026 09:03:41 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A%2FyjFak%2FPlg4zi5tjS%2BmlmLENb9VvvypsWMMB2BPQmGuiYJsStwUyPkNI7xsLQ0OkLoyuM2ORxhzAxfm2fd%2F4wHCN4XeAiUmNv%2B3QSmi4GKpsubI5gvKogIbZ0rPtiaVZPs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"1bc4a8b41519c6fae69917cf3ea9f576\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a2c781cc7dd32efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4034,"size_decoded":1926,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"28a8ee5b231d6993efeaeb288506fba6","sha1":"185e282511210752916a8d4fcc28642f02e4dc5e","sha256":"81496c62f33c7090e09cd8ea1d016980fc4432fb6ca00450ccea59b926daa7e1","sha512":"b1cf24abc589692314ada61a5a266b280ce2ad1297f5be58b94ececb90e2d718021795ca3998cb142e5937cff260d4aaeaffe5759bb8e67dff20e76bec939658","ssdeep":"","tlshash":"cb81011920a100651eb7236a7be3625dfba43053b81281a4bdccdb185fb9d1091f7fed","first_seen":"2025-10-25T03:17:17.993778Z","last_seen":"2026-08-17T09:04:20.152829Z","times_seen":416,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"immigrationacre.com/c6/4a/a1/c64aa11db612c16c65959b87a44dac81.js","fqdn":"immigrationacre.com","domain":"immigrationacre.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://codedetrichelattaquedeszombieroblox.blogspot.com/","date":"2026-08-17T09:03:41.598Z","timestamp":1786957421598,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"immigrationacre.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 23:39:43 GMT","end":"Mon, 19 Oct 2026 23:39:42 GMT"},"fingerprint":{"sha1":"C1:91:2C:A2:09:50:EA:46:73:30:29:21:F8:00:6B:34:D6:E7:22:0C","sha256":"16:2D:04:C4:AB:1A:73:B4:E0:46:E9:09:AC:29:97:4F:4E:E1:BE:B2:16:19:EE:25:5A:5A:47:51:FE:36:8B:2B"}}},"request":{"raw":"GET /c6/4a/a1/c64aa11db612c16c65959b87a44dac81.js HTTP/1.1\r\nHost: immigrationacre.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://codedetrichelattaquedeszombieroblox.blogspot.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Mon, 17 Aug 2026 09:03:42 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\naccept-ch: X-Device-User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Mobile,Device-Stock-Ua,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua-Model\r\naccess-control-allow-origin: *\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\nx-envoy-upstream-service-time: 4\r\nHost: immigrationacre.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 0121609c1edfc3b029fe96230908113d\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":67684,"size_decoded":26028,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"c3e272c793657c3ac62c77ef0804d9b7","sha1":"fb587e07aec9262e516e9afabfc6a00e4f4855ac","sha256":"a2ec70ef1905698c8cd2a1a2b22195f305bb523a4a1edfe560e3adc711b61dea","sha512":"c0437487fd4747d577ab1d5f50b8f3b8563f33778a902acb84c2ee0357605740d3eb1ce203fbf932a45ff96f980119fe4c7e05e947e2a2e071e7a7f28ed44045","ssdeep":"1536:Mtv3d1QZ4sIu326JIlHyokfhaGDGvvTZLWc59M3VFqkIi:M1c4PlHyokfhaGDGvbb58b","tlshash":"f563f5c97fa9f53e16c4a07f310da263e01d0c81548de4a4fcb778a4aa99758f8bc572","first_seen":"2026-08-17T09:04:20.153472Z","last_seen":"2026-08-17T09:04:20.153472Z","times_seen":1,"resource_available":true,"data":null}},"time_used":877,"timings":{"blocked":-1,"dns":3,"connect":92,"send":0,"wait":99,"receive":91,"ssl":592},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"immigrationacre.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"immigrationacre.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.redgarto.com/sb/interstitial/utility/default/blog/flip_icon_fullpage/mar24/4/js/script.js","fqdn":"cdn.redgarto.com","domain":"redgarto.com","tld":"com"},"ip":{"addr":"172.67.151.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://codedetrichelattaquedeszombieroblox.blogspot.com/","date":"2026-08-17T09:03:43.692Z","timestamp":1786957423692,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redgarto.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 14:01:04 GMT","end":"Thu, 05 Nov 2026 15:00:52 GMT"},"fingerprint":{"sha1":"7C:BC:79:D9:68:83:B8:37:9E:CC:BA:8F:27:B7:E6:30:D0:CC:5C:D7","sha256":"C7:1A:1B:B8:98:AD:22:5C:50:DD:66:BC:40:9A:82:01:4C:2B:75:DE:91:17:5D:48:DB:0C:B0:5A:69:6E:4E:9E"}}},"request":{"raw":"GET /sb/interstitial/utility/default/blog/flip_icon_fullpage/mar24/4/js/script.js HTTP/1.1\r\nHost: cdn.redgarto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://codedetrichelattaquedeszombieroblox.blogspot.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://codedetrichelattaquedeszombieroblox.blogspot.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 17 Aug 2026 09:03:44 GMT\r\ncontent-type: application/javascript\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 05 Mar 2024 08:56:07 GMT\r\npriority: u=3,i=?0\r\netag: \"65e6de27-18d\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wlccUuLbU7z%2BA%2BeSKRho9WhVdmDpUq6C8ID6S20m9l2o01paxsASC9zLxgd68c%2FyB7tkIPJEzibDtRjNxoB5rZtTckOfClODlb2M3fBcwQnl5Upx9wKR8DCg65R6Y85a6Fr6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2c781da2d1c5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 397\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":397,"size_decoded":1218,"mime_type":"application/javascript","magic":"ASCII text","md5":"999af189e50c58f1a44d672e4b3d5a3f","sha1":"a69c7a4d68885a14d01d33c26d136b95b42313d6","sha256":"28ec866098b037343646399a597ae93e16b11b66f90426ffb5cf743a3c41e38f","sha512":"c529c76b23058a6d81c9ab4a61460669f1a8175b35428a5be422eb933ba4d34820cf3c9eafdad1cd132d699bac6966414c0f27d561393b520eaa55cd679521ab","ssdeep":"","tlshash":"ede02b3861685234c7b7d1a2628f679f2630425fd00a425e702c174f0ee1fa612c1dab","first_seen":"2023-05-07T17:52:21Z","last_seen":"2026-08-17T09:04:20.154829Z","times_seen":577,"resource_available":false,"data":null}},"time_used":513,"timings":{"blocked":10,"dns":0,"connect":0,"send":0,"wait":503,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.redgarto.com/sb/notifications/dating/default/us/desk-all/img/close.png","fqdn":"cdn.redgarto.com","domain":"redgarto.com","tld":"com"},"ip":{"addr":"172.67.151.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://codedetrichelattaquedeszombieroblox.blogspot.com/","date":"2026-08-17T09:03:45.293Z","timestamp":1786957425293,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redgarto.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 14:01:04 GMT","end":"Thu, 05 Nov 2026 15:00:52 GMT"},"fingerprint":{"sha1":"7C:BC:79:D9:68:83:B8:37:9E:CC:BA:8F:27:B7:E6:30:D0:CC:5C:D7","sha256":"C7:1A:1B:B8:98:AD:22:5C:50:DD:66:BC:40:9A:82:01:4C:2B:75:DE:91:17:5D:48:DB:0C:B0:5A:69:6E:4E:9E"}}},"request":{"raw":"GET /sb/notifications/dating/default/us/desk-all/img/close.png HTTP/1.1\r\nHost: cdn.redgarto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 17 Aug 2026 09:03:45 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 19 Jan 2024 14:23:50 GMT\r\npriority: u=5,i\r\netag: \"65aa85f6-fb6\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\naccept-ranges: bytes\r\nage: 2065429\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4qc6Q%2BLaO9wi%2BwO%2Blh0SYLmSMySVzoyTQHz6doqP4K7wYkA6fuFfEz%2F213q%2F6DB5hWFMCSxIwe2oQHWvCRxXWykValBPlcVyExlWEiWbW5rkFt5GQr9jM%2FMw%2B%2BkQ%2F2mmCm4r\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2c781e41da05690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4022\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4022,"size_decoded":4853,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit gray+alpha, non-interlaced","md5":"23e9690b0e7ac26868363a6248f44467","sha1":"d7ad0eae64e0c1e65b12eda0aa9d2b91996dd64f","sha256":"f362c67320d739ccf3bea21f857b9620075bd20ceacda8c51261b9612fe28395","sha512":"d5a8801b98aec11957fb8dc20b1595f1f47504d528bd89833b407ee71e715a57387e9762e3ef7f9d7ebcc87596737f9bddecab21c7ba3f456c8f3b111e025170","ssdeep":"","tlshash":"d981193882564c7cca0a77a10501f861e21f386cf97fb4678873a4d8430e2abe75f17a","first_seen":"2023-04-05T23:50:36Z","last_seen":"2026-08-17T09:04:20.156524Z","times_seen":3166,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ytimg.com/vi/iAdQeIRKS2I/default.jpg","fqdn":"i.ytimg.com","domain":"ytimg.com","tld":"com"},"ip":{"addr":"142.250.178.118","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://codedetrichelattaquedeszombieroblox.blogspot.com/","date":"2026-08-17T09:03:34.638Z","timestamp":1786957414638,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgestatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:42:12 GMT","end":"Wed, 28 Oct 2026 20:42:11 GMT"},"fingerprint":{"sha1":"04:97:82:6E:6F:83:BA:65:6C:F8:A1:6F:2B:13:CF:40:80:F6:0F:22","sha256":"BF:31:32:75:15:2D:DC:A4:CA:A8:6C:51:A2:83:2A:5B:FB:7D:1B:BB:B2:48:F1:1C:4D:15:76:8A:B3:9F:0F:31"}}},"request":{"raw":"GET /vi/iAdQeIRKS2I/default.jpg HTTP/1.1\r\nHost: i.ytimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://codedetrichelattaquedeszombieroblox.blogspot.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-type: image/jpeg\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 3511\r\ndate: Mon, 17 Aug 2026 09:03:34 GMT\r\nexpires: Mon, 17 Aug 2026 11:03:34 GMT\r\ncache-control: public, max-age=7200\r\netag: \"1600280913\"\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3511,"size_decoded":4172,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 120x90, components 3","md5":"41b209243bb519d3ae8b2c3824a9494d","sha1":"8f16398451755b8f7d51e9d386b7c6eb7f3b6b06","sha256":"ff2383da0bb923d0dfc6d66988a19b6a96c17ad57e95364fa57bd06830ba723c","sha512":"241bf49b5172a27428e75d6113d529bec067ade4936cf07f64a2f4e2e24d4cae1ae420a7ef758fdb3e47a243c1f06b5e040f58a6f25f7dd6aca0202e1b5541c4","ssdeep":"","tlshash":"59716e586b519a60e81c27f78b6be2a0817ec358f31dad8761a091477243253fee50d9","first_seen":"2026-06-21T03:53:24.780567Z","last_seen":"2026-08-17T09:04:20.157534Z","times_seen":5,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":2,"connect":16,"send":0,"wait":33,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flushpersist.com/pxf.gif?uuid=51d37b75-bb9e-4afa-8055-4f4d0beef1d1\u0026eb=5de409e64a40ab0548c1badcdf85e0c6\u0026te=575157584ae5f70fbb4e4bfd23d10d14\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.1055\u0026b_frame=0\u0026pk=c207ec84c2456af201cc563cadc36c46\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=9","fqdn":"flushpersist.com","domain":"flushpersist.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://codedetrichelattaquedeszombieroblox.blogspot.com/","date":"2026-08-17T09:03:42.791Z","timestamp":1786957422791,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"flushpersist.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Jun 2026 23:28:22 GMT","end":"Thu, 24 Sep 2026 23:28:21 GMT"},"fingerprint":{"sha1":"BD:90:7E:1D:84:DE:3A:DC:E3:FF:7F:68:F3:58:39:71:F2:BC:70:25","sha256":"8A:DF:30:95:82:22:5C:76:9E:54:BA:4A:3B:24:32:36:AA:D4:79:0E:AF:F1:F5:97:EB:D8:A7:FC:76:58:F3:4A"}}},"request":{"raw":"GET /pxf.gif?uuid=51d37b75-bb9e-4afa-8055-4f4d0beef1d1\u0026eb=5de409e64a40ab0548c1badcdf85e0c6\u0026te=575157584ae5f70fbb4e4bfd23d10d14\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.1055\u0026b_frame=0\u0026pk=c207ec84c2456af201cc563cadc36c46\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=9 HTTP/1.1\r\nHost: flushpersist.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://codedetrichelattaquedeszombieroblox.blogspot.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Mon, 17 Aug 2026 09:03:43 GMT\r\nContent-Type: image/gif\r\nContent-Length: 1\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nx-envoy-upstream-service-time: 1\r\nHost: flushpersist.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: eb3fb4984bcfb9a795582e7855571191\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T11:42:41.491216Z","times_seen":17936532,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.redgarto.com/sb/interstitial/utility/default/blog/flip_icon_fullpage/mar24/4/img/close.svg","fqdn":"cdn.redgarto.com","domain":"redgarto.com","tld":"com"},"ip":{"addr":"172.67.151.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://codedetrichelattaquedeszombieroblox.blogspot.com/","date":"2026-08-17T09:03:43.825Z","timestamp":1786957423825,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redgarto.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 14:01:04 GMT","end":"Thu, 05 Nov 2026 15:00:52 GMT"},"fingerprint":{"sha1":"7C:BC:79:D9:68:83:B8:37:9E:CC:BA:8F:27:B7:E6:30:D0:CC:5C:D7","sha256":"C7:1A:1B:B8:98:AD:22:5C:50:DD:66:BC:40:9A:82:01:4C:2B:75:DE:91:17:5D:48:DB:0C:B0:5A:69:6E:4E:9E"}}},"request":{"raw":"GET /sb/interstitial/utility/default/blog/flip_icon_fullpage/mar24/4/img/close.svg HTTP/1.1\r\nHost: cdn.redgarto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 17 Aug 2026 09:03:43 GMT\r\ncontent-type: image/svg+xml\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 05 Mar 2024 08:56:10 GMT\r\npriority: u=5,i\r\netag: \"65e6de2a-4ff\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\naccept-ranges: bytes\r\nage: 4069655\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZWh%2F18zyHGdH1X5XntnOaAsJtoEzMhZfBnVZQDVtnVREnxsDUPObR8XwUuNCu6n4sq%2Bg0bx0HaH%2F05Ladz3ePX28GFLwDpDml9Y%2B%2Fplw%2B1wQL6IvlPl6YpelXC5jtQslCZdE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2c781daed2c5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1279\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1279,"size_decoded":2108,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"369850b9873659adf0951d845f57dba1","sha1":"a64257186daa33b6b318943a457b6cf8d80b26b6","sha256":"9630c142a8c074cc1809ebf4109538cf29cc0baeb6c27726191f1cf5376e2e21","sha512":"6441b40e85c86e21362c7061a6b9610f52a5c801b274b246711546ad45c68c3e7f2f242f1621b90967eaeebf52709545d06283c2015d6b9ad7f6f7d37fb14a88","ssdeep":"","tlshash":"6821d8dc958f223ef324ff6189b316606ba423f6bb18c5bcb199a8157e1cb910c48e14","first_seen":"2023-04-07T22:39:47Z","last_seen":"2026-08-17T09:04:20.159116Z","times_seen":10417,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.blogger.com/static/v1/widgets/4033524873-widgets.js","fqdn":"www.blogger.com","domain":"blogger.com","tld":"com"},"ip":{"addr":"142.250.178.105","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://codedetrichelattaquedeszombieroblox.blogspot.com/","date":"2026-08-17T09:03:34.419Z","timestamp":1786957414419,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.blogger.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:42:06 GMT","end":"Wed, 28 Oct 2026 20:42:05 GMT"},"fingerprint":{"sha1":"CB:E1:29:B0:93:DD:D5:C2:9E:03:A5:89:AE:A5:8B:33:32:42:73:91","sha256":"D7:24:30:5A:42:0A:8D:31:C1:7E:0A:44:4C:D2:23:E9:36:40:DC:C7:66:66:2D:E3:1F:51:8B:7F:3F:4A:02:AF"}}},"request":{"raw":"GET /static/v1/widgets/4033524873-widgets.js HTTP/1.1\r\nHost: www.blogger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://codedetrichelattaquedeszombieroblox.blogspot.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"blogger-tech\"\r\nreport-to: {\"group\":\"blogger-tech\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/blogger-tech\"}]}\r\ncontent-length: 53428\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 14 Aug 2026 10:08:32 GMT\r\nexpires: Sat, 14 Aug 2027 10:08:32 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 12 Aug 2026 02:34:15 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 255302\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":151284,"size_decoded":54144,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4058)","md5":"819440bc14eea1466567efee814a608a","sha1":"76b0a14c33d8cd187ba7499e3c036fecc0ed301c","sha256":"be602a4fea168f951b795d9436c82569722a24eb6a887a62ab7fca41f35eecd1","sha512":"08eb9d2eb9adaa821e48fba555ae404d08f7947c19e07b70ab50620c180f65b675d093f9769c8930ae3c5697650ce3d4b1cd86c0710c86f579920c6770924445","ssdeep":"1536:5ORYIwGQrkr+onsQ8yTrrINWqealNcx+mw0WApGKA4V5bcglSW4SooTirqDh2Nu8:gr+SqWqeuP0WDKZ4gyJ7w2NuEwIrTiyZ","tlshash":"ede3f9c8b79670628373b4b5003f010ff13ab9aaf848896cb188d9e56d749695277f7c","first_seen":"2026-08-01T13:17:15.677216Z","last_seen":"2026-08-17T11:32:51.665044Z","times_seen":1331,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":3,"connect":16,"send":0,"wait":17,"receive":22,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.min.css","fqdn":"netdna.bootstrapcdn.com","domain":"bootstrapcdn.com","tld":"com"},"ip":{"addr":"104.18.10.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://codedetrichelattaquedeszombieroblox.blogspot.com/","date":"2026-08-17T09:03:34.445Z","timestamp":1786957414445,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bootstrapcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Jul 2026 06:33:56 GMT","end":"Tue, 29 Sep 2026 07:33:46 GMT"},"fingerprint":{"sha1":"95:C5:B1:CC:FD:2D:A2:1D:9E:F8:29:11:70:8F:C2:32:DB:0A:16:D8","sha256":"67:23:C0:55:AC:EE:9D:BF:1F:32:F6:C6:31:3A:5A:3F:85:B5:50:88:71:96:38:D1:BB:37:21:B0:0C:CF:B9:EA"}}},"request":{"raw":"GET /font-awesome/3.2.1/css/font-awesome.min.css HTTP/1.1\r\nHost: netdna.bootstrapcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://codedetrichelattaquedeszombieroblox.blogspot.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 17 Aug 2026 09:03:34 GMT\r\ncontent-type: text/css; charset=utf-8\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\ncdn-pullzone: 252412\r\ncdn-requestcountrycode: DE\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31919000\r\ncontent-encoding: br\r\netag: \"7fbe76cdac6093784895bb4989203e5a\"\r\nlast-modified: Mon, 25 Jan 2021 22:04:51 GMT\r\ncdn-cachedat: 08/01/2025 16:33:15\r\ncdn-proxyver: 1.33\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1077\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: ab3f5f246fa4e81baddfd0869f4e2cdc\r\ncdn-cache: HIT\r\nage: 5816398\r\ncf-cache-status: HIT\r\ncf-ray: a2c781a0ad483181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22084,"size_decoded":5325,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (668)","md5":"7fbe76cdac6093784895bb4989203e5a","sha1":"68e2602c02181b61eebc9e1dccb0a38377fa5df7","sha256":"326b994ec59c7334f52211fbd5aa909a36b98d1717cb798bfcd3af8d4cbdb6ca","sha512":"209f816471a54f82b8deca81194cc9f74a5cc5f9111035593d9c5e7b14628152fcaf3770fe0c8921f9436a131d373070c389345b1a72696a42d8f2d051698c51","ssdeep":"384:BFtp4qXrK5fGlH+ocR0S6N1E+79zUbR2dbozPfI5:hN7a+79VdozI5","tlshash":"80a299e9e94d10d29322c48beb806648ed99f329cdcb4d53f25b605cfff16580681bb8","first_seen":"2023-04-05T03:26:57Z","last_seen":"2026-08-17T09:04:20.160676Z","times_seen":2846,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":60,"dns":0,"connect":1,"send":0,"wait":8,"receive":0,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.redgarto.com/sb/interstitial/utility/default/blog/flip_icon_fullpage/mar24/4/css/style.css","fqdn":"cdn.redgarto.com","domain":"redgarto.com","tld":"com"},"ip":{"addr":"172.67.151.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://codedetrichelattaquedeszombieroblox.blogspot.com/","date":"2026-08-17T09:03:43.689Z","timestamp":1786957423689,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redgarto.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 14:01:04 GMT","end":"Thu, 05 Nov 2026 15:00:52 GMT"},"fingerprint":{"sha1":"7C:BC:79:D9:68:83:B8:37:9E:CC:BA:8F:27:B7:E6:30:D0:CC:5C:D7","sha256":"C7:1A:1B:B8:98:AD:22:5C:50:DD:66:BC:40:9A:82:01:4C:2B:75:DE:91:17:5D:48:DB:0C:B0:5A:69:6E:4E:9E"}}},"request":{"raw":"GET /sb/interstitial/utility/default/blog/flip_icon_fullpage/mar24/4/css/style.css HTTP/1.1\r\nHost: cdn.redgarto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://codedetrichelattaquedeszombieroblox.blogspot.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://codedetrichelattaquedeszombieroblox.blogspot.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 17 Aug 2026 09:03:44 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 05 Mar 2024 08:56:08 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"65e6de28-129b\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lxLOc1dUMi50NiW5ETyNEQFAvYXGKA0avP3d5%2BUt0uAdUy9U0bKIfepIEKEE%2BMbALHj5T9l7XfAzugH1CTl1rWPqkKwbLjnqdstW8rLD5XEeIKXGgfaKL%2B9VdkqHy5JnnVxH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2c781da2d1b5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4763,"size_decoded":2100,"mime_type":"text/css","magic":"ASCII text","md5":"544a7e47f7d35bd6ee4e09c7bcf7f8de","sha1":"fd16f2e516a880028cb59379ca93cd84ba7d6f4b","sha256":"eed1d483223c8e405a69ddb3f7950894265170dc3b3f3aa22a98785ddde81a59","sha512":"701f7e562904832405eb99c34ef51a31b190adae78b554b2c7daba9514b9bfe7bb7ed4154a552e4832d21e80d49c569bab07b5591841ea4db9359e450887d369","ssdeep":"96:KTMXsWx0isO37Ur8nOHGrX45dUqbLvXVSWnO9PAs3xt4fAQn:gMXlIr8e2od/bTFRO9PAs3LuAQn","tlshash":"caa120966a630885b51be4a63f33274663184447ae0bc9797fc4738c8fc61dd85e3b8e","first_seen":"2025-10-14T12:27:32.901067Z","last_seen":"2026-08-17T09:04:20.161526Z","times_seen":230,"resource_available":false,"data":null}},"time_used":518,"timings":{"blocked":13,"dns":3,"connect":0,"send":0,"wait":502,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tagivi.com/3/d089ea049f0f7b1eacfa2b5bb99d3bdc?uidm=01a00ef6-64d8-76a5-957b-90106a8fea02_1","fqdn":"tagivi.com","domain":"tagivi.com","tld":"com"},"ip":{"addr":"104.21.61.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://codedetrichelattaquedeszombieroblox.blogspot.com/","date":"2026-08-17T09:03:43.865Z","timestamp":1786957423865,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tagivi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Jul 2026 16:52:57 GMT","end":"Sat, 17 Oct 2026 17:52:51 GMT"},"fingerprint":{"sha1":"EB:03:AE:39:98:D1:E6:52:78:12:1F:F2:8F:E8:64:39:78:C0:2B:B8","sha256":"CB:EB:EE:A5:FB:55:E0:5B:D5:D4:83:21:BB:F9:11:66:4F:A2:17:74:B4:63:78:C7:04:C1:6E:E5:CA:00:FF:9E"}}},"request":{"raw":"GET /3/d089ea049f0f7b1eacfa2b5bb99d3bdc?uidm=01a00ef6-64d8-76a5-957b-90106a8fea02_1 HTTP/1.1\r\nHost: tagivi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://codedetrichelattaquedeszombieroblox.blogspot.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://codedetrichelattaquedeszombieroblox.blogspot.com/\r\nCookie: uidm=01a00ef6-64a1-793a-b20d-c6b8b60c1189_1; __cf_bm=ruj_PuJ8ToC8VkVT4O5xzMaHmk1igS1VmQUnXQ6rrB0-1786957423.7356522-1.0.1.1-GUSoWPk1nsgTEw_alLwZtgGXD21BKNztKIwa0DH3oOwBoEoXgNUB9teMYQf89WeA9rJcvhMln1MFAo0khPgsVdJ44UyB4hUNPuKxjUQ7GxOLVbxDWatcAlD059tFf63E\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 17 Aug 2026 09:03:43 GMT\r\ncontent-type: text/plain\r\nserver: cloudflare\r\naccept-ch: X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Model,Device-Stock-Ua,X-Device-User-Agent,Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Mobile\r\nvary: Accept-Encoding, Origin\r\nx-envoy-upstream-service-time: 13\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: no-cache, max-age=0, private, no-cache\r\nx-request-id: e1cfc6f7cb0238b59cb43d833c68ad91\r\npragma: no-cache\r\naccess-control-allow-origin: https://codedetrichelattaquedeszombieroblox.blogspot.com\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,X-Forwarded-For,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1728000\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: gzip\r\ncf-ray: a2c781db2ce2b4fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":76,"size_decoded":1241,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"5fb1699fc0decc773bbf1cbe6aaccf45","sha1":"6be108ff415d283d84732a8b4364440659545155","sha256":"f6b3ec6acc8b538f6f4351005a846bea9223836865b5b9abcfff24f77c1bf7b7","sha512":"f06c07440a9b6d5d3e2db1408252545cae7d65457d2e77f2252f843b177a139ac36089057eca40946e7a5b35e2a231087f6f50b8de756ed5bbb6a329bf7edf8e","ssdeep":"","tlshash":"67a024c7c15515d4445710000f0c7d43050d0135013c3310451c334c15c0dff0dd0500","first_seen":"2026-08-17T09:04:20.163336Z","last_seen":"2026-08-17T09:04:20.163336Z","times_seen":1,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"createlouisville.org/11/H4sIAAAAAAAC_1xTS2gcxxatHnnzeDwe7-F4FzOEEGLItKt6-msvjBV9bI8lSx7JspOAqK7qkkrT093T1T0znpU_iXcJdiAQZ9W6I1mbYJKdl2EUCEFgSC8Cs7A2WYUsA4FkFUYW2OQu7j3UKahzqk492M4PkQ45HS8txAMZhvSspePqu2sy4nFPVRdXqgTr-Hx1TUa2eb7an7S0e47UTR2fqc4HrBWfNTDBmGBSnZNpIOL-2SMWZPKUeJZumzohrk4sA_rpP1dUroGiGvDuIfo_SF7-9xfxIUg2gqj9zUygWlmcvDfbzkOaxSl0-d5q1IriXgTtV1CkGoho73g3xKpE6MsKxNHesQuIuzsTF-DLElVOvQA_2juWCn5396VaP4QgAp__G3rdEQThCCQdAYvvg-Q_IQDGYfEaRO0ni3Hao7dfsnTClujEH7-D7JXoxIuTELWfToeyX23GYZ7JOFLQFwXI_gjkxgiSfB-yQQVkbx9Ydg8kf45w5TRE7d0FmqcUJB-_jQnFOBB2zTa5W3NsatU8y_FrHibYpq4IKDaO7kiKEVA1BbnSIJca5KICeVKBNh9XqecK37NN6gXCERwTh1GrXvcc0zKEzSzI2V2Q_CGw9N5OLnl7_M5r51JccwJf1CglrOZiT3Dfq9t1Yq2TvfV1Jtb99viHpQYznNXm8sWZuVtEdqzVi40l2l6YUcxo2v1bTfNK4m3cDAP2fq9GHNf2LMc06rpTxxYxrRrRsU50UptfSJY2Fy8156JOY35VJNdT6S6J5auux27OTTuNzZVWd01vLQ8SGeBWvLWVt0y3N62u3eiSq9cvm_bmVb-B1zu33VnWmflAz2a32vqlfnJjfmbeyhtrXbZ2eTGajsxWf7OZObNsWccd78oqXUmuDHBXQJLegZZ8VCLtX6dAcQ1UhqDLi10eKkMVT3iocp8cT-N41othnG1s09042wgiBDR9CCkvdmTSUfeBZVPDgVB8GE8a9bNiSH1eDCXPEKSd19_YIaTm4MCsucz3ay4zDNPEgjukviNUlhfbySH63yRm2tPP_gOtYFylwrA4desuCbDPsemZPjUxcZlju55LDVCyAKkqQJUGA1mihjgDiSzR6Qe_gk_3QYX7wKQGNH8TaK8AulnAIPpayIh3JQt0FreBxwUk2QnIbmvb4SE6Oby-Mv3dUdqDT3-GgB1cOHy2_Nsnp58BSwtI0gK25PcINsK7315LMtmWAzqJfzOjWTAFVJYIjTrAZIne-Cs9-onnpt4CltwBlRxcGD-e1FfDUCUluvjnF6BiBH6iQShLtPD5RxAGBxd-fPy4QEgD6hegggN0XOC_wtvqY9hINfBDbeiHqbbjh2n46KVmJcdV1zAwZsTwuGeZXt0VgWUSxwksUrcDXLcgU-XWvefJ3wEAAP__CZ9PwBgFAAA=","fqdn":"createlouisville.org","domain":"createlouisville.org","tld":"org"},"ip":{"addr":"104.21.82.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://codedetrichelattaquedeszombieroblox.blogspot.com/","date":"2026-08-17T09:03:46.193Z","timestamp":1786957426193,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"createlouisville.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 13:27:52 GMT","end":"Mon, 28 Sep 2026 14:27:43 GMT"},"fingerprint":{"sha1":"2D:37:E6:26:86:DD:C7:63:98:BA:52:2A:97:8E:4F:F2:DD:7B:2D:05","sha256":"23:6E:87:DD:91:58:54:57:87:1C:E8:C2:31:3D:17:3D:A4:68:F2:7B:F6:AA:0E:FC:74:94:08:04:E2:2B:5C:AC"}}},"request":{"raw":"GET /11/H4sIAAAAAAAC_1xTS2gcxxatHnnzeDwe7-F4FzOEEGLItKt6-msvjBV9bI8lSx7JspOAqK7qkkrT093T1T0znpU_iXcJdiAQZ9W6I1mbYJKdl2EUCEFgSC8Cs7A2WYUsA4FkFUYW2OQu7j3UKahzqk492M4PkQ45HS8txAMZhvSspePqu2sy4nFPVRdXqgTr-Hx1TUa2eb7an7S0e47UTR2fqc4HrBWfNTDBmGBSnZNpIOL-2SMWZPKUeJZumzohrk4sA_rpP1dUroGiGvDuIfo_SF7-9xfxIUg2gqj9zUygWlmcvDfbzkOaxSl0-d5q1IriXgTtV1CkGoho73g3xKpE6MsKxNHesQuIuzsTF-DLElVOvQA_2juWCn5396VaP4QgAp__G3rdEQThCCQdAYvvg-Q_IQDGYfEaRO0ni3Hao7dfsnTClujEH7-D7JXoxIuTELWfToeyX23GYZ7JOFLQFwXI_gjkxgiSfB-yQQVkbx9Ydg8kf45w5TRE7d0FmqcUJB-_jQnFOBB2zTa5W3NsatU8y_FrHibYpq4IKDaO7kiKEVA1BbnSIJca5KICeVKBNh9XqecK37NN6gXCERwTh1GrXvcc0zKEzSzI2V2Q_CGw9N5OLnl7_M5r51JccwJf1CglrOZiT3Dfq9t1Yq2TvfV1Jtb99viHpQYznNXm8sWZuVtEdqzVi40l2l6YUcxo2v1bTfNK4m3cDAP2fq9GHNf2LMc06rpTxxYxrRrRsU50UptfSJY2Fy8156JOY35VJNdT6S6J5auux27OTTuNzZVWd01vLQ8SGeBWvLWVt0y3N62u3eiSq9cvm_bmVb-B1zu33VnWmflAz2a32vqlfnJjfmbeyhtrXbZ2eTGajsxWf7OZObNsWccd78oqXUmuDHBXQJLegZZ8VCLtX6dAcQ1UhqDLi10eKkMVT3iocp8cT-N41othnG1s09042wgiBDR9CCkvdmTSUfeBZVPDgVB8GE8a9bNiSH1eDCXPEKSd19_YIaTm4MCsucz3ay4zDNPEgjukviNUlhfbySH63yRm2tPP_gOtYFylwrA4desuCbDPsemZPjUxcZlju55LDVCyAKkqQJUGA1mihjgDiSzR6Qe_gk_3QYX7wKQGNH8TaK8AulnAIPpayIh3JQt0FreBxwUk2QnIbmvb4SE6Oby-Mv3dUdqDT3-GgB1cOHy2_Nsnp58BSwtI0gK25PcINsK7315LMtmWAzqJfzOjWTAFVJYIjTrAZIne-Cs9-onnpt4CltwBlRxcGD-e1FfDUCUluvjnF6BiBH6iQShLtPD5RxAGBxd-fPy4QEgD6hegggN0XOC_wtvqY9hINfBDbeiHqbbjh2n46KVmJcdV1zAwZsTwuGeZXt0VgWUSxwksUrcDXLcgU-XWvefJ3wEAAP__CZ9PwBgFAAA= HTTP/1.1\r\nHost: createlouisville.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://codedetrichelattaquedeszombieroblox.blogspot.com/\r\nCookie: uidm=01a00ef6-64d8-76a5-957b-90106a8fea02_2; __cf_bm=PKc27USQADFY1iq5UAKPamMDsc2S6xYS4Jp9gXlecCw-1786957423.7305145-1.0.1.1-GMpPhNHSFnqKGUfpRri8PfQL89cXFB7KhTkvW.kQzpie0kojjuk48wBsOVv1LRI46hLbK0_qy8EcqDZ.tEjm.HxpVGDG5uKWvcWINnBn4kxhSt7EcQ.0q9JUaTpJz0vf; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl28216845=1; slecaf25da8381e0bd0494ba4018c76898a2=[6655446]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 17 Aug 2026 09:03:46 GMT\r\ncontent-type: image/gif\r\ncontent-length: 7\r\nserver: cloudflare\r\naccept-ch: X-Ucbrowser-Device-Ua,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Model,Device-Stock-Ua,User-Agent,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Mobile,X-Device-User-Agent,X-Operamini-Phone-Ua\r\nset-cookie: iprc_l+f6286f275c2342786f44931098482186=6655446; Path=/; Expires=Tue, 18 Aug 2026 09:03:46 GMT; Secure; SameSite=None\niprc_l-6655446=1; Path=/; Expires=Tue, 18 Aug 2026 09:03:46 GMT; Secure; SameSite=None\r\nvary: Accept-Encoding, Origin\r\nx-envoy-upstream-service-time: 5\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: no-cache, max-age=0, private, no-cache\r\nx-request-id: 6359610c1639d2dda770e8ce777937c3\r\npragma: no-cache\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,X-Forwarded-For,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1728000\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a2c781e9aea876ef-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"iprc_l+f6286f275c2342786f44931098482186","value":"6655446","quoted":false,"path":"/","expires":"2026-08-18T09:03:46Z","raw_expires":"Tue, 18 Aug 2026 09:03:46 GMT","max_age":0,"secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"iprc_l+f6286f275c2342786f44931098482186=6655446; Path=/; Expires=Tue, 18 Aug 2026 09:03:46 GMT; Secure; SameSite=None"},{"name":"iprc_l-6655446","value":"1","quoted":false,"path":"/","expires":"2026-08-18T09:03:46Z","raw_expires":"Tue, 18 Aug 2026 09:03:46 GMT","max_age":0,"secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"iprc_l-6655446=1; Path=/; Expires=Tue, 18 Aug 2026 09:03:46 GMT; Secure; SameSite=None"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T11:42:41.491216Z","times_seen":17936532,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiFvmIk96IuWkHdUdFNL-28DuaN-HxzUYtCWJ9cwxI9eeeBxBRinuENZ3rRBxm7tUBOJIOneklF85qxIu-YeoPzC6MIfwuXxna7WVFMb5MLU-nSGs3BVnd9rLiR9R_IjxgwKMI3BFz_i2YC/s1600/bodybg.jpg","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.178.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://codedetrichelattaquedeszombieroblox.blogspot.com/","date":"2026-08-17T09:03:34.637Z","timestamp":1786957414637,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:55 GMT","end":"Wed, 28 Oct 2026 20:43:54 GMT"},"fingerprint":{"sha1":"95:6D:D6:E8:EA:27:36:99:96:C8:37:25:61:78:95:F0:BC:6E:46:2D","sha256":"8F:F4:8A:1B:BB:05:CC:8F:B6:25:25:33:E8:DB:2A:83:0B:16:55:83:6D:52:5E:68:33:FC:CB:92:F2:D3:7D:C6"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEiFvmIk96IuWkHdUdFNL-28DuaN-HxzUYtCWJ9cwxI9eeeBxBRinuENZ3rRBxm7tUBOJIOneklF85qxIu-YeoPzC6MIfwuXxna7WVFMb5MLU-nSGs3BVnd9rLiR9R_IjxgwKMI3BFz_i2YC/s1600/bodybg.jpg HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://codedetrichelattaquedeszombieroblox.blogspot.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/jpeg\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"v34\"\r\nexpires: Tue, 18 Aug 2026 09:03:35 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"bodybg.jpg\"\r\nx-content-type-options: nosniff\r\ndate: Mon, 17 Aug 2026 09:03:35 GMT\r\nserver: fife\r\ncontent-length: 1210\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1210,"size_decoded":1672,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 100x100, components 3","md5":"757d44ff2a8ca87668e04dc5fc9222ef","sha1":"cb0e7703b47e6d76d1e18abea58041931bd091c2","sha256":"26b43256b21835c5daf7d1ac36898311eeb04b148c3529190d9d1f9f57a41f96","sha512":"29871b018c39f901fac47ba66ffd61d14e649e297192dc76da66ddf4f9bd9fb059f6f0fcd080d05cd4122a9af6274d149ae838a308c141f523fbf7a5d9f75f5c","ssdeep":"","tlshash":"c621963b6a03c716e4b42ab76af1e30c0adcee8450012f0a5af92641bd1a0a1dd60644","first_seen":"2023-05-23T08:31:50Z","last_seen":"2026-08-17T09:04:20.164826Z","times_seen":103,"resource_available":false,"data":null}},"time_used":388,"timings":{"blocked":-1,"dns":2,"connect":16,"send":0,"wait":371,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adxpy.pages.dev/magic.js","fqdn":"adxpy.pages.dev","domain":"adxpy.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://codedetrichelattaquedeszombieroblox.blogspot.com/","date":"2026-08-17T09:03:41.439Z","timestamp":1786957421439,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adxpy.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 05:18:17 GMT","end":"Fri, 30 Oct 2026 06:16:46 GMT"},"fingerprint":{"sha1":"8D:43:4D:D7:86:01:CA:27:86:FA:7D:C2:CC:D2:28:AA:8B:23:B6:D5","sha256":"7C:CF:37:C6:8E:F4:FA:9D:BD:6F:4B:19:25:E6:79:CA:A5:FA:57:31:AD:F5:49:0E:E8:51:D1:04:35:AE:DC:68"}}},"request":{"raw":"GET /magic.js HTTP/1.1\r\nHost: adxpy.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://codedetrichelattaquedeszombieroblox.blogspot.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 17 Aug 2026 09:03:41 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BEzCtIqNdsRT5kNFVo6MNC%2BLVR2whicfNFA0NVgdqDsgoumdV7MOCL0AJ1i2V3tb081aNEWTLj%2FbSmMfbTVKQzLvKUySMfL0vS%2BpnVSFkgmkjFZ36tZ0r5Qo%2BHzTLh5Idkw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"c49d59185af245830cb91e4818c56238\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a2c781cbfc512efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":671,"size_decoded":1113,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"9bcbb02a6bf94ae8762ddcda5d1c80d3","sha1":"fade830681bb5b7b138db5482e7a495c1c9b296a","sha256":"b26277e44f2fe29283a55a632166f8a45dd1407a0970c13e08287406f94a0772","sha512":"54914b0f4d7625f4e40e13b11bb2bfd47c87dc6a14714c427c48c75e955980826d6605abbac7b3ca6c043356f1b91618b6f16abaf6be339be38d8ffa825e71e5","ssdeep":"","tlshash":"c101fe6e229200a84d7a509803a3fa0cfda832577160c0e1bacedb602f35f20419e4d8","first_seen":"2025-12-08T23:25:47.209165Z","last_seen":"2026-08-17T09:04:20.166453Z","times_seen":396,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spendsdetachment.com/pixel/ase","fqdn":"spendsdetachment.com","domain":"spendsdetachment.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://codedetrichelattaquedeszombieroblox.blogspot.com/","date":"2026-08-17T09:03:43.152Z","timestamp":1786957423152,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"spendsdetachment.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 02:47:50 GMT","end":"Fri, 25 Sep 2026 02:47:49 GMT"},"fingerprint":{"sha1":"ED:7A:AE:D7:41:6B:59:34:BC:24:1A:71:55:02:F6:3E:BB:AB:82:0B","sha256":"E0:B2:A3:F1:B9:7C:A9:81:4F:7A:12:BA:2B:56:9A:DB:6D:7F:DC:37:71:1C:4D:EA:08:FB:A8:46:A6:C3:D1:53"}}},"request":{"raw":"POST /pixel/ase HTTP/1.1\r\nHost: spendsdetachment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://codedetrichelattaquedeszombieroblox.blogspot.com/\r\nContent-Type: application/json\r\nContent-Length: 220\r\nOrigin: https://codedetrichelattaquedeszombieroblox.blogspot.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":220,"data":"[{\"placement_key\":\"c207ec84c2456af201cc563cadc36c46\",\"template_body\":\"body_social-bar_pl_general\",\"event_name\":\"base.render_pixel.success\",\"id_frontend_invoke\":\"01a00ef6-5e5b-7f78-88c2-e68b1d8c5e3e\",\"script_version\":\"\"}]"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Mon, 17 Aug 2026 09:03:43 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: Sec-Ch-Ua-Mobile, Device-Stock-Ua, X-Ucbrowser-Device-Ua, Sec-Ch-Ua-Platformuser-Agent, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Ua-Full-Version, X-Device-User-Agent, X-Operamini-Phone-Ua, User-Agent, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Model\r\nHost: spendsdetachment.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":1614,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T11:42:41.491216Z","times_seen":17936532,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"spendsdetachment.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"spendsdetachment.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.redgarto.com/sb/interstitial/utility/default/blog/flip_icon_fullpage/mar24/4/css/animate.css","fqdn":"cdn.redgarto.com","domain":"redgarto.com","tld":"com"},"ip":{"addr":"172.67.151.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://codedetrichelattaquedeszombieroblox.blogspot.com/","date":"2026-08-17T09:03:43.688Z","timestamp":1786957423688,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redgarto.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 14:01:04 GMT","end":"Thu, 05 Nov 2026 15:00:52 GMT"},"fingerprint":{"sha1":"7C:BC:79:D9:68:83:B8:37:9E:CC:BA:8F:27:B7:E6:30:D0:CC:5C:D7","sha256":"C7:1A:1B:B8:98:AD:22:5C:50:DD:66:BC:40:9A:82:01:4C:2B:75:DE:91:17:5D:48:DB:0C:B0:5A:69:6E:4E:9E"}}},"request":{"raw":"GET /sb/interstitial/utility/default/blog/flip_icon_fullpage/mar24/4/css/animate.css HTTP/1.1\r\nHost: cdn.redgarto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://codedetrichelattaquedeszombieroblox.blogspot.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://codedetrichelattaquedeszombieroblox.blogspot.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 17 Aug 2026 09:03:43 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 05 Mar 2024 08:56:09 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"65e6de29-13591\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FsnRiCuzFKwzn%2BWW3pGtqIPjHqqp9rU%2FVK7Tw2SCqWOOIKpZbgf9d%2FUGmXgrXEDJ2P1L48BhZSeYHxJgdZQ2zJWHJmIgCm4x7VydTLUaHlBsYdmayjkfOuyMa0Xme7ybDZIM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2c781da2d1a5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":79249,"size_decoded":5686,"mime_type":"text/css","magic":"ASCII text","md5":"e1d8acd5ee9d1a90ea09313cbd8f2b02","sha1":"8a8327b115d1356715e63270d1ce6d46124c7b1a","sha256":"3028c87fc798ac3741f02079034e6c23462afc0c5e6c8d321188ce3716c8472a","sha512":"b942379b39b29577123ce4017a6566c046fe68c5a862f234302ddfdb08127e9e2d6b22bbf660ebcd5a196f63df0b34e4eaaa13c5f728e28b7cedfab2669f52f3","ssdeep":"384:ZFu8uVWgnu5uLlFlH/O/Qu7u/sjzbg/jxXlIPfL4jKgZQMkL0Vvaj7Z:ZFu8uEgnu5uBu7uhKgZQMkL0Vvaj7Z","tlshash":"bc731fad2991148452638a1d83df8e68673ce573181a9cef73c2488bcf8bf9c67c9147","first_seen":"2023-04-05T07:35:42Z","last_seen":"2026-08-17T09:04:20.167064Z","times_seen":4331,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":5,"connect":9,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lh3.googleusercontent.com/blogger_img_proxy/AEn0k_tScRRIzX9gSuSy4VlTex71ArCmwsZJxdD5GL2ZPNNjcobOrguwUGIcA99cezW7fBKttbaZDP4KzeCImgPUT7wIJ3Ktu-hQftSeuAfyjicK5VU","fqdn":"lh3.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.178.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://codedetrichelattaquedeszombieroblox.blogspot.com/","date":"2026-08-17T09:03:34.427Z","timestamp":1786957414427,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:55 GMT","end":"Wed, 28 Oct 2026 20:43:54 GMT"},"fingerprint":{"sha1":"95:6D:D6:E8:EA:27:36:99:96:C8:37:25:61:78:95:F0:BC:6E:46:2D","sha256":"8F:F4:8A:1B:BB:05:CC:8F:B6:25:25:33:E8:DB:2A:83:0B:16:55:83:6D:52:5E:68:33:FC:CB:92:F2:D3:7D:C6"}}},"request":{"raw":"GET /blogger_img_proxy/AEn0k_tScRRIzX9gSuSy4VlTex71ArCmwsZJxdD5GL2ZPNNjcobOrguwUGIcA99cezW7fBKttbaZDP4KzeCImgPUT7wIJ3Ktu-hQftSeuAfyjicK5VU HTTP/1.1\r\nHost: lh3.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://codedetrichelattaquedeszombieroblox.blogspot.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/jpeg\r\nvary: Origin\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: Content-Length\r\nexpires: Tue, 18 Aug 2026 09:03:34 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"unnamed.jpg\"\r\nx-content-type-options: nosniff\r\ndate: Mon, 17 Aug 2026 09:03:34 GMT\r\nserver: fife\r\ncontent-length: 1581\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1581,"size_decoded":2087,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 120x90, components 3","md5":"a77b92bd62894d783d551e8be16c98d8","sha1":"79dd8aa6fad34af686f7ec27846f0b073760fdde","sha256":"d52b2c5eca8523ba4e895bdb6ffe88e3e25fe3e219b7a6cff8e99813ad189eec","sha512":"adc82a97bfb5a7f19aa0b7e6336d5b6916859db4f82a7df9c26589178cde4deea4bbcb1780e5c3861f1df7049b2428e227cbae3ad4abb9e73116379f6819886d","ssdeep":"","tlshash":"b531c4dabe038194c97b58703e1d686907c927f4be215fe160bcfe4157a84d72a10a08","first_seen":"2026-07-21T21:17:10.969792Z","last_seen":"2026-08-17T09:04:20.167677Z","times_seen":3,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":161,"dns":0,"connect":14,"send":0,"wait":31,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"workdeadlinededicate.com/watch.592029327876.js?dev=e\u0026fstu=01a00ef6-646c-7bee-aba4-03e4c53d7600\u0026key=6dd5e3d7ac37d33b5abc87810f6ac7f3\u0026kw=%5B%22code%22%2C%22de%22%2C%22triche%22%2C%22l%22%2C%22attaque%22%2C%22des%22%2C%22zombie%22%2C%22roblox%22%5D\u0026ps1=1786957423\u0026rb=e\u0026refer=https%3A%2F%2Fcodedetrichelattaquedeszombieroblox.blogspot.com%2F\u0026res=14.1055\u0026rmtc=t\u0026sht=0v1qSzLej8fFCHOEGx1gfLfZtEe2lavA5qlvCyjzBg0\u0026shv=2\u0026st1=89f29b5cb0873b01748dea55bed65aca\u0026tz=0\u0026uuid=51d37b75-bb9e-4afa-8055-4f4d0beef1d1%3A2%3A1","fqdn":"workdeadlinededicate.com","domain":"workdeadlinededicate.com","tld":"com"},"ip":{"addr":"23.111.84.4","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://codedetrichelattaquedeszombieroblox.blogspot.com/","date":"2026-08-17T09:03:43.743Z","timestamp":1786957423743,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"workdeadlinededicate.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 03:50:31 GMT","end":"Fri, 25 Sep 2026 03:50:30 GMT"},"fingerprint":{"sha1":"10:47:66:26:DB:09:A5:17:78:DA:F0:CB:92:C3:2C:F2:8D:0B:43:39","sha256":"D3:7C:24:3F:AE:83:AA:B8:BE:F8:93:F7:33:46:24:C5:B4:D3:32:B8:10:D0:21:AA:C0:0A:65:7B:33:B8:AA:5B"}}},"request":{"raw":"GET /watch.592029327876.js?dev=e\u0026fstu=01a00ef6-646c-7bee-aba4-03e4c53d7600\u0026key=6dd5e3d7ac37d33b5abc87810f6ac7f3\u0026kw=%5B%22code%22%2C%22de%22%2C%22triche%22%2C%22l%22%2C%22attaque%22%2C%22des%22%2C%22zombie%22%2C%22roblox%22%5D\u0026ps1=1786957423\u0026rb=e\u0026refer=https%3A%2F%2Fcodedetrichelattaquedeszombieroblox.blogspot.com%2F\u0026res=14.1055\u0026rmtc=t\u0026sht=0v1qSzLej8fFCHOEGx1gfLfZtEe2lavA5qlvCyjzBg0\u0026shv=2\u0026st1=89f29b5cb0873b01748dea55bed65aca\u0026tz=0\u0026uuid=51d37b75-bb9e-4afa-8055-4f4d0beef1d1%3A2%3A1 HTTP/1.1\r\nHost: workdeadlinededicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://codedetrichelattaquedeszombieroblox.blogspot.com\r\nReferer: https://codedetrichelattaquedeszombieroblox.blogspot.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=51d37b75-bb9e-4afa-8055-4f4d0beef1d1:2:1; ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.NwIIfnia2kdxwhqeJDPBd1QlrQjW29VAep3DyGmA8iE\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Mon, 17 Aug 2026 09:03:43 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\naccept-ch: Sec-Ch-Ua-Mobile,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua-Full-Version,Device-Stock-Ua,X-Device-User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Model\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://codedetrichelattaquedeszombieroblox.blogspot.com\r\ncontent-encoding: zstd\r\nset-cookie: uid_id2=51d37b75-bb9e-4afa-8055-4f4d0beef1d1:2:1; Path=/; Expires=Mon, 24 Aug 2026 09:03:43 GMT; Secure; SameSite=None\npdhtkv=true; Path=/; Expires=Tue, 18 Aug 2026 09:03:43 GMT; Secure; SameSite=None\nuncs=1; Path=/; Expires=Tue, 18 Aug 2026 09:03:43 GMT; Secure; SameSite=None\npdhtkv5=true; Path=/; Expires=Tue, 18 Aug 2026 09:03:43 GMT; Secure; SameSite=None\nuncs5=1; Path=/; Expires=Tue, 18 Aug 2026 09:03:43 GMT; Secure; SameSite=None\nu_pl26582443=1; Path=/; Expires=Tue, 18 Aug 2026 09:03:43 GMT; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nx-envoy-upstream-service-time: 20\r\nHost: workdeadlinededicate.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: b5ec780da72f887332b4ddbcacadc4b5\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":[{"name":"uid_id2","value":"51d37b75-bb9e-4afa-8055-4f4d0beef1d1:2:1","quoted":false,"path":"/","expires":"2026-08-24T09:03:43Z","raw_expires":"Mon, 24 Aug 2026 09:03:43 GMT","max_age":0,"secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uid_id2=51d37b75-bb9e-4afa-8055-4f4d0beef1d1:2:1; Path=/; Expires=Mon, 24 Aug 2026 09:03:43 GMT; Secure; SameSite=None"},{"name":"pdhtkv","value":"true","quoted":false,"path":"/","expires":"2026-08-18T09:03:43Z","raw_expires":"Tue, 18 Aug 2026 09:03:43 GMT","max_age":0,"secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"pdhtkv=true; Path=/; Expires=Tue, 18 Aug 2026 09:03:43 GMT; Secure; SameSite=None"},{"name":"uncs","value":"1","quoted":false,"path":"/","expires":"2026-08-18T09:03:43Z","raw_expires":"Tue, 18 Aug 2026 09:03:43 GMT","max_age":0,"secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uncs=1; Path=/; Expires=Tue, 18 Aug 2026 09:03:43 GMT; Secure; SameSite=None"},{"name":"pdhtkv5","value":"true","quoted":false,"path":"/","expires":"2026-08-18T09:03:43Z","raw_expires":"Tue, 18 Aug 2026 09:03:43 GMT","max_age":0,"secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"pdhtkv5=true; Path=/; Expires=Tue, 18 Aug 2026 09:03:43 GMT; Secure; SameSite=None"},{"name":"uncs5","value":"1","quoted":false,"path":"/","expires":"2026-08-18T09:03:43Z","raw_expires":"Tue, 18 Aug 2026 09:03:43 GMT","max_age":0,"secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uncs5=1; Path=/; Expires=Tue, 18 Aug 2026 09:03:43 GMT; Secure; SameSite=None"},{"name":"u_pl26582443","value":"1","quoted":false,"path":"/","expires":"2026-08-18T09:03:43Z","raw_expires":"Tue, 18 Aug 2026 09:03:43 GMT","max_age":0,"secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"u_pl26582443=1; Path=/; Expires=Tue, 18 Aug 2026 09:03:43 GMT; Secure; SameSite=None"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4090,"size_decoded":4304,"mime_type":"text/html","magic":"JavaScript source, ASCII text, with very long lines (3214)","md5":"448a98d09c985d315acff18c798ba972","sha1":"c9edeedc46f1d8c61eedfb62a7f3707655b6950b","sha256":"7c0541f9012fb3080dea7e81a91181fd13055c46516a560a3110233d73b77f4d","sha512":"9a3021ab6d5547a42d65f2e00810958dfb1220dbf79b70fc66eb9157f289e445ca82ede7e712addb6cb643364df57f309104fc2839ac555ef1cb96c93fef7ecc","ssdeep":"","tlshash":"2e813b2e5de91178b4e238fe3a3691d87c20918b2508dd86b69cd5051f247e047fcdec","first_seen":"2026-08-17T09:04:20.1683Z","last_seen":"2026-08-17T09:04:20.1683Z","times_seen":1,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"workdeadlinededicate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"workdeadlinededicate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spendsdetachment.com/pixel/ase","fqdn":"spendsdetachment.com","domain":"spendsdetachment.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://codedetrichelattaquedeszombieroblox.blogspot.com/","date":"2026-08-17T09:03:44.692Z","timestamp":1786957424692,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"spendsdetachment.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 02:47:50 GMT","end":"Fri, 25 Sep 2026 02:47:49 GMT"},"fingerprint":{"sha1":"ED:7A:AE:D7:41:6B:59:34:BC:24:1A:71:55:02:F6:3E:BB:AB:82:0B","sha256":"E0:B2:A3:F1:B9:7C:A9:81:4F:7A:12:BA:2B:56:9A:DB:6D:7F:DC:37:71:1C:4D:EA:08:FB:A8:46:A6:C3:D1:53"}}},"request":{"raw":"POST /pixel/ase HTTP/1.1\r\nHost: spendsdetachment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://codedetrichelattaquedeszombieroblox.blogspot.com/\r\nContent-Type: application/json\r\nContent-Length: 218\r\nOrigin: https://codedetrichelattaquedeszombieroblox.blogspot.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":218,"data":"[{\"placement_key\":\"c207ec84c2456af201cc563cadc36c46\",\"template_body\":\"body_social-bar_pl_general\",\"event_name\":\"base.impression.success\",\"id_frontend_invoke\":\"01a00ef6-5e5b-7f78-88c2-e68b1d8c5e3e\",\"script_version\":\"\"}]"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Mon, 17 Aug 2026 09:03:44 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: Sec-Ch-Ua-Mobile, X-Operamini-Phone-Ua, X-Ucbrowser-Device-Ua, User-Agent, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua, Device-Stock-Ua, X-Device-User-Agent, Sec-Ch-Ua-Platformuser-Agent, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Ua-Full-Version, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Model\r\nHost: spendsdetachment.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":1612,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T11:42:41.491216Z","times_seen":17936532,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"spendsdetachment.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"spendsdetachment.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spendsdetachment.com/pixel/ase","fqdn":"spendsdetachment.com","domain":"spendsdetachment.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://codedetrichelattaquedeszombieroblox.blogspot.com/","date":"2026-08-17T09:03:44.694Z","timestamp":1786957424694,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"spendsdetachment.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 02:47:50 GMT","end":"Fri, 25 Sep 2026 02:47:49 GMT"},"fingerprint":{"sha1":"ED:7A:AE:D7:41:6B:59:34:BC:24:1A:71:55:02:F6:3E:BB:AB:82:0B","sha256":"E0:B2:A3:F1:B9:7C:A9:81:4F:7A:12:BA:2B:56:9A:DB:6D:7F:DC:37:71:1C:4D:EA:08:FB:A8:46:A6:C3:D1:53"}}},"request":{"raw":"OPTIONS /pixel/ase HTTP/1.1\r\nHost: spendsdetachment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://codedetrichelattaquedeszombieroblox.blogspot.com/\r\nOrigin: https://codedetrichelattaquedeszombieroblox.blogspot.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: nginx/1.28.2\r\nDate: Mon, 17 Aug 2026 09:03:44 GMT\r\nConnection: keep-alive\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Max-Age: 1728000\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":552,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T11:42:41.491216Z","times_seen":17936532,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"spendsdetachment.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"spendsdetachment.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lh3.googleusercontent.com/blogger_img_proxy/AEn0k_sHZLU-Ht17SLupD6TGfJ_KCJZTg2kyLd5BU-187fj-r3r4MZu4PQ8FbKssP6sbZFLplU5gx1mTCNQI9v2HeYtc5M0wt86Qtl1zmo3UR7lUAA","fqdn":"lh3.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.178.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://codedetrichelattaquedeszombieroblox.blogspot.com/","date":"2026-08-17T09:03:34.432Z","timestamp":1786957414432,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:55 GMT","end":"Wed, 28 Oct 2026 20:43:54 GMT"},"fingerprint":{"sha1":"95:6D:D6:E8:EA:27:36:99:96:C8:37:25:61:78:95:F0:BC:6E:46:2D","sha256":"8F:F4:8A:1B:BB:05:CC:8F:B6:25:25:33:E8:DB:2A:83:0B:16:55:83:6D:52:5E:68:33:FC:CB:92:F2:D3:7D:C6"}}},"request":{"raw":"GET /blogger_img_proxy/AEn0k_sHZLU-Ht17SLupD6TGfJ_KCJZTg2kyLd5BU-187fj-r3r4MZu4PQ8FbKssP6sbZFLplU5gx1mTCNQI9v2HeYtc5M0wt86Qtl1zmo3UR7lUAA HTTP/1.1\r\nHost: lh3.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://codedetrichelattaquedeszombieroblox.blogspot.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/jpeg\r\nvary: Origin\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: Content-Length\r\nexpires: Tue, 18 Aug 2026 09:03:34 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"unnamed.jpg\"\r\nx-content-type-options: nosniff\r\ndate: Mon, 17 Aug 2026 09:03:34 GMT\r\nserver: fife\r\ncontent-length: 6853\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6853,"size_decoded":7339,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 120x90, components 3","md5":"8f5e55df08e39d6f271e3b939ffd5488","sha1":"3837f6d294311bb0f5e41080358fe39481009d30","sha256":"b2af26548273a697fb6940f87b09abcf27acd78f5480d99b9b568eff51a9e80f","sha512":"d2e06ffc5cbb12969c8a02af6ffba4f9794c7c2e59a1ea337e9c716a903fb4e945a0a4a97b39659a90b8f0e3f558623c69315e94ff6b441b593a68d2d1015a36","ssdeep":"192:Hy9H18rzK8WJC1WXQwR1A4XNdpyeWE0zOSG:Hy9avKa6R1Zd/TT+G","tlshash":"b9e1ae19325d8f4adad36039fb86a6ea3322afe486cc70e3443292e4368b351c4c160d","first_seen":"2026-08-17T09:04:20.169677Z","last_seen":"2026-08-17T09:04:20.169677Z","times_seen":1,"resource_available":false,"data":null}},"time_used":475,"timings":{"blocked":160,"dns":0,"connect":16,"send":0,"wait":35,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ytimg.com/vi/mikKnf16WR0/default.jpg","fqdn":"i.ytimg.com","domain":"ytimg.com","tld":"com"},"ip":{"addr":"142.250.178.118","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://codedetrichelattaquedeszombieroblox.blogspot.com/","date":"2026-08-17T09:03:41.198Z","timestamp":1786957421198,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgestatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:42:12 GMT","end":"Wed, 28 Oct 2026 20:42:11 GMT"},"fingerprint":{"sha1":"04:97:82:6E:6F:83:BA:65:6C:F8:A1:6F:2B:13:CF:40:80:F6:0F:22","sha256":"BF:31:32:75:15:2D:DC:A4:CA:A8:6C:51:A2:83:2A:5B:FB:7D:1B:BB:B2:48:F1:1C:4D:15:76:8A:B3:9F:0F:31"}}},"request":{"raw":"GET /vi/mikKnf16WR0/default.jpg HTTP/1.1\r\nHost: i.ytimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://codedetrichelattaquedeszombieroblox.blogspot.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-type: image/jpeg\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 4719\r\ndate: Mon, 17 Aug 2026 09:03:41 GMT\r\nexpires: Mon, 17 Aug 2026 11:03:41 GMT\r\ncache-control: public, max-age=7200\r\netag: \"1507571154\"\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4719,"size_decoded":5360,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 120x90, components 3","md5":"5c7a726c2870cb1c2f980c6b3147b929","sha1":"057b2b92e6cd9dd4140b77fa95c16523c63266a0","sha256":"fdc4763b1f25b3ed82d5c5797b82e95f1faa9ef85733802280af846c14ca5a49","sha512":"ed1a7192a1d27cdbcd858de2f30a7737ed874f5732e8f3dce00f8c145c80e324f82e1e265392e1dbdb6b9fb1761d8d912ed949fe0b9f2eb9ecd5c8ddbff379ff","ssdeep":"96:0jfdGrlmKC46BjlkIcJRtfLtEe1pSE4pjlEhnAvGc:UGR6pjitffkEejWh+","tlshash":"a9a16dfa624abd4aef2145f3c23103e049366699f8240bd4b1c21ec5abda6d7958a110","first_seen":"2026-06-21T03:53:24.794912Z","last_seen":"2026-08-17T09:04:20.171178Z","times_seen":5,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flushpersist.com/pxf.gif?uuid=51d37b75-bb9e-4afa-8055-4f4d0beef1d1\u0026eb=5de409e64a40ab0548c1badcdf85e0c6\u0026te=575157584ae5f70fbb4e4bfd23d10d14\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.1055\u0026b_frame=0\u0026pk=c64aa11db612c16c65959b87a44dac81\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=9","fqdn":"flushpersist.com","domain":"flushpersist.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://codedetrichelattaquedeszombieroblox.blogspot.com/","date":"2026-08-17T09:03:42.792Z","timestamp":1786957422792,"http_version":"HTTP/1.1","security_state":"","security_info":null,"request":{"raw":"GET /pxf.gif?uuid=51d37b75-bb9e-4afa-8055-4f4d0beef1d1\u0026eb=5de409e64a40ab0548c1badcdf85e0c6\u0026te=575157584ae5f70fbb4e4bfd23d10d14\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.1055\u0026b_frame=0\u0026pk=c64aa11db612c16c65959b87a44dac81\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=9 HTTP/1.1\r\nHost: flushpersist.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://codedetrichelattaquedeszombieroblox.blogspot.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Mon, 17 Aug 2026 09:03:43 GMT\r\nContent-Type: image/gif\r\nContent-Length: 1\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nx-envoy-upstream-service-time: 2\r\nHost: flushpersist.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 75d95976eb8278cb6594a43d1ac26d7a\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T11:42:41.491216Z","times_seen":17936532,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"workdeadlinededicate.com/watch.592029327876.js?key=6dd5e3d7ac37d33b5abc87810f6ac7f3\u0026kw=%5B%22code%22%2C%22de%22%2C%22triche%22%2C%22l%22%2C%22attaque%22%2C%22des%22%2C%22zombie%22%2C%22roblox%22%5D\u0026refer=https%3A%2F%2Fcodedetrichelattaquedeszombieroblox.blogspot.com%2F\u0026tz=0\u0026dev=e\u0026res=14.1055\u0026rb=e\u0026uuid=51d37b75-bb9e-4afa-8055-4f4d0beef1d1%3A2%3A1","fqdn":"workdeadlinededicate.com","domain":"workdeadlinededicate.com","tld":"com"},"ip":{"addr":"23.111.84.4","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://codedetrichelattaquedeszombieroblox.blogspot.com/","date":"2026-08-17T09:03:43.714Z","timestamp":1786957423714,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"workdeadlinededicate.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 03:50:31 GMT","end":"Fri, 25 Sep 2026 03:50:30 GMT"},"fingerprint":{"sha1":"10:47:66:26:DB:09:A5:17:78:DA:F0:CB:92:C3:2C:F2:8D:0B:43:39","sha256":"D3:7C:24:3F:AE:83:AA:B8:BE:F8:93:F7:33:46:24:C5:B4:D3:32:B8:10:D0:21:AA:C0:0A:65:7B:33:B8:AA:5B"}}},"request":{"raw":"GET /watch.592029327876.js?key=6dd5e3d7ac37d33b5abc87810f6ac7f3\u0026kw=%5B%22code%22%2C%22de%22%2C%22triche%22%2C%22l%22%2C%22attaque%22%2C%22des%22%2C%22zombie%22%2C%22roblox%22%5D\u0026refer=https%3A%2F%2Fcodedetrichelattaquedeszombieroblox.blogspot.com%2F\u0026tz=0\u0026dev=e\u0026res=14.1055\u0026rb=e\u0026uuid=51d37b75-bb9e-4afa-8055-4f4d0beef1d1%3A2%3A1 HTTP/1.1\r\nHost: workdeadlinededicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://codedetrichelattaquedeszombieroblox.blogspot.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://codedetrichelattaquedeszombieroblox.blogspot.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 307 Temporary Redirect\r\nServer: nginx/1.30.2\r\nDate: Mon, 17 Aug 2026 09:03:43 GMT\r\nContent-Type: text/html\r\nContent-Length: 0\r\nConnection: keep-alive\r\naccept-ch: X-Device-User-Agent,User-Agent,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile,Device-Stock-Ua,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Platform\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://codedetrichelattaquedeszombieroblox.blogspot.com\r\nlocation: https://workdeadlinededicate.com/watch.592029327876.js?dev=e\u0026fstu=01a00ef6-646c-7bee-aba4-03e4c53d7600\u0026key=6dd5e3d7ac37d33b5abc87810f6ac7f3\u0026kw=%5B%22code%22%2C%22de%22%2C%22triche%22%2C%22l%22%2C%22attaque%22%2C%22des%22%2C%22zombie%22%2C%22roblox%22%5D\u0026ps1=1786957423\u0026rb=e\u0026refer=https%3A%2F%2Fcodedetrichelattaquedeszombieroblox.blogspot.com%2F\u0026res=14.1055\u0026rmtc=t\u0026sht=0v1qSzLej8fFCHOEGx1gfLfZtEe2lavA5qlvCyjzBg0\u0026shv=2\u0026st1=89f29b5cb0873b01748dea55bed65aca\u0026tz=0\u0026uuid=51d37b75-bb9e-4afa-8055-4f4d0beef1d1%3A2%3A1\r\nset-cookie: uid_id2=51d37b75-bb9e-4afa-8055-4f4d0beef1d1:2:1; Path=/; Expires=Mon, 24 Aug 2026 09:03:43 GMT; Secure; SameSite=None\nain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJwIjp7ImlkIjoyNjU4MjQ0MywiayI6IjZkZDVlM2Q3YWMzN2QzM2I1YWJjODc4MTBmNmFjN2YzIiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjo0OTQxMzUzLCJwaWQiOjIwMDA2MTcsImFuIjp0cnVlLCJsYW4iOnRydWUsImNpZCI6MTYsImFpZCI6NSwicHQiOjQsInBrIjoibWVlbTV5ajhlIiwiY3BrcyI6eyIyOCI6IjMxMjQ5NjhlNWEwYmRlYTljNmNlYmRiYzcyYjVjNGUwIiwiMjkiOiJhZjI1ZGE4MzgxZTBiZDA0OTRiYTQwMThjNzY4OThhMiJ9LCJ0IjoxfSwidSI6eyJ1IjoxLCJhdSI6MSwiZCI6eyJpZCI6MjY2NTYxMTE1LCJpZHMiOiIiLCJpYyI6ZmFsc2UsIm4iOiJEZXNrdG9wLEVtdWxhdG9yIiwidiI6IlVua25vd24iLCJtIjoiVW5rbm93biIsImYiOjEsImZuIjoiRGVza3RvcCIsIm9pZCI6Mzg5MTQsIm9uIjoiV2luZG93cyIsIm92IjoiMTAuMCIsImJpZCI6MTM2OTI1LCJibiI6IkZpcmVmb3giLCJidiI6IjEzNC4wIiwid3YiOmZhbHNlLCJlIjp0cnVlLCJhYiI6ZmFsc2V9LCJjIjp7ImlkIjoxNjIsImMiOiJOTyIsIm4iOiJOb3J3YXkifSwiY3QiOnsiaWQiOjMxNDYyNzAsIm4iOiJNYXVyYSJ9LCJyZyI6eyJpZCI6MzI3MSwibiI6IlZpa2VuIn0sImEiOmZhbHNlLCJjciI6eyJuIjoiQmxpeCBTb2x1dGlvbnMifSwieGYiOiIiLCJpeGYiOmZhbHNlLCJpZ3hmIjpmYWxzZSwiaXdmIjp0cnVlLCJ1cCI6dHJ1ZSwiciI6Imh0dHBzOi8vY29kZWRldHJpY2hlbGF0dGFxdWVkZXN6b21iaWVyb2Jsb3guYmxvZ3Nwb3QuY29tLyIsInR6IjoyLCJpZHVjIjowLCJhciI6W119fQ.NwIIfnia2kdxwhqeJDPBd1QlrQjW29VAep3DyGmA8iE; Path=/; Expires=Mon, 17 Aug 2026 09:04:43 GMT; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nx-envoy-upstream-service-time: 1\r\nHost: workdeadlinededicate.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: e9f62338bbbeab6157fe3c8acd5848ec\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":[{"name":"uid_id2","value":"51d37b75-bb9e-4afa-8055-4f4d0beef1d1:2:1","quoted":false,"path":"/","expires":"2026-08-24T09:03:43Z","raw_expires":"Mon, 24 Aug 2026 09:03:43 GMT","max_age":0,"secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uid_id2=51d37b75-bb9e-4afa-8055-4f4d0beef1d1:2:1; Path=/; Expires=Mon, 24 Aug 2026 09:03:43 GMT; Secure; SameSite=None"},{"name":"ain","value":"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.NwIIfnia2kdxwhqeJDPBd1QlrQjW29VAep3DyGmA8iE","quoted":false,"path":"/","expires":"2026-08-17T09:04:43Z","raw_expires":"Mon, 17 Aug 2026 09:04:43 GMT","max_age":0,"secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.NwIIfnia2kdxwhqeJDPBd1QlrQjW29VAep3DyGmA8iE; Path=/; Expires=Mon, 17 Aug 2026 09:04:43 GMT; Secure; SameSite=None"}],"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T11:42:41.491216Z","times_seen":17936532,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"workdeadlinededicate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"workdeadlinededicate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tagivi.com/9/d089ea049f0f7b1eacfa2b5bb99d3bdc","fqdn":"tagivi.com","domain":"tagivi.com","tld":"com"},"ip":{"addr":"104.21.61.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://codedetrichelattaquedeszombieroblox.blogspot.com/","date":"2026-08-17T09:03:43.716Z","timestamp":1786957423716,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tagivi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Jul 2026 16:52:57 GMT","end":"Sat, 17 Oct 2026 17:52:51 GMT"},"fingerprint":{"sha1":"EB:03:AE:39:98:D1:E6:52:78:12:1F:F2:8F:E8:64:39:78:C0:2B:B8","sha256":"CB:EB:EE:A5:FB:55:E0:5B:D5:D4:83:21:BB:F9:11:66:4F:A2:17:74:B4:63:78:C7:04:C1:6E:E5:CA:00:FF:9E"}}},"request":{"raw":"GET /9/d089ea049f0f7b1eacfa2b5bb99d3bdc HTTP/1.1\r\nHost: tagivi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://codedetrichelattaquedeszombieroblox.blogspot.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 17 Aug 2026 09:03:43 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nset-cookie: uidm=01a00ef6-64a1-793a-b20d-c6b8b60c1189_1; Path=/; Expires=Thu, 14 Aug 2036 09:03:43 GMT; Secure; SameSite=None\n__cf_bm=ruj_PuJ8ToC8VkVT4O5xzMaHmk1igS1VmQUnXQ6rrB0-1786957423.7356522-1.0.1.1-GUSoWPk1nsgTEw_alLwZtgGXD21BKNztKIwa0DH3oOwBoEoXgNUB9teMYQf89WeA9rJcvhMln1MFAo0khPgsVdJ44UyB4hUNPuKxjUQ7GxOLVbxDWatcAlD059tFf63E; HttpOnly; SameSite=None; Secure; Path=/; Domain=tagivi.com; Expires=Mon, 17 Aug 2026 09:33:43 GMT\r\naccept-ch: Sec-Ch-Ua-Platform,Sec-Ch-Ua-Model,Sec-Ch-Ua,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Mobile,Device-Stock-Ua,X-Device-User-Agent,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Platformuser-Agent\r\ncontent-encoding: gzip\r\nlink: \u003chttps://interlinecustomroofingllc.com\u003e; rel=preconnect; crossorigin, \u003chttps://interlinecustomroofingllc.com\u003e; rel=dns-prefetch, \u003chttps://static.nresystems.com\u003e; rel=preconnect; crossorigin, \u003chttps://static.nresystems.com\u003e; rel=dns-prefetch\r\nvary: Accept-Encoding, Origin\r\nx-envoy-upstream-service-time: 4\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: no-cache, max-age=0, private, no-cache\r\nx-request-id: 378b4ac1528680862f3e26d2ac1729df\r\npragma: no-cache\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,X-Forwarded-For,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1728000\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a2c781da5bd2b4fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"uidm","value":"01a00ef6-64a1-793a-b20d-c6b8b60c1189_1","quoted":false,"path":"/","expires":"2036-08-14T09:03:43Z","raw_expires":"Thu, 14 Aug 2036 09:03:43 GMT","max_age":0,"secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uidm=01a00ef6-64a1-793a-b20d-c6b8b60c1189_1; Path=/; Expires=Thu, 14 Aug 2036 09:03:43 GMT; Secure; SameSite=None"},{"name":"__cf_bm","value":"ruj_PuJ8ToC8VkVT4O5xzMaHmk1igS1VmQUnXQ6rrB0-1786957423.7356522-1.0.1.1-GUSoWPk1nsgTEw_alLwZtgGXD21BKNztKIwa0DH3oOwBoEoXgNUB9teMYQf89WeA9rJcvhMln1MFAo0khPgsVdJ44UyB4hUNPuKxjUQ7GxOLVbxDWatcAlD059tFf63E","quoted":false,"path":"/","domain":"tagivi.com","expires":"2026-08-17T09:33:43Z","raw_expires":"Mon, 17 Aug 2026 09:33:43 GMT","max_age":0,"secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=ruj_PuJ8ToC8VkVT4O5xzMaHmk1igS1VmQUnXQ6rrB0-1786957423.7356522-1.0.1.1-GUSoWPk1nsgTEw_alLwZtgGXD21BKNztKIwa0DH3oOwBoEoXgNUB9teMYQf89WeA9rJcvhMln1MFAo0khPgsVdJ44UyB4hUNPuKxjUQ7GxOLVbxDWatcAlD059tFf63E; HttpOnly; SameSite=None; Secure; Path=/; Domain=tagivi.com; Expires=Mon, 17 Aug 2026 09:33:43 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":80545,"size_decoded":33557,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"eedf8fd34c13f41ddccf73935e0db387","sha1":"36810730a5b428eab385cd5e98afc2ae356622d0","sha256":"edf6385c50c068b449dee60b511ffdc20eeead46e27f0b4db316b66686530ff7","sha512":"a9c3de9944a80b4d273fc1d578fce88b3ccd3f492024281929831a811c60d21c4096245411babc62d835cb135ab06b2c5ef5aaef1a059b4c8c684f236d97ba0c","ssdeep":"1536:6ZcdVPSv2svGyudslTKG+qiUhP+iuIEausCJMt89w5p:o12svGRslTKG+qiUhP+iuDsCJMy6p","tlshash":"8a73d5886f2ea16c0ff1e03b221ef562e65e0c4640dce45cf8377875aaa9756b47e071","first_seen":"2026-08-17T09:04:20.172719Z","last_seen":"2026-08-17T09:04:20.172719Z","times_seen":1,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":10,"connect":6,"send":0,"wait":61,"receive":-1,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:300,400,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://codedetrichelattaquedeszombieroblox.blogspot.com/","date":"2026-08-17T09:03:43.821Z","timestamp":1786957423821,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:53 GMT","end":"Wed, 28 Oct 2026 20:43:52 GMT"},"fingerprint":{"sha1":"91:24:44:08:3E:65:60:72:3B:18:06:E2:82:7E:C0:8F:97:46:5D:B2","sha256":"71:59:B7:BB:3B:E8:E0:81:C8:B6:24:A3:57:11:62:47:10:A1:3D:E4:38:30:54:27:2E:19:C8:96:02:25:52:DD"}}},"request":{"raw":"GET /css?family=Roboto:300,400,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 17 Aug 2026 09:03:43 GMT\r\ndate: Mon, 17 Aug 2026 09:03:43 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16755,"size_decoded":2367,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"1936a90eef3ebd4c6b40eb59d72e164d","sha1":"4c698f8dc97e2e6186d46215e209aca1b1194a5d","sha256":"412d98c2f4410a048131a7d9362fb38456ce2ff67cd4731ea411708a7996a021","sha512":"07ad2431175e5566ae435738d94d4da3e96e4856a1fe1d5917c52474cab28808cd940fec0e8f75eb2f3d573e6fe8497fc12636ef4738d1b67e9144725192b580","ssdeep":"384:p9f59g9P9r9yU9/qY4+949Y9p9fM919W969yh9/qY4X9N9t949fd9k9D939yQ9/O:pDS99YURRuWDyjooYhREHPWP2ZZYQRVs","tlshash":"48721091041704009b834ce223cebf35fe1f52117142d0b5abfd9b6b9ddbca6526939d","first_seen":"2026-02-19T22:28:01.752187Z","last_seen":"2026-08-17T09:04:20.174575Z","times_seen":10746,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":36,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.blogger.com/static/v1/widgets/2549344219-widget_css_bundle.css","fqdn":"www.blogger.com","domain":"blogger.com","tld":"com"},"ip":{"addr":"142.250.178.105","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://codedetrichelattaquedeszombieroblox.blogspot.com/","date":"2026-08-17T09:03:41.209Z","timestamp":1786957421209,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.blogger.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:42:06 GMT","end":"Wed, 28 Oct 2026 20:42:05 GMT"},"fingerprint":{"sha1":"CB:E1:29:B0:93:DD:D5:C2:9E:03:A5:89:AE:A5:8B:33:32:42:73:91","sha256":"D7:24:30:5A:42:0A:8D:31:C1:7E:0A:44:4C:D2:23:E9:36:40:DC:C7:66:66:2D:E3:1F:51:8B:7F:3F:4A:02:AF"}}},"request":{"raw":"GET /static/v1/widgets/2549344219-widget_css_bundle.css HTTP/1.1\r\nHost: www.blogger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://codedetrichelattaquedeszombieroblox.blogspot.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"blogger-tech\"\r\nreport-to: {\"group\":\"blogger-tech\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/blogger-tech\"}]}\r\ncontent-length: 6822\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 12 Aug 2026 16:26:17 GMT\r\nexpires: Thu, 12 Aug 2027 16:26:17 GMT\r\ncache-control: public, max-age=31536000\r\nage: 405444\r\nlast-modified: Fri, 12 Jun 2020 07:20:00 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31611,"size_decoded":7510,"mime_type":"text/css","magic":"ASCII text, with very long lines (31610)","md5":"1262fb3b6c8a66bb33af5bb8de15a59a","sha1":"7ce924780c5287c5dd8dbeae4e712775ea1f83f9","sha256":"d539a910089008f073b426d44a496f1952ba01b9ff018425c18d21bea42aa128","sha512":"59e35343fe3288bec0d002d1a321bff62d70ebfda1f06c73771bffeb8d1c60824fdce39ad3437db9de5df4f08e7f4322611efbbdfecd3292706d244909c61386","ssdeep":"384:OVysImDyPWquJMpx/SCYW0bS0+Rl9yaywuJ86YKSQCNL/J69nag93jWxgngRk2FT:OnIm6IvW0swVJwxgngRdFr/","tlshash":"d2e2c972a490242df127d725b883ba8d3218d963e7135eeed556b2bccec5ade102331d","first_seen":"2023-04-07T08:25:36Z","last_seen":"2026-08-17T09:04:20.175401Z","times_seen":56,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"workdeadlinededicate.com/pixel/purst?dl=0\u0026th=0\u0026sc=0\u0026rs=9305\u0026rd=9305\u0026fd=879\u0026bv=2026.8.1\u0026tmpl=70","fqdn":"workdeadlinededicate.com","domain":"workdeadlinededicate.com","tld":"com"},"ip":{"addr":"23.111.84.4","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://codedetrichelattaquedeszombieroblox.blogspot.com/","date":"2026-08-17T09:03:42.496Z","timestamp":1786957422496,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"workdeadlinededicate.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 03:50:31 GMT","end":"Fri, 25 Sep 2026 03:50:30 GMT"},"fingerprint":{"sha1":"10:47:66:26:DB:09:A5:17:78:DA:F0:CB:92:C3:2C:F2:8D:0B:43:39","sha256":"D3:7C:24:3F:AE:83:AA:B8:BE:F8:93:F7:33:46:24:C5:B4:D3:32:B8:10:D0:21:AA:C0:0A:65:7B:33:B8:AA:5B"}}},"request":{"raw":"GET /pixel/purst?dl=0\u0026th=0\u0026sc=0\u0026rs=9305\u0026rd=9305\u0026fd=879\u0026bv=2026.8.1\u0026tmpl=70 HTTP/1.1\r\nHost: workdeadlinededicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://codedetrichelattaquedeszombieroblox.blogspot.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Mon, 17 Aug 2026 09:03:42 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: Sec-Ch-Ua-Model, Sec-Ch-Ua-Mobile, X-Device-User-Agent, User-Agent, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua, Sec-Ch-Ua-Platformuser-Agent, Sec-Ch-Ua-Platform, Device-Stock-Ua, X-Operamini-Phone-Ua, X-Ucbrowser-Device-Ua, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Ua-Full-Version\r\nHost: workdeadlinededicate.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":806,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T11:42:41.491216Z","times_seen":17936532,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":0,"dns":4,"connect":19,"send":0,"wait":22,"receive":0,"ssl":43},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"workdeadlinededicate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"workdeadlinededicate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"workdeadlinededicate.com/impr.gif?sid=H4sIAAAAAAAC_1xSv28cRRSevRgEouCHkpTRFSmIxJ1nbndvb0kX8aNAdhAJSkE1P83Ee7ubnd27y1VOjFIbISQapPV3dlyAIvgP0JkGIUXKdlfYTSpqUGp0zgkDU7z3Zr6nme-b9z3ar05JFxVffLqRTW2S8PWwS9vv3rGpysauvXm7zWiXXm_fsWk_uN6eLEMxep_5QZdea3-s5Xa23qOMUkZZ-yNbaJNN1s9Q2PwJi8NuP-gyNuiysIdJ8f8TV3lw3IManZJ3YFXz5nPzBaycIx3-9IF222WWv_fhsEp4mRUYqaPP0-00G6cYnpem8GDSo1U3MtcQ8l0LWXq0UoFsdLBUAWEb0rp8ApEerahCjA5fshUJdAqh3sB4NIdOjmH5HDLbhVXPCCAVNm8iHT7ezIoxv_8S5Uu0IWsv_oQdN2Tt5CLS4ZMbiZ20b2VJVdosdZiYGnYyh92aI6-OUU5bsONjyPIhrHpKaOsK0uHhBq8KDqsWV0Om_EhEYUeIWHcCbnhnQMOwE5hAUaG1YYqd_ZE1c3DXQuU8VNZDZVqo8haGatHm8cCIuB_wWJvIKMoiyUPfj6Mg7Jm-DFHJB7BqD7LYQV7sYNt-0xDy2_OGeJc2GuK9fhlOeXAlwUjVhypxPVc_VomrBFvl3ir79Swrt_b5YVZu6ZSAF3soVH1g83tuF7K8MJsap2bZMnBR1jMuVD2zqiQo7i2uUsYp1abf6QeDQSdiinUGvt_rMBX7PU4jNRDqwLiy-k9rX3YioXWHCx50qK8DGfoq6lO6n5-St5dz8b79_gds60W7r1SofRVx6UfK90XIhRxEA0ZNn8vI-HC2hnUtcOdhahvyibmG3DbkyqM_IPgxXHIMad8Cr14BH898SsG_nPVCimn6o7GpGlmpuzIbQmU18nIN5X1vPzklF2ef3b7xy5lJ9PQ1aPk7WS3IokZe1LhrfyXYSh78fDMv7dBO-dI1t0pe6lfBbUO8C19D2oZc-mv3zMDxixPIfAcu_-euWeLyhujxM7iMQOQEiSVI9PljXNRw_9qL83rffYWtwoNIvJlICnIgkiLZg7OL9qDXo1SyXqziMIj9gdFhwKJIh8zva-qHKF1z9-HT7O8AAAD__89FobRGBAAA","fqdn":"workdeadlinededicate.com","domain":"workdeadlinededicate.com","tld":"com"},"ip":{"addr":"23.111.84.4","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://codedetrichelattaquedeszombieroblox.blogspot.com/","date":"2026-08-17T09:03:43.830Z","timestamp":1786957423830,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"workdeadlinededicate.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 03:50:31 GMT","end":"Fri, 25 Sep 2026 03:50:30 GMT"},"fingerprint":{"sha1":"10:47:66:26:DB:09:A5:17:78:DA:F0:CB:92:C3:2C:F2:8D:0B:43:39","sha256":"D3:7C:24:3F:AE:83:AA:B8:BE:F8:93:F7:33:46:24:C5:B4:D3:32:B8:10:D0:21:AA:C0:0A:65:7B:33:B8:AA:5B"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1xSv28cRRSevRgEouCHkpTRFSmIxJ1nbndvb0kX8aNAdhAJSkE1P83Ee7ubnd27y1VOjFIbISQapPV3dlyAIvgP0JkGIUXKdlfYTSpqUGp0zgkDU7z3Zr6nme-b9z3ar05JFxVffLqRTW2S8PWwS9vv3rGpysauvXm7zWiXXm_fsWk_uN6eLEMxep_5QZdea3-s5Xa23qOMUkZZ-yNbaJNN1s9Q2PwJi8NuP-gyNuiysIdJ8f8TV3lw3IManZJ3YFXz5nPzBaycIx3-9IF222WWv_fhsEp4mRUYqaPP0-00G6cYnpem8GDSo1U3MtcQ8l0LWXq0UoFsdLBUAWEb0rp8ApEerahCjA5fshUJdAqh3sB4NIdOjmH5HDLbhVXPCCAVNm8iHT7ezIoxv_8S5Uu0IWsv_oQdN2Tt5CLS4ZMbiZ20b2VJVdosdZiYGnYyh92aI6-OUU5bsONjyPIhrHpKaOsK0uHhBq8KDqsWV0Om_EhEYUeIWHcCbnhnQMOwE5hAUaG1YYqd_ZE1c3DXQuU8VNZDZVqo8haGatHm8cCIuB_wWJvIKMoiyUPfj6Mg7Jm-DFHJB7BqD7LYQV7sYNt-0xDy2_OGeJc2GuK9fhlOeXAlwUjVhypxPVc_VomrBFvl3ir79Swrt_b5YVZu6ZSAF3soVH1g83tuF7K8MJsap2bZMnBR1jMuVD2zqiQo7i2uUsYp1abf6QeDQSdiinUGvt_rMBX7PU4jNRDqwLiy-k9rX3YioXWHCx50qK8DGfoq6lO6n5-St5dz8b79_gds60W7r1SofRVx6UfK90XIhRxEA0ZNn8vI-HC2hnUtcOdhahvyibmG3DbkyqM_IPgxXHIMad8Cr14BH898SsG_nPVCimn6o7GpGlmpuzIbQmU18nIN5X1vPzklF2ef3b7xy5lJ9PQ1aPk7WS3IokZe1LhrfyXYSh78fDMv7dBO-dI1t0pe6lfBbUO8C19D2oZc-mv3zMDxixPIfAcu_-euWeLyhujxM7iMQOQEiSVI9PljXNRw_9qL83rffYWtwoNIvJlICnIgkiLZg7OL9qDXo1SyXqziMIj9gdFhwKJIh8zva-qHKF1z9-HT7O8AAAD__89FobRGBAAA HTTP/1.1\r\nHost: workdeadlinededicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=51d37b75-bb9e-4afa-8055-4f4d0beef1d1:2:1; ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.NwIIfnia2kdxwhqeJDPBd1QlrQjW29VAep3DyGmA8iE; pdhtkv=true; uncs=1; pdhtkv5=true; uncs5=1; u_pl26582443=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Mon, 17 Aug 2026 09:03:43 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccept-ch: X-Operamini-Phone-Ua,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Platform,Device-Stock-Ua,X-Device-User-Agent,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nset-cookie: iprc_c+41d73c07b0e0b7e525cd6dd6ee4b9bc6=1438851; Path=/; Expires=Tue, 18 Aug 2026 09:03:43 GMT; Secure; SameSite=None\niprc_c-1438851=8; Path=/; Expires=Tue, 18 Aug 2026 09:03:43 GMT; Secure; SameSite=None\r\nvary: Origin\r\nx-envoy-upstream-service-time: 5\r\nHost: workdeadlinededicate.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 5f4b9de067ceb7d4eee97014f42ab449\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":[{"name":"iprc_c+41d73c07b0e0b7e525cd6dd6ee4b9bc6","value":"1438851","quoted":false,"path":"/","expires":"2026-08-18T09:03:43Z","raw_expires":"Tue, 18 Aug 2026 09:03:43 GMT","max_age":0,"secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"iprc_c+41d73c07b0e0b7e525cd6dd6ee4b9bc6=1438851; Path=/; Expires=Tue, 18 Aug 2026 09:03:43 GMT; Secure; SameSite=None"},{"name":"iprc_c-1438851","value":"8","quoted":false,"path":"/","expires":"2026-08-18T09:03:43Z","raw_expires":"Tue, 18 Aug 2026 09:03:43 GMT","max_age":0,"secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"iprc_c-1438851=8; Path=/; Expires=Tue, 18 Aug 2026 09:03:43 GMT; Secure; SameSite=None"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T11:42:41.491216Z","times_seen":17936532,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"workdeadlinededicate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"workdeadlinededicate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tagivi.com/3/d089ea049f0f7b1eacfa2b5bb99d3bdc?uidm=01a00ef6-64d8-76a5-957b-90106a8fea02_1","fqdn":"tagivi.com","domain":"tagivi.com","tld":"com"},"ip":{"addr":"104.21.61.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://codedetrichelattaquedeszombieroblox.blogspot.com/","date":"2026-08-17T09:03:44.965Z","timestamp":1786957424965,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tagivi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Jul 2026 16:52:57 GMT","end":"Sat, 17 Oct 2026 17:52:51 GMT"},"fingerprint":{"sha1":"EB:03:AE:39:98:D1:E6:52:78:12:1F:F2:8F:E8:64:39:78:C0:2B:B8","sha256":"CB:EB:EE:A5:FB:55:E0:5B:D5:D4:83:21:BB:F9:11:66:4F:A2:17:74:B4:63:78:C7:04:C1:6E:E5:CA:00:FF:9E"}}},"request":{"raw":"GET /3/d089ea049f0f7b1eacfa2b5bb99d3bdc?uidm=01a00ef6-64d8-76a5-957b-90106a8fea02_1 HTTP/1.1\r\nHost: tagivi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://codedetrichelattaquedeszombieroblox.blogspot.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://codedetrichelattaquedeszombieroblox.blogspot.com/\r\nCookie: uidm=01a00ef6-64a1-793a-b20d-c6b8b60c1189_1; __cf_bm=ruj_PuJ8ToC8VkVT4O5xzMaHmk1igS1VmQUnXQ6rrB0-1786957423.7356522-1.0.1.1-GUSoWPk1nsgTEw_alLwZtgGXD21BKNztKIwa0DH3oOwBoEoXgNUB9teMYQf89WeA9rJcvhMln1MFAo0khPgsVdJ44UyB4hUNPuKxjUQ7GxOLVbxDWatcAlD059tFf63E\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 17 Aug 2026 09:03:45 GMT\r\ncontent-type: text/plain\r\nserver: cloudflare\r\naccept-ch: Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile,Device-Stock-Ua,X-Device-User-Agent,X-Ucbrowser-Device-Ua,Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Platform,X-Operamini-Phone-Ua,User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Full-Version-List\r\nset-cookie: uidm=01a00ef6-64d8-76a5-957b-90106a8fea02_2; Path=/; Expires=Thu, 14 Aug 2036 09:03:45 GMT; Secure; SameSite=None\r\nvary: Accept-Encoding, Origin\r\nx-envoy-upstream-service-time: 13\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: no-cache, max-age=0, private, no-cache\r\nx-request-id: 5adc3b724801a286d29cf27095355e7e\r\npragma: no-cache\r\naccess-control-allow-origin: https://codedetrichelattaquedeszombieroblox.blogspot.com\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,X-Forwarded-For,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1728000\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: gzip\r\ncf-ray: a2c781e20d53b4fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"uidm","value":"01a00ef6-64d8-76a5-957b-90106a8fea02_2","quoted":false,"path":"/","expires":"2036-08-14T09:03:45Z","raw_expires":"Thu, 14 Aug 2036 09:03:45 GMT","max_age":0,"secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uidm=01a00ef6-64d8-76a5-957b-90106a8fea02_2; Path=/; Expires=Thu, 14 Aug 2036 09:03:45 GMT; Secure; SameSite=None"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":76,"size_decoded":1368,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"635bbc5af4908e7566804e79b6940efe","sha1":"153bddc4eb10ce557f1cb661d3f588aa85244482","sha256":"3f1eaa7d7002fceeb4649f86387834dd22bef90dda73d89cd58d5f3f5cf88ea4","sha512":"80d62679086aee8be78521eb693b5e2a61aa24084defd8b4fa808767f42c823affb0cde1aa0ee798681dd3a88f9417a247b53e0a3bedfbdadf640b556234aae3","ssdeep":"","tlshash":"eaa002f839f3cd0599719ae3fe448821ec6411372cfb49e1c7042145ab999cd4d95ece","first_seen":"2026-08-17T09:04:20.175979Z","last_seen":"2026-08-17T09:04:20.175979Z","times_seen":1,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.redgarto.com/sb/notifications/dating/default/us/desk-all/css/animate.css","fqdn":"cdn.redgarto.com","domain":"redgarto.com","tld":"com"},"ip":{"addr":"172.67.151.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://codedetrichelattaquedeszombieroblox.blogspot.com/","date":"2026-08-17T09:03:45.181Z","timestamp":1786957425181,"http_version":"HTTP/3","security_state":"","security_info":null,"request":{"raw":"GET /sb/notifications/dating/default/us/desk-all/css/animate.css HTTP/1.1\r\nHost: cdn.redgarto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://codedetrichelattaquedeszombieroblox.blogspot.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://codedetrichelattaquedeszombieroblox.blogspot.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 17 Aug 2026 09:03:45 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 19 Jan 2024 14:23:50 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"65aa85f6-13361\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yrGG7emP1gOBJXf%2FLpfEXTKfrHaBdodJLE%2FpZMsrRPUtWKsVHz6fa5te%2FtOe5m8jMax%2B%2FENIDGvyijuIdi4DSmpU0%2BzFr9mGR8S6WYImCHUf6f3kmhGfZWAx63TJkKXf4%2FeA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2c781e35d9a5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T11:42:41.491216Z","times_seen":17936532,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.redgarto.com/sb/notifications/dating/default/us/desk-all/css/style.css","fqdn":"cdn.redgarto.com","domain":"redgarto.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://codedetrichelattaquedeszombieroblox.blogspot.com/","date":"2026-08-17T09:03:45.182Z","timestamp":1786957425182,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /sb/notifications/dating/default/us/desk-all/css/style.css HTTP/1.1\r\nHost: cdn.redgarto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://codedetrichelattaquedeszombieroblox.blogspot.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://codedetrichelattaquedeszombieroblox.blogspot.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T11:42:41.491216Z","times_seen":17936532,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/si/b3/dd/fd/b3ddfd7cf6f212b3bce3129fb7a007fc/1683231156.png","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://codedetrichelattaquedeszombieroblox.blogspot.com/","date":"2026-08-17T09:03:45.295Z","timestamp":1786957425295,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 02:32:41 GMT","end":"Sat, 03 Oct 2026 02:32:40 GMT"},"fingerprint":{"sha1":"93:44:E1:27:F0:B8:DC:66:E6:9C:61:B4:0A:67:1A:15:C1:03:96:E0","sha256":"09:8F:8B:62:8F:36:FB:39:E7:E7:46:10:C8:84:35:9D:EC:3D:D1:F9:7A:9A:BA:A9:C2:94:41:1A:DF:D7:05:FC"}}},"request":{"raw":"GET /si/b3/dd/fd/b3ddfd7cf6f212b3bce3129fb7a007fc/1683231156.png HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 17 Aug 2026 09:03:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 64601\r\nserver: nginx/1.21.6\r\nlast-modified: Thu, 04 May 2023 20:12:45 GMT\r\netag: \"645411bd-fc59\"\r\nexpires: Wed, 19 Aug 2026 09:03:45 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":64601,"size_decoded":64948,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"887812a53b8ea2dbad33f6ae105b8c2d","sha1":"f83d97ef46827200fa62093ed09b4b6fa25b26d8","sha256":"9443edf293511b0732211234002c799508a2bfc63a3e28a57d7b12ee30f277e9","sha512":"83d31c81c672ae6eec74c4fdfdfb660b5f7bff5f11adf46f455d1dfb1f9461bb34a8fe132121cae669c3c2337cb476e1c130f10a1d18a7e7c426329c1767dd46","ssdeep":"1536:6Pc0RaMAwV3e6sdzcxwkFXDcohfdZh0jYCnzX0TJ59G:6k0RBV3Erkxwohfj0YCnr0N5c","tlshash":"46530204775eb63e718713a17bced422d11916235c828a16d63ca7e29ffa07d7fca482","first_seen":"2023-05-05T23:11:51Z","last_seen":"2026-08-17T09:04:20.185394Z","times_seen":2632,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lh3.googleusercontent.com/blogger_img_proxy/AEn0k_ty32V3XuSq9Isc2teCyqaiUR0HC4EaCG7WCGkAzsLxE-6dwLi9kZMOAne8ajho1rQk5prqLm1plrk3ap71rT3sZlpm8z6f-5mKlwHAm_ZmG7k","fqdn":"lh3.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.178.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://codedetrichelattaquedeszombieroblox.blogspot.com/","date":"2026-08-17T09:03:34.429Z","timestamp":1786957414429,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:55 GMT","end":"Wed, 28 Oct 2026 20:43:54 GMT"},"fingerprint":{"sha1":"95:6D:D6:E8:EA:27:36:99:96:C8:37:25:61:78:95:F0:BC:6E:46:2D","sha256":"8F:F4:8A:1B:BB:05:CC:8F:B6:25:25:33:E8:DB:2A:83:0B:16:55:83:6D:52:5E:68:33:FC:CB:92:F2:D3:7D:C6"}}},"request":{"raw":"GET /blogger_img_proxy/AEn0k_ty32V3XuSq9Isc2teCyqaiUR0HC4EaCG7WCGkAzsLxE-6dwLi9kZMOAne8ajho1rQk5prqLm1plrk3ap71rT3sZlpm8z6f-5mKlwHAm_ZmG7k HTTP/1.1\r\nHost: lh3.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://codedetrichelattaquedeszombieroblox.blogspot.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/jpeg\r\nvary: Origin\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: Content-Length\r\nexpires: Tue, 18 Aug 2026 09:03:34 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"unnamed.jpg\"\r\nx-content-type-options: nosniff\r\ndate: Mon, 17 Aug 2026 09:03:34 GMT\r\nserver: fife\r\ncontent-length: 2489\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2489,"size_decoded":2975,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 120x90, components 3","md5":"8c474c6dbb366ffc4cc7a552de5037d2","sha1":"d6c0d56193fb532d86b7452a8f5fd3418b7fb4a6","sha256":"b4c70b38cb446e44db98a6649107102666e6fc2763e550fdcf902f218445b56e","sha512":"a9b08b356adc7b3a96dc95bdb85f025f8d08e589d303131e5550b0282693228678def39af385e587336edcd372b34efe652a057f5abc68ab5f9d33fc6e9a2b7f","ssdeep":"","tlshash":"b0510c2771035ec5dd9e263301e00a7707e601f1ed1e1f60d2567f99c8f97c1ba8a446","first_seen":"2026-07-21T21:17:10.971267Z","last_seen":"2026-08-17T09:04:20.186268Z","times_seen":3,"resource_available":false,"data":null}},"time_used":473,"timings":{"blocked":161,"dns":0,"connect":16,"send":0,"wait":32,"receive":0,"ssl":262},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiCislEnXbtHIftrjYalYxpOXTAg6d5u696XVHNylbsczOU_rqeobDTnpWlNkp6hWf7FN7ACLl_Ws8BGe7N2zHBS4Coo2WH-JWIqpjowAnq4Cbdov4NbUDDBJ5lH_mBWRgpVqMVY4-ZjZZO/s1600/search.png","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.178.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://codedetrichelattaquedeszombieroblox.blogspot.com/","date":"2026-08-17T09:03:41.215Z","timestamp":1786957421215,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:55 GMT","end":"Wed, 28 Oct 2026 20:43:54 GMT"},"fingerprint":{"sha1":"95:6D:D6:E8:EA:27:36:99:96:C8:37:25:61:78:95:F0:BC:6E:46:2D","sha256":"8F:F4:8A:1B:BB:05:CC:8F:B6:25:25:33:E8:DB:2A:83:0B:16:55:83:6D:52:5E:68:33:FC:CB:92:F2:D3:7D:C6"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEiCislEnXbtHIftrjYalYxpOXTAg6d5u696XVHNylbsczOU_rqeobDTnpWlNkp6hWf7FN7ACLl_Ws8BGe7N2zHBS4Coo2WH-JWIqpjowAnq4Cbdov4NbUDDBJ5lH_mBWRgpVqMVY4-ZjZZO/s1600/search.png HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://codedetrichelattaquedeszombieroblox.blogspot.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/png\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"v38\"\r\nexpires: Tue, 18 Aug 2026 09:03:41 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"search.png\"\r\nx-content-type-options: nosniff\r\ndate: Mon, 17 Aug 2026 09:03:41 GMT\r\nserver: fife\r\ncontent-length: 507\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":507,"size_decoded":947,"mime_type":"image/png","magic":"PNG image data, 14 x 13, 8-bit/color RGB, non-interlaced","md5":"91a1b24271947535ae69265e8a737916","sha1":"8414a2b698425a3e5971a575b6fac415e0a6d8ff","sha256":"46fe89f3b2542f92e09f8ec274f9a1eda5ee75abdc388357abd3176f4474073a","sha512":"dff05adf7a2cebec127c89e5b6ec914f777217c398470efb922471fbe809c8dba6781793122c2e8bc79bcfee1634b9cceedc56e99928fc741e974d3bff9a11a6","ssdeep":"","tlshash":"04f075c64d463578c3bfc322007504e6d05730703351ad562034ea28d4d32a4c5b5200","first_seen":"2023-04-08T07:26:16Z","last_seen":"2026-08-17T09:04:20.187031Z","times_seen":299,"resource_available":false,"data":null}},"time_used":414,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":414,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adxpy.pages.dev/adx-mainstream.json","fqdn":"adxpy.pages.dev","domain":"adxpy.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://codedetrichelattaquedeszombieroblox.blogspot.com/","date":"2026-08-17T09:03:41.296Z","timestamp":1786957421296,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adxpy.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 05:18:17 GMT","end":"Fri, 30 Oct 2026 06:16:46 GMT"},"fingerprint":{"sha1":"8D:43:4D:D7:86:01:CA:27:86:FA:7D:C2:CC:D2:28:AA:8B:23:B6:D5","sha256":"7C:CF:37:C6:8E:F4:FA:9D:BD:6F:4B:19:25:E6:79:CA:A5:FA:57:31:AD:F5:49:0E:E8:51:D1:04:35:AE:DC:68"}}},"request":{"raw":"GET /adx-mainstream.json HTTP/1.1\r\nHost: adxpy.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://codedetrichelattaquedeszombieroblox.blogspot.com/\r\nOrigin: https://codedetrichelattaquedeszombieroblox.blogspot.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 17 Aug 2026 09:03:41 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=awvzpns0AoYSF41myIv0eVuXU2TrX%2Bj14pPj1%2F5sktDIlh5k92Gfc4JSmQPpYM2CnfQWf2QIqd9nTCA6H0AyqcUibHn7uEjGWe0TA6eDMD8rjOAVUgIfDbbe%2Fm8keSKO7us%3D\"}]}\r\netag: W/\"7b49849f40013f93e7f062a5ea9f812c\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a2c781cb393856c4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1453,"size_decoded":1229,"mime_type":"application/json","magic":"JSON text data","md5":"6ffbb69834723feb9c7113271b1c2ea2","sha1":"8bfa604b64d94fad6bbeaf5c580175e4001d4dc5","sha256":"46498f749be8fd2b102eb3563d490c7890b94ed1d0b5b133e2cc3c444ed048c2","sha512":"7b15f328c00533c83fa7c65fff45e5fff27b012955d49affd579a7c7eb14a66839822b50b7947d609d53e08419128bef2773fcb5bc6f95b77731662acf7cb001","ssdeep":"","tlshash":"f9319e999f1cf29410b24ad23c33e0bef598be063908dc9551dc9c6ac2a43e04d57666","first_seen":"2026-01-30T08:57:52.033645Z","last_seen":"2026-08-17T09:04:20.189254Z","times_seen":299,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":0,"dns":6,"connect":1,"send":0,"wait":90,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/cti/ad/7f/13/ad7f1304b45dec7e1bf4bd6fbd9d7c36/1779116051.jpg","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://codedetrichelattaquedeszombieroblox.blogspot.com/","date":"2026-08-17T09:03:43.829Z","timestamp":1786957423829,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 02:32:41 GMT","end":"Sat, 03 Oct 2026 02:32:40 GMT"},"fingerprint":{"sha1":"93:44:E1:27:F0:B8:DC:66:E6:9C:61:B4:0A:67:1A:15:C1:03:96:E0","sha256":"09:8F:8B:62:8F:36:FB:39:E7:E7:46:10:C8:84:35:9D:EC:3D:D1:F9:7A:9A:BA:A9:C2:94:41:1A:DF:D7:05:FC"}}},"request":{"raw":"GET /cti/ad/7f/13/ad7f1304b45dec7e1bf4bd6fbd9d7c36/1779116051.jpg HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 17 Aug 2026 09:03:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 54297\r\nserver: nginx/1.21.6\r\nlast-modified: Mon, 18 May 2026 14:54:11 GMT\r\netag: \"6a0b2813-d419\"\r\nexpires: Wed, 19 Aug 2026 09:03:43 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":54297,"size_decoded":54645,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 300x250, components 3","md5":"c6da13d50ef75fd16e88bbeb245ee5c0","sha1":"d942fb9fab09c464d53032369e037f817122267c","sha256":"5cc545faae99fb50ca74391f0a49085a3c4960caa72354b290ad204808151dcf","sha512":"17dbeb32672e820336c166d5fe772f5a66b24eb9de06d63f6ac4c7ff4c887df648ce18173605da23a22e0cd40093b5247e98f96a385e18d264d1c9784aeef2d4","ssdeep":"1536:QC7OecEw6JNVALdAYJLqh9KPFdnE8XXzaTxr:n7/cVkNGPG9KPFdnE2q","tlshash":"6a33f1c4e3b3bb0017877b4a5a6c8d364714cadb91c5724266935c2fc6eae607012eef","first_seen":"2026-05-18T23:57:18.593885Z","last_seen":"2026-08-17T09:04:20.190064Z","times_seen":303,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":2,"connect":19,"send":0,"wait":19,"receive":34,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"createlouisville.org/7/af25da8381e0bd0494ba4018c76898a2?uidm=01a00ef6-64d8-76a5-957b-90106a8fea02_1","fqdn":"createlouisville.org","domain":"createlouisville.org","tld":"org"},"ip":{"addr":"104.21.82.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://codedetrichelattaquedeszombieroblox.blogspot.com/","date":"2026-08-17T09:03:44.381Z","timestamp":1786957424381,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"createlouisville.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 13:27:52 GMT","end":"Mon, 28 Sep 2026 14:27:43 GMT"},"fingerprint":{"sha1":"2D:37:E6:26:86:DD:C7:63:98:BA:52:2A:97:8E:4F:F2:DD:7B:2D:05","sha256":"23:6E:87:DD:91:58:54:57:87:1C:E8:C2:31:3D:17:3D:A4:68:F2:7B:F6:AA:0E:FC:74:94:08:04:E2:2B:5C:AC"}}},"request":{"raw":"GET /7/af25da8381e0bd0494ba4018c76898a2?uidm=01a00ef6-64d8-76a5-957b-90106a8fea02_1 HTTP/1.1\r\nHost: createlouisville.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://codedetrichelattaquedeszombieroblox.blogspot.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://codedetrichelattaquedeszombieroblox.blogspot.com/\r\nCookie: uidm=01a00ef6-64a0-7ebf-aa1c-809fdb936315_1; __cf_bm=PKc27USQADFY1iq5UAKPamMDsc2S6xYS4Jp9gXlecCw-1786957423.7305145-1.0.1.1-GMpPhNHSFnqKGUfpRri8PfQL89cXFB7KhTkvW.kQzpie0kojjuk48wBsOVv1LRI46hLbK0_qy8EcqDZ.tEjm.HxpVGDG5uKWvcWINnBn4kxhSt7EcQ.0q9JUaTpJz0vf\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 17 Aug 2026 09:03:44 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nserver: cloudflare\r\naccept-ch: X-Ucbrowser-Device-Ua,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Model,Device-Stock-Ua,User-Agent,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Mobile,X-Device-User-Agent,X-Operamini-Phone-Ua\r\ncontent-encoding: gzip\r\nset-cookie: uidm=01a00ef6-64d8-76a5-957b-90106a8fea02_2; Path=/; Expires=Thu, 14 Aug 2036 09:03:44 GMT; Secure; SameSite=None\npdhtkv=true; Path=/; Expires=Tue, 18 Aug 2026 09:03:44 GMT; Secure; SameSite=None\nuncs=1; Path=/; Expires=Tue, 18 Aug 2026 09:03:44 GMT; Secure; SameSite=None\npdhtkv29=true; Path=/; Expires=Tue, 18 Aug 2026 09:03:44 GMT; Secure; SameSite=None\nuncs29=1; Path=/; Expires=Tue, 18 Aug 2026 09:03:44 GMT; Secure; SameSite=None\nu_pl28216845=1; Path=/; Expires=Tue, 18 Aug 2026 09:03:44 GMT; Secure; SameSite=None\nslecaf25da8381e0bd0494ba4018c76898a2=[6655446]; Path=/; Expires=Mon, 17 Aug 2026 09:03:49 GMT; Secure; SameSite=None\r\nvary: Accept-Encoding, Origin\r\nx-envoy-upstream-service-time: 226\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: no-cache, max-age=0, private, no-cache\r\nx-request-id: c14d959201f75a29caf937c6e0ddfe36\r\npragma: no-cache\r\naccess-control-allow-origin: https://codedetrichelattaquedeszombieroblox.blogspot.com\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,X-Forwarded-For,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1728000\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a2c781de59da76ef-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"uidm","value":"01a00ef6-64d8-76a5-957b-90106a8fea02_2","quoted":false,"path":"/","expires":"2036-08-14T09:03:44Z","raw_expires":"Thu, 14 Aug 2036 09:03:44 GMT","max_age":0,"secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uidm=01a00ef6-64d8-76a5-957b-90106a8fea02_2; Path=/; Expires=Thu, 14 Aug 2036 09:03:44 GMT; Secure; SameSite=None"},{"name":"pdhtkv","value":"true","quoted":false,"path":"/","expires":"2026-08-18T09:03:44Z","raw_expires":"Tue, 18 Aug 2026 09:03:44 GMT","max_age":0,"secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"pdhtkv=true; Path=/; Expires=Tue, 18 Aug 2026 09:03:44 GMT; Secure; SameSite=None"},{"name":"uncs","value":"1","quoted":false,"path":"/","expires":"2026-08-18T09:03:44Z","raw_expires":"Tue, 18 Aug 2026 09:03:44 GMT","max_age":0,"secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uncs=1; Path=/; Expires=Tue, 18 Aug 2026 09:03:44 GMT; Secure; SameSite=None"},{"name":"pdhtkv29","value":"true","quoted":false,"path":"/","expires":"2026-08-18T09:03:44Z","raw_expires":"Tue, 18 Aug 2026 09:03:44 GMT","max_age":0,"secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"pdhtkv29=true; Path=/; Expires=Tue, 18 Aug 2026 09:03:44 GMT; Secure; SameSite=None"},{"name":"uncs29","value":"1","quoted":false,"path":"/","expires":"2026-08-18T09:03:44Z","raw_expires":"Tue, 18 Aug 2026 09:03:44 GMT","max_age":0,"secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uncs29=1; Path=/; Expires=Tue, 18 Aug 2026 09:03:44 GMT; Secure; SameSite=None"},{"name":"u_pl28216845","value":"1","quoted":false,"path":"/","expires":"2026-08-18T09:03:44Z","raw_expires":"Tue, 18 Aug 2026 09:03:44 GMT","max_age":0,"secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"u_pl28216845=1; Path=/; Expires=Tue, 18 Aug 2026 09:03:44 GMT; Secure; SameSite=None"},{"name":"slecaf25da8381e0bd0494ba4018c76898a2","value":"[6655446]","quoted":false,"path":"/","expires":"2026-08-17T09:03:49Z","raw_expires":"Mon, 17 Aug 2026 09:03:49 GMT","max_age":0,"secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"slecaf25da8381e0bd0494ba4018c76898a2=[6655446]; Path=/; Expires=Mon, 17 Aug 2026 09:03:49 GMT; Secure; SameSite=None"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":6993,"size_decoded":6054,"mime_type":"text/plain; charset=utf-8","magic":"JSON text data","md5":"55908a51968c0e36dcce5bf5cc81e067","sha1":"195ff80c93e91736f6e4263185efc5f0a401fccf","sha256":"ab016df56513f529b665d6072e86826cb246d85cc463be9d4e5c84452f7338d6","sha512":"10ff6abda33109e58a172e9fe73efed69f0a384ff9597b40cc9279030c7753ceabc2f077c96934a7f3084b073a5d6ab3a66be0d8af4b828ccf5868ec3ef0e300","ssdeep":"192:9ziSSdulPgNxIyklRX1XvSbJ/ctFxIyklGywDS:9zPSdaINxIykl5YbaFxIyklGbDS","tlshash":"bae17daf0e010cd0acd56ea4b15f1f391c9ccf0737208656cacaa3fa85ef0558b32569","first_seen":"2026-08-17T09:04:20.19134Z","last_seen":"2026-08-17T09:04:20.19134Z","times_seen":1,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://codedetrichelattaquedeszombieroblox.blogspot.com/","date":"2026-08-17T09:03:44.727Z","timestamp":1786957424727,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://codedetrichelattaquedeszombieroblox.blogspot.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 13 Aug 2026 10:17:38 GMT\r\nexpires: Fri, 13 Aug 2027 10:17:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 341166\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":43949,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-08-17T11:41:02.740768Z","times_seen":264918,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":3,"connect":30,"send":0,"wait":18,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/si/05/c8/20/05c820d9ce67af6dea2e5441dbe3e8f9/1683231080.png","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://codedetrichelattaquedeszombieroblox.blogspot.com/","date":"2026-08-17T09:03:45.294Z","timestamp":1786957425294,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 02:32:41 GMT","end":"Sat, 03 Oct 2026 02:32:40 GMT"},"fingerprint":{"sha1":"93:44:E1:27:F0:B8:DC:66:E6:9C:61:B4:0A:67:1A:15:C1:03:96:E0","sha256":"09:8F:8B:62:8F:36:FB:39:E7:E7:46:10:C8:84:35:9D:EC:3D:D1:F9:7A:9A:BA:A9:C2:94:41:1A:DF:D7:05:FC"}}},"request":{"raw":"GET /si/05/c8/20/05c820d9ce67af6dea2e5441dbe3e8f9/1683231080.png HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 17 Aug 2026 09:03:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 39220\r\nserver: nginx/1.21.6\r\nlast-modified: Thu, 04 May 2023 20:11:29 GMT\r\netag: \"64541171-9934\"\r\nexpires: Wed, 19 Aug 2026 09:03:45 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":39220,"size_decoded":39567,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"6451b63b68b5068db02571051f6f6a30","sha1":"32badef5d69090b4d2ea7b300bb5264938e198ef","sha256":"b1b0a314a2d4924b2849fec48b7863ccc68413e58330d99f6ad901bfa6282819","sha512":"12f2c9fce754fb585d60201d30028ef03fd634d7c175dbb13b75e8f6d4b788373460c9d52f4188b320ca975c16f93174582f8b9e9427116a9701b34b1a9d8226","ssdeep":"768:BcC935u4uKqUlIv6kZPZmzfolE0L7olKyeofZG3xi/vp1:BcC17uiW6gZizSoreoq2z","tlshash":"d003f1d23a76cce2c1340527ab7514a7dead028bb9b3f0a832475e43f58c3e758ac516","first_seen":"2023-05-05T23:11:51Z","last_seen":"2026-08-17T09:04:20.193936Z","times_seen":2628,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lh3.googleusercontent.com/blogger_img_proxy/AEn0k_sPi35BHyr-l9XTzeCCSj55IrQTtJc9itnQlOIEDlTXb2SMuXheME2JrmP4Em75k3QuAp-cL1kifcnrTEgNB2G__TOQj0RDym1MzGjIWJnK6BE","fqdn":"lh3.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.178.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://codedetrichelattaquedeszombieroblox.blogspot.com/","date":"2026-08-17T09:03:34.430Z","timestamp":1786957414430,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:55 GMT","end":"Wed, 28 Oct 2026 20:43:54 GMT"},"fingerprint":{"sha1":"95:6D:D6:E8:EA:27:36:99:96:C8:37:25:61:78:95:F0:BC:6E:46:2D","sha256":"8F:F4:8A:1B:BB:05:CC:8F:B6:25:25:33:E8:DB:2A:83:0B:16:55:83:6D:52:5E:68:33:FC:CB:92:F2:D3:7D:C6"}}},"request":{"raw":"GET /blogger_img_proxy/AEn0k_sPi35BHyr-l9XTzeCCSj55IrQTtJc9itnQlOIEDlTXb2SMuXheME2JrmP4Em75k3QuAp-cL1kifcnrTEgNB2G__TOQj0RDym1MzGjIWJnK6BE HTTP/1.1\r\nHost: lh3.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://codedetrichelattaquedeszombieroblox.blogspot.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncontent-type: image/jpeg\r\nx-content-type-options: nosniff\r\ndate: Mon, 17 Aug 2026 09:03:34 GMT\r\nserver: fife\r\ncontent-length: 1184\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":1184,"size_decoded":1465,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 120x90, components 3","md5":"b814fe384158f2e017dbe2b2f7730a5b","sha1":"e3f5d60ccdf9ae1e92dc734bee7e3e643e5ef8a7","sha256":"766658e536c5b242f314283c1d5763673b00316facc7401650d42b0f9d6485c2","sha512":"437ab1b2a14460e16dd59019d4261f5e62548c5057ce3b12c7db6cd58ee2995f613d88e2072047a248ec69cc0b6416fdab07cd3b60966b8a1d55f77fcab122d4","ssdeep":"","tlshash":"f02175553bc5c209c0f71fb19667061e1375a1f1fac88619864a148c99fb593a680ace","first_seen":"2026-07-12T03:17:50.089261Z","last_seen":"2026-08-17T09:04:20.195029Z","times_seen":14,"resource_available":false,"data":null}},"time_used":482,"timings":{"blocked":161,"dns":0,"connect":16,"send":0,"wait":38,"receive":0,"ssl":264},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.blogger.com/img/logo-16.png","fqdn":"www.blogger.com","domain":"blogger.com","tld":"com"},"ip":{"addr":"142.250.178.105","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://codedetrichelattaquedeszombieroblox.blogspot.com/","date":"2026-08-17T09:03:41.217Z","timestamp":1786957421217,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.blogger.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:42:06 GMT","end":"Wed, 28 Oct 2026 20:42:05 GMT"},"fingerprint":{"sha1":"CB:E1:29:B0:93:DD:D5:C2:9E:03:A5:89:AE:A5:8B:33:32:42:73:91","sha256":"D7:24:30:5A:42:0A:8D:31:C1:7E:0A:44:4C:D2:23:E9:36:40:DC:C7:66:66:2D:E3:1F:51:8B:7F:3F:4A:02:AF"}}},"request":{"raw":"GET /img/logo-16.png HTTP/1.1\r\nHost: www.blogger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://codedetrichelattaquedeszombieroblox.blogspot.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"blogger-tech\"\r\nreport-to: {\"group\":\"blogger-tech\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/blogger-tech\"}]}\r\ncontent-length: 279\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 10 Aug 2026 10:38:50 GMT\r\nexpires: Mon, 17 Aug 2026 10:38:50 GMT\r\ncache-control: public, max-age=604800\r\nlast-modified: Sun, 09 Aug 2026 16:31:03 GMT\r\ncontent-type: image/png\r\nage: 599091\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":279,"size_decoded":918,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"5ffecab6c722bb0adc3fce8d83b27993","sha1":"0e59b05d3da526e82bb4f5d47c5d94e2a318dafb","sha256":"cca664ca16fde285160e80eae6ba4501c27b1dd1ce09aec1e84caa74b5baff53","sha512":"655aae12f3a82ce117cd73b4aa703b82e704927eac4a3e675552088de1afc8d5a222726f2b5489a99e5fbf7c2c4ef481d22984390c905e24b82eb002736c302c","ssdeep":"","tlshash":"06d02bdca5457d74ff5e053a277b7a4ddaf3909844392e0e067e406d80197ca1a88771","first_seen":"2023-04-05T07:39:22Z","last_seen":"2026-08-17T09:04:20.196899Z","times_seen":26772,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spendsdetachment.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.redgarto.com%2Fsb%2Finterstitial%2Futility%2Fdefault%2Fblog%2Fflip_icon_fullpage%2Fmar24%2F4%2Fcss%2Fanimate.css\u0026l=79249\u0026fd=143","fqdn":"spendsdetachment.com","domain":"spendsdetachment.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://codedetrichelattaquedeszombieroblox.blogspot.com/","date":"2026-08-17T09:03:43.871Z","timestamp":1786957423871,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"spendsdetachment.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 02:47:50 GMT","end":"Fri, 25 Sep 2026 02:47:49 GMT"},"fingerprint":{"sha1":"ED:7A:AE:D7:41:6B:59:34:BC:24:1A:71:55:02:F6:3E:BB:AB:82:0B","sha256":"E0:B2:A3:F1:B9:7C:A9:81:4F:7A:12:BA:2B:56:9A:DB:6D:7F:DC:37:71:1C:4D:EA:08:FB:A8:46:A6:C3:D1:53"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.redgarto.com%2Fsb%2Finterstitial%2Futility%2Fdefault%2Fblog%2Fflip_icon_fullpage%2Fmar24%2F4%2Fcss%2Fanimate.css\u0026l=79249\u0026fd=143 HTTP/1.1\r\nHost: spendsdetachment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://codedetrichelattaquedeszombieroblox.blogspot.com/\r\nCookie: uid_id2=51d37b75-bb9e-4afa-8055-4f4d0beef1d1:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl26582471=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Mon, 17 Aug 2026 09:03:43 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: Sec-Ch-Ua-Mobile, X-Device-User-Agent, X-Ucbrowser-Device-Ua, Sec-Ch-Ua-Platformuser-Agent, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Ua-Platform, Device-Stock-Ua, X-Operamini-Phone-Ua, User-Agent, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua, Sec-Ch-Ua-Full-Version, Sec-Ch-Ua-Model\r\nHost: spendsdetachment.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":802,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T11:42:41.491216Z","times_seen":17936532,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"spendsdetachment.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"spendsdetachment.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.show-sb.com/sb/au/24/54/4e/24544ed07f7394384bbb75023b9b0b3a/1591713925.html","fqdn":"cdn.show-sb.com","domain":"show-sb.com","tld":"com"},"ip":{"addr":"172.67.170.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://codedetrichelattaquedeszombieroblox.blogspot.com/","date":"2026-08-17T09:03:44.657Z","timestamp":1786957424657,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"show-sb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Jul 2026 08:49:29 GMT","end":"Thu, 29 Oct 2026 09:49:07 GMT"},"fingerprint":{"sha1":"C6:C1:39:5B:4A:88:46:B1:12:EF:0B:E1:32:AA:4B:26:BC:E9:04:3C","sha256":"97:94:F6:6E:AE:28:3E:4B:61:23:FE:FD:3B:D0:CD:67:8D:82:40:5B:11:AA:57:9E:36:73:2D:B8:75:67:B9:3C"}}},"request":{"raw":"GET /sb/au/24/54/4e/24544ed07f7394384bbb75023b9b0b3a/1591713925.html HTTP/1.1\r\nHost: cdn.show-sb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://codedetrichelattaquedeszombieroblox.blogspot.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://codedetrichelattaquedeszombieroblox.blogspot.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 17 Aug 2026 09:03:45 GMT\r\ncontent-type: text/html\r\nlast-modified: Sat, 07 May 2022 03:21:27 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CX0o0SOt3mnK4ABCaY1vWaxqXTqI8DOd9TY0dI%2Fd343uvKcqAEKPIIWhgcwTXhvrBZTzKNOzjR8duEB6YDgxViXGgl%2FROFixgxv7FvVbeltOFoWgUF1kkH5Sxk%2Bj2FbUxYs%3D\"}]}\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a2c781e029d90b45-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1274,"size_decoded":1304,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"d0ad675486e71d2572491722d28ce9d9","sha1":"3dffb067589240dad5167db540b8af1e1f6b3355","sha256":"c8b69d3ee0e9fbe2d1c5c07bd250ba3d7edf5bf26e3567629e9e332248273daa","sha512":"d40b4a6f2771640afe909ab06b0292769d0f51f873b2d31cab579a71cd17929ec816378b6c836bed56699469ac90f457ccd2d0e5a1053d4bc7dc7c7738b3b7e4","ssdeep":"","tlshash":"a42168262cc9d07721b381d6ba302f9bfe96958bc84b690037fd1a535fbae44ca03507","first_seen":"2023-05-06T00:25:55Z","last_seen":"2026-08-17T09:04:20.197755Z","times_seen":1256,"resource_available":false,"data":null}},"time_used":507,"timings":{"blocked":-1,"dns":6,"connect":9,"send":0,"wait":491,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"createlouisville.org/10/H4sIAAAAAAAC_1xTTWgbRxuelXP5-Pj4-D7S3BpEKaWBajOz2tXuJocQ1z9JFDt2ZMdJWzDzs2OPtdpd7exKik75aXNrSQqFpqf1Kzu-lNDecixyoRRDoDoUdIgvPZUeC4X2VOQYEvoe3vdhnoF5nplnHmznh8iEnI6XFuK-CkN61jFx-d01FYm4q8uLK2WCTXy-vKaimn2-3Ju0tHOOVG0TnynPB7wZn7UwwZhgUp5TaSDj3tkjFlTylPiOWbNNQjyTOBb00n-u6NwATQ0QnUP0f1Bi9N9f5Ieg-BCi1jczgW5mcfLebCsPaRan0BF7q1EzirsRtF5BmRogo73j3RDrEUJfliCO9o5dQNzZmbgApkaodOoFsGjvWCqwzu5LtSyEIAIm_g3dzhCCcAiKDoHH90GJnxAAF7B4DaLWk8U47dLbL1k6YUfoxB-_g-qO0IkXJyFqPZ0OVa_ciMM8U3GkoScLUL0hqI0hJPk-ZP0SqO4-8OweKPEc4dJpiFq7CzRPKSgxfhsTinEga5WaLbyKW6NOxXdcVvExwTXqyYBi6-iOlBwC1VOQawNyZUAuS5AnJWiJcZn6nmR-zaZ-IF0pMHE5dapV37UdS9a4Azm_C0o8BJ7e28mVaI3fee1ciituwGSFUsIrHvalYH61ViXOOtlbX-dynbXGPyzVueWuNpYvzszdIqrtrF6sL9HWwozmVqPWu9WwryT-xs0w4O93K8T1ar7j2lbVdKvYIbZTISY2iUkq8wvJ0ubipcZc1K7Pr8rkeqq8Jbl81fP5zblpt7650uysmc3lfqIC3Iy3tvKm7XWn9bUbHXL1-mW7tnmV1fF6-7Y3y9szH5jZ7FbLvNRLbszPzDt5fa3D1y4vRtOR3extNjJ3li-buO1fWaUryZU-7khI0jvQVI9GyPjXKdDCAJ0h6IhiV4Ta0sUTEeqckeNpHc9qMYizjW26G2cbQYSApg8hFcWOStr6PvBsatCXWgziSaMsKwaUiWKgRIYgbb_-xi4hFRcHdsXjjFU8blm2jaVwSXVH6iwvtpND9L9JzIynn_0HmsG4TKXlCOpVPRJgJrDt24zamHjcrXm-Ry3QqgClS0C1AX01QnV5BhI1Qqcf_AqM7oMO94ErA2j-JtBuAXSzgH70tVSR6CgemDxugYgLSLITkN02tsNDdHJwfWX6u6O0B5_-DAE_uHD4bPm3T04_A54WkKQFbKnvEWyEd7-9lmSqpfp0Ev9GRrNgCqgaITRsA1cj9MZf6dFPPDf1FvDkDujk4ML48aS-GoQ6GaGLf34BOkbAEgNCNUILn38EYXBw4cfHjwuEDKCsAB0coOMC9gpv649hIzWAhcaAhamxw8I0fPRSs1bjMhZ2QLhPHVcGjuMwx7a4lAy7lqxWLc-HTI-27j1P_g4AAP__-0a0EhgFAAA=","fqdn":"createlouisville.org","domain":"createlouisville.org","tld":"org"},"ip":{"addr":"104.21.82.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://codedetrichelattaquedeszombieroblox.blogspot.com/","date":"2026-08-17T09:03:44.659Z","timestamp":1786957424659,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"createlouisville.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 13:27:52 GMT","end":"Mon, 28 Sep 2026 14:27:43 GMT"},"fingerprint":{"sha1":"2D:37:E6:26:86:DD:C7:63:98:BA:52:2A:97:8E:4F:F2:DD:7B:2D:05","sha256":"23:6E:87:DD:91:58:54:57:87:1C:E8:C2:31:3D:17:3D:A4:68:F2:7B:F6:AA:0E:FC:74:94:08:04:E2:2B:5C:AC"}}},"request":{"raw":"GET /10/H4sIAAAAAAAC_1xTTWgbRxuelXP5-Pj4-D7S3BpEKaWBajOz2tXuJocQ1z9JFDt2ZMdJWzDzs2OPtdpd7exKik75aXNrSQqFpqf1Kzu-lNDecixyoRRDoDoUdIgvPZUeC4X2VOQYEvoe3vdhnoF5nplnHmznh8iEnI6XFuK-CkN61jFx-d01FYm4q8uLK2WCTXy-vKaimn2-3Ju0tHOOVG0TnynPB7wZn7UwwZhgUp5TaSDj3tkjFlTylPiOWbNNQjyTOBb00n-u6NwATQ0QnUP0f1Bi9N9f5Ieg-BCi1jczgW5mcfLebCsPaRan0BF7q1EzirsRtF5BmRogo73j3RDrEUJfliCO9o5dQNzZmbgApkaodOoFsGjvWCqwzu5LtSyEIAIm_g3dzhCCcAiKDoHH90GJnxAAF7B4DaLWk8U47dLbL1k6YUfoxB-_g-qO0IkXJyFqPZ0OVa_ciMM8U3GkoScLUL0hqI0hJPk-ZP0SqO4-8OweKPEc4dJpiFq7CzRPKSgxfhsTinEga5WaLbyKW6NOxXdcVvExwTXqyYBi6-iOlBwC1VOQawNyZUAuS5AnJWiJcZn6nmR-zaZ-IF0pMHE5dapV37UdS9a4Azm_C0o8BJ7e28mVaI3fee1ciituwGSFUsIrHvalYH61ViXOOtlbX-dynbXGPyzVueWuNpYvzszdIqrtrF6sL9HWwozmVqPWu9WwryT-xs0w4O93K8T1ar7j2lbVdKvYIbZTISY2iUkq8wvJ0ubipcZc1K7Pr8rkeqq8Jbl81fP5zblpt7650uysmc3lfqIC3Iy3tvKm7XWn9bUbHXL1-mW7tnmV1fF6-7Y3y9szH5jZ7FbLvNRLbszPzDt5fa3D1y4vRtOR3extNjJ3li-buO1fWaUryZU-7khI0jvQVI9GyPjXKdDCAJ0h6IhiV4Ta0sUTEeqckeNpHc9qMYizjW26G2cbQYSApg8hFcWOStr6PvBsatCXWgziSaMsKwaUiWKgRIYgbb_-xi4hFRcHdsXjjFU8blm2jaVwSXVH6iwvtpND9L9JzIynn_0HmsG4TKXlCOpVPRJgJrDt24zamHjcrXm-Ry3QqgClS0C1AX01QnV5BhI1Qqcf_AqM7oMO94ErA2j-JtBuAXSzgH70tVSR6CgemDxugYgLSLITkN02tsNDdHJwfWX6u6O0B5_-DAE_uHD4bPm3T04_A54WkKQFbKnvEWyEd7-9lmSqpfp0Ev9GRrNgCqgaITRsA1cj9MZf6dFPPDf1FvDkDujk4ML48aS-GoQ6GaGLf34BOkbAEgNCNUILn38EYXBw4cfHjwuEDKCsAB0coOMC9gpv649hIzWAhcaAhamxw8I0fPRSs1bjMhZ2QLhPHVcGjuMwx7a4lAy7lqxWLc-HTI-27j1P_g4AAP__-0a0EhgFAAA= HTTP/1.1\r\nHost: createlouisville.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://codedetrichelattaquedeszombieroblox.blogspot.com/\r\nCookie: uidm=01a00ef6-64d8-76a5-957b-90106a8fea02_2; __cf_bm=PKc27USQADFY1iq5UAKPamMDsc2S6xYS4Jp9gXlecCw-1786957423.7305145-1.0.1.1-GMpPhNHSFnqKGUfpRri8PfQL89cXFB7KhTkvW.kQzpie0kojjuk48wBsOVv1LRI46hLbK0_qy8EcqDZ.tEjm.HxpVGDG5uKWvcWINnBn4kxhSt7EcQ.0q9JUaTpJz0vf; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl28216845=1; slecaf25da8381e0bd0494ba4018c76898a2=[6655446]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 17 Aug 2026 09:03:44 GMT\r\ncontent-type: image/gif\r\ncontent-length: 7\r\nserver: cloudflare\r\naccept-ch: X-Device-User-Agent,User-Agent,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile,Device-Stock-Ua,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Platform\r\nvary: Accept-Encoding, Origin\r\nx-envoy-upstream-service-time: 3\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: no-cache, max-age=0, private, no-cache\r\nx-request-id: 8f4cd8779fe51520c0d8b872e756b7a8\r\npragma: no-cache\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,X-Forwarded-For,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1728000\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a2c781e01fa176ef-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T11:42:41.491216Z","times_seen":17936532,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"createlouisville.org/pixel/sbs?c=1","fqdn":"createlouisville.org","domain":"createlouisville.org","tld":"org"},"ip":{"addr":"104.21.82.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://codedetrichelattaquedeszombieroblox.blogspot.com/","date":"2026-08-17T09:03:46.194Z","timestamp":1786957426194,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"createlouisville.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 13:27:52 GMT","end":"Mon, 28 Sep 2026 14:27:43 GMT"},"fingerprint":{"sha1":"2D:37:E6:26:86:DD:C7:63:98:BA:52:2A:97:8E:4F:F2:DD:7B:2D:05","sha256":"23:6E:87:DD:91:58:54:57:87:1C:E8:C2:31:3D:17:3D:A4:68:F2:7B:F6:AA:0E:FC:74:94:08:04:E2:2B:5C:AC"}}},"request":{"raw":"GET /pixel/sbs?c=1 HTTP/1.1\r\nHost: createlouisville.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://codedetrichelattaquedeszombieroblox.blogspot.com/\r\nCookie: uidm=01a00ef6-64d8-76a5-957b-90106a8fea02_2; __cf_bm=PKc27USQADFY1iq5UAKPamMDsc2S6xYS4Jp9gXlecCw-1786957423.7305145-1.0.1.1-GMpPhNHSFnqKGUfpRri8PfQL89cXFB7KhTkvW.kQzpie0kojjuk48wBsOVv1LRI46hLbK0_qy8EcqDZ.tEjm.HxpVGDG5uKWvcWINnBn4kxhSt7EcQ.0q9JUaTpJz0vf; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl28216845=1; slecaf25da8381e0bd0494ba4018c76898a2=[6655446]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 17 Aug 2026 09:03:46 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\naccept-ch: Sec-Ch-Ua, Sec-Ch-Ua-Platformuser-Agent, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Ua-Full-Version, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Model, Sec-Ch-Ua-Mobile, Device-Stock-Ua, User-Agent, Sec-Ch-Ua-Platform-Version, X-Device-User-Agent, X-Operamini-Phone-Ua, X-Ucbrowser-Device-Ua\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\naccess-control-expose-headers: Content-Length,Content-Range\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a2c781e9beab76ef-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":820,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T11:42:41.491216Z","times_seen":17936532,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spendsdetachment.com/sbar.json?key=c207ec84c2456af201cc563cadc36c46\u0026uuid=51d37b75-bb9e-4afa-8055-4f4d0beef1d1%3A2%3A1","fqdn":"spendsdetachment.com","domain":"spendsdetachment.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://codedetrichelattaquedeszombieroblox.blogspot.com/","date":"2026-08-17T09:03:42.711Z","timestamp":1786957422711,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"spendsdetachment.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 02:47:50 GMT","end":"Fri, 25 Sep 2026 02:47:49 GMT"},"fingerprint":{"sha1":"ED:7A:AE:D7:41:6B:59:34:BC:24:1A:71:55:02:F6:3E:BB:AB:82:0B","sha256":"E0:B2:A3:F1:B9:7C:A9:81:4F:7A:12:BA:2B:56:9A:DB:6D:7F:DC:37:71:1C:4D:EA:08:FB:A8:46:A6:C3:D1:53"}}},"request":{"raw":"GET /sbar.json?key=c207ec84c2456af201cc563cadc36c46\u0026uuid=51d37b75-bb9e-4afa-8055-4f4d0beef1d1%3A2%3A1 HTTP/1.1\r\nHost: spendsdetachment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://codedetrichelattaquedeszombieroblox.blogspot.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://codedetrichelattaquedeszombieroblox.blogspot.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Mon, 17 Aug 2026 09:03:43 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\naccept-ch: Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Platform,Device-Stock-Ua,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile,X-Device-User-Agent,X-Operamini-Phone-Ua,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://codedetrichelattaquedeszombieroblox.blogspot.com\r\ncontent-encoding: zstd\r\nset-cookie: uid_id2=51d37b75-bb9e-4afa-8055-4f4d0beef1d1:2:1; Path=/; Expires=Mon, 24 Aug 2026 09:03:43 GMT; Secure; SameSite=None\npdhtkv=true; Path=/; Expires=Tue, 18 Aug 2026 09:03:43 GMT; Secure; SameSite=None\nuncs=1; Path=/; Expires=Tue, 18 Aug 2026 09:03:43 GMT; Secure; SameSite=None\npdhtkv29=true; Path=/; Expires=Tue, 18 Aug 2026 09:03:43 GMT; Secure; SameSite=None\nuncs29=1; Path=/; Expires=Tue, 18 Aug 2026 09:03:43 GMT; Secure; SameSite=None\nu_pl26582471=1; Path=/; Expires=Tue, 18 Aug 2026 09:03:43 GMT; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nx-envoy-upstream-service-time: 39\r\nHost: spendsdetachment.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 6f806df8532812da91cce703c5ae016d\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":[{"name":"uid_id2","value":"51d37b75-bb9e-4afa-8055-4f4d0beef1d1:2:1","quoted":false,"path":"/","expires":"2026-08-24T09:03:43Z","raw_expires":"Mon, 24 Aug 2026 09:03:43 GMT","max_age":0,"secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uid_id2=51d37b75-bb9e-4afa-8055-4f4d0beef1d1:2:1; Path=/; Expires=Mon, 24 Aug 2026 09:03:43 GMT; Secure; SameSite=None"},{"name":"pdhtkv","value":"true","quoted":false,"path":"/","expires":"2026-08-18T09:03:43Z","raw_expires":"Tue, 18 Aug 2026 09:03:43 GMT","max_age":0,"secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"pdhtkv=true; Path=/; Expires=Tue, 18 Aug 2026 09:03:43 GMT; Secure; SameSite=None"},{"name":"uncs","value":"1","quoted":false,"path":"/","expires":"2026-08-18T09:03:43Z","raw_expires":"Tue, 18 Aug 2026 09:03:43 GMT","max_age":0,"secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uncs=1; Path=/; Expires=Tue, 18 Aug 2026 09:03:43 GMT; Secure; SameSite=None"},{"name":"pdhtkv29","value":"true","quoted":false,"path":"/","expires":"2026-08-18T09:03:43Z","raw_expires":"Tue, 18 Aug 2026 09:03:43 GMT","max_age":0,"secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"pdhtkv29=true; Path=/; Expires=Tue, 18 Aug 2026 09:03:43 GMT; Secure; SameSite=None"},{"name":"uncs29","value":"1","quoted":false,"path":"/","expires":"2026-08-18T09:03:43Z","raw_expires":"Tue, 18 Aug 2026 09:03:43 GMT","max_age":0,"secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uncs29=1; Path=/; Expires=Tue, 18 Aug 2026 09:03:43 GMT; Secure; SameSite=None"},{"name":"u_pl26582471","value":"1","quoted":false,"path":"/","expires":"2026-08-18T09:03:43Z","raw_expires":"Tue, 18 Aug 2026 09:03:43 GMT","max_age":0,"secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"u_pl26582471=1; Path=/; Expires=Tue, 18 Aug 2026 09:03:43 GMT; Secure; SameSite=None"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":5078,"size_decoded":5263,"mime_type":"text/plain; charset=utf-8","magic":"JSON text data","md5":"96271731824c6602002f878f265dc126","sha1":"d263ea31384f06114e4df5a23b8dcb03126fe495","sha256":"9e0ca9248ba6a7acaf48154fd80ea61aca014ce1b0f30e95866e1486f2ad2d83","sha512":"aede918d933bbf3c163504233dea70a77d334e3600638f8d8a3ff99a0277bcec498f067124175e366c01124b92d10274be29e2a9ca662b532546572972f9e534","ssdeep":"96:97FrjHpU354V2Dlw8UT9/9c3B8fCy+XMcdb/8iTTMtg80kS:9p/HymV2Bw8UTvw8fCy+8cZ/8iTI+805","tlshash":"c3a16c3b5749625c4b9ac99f0e8129f97a09280f0cf1fa75d8f7e3fc1601296032e269","first_seen":"2026-08-17T09:04:20.1985Z","last_seen":"2026-08-17T09:04:20.1985Z","times_seen":1,"resource_available":false,"data":null}},"time_used":418,"timings":{"blocked":0,"dns":4,"connect":92,"send":0,"wait":134,"receive":0,"ssl":188},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"spendsdetachment.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"spendsdetachment.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spendsdetachment.com/ren.gif?sid=H4sIAAAAAAAC_1xSz4scRRSuHhdBPIgSFjwYGgxowJmt_jU_ktvij4NkIyYS0FP9XCvb09Xp6p6ZzGmTlVy8JAfBi9D7zW72IkH_AmVW8CBE0rc5ZC-ePAuCN5ndwZXU4b1X9RVV3_ve92C_OiEdVGzxyTU7NWnKNpIO9d-9ZTJpx87fuukHtEOv-rdM1o2v-pNlKEZXgiju0Mv-R0rs2I2QBpQGNPA_NIXSdrJxisLkT4JB0unGnSDod4IkxKR48cRVHhzzIEcn5A0Y2bz2h_4CRsyRDX94X7md0ubvfTCsUlbaAiN59Fm2k9lxhuF5qQsPOjta3YZ1DSHftmCzo1UXsKODZRfgpiGt9efg2dGKKvjo8IwtT6EycPkqxqM5VDqHYXMIuwcjnxFASGxdRzZ8vGWLMbt7hrIl2pC1v_-CGTdk7fkFZMMnm6mZ-DdsWpXGZg4TXcNM5jDbc-TVMcppC2Z8DFHeh5FPCW1dRDY8vMaqgsHIxaUkkFGP95I25wPVjplm7T5NknasY0m5UjqQwalGRs_BXAuV81AZD5VuocpbGMqFzwZ9zQfdmA2U7mlJg55gSRQNenES6q5IUIl7MPIhRLGLvNjFjnnUEO-VdTjpwZUEI1kfytSFrn4sU1fxYJXDVY7qmS2399mhLbdVRsCKhyhkfWDyO24PonxpNtVOzuwyMF7WM8ZlPTOyJCjuLC7RgFGqdLfdDUTU7klK2wMasnYQ0lhGvYT3w-hAu7Kq9_MT8vpSaO-b737Fjlr4IqQ9JfqxCOOky3RIAyGSbiSYFFFXxF04U8O4FpjzMDUN-VhfRm4acvHBn-DsGC49hjAeWPUW2LgG-7LGNPtem0yOjFAdYYeQtkZerqG86-2nJ-TC7NObmz-fzlv98xOU-I2sFkRRIy9q3Da_EGyn9368npdmaKZsaYAbJSvVy2Dm2dshhGnI-pt7p068svk7RL4Ll__30ix1eUM-f-drOEvAcw-pIUjV-VeM13D_2_Pzet99he3CA0-9GU8L74CnRfrojK0zC5_KWAViwJKeVkmS8CQOhdac9kIdRWF_gNI1t-8_tf8GAAD__43SX_oUBAAA","fqdn":"spendsdetachment.com","domain":"spendsdetachment.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://codedetrichelattaquedeszombieroblox.blogspot.com/","date":"2026-08-17T09:03:43.155Z","timestamp":1786957423155,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"spendsdetachment.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 02:47:50 GMT","end":"Fri, 25 Sep 2026 02:47:49 GMT"},"fingerprint":{"sha1":"ED:7A:AE:D7:41:6B:59:34:BC:24:1A:71:55:02:F6:3E:BB:AB:82:0B","sha256":"E0:B2:A3:F1:B9:7C:A9:81:4F:7A:12:BA:2B:56:9A:DB:6D:7F:DC:37:71:1C:4D:EA:08:FB:A8:46:A6:C3:D1:53"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_1xSz4scRRSuHhdBPIgSFjwYGgxowJmt_jU_ktvij4NkIyYS0FP9XCvb09Xp6p6ZzGmTlVy8JAfBi9D7zW72IkH_AmVW8CBE0rc5ZC-ePAuCN5ndwZXU4b1X9RVV3_ve92C_OiEdVGzxyTU7NWnKNpIO9d-9ZTJpx87fuukHtEOv-rdM1o2v-pNlKEZXgiju0Mv-R0rs2I2QBpQGNPA_NIXSdrJxisLkT4JB0unGnSDod4IkxKR48cRVHhzzIEcn5A0Y2bz2h_4CRsyRDX94X7md0ubvfTCsUlbaAiN59Fm2k9lxhuF5qQsPOjta3YZ1DSHftmCzo1UXsKODZRfgpiGt9efg2dGKKvjo8IwtT6EycPkqxqM5VDqHYXMIuwcjnxFASGxdRzZ8vGWLMbt7hrIl2pC1v_-CGTdk7fkFZMMnm6mZ-DdsWpXGZg4TXcNM5jDbc-TVMcppC2Z8DFHeh5FPCW1dRDY8vMaqgsHIxaUkkFGP95I25wPVjplm7T5NknasY0m5UjqQwalGRs_BXAuV81AZD5VuocpbGMqFzwZ9zQfdmA2U7mlJg55gSRQNenES6q5IUIl7MPIhRLGLvNjFjnnUEO-VdTjpwZUEI1kfytSFrn4sU1fxYJXDVY7qmS2399mhLbdVRsCKhyhkfWDyO24PonxpNtVOzuwyMF7WM8ZlPTOyJCjuLC7RgFGqdLfdDUTU7klK2wMasnYQ0lhGvYT3w-hAu7Kq9_MT8vpSaO-b737Fjlr4IqQ9JfqxCOOky3RIAyGSbiSYFFFXxF04U8O4FpjzMDUN-VhfRm4acvHBn-DsGC49hjAeWPUW2LgG-7LGNPtem0yOjFAdYYeQtkZerqG86-2nJ-TC7NObmz-fzlv98xOU-I2sFkRRIy9q3Da_EGyn9368npdmaKZsaYAbJSvVy2Dm2dshhGnI-pt7p068svk7RL4Ll__30ix1eUM-f-drOEvAcw-pIUjV-VeM13D_2_Pzet99he3CA0-9GU8L74CnRfrojK0zC5_KWAViwJKeVkmS8CQOhdac9kIdRWF_gNI1t-8_tf8GAAD__43SX_oUBAAA HTTP/1.1\r\nHost: spendsdetachment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://codedetrichelattaquedeszombieroblox.blogspot.com/\r\nCookie: uid_id2=51d37b75-bb9e-4afa-8055-4f4d0beef1d1:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl26582471=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Mon, 17 Aug 2026 09:03:43 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccept-ch: X-Ucbrowser-Device-Ua,Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Platform,User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile,Device-Stock-Ua,X-Device-User-Agent,X-Operamini-Phone-Ua\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nvary: Origin\r\nx-envoy-upstream-service-time: 8\r\nHost: spendsdetachment.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 06ad49f03d2ef555345e4da7f17b730c\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T11:42:41.491216Z","times_seen":17936532,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"spendsdetachment.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"spendsdetachment.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"createlouisville.org/15/af25da8381e0bd0494ba4018c76898a2","fqdn":"createlouisville.org","domain":"createlouisville.org","tld":"org"},"ip":{"addr":"104.21.82.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://codedetrichelattaquedeszombieroblox.blogspot.com/","date":"2026-08-17T09:03:43.717Z","timestamp":1786957423717,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"createlouisville.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 13:27:52 GMT","end":"Mon, 28 Sep 2026 14:27:43 GMT"},"fingerprint":{"sha1":"2D:37:E6:26:86:DD:C7:63:98:BA:52:2A:97:8E:4F:F2:DD:7B:2D:05","sha256":"23:6E:87:DD:91:58:54:57:87:1C:E8:C2:31:3D:17:3D:A4:68:F2:7B:F6:AA:0E:FC:74:94:08:04:E2:2B:5C:AC"}}},"request":{"raw":"GET /15/af25da8381e0bd0494ba4018c76898a2 HTTP/1.1\r\nHost: createlouisville.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://codedetrichelattaquedeszombieroblox.blogspot.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 17 Aug 2026 09:03:43 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nset-cookie: uidm=01a00ef6-64a0-7ebf-aa1c-809fdb936315_1; Path=/; Expires=Thu, 14 Aug 2036 09:03:43 GMT; Secure; SameSite=None\n__cf_bm=PKc27USQADFY1iq5UAKPamMDsc2S6xYS4Jp9gXlecCw-1786957423.7305145-1.0.1.1-GMpPhNHSFnqKGUfpRri8PfQL89cXFB7KhTkvW.kQzpie0kojjuk48wBsOVv1LRI46hLbK0_qy8EcqDZ.tEjm.HxpVGDG5uKWvcWINnBn4kxhSt7EcQ.0q9JUaTpJz0vf; HttpOnly; SameSite=None; Secure; Path=/; Domain=createlouisville.org; Expires=Mon, 17 Aug 2026 09:33:43 GMT\r\naccept-ch: Sec-Ch-Ua-Mobile,X-Ucbrowser-Device-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Platform,Device-Stock-Ua,X-Device-User-Agent,X-Operamini-Phone-Ua,User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Model\r\ncontent-encoding: gzip\r\nlink: \u003chttps://createlouisville.org\u003e; rel=preconnect; crossorigin, \u003chttps://createlouisville.org\u003e; rel=dns-prefetch, \u003chttps://static.nresystems.com\u003e; rel=preconnect; crossorigin, \u003chttps://static.nresystems.com\u003e; rel=dns-prefetch\r\nvary: Accept-Encoding, Origin\r\nx-envoy-upstream-service-time: 9\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: no-cache, max-age=0, private, no-cache\r\nx-request-id: 9a2b2432e2d026df94eb8ceff52e3c49\r\npragma: no-cache\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,X-Forwarded-For,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1728000\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a2c781da4cdf76ef-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"uidm","value":"01a00ef6-64a0-7ebf-aa1c-809fdb936315_1","quoted":false,"path":"/","expires":"2036-08-14T09:03:43Z","raw_expires":"Thu, 14 Aug 2036 09:03:43 GMT","max_age":0,"secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uidm=01a00ef6-64a0-7ebf-aa1c-809fdb936315_1; Path=/; Expires=Thu, 14 Aug 2036 09:03:43 GMT; Secure; SameSite=None"},{"name":"__cf_bm","value":"PKc27USQADFY1iq5UAKPamMDsc2S6xYS4Jp9gXlecCw-1786957423.7305145-1.0.1.1-GMpPhNHSFnqKGUfpRri8PfQL89cXFB7KhTkvW.kQzpie0kojjuk48wBsOVv1LRI46hLbK0_qy8EcqDZ.tEjm.HxpVGDG5uKWvcWINnBn4kxhSt7EcQ.0q9JUaTpJz0vf","quoted":false,"path":"/","domain":"createlouisville.org","expires":"2026-08-17T09:33:43Z","raw_expires":"Mon, 17 Aug 2026 09:33:43 GMT","max_age":0,"secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=PKc27USQADFY1iq5UAKPamMDsc2S6xYS4Jp9gXlecCw-1786957423.7305145-1.0.1.1-GMpPhNHSFnqKGUfpRri8PfQL89cXFB7KhTkvW.kQzpie0kojjuk48wBsOVv1LRI46hLbK0_qy8EcqDZ.tEjm.HxpVGDG5uKWvcWINnBn4kxhSt7EcQ.0q9JUaTpJz0vf; HttpOnly; SameSite=None; Secure; Path=/; Domain=createlouisville.org; Expires=Mon, 17 Aug 2026 09:33:43 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":107324,"size_decoded":43771,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d335f7be02a5a9aba46c8d48e8920e8d","sha1":"eade71e55f77787efc6fe46a5a848bdaf4aa849d","sha256":"afee64af696d2b6a4bef2cf67f6c6d8bfaee81bef6ebda0df6c2e3b4fea22f04","sha512":"248d236076c5e8133ae63a55626af24f9ec686f8d8cd147c3688c70b6303a67fbb258665d352009d9553f8c6b83e2ed1c94f4c850a54536e00d29e2bc6523904","ssdeep":"1536:2irZW7aOocgTURPONt/zVQMVkHP+gGLHKCZchU6FPPYuRWhiAYsPC197EJO5CPze:2m07aOoZgRPkqvTJxguRWhiAYsPe1v","tlshash":"a2a33ac42f097a680280b0b7217f550bf3ed7d06129ee499dd5bb8582b9cb6c693d732","first_seen":"2026-08-17T09:04:20.201102Z","last_seen":"2026-08-17T09:04:20.201102Z","times_seen":1,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":0,"dns":4,"connect":1,"send":0,"wait":77,"receive":0,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"createlouisville.org/pixel/ase","fqdn":"createlouisville.org","domain":"createlouisville.org","tld":"org"},"ip":{"addr":"104.21.82.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://codedetrichelattaquedeszombieroblox.blogspot.com/","date":"2026-08-17T09:03:44.655Z","timestamp":1786957424655,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"createlouisville.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 13:27:52 GMT","end":"Mon, 28 Sep 2026 14:27:43 GMT"},"fingerprint":{"sha1":"2D:37:E6:26:86:DD:C7:63:98:BA:52:2A:97:8E:4F:F2:DD:7B:2D:05","sha256":"23:6E:87:DD:91:58:54:57:87:1C:E8:C2:31:3D:17:3D:A4:68:F2:7B:F6:AA:0E:FC:74:94:08:04:E2:2B:5C:AC"}}},"request":{"raw":"POST /pixel/ase HTTP/1.1\r\nHost: createlouisville.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://codedetrichelattaquedeszombieroblox.blogspot.com/\r\nContent-Type: application/json\r\nContent-Length: 225\r\nOrigin: https://codedetrichelattaquedeszombieroblox.blogspot.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":225,"data":"[{\"placement_key\":\"af25da8381e0bd0494ba4018c76898a2\",\"template_body\":\"body_social-bar_pl_general-maga\",\"event_name\":\"base.render_pixel.success\",\"id_frontend_invoke\":\"01a00ef6-6505-7005-b99d-1a815400a13f\",\"script_version\":\"\"}]"}},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 17 Aug 2026 09:03:44 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\naccept-ch: X-Device-User-Agent, X-Operamini-Phone-Ua, User-Agent, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Platformuser-Agent, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Ua-Full-Version, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Model, Sec-Ch-Ua-Mobile, X-Ucbrowser-Device-Ua, Sec-Ch-Ua, Device-Stock-Ua\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\naccess-control-expose-headers: Content-Length,Content-Range\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=ViqQ2vQB_rUaO2DmeSWjMV2xSVd5Ri7C.Eh9gXvs1hs-1786957424.7316353-1.0.1.1-5q8UEImax0lzYQ_L9l0GXrFhQ6UI1LlL5lWdsTQDlLUlLsglN6XjYeFq4avpiPG2oKkc1e8iQ9UDXyxq5vrlJ_D8VN_WNbdjtgh5VyX2i6I1VMS1wUsd4q.6Yl9Pqhe1; HttpOnly; SameSite=None; Secure; Path=/; Domain=createlouisville.org; Expires=Mon, 17 Aug 2026 09:33:44 GMT\r\ncf-ray: a2c781e0992576ef-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"ViqQ2vQB_rUaO2DmeSWjMV2xSVd5Ri7C.Eh9gXvs1hs-1786957424.7316353-1.0.1.1-5q8UEImax0lzYQ_L9l0GXrFhQ6UI1LlL5lWdsTQDlLUlLsglN6XjYeFq4avpiPG2oKkc1e8iQ9UDXyxq5vrlJ_D8VN_WNbdjtgh5VyX2i6I1VMS1wUsd4q.6Yl9Pqhe1","quoted":false,"path":"/","domain":"createlouisville.org","expires":"2026-08-17T09:33:44Z","raw_expires":"Mon, 17 Aug 2026 09:33:44 GMT","max_age":0,"secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=ViqQ2vQB_rUaO2DmeSWjMV2xSVd5Ri7C.Eh9gXvs1hs-1786957424.7316353-1.0.1.1-5q8UEImax0lzYQ_L9l0GXrFhQ6UI1LlL5lWdsTQDlLUlLsglN6XjYeFq4avpiPG2oKkc1e8iQ9UDXyxq5vrlJ_D8VN_WNbdjtgh5VyX2i6I1VMS1wUsd4q.6Yl9Pqhe1; HttpOnly; SameSite=None; Secure; Path=/; Domain=createlouisville.org; Expires=Mon, 17 Aug 2026 09:33:44 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":1967,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T11:42:41.491216Z","times_seen":17936532,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"createlouisville.org/pixel/ase","fqdn":"createlouisville.org","domain":"createlouisville.org","tld":"org"},"ip":{"addr":"104.21.82.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://codedetrichelattaquedeszombieroblox.blogspot.com/","date":"2026-08-17T09:03:44.658Z","timestamp":1786957424658,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"createlouisville.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 13:27:52 GMT","end":"Mon, 28 Sep 2026 14:27:43 GMT"},"fingerprint":{"sha1":"2D:37:E6:26:86:DD:C7:63:98:BA:52:2A:97:8E:4F:F2:DD:7B:2D:05","sha256":"23:6E:87:DD:91:58:54:57:87:1C:E8:C2:31:3D:17:3D:A4:68:F2:7B:F6:AA:0E:FC:74:94:08:04:E2:2B:5C:AC"}}},"request":{"raw":"OPTIONS /pixel/ase HTTP/1.1\r\nHost: createlouisville.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://codedetrichelattaquedeszombieroblox.blogspot.com/\r\nOrigin: https://codedetrichelattaquedeszombieroblox.blogspot.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\ndate: Mon, 17 Aug 2026 09:03:44 GMT\r\nserver: cloudflare\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: no-cache, max-age=0, private, no-cache\r\nx-request-id: aaa8b55ae171cc1dba6107270eb73dc9\r\npragma: no-cache\r\naccess-control-allow-origin: https://codedetrichelattaquedeszombieroblox.blogspot.com\r\nvary: Origin\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,X-Forwarded-For,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1728000\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=SkMRZOuKE3hv2AUBbbLJcBsiqcAc_HOpG75FqsyRRpA-1786957424.6561925-1.0.1.1-wfofY_pRryBbqxuDjJ03QxpwfOhPYE4N1v9tlJJrshlAH00ToGNLhfTbZv1UNx0ZV4PS8XBuIYWUouRscwsauBAhEBNMJHHSlc0.40Ok7tG3EeaQLwxFcstBsgO4IPq4; HttpOnly; SameSite=None; Secure; Path=/; Domain=createlouisville.org; Expires=Mon, 17 Aug 2026 09:33:44 GMT\r\ncf-ray: a2c781e01f9376ef-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"SkMRZOuKE3hv2AUBbbLJcBsiqcAc_HOpG75FqsyRRpA-1786957424.6561925-1.0.1.1-wfofY_pRryBbqxuDjJ03QxpwfOhPYE4N1v9tlJJrshlAH00ToGNLhfTbZv1UNx0ZV4PS8XBuIYWUouRscwsauBAhEBNMJHHSlc0.40Ok7tG3EeaQLwxFcstBsgO4IPq4","quoted":false,"path":"/","domain":"createlouisville.org","expires":"2026-08-17T09:33:44Z","raw_expires":"Mon, 17 Aug 2026 09:33:44 GMT","max_age":0,"secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=SkMRZOuKE3hv2AUBbbLJcBsiqcAc_HOpG75FqsyRRpA-1786957424.6561925-1.0.1.1-wfofY_pRryBbqxuDjJ03QxpwfOhPYE4N1v9tlJJrshlAH00ToGNLhfTbZv1UNx0ZV4PS8XBuIYWUouRscwsauBAhEBNMJHHSlc0.40Ok7tG3EeaQLwxFcstBsgO4IPq4; HttpOnly; SameSite=None; Secure; Path=/; Domain=createlouisville.org; Expires=Mon, 17 Aug 2026 09:33:44 GMT"}],"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1102,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T11:42:41.491216Z","times_seen":17936532,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spendsdetachment.com/impr.gif?sid=H4sIAAAAAAAC_1xSz4scRRSuHhdBPIgSFjwYBgxowJmt_jkzyW3xx0GyERMJ6Kl-rpXt6ep0dc9M5rTJSi5ekoPgRej9Zjd7kaB_gTIreBAi6dscshdPngXBm8zu4Erq8N6r-oqq733ve7BfnZAuKrb45JqdmjRlG3GXtt-9ZTJpx669dbPt0y692r5lsiS62p4sQzG64odRl15uf6TEjt0IqE-pT_32h6ZQ2k42TlGY_Ik_iLtJ1PX9ftePA0yKF09c5cExD3J0Qt6Akc1rf-gvYMQc2fCH95XbKW3-3gfDKmWlLTCSR59lO5kdZxiel7rwoLOj1W1Y1xDybQs2O1p1ATs6WHYBbhrSWn8Onh2tqIKPDs_Y8hQqA5evYjyaQ6VzGDaHsHsw8hkBhMTWdWTDx1u2GLO7Zyhbog1Z-_svmHFD1p5fQDZ8spmaSfuGTavS2MxhomuYyRxme468OkY5bcGMjyHK-zDyKaGti8iGh9dYVTAYubgU-zLs8V7c4XygOhHTrNOncdyJdCQpV0r70j_VyOg5mGuhch4q46HSLVR5C0O5aLNBX_NBErGB0j0tqd8TLA7DQS-KA52IGJW4ByMfQhS7yItd7JhHDfFeWYeTHlxJMJL1oUxd4OrHMnUV91c5WOWwntlye58d2nJbZQSseIhC1gcmv-P2IMqXZlPt5MwuA-NlPWNc1jMjS4LizuIS9RmlSiedxBdhpycp7QxowDp-QCMZ9mLeD8ID7cqq3s9PyOtLob1vvvsVO2rRFgHtKdGPRBDFCdMB9YWIk1AwKcJERAmcqWFcC8x5mJqGfKwvIzcNufjgT3B2DJceQxgPrHoLbFyDfVljmn2vTSZHRqiusENIWyMv11De9fbTE3Jh9unNzZ9P563--QlK_EZWC6KokRc1bptfCLbTez9ez0szNFO2NMCNkpXqZTDz7O0AwjRk_c29Uyde2fwdIt-Fy_97aZa6vCGfv_M1nCXguYfUEKTq_CvGa7j_7fl5ve--wnbhgafejKeFd8DTIn10xtaZRbsfBJQKPxjIQRwNwr5WceT3eir2w0TRMEbpmtv3n9p_AwAA__9_C6QoFAQAAA==","fqdn":"spendsdetachment.com","domain":"spendsdetachment.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://codedetrichelattaquedeszombieroblox.blogspot.com/","date":"2026-08-17T09:03:44.696Z","timestamp":1786957424696,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"spendsdetachment.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 02:47:50 GMT","end":"Fri, 25 Sep 2026 02:47:49 GMT"},"fingerprint":{"sha1":"ED:7A:AE:D7:41:6B:59:34:BC:24:1A:71:55:02:F6:3E:BB:AB:82:0B","sha256":"E0:B2:A3:F1:B9:7C:A9:81:4F:7A:12:BA:2B:56:9A:DB:6D:7F:DC:37:71:1C:4D:EA:08:FB:A8:46:A6:C3:D1:53"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1xSz4scRRSuHhdBPIgSFjwYBgxowJmt_jkzyW3xx0GyERMJ6Kl-rpXt6ep0dc9M5rTJSi5ekoPgRej9Zjd7kaB_gTIreBAi6dscshdPngXBm8zu4Erq8N6r-oqq733ve7BfnZAuKrb45JqdmjRlG3GXtt-9ZTJpx669dbPt0y692r5lsiS62p4sQzG64odRl15uf6TEjt0IqE-pT_32h6ZQ2k42TlGY_Ik_iLtJ1PX9ftePA0yKF09c5cExD3J0Qt6Akc1rf-gvYMQc2fCH95XbKW3-3gfDKmWlLTCSR59lO5kdZxiel7rwoLOj1W1Y1xDybQs2O1p1ATs6WHYBbhrSWn8Onh2tqIKPDs_Y8hQqA5evYjyaQ6VzGDaHsHsw8hkBhMTWdWTDx1u2GLO7Zyhbog1Z-_svmHFD1p5fQDZ8spmaSfuGTavS2MxhomuYyRxme468OkY5bcGMjyHK-zDyKaGti8iGh9dYVTAYubgU-zLs8V7c4XygOhHTrNOncdyJdCQpV0r70j_VyOg5mGuhch4q46HSLVR5C0O5aLNBX_NBErGB0j0tqd8TLA7DQS-KA52IGJW4ByMfQhS7yItd7JhHDfFeWYeTHlxJMJL1oUxd4OrHMnUV91c5WOWwntlye58d2nJbZQSseIhC1gcmv-P2IMqXZlPt5MwuA-NlPWNc1jMjS4LizuIS9RmlSiedxBdhpycp7QxowDp-QCMZ9mLeD8ID7cqq3s9PyOtLob1vvvsVO2rRFgHtKdGPRBDFCdMB9YWIk1AwKcJERAmcqWFcC8x5mJqGfKwvIzcNufjgT3B2DJceQxgPrHoLbFyDfVljmn2vTSZHRqiusENIWyMv11De9fbTE3Jh9unNzZ9P563--QlK_EZWC6KokRc1bptfCLbTez9ez0szNFO2NMCNkpXqZTDz7O0AwjRk_c29Uyde2fwdIt-Fy_97aZa6vCGfv_M1nCXguYfUEKTq_CvGa7j_7fl5ve--wnbhgafejKeFd8DTIn10xtaZRbsfBJQKPxjIQRwNwr5WceT3eir2w0TRMEbpmtv3n9p_AwAA__9_C6QoFAQAAA== HTTP/1.1\r\nHost: spendsdetachment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://codedetrichelattaquedeszombieroblox.blogspot.com/\r\nCookie: uid_id2=51d37b75-bb9e-4afa-8055-4f4d0beef1d1:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl26582471=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Mon, 17 Aug 2026 09:03:44 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccept-ch: X-Device-User-Agent,Sec-Ch-Ua,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Platform,Device-Stock-Ua,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nvary: Origin\r\nx-envoy-upstream-service-time: 3\r\nHost: spendsdetachment.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 77dd3234fda9d01b5045884532ab9fcd\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T11:42:41.491216Z","times_seen":17936532,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"spendsdetachment.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"spendsdetachment.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spendsdetachment.com/pixel/sbs?c=1","fqdn":"spendsdetachment.com","domain":"spendsdetachment.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://codedetrichelattaquedeszombieroblox.blogspot.com/","date":"2026-08-17T09:03:44.697Z","timestamp":1786957424697,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"spendsdetachment.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 02:47:50 GMT","end":"Fri, 25 Sep 2026 02:47:49 GMT"},"fingerprint":{"sha1":"ED:7A:AE:D7:41:6B:59:34:BC:24:1A:71:55:02:F6:3E:BB:AB:82:0B","sha256":"E0:B2:A3:F1:B9:7C:A9:81:4F:7A:12:BA:2B:56:9A:DB:6D:7F:DC:37:71:1C:4D:EA:08:FB:A8:46:A6:C3:D1:53"}}},"request":{"raw":"GET /pixel/sbs?c=1 HTTP/1.1\r\nHost: spendsdetachment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://codedetrichelattaquedeszombieroblox.blogspot.com/\r\nCookie: uid_id2=51d37b75-bb9e-4afa-8055-4f4d0beef1d1:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl26582471=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Mon, 17 Aug 2026 09:03:44 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Ua-Full-Version, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Model, Device-Stock-Ua, X-Operamini-Phone-Ua, X-Ucbrowser-Device-Ua, Sec-Ch-Ua-Platformuser-Agent, Sec-Ch-Ua-Mobile, X-Device-User-Agent, User-Agent\r\nHost: spendsdetachment.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":802,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T11:42:41.491216Z","times_seen":17936532,"resource_available":true,"data":null}},"time_used":192,"timings":{"blocked":0,"dns":0,"connect":97,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"spendsdetachment.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"spendsdetachment.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mtevor.com/cluster-v2/roblox-crn.js","fqdn":"mtevor.com","domain":"mtevor.com","tld":"com"},"ip":{"addr":"104.21.21.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://codedetrichelattaquedeszombieroblox.blogspot.com/","date":"2026-08-17T09:03:34.414Z","timestamp":1786957414414,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mtevor.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Jul 2026 01:59:40 GMT","end":"Thu, 22 Oct 2026 02:56:00 GMT"},"fingerprint":{"sha1":"6A:F3:44:7E:EF:0B:6B:E8:C9:51:64:F7:C9:1B:00:B5:0A:F7:9D:69","sha256":"93:CE:02:3E:CE:C7:73:B5:7A:A0:85:75:C7:D4:58:D1:A5:BD:16:F8:CD:79:D6:E9:CE:3A:3C:2A:F1:23:16:79"}}},"request":{"raw":"GET /cluster-v2/roblox-crn.js HTTP/1.1\r\nHost: mtevor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://codedetrichelattaquedeszombieroblox.blogspot.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 17 Aug 2026 09:03:34 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d0cSdrpS1USTJWHrmuTcJPPW8xxBFKSgjth%2BaH4TN4MNifnmz9Tla0whC8rFeKhZbhv4b1ripg4w9%2FKClnOm5srC7eiKe7Lr8TXfSBBr3Jd624STELi6DD5wBykv\"}]}\r\npriority: u=2,i=?0\r\nlast-modified: Mon, 17 Aug 2026 09:03:34 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2c781a03cb056c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7054,"size_decoded":3552,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"42a43bf2124380170d07e0507ee29fac","sha1":"4d90e94646cd9ba489b5df68648b6948945a350a","sha256":"fdad733857eb0bfaf88fffb3cefd364c40a44a8e3e7570f672133eecdf6bb536","sha512":"3087ca9856f04c1e9ec70d89c385b17cdb93cb286f2d818f384090a92ca25bf5852b4075c50b0a5099917706d1cc83c1517aa51398af2b89b57b952913aed2f9","ssdeep":"192:rMnsho0LV8YteZbDVj/poiPqpyj4ZYzwIxpsQkhHC:rYwj8YteZfJ/ptPqcj46zNxpsQ8C","tlshash":"54e1c6a5bc4f89390bf2f758e2358a19fd3cd0221602505af4c892578a69f1e4b1ffd8","first_seen":"2026-03-21T08:49:48.937482Z","last_seen":"2026-08-17T09:04:20.203523Z","times_seen":35,"resource_available":true,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":9,"connect":12,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"codedetrichelattaquedeszombieroblox.blogspot.com/js/cookienotice.js","fqdn":"codedetrichelattaquedeszombieroblox.blogspot.com","domain":"codedetrichelattaquedeszombieroblox.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.250.178.65","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://codedetrichelattaquedeszombieroblox.blogspot.com/","date":"2026-08-17T09:03:34.417Z","timestamp":1786957414417,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.blogspot.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:41 GMT","end":"Wed, 28 Oct 2026 20:43:40 GMT"},"fingerprint":{"sha1":"A8:10:55:6D:0C:33:69:E1:2E:38:42:97:31:C0:28:2B:E7:23:20:A8","sha256":"B5:46:F4:44:91:12:83:39:8E:6A:F3:61:0F:6D:A3:59:87:90:86:9C:5B:AE:7A:9C:80:AD:04:09:D8:80:20:BF"}}},"request":{"raw":"GET /js/cookienotice.js HTTP/1.1\r\nHost: codedetrichelattaquedeszombieroblox.blogspot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://codedetrichelattaquedeszombieroblox.blogspot.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"blogger-tech\"\r\nreport-to: {\"group\":\"blogger-tech\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/blogger-tech\"}]}\r\ncontent-length: 2026\r\ndate: Mon, 17 Aug 2026 09:03:34 GMT\r\nexpires: Mon, 24 Aug 2026 09:03:34 GMT\r\ncache-control: public, max-age=604800\r\nlast-modified: Sun, 16 Aug 2026 18:16:12 GMT\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6513,"size_decoded":2706,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"a705132a2174f88e196ec3610d68faa8","sha1":"3bad57a48d973a678fec600d45933010f6edc659","sha256":"068ffe90977f2b5b2dc2ef18572166e85281bd0ecb31c4902464b23db54d2568","sha512":"e947d33e0e9c5e6516f05e0ea696406e4e09b458f85021bc3a217071ae14879b2251e65aec5d1935ca9af2433d023356298321564e1a41119d41be7c2b2d36d5","ssdeep":"96:q54UPzHFcJZ7haKemb/m2GzrzCXAl/MStzo41Pm+YsttcVcbYhyjcso13EZDjiat:q5rPzHgxm2GzaXeMnuzYstyryPhZD9","tlshash":"4fd1630938a7127d125fa03fb6bf515ab66410238101db08786dfa785fd5f42a8e4ffa","first_seen":"2023-03-07T01:02:24Z","last_seen":"2026-08-17T11:32:51.657566Z","times_seen":135091,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-17","alert":"Phishing Block","trigger":"codedetrichelattaquedeszombieroblox.blogspot.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"codedetrichelattaquedeszombieroblox.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"codedetrichelattaquedeszombieroblox.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.ytimg.com/vi/Jng8zWzmoT4/default.jpg","fqdn":"i.ytimg.com","domain":"ytimg.com","tld":"com"},"ip":{"addr":"142.250.178.118","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://codedetrichelattaquedeszombieroblox.blogspot.com/","date":"2026-08-17T09:03:41.202Z","timestamp":1786957421202,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgestatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:42:12 GMT","end":"Wed, 28 Oct 2026 20:42:11 GMT"},"fingerprint":{"sha1":"04:97:82:6E:6F:83:BA:65:6C:F8:A1:6F:2B:13:CF:40:80:F6:0F:22","sha256":"BF:31:32:75:15:2D:DC:A4:CA:A8:6C:51:A2:83:2A:5B:FB:7D:1B:BB:B2:48:F1:1C:4D:15:76:8A:B3:9F:0F:31"}}},"request":{"raw":"GET /vi/Jng8zWzmoT4/default.jpg HTTP/1.1\r\nHost: i.ytimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://codedetrichelattaquedeszombieroblox.blogspot.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-type: image/jpeg\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 3884\r\ndate: Mon, 17 Aug 2026 09:03:41 GMT\r\nexpires: Mon, 17 Aug 2026 11:03:41 GMT\r\ncache-control: public, max-age=7200\r\netag: \"1598975528\"\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3884,"size_decoded":4525,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 120x90, components 3","md5":"7c4667c6be0e7493989bb2048d0646e0","sha1":"181e01fba5c2e0113976790f1218531a82fcf69b","sha256":"29321dacc190952c04b5ca2d5676d904839437bb18b84e0510a12dca162cd392","sha512":"5582d6d27f93b8713b8ba242ef3aa91ccf657c8966f39857c536d418c5a7706cb3829add1328e2bad847ea544a53ed99973fe296779fb589867178ab1be183fa","ssdeep":"","tlshash":"11815d5d6391ff44d226522e6e37831c271a6f0fafb58d90195e343ab8e09760c36924","first_seen":"2024-08-20T03:05:47.856131Z","last_seen":"2026-08-17T09:04:20.20886Z","times_seen":6,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adxpy.pages.dev/arrow-up.gif","fqdn":"adxpy.pages.dev","domain":"adxpy.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://codedetrichelattaquedeszombieroblox.blogspot.com/","date":"2026-08-17T09:03:41.442Z","timestamp":1786957421442,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adxpy.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 05:18:17 GMT","end":"Fri, 30 Oct 2026 06:16:46 GMT"},"fingerprint":{"sha1":"8D:43:4D:D7:86:01:CA:27:86:FA:7D:C2:CC:D2:28:AA:8B:23:B6:D5","sha256":"7C:CF:37:C6:8E:F4:FA:9D:BD:6F:4B:19:25:E6:79:CA:A5:FA:57:31:AD:F5:49:0E:E8:51:D1:04:35:AE:DC:68"}}},"request":{"raw":"GET /arrow-up.gif HTTP/1.1\r\nHost: adxpy.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://codedetrichelattaquedeszombieroblox.blogspot.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 17 Aug 2026 09:03:41 GMT\r\ncontent-type: image/gif\r\ncontent-length: 4491\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"abc38753b71c3201854a4e8b3ffdce52\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YidEdypZItES42Pdt6EyZXNQXqT1F43SQ8xeAVf3%2BIC5b0BZg7RjB0KOLnquK7gIMJpY6ejtopIX%2B2OJS6L76ITbdZEVLQX2%2FRECtMB7ibH7zlqBaWWG59PkjbQqhxW0jsk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-ray: a2c781cbfc5b2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4491,"size_decoded":5243,"mime_type":"image/gif","magic":"GIF image data, version 89a, 28 x 150","md5":"8b78a541eaa521c8bd946b84a46feb92","sha1":"31a6411c7051332a4aff0d338cf721f513bd1f8b","sha256":"8794063dced5ec3d5035d4fd6e7cce885671224284469fe85e7b392a0fabf0a8","sha512":"ca4f07b46c061bcc141b763e32da638e835f207106f8d5ea90dfab473487114081fbd3e12768cfe3d374c0eecba53e2a085fd0af4cb068f4efed559fbd9fa26d","ssdeep":"96:kRXW9wwXp9lM6jb7xLD3hFG2G/3dtGSQp60NfzpAMK:kVW9Jp9JjbBDRFG2G/3mjrpAMK","tlshash":"c791e7121a798d4cf0335934c9a8ac5f332a5da2811183db29d4329ee93c4bd596e67c","first_seen":"2025-05-30T17:14:42.053302Z","last_seen":"2026-08-17T09:04:20.210325Z","times_seen":503,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.show-creative1.com/sb/interstitial/utility/default/blog/flip_icon_fullpage/mar24/4/index.html","fqdn":"cdn.show-creative1.com","domain":"show-creative1.com","tld":"com"},"ip":{"addr":"104.21.15.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://codedetrichelattaquedeszombieroblox.blogspot.com/","date":"2026-08-17T09:03:43.154Z","timestamp":1786957423154,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"show-creative1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Jul 2026 03:24:41 GMT","end":"Wed, 28 Oct 2026 04:23:20 GMT"},"fingerprint":{"sha1":"34:18:6C:EF:CA:1F:43:02:E3:44:83:DC:15:1A:1E:7D:32:83:90:A6","sha256":"41:12:E9:00:70:5F:56:56:3A:7B:2B:ED:3F:CE:D6:08:F2:C3:66:1E:3F:64:82:C6:13:3D:D3:99:3F:F1:73:60"}}},"request":{"raw":"GET /sb/interstitial/utility/default/blog/flip_icon_fullpage/mar24/4/index.html HTTP/1.1\r\nHost: cdn.show-creative1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://codedetrichelattaquedeszombieroblox.blogspot.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://codedetrichelattaquedeszombieroblox.blogspot.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 17 Aug 2026 09:03:43 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Tue, 05 Mar 2024 08:56:05 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4kXUT4%2BggY%2Fw5BbvdvdVD57iR0LYweo9It%2BdIs75VIjfmKrovc0z3pJqdF8Ufoylwudu0N72nfZh%2F3DGP68oQzYkGezZ7QJl6b2PrzhKsY37jeGKweSUUZvbi8FR5pt8bIktZPMKmMkU\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a2c781d6cb07c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1417,"size_decoded":1291,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"af6609658ec2967afc7b161423c3abb4","sha1":"fa2eec498662a31dd2d81627d091af2892be4068","sha256":"ab7e68f27419413f099dc82fa73d3787363d3d3a1397138678d62326c7ddd3a5","sha512":"2815961d4fa6d5f24c377133fbfe7605d995f9d681acbcfe12e1d42f928d8438639aa80c3e0ad0e87d0ba9875a927a217714767d336a5c9b397b04738f5015f2","ssdeep":"","tlshash":"1c21bb50aaedda35219345857f703f33e881e883cd4618a132bc8a549be6ed2c92730b","first_seen":"2025-11-17T23:38:06.456558Z","last_seen":"2026-08-17T09:04:20.212664Z","times_seen":120,"resource_available":false,"data":null}},"time_used":512,"timings":{"blocked":-1,"dns":3,"connect":1,"send":0,"wait":495,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"cdn.show-creative1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spendsdetachment.com/pixel/ase","fqdn":"spendsdetachment.com","domain":"spendsdetachment.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://codedetrichelattaquedeszombieroblox.blogspot.com/","date":"2026-08-17T09:03:43.156Z","timestamp":1786957423156,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"spendsdetachment.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 02:47:50 GMT","end":"Fri, 25 Sep 2026 02:47:49 GMT"},"fingerprint":{"sha1":"ED:7A:AE:D7:41:6B:59:34:BC:24:1A:71:55:02:F6:3E:BB:AB:82:0B","sha256":"E0:B2:A3:F1:B9:7C:A9:81:4F:7A:12:BA:2B:56:9A:DB:6D:7F:DC:37:71:1C:4D:EA:08:FB:A8:46:A6:C3:D1:53"}}},"request":{"raw":"OPTIONS /pixel/ase HTTP/1.1\r\nHost: spendsdetachment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://codedetrichelattaquedeszombieroblox.blogspot.com/\r\nOrigin: https://codedetrichelattaquedeszombieroblox.blogspot.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: nginx/1.28.2\r\nDate: Mon, 17 Aug 2026 09:03:43 GMT\r\nConnection: keep-alive\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Max-Age: 1728000\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":552,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T11:42:41.491216Z","times_seen":17936532,"resource_available":true,"data":null}},"time_used":372,"timings":{"blocked":0,"dns":0,"connect":91,"send":0,"wait":92,"receive":0,"ssl":188},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"spendsdetachment.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"spendsdetachment.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://codedetrichelattaquedeszombieroblox.blogspot.com/","date":"2026-08-17T09:03:44.728Z","timestamp":1786957424728,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://codedetrichelattaquedeszombieroblox.blogspot.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 13 Aug 2026 10:17:38 GMT\r\nexpires: Fri, 13 Aug 2027 10:17:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 341166\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":43949,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-08-17T11:41:02.740768Z","times_seen":264918,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":33,"dns":2,"connect":0,"send":0,"wait":20,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"codedetrichelattaquedeszombieroblox.blogspot.com/favicon.ico","fqdn":"codedetrichelattaquedeszombieroblox.blogspot.com","domain":"codedetrichelattaquedeszombieroblox.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.250.178.65","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://codedetrichelattaquedeszombieroblox.blogspot.com/","date":"2026-08-17T09:03:35.628Z","timestamp":1786957415628,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.blogspot.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:41 GMT","end":"Wed, 28 Oct 2026 20:43:40 GMT"},"fingerprint":{"sha1":"A8:10:55:6D:0C:33:69:E1:2E:38:42:97:31:C0:28:2B:E7:23:20:A8","sha256":"B5:46:F4:44:91:12:83:39:8E:6A:F3:61:0F:6D:A3:59:87:90:86:9C:5B:AE:7A:9C:80:AD:04:09:D8:80:20:BF"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: codedetrichelattaquedeszombieroblox.blogspot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://codedetrichelattaquedeszombieroblox.blogspot.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/x-icon\r\nexpires: Mon, 17 Aug 2026 09:03:35 GMT\r\ndate: Mon, 17 Aug 2026 09:03:35 GMT\r\ncache-control: private, max-age=86400\r\nlast-modified: Fri, 08 Nov 2024 14:58:19 GMT\r\netag: W/\"6f01cb21569e9af01c6dd147bd22680bed0949436a3ec720339dae4a9ab79658\"\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 412\r\nserver: GSE\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":3638,"size_decoded":874,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 2 icons, 32x32, 8 bits/pixel, 16x16, 8 bits/pixel","md5":"59a0c7b6e4848ccdabcea0636efda02b","sha1":"30ef5c54b8bbc3487ea2b4c45cd11ea2932e4340","sha256":"a1495da3cf3db37bf105a12658636ff628fee7b73975b9200049af7747e60b1f","sha512":"bcfebb2ca5af53031c636d5485125a1405ca8414d0bc8a5d34dd3b3feb4c7425be02cf4848867d91cf6d021d08630294f47bdc69d6cd04a1051972735b0f04d4","ssdeep":"","tlshash":"5671c80736c29f79c4d082fa159ec674136766eb281b061b3e85f65a3d88135f911ac0","first_seen":"2023-04-05T07:39:22Z","last_seen":"2026-08-17T11:32:51.684273Z","times_seen":107940,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":146,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"codedetrichelattaquedeszombieroblox.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-17","alert":"Phishing Block","trigger":"codedetrichelattaquedeszombieroblox.blogspot.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"codedetrichelattaquedeszombieroblox.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"createlouisville.org/3/af25da8381e0bd0494ba4018c76898a2?uidm=01a00ef6-64d8-76a5-957b-90106a8fea02_1","fqdn":"createlouisville.org","domain":"createlouisville.org","tld":"org"},"ip":{"addr":"104.21.82.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://codedetrichelattaquedeszombieroblox.blogspot.com/","date":"2026-08-17T09:03:44.931Z","timestamp":1786957424931,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"createlouisville.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 13:27:52 GMT","end":"Mon, 28 Sep 2026 14:27:43 GMT"},"fingerprint":{"sha1":"2D:37:E6:26:86:DD:C7:63:98:BA:52:2A:97:8E:4F:F2:DD:7B:2D:05","sha256":"23:6E:87:DD:91:58:54:57:87:1C:E8:C2:31:3D:17:3D:A4:68:F2:7B:F6:AA:0E:FC:74:94:08:04:E2:2B:5C:AC"}}},"request":{"raw":"GET /3/af25da8381e0bd0494ba4018c76898a2?uidm=01a00ef6-64d8-76a5-957b-90106a8fea02_1 HTTP/1.1\r\nHost: createlouisville.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://codedetrichelattaquedeszombieroblox.blogspot.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://codedetrichelattaquedeszombieroblox.blogspot.com/\r\nCookie: uidm=01a00ef6-64d8-76a5-957b-90106a8fea02_2; __cf_bm=PKc27USQADFY1iq5UAKPamMDsc2S6xYS4Jp9gXlecCw-1786957423.7305145-1.0.1.1-GMpPhNHSFnqKGUfpRri8PfQL89cXFB7KhTkvW.kQzpie0kojjuk48wBsOVv1LRI46hLbK0_qy8EcqDZ.tEjm.HxpVGDG5uKWvcWINnBn4kxhSt7EcQ.0q9JUaTpJz0vf; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl28216845=1; slecaf25da8381e0bd0494ba4018c76898a2=[6655446]\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 17 Aug 2026 09:03:45 GMT\r\ncontent-type: text/plain\r\nserver: cloudflare\r\naccept-ch: Sec-Ch-Ua-Full-Version-List,Device-Stock-Ua,X-Operamini-Phone-Ua,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile,X-Device-User-Agent,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua\r\nvary: Accept-Encoding, Origin\r\nx-envoy-upstream-service-time: 2\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: no-cache, max-age=0, private, no-cache\r\nx-request-id: d33935a979b894d37cfb4f16331362e1\r\npragma: no-cache\r\naccess-control-allow-origin: https://codedetrichelattaquedeszombieroblox.blogspot.com\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,X-Forwarded-For,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1728000\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: gzip\r\ncf-ray: a2c781e1cd1376ef-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":76,"size_decoded":1240,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"86e438a7fb1481eac8026c8f27aa73c7","sha1":"c680097defa0b1c96fc54d8ae636bc6276550d02","sha256":"a5d92845364bdc8edfa877144b2948b0a01a9c1414cbe76d76b5cc41e2be302a","sha512":"dbd3ab37158befb1e0b35c4ecc6f7b88e12e143ce6f0d595842288bdacccba1dc2748dc800d3843083b64da9768ef456a12f4bdf2bde5bcf428afec37f75d11c","ssdeep":"","tlshash":"f5a012463e100816506101000a80267b064041f5304c858070c1b50b0104b6671c9518","first_seen":"2026-08-17T09:04:20.216243Z","last_seen":"2026-08-17T09:04:20.216243Z","times_seen":1,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"createlouisville.org/pixel/ase","fqdn":"createlouisville.org","domain":"createlouisville.org","tld":"org"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://codedetrichelattaquedeszombieroblox.blogspot.com/","date":"2026-08-17T09:03:46.191Z","timestamp":1786957426191,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /pixel/ase HTTP/1.1\r\nHost: createlouisville.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://codedetrichelattaquedeszombieroblox.blogspot.com/\r\nContent-Type: application/json\r\nContent-Length: 223\r\nOrigin: https://codedetrichelattaquedeszombieroblox.blogspot.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":223,"data":"[{\"placement_key\":\"af25da8381e0bd0494ba4018c76898a2\",\"template_body\":\"body_social-bar_pl_general-maga\",\"event_name\":\"base.impression.success\",\"id_frontend_invoke\":\"01a00ef6-6505-7005-b99d-1a815400a13f\",\"script_version\":\"\"}]"}},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T11:42:41.491216Z","times_seen":17936532,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
