{"report_id":"9c082f47-22eb-462c-98c8-6a07fb73bad1","version":6,"status":"done","tags":[],"date":"2025-11-03T22:17:30Z","url":{"schema":"http","addr":"mrbeastgiftfree.netlify.app/","fqdn":"mrbeastgiftfree.netlify.app","domain":"mrbeastgiftfree.netlify.app","tld":"netlify.app"},"ip":{"addr":"35.157.26.135","port":0,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"mrbeastgiftfree.netlify.app/","fqdn":"mrbeastgiftfree.netlify.app","domain":"mrbeastgiftfree.netlify.app","tld":"netlify.app"},"title":"Mk tech new","dom":{"size":39,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"086707e4369f60afedcafb16050a7618","sha1":"8216b0cc6876cbd44f01c158e7dff3833ceccd41","sha256":"a7fe83ec64bb23eb28090598db3d166ed98e52e39d1afbbfd74c579553f93e4e","sha512":"aade21843813e2cab329b99185c6f61db7907a556ea974e0315dcf3ad967cab20fee66d4f10db0d0ec43a71e086ce6d700d5524103deaefa3ce5f6be74ba5737","ssdeep":"","tlshash":"6a9000fee0a2000efc303bc00cc2238a0c28c3a830028e002ac038b8c80822bcc032c8","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":"PGh0bWw+PGhlYWQ+PC9oZWFkPjxib2R5PjwvYm9keT48L2h0bWw+"}},"submit":{"url":{"schema":"http","addr":"mrbeastgiftfree.netlify.app/","fqdn":"mrbeastgiftfree.netlify.app","domain":"mrbeastgiftfree.netlify.app","tld":"netlify.app"},"ip":{"addr":"35.157.26.135","port":0,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"tags":null,"meta":null,"user":{"country_code":"zz"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-12-08T22:17:30Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"d13pxqgp3ixdbh.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"d13pxqgp3ixdbh.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"mrbeastsgifts.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null},"summary":[{"fqdn":"dojy0dg181308.cloudfront.net","ip":{"addr":"54.230.245.187","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2024-10-22T07:36:44.555327Z","last_seen":"2025-09-17T04:28:33.520173Z","alert_count":0,"request_count":1,"received_data":27798,"sent_data":439,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"d13pxqgp3ixdbh.cloudfront.net","ip":{"addr":"54.230.245.211","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2020-11-26T10:37:52Z","last_seen":"2025-11-02T19:43:26.637974Z","alert_count":86,"request_count":43,"received_data":2786066,"sent_data":21715,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"d1y3y09sav47f5.cloudfront.net","ip":{"addr":"3.167.7.98","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2025-10-31T01:50:14.555656Z","last_seen":"2025-10-31T01:50:14.555656Z","alert_count":0,"request_count":5,"received_data":21293,"sent_data":2385,"comment":"","tags":null,"fingerprints":[{"name":"OpenSSL:1.0.2k","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]},{"name":"Apache HTTP Server:2.4.51","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"PHP:7.4.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Apache HTTP Server:2.4.46","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"mrbeastgiftfree.netlify.app","ip":{"addr":"63.176.8.218","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2018-05-08","domain_rank":0,"first_seen":"2025-11-03T22:17:31.664964Z","last_seen":"2025-11-03T22:17:31.664964Z","alert_count":0,"request_count":6,"received_data":185187,"sent_data":2736,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"Python","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]},{"name":"jQuery:2.2.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"Sentry:6.4.1","description":"Sentry is an open-source platform for workflow productivity, aggregating errors from across the stack in real time.","website":"https://sentry.io/","common_platform_enumeration":"","icon":"Sentry.svg","categories":["Issue trackers"]},{"name":"Blogger","description":"Blogger is a blog-publishing service that allows multi-user blogs with time-stamped entries.","website":"https://www.blogger.com","common_platform_enumeration":"","icon":"Blogger.png","categories":["Blogs"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-11-02T22:12:57.589972Z","alert_count":0,"request_count":3,"received_data":7241,"sent_data":1400,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"translate.google.com","ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":609,"first_seen":"2012-05-30T01:30:32Z","last_seen":"2025-11-02T23:11:35.581396Z","alert_count":0,"request_count":2,"received_data":79235,"sent_data":966,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2025-11-02T22:15:49.745695Z","alert_count":0,"request_count":4,"received_data":25254,"sent_data":2198,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ajax.googleapis.com","ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":3691,"first_seen":"2012-05-22T10:38:03Z","last_seen":"2025-11-02T22:19:07.554281Z","alert_count":0,"request_count":1,"received_data":86564,"sent_data":456,"comment":"","tags":null,"fingerprints":null},{"fqdn":"translate.googleapis.com","ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":6317,"first_seen":"2012-05-31T07:21:21Z","last_seen":"2025-11-02T23:11:35.555748Z","alert_count":0,"request_count":3,"received_data":225223,"sent_data":1759,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-11-02T22:12:55.494707Z","alert_count":0,"request_count":3,"received_data":34083,"sent_data":1602,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.blogger.com","ip":{"addr":"142.250.74.105","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1999-06-22","domain_rank":9514,"first_seen":"2012-05-22T07:35:03Z","last_seen":"2025-11-02T22:55:37.153059Z","alert_count":0,"request_count":4,"received_data":476533,"sent_data":1842,"comment":"","tags":null,"fingerprints":null},{"fqdn":"mrbeastsgifts.blogspot.com","ip":{"addr":"142.251.38.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2000-07-31","domain_rank":0,"first_seen":"2025-10-02T05:48:25.881037Z","last_seen":"2025-10-02T05:48:25.881037Z","alert_count":1,"request_count":1,"received_data":457,"sent_data":459,"comment":"","tags":null,"fingerprints":[{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]}]},{"fqdn":"browser.sentry-cdn.com","ip":{"addr":"151.101.2.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2018-05-30","domain_rank":23677,"first_seen":"2018-07-13T11:42:06Z","last_seen":"2025-11-02T22:51:40.452551Z","alert_count":0,"request_count":1,"received_data":68475,"sent_data":484,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"mrbeastgiftfree.netlify.app/","fqdn":"mrbeastgiftfree.netlify.app","domain":"mrbeastgiftfree.netlify.app","tld":"netlify.app"},"ip":{"addr":"63.176.8.218","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"74b48a20be16f6f4d969ce205f0fb71f","sha1":"5e466261791c7bd7795106741d8830b1f59abfe0","sha256":"17fd3e0821bc8429f850de207c3cbfb3c1f3cd962a563cb8bec34683c422c244","sha512":"ec297751dcd65f0b0e93ac3a49feadf34f9d0645137cc7b9e07e06880f5fb8f18feae3e85c014062a14ad58b0bc83f2c28f85a465c3b17eca68bea8ff57cfba6","ssdeep":"","tlshash":"ebc02be284d38310c27b070418b99e1d59e221270d97381077fe8f100f0213d7434a59","size":168,"data":"","first_seen":"2023-03-08T14:38:04Z","last_seen":"2026-03-18T22:06:42.173529Z","times_seen":44,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d1y3y09sav47f5.cloudfront.net/huUkeqqgXHmV.4199266.2d7e1.0.js","fqdn":"d1y3y09sav47f5.cloudfront.net","domain":"d1y3y09sav47f5.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"3.167.7.98","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"db846e11ce9e20a9545b904b0f4a0de4","sha1":"394609a164e8dc69cc737cf1b2d2dc78104c4c0d","sha256":"6dd97567c551f41885cefe7e6c93f1f8cf8c2332bfa31cfd4a814161997fb094","sha512":"5ac8bae497749da19234a66c194cbb12232f6199d2adfbc59a457f5b3b12809f8030a9c0c225f910c06ebc9163502bced04269030f275d7173b372b7b745e827","ssdeep":"192:MbvIrh56VmmVwtKy6c/Vd6Na/NO3fX6UesEB3p8i04vcswaw3wmhwewXwu:MbwWVxCt1/ma/0ysEp8i04vcswaw3wmO","tlshash":"05322aa67881c419f292cc0d76fb6e7da885541982c3f998f64de63c83cd4f44ae3396","size":11056,"data":"","first_seen":"2025-11-03T22:17:41.774685Z","last_seen":"2025-11-03T22:17:41.774685Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"browser.sentry-cdn.com/6.4.1/bundle.min.js","fqdn":"browser.sentry-cdn.com","domain":"sentry-cdn.com","tld":"com"},"ip":{"addr":"151.101.2.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c2bcb2b153e152ba850057a843064c5f","sha1":"cdb5e35cf2c53fec13a111579eea73b08bb86bb3","sha256":"22ece4ddd583540c08ccadf82d18658e2ed0eba5dd7fdca806aa259667edba56","sha512":"77ce58a3db7cc89d9fec799da3e3222ed51473be0d86df42dd7fa9e6894281c399376438509202daaa826bc1633be042feca278de20ec1ded949129055ce56a4","ssdeep":"768:WSVz2U6R+6EgxchcGb/Mq4SmCjOs5QQ0UUBslyFLXqDU2MohbyC/3OCxIzr6PW:WS53v6EgWhPLSXFCbfO","tlshash":"be63c7c9f6a1b071479365a4423f000ae33f5a6cb48f8278b5a9d9e16cf940d9627f3d","size":67961,"data":"","first_seen":"2023-03-07T01:07:11Z","last_seen":"2026-06-06T16:29:14.023368Z","times_seen":852,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrbeastgiftfree.netlify.app/","fqdn":"mrbeastgiftfree.netlify.app","domain":"mrbeastgiftfree.netlify.app","tld":"netlify.app"},"ip":{"addr":"63.176.8.218","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"38311281dc46e8537f70645de2a2c9fb","sha1":"abc979d384a431e34392a093d3a37c5fb41efca5","sha256":"51553b743ee8fdc1325e4e5864f52a199d69e67a7b9c723ddbc726f6731a7f30","sha512":"01ee866b8d9cb8e4174d936bf0463949628b0f1260f3e26aa631cc9aa73f32a0e98769cbc0cc21ec09fecc3e9c6507565f8b6dded41fdfda8dc43cc5e6e7f61c","ssdeep":"","tlshash":"b0f0ab0b30b6707ca2d3e0fa13be2c09b620130fa58484f3bc3e82141f905690390b8c","size":521,"data":"","first_seen":"2025-10-02T05:48:34.652627Z","last_seen":"2025-11-03T22:17:41.865646Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrbeastgiftfree.netlify.app/","fqdn":"mrbeastgiftfree.netlify.app","domain":"mrbeastgiftfree.netlify.app","tld":"netlify.app"},"ip":{"addr":"63.176.8.218","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"0ea2a2e1055ce1004fcbdcedd3d92b31","sha1":"d7846062198719d8db4faf8640d39e07909ae14a","sha256":"2e1ec14f19fc4905da236ce0bc9a7de5fcb03342e14410b01c46a52db5cfb27e","sha512":"76f5266181a37254722bb237b87f1b931142bb9da1d5e18e5c34ba24d67fa36f823bdf365a06238f973619ff1bba11b7046915d99b20be196a13a0f4b7ec39ab","ssdeep":"","tlshash":"fbc08c07b030400a0087f109d38254887124810b01390d24324c608a3fb3f8d034d1ac","size":166,"data":"","first_seen":"2023-04-05T01:50:18Z","last_seen":"2026-06-01T05:09:18.791059Z","times_seen":405,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.WfV_z3JgIYs.O/am=AAAQ/d=1/exm=el_conf/ed=1/rs=AN8SPfqr8R65bcvxtKMOeVZoxdCwBBoFgA/m=el_main","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c9718fd4aa7ded914f3c39d49218603e","sha1":"453fbc6df8bf0c5ef200a6773ceeb4984d997a35","sha256":"78a6ce49eae6c1ad1edd000ba880f574686f5287bbf8c609f83343b47ec619e0","sha512":"8fca6f55a8b46bbfefd9607ba1c7104450c7bed20d0a2a47b185f45252331cdc023388499e23ec65b64a43c646cc7739768596607a218b2e284c696af70a5617","ssdeep":"3072:0AARxQjJq7sIoO3Lo/AHqjxICMVCGJflwRuQYcBLjZrbyiB:dOBsIhHq6Jgz","tlshash":"f624e8d9b35270669363f4a6813f000ab13b68a9f9484d6cb28ce8e25df4d19457bf7c","size":223285,"data":"","first_seen":"2025-11-03T20:58:14.878815Z","last_seen":"2026-05-15T21:46:21.188676Z","times_seen":465,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d1y3y09sav47f5.cloudfront.net/public/external/check.php?it=4199266\u0026time=1762208245379","fqdn":"d1y3y09sav47f5.cloudfront.net","domain":"d1y3y09sav47f5.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"3.167.7.98","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"69d77690ed201acd0627e99dd35c96eb","sha1":"05ffc794be6dae3836ee5df72d82d917323b2941","sha256":"577d248638c57941b7e35d9a19ef4b5d88d52482f6e59254142d4266c57bad38","sha512":"06aaf36275b0c4de82580319878333d973d3cd464f4c09df4281551f4381940dc792eb28c2c84b3a94196b53edf41751b01976ad77c5e393c0b62574c4b214bf","ssdeep":"","tlshash":"32a0220c0c02220f033230b080bbc8280030e3320bc0c3a8282aca8a2e03c3b2a0208e","size":72,"data":"","first_seen":"2023-08-12T16:35:44Z","last_seen":"2026-06-14T22:27:54.022016Z","times_seen":3080,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrbeastgiftfree.netlify.app/","fqdn":"mrbeastgiftfree.netlify.app","domain":"mrbeastgiftfree.netlify.app","tld":"netlify.app"},"ip":{"addr":"63.176.8.218","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"a98ad955c5b8207069a42ea17400fcf6","sha1":"c01061a9698344edd36a4f59237333a97e2d2059","sha256":"3e0f75768ee6e2a621f05b0271836e91dd959065bf0c504edbb16af5cad14e0f","sha512":"201ac57e265550b76ff7eede729040aba12506cdec5ff4a75bccc4614e0937d1799542996c9116157001566e5f2b40d730f6eb937de04493ccfd71064bbfdbe1","ssdeep":"","tlshash":"3fd0a7acfdef4056a6461094ab8b310521a655432501c408391cd204af5094ac2fd6cd","size":243,"data":"","first_seen":"2025-11-03T22:17:41.868574Z","last_seen":"2025-11-03T22:17:41.868574Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google-analytics.com/analytics.js","fqdn":"www.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f24128d0c9cba7be2916c693427a3483","sha1":"1b6397d496ea896ebc2018b01b995cee4f166029","sha256":"58173de4697da1a218f04c3a783a733bab4e769ceabc37cd42da9dc3e036a7e8","sha512":"c4950733b44e258bbc817ce6396f002caec1e11a6413fd0038c9baef2d5f1d992b1fd0ec52515aba52faedb52c28b996a7fc063f28a0f45f3aab5e2f91bf5be5","ssdeep":"96:A1VdZYqhPnjpWx4/eTe8qSMbqaQd6VL2Jyt9LdJoyayCVPVD5wdBfQPfCHiUr3:AXdZYqNjpU4yPqSMbqaQGL2QfdDayCZC","tlshash":"a6a1dc9939fb50210233b1bd1bafa918b23895236208dd61b98c9364bf94437d7f1fc9","size":4691,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-06-07T08:18:38.899011Z","times_seen":919823,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrbeastgiftfree.netlify.app/","fqdn":"mrbeastgiftfree.netlify.app","domain":"mrbeastgiftfree.netlify.app","tld":"netlify.app"},"ip":{"addr":"63.176.8.218","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"5009e9749f19851a94cc6dffd8f5d300","sha1":"e83abf98111fea0124b8de65de561bfb341d8797","sha256":"802cd4bb647f12210a1a8ce88dde7834e3a3bd495a0f1fec864668baa517ca38","sha512":"ee7063eeb5443159262f97f3a030015666e44cf43645d4599c1803b80e2da6aa8aa8fde80388bce72f00d14b62bcb68a29e0c1449e37e6f532b5684aae05a370","ssdeep":"","tlshash":"d6b012af6ef3a7240233e5fc0b2f540015194d0b254ec508fc0c425d9fa822881b098c","size":123,"data":"","first_seen":"2025-10-02T05:48:34.658068Z","last_seen":"2025-11-03T22:17:41.871583Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.blogger.com/static/v1/widgets/984859869-widgets.js","fqdn":"www.blogger.com","domain":"blogger.com","tld":"com"},"ip":{"addr":"142.250.74.105","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2a951b80caf40287497ddd3b99022a4d","sha1":"26d08691f48183d1a82c99cbc6b33e51f4e6d1fc","sha256":"57359a92f0b1c5eefc5e43e18844dd515d8402c9e8294b54b756fef1e98d9859","sha512":"6f5ae6b7ca747f9fb7ccdfa34df548bcc7a80072c29a9f25f4ceff2a77e3e97391257c9b8a4effffe6e269d3650cf7a7094a4fc3e9a03a403e9ad1d4e7006a23","ssdeep":"1536:+wgXh1Zq36eAnyQAg5IlY/+138NeRao9vSjxkNAahj7TxFEgbzDLSUbVHR02AeRW:b6eQv+1gest9kNrjog55PRuYRcV0a","tlshash":"14e30ad8b79270628373b4b5003f010ff13a79aae848496cb488d9e57e7496a5277f7c","size":147356,"data":"","first_seen":"2024-11-15T12:11:39.280202Z","last_seen":"2025-11-03T22:17:41.854551Z","times_seen":118,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrbeastgiftfree.netlify.app/sandbox%20eval%20code","fqdn":"mrbeastgiftfree.netlify.app","domain":"mrbeastgiftfree.netlify.app","tld":"netlify.app"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"92b651082ce234f66bb544e678befda3","sha1":"14c21c55ddce43b6f677caadf51d4ab98c6a3df8","sha256":"25d57d1d97abeb84531d3d3e5754dd5cb19a2c115edfa7cfc7af8247084faded","sha512":"b4fcbc037e0a3d91db2a624921e96b878e9e18dd998ad5649d77d7d053faf28b09c8725a0542aef702310bf85f3037b70985c274db8acabd021efb171d41f361","ssdeep":"","tlshash":"34c08ca3e74026ae2a1166b2b810e003a2866b015aa78402b00a003b1441fe21aaa1a8","size":147,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-06-07T08:18:38.896325Z","times_seen":921522,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2f6b11a7e914718e0290410e85366fe9","sha1":"69bb69e25ca7d5ef0935317584e6153f3fd9a88c","sha256":"05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e","sha512":"0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db","ssdeep":"1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2","tlshash":"1e83c6d9b2d6706297b734b850bf410bb17a98dab44c8c60f059d4e47eb4a8e507bf2c","size":85578,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-15T01:16:33.894428Z","times_seen":284667,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrbeastgiftfree.netlify.app/","fqdn":"mrbeastgiftfree.netlify.app","domain":"mrbeastgiftfree.netlify.app","tld":"netlify.app"},"ip":{"addr":"63.176.8.218","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"edaddb8132e9e0880252c5b6c47bf1c1","sha1":"dc08b5b6ca432b46cca94f1f297491e1b08736ea","sha256":"b98809417c0240085bf70f2a1127f0b622c1514651737e7e4ffac4b39e4da17e","sha512":"00dbcc0a7b89e5e377bc26573fa3b9f1d09267044b3ee1c594e22522f8a17733bf041ebfa09ddb2e70a9f495437933f8a4e42875a16a3221067bf1df558c090b","ssdeep":"","tlshash":"da4000000000000000000000000000000000000300000000300000000f000000000000","size":6,"data":"","first_seen":"2023-03-07T01:14:38Z","last_seen":"2026-06-07T07:30:11.58353Z","times_seen":20356,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrbeastgiftfree.netlify.app/","fqdn":"mrbeastgiftfree.netlify.app","domain":"mrbeastgiftfree.netlify.app","tld":"netlify.app"},"ip":{"addr":"63.176.8.218","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"16d3b793a44c3e6948e8cf332828cad6","sha1":"0d32f07e3c78a7e88f3af4c8dda384560cc96809","sha256":"926d469f14c8ccd295623245200e198e1a40864a9ed2be3a07241d936a55ea9d","sha512":"676b6971340d7f9bf2a8da50b1cdc82224a443a7da28b8c30d4eda16da8858f0b83e598243cdf669ad5a683f60ececdb7ee1e79239db61a4174580e784bc5803","ssdeep":"384:AI/2iA9TTXXjz/fz1/V7NP9zVBD97JTNrhjfhDpvRrJPRhVDxL9bhDVtH1jVHdLZ:AiuTTXXjz/fz1/V7NP9zVBD97JTNrhj7","tlshash":"6572c4fb738309320defbeeb1a12438c7810851b9d46e506395c5a609f19ee2d52eed8","size":16781,"data":"","first_seen":"2025-10-02T05:48:34.660538Z","last_seen":"2025-11-03T22:17:41.875615Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.blogger.com/static/v1/widgets/2263754362-widgets.js","fqdn":"www.blogger.com","domain":"blogger.com","tld":"com"},"ip":{"addr":"142.250.74.105","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e4640162ff32475791a09609f26ccef6","sha1":"b70bbf28644e11940b9912202dd60e1be83a0823","sha256":"a20fb5dab9ec5f2ac4efd96922ce04abf595b243d9cbb43ff5610f763e6b0814","sha512":"e3eb0ec33cafe9dc1b4a4d0b572bc85b21cb628f10a106efd6ee8cf54032a9aeb7a009e178b58e0a8122e6bf2d56f77c136829d803afde393b510b85da217320","ssdeep":"1536:kX2MhntgTtonhQ8S8EOC5doeAx31g9bNAbKjVle/SgB+y/RVNYs9Vo52QUMySusv:rTtDjdoeQ0bNZjRgFM2QU141Li78d","tlshash":"76e30bd8bb9270668373b4b5003f050ff13a75aae848486cb088d8e57e7496a5677f7c","size":148283,"data":"","first_seen":"2024-11-29T02:52:05.696214Z","last_seen":"2025-11-03T22:17:41.859102Z","times_seen":303,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrbeastgiftfree.netlify.app/","fqdn":"mrbeastgiftfree.netlify.app","domain":"mrbeastgiftfree.netlify.app","tld":"netlify.app"},"ip":{"addr":"63.176.8.218","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"10ecf180625d4b81cce6f5dac10824d0","sha1":"ccadb08da46e27db83b70f4fe467aa14bd5d0948","sha256":"06f05efb09502ae8ed26f6eea59af95c22324c3fb3d9e4f652fe60468ca926b9","sha512":"64365edf760850752c9b8f3e1bb8bce299f522eb95f4a126ed083c2f18d58a4376bf14a9c4a4f5a6cfd11eb4555dae694edd5fcccad12bc34d8af084d2c777da","ssdeep":"","tlshash":"4fe0c24408bf2474067e4a1b821b002d2a3ad1bb410ca520314e81b86ff420ec31574c","size":309,"data":"","first_seen":"2025-10-02T05:48:34.662961Z","last_seen":"2025-11-03T22:17:41.877518Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrbeastgiftfree.netlify.app/","fqdn":"mrbeastgiftfree.netlify.app","domain":"mrbeastgiftfree.netlify.app","tld":"netlify.app"},"ip":{"addr":"63.176.8.218","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"2f3ff71967cfc8289780ba3be5bc806e","sha1":"358becd7554eca4fbecce63929a0472d343d1d56","sha256":"aea1c0024972950134dcdf5a31aa8634a998f01793d6969fc512fcd6188c0bd8","sha512":"6b6f42c5aeb81000b8dfb2df328ef32e6208b3ce9a76ef6a0f5f45b13295c6d11d1ba55c0403bfbef99115f949165947f5af1fbd0189a9c08e785e7924ccdf10","ssdeep":"96:tKZq+kbRb3bLtbj+l22PPx3OJyHTUOwjDBRq2E85uHAhqcNHllLNbRscivCk:g1kbRb3bLtbj+yyI/BRq2E89hqcpllLQ","tlshash":"c49176c362bcd0fa8f64ee8de51afe40b7db0826d981bca1d49858652545b47ec14f30","size":4396,"data":"","first_seen":"2025-11-03T22:17:41.879333Z","last_seen":"2025-11-03T22:17:41.879333Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d1y3y09sav47f5.cloudfront.net/public/external/check.php?it=4199266\u0026time=1762208230158","fqdn":"d1y3y09sav47f5.cloudfront.net","domain":"d1y3y09sav47f5.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"3.167.7.98","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"69d77690ed201acd0627e99dd35c96eb","sha1":"05ffc794be6dae3836ee5df72d82d917323b2941","sha256":"577d248638c57941b7e35d9a19ef4b5d88d52482f6e59254142d4266c57bad38","sha512":"06aaf36275b0c4de82580319878333d973d3cd464f4c09df4281551f4381940dc792eb28c2c84b3a94196b53edf41751b01976ad77c5e393c0b62574c4b214bf","ssdeep":"","tlshash":"32a0220c0c02220f033230b080bbc8280030e3320bc0c3a8282aca8a2e03c3b2a0208e","size":72,"data":"","first_seen":"2023-08-12T16:35:44Z","last_seen":"2026-06-14T22:27:54.022016Z","times_seen":3080,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrbeastgiftfree.netlify.app/","fqdn":"mrbeastgiftfree.netlify.app","domain":"mrbeastgiftfree.netlify.app","tld":"netlify.app"},"ip":{"addr":"63.176.8.218","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"0a290a4dfaa8b2cfc5a341e79e2b121c","sha1":"6ccd7e2d98eb4029fe203be791bad2b2028e56d4","sha256":"73524dc6908101e24066ecb77a8927946fbabc932462525c1937899d02478926","sha512":"f1e9676ae6f21f0f34d29c63e68ce8b967dbcb1fee5f4ca15f447b821ae52dbe3e9270e3868cf951a9c98c583dffbc1cfd401c21c067b4886ab924f4926f940b","ssdeep":"96:t44DlRl3lLrljklbhC0nFTyHTUOwjDBRq2E65u4AhqcNHllLRlRscivYk:O4DlRl3lLrljklhRyI/BRq2E6ChqcplM","tlshash":"ab9165c368fdb0f95f70ad8de11ffe61b7ce0c12d985bca2d45449a5250ab93a454b30","size":4319,"data":"","first_seen":"2025-11-03T22:17:41.880976Z","last_seen":"2025-11-03T22:17:41.880976Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrbeastgiftfree.netlify.app/_/translate_http/_/js/k=translate_http.tr.no.WfV_z3JgIYs.O/am=AAAD/d=1/rs=AN8SPfp9txJ01Ib0QXXJKiK8cOHvS8Xt5Q/m=el_conf","fqdn":"mrbeastgiftfree.netlify.app","domain":"mrbeastgiftfree.netlify.app","tld":"netlify.app"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"2e155c2cc798c0d51cf3d2f0da5b2cd1","sha1":"4e246130e10fdc7e9ede7d42101cda27ee30c5ea","sha256":"060154555787cda2f374a485db3646d42a79a47cffe24e4c15ca34aad5fca92f","sha512":"452377a0b1b07cf84477497d3945906b121da252084abc5b530420e57ac3c7d802f489207521f8add64e5bf346c81e1a6ba1ac425dc8016272fb1935974797ea","ssdeep":"1536:XA5ccPARD+glNeU3czwPOKJk0zRYHXF2G9fx63xyM6CdifwNWPt:Xs+lWwWKJ3YHVAFndi3t","tlshash":"fc73c8ccb6a674658263f5b5413f000fb23f5899e8484dacb288d8f1aeb5949413bf7d","size":76924,"data":"","first_seen":"2025-11-03T22:17:41.785558Z","last_seen":"2025-11-03T22:49:16.607909Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dojy0dg181308.cloudfront.net/76b9d2e.js","fqdn":"dojy0dg181308.cloudfront.net","domain":"dojy0dg181308.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.245.187","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6f71ffb9a974716679657dc2be6f48a2","sha1":"39559ee70c44e2cc86c540d28ec98f63b8d929ac","sha256":"beb56d146fa8ce59399730dca37f9ee41d29b6c53d49c07e0d219e0eb04e93ca","sha512":"da2fd18206595f8115993b5ad4f05753e06530143741b8698ab4d548bd11c632be8aa5adb71293faedd2a82da84556c55130ab679171ed8eb05ae1db57b5d8b5","ssdeep":"768:n5f2+236wBXroljZ1/peRXMiH54aGz1WCyQgmip4L/4aLv0NO:03Z7OZ1h2ayQgM","tlshash":"0bc2545aab5a1849867763b9df1f5208fa75032f1512c119bc7c88d85fb0d3442aaffc","size":27325,"data":"","first_seen":"2025-10-30T19:57:12.483415Z","last_seen":"2026-06-10T19:27:39.156555Z","times_seen":593,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrbeastgiftfree.netlify.app/","fqdn":"mrbeastgiftfree.netlify.app","domain":"mrbeastgiftfree.netlify.app","tld":"netlify.app"},"ip":{"addr":"63.176.8.218","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"3ffd5ed3ce01c36086b5abc6b0c02ba2","sha1":"56bf5ce2d4439e89041b5f6fa654bac841b4a1b1","sha256":"b2290f3007e464e46109d95ebf35177cc35cc36d76c4dfc6b7d25fe07b49cd71","sha512":"790947df381bc2f3dd8d5d559600f3c1fc22ee67ea2d90e7721af815189e02d011b7fc4172b691002f2c82aab35d339c5ca2d5e41658ac92a6fdb7daf5bd0e72","ssdeep":"96:tUE2R232LA2jFl138AkyHTUOwjDBRq2E25uHAhqcNHllLD2RscivYk:aE2R232LA2jFwyI/BRq2E29hqcpllLD7","tlshash":"ca9174c3a0f9a4fa4f60adddf01efe80b6cf4815d881bca2d84c4964354ab67b854b74","size":4370,"data":"","first_seen":"2025-11-03T22:17:41.882528Z","last_seen":"2025-11-03T22:17:41.882528Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.blogger.com/static/v1/widgets/3704019819-widgets.js","fqdn":"www.blogger.com","domain":"blogger.com","tld":"com"},"ip":{"addr":"142.250.74.105","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e5e94160e257182f70da510e8f3cc93e","sha1":"818ef6636e0a8e4c61ebb19aa6a99915f9887695","sha256":"b2a75bbc8fe9eafaa4322022c2e134a19f2566a197ae57bfff6099d1c7795050","sha512":"81d4c93f4e18548b04616027e33f69863cfb9438d074d4484de5d7b0db446579670379be3e322ff310e7e684671f88cb133af78534ce5b630f07830a3116b335","ssdeep":"1536:+wgXh1Zq36eAnyQAg5IlY/+138neRmo9vSFXwNAahj7TxFEgbzDLSZbVHR02AGsQ:b6eQv+16eQtdwNrjog05PsdYVcs0a","tlshash":"bbe30ad8b79270628373b4b5003f010ff13a79aae848496cb588d8e57e7496a5277f7c","size":147434,"data":"","first_seen":"2024-12-05T11:49:54.580547Z","last_seen":"2025-11-29T06:04:46.815561Z","times_seen":1200,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"ce7d47d40b161ffd6ec282e4401d27ae","sha1":"49279ddddd8420ab679b18035fb17f829fcdb5f9","sha256":"083ca1c2583b3c546979a3a6291650d94000b5759c211b9d5accde83326747b6","sha512":"65a55975911567c1eaad262c2bfdfe41ba4ddf4b75f77487276776cb1e5d05424dc29de6ce37cdb447c4720c26ebf7c374986a77396d7201cca4f4d32bf3d96f","ssdeep":"","tlshash":"aa514fa2605ca01b4503d5d0f8a23eeef4de0058c77169d07e1c29efeaeac7704a716d","size":3011,"data":"","first_seen":"2025-10-30T18:32:51.059407Z","last_seen":"2025-11-11T19:23:38.96552Z","times_seen":858,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"d13pxqgp3ixdbh.cloudfront.net/uploads/1683515579c0063555d35f573fa6a19c893cd3b1fc.png","fqdn":"d13pxqgp3ixdbh.cloudfront.net","domain":"d13pxqgp3ixdbh.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.245.211","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrbeastgiftfree.netlify.app/","date":"2025-11-03T22:17:07.798Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /uploads/1683515579c0063555d35f573fa6a19c893cd3b1fc.png HTTP/1.1\r\nHost: d13pxqgp3ixdbh.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrbeastgiftfree.netlify.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 38937\r\nlast-modified: Mon, 08 May 2023 03:13:01 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: Td9nqZXnpAEsWGJogfcsQFD.E4uNWszR\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 03 Nov 2025 09:01:39 GMT\r\netag: \"a216942720fd9046c6e7bb272f384e65\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: Jigki0bGhPPSTx4Tw09yjxAD0G-zYgvERNtJ7UDsVfE6gPFtmxIYvQ==\r\nage: 47729\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":38937,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 458 x 572, 8-bit colormap, non-interlaced","md5":"a216942720fd9046c6e7bb272f384e65","sha1":"70974c9a138452185bc2cd8a4e4fb8dde419c289","sha256":"fd2bc8043cff08bc23926282e60d20c7bab359a2dff6c0110f262b4b0c621b3e","sha512":"a484ad40b5f57785eb8c0ef8fbca915eb2944e27bd854f78e1a1f81784a6130cc72610d0ad829ca376386af2dae2ada9fd10042b496480c39265bbf9022f2e91","ssdeep":"768:TD7b+PPSqcr3pNDGIdnqjoF9f2gbjAAqoFDId:HGP6ZNLYjG13qqS","tlshash":"6403f1ad137616fc84f6b89c805ac77b1c264596be0364b732a3db3243ac1717a5e7c2","first_seen":"2023-05-23T16:48:27Z","last_seen":"2026-05-17T05:46:22.651806Z","times_seen":43,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":10,"dns":0,"connect":0,"send":0,"wait":70,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"d13pxqgp3ixdbh.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"d13pxqgp3ixdbh.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"d1y3y09sav47f5.cloudfront.net/huUkeqqgXHmV.4199266.2d7e1.0.js","fqdn":"d1y3y09sav47f5.cloudfront.net","domain":"d1y3y09sav47f5.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"3.167.7.98","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mrbeastgiftfree.netlify.app/","date":"2025-11-03T22:17:07.814Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /huUkeqqgXHmV.4199266.2d7e1.0.js HTTP/1.1\r\nHost: d1y3y09sav47f5.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrbeastgiftfree.netlify.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ndate: Mon, 03 Nov 2025 22:17:08 GMT\r\nserver: Apache/2.4.51 () OpenSSL/1.0.2k-fips PHP/7.4.11\r\nx-powered-by: PHP/7.4.11\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 53019ee090f087ca6c6fa860098bcd80.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: YfL3fqVlX1tJanVQrvIBYi5EBnPFx1MDhZF13h1wyBsJuh_mHgvB5A==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenSSL:1.0.2k","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]},{"name":"Apache HTTP Server:2.4.51","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"PHP:7.4.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":11056,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9771), with CRLF line terminators","md5":"db846e11ce9e20a9545b904b0f4a0de4","sha1":"394609a164e8dc69cc737cf1b2d2dc78104c4c0d","sha256":"6dd97567c551f41885cefe7e6c93f1f8cf8c2332bfa31cfd4a814161997fb094","sha512":"5ac8bae497749da19234a66c194cbb12232f6199d2adfbc59a457f5b3b12809f8030a9c0c225f910c06ebc9163502bced04269030f275d7173b372b7b745e827","ssdeep":"192:MbvIrh56VmmVwtKy6c/Vd6Na/NO3fX6UesEB3p8i04vcswaw3wmhwewXwu:MbwWVxCt1/ma/0ysEp8i04vcswaw3wmO","tlshash":"05322aa67881c419f292cc0d76fb6e7da885541982c3f998f64de63c83cd4f44ae3396","first_seen":"2025-11-03T22:17:41.774685Z","last_seen":"2025-11-03T22:17:41.774685Z","times_seen":1,"resource_available":true,"data":null}},"time_used":357,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":357,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrbeastgiftfree.netlify.app/style.css","fqdn":"mrbeastgiftfree.netlify.app","domain":"mrbeastgiftfree.netlify.app","tld":"netlify.app"},"ip":{"addr":"63.176.8.218","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mrbeastgiftfree.netlify.app/","date":"2025-11-03T22:17:07.423Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.netlify.app","organization":"Netlify, Inc"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 31 Jan 2025 00:00:00 GMT","end":"Tue, 03 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"04:28:C9:A3:BC:06:50:9C:6B:0B:67:72:82:27:C6:3D:99:1B:5B:71","sha256":"FA:34:6A:A0:1C:F5:9C:C7:30:CA:55:23:13:A1:3E:0F:21:8C:3A:0B:B5:CC:E5:67:09:FE:64:EC:97:4E:8D:75"}}},"request":{"raw":"GET /style.css HTTP/1.1\r\nHost: mrbeastgiftfree.netlify.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrbeastgiftfree.netlify.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nage: 0\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Mon, 03 Nov 2025 22:17:07 GMT\r\netag: 1760191672-ssl-df\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01K95WQ833G27J91B8MDJAZDD7\r\ncontent-length: 1206\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":3449,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"0f89e18d0abacb99149c5e59bf69b5e1","sha1":"9e1ebb10be890c5855eec444233c028270d3e65a","sha256":"8514f0009a58c6e0acb5468f88037732b59b70af5e524f452e3bef8fb33effc5","sha512":"5275d80f3f8f1f5e0d1b6b6b0745732a69d669d66dcdab418fc5a2094bffcb81ff1d34252c97c6dffe5470f0d359a3be03cfd3dfe3d729bf186917c8cf21ece0","ssdeep":"","tlshash":"1f61848dc9a7209b5c93643e27eb560a2274a247cd46da4c3fde6348cf492f214d36ac","first_seen":"2024-12-12T10:00:11.490986Z","last_seen":"2026-06-15T00:55:23.023374Z","times_seen":12062,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d13pxqgp3ixdbh.cloudfront.net/uploads/168351558787a27e0fb81f743e6ed8a241ee9b27e4.png","fqdn":"d13pxqgp3ixdbh.cloudfront.net","domain":"d13pxqgp3ixdbh.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.245.211","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrbeastgiftfree.netlify.app/","date":"2025-11-03T22:17:07.789Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /uploads/168351558787a27e0fb81f743e6ed8a241ee9b27e4.png HTTP/1.1\r\nHost: d13pxqgp3ixdbh.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrbeastgiftfree.netlify.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 89273\r\nlast-modified: Mon, 08 May 2023 03:13:08 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: Gl.HV6mfNdnfADSRfjkAe09sYgbYPfwF\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 03 Nov 2025 09:01:38 GMT\r\netag: \"2b09a35c3f187289db64425e4262e834\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: J2j-IhDw2cvOcstu8rYS2EgiC6v_JanSW1Wahs737ssSsabmtdi4Uw==\r\nage: 47729\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":89273,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 458 x 572, 8-bit colormap, non-interlaced","md5":"2b09a35c3f187289db64425e4262e834","sha1":"2413057e54a1c5717b0f0f07fd2daa378adf2c05","sha256":"000fd41e6e7c83d41c334275e56a967a9283cfed0e331e93f64c8527aa1cb444","sha512":"b8327ae1bf70e8849f61950a12d7cb7547301772762e0d64110dcfdd69c11d44c8e2b8474b04b2ea5d89e26ecc03e8e365b9429a745f785b229806d3cc0e491b","ssdeep":"1536:o0LVR0bAdyZSZ7osZlABqe0hPpBNmG8LvskcfHPV++HPPoi8kTjoxx49qVAR:rBR0EE6plAkhPRkUg+Ph8kTjoxkX","tlshash":"399312aa8e36f315822ec2dc1332622d241aa25df11aff755e75f02f9be3257d987140","first_seen":"2023-05-23T16:48:27Z","last_seen":"2026-05-17T05:46:22.649191Z","times_seen":45,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":37,"dns":0,"connect":0,"send":0,"wait":89,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"d13pxqgp3ixdbh.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"d13pxqgp3ixdbh.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"d13pxqgp3ixdbh.cloudfront.net/uploads/1683515586181c716e649e0de5204b5d7537669473.png","fqdn":"d13pxqgp3ixdbh.cloudfront.net","domain":"d13pxqgp3ixdbh.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.245.211","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrbeastgiftfree.netlify.app/","date":"2025-11-03T22:17:07.790Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /uploads/1683515586181c716e649e0de5204b5d7537669473.png HTTP/1.1\r\nHost: d13pxqgp3ixdbh.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrbeastgiftfree.netlify.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 63741\r\nlast-modified: Mon, 08 May 2023 03:13:07 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: ZOOOaQ7cLDVejP4qJsa.Z1KXhN35RUCX\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 03 Nov 2025 09:01:38 GMT\r\netag: \"2487502251c33e29a08fb00de1dd54c4\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: Z5lcxnPobycaeaNFyHkk4R8oUnYajBtYTRTERBuNNtFlnM3805a0qQ==\r\nage: 47729\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":63741,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 458 x 572, 8-bit colormap, non-interlaced","md5":"2487502251c33e29a08fb00de1dd54c4","sha1":"10bb330f3f489cbab9ec3a610e69459c7124f999","sha256":"1fca290fd53286967b4a6614b237298302e4c32fc5755a2f685c49c25044710d","sha512":"8a6a08650b5162a5bab8ccf60915fbd3fa4eb3557caf94ea3c94aac665dbf08fa7de7d3c41f40796329fc817339cb48a49c5f4eb7d13d4d36a2e3cbd48e27975","ssdeep":"1536:YWUDgkhs75uQOQK8r3U5ofy07J1CDn5QRkrQmDMl8D:YWUCOQREEx7PCD5+UE8D","tlshash":"8c5301522b23467dc9eeab620478e0d19266b057c5385a7a846913db42e623393df3cf","first_seen":"2023-05-23T16:48:27Z","last_seen":"2026-05-17T05:46:22.631345Z","times_seen":45,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":36,"dns":0,"connect":0,"send":0,"wait":89,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"d13pxqgp3ixdbh.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"d13pxqgp3ixdbh.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.WfV_z3JgIYs.O/am=AAAQ/d=1/exm=el_conf/ed=1/rs=AN8SPfqr8R65bcvxtKMOeVZoxdCwBBoFgA/m=el_main","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mrbeastgiftfree.netlify.app/","date":"2025-11-03T22:17:07.813Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:51 GMT","end":"Mon, 05 Jan 2026 08:38:50 GMT"},"fingerprint":{"sha1":"1D:8E:3A:85:91:AC:63:71:94:8B:0E:61:45:34:D9:86:AB:A6:E2:CE","sha256":"E6:93:4E:53:89:15:41:28:27:59:AA:84:50:96:96:1E:2A:98:7E:08:60:AE:68:62:AE:DD:86:AB:DB:0F:FE:2B"}}},"request":{"raw":"GET /_/translate_http/_/js/k=translate_http.tr.no.WfV_z3JgIYs.O/am=AAAQ/d=1/exm=el_conf/ed=1/rs=AN8SPfqr8R65bcvxtKMOeVZoxdCwBBoFgA/m=el_main HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrbeastgiftfree.netlify.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 77231\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 03 Nov 2025 18:34:02 GMT\r\nexpires: Tue, 03 Nov 2026 18:34:02 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Sat, 01 Nov 2025 03:10:25 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 13385\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":223285,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2601)","md5":"c9718fd4aa7ded914f3c39d49218603e","sha1":"453fbc6df8bf0c5ef200a6773ceeb4984d997a35","sha256":"78a6ce49eae6c1ad1edd000ba880f574686f5287bbf8c609f83343b47ec619e0","sha512":"8fca6f55a8b46bbfefd9607ba1c7104450c7bed20d0a2a47b185f45252331cdc023388499e23ec65b64a43c646cc7739768596607a218b2e284c696af70a5617","ssdeep":"3072:0AARxQjJq7sIoO3Lo/AHqjxICMVCGJflwRuQYcBLjZrbyiB:dOBsIhHq6Jgz","tlshash":"f624e8d9b35270669363f4a6813f000ab13b68a9f9484d6cb28ce8e25df4d19457bf7c","first_seen":"2025-11-03T20:58:14.878815Z","last_seen":"2026-05-15T21:46:21.188676Z","times_seen":465,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Play\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mrbeastgiftfree.netlify.app/","date":"2025-11-03T22:17:07.055Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:51 GMT","end":"Mon, 05 Jan 2026 08:38:50 GMT"},"fingerprint":{"sha1":"1D:8E:3A:85:91:AC:63:71:94:8B:0E:61:45:34:D9:86:AB:A6:E2:CE","sha256":"E6:93:4E:53:89:15:41:28:27:59:AA:84:50:96:96:1E:2A:98:7E:08:60:AE:68:62:AE:DD:86:AB:DB:0F:FE:2B"}}},"request":{"raw":"GET /css2?family=Play\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrbeastgiftfree.netlify.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 03 Nov 2025 22:17:07 GMT\r\ndate: Mon, 03 Nov 2025 22:17:07 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2084,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"dd671b8e925cf9fd2d3dfcfaea787812","sha1":"5a2de979fa20aa69e943550e568d9c04e465f0bc","sha256":"27870fed8b756a58b7ee8ddfb87a5f336bd483d6638fc66a04529c689386eb34","sha512":"db6829b8378a731509db2d749a151f3d8da23efd674e31dfa20192f2463069efc819fdb1d91f3080b6ca5693d1f8182f9cdd90c95a2f286367da1dc5bd3fa1dc","ssdeep":"","tlshash":"b041cad65066d410eb530cc623cf7e329d5e61a1b045d179affe188cacead6a23a0b0d","first_seen":"2025-09-17T15:43:02.333086Z","last_seen":"2026-06-14T02:11:07.319878Z","times_seen":76,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":82,"dns":1,"connect":22,"send":0,"wait":31,"receive":0,"ssl":95},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Lalezar\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mrbeastgiftfree.netlify.app/","date":"2025-11-03T22:17:07.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:51 GMT","end":"Mon, 05 Jan 2026 08:38:50 GMT"},"fingerprint":{"sha1":"1D:8E:3A:85:91:AC:63:71:94:8B:0E:61:45:34:D9:86:AB:A6:E2:CE","sha256":"E6:93:4E:53:89:15:41:28:27:59:AA:84:50:96:96:1E:2A:98:7E:08:60:AE:68:62:AE:DD:86:AB:DB:0F:FE:2B"}}},"request":{"raw":"GET /css2?family=Lalezar\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrbeastgiftfree.netlify.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 03 Nov 2025 22:17:07 GMT\r\ndate: Mon, 03 Nov 2025 22:17:07 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2099,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (649)","md5":"38198ff96f21c8873eb234b16a57254c","sha1":"a10ecb2c6dc42e869d7d4c6c431f067e0504c19a","sha256":"595404c9586c176789e4112d105947ad40dcd4c7a43d4998672ad6d326b2f54e","sha512":"be9a86904168bf0c2966bedadea56285a4809988ea26e07eec76fe8644242ea34ab4792f45c0598619254de3829d2bc959fae669aaa223299e38ec846e36d5ff","ssdeep":"","tlshash":"0d417ae5481f4180fb8b1dc127cd7e23de4da2956085846d9bfd1b8b9c9bc22336474d","first_seen":"2025-09-20T10:48:00.460183Z","last_seen":"2026-06-12T22:14:22.442271Z","times_seen":58,"resource_available":false,"data":null}},"time_used":343,"timings":{"blocked":133,"dns":0,"connect":20,"send":0,"wait":33,"receive":0,"ssl":153},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.google.com/translate_a/element.js?cb=googleTranslateElementInit","fqdn":"translate.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mrbeastgiftfree.netlify.app/","date":"2025-11-03T22:17:07.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:37:33 GMT","end":"Mon, 05 Jan 2026 08:37:32 GMT"},"fingerprint":{"sha1":"17:9D:6B:F6:A8:18:29:EC:16:2C:3C:3D:F2:EA:93:19:C7:92:EE:AA","sha256":"AA:D4:E9:5C:D4:70:A7:86:45:DE:62:83:82:60:F9:B9:46:CF:40:73:19:FA:3B:01:A9:7E:9B:32:24:EE:57:EC"}}},"request":{"raw":"GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1\r\nHost: translate.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrbeastgiftfree.netlify.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Mon, 03 Nov 2025 22:17:07 GMT\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":76924,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1782)","md5":"2e155c2cc798c0d51cf3d2f0da5b2cd1","sha1":"4e246130e10fdc7e9ede7d42101cda27ee30c5ea","sha256":"060154555787cda2f374a485db3646d42a79a47cffe24e4c15ca34aad5fca92f","sha512":"452377a0b1b07cf84477497d3945906b121da252084abc5b530420e57ac3c7d802f489207521f8add64e5bf346c81e1a6ba1ac425dc8016272fb1935974797ea","ssdeep":"1536:XA5ccPARD+glNeU3czwPOKJk0zRYHXF2G9fx63xyM6CdifwNWPt:Xs+lWwWKJ3YHVAFndi3t","tlshash":"fc73c8ccb6a674658263f5b5413f000fb23f5899e8484dacb288d8f1aeb5949413bf7d","first_seen":"2025-11-03T22:17:41.785558Z","last_seen":"2025-11-03T22:49:16.607909Z","times_seen":3,"resource_available":true,"data":null}},"time_used":692,"timings":{"blocked":323,"dns":1,"connect":21,"send":0,"wait":36,"receive":0,"ssl":307},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v15/RxZJdnzeo3R5zSexge8UUVtXRa8TVwTICgirnJhmVJw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mrbeastgiftfree.netlify.app/","date":"2025-11-03T22:17:07.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:51 GMT","end":"Mon, 05 Jan 2026 08:38:50 GMT"},"fingerprint":{"sha1":"89:73:B0:EF:F1:BA:6A:DA:6C:2C:87:70:0D:17:11:82:30:E9:13:68","sha256":"96:8D:5D:62:3A:3A:D6:CD:06:9A:CE:52:F4:2D:91:F9:66:13:40:F4:5F:9B:88:3D:55:04:79:E3:14:96:51:FA"}}},"request":{"raw":"GET /s/roboto/v15/RxZJdnzeo3R5zSexge8UUVtXRa8TVwTICgirnJhmVJw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://mrbeastgiftfree.netlify.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrbeastgiftfree.netlify.app/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 14596\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 30 Oct 2025 09:54:19 GMT\r\nexpires: Fri, 30 Oct 2026 09:54:19 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 14 Jan 2015 22:47:38 GMT\r\ncontent-type: font/woff2\r\nage: 390168\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14596,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14596, version 2.0","md5":"bb474f16c9f76f522d656d66aa4a220e","sha1":"55161308d29d91ec21aadf6f63da390a902c053b","sha256":"01a44f86a9b361ef0d3ad5e4f9f0f01d394ab53fc5b0e3dff92466fa411e706b","sha512":"4e8cee0f4f0d8c18263b80abca06e8dda9d58a5ff10fda72d8d0c27bc27ef49dc97346f7c3477518d191b4cd0c946b2d8aef40025e81d72d4b58862395fdd064","ssdeep":"384:yut37C+Qoa05r//4Yy65wcEoo99oX61GRwkdNxGGFJobKdlbCl:yupG+QslwcEooJ0zdPGSwKdlbCl","tlshash":"4562e010a7e1ce84918e77b4641b49662e0010bfd37743f24d471dda6f2c4e8b5ac764","first_seen":"2023-04-11T18:56:18Z","last_seen":"2026-06-14T13:56:03.410737Z","times_seen":1204,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":122,"dns":7,"connect":9,"send":0,"wait":8,"receive":1,"ssl":102},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d1y3y09sav47f5.cloudfront.net/public/external/css_frontXF.css","fqdn":"d1y3y09sav47f5.cloudfront.net","domain":"d1y3y09sav47f5.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"3.167.7.98","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mrbeastgiftfree.netlify.app/","date":"2025-11-03T22:17:07.653Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /public/external/css_frontXF.css HTTP/1.1\r\nHost: d1y3y09sav47f5.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrbeastgiftfree.netlify.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\ncontent-length: 6134\r\ndate: Mon, 03 Nov 2025 22:17:07 GMT\r\naccept-ranges: bytes\r\nserver: Apache/2.4.46 () OpenSSL/1.0.2k-fips PHP/7.4.11\r\nlast-modified: Thu, 17 Aug 2023 03:24:07 GMT\r\netag: \"17f6-60315f1e16606\"\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 53019ee090f087ca6c6fa860098bcd80.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: nPHCBGmM4Xrqg_Q8rwpriTlvM87Pp2lVsrhxpzYtwAt6B_m5OhKFQg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.46","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"PHP:7.4.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenSSL:1.0.2k","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]}],"data":{"size":6134,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"8cf8da7dc6b5d43ae6872b4fe5564c38","sha1":"cc3c14ce8bccf427b4a777449876eb722381cb18","sha256":"60a0f85900cf8e56c1607c8c120f68064a4f8d22a40637b224774cb611e93c2f","sha512":"e719aa872285169d609b29810cf8b4d748bae32bb08ceb4122ea4cd08345f7fb1f688eb03f55c10ad145e414920de88ffdc02f6b77be46e2d9106d80438f7826","ssdeep":"96:XtPngNH2uJbg6iLiTX9KFORdtHGMl3JYYD9PzhZ:XtPgRpViLiTX1dtHGMlm29PzhZ","tlshash":"eac1e16c6d21254581368a15e3db861ad87ca12319317efdb381235b4f316fc13abfba","first_seen":"2023-08-18T00:45:26Z","last_seen":"2026-06-14T22:27:54.048452Z","times_seen":2917,"resource_available":false,"data":null}},"time_used":487,"timings":{"blocked":60,"dns":51,"connect":1,"send":0,"wait":365,"receive":1,"ssl":6},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d13pxqgp3ixdbh.cloudfront.net/uploads/1683515587d7137bdf5e6ef50a1b25500a4729490f.png","fqdn":"d13pxqgp3ixdbh.cloudfront.net","domain":"d13pxqgp3ixdbh.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.245.211","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrbeastgiftfree.netlify.app/","date":"2025-11-03T22:17:07.787Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /uploads/1683515587d7137bdf5e6ef50a1b25500a4729490f.png HTTP/1.1\r\nHost: d13pxqgp3ixdbh.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrbeastgiftfree.netlify.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 22968\r\nlast-modified: Mon, 08 May 2023 03:13:08 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: hLAFVgekgyl2eN3QwdB2HdlXDAQIjNHs\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 03 Nov 2025 06:36:09 GMT\r\netag: \"2f1a439ecbc5fbfe118b89a31b3b7ba1\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: qL4tjRRuEjFpo6hbQq_tmsTsKab2OtDar3ZIMPj9YjA1wSrWK9aUoQ==\r\nage: 56459\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":22968,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 458 x 572, 8-bit colormap, non-interlaced","md5":"2f1a439ecbc5fbfe118b89a31b3b7ba1","sha1":"532db73788a19e62cbeaa3f8caaee2081d5fd625","sha256":"2d319386fea6353b5052aba2e6c0fd4682c95ee30e54d0d029685dc8fa445da5","sha512":"185bab0e4ad17a8938e2b13c4961a56c643864a3da9fab3e20394330952b1395dea862ccbeb25b6d1575112f02e7f6a0720145d67a63c1ced883f3dca88f81f8","ssdeep":"384:GjSuS+UgRI+ZTxzkQRfZnZm83ge0jS730f6r0sUcIqY91NzOpewwvmqjKMmPu9XA:GjSj+hZTZkQRxnZm8ajS7y64sjYbNsw0","tlshash":"fba2e1a0447a83a87f660613cb9cfd15a60c53cc4cf86f8587fddb91a08fca069e5ac1","first_seen":"2023-05-23T16:48:27Z","last_seen":"2026-05-17T05:46:22.699278Z","times_seen":46,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":37,"dns":0,"connect":0,"send":0,"wait":36,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"d13pxqgp3ixdbh.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"d13pxqgp3ixdbh.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"d13pxqgp3ixdbh.cloudfront.net/uploads/1683515580ffc9bf439ab9a1b6927ce97463eb2883.png","fqdn":"d13pxqgp3ixdbh.cloudfront.net","domain":"d13pxqgp3ixdbh.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.245.211","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrbeastgiftfree.netlify.app/","date":"2025-11-03T22:17:07.796Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /uploads/1683515580ffc9bf439ab9a1b6927ce97463eb2883.png HTTP/1.1\r\nHost: d13pxqgp3ixdbh.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrbeastgiftfree.netlify.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 59087\r\nlast-modified: Mon, 08 May 2023 03:13:02 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: QCZzYQMSTDHiOM7Xmps0h30R1.PQZdf1\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 03 Nov 2025 07:19:29 GMT\r\netag: \"aafa6cb6e236f26ef2a0acef64d973e1\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: 5OzZWbLnZlaW9G0WPHwVxKQHFn2hUobhTDopCqTRrSp58CAbulFPaw==\r\nage: 53859\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":59087,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 458 x 572, 8-bit colormap, non-interlaced","md5":"aafa6cb6e236f26ef2a0acef64d973e1","sha1":"c68c84990f1075a659300dfcfdfce3f17da91583","sha256":"a6383408df74fc3a32405e89e71442727e6c6e70cf69ba7c408f87c861bf9e11","sha512":"eaab7032001bfe47c38413200961ecbf3b4e31b26b04ba45e3fb338c82a081e365a7d79991cded537b528b9269873d0667f744319d7739defc657417b9c3dc1c","ssdeep":"1536:ekbn+ysaOwA2/lFx3htF/aeucBkAbkb0+ltrcAi:eukmxFsncWAqLcAi","tlshash":"0943021dbb0394fa87ac8a4bd3544667a4b8f3c4863a0d5f42d620b953c77332af5b19","first_seen":"2023-05-23T16:48:27Z","last_seen":"2026-05-17T05:46:22.69547Z","times_seen":45,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":12,"dns":0,"connect":0,"send":0,"wait":72,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"d13pxqgp3ixdbh.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"d13pxqgp3ixdbh.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"d13pxqgp3ixdbh.cloudfront.net/uploads/16835155759bb03a1c8cd60dd03ce3c7cdfc3d5729.png","fqdn":"d13pxqgp3ixdbh.cloudfront.net","domain":"d13pxqgp3ixdbh.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.245.211","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrbeastgiftfree.netlify.app/","date":"2025-11-03T22:17:07.809Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /uploads/16835155759bb03a1c8cd60dd03ce3c7cdfc3d5729.png HTTP/1.1\r\nHost: d13pxqgp3ixdbh.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrbeastgiftfree.netlify.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 47133\r\nlast-modified: Mon, 08 May 2023 03:12:56 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 8hWEgmXeGMx76TDnzlAzjO2bWKbtt18r\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 03 Nov 2025 07:19:29 GMT\r\netag: \"984f700f9de614e82d4f720eeb9fcba6\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: QS1WKhfVlG54yvkbUBJQgsjIIUPgmrkwcJMZ1q8u0i6fjeICspMHQw==\r\nage: 53859\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":47133,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 458 x 572, 8-bit colormap, non-interlaced","md5":"984f700f9de614e82d4f720eeb9fcba6","sha1":"3896af429b84c49dce54dde7c5728fce9d2b18f2","sha256":"3b7d4bbf1e84887ad60e363d290b336cae1bd53d9ef4c174ed07d8fbb0f8a1e8","sha512":"d1c3a08ab5c37933c1c16d6f9f010a4dec932dcd1d1383cc238d50252599231c9241d13db7b1459121dca75eacfb06b4c3f12b58ec7cb459ba6c71c1785d6a71","ssdeep":"768:seD4aCYsZzQVubG2/eisfPg4xvKiYJBs+XreVRBDgwdVBruk4WR6bYP++R6dNLxu:x4aCzZzfGKjmg4ZKj9XalLNdRRfP5Yxu","tlshash":"7b23024b7eb9398bf652d604f7725bcceed334842e280fa8064619751a36f745630cab","first_seen":"2023-05-23T16:48:27Z","last_seen":"2026-05-17T05:46:22.703514Z","times_seen":45,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":91,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"d13pxqgp3ixdbh.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"d13pxqgp3ixdbh.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mrbeastgiftfree.netlify.app/","fqdn":"mrbeastgiftfree.netlify.app","domain":"mrbeastgiftfree.netlify.app","tld":"netlify.app"},"ip":{"addr":"63.176.8.218","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrbeastgiftfree.netlify.app/","date":"2025-11-03T22:17:07.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.netlify.app","organization":"Netlify, Inc"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 31 Jan 2025 00:00:00 GMT","end":"Tue, 03 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"04:28:C9:A3:BC:06:50:9C:6B:0B:67:72:82:27:C6:3D:99:1B:5B:71","sha256":"FA:34:6A:A0:1C:F5:9C:C7:30:CA:55:23:13:A1:3E:0F:21:8C:3A:0B:B5:CC:E5:67:09:FE:64:EC:97:4E:8D:75"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: mrbeastgiftfree.netlify.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrbeastgiftfree.netlify.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 1\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Mon, 03 Nov 2025 22:17:07 GMT\r\netag: \"83e810b7a8987cf7807bdcd1239263fe-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01K95WQ8339VH078SCJ9WFSTE8\r\ncontent-length: 8239\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Python","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]},{"name":"jQuery:2.2.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"Sentry:6.4.1","description":"Sentry is an open-source platform for workflow productivity, aggregating errors from across the stack in real time.","website":"https://sentry.io/","common_platform_enumeration":"","icon":"Sentry.svg","categories":["Issue trackers"]},{"name":"Blogger","description":"Blogger is a blog-publishing service that allows multi-user blogs with time-stamped entries.","website":"https://www.blogger.com","common_platform_enumeration":"","icon":"Blogger.png","categories":["Blogs"]}],"data":{"size":57378,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4052), with CRLF line terminators","md5":"39edaf4952721722b9bd2f0f78920c4c","sha1":"41dbab1c39bb54f72701deb5319f722a1a0bf9d3","sha256":"fb6a0c105e01f0c2ed6426d99f37fe705f43237bcc362ba14e1f8eb3641590fe","sha512":"a36ed6bb598840f7965d572390efd018b5120fb61f16f08387a7373563081b46123cae0f1f2eac890c4c9b1b21f5f87ae233c5b9a07c9f69d6005ed12544fbba","ssdeep":"1536:7LU7FxmlgMoi38o6A1tpLZ5upLVNjoWAGTtB:7LU7CGMoi38o6A1tpLZ5upLVNjoWAGTb","tlshash":"7d4394e7779684304bbbabef9a525b88f5404417ce01949679ec0d605f36ee2c02afdc","first_seen":"2025-11-03T22:17:41.795676Z","last_seen":"2025-11-03T22:17:41.795676Z","times_seen":1,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d13pxqgp3ixdbh.cloudfront.net/uploads/16835155851a4468a359a9cb675ea185fcf71ab6d8.png","fqdn":"d13pxqgp3ixdbh.cloudfront.net","domain":"d13pxqgp3ixdbh.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.245.211","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrbeastgiftfree.netlify.app/","date":"2025-11-03T22:17:07.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /uploads/16835155851a4468a359a9cb675ea185fcf71ab6d8.png HTTP/1.1\r\nHost: d13pxqgp3ixdbh.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrbeastgiftfree.netlify.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 26795\r\ndate: Mon, 03 Nov 2025 06:36:09 GMT\r\nlast-modified: Mon, 08 May 2023 03:13:06 GMT\r\netag: \"30e8f2fe47a41c3b611203841f059023\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: dSkAhrhZWo.uG8yqC1qbjJDcIOlJta0V\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: _VO3t4hyFrqzVAwjxq4kIHUdrKn8I2Q0QVNXUqKd5SGDP4iSJSIFng==\r\nage: 56459\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":26795,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 458 x 572, 8-bit colormap, non-interlaced","md5":"30e8f2fe47a41c3b611203841f059023","sha1":"c68aecfdb67d5e68c764a553314ed41c6bc50fe2","sha256":"1f58a5d1d21c1b65bef9a086965c0fcf90c70ccc00652f634da61ab33b6d5777","sha512":"2ab5411ce7bbf82dc8ae877650334873c3b5f09d82f12f0275a240e9820e8b407a22495c64cc341aeadf7252a9d8ef2538fa06d35d4f8dce7467f43ab49302e7","ssdeep":"768:OydOWEUHtNYZeRvm+X/ivMReu6JmlrPTnVT48:OylEUNN3R++vivHuGmlTTnVTL","tlshash":"e1c2f15a4b31b8e1f4256b7f6d460e7001f4338f7bc2516a82c5b7f6f09ab06478c9a6","first_seen":"2023-05-23T16:48:27Z","last_seen":"2026-05-17T05:46:22.636957Z","times_seen":46,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"d13pxqgp3ixdbh.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"d13pxqgp3ixdbh.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"d13pxqgp3ixdbh.cloudfront.net/uploads/168351558269416cf617bfe6668e55ad8db023750d.png","fqdn":"d13pxqgp3ixdbh.cloudfront.net","domain":"d13pxqgp3ixdbh.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.245.211","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrbeastgiftfree.netlify.app/","date":"2025-11-03T22:17:07.794Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /uploads/168351558269416cf617bfe6668e55ad8db023750d.png HTTP/1.1\r\nHost: d13pxqgp3ixdbh.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrbeastgiftfree.netlify.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 53893\r\nlast-modified: Mon, 08 May 2023 03:13:04 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: L3JGyYvaB7rLkHYph8ciL7QniCGuEdNM\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 03 Nov 2025 09:01:39 GMT\r\netag: \"f0022a561868183dd7c7de1f52b0f828\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: 7OKYfm6F-wj9fwUmhSvMaPNsEa4pRsCaND7Wgsfq6shRTEGObvIdHA==\r\nage: 47729\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":53893,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 458 x 572, 8-bit colormap, non-interlaced","md5":"f0022a561868183dd7c7de1f52b0f828","sha1":"bebfe46fd572b3b4aeedfe4def4d8880cee28d91","sha256":"ed8e6fff9e0dbc07db73b4feee76e5a1a50c3f0ce1e6bc9f0aa1f9343d5f3d5a","sha512":"415b815b8a0611980abb9954a86d0dbd2d475dcdc5b7ca81ccc6e78617310dc8c11b694e69426061debaf2adae1b9ac33b5970a28570709cced02eb5583a1165","ssdeep":"768:SlxyclzIwp/ZDhtHsUGrWH3NYUIYmdJXv77itoC2izdUOsanPVtffNvuutsQgYF+:SCcllyrCNdmdJf774p2ctpnPVpguPN9e","tlshash":"9a33023760e53419fc2b3da52d6c25769bc91d872d41783b3ba4011e6c0a638bcecf5a","first_seen":"2023-05-23T16:48:27Z","last_seen":"2026-05-17T05:46:22.642735Z","times_seen":45,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":61,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"d13pxqgp3ixdbh.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"d13pxqgp3ixdbh.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"d13pxqgp3ixdbh.cloudfront.net/uploads/1683515582188f681dceb4d54bb0ca2a44ecc5ae2e.png","fqdn":"d13pxqgp3ixdbh.cloudfront.net","domain":"d13pxqgp3ixdbh.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.245.211","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrbeastgiftfree.netlify.app/","date":"2025-11-03T22:17:07.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /uploads/1683515582188f681dceb4d54bb0ca2a44ecc5ae2e.png HTTP/1.1\r\nHost: d13pxqgp3ixdbh.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrbeastgiftfree.netlify.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 61277\r\ndate: Mon, 03 Nov 2025 06:36:09 GMT\r\nlast-modified: Mon, 08 May 2023 03:13:03 GMT\r\netag: \"aa0cac75c8be98bc64b7eeea9854328f\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: RzrC_BplZApULeYF4MFQuCcjpP6ZEwYt\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: q2ylvQSVjYZLtv4psEy4F9nGu0EYH-D587t7-5rCuS1JnAxgcz-ZOw==\r\nage: 56459\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":61277,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 458 x 572, 8-bit colormap, non-interlaced","md5":"aa0cac75c8be98bc64b7eeea9854328f","sha1":"7bb59cd8b4192baaf2388a6cff4a13f3c332f4f4","sha256":"27d32e38684a6970c0fd729bde6cc0aba58b7be92ce10a63567d623fcae5e96d","sha512":"8737b70a88d5b83409a44fb21b6e0f6c6d9c45f2a96c2ca592fbc636fa3beeba24aca00374dfc4406b6fc69c386943039eee99c02ebda22524462b7f1fb8b963","ssdeep":"1536:Xr/IR4J56V3jssHTOrmX5e9bWA7z3KvPEZc1BN19B0XIXDcy:XLIR4wwsHSipe9CAPK3E0/8IX3","tlshash":"6253021b70c80c696832b32ed1a55ae30c92ffa0691192cedb253211b55dfdf2d9f167","first_seen":"2023-05-23T16:48:27Z","last_seen":"2026-05-17T05:46:22.669232Z","times_seen":44,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":62,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"d13pxqgp3ixdbh.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"d13pxqgp3ixdbh.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"d13pxqgp3ixdbh.cloudfront.net/uploads/1683515579b8f11cac60402fdfe438578c3bdc9519.png","fqdn":"d13pxqgp3ixdbh.cloudfront.net","domain":"d13pxqgp3ixdbh.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.245.211","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrbeastgiftfree.netlify.app/","date":"2025-11-03T22:17:07.801Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /uploads/1683515579b8f11cac60402fdfe438578c3bdc9519.png HTTP/1.1\r\nHost: d13pxqgp3ixdbh.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrbeastgiftfree.netlify.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 14230\r\nlast-modified: Mon, 08 May 2023 03:13:00 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: O.arjcVKAkoEKwFkxQBxKmh6SU4SGKQ7\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 03 Nov 2025 09:01:39 GMT\r\netag: \"7da74875249a65c214bd124296c247f3\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: 86GJKpHYfiBtKisZ6giPe5qVv3TSUuntTbhiqEj3RzVbHqUf7uJbSA==\r\nage: 47729\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":14230,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 458 x 572, 8-bit colormap, non-interlaced","md5":"7da74875249a65c214bd124296c247f3","sha1":"4838d4262f20c2f96ef0a4827a02bc8d75180c2f","sha256":"93384c87386c8ffdedcf4a364e20e1952a1a4265aab0add20417b7c2922c661b","sha512":"579a6027185d1cfb81fd64c2d37462ad75a0495016abf2f8c4a502bfbec836802a3200315a5b7e7c65db596fee26485f40fa79a12f604896807f94771b30484a","ssdeep":"384:paVYl60JjIOKIpqjtnVh3HN4eGNqYSzaduED55IOP:5IwjLJu7HieGXjwMXIOP","tlshash":"b452d08dba32619fbc85f8ef328c66f607175cdb7e717914613e28350c4a0c6a6c65d2","first_seen":"2023-05-23T16:48:27Z","last_seen":"2026-05-17T05:46:22.700403Z","times_seen":44,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":83,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"d13pxqgp3ixdbh.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"d13pxqgp3ixdbh.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"d13pxqgp3ixdbh.cloudfront.net/uploads/16783611976948f162718682cc09d47d5e64042795.png","fqdn":"d13pxqgp3ixdbh.cloudfront.net","domain":"d13pxqgp3ixdbh.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.245.211","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrbeastgiftfree.netlify.app/","date":"2025-11-03T22:17:07.813Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /uploads/16783611976948f162718682cc09d47d5e64042795.png HTTP/1.1\r\nHost: d13pxqgp3ixdbh.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrbeastgiftfree.netlify.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 359311\r\nlast-modified: Thu, 09 Mar 2023 11:26:39 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: tEJJ_cLg46YoFrFOy._fsu74qJinF48z\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 03 Nov 2025 02:38:36 GMT\r\netag: \"24fb99efa76df5fbae1057511fde0f68\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: NS5dibFlbYePoxRnUtLB3KSSQXc11oXrjOQqHhJ7Whi7HiPJG-tDEQ==\r\nage: 70712\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":359311,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 3840 x 2160, 4-bit colormap, non-interlaced","md5":"24fb99efa76df5fbae1057511fde0f68","sha1":"a741551f47547832ba9e48bc13b55454cc1cc522","sha256":"c8fb2d74d00c20e1d747cc482b6f0247110a0c78645af185be47d56b00db8b09","sha512":"443e38e25ae7e7c04c17a787bb19f983e1a73acd486cb1a6f360bb5767e09b3ad06cff6ffdcbb78b67d35d919cbffd053cbf84fb9f9dade0a74ec182a7a0d7e6","ssdeep":"6144:HqeCYvpjAISRkx8ajAC18G7qNXD/G0K/uuQQn4bO8ObVhBPxlX01Q1WVpPE5zc/C:KvYvpE/TajAC186qNyYH4VhB/KQ1eEyq","tlshash":"ee7423a70888640743e4b86bbb055ed0f470c2cf8d9c592ed779b2725b371d81bd86d9","first_seen":"2023-05-22T06:16:49Z","last_seen":"2026-05-17T05:46:22.753535Z","times_seen":50,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":98,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"d13pxqgp3ixdbh.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"d13pxqgp3ixdbh.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_42x16dp.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrbeastgiftfree.netlify.app/","date":"2025-11-03T22:17:08.085Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:51 GMT","end":"Mon, 05 Jan 2026 08:38:50 GMT"},"fingerprint":{"sha1":"89:73:B0:EF:F1:BA:6A:DA:6C:2C:87:70:0D:17:11:82:30:E9:13:68","sha256":"96:8D:5D:62:3A:3A:D6:CD:06:9A:CE:52:F4:2D:91:F9:66:13:40:F4:5F:9B:88:3D:55:04:79:E3:14:96:51:FA"}}},"request":{"raw":"GET /images/branding/googlelogo/1x/googlelogo_color_42x16dp.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrbeastgiftfree.netlify.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 910\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 30 Oct 2025 09:37:28 GMT\r\nexpires: Fri, 30 Oct 2026 09:37:28 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 02 Nov 2023 22:48:00 GMT\r\ncontent-type: image/png\r\nvary: Origin\r\nage: 391180\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":910,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 42 x 16, 8-bit/color RGBA, non-interlaced","md5":"efa6bb2bfe459bc6f4bdafa3db0383f6","sha1":"52d15ce52fe50643e542c17812de43f4ed1b6ee0","sha256":"6318394f737c66f0e2ccfcd88e3935c6667633a1b95fa29fba2b75431d55eef2","sha512":"e23c04d8997f5c2f92070e09261b7ee50d9df8753f45cf66f604f0874ffa8d99e947c97c528ec02a2c3fbe8e43d840b343a7d0225532980d5da95031216415b7","ssdeep":"","tlshash":"491184a73cd1dc6854a47a87aa91b864ec250f1b91a220981237b42277313444fdc8f7","first_seen":"2023-04-05T07:39:29Z","last_seen":"2026-06-15T01:07:14.683731Z","times_seen":49476,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d1y3y09sav47f5.cloudfront.net/public/external/check.php?it=4199266\u0026time=1762208230158","fqdn":"d1y3y09sav47f5.cloudfront.net","domain":"d1y3y09sav47f5.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"3.167.7.98","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mrbeastgiftfree.netlify.app/","date":"2025-11-03T22:17:10.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /public/external/check.php?it=4199266\u0026time=1762208230158 HTTP/1.1\r\nHost: d1y3y09sav47f5.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrbeastgiftfree.netlify.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-length: 72\r\ndate: Mon, 03 Nov 2025 22:17:10 GMT\r\nx-powered-by: PHP/7.4.11\r\nserver: Apache/2.4.51 () OpenSSL/1.0.2k-fips PHP/7.4.11\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 53019ee090f087ca6c6fa860098bcd80.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: 4Jxc_2Wad32rnQdrvVW1CrdO0Oh5eJk6G8NzGTBGhnyl2cULT68qdA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenSSL:1.0.2k","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]},{"name":"Apache HTTP Server:2.4.51","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"PHP:7.4.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":72,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"69d77690ed201acd0627e99dd35c96eb","sha1":"05ffc794be6dae3836ee5df72d82d917323b2941","sha256":"577d248638c57941b7e35d9a19ef4b5d88d52482f6e59254142d4266c57bad38","sha512":"06aaf36275b0c4de82580319878333d973d3cd464f4c09df4281551f4381940dc792eb28c2c84b3a94196b53edf41751b01976ad77c5e393c0b62574c4b214bf","ssdeep":"","tlshash":"32a0220c0c02220f033230b080bbc8280030e3320bc0c3a8282aca8a2e03c3b2a0208e","first_seen":"2023-08-12T16:35:44Z","last_seen":"2026-06-14T22:27:54.022016Z","times_seen":3080,"resource_available":true,"data":null}},"time_used":214,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":214,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.blogger.com/static/v1/widgets/55013136-widget_css_bundle.css","fqdn":"www.blogger.com","domain":"blogger.com","tld":"com"},"ip":{"addr":"142.250.74.105","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mrbeastgiftfree.netlify.app/","date":"2025-11-03T22:17:07.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.blogger.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:37:18 GMT","end":"Mon, 05 Jan 2026 08:37:17 GMT"},"fingerprint":{"sha1":"53:D6:04:72:15:45:52:04:C4:A6:93:27:0C:81:AB:99:E7:9E:B5:C3","sha256":"6F:04:2D:52:74:8C:3D:49:3B:D3:DB:78:5D:5F:B6:C9:FD:25:24:69:E4:E7:E8:8D:55:92:AE:0E:E9:CA:C3:79"}}},"request":{"raw":"GET /static/v1/widgets/55013136-widget_css_bundle.css HTTP/1.1\r\nHost: www.blogger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrbeastgiftfree.netlify.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"blogger-tech\"\r\nreport-to: {\"group\":\"blogger-tech\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/blogger-tech\"}]}\r\ncontent-length: 6620\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 30 Oct 2025 09:39:57 GMT\r\nexpires: Fri, 30 Oct 2026 09:39:57 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 30 Oct 2025 07:53:32 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nage: 391030\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30597,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (30596)","md5":"e3f09df1bc175f411d1ec3dfb5afb17b","sha1":"3994ec3efe3c2447e7bbfdd97bb7e190dd1658f9","sha256":"1a2eca9e492e3a21e02dd77ad44d7af45c4091d35ede79e948b7a3f23e5b3617","sha512":"16164d66d452d7d343b1902fe5b864ffdee42811ee90952cbfe9efa9847c58c0403f944c8e29db2bc2384ccd516b629cb8765e5e51de37da6efd75962cf82530","ssdeep":"384:OVysImDyPWquJMpx/SCYW0h8+Rl9yaZwuJ86YKSQCNL/J69nKg93jW1gngRe2Fr/:OnIm6IvW0trVJw1gngRLFr/","tlshash":"1dd2c972a590201df237d726b893fa8d3218d563e7135eeed556b2b8cec56de0023329","first_seen":"2023-04-05T07:30:06Z","last_seen":"2026-06-07T02:05:42.061237Z","times_seen":28043,"resource_available":false,"data":null}},"time_used":285,"timings":{"blocked":115,"dns":1,"connect":21,"send":0,"wait":21,"receive":1,"ssl":123},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrbeastgiftfree.netlify.app/style.css","fqdn":"mrbeastgiftfree.netlify.app","domain":"mrbeastgiftfree.netlify.app","tld":"netlify.app"},"ip":{"addr":"63.176.8.218","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mrbeastgiftfree.netlify.app/","date":"2025-11-03T22:17:07.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.netlify.app","organization":"Netlify, Inc"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 31 Jan 2025 00:00:00 GMT","end":"Tue, 03 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"04:28:C9:A3:BC:06:50:9C:6B:0B:67:72:82:27:C6:3D:99:1B:5B:71","sha256":"FA:34:6A:A0:1C:F5:9C:C7:30:CA:55:23:13:A1:3E:0F:21:8C:3A:0B:B5:CC:E5:67:09:FE:64:EC:97:4E:8D:75"}}},"request":{"raw":"GET /style.css HTTP/1.1\r\nHost: mrbeastgiftfree.netlify.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrbeastgiftfree.netlify.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nage: 0\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Mon, 03 Nov 2025 22:17:07 GMT\r\netag: 1760191672-ssl-df\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01K95WQ7P9MGDCGKG4YVBQ8J72\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":3449,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"0f89e18d0abacb99149c5e59bf69b5e1","sha1":"9e1ebb10be890c5855eec444233c028270d3e65a","sha256":"8514f0009a58c6e0acb5468f88037732b59b70af5e524f452e3bef8fb33effc5","sha512":"5275d80f3f8f1f5e0d1b6b6b0745732a69d669d66dcdab418fc5a2094bffcb81ff1d34252c97c6dffe5470f0d359a3be03cfd3dfe3d729bf186917c8cf21ece0","ssdeep":"","tlshash":"1f61848dc9a7209b5c93643e27eb560a2274a247cd46da4c3fde6348cf492f214d36ac","first_seen":"2024-12-12T10:00:11.490986Z","last_seen":"2026-06-15T00:55:23.023374Z","times_seen":12062,"resource_available":true,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d13pxqgp3ixdbh.cloudfront.net/uploads/16835155751ab0f5a98bc7d5e1e6deb62a607666ac.png","fqdn":"d13pxqgp3ixdbh.cloudfront.net","domain":"d13pxqgp3ixdbh.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.245.211","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrbeastgiftfree.netlify.app/","date":"2025-11-03T22:17:07.807Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /uploads/16835155751ab0f5a98bc7d5e1e6deb62a607666ac.png HTTP/1.1\r\nHost: d13pxqgp3ixdbh.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrbeastgiftfree.netlify.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 24145\r\nlast-modified: Mon, 08 May 2023 03:12:57 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: f5114r7J1XZb7edF9xEgrXp9UKE6RbtT\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 03 Nov 2025 07:19:28 GMT\r\netag: \"c67063d1e33e8c4dc85bf91f6b065e37\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: 0Lcllq8-8w17F4d1Iwx1INrhHA5LWOhR4-tv_zXZkzH0hfzvsOO_rw==\r\nage: 53859\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":24145,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 458 x 572, 8-bit colormap, non-interlaced","md5":"c67063d1e33e8c4dc85bf91f6b065e37","sha1":"72844f4d71450e90b36b68795dc5198f666c4a50","sha256":"4b988594f7bc6d94ab6f6da12a27fbb8840a0a78571d5e3b195e71fc22de9ee8","sha512":"faf734cb5bdf0e04a70b9ff72b9bd84f0750090b41204453336fc385ffe78cafccb542c2bf6e3a967876fbd14e89fd5d3eadea1beeb5cb0d28e6e02655c1281f","ssdeep":"384:YlnyGE7y7S5+JR5Tneqkgr6aDZz5MJHFpgIEV7oSgUSV+YcllDwgejJMImGGX:bkxkgrj3GvPc7jgUSV+YwlDpkWFX","tlshash":"bdb2e12f9c05b9a53ac96899e8b350cd4732cfa70543db0aef27f941fa79149d2a3344","first_seen":"2023-05-23T16:48:27Z","last_seen":"2026-05-17T05:46:22.732313Z","times_seen":45,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":91,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"d13pxqgp3ixdbh.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"d13pxqgp3ixdbh.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.google.com/gen204?sl=en\u0026nca=te_ap\u0026client=te\u0026logld=vTE_20251102","fqdn":"translate.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrbeastgiftfree.netlify.app/","date":"2025-11-03T22:17:08.133Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:37:33 GMT","end":"Mon, 05 Jan 2026 08:37:32 GMT"},"fingerprint":{"sha1":"17:9D:6B:F6:A8:18:29:EC:16:2C:3C:3D:F2:EA:93:19:C7:92:EE:AA","sha256":"AA:D4:E9:5C:D4:70:A7:86:45:DE:62:83:82:60:F9:B9:46:CF:40:73:19:FA:3B:01:A9:7E:9B:32:24:EE:57:EC"}}},"request":{"raw":"GET /gen204?sl=en\u0026nca=te_ap\u0026client=te\u0026logld=vTE_20251102 HTTP/1.1\r\nHost: translate.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrbeastgiftfree.netlify.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-type: image/gif; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Mon, 03 Nov 2025 22:17:08 GMT\r\ncross-origin-resource-policy: cross-origin\r\np3p: CP=\"This is not a P3P policy! See g.co/p3phelp for more info.\"\r\ncross-origin-opener-policy: same-origin\r\ncontent-security-policy: script-src 'nonce-C0PN3YtkvI1T07VHDBJZWA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/TranslateApiHttp/cspreport;worker-src 'self', require-trusted-types-for 'script';report-uri /_/TranslateApiHttp/cspreport\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nreporting-endpoints: default=\"/_/TranslateApiHttp/web-reports?context=eJzj4tDikmII0JBiEOLmeHJ5yQk2gQ-PtkQoKSXlF8aXFCXmFecklqQWpxaVpRbFGxkYmRoaGhjpGVjEFxgAACWOEvo\"\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nset-cookie: __Secure-ENID=29.SE=TdOWbTKnHf1jb03flXO3XuINXwZy1vz9sHK5FYfXRM1_ypermoa6smxcLF6s5u_qtDh9GhJxQiDWBUnwQqDuKyNsUE5QF9vwqNhnpBILEp_uHr9aNJVpuxn3YlWDk6xZSY6BBlYbnDlwJgfuv-uqBxdZuvla4WMLZn-bsSaX9h3FTORgquMZwbI27UmySfLOqqHNQB57KdJh0pvFWlVlm-AGGOAU-mLpSwpPAyfo3KDFaH98; expires=Fri, 04-Dec-2026 14:35:26 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/gif; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-15T01:33:43.424583Z","times_seen":16429506,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.Qrtd5lGlzn4.L.F4.O/am=AAAD/d=0/rs=AN8SPfplyBicwuilJ8dxu8j_-Nwc1SG0JA/m=el_main_css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mrbeastgiftfree.netlify.app/","date":"2025-11-03T22:17:08.155Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:51 GMT","end":"Mon, 05 Jan 2026 08:38:50 GMT"},"fingerprint":{"sha1":"89:73:B0:EF:F1:BA:6A:DA:6C:2C:87:70:0D:17:11:82:30:E9:13:68","sha256":"96:8D:5D:62:3A:3A:D6:CD:06:9A:CE:52:F4:2D:91:F9:66:13:40:F4:5F:9B:88:3D:55:04:79:E3:14:96:51:FA"}}},"request":{"raw":"GET /_/translate_http/_/ss/k=translate_http.tr.Qrtd5lGlzn4.L.F4.O/am=AAAD/d=0/rs=AN8SPfplyBicwuilJ8dxu8j_-Nwc1SG0JA/m=el_main_css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrbeastgiftfree.netlify.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-15T01:33:43.424583Z","times_seen":16429506,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/element/log?format=json\u0026hasfast=true\u0026authuser=0","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mrbeastgiftfree.netlify.app/","date":"2025-11-03T22:17:17.942Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:51 GMT","end":"Mon, 05 Jan 2026 08:38:50 GMT"},"fingerprint":{"sha1":"1D:8E:3A:85:91:AC:63:71:94:8B:0E:61:45:34:D9:86:AB:A6:E2:CE","sha256":"E6:93:4E:53:89:15:41:28:27:59:AA:84:50:96:96:1E:2A:98:7E:08:60:AE:68:62:AE:DD:86:AB:DB:0F:FE:2B"}}},"request":{"raw":"OPTIONS /element/log?format=json\u0026hasfast=true\u0026authuser=0 HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: x-goog-authuser\r\nReferer: https://mrbeastgiftfree.netlify.app/\r\nOrigin: https://mrbeastgiftfree.netlify.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: https://mrbeastgiftfree.netlify.app\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: X-Playlog-Web,authorization,origin,x-goog-authuser\r\ncontent-type: text/plain; charset=UTF-8\r\ndate: Mon, 03 Nov 2025 22:17:17 GMT\r\nserver: Playlog\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-15T01:33:43.424583Z","times_seen":16429506,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrbeastgiftfree.netlify.app/","fqdn":"mrbeastgiftfree.netlify.app","domain":"mrbeastgiftfree.netlify.app","tld":"netlify.app"},"ip":{"addr":"63.176.8.218","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrbeastgiftfree.netlify.app/","date":"2025-11-03T22:17:07.062Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.netlify.app","organization":"Netlify, Inc"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 31 Jan 2025 00:00:00 GMT","end":"Tue, 03 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"04:28:C9:A3:BC:06:50:9C:6B:0B:67:72:82:27:C6:3D:99:1B:5B:71","sha256":"FA:34:6A:A0:1C:F5:9C:C7:30:CA:55:23:13:A1:3E:0F:21:8C:3A:0B:B5:CC:E5:67:09:FE:64:EC:97:4E:8D:75"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: mrbeastgiftfree.netlify.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrbeastgiftfree.netlify.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 1\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Mon, 03 Nov 2025 22:17:07 GMT\r\netag: \"83e810b7a8987cf7807bdcd1239263fe-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01K95WQ7PNXZSKK4SSPK5T92QB\r\ncontent-length: 8239\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"jQuery:2.2.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"Sentry:6.4.1","description":"Sentry is an open-source platform for workflow productivity, aggregating errors from across the stack in real time.","website":"https://sentry.io/","common_platform_enumeration":"","icon":"Sentry.svg","categories":["Issue trackers"]},{"name":"Blogger","description":"Blogger is a blog-publishing service that allows multi-user blogs with time-stamped entries.","website":"https://www.blogger.com","common_platform_enumeration":"","icon":"Blogger.png","categories":["Blogs"]},{"name":"Python","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]}],"data":{"size":57378,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4052), with CRLF line terminators","md5":"39edaf4952721722b9bd2f0f78920c4c","sha1":"41dbab1c39bb54f72701deb5319f722a1a0bf9d3","sha256":"fb6a0c105e01f0c2ed6426d99f37fe705f43237bcc362ba14e1f8eb3641590fe","sha512":"a36ed6bb598840f7965d572390efd018b5120fb61f16f08387a7373563081b46123cae0f1f2eac890c4c9b1b21f5f87ae233c5b9a07c9f69d6005ed12544fbba","ssdeep":"1536:7LU7FxmlgMoi38o6A1tpLZ5upLVNjoWAGTtB:7LU7CGMoi38o6A1tpLZ5upLVNjoWAGTb","tlshash":"7d4394e7779684304bbbabef9a525b88f5404417ce01949679ec0d605f36ee2c02afdc","first_seen":"2025-11-03T22:17:41.795676Z","last_seen":"2025-11-03T22:17:41.795676Z","times_seen":1,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d13pxqgp3ixdbh.cloudfront.net/uploads/1683515575f94e95b5fa567adfe83d22866a026691.png","fqdn":"d13pxqgp3ixdbh.cloudfront.net","domain":"d13pxqgp3ixdbh.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.245.211","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrbeastgiftfree.netlify.app/","date":"2025-11-03T22:17:07.808Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /uploads/1683515575f94e95b5fa567adfe83d22866a026691.png HTTP/1.1\r\nHost: d13pxqgp3ixdbh.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrbeastgiftfree.netlify.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 67814\r\nlast-modified: Mon, 08 May 2023 03:12:56 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: tmW2Z3SYPESUNx6HaQRLC8VrkgmBbBFj\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 03 Nov 2025 07:19:29 GMT\r\netag: \"d092a6e8c7c822f042f5e1e169b2b433\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: E3DVhnLLQKxj0-7hdh3Jk_WDwSM8as1yudBUGNJ4JFPGU529-KKgng==\r\nage: 53859\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":67814,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 458 x 572, 8-bit colormap, non-interlaced","md5":"d092a6e8c7c822f042f5e1e169b2b433","sha1":"51483c3f2aeef32732228aba93f5badf3eb79681","sha256":"c2414ede26e8ac6fc9f7fec32547ae8e2a3fcd5180281e5037e3c81e96940079","sha512":"31b9f1c3e59ee0653af2ee7ef6ae70e80279413a362eaf772b6ea24170630a0420df01bbb2855266250975ecd33f15d0fee37e52aa8a817b98686985d597541c","ssdeep":"1536:q6Lb16Te77hyRrZj4JaKYyOmLeUMVg5MDTo+/X4C/SNIZPPIhHL:qa3X6ZWOqLE7Dso4C/SNIZYhL","tlshash":"69631280857e189effc8ea988a9f434d080389dd447d35291f1ac21ed3afe23995468d","first_seen":"2023-05-23T16:48:27Z","last_seen":"2026-05-17T05:46:22.662695Z","times_seen":43,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":92,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"d13pxqgp3ixdbh.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"d13pxqgp3ixdbh.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"d13pxqgp3ixdbh.cloudfront.net/uploads/1683515574519de4f41af72361cdc267ddb04ea418.png","fqdn":"d13pxqgp3ixdbh.cloudfront.net","domain":"d13pxqgp3ixdbh.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.245.211","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrbeastgiftfree.netlify.app/","date":"2025-11-03T22:17:07.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /uploads/1683515574519de4f41af72361cdc267ddb04ea418.png HTTP/1.1\r\nHost: d13pxqgp3ixdbh.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrbeastgiftfree.netlify.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 128911\r\nlast-modified: Mon, 08 May 2023 03:12:55 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: Vym5zQUuBZLXE23kiA7bTy5jdEeW8owy\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 03 Nov 2025 09:01:39 GMT\r\netag: \"4ac3cde0cb932e2c92e89883216141ee\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: O_MjiGx6PLMaCrZHULCfQOBgnYMmvrbLRxCb4ESxNRa3Q3nGb2krjQ==\r\nage: 47729\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":128911,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 458 x 572, 8-bit/color RGBA, non-interlaced","md5":"4ac3cde0cb932e2c92e89883216141ee","sha1":"cf786cd407f2e8656ccd480ce8db523fa564778d","sha256":"172c984f1a72a14fcc1dcbf161e83ff3e3ba558b4801cd611001f5496e9ecc5d","sha512":"5bde5c3f5060430be76e53d94c7c2800a2339e993d2baf979f10893ccf8f8e6b92d339c0e76ebf8ff3708d844a6b76459cd010af68ca4ebae7b43a25d32d1710","ssdeep":"3072:IaJmsPH+y+EuULjUuvrlLhnwbdE2JLf4ljL:XfcILjdLhyJUV","tlshash":"8cc323b7a3e2bfa6925227c1529712874f5334b436e3901ada1796052332837bc3fde5","first_seen":"2023-05-23T16:48:27Z","last_seen":"2026-05-17T05:46:22.730621Z","times_seen":43,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":92,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"d13pxqgp3ixdbh.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"d13pxqgp3ixdbh.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"d13pxqgp3ixdbh.cloudfront.net/uploads/1678363540475d14ed4647785d9943fabdba81fdc8.png","fqdn":"d13pxqgp3ixdbh.cloudfront.net","domain":"d13pxqgp3ixdbh.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.245.211","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrbeastgiftfree.netlify.app/","date":"2025-11-03T22:17:07.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /uploads/1678363540475d14ed4647785d9943fabdba81fdc8.png HTTP/1.1\r\nHost: d13pxqgp3ixdbh.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrbeastgiftfree.netlify.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 88303\r\ndate: Mon, 03 Nov 2025 06:49:54 GMT\r\nlast-modified: Thu, 09 Mar 2023 12:05:41 GMT\r\netag: \"0d08f4cd8b15421faeb696da35132044\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: HJMIV2h1PJXoC.Z7Tn9BrSLgaZ_8D3lw\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: 6-rh7MBZG19fVpjIL3CqDy77HyvT0egRsJLJYRRhnMPXNwN1yookgw==\r\nage: 55634\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":88303,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=0], baseline, precision 8, 900x900, components 3","md5":"0d08f4cd8b15421faeb696da35132044","sha1":"b6d6703372f51466337186f31c4987463c158b35","sha256":"198a6986cacf5ec6a16c7b51b639bb2ff5406b7792156ea70512303fdc33aedc","sha512":"8b09f3f02ce6bb5336106010d81a627dfacedd8ec2696a9212ec6ed4edd4b9791e043d599862a1bcf18690701a13f1dacd897f5c3a609f74396c5044221ad9a5","ssdeep":"1536:Kfpy8BGi7pGXulIbNedojrPlp5XBtefj0KAJtlcn4eLx+MrGcuy:KQ7YGXuUNhrPBBtQlKtXeLxMa","tlshash":"a58302bcea714361db86e7f1cd8f7ad576147a6e6708a054e2e1582bb3370ee252804c","first_seen":"2023-05-11T06:21:55Z","last_seen":"2026-05-17T05:46:22.67718Z","times_seen":40,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"d13pxqgp3ixdbh.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"d13pxqgp3ixdbh.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mrbeastsgifts.blogspot.com/favicon.ico","fqdn":"mrbeastsgifts.blogspot.com","domain":"mrbeastsgifts.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.251.38.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrbeastgiftfree.netlify.app/","date":"2025-11-03T22:17:07.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.blogspot.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:29 GMT","end":"Mon, 05 Jan 2026 08:38:28 GMT"},"fingerprint":{"sha1":"79:F8:25:D8:1E:20:D5:1D:56:DC:80:04:51:94:31:3C:7F:A0:40:C7","sha256":"55:F0:EF:6C:33:D9:38:EA:35:F7:A8:A3:FD:53:2A:B5:77:C2:CD:06:33:42:0F:95:EE:5D:3E:AE:F9:96:1B:C6"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: mrbeastsgifts.blogspot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrbeastgiftfree.netlify.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: gzip\r\ndate: Mon, 03 Nov 2025 22:17:08 GMT\r\nexpires: Mon, 03 Nov 2025 22:17:08 GMT\r\ncache-control: private, max-age=0\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self'\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 35070\r\nserver: GSE\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-15T01:33:43.424583Z","times_seen":16429506,"resource_available":true,"data":null}},"time_used":529,"timings":{"blocked":254,"dns":0,"connect":20,"send":0,"wait":177,"receive":10,"ssl":67},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"mrbeastsgifts.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/images/branding/product/2x/translate_24dp.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrbeastgiftfree.netlify.app/","date":"2025-11-03T22:17:08.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:51 GMT","end":"Mon, 05 Jan 2026 08:38:50 GMT"},"fingerprint":{"sha1":"89:73:B0:EF:F1:BA:6A:DA:6C:2C:87:70:0D:17:11:82:30:E9:13:68","sha256":"96:8D:5D:62:3A:3A:D6:CD:06:9A:CE:52:F4:2D:91:F9:66:13:40:F4:5F:9B:88:3D:55:04:79:E3:14:96:51:FA"}}},"request":{"raw":"GET /images/branding/product/2x/translate_24dp.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.Qrtd5lGlzn4.L.F4.O/am=AAAD/d=0/rs=AN8SPfplyBicwuilJ8dxu8j_-Nwc1SG0JA/m=el_main_css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 1842\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 03 Nov 2025 17:32:31 GMT\r\nexpires: Tue, 03 Nov 2026 17:32:31 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 14 Oct 2021 09:08:00 GMT\r\ncontent-type: image/png\r\nvary: Origin\r\nage: 17077\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1842,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"c69c796362406f9e11c7f4bf5bb628da","sha1":"e489ce95ab56208090868882113d7416abf46775","sha256":"4dac0026fbfa2615dce30c0af12830863fe885f84387a0147b9e338f548d5d82","sha512":"d3ad560ed0fd29be7d2cc434694f09e5a6fbea8b29c0611aecb54a1b73b4d722c53f42a19dae9e3d5d358444e50fb8fffbc39d67ce751bdbc8c861f6f95d3162","ssdeep":"","tlshash":"4e31f9fd129220437101ade72165eef798347c15f412da60ce65ba389c9fe20ed9a619","first_seen":"2023-04-05T07:39:29Z","last_seen":"2026-06-15T01:18:07.874325Z","times_seen":65734,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d13pxqgp3ixdbh.cloudfront.net/uploads/16835155847d885a68fbf01c3c98d346efa14d0a3c.png","fqdn":"d13pxqgp3ixdbh.cloudfront.net","domain":"d13pxqgp3ixdbh.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.245.211","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrbeastgiftfree.netlify.app/","date":"2025-11-03T22:17:07.792Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /uploads/16835155847d885a68fbf01c3c98d346efa14d0a3c.png HTTP/1.1\r\nHost: d13pxqgp3ixdbh.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrbeastgiftfree.netlify.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 47027\r\nlast-modified: Mon, 08 May 2023 03:13:05 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: aWCahC84yH4bMP7MiV5XoVCuTQVxQnbU\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 03 Nov 2025 09:01:38 GMT\r\netag: \"b1b00130f8211f51cdfdd601c18133e4\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: aUu3Om1DlBT9-qdNKKOvuFYX3g5lkDItBh_-i2_aGk6fHqgKLIkBrQ==\r\nage: 47729\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":47027,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 458 x 572, 8-bit colormap, non-interlaced","md5":"b1b00130f8211f51cdfdd601c18133e4","sha1":"312aca421a4183fe4941e5adc0ed47f95e1248f6","sha256":"0e1b2b9107c8795c89601399b2c5bcd51707f7b59308e5902056febfe2b59aa1","sha512":"0efb9b5debf43d321fda772a2c78f98bf853eed8eaa4738153ff46026859580acfc8b645f5c127c43b6ffa4bae1b013fc079b8807ea936a17d5cddc29b2b6233","ssdeep":"768:PIiAA4OShK3+BNKp3cMgEDsl8suIQE/u0832GDrExrWseIBAObYoBoWpNLYadRJq:wi4Q+B/MxDnUB/o32GDrEIseIh5BolyW","tlshash":"ca23f1d0f44a784d432f660d1d44c02b76bca42fd0fae64db97dcb689974b72b422663","first_seen":"2023-05-23T16:48:27Z","last_seen":"2026-05-17T05:46:22.682735Z","times_seen":46,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":38,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"d13pxqgp3ixdbh.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"d13pxqgp3ixdbh.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"d13pxqgp3ixdbh.cloudfront.net/uploads/1683515577114fea203a24b08e7d746276dad9e428.png","fqdn":"d13pxqgp3ixdbh.cloudfront.net","domain":"d13pxqgp3ixdbh.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.245.211","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrbeastgiftfree.netlify.app/","date":"2025-11-03T22:17:07.804Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /uploads/1683515577114fea203a24b08e7d746276dad9e428.png HTTP/1.1\r\nHost: d13pxqgp3ixdbh.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrbeastgiftfree.netlify.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 64177\r\ndate: Mon, 03 Nov 2025 06:36:09 GMT\r\nlast-modified: Mon, 08 May 2023 03:12:59 GMT\r\netag: \"db8d5d4651d53c33ebe11363638064b9\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: fsuELwqAYfiQ46sLhAWf3hlSHUO4rlIB\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: axJn98VUSUBcpxNsA7Ho-sMkSu7UJzlIQUFfcP0G1iU5W_hzOb-WiQ==\r\nage: 56459\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":64177,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 458 x 572, 8-bit colormap, non-interlaced","md5":"db8d5d4651d53c33ebe11363638064b9","sha1":"68344af1bfde372731a53aace2adfd0e4b2200e0","sha256":"f39cf48ab22721fcd31f189d203ff6d65837c7a73b70a7df5c4da4f9ef752b4d","sha512":"6bec3c7d9bb69fd6b8bae7ba7c2c5d1b24bcf4869c221d9460df526cadc5c687bfdf466cc552ace307ec526124d6816d8f0986ccaf028b940e8fa30417a99301","ssdeep":"1536:+hs/LLDL68GPxvT/vpF/KN8R4k8P/VCAM2ObFN1Av:4s//FGJrpFyNdJP9CHHy","tlshash":"525302c842519f2e9c6fd0bbeb82df9e9058a35116215790966c1810fa1b1ac73dbe73","first_seen":"2023-05-23T16:48:27Z","last_seen":"2026-05-17T05:46:22.661733Z","times_seen":44,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":86,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"d13pxqgp3ixdbh.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"d13pxqgp3ixdbh.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"d13pxqgp3ixdbh.cloudfront.net/uploads/168351557317debab7cd0529195a1bd0f29aa07902.png","fqdn":"d13pxqgp3ixdbh.cloudfront.net","domain":"d13pxqgp3ixdbh.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.245.211","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrbeastgiftfree.netlify.app/","date":"2025-11-03T22:17:07.811Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /uploads/168351557317debab7cd0529195a1bd0f29aa07902.png HTTP/1.1\r\nHost: d13pxqgp3ixdbh.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrbeastgiftfree.netlify.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 40810\r\nlast-modified: Mon, 08 May 2023 03:12:54 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: ByOW2XKNtiAOy8MYmiqNC1iSAV404VSI\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 03 Nov 2025 09:01:39 GMT\r\netag: \"fb4092bb785e4b61b5a35b104d256360\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: gTsEeITnDfZE0VJOTz11E63C-prnvKZrItwikrLOP8obXwlUn15lzw==\r\nage: 47729\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":40810,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 458 x 572, 8-bit colormap, non-interlaced","md5":"fb4092bb785e4b61b5a35b104d256360","sha1":"a08aff98a7bfc6752bbea3cd727bb40bd2697cfb","sha256":"c57b88b9ab9b42fd12f9ef7e8beb25da33ad4ba17a3f6cfed67d48afe09a4275","sha512":"79b557e2b45b717420cbd7ca26764102218dc336a74e7f0ebe16893173c4c6e31fa42b8229bf523e990da8001da1fe70dc823f6c5af0fe403d61bde039ff45a9","ssdeep":"768:yXEmadnX/tZBDS1e/NnzdbX4KjUNQDAikT9h4XASxw9QBMoMXl5z9c6Wi61l4nje:yXER5rosNnhTnngTnuKWE5zxWpUnHi","tlshash":"cf03f15309d42af107e492bec23480e51d1356fc15b13eec4497a940e527cbdd6b6375","first_seen":"2023-05-23T16:48:27Z","last_seen":"2026-05-17T05:46:22.734215Z","times_seen":45,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":91,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"d13pxqgp3ixdbh.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"d13pxqgp3ixdbh.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.Qrtd5lGlzn4.L.F4.O/am=AAAD/d=0/rs=AN8SPfplyBicwuilJ8dxu8j_-Nwc1SG0JA/m=el_main_css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mrbeastgiftfree.netlify.app/","date":"2025-11-03T22:17:07.547Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:51 GMT","end":"Mon, 05 Jan 2026 08:38:50 GMT"},"fingerprint":{"sha1":"89:73:B0:EF:F1:BA:6A:DA:6C:2C:87:70:0D:17:11:82:30:E9:13:68","sha256":"96:8D:5D:62:3A:3A:D6:CD:06:9A:CE:52:F4:2D:91:F9:66:13:40:F4:5F:9B:88:3D:55:04:79:E3:14:96:51:FA"}}},"request":{"raw":"GET /_/translate_http/_/ss/k=translate_http.tr.Qrtd5lGlzn4.L.F4.O/am=AAAD/d=0/rs=AN8SPfplyBicwuilJ8dxu8j_-Nwc1SG0JA/m=el_main_css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrbeastgiftfree.netlify.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 3969\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 30 Oct 2025 18:31:57 GMT\r\nexpires: Fri, 30 Oct 2026 18:31:57 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 15 Oct 2025 01:09:54 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 359110\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20298,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (20298), with no line terminators","md5":"183cb263396f0b39789db1ae3f1e1b20","sha1":"502fcf18fa8d865213e282824ab2dfaadb9b8beb","sha256":"6a91c12a6fd1664f4d594040374fda61fe5b02fd3aee5f0c877ccbfc49488ec5","sha512":"ef280b60fa9f4bcb446d952f59a9b89442b6da6737bddc20a8fb38fcf0b4083170c09c008d7d221cf205084c8342da1f995bdd99ce907d70e8e14fc62d827acf","ssdeep":"192:nvqx/EhNINclXsfg0S0Q8CqA3ukLzSJFzvQVMZnUIfIxIRhpTpeuHjPtcmx4v78l:gM78Sr3fWJFzouRUqWQhpTpdHjPtc5G","tlshash":"bf92972047aed01967efa82364d36dff71d444db90523eeaaf5a7352cd821f231ea214","first_seen":"2025-06-11T00:07:11.687997Z","last_seen":"2026-04-13T20:47:54.876807Z","times_seen":37896,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":54,"dns":1,"connect":21,"send":0,"wait":22,"receive":1,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d13pxqgp3ixdbh.cloudfront.net/uploads/1683515584d23f7cda78a87917d071cfdcd80cd2a6.png","fqdn":"d13pxqgp3ixdbh.cloudfront.net","domain":"d13pxqgp3ixdbh.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.245.211","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrbeastgiftfree.netlify.app/","date":"2025-11-03T22:17:07.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /uploads/1683515584d23f7cda78a87917d071cfdcd80cd2a6.png HTTP/1.1\r\nHost: d13pxqgp3ixdbh.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrbeastgiftfree.netlify.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 65702\r\nlast-modified: Mon, 08 May 2023 03:13:05 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 6DoOf2z4FkzCi6hg5I.U8vMccQmdGVIz\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 03 Nov 2025 09:01:39 GMT\r\netag: \"f5d05773bc05757d57e405cf89455690\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: b0iDT_c-HWKKEsDMOZMn8D0Al3WDdBnSqGgiTHf2Ci4vXJ2-ZPh1Cg==\r\nage: 47729\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":65702,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 458 x 572, 8-bit colormap, non-interlaced","md5":"f5d05773bc05757d57e405cf89455690","sha1":"6c70ecfb2c9fac65e07a551d14b0e8e55c132bb1","sha256":"c5e528140bac96d7e6f114d763d4e5a604e267a1e207b007f2ca4d59fafa7f08","sha512":"e634035fe6c7060623e561d547036391f984a5d387ad731d6177000da3d1ae31d49c71760cc0f203b67c00aa3c15980934d7c656df282555db07fd958eaa3b64","ssdeep":"1536:5yDU3ZgtWPvSjIQZWAKOTGI7XpiO9EMlDX1t3:OWyWXaIQA8h7XYqBDlF","tlshash":"d3530223f3e11da58170490454a25fa1bdbe052ee5c2b4babac4507c6ff7479b2b5431","first_seen":"2023-05-23T16:48:27Z","last_seen":"2026-05-17T05:46:22.637826Z","times_seen":46,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":15,"dns":0,"connect":0,"send":0,"wait":40,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"d13pxqgp3ixdbh.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"d13pxqgp3ixdbh.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"d13pxqgp3ixdbh.cloudfront.net/uploads/168351558018d0f22b2a201cafa7446c84ebca10bd.png","fqdn":"d13pxqgp3ixdbh.cloudfront.net","domain":"d13pxqgp3ixdbh.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.245.211","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrbeastgiftfree.netlify.app/","date":"2025-11-03T22:17:07.799Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /uploads/168351558018d0f22b2a201cafa7446c84ebca10bd.png HTTP/1.1\r\nHost: d13pxqgp3ixdbh.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrbeastgiftfree.netlify.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 37896\r\nlast-modified: Mon, 08 May 2023 03:13:01 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 3ockYjVxZo9Ogo4U_ld6W0g6azpWNhJu\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 03 Nov 2025 09:01:39 GMT\r\netag: \"d1eb353ead723d57dde4eacfa590a7b1\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: oN6d_qjin-gdkQYIwXaelWZ28RBQ8Ntea1HVD2lIHC9JYIlZXOBq9A==\r\nage: 47729\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":37896,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 458 x 572, 8-bit colormap, non-interlaced","md5":"d1eb353ead723d57dde4eacfa590a7b1","sha1":"70f9d599ccd9dfbb6f71000602032b49467c6070","sha256":"448dc289d4379dfb298831383d5ee741991157bdd019c40855beaa9e0792f208","sha512":"f52a68a0693106873e9cb4160daf3eb8f8ffb6a2b54b4c9582e1f5321a00cbf13433a01185c4c0809c3efa311f72b0fe6b5329c9907956114eb219c58926e779","ssdeep":"768:AGdfzacm9q3jeOx+CUG4eF6RNfZF6pu/9OTqQczmmlf:A4Y90ec+bEF6bZFmA9OPmR","tlshash":"6103028cc43a3033b2d2b8585d49aab19b5d1d9066075e8c3fce35b99d88e910e8fdd7","first_seen":"2023-05-23T16:48:27Z","last_seen":"2026-05-17T05:46:22.653288Z","times_seen":45,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":76,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"d13pxqgp3ixdbh.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"d13pxqgp3ixdbh.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/i/productlogos/translate/v14/24px.svg","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrbeastgiftfree.netlify.app/","date":"2025-11-03T22:17:08.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:51 GMT","end":"Mon, 05 Jan 2026 08:38:50 GMT"},"fingerprint":{"sha1":"89:73:B0:EF:F1:BA:6A:DA:6C:2C:87:70:0D:17:11:82:30:E9:13:68","sha256":"96:8D:5D:62:3A:3A:D6:CD:06:9A:CE:52:F4:2D:91:F9:66:13:40:F4:5F:9B:88:3D:55:04:79:E3:14:96:51:FA"}}},"request":{"raw":"GET /s/i/productlogos/translate/v14/24px.svg HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrbeastgiftfree.netlify.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ncontent-length: 3340\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 30 Oct 2025 09:55:17 GMT\r\nexpires: Fri, 30 Oct 2026 09:55:17 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 20 Apr 2022 14:24:23 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nage: 390111\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6225,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2bd5c073a88b83ed74db88282a56ddfb","sha1":"d0ebfc376f8c6a44a8d4cd216817dcd7d0c33650","sha256":"ab5c23a05e39deed14d9d8262b0dce9f024f86105a27196cad37d14a3f516e09","sha512":"5c6c4a92e93fc0f6a675658cc84f6187fdebd3eee94efd07e24658736cba598f3bc7156b19834b13fb44c1d43fcb7df9fcca7f0a453037e30da76ba8f4b23b89","ssdeep":"96:+R2K3Z4n7tyVwip82hezk6227gLFoXhu1XuE20ot+pVY3YptWDzOzgXK3Zx:ql3KnxyGGMzb7noR20NTww33","tlshash":"c1d1e6f19309d815cd6a83d8cd9b8002aa1f25ddd50ac6cc7639fb3bd1a50eb1d2d7a4","first_seen":"2023-04-06T21:34:37Z","last_seen":"2026-06-15T01:18:07.87854Z","times_seen":70269,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d13pxqgp3ixdbh.cloudfront.net/uploads/16835162124327c5dd85b75f93ac5b40d83f7a0fc7.png","fqdn":"d13pxqgp3ixdbh.cloudfront.net","domain":"d13pxqgp3ixdbh.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.245.211","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrbeastgiftfree.netlify.app/","date":"2025-11-03T22:17:07.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /uploads/16835162124327c5dd85b75f93ac5b40d83f7a0fc7.png HTTP/1.1\r\nHost: d13pxqgp3ixdbh.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrbeastgiftfree.netlify.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 175783\r\nlast-modified: Mon, 08 May 2023 03:23:33 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: rBbIyC6wxHp0C7.gC.0QkcFMmcJCl0U_\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 03 Nov 2025 09:01:38 GMT\r\netag: \"635b5dc0b39774159b8c1bd5d0ad1a35\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: heaRbajYGvMgSQ8RaM8nqryLvkmN_mf8UiupKApapqE5RiC93heJSw==\r\nage: 47729\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":175783,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 458 x 572, 8-bit/color RGBA, non-interlaced","md5":"635b5dc0b39774159b8c1bd5d0ad1a35","sha1":"723677bc219f2b8a34726261ca093045015e2f94","sha256":"d0969454efe9d406a8242af97c84b376f3cd45536fbe7c7956f4b96921b567b1","sha512":"b246b7752fc4ff98fef67f2e0d4982fd1c352d21fad8aeca08e065fd6d9e8757fc84988903c3c8a7553041b847041efe6ac1509f54b420b203f9f65488e67f2a","ssdeep":"3072:9uRNvmPD91ZmMzG4DQcyUcpO8GRqjatKS3I8gIt2qmkioL:9uXvmPJ1ZmMzG4UcyUcSRqrps2IL","tlshash":"110412ec5297241be55a90605e7708d102a1b7ebd160004ca98b2cc6ffc975aefbcb5f","first_seen":"2023-05-23T16:48:27Z","last_seen":"2026-05-17T05:46:22.672508Z","times_seen":45,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":38,"dns":0,"connect":0,"send":0,"wait":39,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"d13pxqgp3ixdbh.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"d13pxqgp3ixdbh.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mrbeastgiftfree.netlify.app/main.js","fqdn":"mrbeastgiftfree.netlify.app","domain":"mrbeastgiftfree.netlify.app","tld":"netlify.app"},"ip":{"addr":"63.176.8.218","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mrbeastgiftfree.netlify.app/","date":"2025-11-03T22:17:07.075Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.netlify.app","organization":"Netlify, Inc"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 31 Jan 2025 00:00:00 GMT","end":"Tue, 03 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"04:28:C9:A3:BC:06:50:9C:6B:0B:67:72:82:27:C6:3D:99:1B:5B:71","sha256":"FA:34:6A:A0:1C:F5:9C:C7:30:CA:55:23:13:A1:3E:0F:21:8C:3A:0B:B5:CC:E5:67:09:FE:64:EC:97:4E:8D:75"}}},"request":{"raw":"GET /main.js HTTP/1.1\r\nHost: mrbeastgiftfree.netlify.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrbeastgiftfree.netlify.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nage: 0\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Mon, 03 Nov 2025 22:17:07 GMT\r\netag: 1760191672-ssl-df\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01K95WQ7QY8MSQW63A4YQMMMN2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":3449,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"0f89e18d0abacb99149c5e59bf69b5e1","sha1":"9e1ebb10be890c5855eec444233c028270d3e65a","sha256":"8514f0009a58c6e0acb5468f88037732b59b70af5e524f452e3bef8fb33effc5","sha512":"5275d80f3f8f1f5e0d1b6b6b0745732a69d669d66dcdab418fc5a2094bffcb81ff1d34252c97c6dffe5470f0d359a3be03cfd3dfe3d729bf186917c8cf21ece0","ssdeep":"","tlshash":"1f61848dc9a7209b5c93643e27eb560a2274a247cd46da4c3fde6348cf492f214d36ac","first_seen":"2024-12-12T10:00:11.490986Z","last_seen":"2026-06-15T00:55:23.023374Z","times_seen":12062,"resource_available":true,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d13pxqgp3ixdbh.cloudfront.net/uploads/1683515584aa0d151a43729454454784dfd0e78ed8.png","fqdn":"d13pxqgp3ixdbh.cloudfront.net","domain":"d13pxqgp3ixdbh.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.245.211","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrbeastgiftfree.netlify.app/","date":"2025-11-03T22:17:07.792Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /uploads/1683515584aa0d151a43729454454784dfd0e78ed8.png HTTP/1.1\r\nHost: d13pxqgp3ixdbh.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrbeastgiftfree.netlify.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 73988\r\nlast-modified: Mon, 08 May 2023 03:13:05 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: hBYj3Jve0eXpIIsERMuMO5T_ZLvcjRnS\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 03 Nov 2025 07:19:29 GMT\r\netag: \"4a1328f5ad4584bdb2fbf11c1dda8398\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: 6-ut0s9scsSSKfeqc_oudMkgiC6po9oW2r6RYp_CPgYNZCH9tPY5mQ==\r\nage: 53859\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":73988,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 458 x 572, 8-bit colormap, non-interlaced","md5":"4a1328f5ad4584bdb2fbf11c1dda8398","sha1":"7b359073620bb3f98e62b6bc717ce26b755c2ba7","sha256":"e35c25818f1978aea7ea33612902c36a8407c0aaea823b23c0d9cf2abb3bda61","sha512":"d00f0edf1bc4059aac1e5cb78e88e8accb46ec8f8b9e6ec38b9ab4545de99545090c02ba71a888942b8256bc159a313cacf20f66386f421096f1a7f7832a4cfa","ssdeep":"1536:56vY8UyPAOPuHZN/r2/IWVbyGugZjMacX6UCDLnv281g:MUsjuHZN/rgVW2Zj9nHw","tlshash":"6b73022216568e7d38e0b9337a3cf915e9d544a82c30cf72e9f516bd4266b24035cad7","first_seen":"2023-05-23T16:48:27Z","last_seen":"2026-05-17T05:46:22.726715Z","times_seen":45,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":15,"dns":0,"connect":0,"send":0,"wait":53,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"d13pxqgp3ixdbh.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"d13pxqgp3ixdbh.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"d13pxqgp3ixdbh.cloudfront.net/uploads/168351557414a549caf2272daa52328b3e9a887196.png","fqdn":"d13pxqgp3ixdbh.cloudfront.net","domain":"d13pxqgp3ixdbh.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.245.211","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrbeastgiftfree.netlify.app/","date":"2025-11-03T22:17:07.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /uploads/168351557414a549caf2272daa52328b3e9a887196.png HTTP/1.1\r\nHost: d13pxqgp3ixdbh.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrbeastgiftfree.netlify.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 68055\r\nlast-modified: Mon, 08 May 2023 03:12:55 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: XYFNG1blSk9PWlOxwBKHYJsCU.IHhmwc\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 03 Nov 2025 09:01:39 GMT\r\netag: \"0b2b433205eb59e20494c33465757197\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: F-WxTK3XFwUCwTE9G4OO4v1wkvH-StZZxRi4zecAjJ1TP7eQKd1t7A==\r\nage: 47729\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":68055,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 458 x 572, 8-bit colormap, non-interlaced","md5":"0b2b433205eb59e20494c33465757197","sha1":"87f4a594316bc8ac95b0baa07a48565a40a8eb81","sha256":"6ad5f572947f4ad4fba45cc24fee79e0ada043bc224017a877c5478d79d3a6b5","sha512":"b435a729d7453ec5f1ce0b2649c5caf9c6f1b01569de31beab41da1f52a7a8cf89a29ee96c52a067792b8157b264c550c60490b9de28fc6e4e509d3b231219dc","ssdeep":"1536:2mDNkR1Z5jJ4mj9TsRxkcBy/mboYmNQzfoRKKLWz5FSq8:Ne1TjJLWPCmUBlRKKyz5FS1","tlshash":"bd6312c597603b0a83c9b06dcbc2afb2ed51874bdb2520d5d4ebe2ac076f961a713744","first_seen":"2023-05-23T16:48:27Z","last_seen":"2026-05-17T05:46:22.697408Z","times_seen":45,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":90,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"d13pxqgp3ixdbh.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"d13pxqgp3ixdbh.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/element/log?format=json\u0026hasfast=true\u0026authuser=0","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mrbeastgiftfree.netlify.app/","date":"2025-11-03T22:17:17.975Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:51 GMT","end":"Mon, 05 Jan 2026 08:38:50 GMT"},"fingerprint":{"sha1":"1D:8E:3A:85:91:AC:63:71:94:8B:0E:61:45:34:D9:86:AB:A6:E2:CE","sha256":"E6:93:4E:53:89:15:41:28:27:59:AA:84:50:96:96:1E:2A:98:7E:08:60:AE:68:62:AE:DD:86:AB:DB:0F:FE:2B"}}},"request":{"raw":"POST /element/log?format=json\u0026hasfast=true\u0026authuser=0 HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mrbeastgiftfree.netlify.app/\r\nX-Goog-AuthUser: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1187\r\nOrigin: https://mrbeastgiftfree.netlify.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: https://mrbeastgiftfree.netlify.app\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: X-Playlog-Web\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-encoding: gzip\r\ndate: Mon, 03 Nov 2025 22:17:17 GMT\r\nserver: Playlog\r\ncontent-length: 131\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":131,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"JSON text data","md5":"ca0b7e866005f6774d284b9f438ebfd2","sha1":"53644f5ee3640189bdb223473ba6a2d46606c556","sha256":"502e9680cfa78fa8be779cbf4f1947c8eaa3d43bf8c7464800ec772b2ddea358","sha512":"939c4526c623db033ad40bfdc6c8848a1dcd0ca797f17fbbd89fbec1b49dededc16e89084b3759e62fa0ffc8fe896980b10a1ff8daee22736a70b08f1ee13e2f","ssdeep":"","tlshash":"58c08c50330469e1080e82c8c0026858228c903b46708cf10bbd68125d3234a1004854","first_seen":"2023-04-05T03:14:56Z","last_seen":"2026-06-15T01:21:02.66646Z","times_seen":558592,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/titanone/v17/mFTzWbsGxbbS_J5cQcjClDgm.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mrbeastgiftfree.netlify.app/","date":"2025-11-03T22:17:07.517Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:51 GMT","end":"Mon, 05 Jan 2026 08:38:50 GMT"},"fingerprint":{"sha1":"89:73:B0:EF:F1:BA:6A:DA:6C:2C:87:70:0D:17:11:82:30:E9:13:68","sha256":"96:8D:5D:62:3A:3A:D6:CD:06:9A:CE:52:F4:2D:91:F9:66:13:40:F4:5F:9B:88:3D:55:04:79:E3:14:96:51:FA"}}},"request":{"raw":"GET /s/titanone/v17/mFTzWbsGxbbS_J5cQcjClDgm.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://mrbeastgiftfree.netlify.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 10752\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 30 Oct 2025 09:35:08 GMT\r\nexpires: Fri, 30 Oct 2026 09:35:08 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 27 Aug 2025 19:38:54 GMT\r\ncontent-type: font/woff2\r\nage: 391319\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10752,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 10752, version 1.0","md5":"3b731012ac761b5cd3b97e55ac34ec0a","sha1":"0b799f196deed9968266ce6e7afa28d5b8ad3aae","sha256":"2f15f138af309ad659b62246999cccc2da21759ec8619d7e6ea759e8eb5a7a53","sha512":"f26a1f9a480b76ec5428c3f5bed090ac106d1ae20f2003aa8d05caa0c16b5307b9e49fcc8fc89c4dbd6b17ce21e9f1ea3067500f06ff67edf9a0b26dd3862a7c","ssdeep":"192:z6k8SCV4UIW1gHscCxGi3mGbdcUTK4RLWiJdK2AXIYsUzoTCJAmZo8u7:WxOi1gMKiWGbyUTKwLWOdAXIYsnT0AP1","tlshash":"1422c0ade63bf449d491f928b13fc2b12a9cb2b1e945358a0e93f7a4c1343d8c5f0041","first_seen":"2023-05-23T16:48:27Z","last_seen":"2026-06-14T08:46:35.099363Z","times_seen":212,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":39,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":111},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d13pxqgp3ixdbh.cloudfront.net/uploads/1678361332af23ddeeafd54eb78d7951d71bb13a42.png","fqdn":"d13pxqgp3ixdbh.cloudfront.net","domain":"d13pxqgp3ixdbh.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.245.211","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrbeastgiftfree.netlify.app/","date":"2025-11-03T22:17:07.781Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /uploads/1678361332af23ddeeafd54eb78d7951d71bb13a42.png HTTP/1.1\r\nHost: d13pxqgp3ixdbh.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrbeastgiftfree.netlify.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 179604\r\ndate: Mon, 03 Nov 2025 02:58:31 GMT\r\nlast-modified: Thu, 09 Mar 2023 11:28:53 GMT\r\netag: \"7752c0abbbbf771080f643a0d80100a1\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: g5R53vLWeaPs1U0ZsZojWwH9.O_7PyMa\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: i3eVn2VxEsHWxjcxeA1phh53C6-qytzOT90k0T0NADmkiX6H0tlU-Q==\r\nage: 69517\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":179604,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1857 x 1045, 8-bit/color RGBA, non-interlaced","md5":"7752c0abbbbf771080f643a0d80100a1","sha1":"609798f5f91e4c43729edbd0e67b705c6df0e53f","sha256":"ecf47965a941938a7f16f1bd6b649f5700c5d14ea8b5877e152b5cc7b808c466","sha512":"05095601469113b0907f0982125c63d17aaa4c39ccbc788794508879a61aec40917d986f4956452c2a0e0d333c5945dd45b3b1a87662518e7b07beff69b3bfa0","ssdeep":"3072:c17oYLftoLsGzLUCCcGpqd1Kf52u6VazxOaQH97emJ26JVG5PRwt40wrcxEG6:c17oYzOLzzLUCCciqd1KSUQa297emJ2/","tlshash":"4d04228ba0a7f5d4de6e143408eb08646370dd634a69197df3f1a5e4de4fa3c80a790e","first_seen":"2023-05-11T06:21:55Z","last_seen":"2026-05-17T05:46:22.670709Z","times_seen":44,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":45,"dns":0,"connect":0,"send":0,"wait":48,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"d13pxqgp3ixdbh.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"d13pxqgp3ixdbh.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"d13pxqgp3ixdbh.cloudfront.net/uploads/16835155821ce0b5e8da2485a766e01438af4c98cf.png","fqdn":"d13pxqgp3ixdbh.cloudfront.net","domain":"d13pxqgp3ixdbh.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.245.211","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrbeastgiftfree.netlify.app/","date":"2025-11-03T22:17:07.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /uploads/16835155821ce0b5e8da2485a766e01438af4c98cf.png HTTP/1.1\r\nHost: d13pxqgp3ixdbh.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrbeastgiftfree.netlify.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 62518\r\nlast-modified: Mon, 08 May 2023 03:13:03 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: NqmudBwR4FI44mjrbEH46g3h3XU3Pes0\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 03 Nov 2025 09:01:39 GMT\r\netag: \"234aecb60893d6e3bccaffa219ef2b8b\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: 2gb_sQqaHv9QbJIH9nfXrRXoU0qSWxbUEmH10aqFcJ3X6v4b8d38Fg==\r\nage: 47729\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":62518,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 458 x 572, 8-bit colormap, non-interlaced","md5":"234aecb60893d6e3bccaffa219ef2b8b","sha1":"15ed5867e239ed29a880dab05df2a82258f7bf3b","sha256":"6b75f5417cd1119db0b6d01f78c1fdcbe823a51f582870fa8ab94a104622cd5b","sha512":"6f178cee2de7f103d0e9a291f69f4cf299c50db24469eeb1bcb0dff22daead90e9f83933870809c2f95da773432da8ab4d6f4edc74e028c0371679f75a587054","ssdeep":"1536:9S1nbXtIsGUcyjU8Dvv3SY82Q45gwcmWbuRBiI8PpoAkDE:k1nbpcyw8x892vcmyuOIE6AME","tlshash":"8d530239f09b18ee4feafca52522b103172055a081b5f57ceb9e158daed84278c30f5e","first_seen":"2023-05-23T16:48:27Z","last_seen":"2026-05-17T05:46:22.756365Z","times_seen":44,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":64,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"d13pxqgp3ixdbh.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"d13pxqgp3ixdbh.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"d13pxqgp3ixdbh.cloudfront.net/uploads/16835155776888048542b1aee83f60cada03b5e9fe.png","fqdn":"d13pxqgp3ixdbh.cloudfront.net","domain":"d13pxqgp3ixdbh.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.245.211","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrbeastgiftfree.netlify.app/","date":"2025-11-03T22:17:07.806Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /uploads/16835155776888048542b1aee83f60cada03b5e9fe.png HTTP/1.1\r\nHost: d13pxqgp3ixdbh.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrbeastgiftfree.netlify.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 53863\r\nlast-modified: Mon, 08 May 2023 03:12:58 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: XmkBIt3w10e.gCGja__9O2PeXcC2jDWZ\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 03 Nov 2025 09:01:39 GMT\r\netag: \"b03c25e360af76e1fb116575aff2fd3e\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: OJLNvlu3B7KaIBWy_rfceLwpM4V4QlATs_e5qXhlFxrGKW5My4v7TQ==\r\nage: 47729\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":53863,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 458 x 572, 8-bit colormap, non-interlaced","md5":"b03c25e360af76e1fb116575aff2fd3e","sha1":"d24aadeba951a858448e1ce712152c080992c75d","sha256":"5ed1f47319707a760002d12dc93fee60b1cc0a9c91c99f170fcfbabaf743c54f","sha512":"b3cb1b3f31db516831388e85a302fa34fa13808c9786400c5e6679ce5a684afdbd996a0bcbf2c8b457af3e29ff9ea7cfe249d6bcbd7e448393fa212cc88c860b","ssdeep":"768:nZvDswPp0yH7eZ/zsSElInqvG94KyKFk9UB7gNjuqGgxxxnNJE+WeOLXmYOjWQOm:1QSp5H+A9IqOvkeUNCTSNJrcjm/00ia9","tlshash":"5233f1404acc091ebbc5337520ef3ac1bcacad1a0dc84f56113a29b735aa2c2d99759e","first_seen":"2023-05-23T16:48:27Z","last_seen":"2026-05-17T05:46:22.689722Z","times_seen":45,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":87,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"d13pxqgp3ixdbh.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"d13pxqgp3ixdbh.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"d13pxqgp3ixdbh.cloudfront.net/uploads/1683515583c80a90818f98dd5b530d7658c670b29f.png","fqdn":"d13pxqgp3ixdbh.cloudfront.net","domain":"d13pxqgp3ixdbh.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.245.211","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrbeastgiftfree.netlify.app/","date":"2025-11-03T22:17:07.794Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /uploads/1683515583c80a90818f98dd5b530d7658c670b29f.png HTTP/1.1\r\nHost: d13pxqgp3ixdbh.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrbeastgiftfree.netlify.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 77525\r\nlast-modified: Mon, 08 May 2023 03:13:04 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: Epxn7filol7P7n.Ina.oIpjJspSapu5w\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 03 Nov 2025 09:01:39 GMT\r\netag: \"be4ff1962392f904e7f223b8934cf4b3\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: 4Cu4TKEsXITuSP2LZGQTT2FEu4sS2LhhjyjPK9eTGNnZmwzQyZRH_w==\r\nage: 47729\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":77525,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 458 x 572, 8-bit colormap, non-interlaced","md5":"be4ff1962392f904e7f223b8934cf4b3","sha1":"1bd9691b2a2cf80ba235c460518296e15694f6b1","sha256":"2049266d4e43ed631ae676166b665663a54315840bb4dee7fce30a35cd45f506","sha512":"a917e30a1541c9b8f4a38cc5da976417609a66babae0fadb3001e3279b4352e1c0d9a8bf317c9fa52cd562c4b417bea22807346ab824b299fdb4f8d407406eb1","ssdeep":"1536:k3H9VJGOu9FCtdIdAfEIRCw9Bdr732cWWReV0j4TZmGNB8G5Ha15SA3W0RZX8m:kd+Ou90bIqfXBtr7G4I0j7GNB8G415Sq","tlshash":"097312e8d7aa00f42dae268500d08c7ff1694505efe726dcfaaf45aa2d454b7a3814d3","first_seen":"2023-05-23T16:48:27Z","last_seen":"2026-05-17T05:46:22.686413Z","times_seen":45,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":45,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"d13pxqgp3ixdbh.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"d13pxqgp3ixdbh.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"d13pxqgp3ixdbh.cloudfront.net/uploads/1683515579e9cef2557aa62295863fe0cc259ec90a.png","fqdn":"d13pxqgp3ixdbh.cloudfront.net","domain":"d13pxqgp3ixdbh.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.245.211","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrbeastgiftfree.netlify.app/","date":"2025-11-03T22:17:07.801Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /uploads/1683515579e9cef2557aa62295863fe0cc259ec90a.png HTTP/1.1\r\nHost: d13pxqgp3ixdbh.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrbeastgiftfree.netlify.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 44411\r\nlast-modified: Mon, 08 May 2023 03:13:00 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: AWFHhAEfm0DxrxRoLh7ZJRj9jSF4zznQ\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 03 Nov 2025 09:01:39 GMT\r\netag: \"c9ff941e4e24919935540aeef9cb0874\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: oM41k6Z2DeHEFBbfMqUs8cObHjwBSGHnkX1-MiAoiDVIlyVFZ9bqTw==\r\nage: 47729\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":44411,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 458 x 572, 8-bit colormap, non-interlaced","md5":"c9ff941e4e24919935540aeef9cb0874","sha1":"86b59606a4d043094d6d6e3d7ad65b507246719d","sha256":"7856948d32572a3f9aeacaf15c9fc5e400c1b8e2b6ff5de0d1c9b733133945ea","sha512":"d7ffe27c907d2e0e1cc9a6d3dce302f9d98e0990599e403734829dec6ed8afaf55d3ad1033577c53e43b47b3e72451b6e4ab985ece7216f53b2357c61f6cc3c9","ssdeep":"768:Wy/irAHVLVi1Qax9vvu3e8EYyJb99JJfcmkpwvmg1wv6+gELmy535d:V/3Zazxxvg09Ht71kgxy","tlshash":"601302932c9bdd94c9cac482df906c541e245aa9b7e617a31bdf60f27802d5e0d3f14c","first_seen":"2023-05-23T16:48:27Z","last_seen":"2026-05-17T05:46:22.633395Z","times_seen":44,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":8,"dns":0,"connect":0,"send":0,"wait":79,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"d13pxqgp3ixdbh.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"d13pxqgp3ixdbh.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"d13pxqgp3ixdbh.cloudfront.net/uploads/168351558560a555c5564b1d3786b74d9ef861a760.png","fqdn":"d13pxqgp3ixdbh.cloudfront.net","domain":"d13pxqgp3ixdbh.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.245.211","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrbeastgiftfree.netlify.app/","date":"2025-11-03T22:17:07.790Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /uploads/168351558560a555c5564b1d3786b74d9ef861a760.png HTTP/1.1\r\nHost: d13pxqgp3ixdbh.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrbeastgiftfree.netlify.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 74931\r\nlast-modified: Mon, 08 May 2023 03:13:07 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: kNCqM9pLKIsp7m2rjv9_B8gKlYVKStuD\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 03 Nov 2025 07:19:29 GMT\r\netag: \"a469d4c47804a9d7fa567b5de85b8f50\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: l13XRt8vFFMgLUFdh9ae8C1PmDD7r3l7pJBHls2lTJoIou_3FEqlQg==\r\nage: 53859\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":74931,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 458 x 572, 8-bit colormap, non-interlaced","md5":"a469d4c47804a9d7fa567b5de85b8f50","sha1":"d3742973e6525c436a96976c9c94a0326aa3b041","sha256":"b0d9c7e1c309bad121be664031f8e6569cd4865d49b016e99bf10375981292db","sha512":"ace0629d73ec16ef95034feafcdf231d71e8dc00557580f9cd5685b081d893dd552d143c24996250c3ede83902ed5582204dc34b5e3b93cd82de4d7491c8d19c","ssdeep":"1536:KW1AZba61WDQgkv457S5+lT/KgCr9BKZeJUgqbbh9/e6QN4:Oa6EQxvWtlTSgCrjG/e94","tlshash":"ae7312a827cca3f9b6980f63a799d679973039d2d400c1e54f51e1639f101ab833bf66","first_seen":"2023-05-23T16:48:27Z","last_seen":"2026-05-17T05:46:22.681991Z","times_seen":46,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":17,"dns":49,"connect":1,"send":0,"wait":30,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"d13pxqgp3ixdbh.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"d13pxqgp3ixdbh.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"d13pxqgp3ixdbh.cloudfront.net/uploads/16835155786f1b9ae97f0444022e99030b7660bb7d.png","fqdn":"d13pxqgp3ixdbh.cloudfront.net","domain":"d13pxqgp3ixdbh.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.245.211","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrbeastgiftfree.netlify.app/","date":"2025-11-03T22:17:07.802Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /uploads/16835155786f1b9ae97f0444022e99030b7660bb7d.png HTTP/1.1\r\nHost: d13pxqgp3ixdbh.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrbeastgiftfree.netlify.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 23940\r\nlast-modified: Mon, 08 May 2023 03:12:59 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: G_gT6eABRsWQzAl4JMWAUOz.vai0Kvb2\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 03 Nov 2025 06:36:09 GMT\r\netag: \"a405cb7f6c67e4d63acc19005bf9ca73\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: nxI3JXtG8vVbMyNG3-7iGuamWm-xwk1vffgPdxSl7MQpTGe9oUzvtw==\r\nage: 56459\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":23940,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 458 x 572, 8-bit colormap, non-interlaced","md5":"a405cb7f6c67e4d63acc19005bf9ca73","sha1":"5df2550b660b3d66daa9970b0f9cfa6ed9fd49d2","sha256":"56880eff5b209178ef7cd9729c16e6ffa7173bde96c2a7077551462078fcfe3f","sha512":"9b62ef48231d338702fbc6d725b6f2a3643b0bddcef90bae3da3900d07f84dd4d80ea2c34e3f38922c749e692a0db817b1480423bf7516e307c64f57f0fd4364","ssdeep":"384:MejpUH6sW4G4Ub4hxXdi7qwqntGkpKgHfuCrcoB1GwhlAarpOg2SLdgbjyblk6rJ:MqLB4U0jsqntGkpKefnrcoB1DhltFOgL","tlshash":"f3b2e198a206306fc48b9a2f2f95da1c28b090238f39dbd7a71149d07e5f263f55d623","first_seen":"2023-05-23T16:48:27Z","last_seen":"2026-05-17T05:46:22.728943Z","times_seen":45,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":84,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"d13pxqgp3ixdbh.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"d13pxqgp3ixdbh.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"d13pxqgp3ixdbh.cloudfront.net/uploads/16835155766b7de6286253f9137b8a8017235f8ff9.png","fqdn":"d13pxqgp3ixdbh.cloudfront.net","domain":"d13pxqgp3ixdbh.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.245.211","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrbeastgiftfree.netlify.app/","date":"2025-11-03T22:17:07.807Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /uploads/16835155766b7de6286253f9137b8a8017235f8ff9.png HTTP/1.1\r\nHost: d13pxqgp3ixdbh.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrbeastgiftfree.netlify.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 24551\r\nlast-modified: Mon, 08 May 2023 03:12:57 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 9Ksng7X9clFTUCDN0Zwruv9vHcVDcqyb\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 03 Nov 2025 07:19:29 GMT\r\netag: \"3856f06421e5d79c9094df8e1a5653de\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: EKJYD1OJOxfgcdF7pYE0wzBSDoHfGoSfrXyPwmGEGWp53qMHgkS8xg==\r\nage: 53859\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":24551,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 458 x 572, 8-bit colormap, non-interlaced","md5":"3856f06421e5d79c9094df8e1a5653de","sha1":"155c06b70ae0869212022507c0510a1ded4e4e0b","sha256":"5937fa70001413ee86b0e59627511c0f7e7147fde67fdb19be49a9de482d0c15","sha512":"f05d35f53e2e437db314de46872c2e814af46b48e9003a70743c7d64aaf45b09550a1a5e0b790273a9d00525be437bf58a387daa0d8c827cd45a3a9e33939fe6","ssdeep":"384:FRfu8NL2v/jw0yrlEoSCjr1Tt7fvijq7fUiH9mpJ9sKtQPVIlkp3ZSeIOX:jXqzw0I3VVThvi8x9mpYGle3ZlX","tlshash":"17b2e1bda1414f91f4b1f1362ef9c0ba099f62b512ab385249eec74761b932b70e1740","first_seen":"2023-05-23T16:48:27Z","last_seen":"2026-05-17T05:46:22.705864Z","times_seen":44,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":92,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"d13pxqgp3ixdbh.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"d13pxqgp3ixdbh.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"d1y3y09sav47f5.cloudfront.net/public/clockers/PrimeApps/cssXF.css","fqdn":"d1y3y09sav47f5.cloudfront.net","domain":"d1y3y09sav47f5.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"3.167.7.98","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mrbeastgiftfree.netlify.app/","date":"2025-11-03T22:17:08.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /public/clockers/PrimeApps/cssXF.css HTTP/1.1\r\nHost: d1y3y09sav47f5.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrbeastgiftfree.netlify.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\ncontent-length: 1804\r\ndate: Mon, 03 Nov 2025 22:17:08 GMT\r\naccept-ranges: bytes\r\nserver: Apache/2.4.51 () OpenSSL/1.0.2k-fips PHP/7.4.11\r\nlast-modified: Thu, 17 Aug 2023 03:34:43 GMT\r\netag: \"70c-6031617c40ffd\"\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 53019ee090f087ca6c6fa860098bcd80.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: 9LfRRsySkTjywah6LxDL197OE_X4zC2XtrX5WKQq8X5Ch4UBP04wlw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenSSL:1.0.2k","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]},{"name":"Apache HTTP Server:2.4.51","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"PHP:7.4.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1804,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"9be74b455cf7e0b6fc1461ba3d9ad01c","sha1":"f1fa072d9874b423fd003efeffcd128e174d88ca","sha256":"e6959d5cfed508bcc278587c05b26b361bc678f8a7f0502ca6f8ce01f2838cd5","sha512":"6269145c9f99746b9135c994e118582b5219ff98a20ebe50e57d27a14f7859bc085c063002e86f718e301197d53a73275f3544915c1a1a3416adaf9669767182","ssdeep":"","tlshash":"51316a3eae72594f41b9861126f7d21ba5bc515f0a30af7d7a20360a1f261bd2073fd8","first_seen":"2023-08-26T19:01:26Z","last_seen":"2026-06-14T22:27:54.068709Z","times_seen":1990,"resource_available":false,"data":null}},"time_used":350,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":350,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d13pxqgp3ixdbh.cloudfront.net/uploads/168351558813755e89e3f453a0ddc7fe24df7c8ff3.png","fqdn":"d13pxqgp3ixdbh.cloudfront.net","domain":"d13pxqgp3ixdbh.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.245.211","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrbeastgiftfree.netlify.app/","date":"2025-11-03T22:17:07.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /uploads/168351558813755e89e3f453a0ddc7fe24df7c8ff3.png HTTP/1.1\r\nHost: d13pxqgp3ixdbh.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrbeastgiftfree.netlify.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 73055\r\ndate: Mon, 03 Nov 2025 06:36:09 GMT\r\nlast-modified: Mon, 08 May 2023 03:13:09 GMT\r\netag: \"dd5f13494d5d464006648c61d2f27e1e\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: bN.bMWPjUJRaEIsEqW9WMlgApOYqYxZf\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: JU9NgdJpu0NOw5epz5x3_fXbf2NYqzZ7pqn4GY9IhIjkZbyP2qvOrg==\r\nage: 56459\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":73055,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 458 x 572, 8-bit colormap, non-interlaced","md5":"dd5f13494d5d464006648c61d2f27e1e","sha1":"7da1afe913d12a971186ec98646fa4f85e2312e0","sha256":"2c215709f1e920762bc361a7e4a1c4453923d0ef91d96ab7a4497e09c6d2a1c1","sha512":"f5607110bd50838434b8ae34263b53b2d1802abc9ef168a99c30d3f3056e08891077047442df73c7d41aa61dd9a2d4b07e35c8e8a55de45843a00d473a25efae","ssdeep":"1536:V71k5kjQoimCBOYHkp+MNn6rAv2ayrKNJtNUYy507HBybw+3S:hItmUuIrorJN607qS","tlshash":"0363021a58ac130a42d113851e6f6cfb198b3a03b39d0bf485ea99781d135f7d15ad3f","first_seen":"2023-05-23T16:48:27Z","last_seen":"2026-05-17T05:46:22.665539Z","times_seen":45,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":38,"dns":0,"connect":0,"send":0,"wait":26,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"d13pxqgp3ixdbh.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"d13pxqgp3ixdbh.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mrbeastgiftfree.netlify.app/","fqdn":"mrbeastgiftfree.netlify.app","domain":"mrbeastgiftfree.netlify.app","tld":"netlify.app"},"ip":{"addr":"63.176.8.218","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-03T22:17:06.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.netlify.app","organization":"Netlify, Inc"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 31 Jan 2025 00:00:00 GMT","end":"Tue, 03 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"04:28:C9:A3:BC:06:50:9C:6B:0B:67:72:82:27:C6:3D:99:1B:5B:71","sha256":"FA:34:6A:A0:1C:F5:9C:C7:30:CA:55:23:13:A1:3E:0F:21:8C:3A:0B:B5:CC:E5:67:09:FE:64:EC:97:4E:8D:75"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: mrbeastgiftfree.netlify.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Mon, 03 Nov 2025 22:17:06 GMT\r\netag: \"83e810b7a8987cf7807bdcd1239263fe-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01K95WQ790G2F4R0WAJ735535M\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"jQuery:2.2.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"Sentry:6.4.1","description":"Sentry is an open-source platform for workflow productivity, aggregating errors from across the stack in real time.","website":"https://sentry.io/","common_platform_enumeration":"","icon":"Sentry.svg","categories":["Issue trackers"]},{"name":"Blogger","description":"Blogger is a blog-publishing service that allows multi-user blogs with time-stamped entries.","website":"https://www.blogger.com","common_platform_enumeration":"","icon":"Blogger.png","categories":["Blogs"]},{"name":"Python","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]}],"data":{"size":57378,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4052), with CRLF line terminators","md5":"39edaf4952721722b9bd2f0f78920c4c","sha1":"41dbab1c39bb54f72701deb5319f722a1a0bf9d3","sha256":"fb6a0c105e01f0c2ed6426d99f37fe705f43237bcc362ba14e1f8eb3641590fe","sha512":"a36ed6bb598840f7965d572390efd018b5120fb61f16f08387a7373563081b46123cae0f1f2eac890c4c9b1b21f5f87ae233c5b9a07c9f69d6005ed12544fbba","ssdeep":"1536:7LU7FxmlgMoi38o6A1tpLZ5upLVNjoWAGTtB:7LU7CGMoi38o6A1tpLZ5upLVNjoWAGTb","tlshash":"7d4394e7779684304bbbabef9a525b88f5404417ce01949679ec0d605f36ee2c02afdc","first_seen":"2025-11-03T22:17:41.795676Z","last_seen":"2025-11-03T22:17:41.795676Z","times_seen":1,"resource_available":false,"data":null}},"time_used":336,"timings":{"blocked":74,"dns":1,"connect":23,"send":0,"wait":187,"receive":0,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"browser.sentry-cdn.com/6.4.1/bundle.min.js","fqdn":"browser.sentry-cdn.com","domain":"sentry-cdn.com","tld":"com"},"ip":{"addr":"151.101.2.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mrbeastgiftfree.netlify.app/","date":"2025-11-03T22:17:07.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.sentry-cdn.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q1","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 07 Apr 2025 18:50:27 GMT","end":"Sat, 09 May 2026 18:50:26 GMT"},"fingerprint":{"sha1":"00:4D:2B:16:F6:29:29:D8:2F:20:48:BD:32:13:96:5D:37:EB:F8:25","sha256":"07:FA:B8:3E:6D:AC:BB:16:5C:22:49:01:30:87:B9:66:E1:FB:75:FD:50:1B:81:91:9A:06:CF:FF:A4:67:5D:F2"}}},"request":{"raw":"GET /6.4.1/bundle.min.js HTTP/1.1\r\nHost: browser.sentry-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://mrbeastgiftfree.netlify.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrbeastgiftfree.netlify.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 09 Oct 2024 13:48:21 GMT\r\nlast-modified: Wed, 19 May 2021 16:36:38 GMT\r\netag: \"42639cce5db857005b8285dedd67553d\"\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\ndate: Mon, 03 Nov 2025 22:17:07 GMT\r\nage: 4166106\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nserver: Fastly\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-length: 20972\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]}],"data":{"size":67961,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65448)","md5":"c2bcb2b153e152ba850057a843064c5f","sha1":"cdb5e35cf2c53fec13a111579eea73b08bb86bb3","sha256":"22ece4ddd583540c08ccadf82d18658e2ed0eba5dd7fdca806aa259667edba56","sha512":"77ce58a3db7cc89d9fec799da3e3222ed51473be0d86df42dd7fa9e6894281c399376438509202daaa826bc1633be042feca278de20ec1ded949129055ce56a4","ssdeep":"768:WSVz2U6R+6EgxchcGb/Mq4SmCjOs5QQ0UUBslyFLXqDU2MohbyC/3OCxIzr6PW:WS53v6EgWhPLSXFCbfO","tlshash":"be63c7c9f6a1b071479365a4423f000ae33f5a6cb48f8278b5a9d9e16cf940d9627f3d","first_seen":"2023-03-07T01:07:11Z","last_seen":"2026-06-06T16:29:14.023368Z","times_seen":852,"resource_available":true,"data":null}},"time_used":237,"timings":{"blocked":84,"dns":26,"connect":28,"send":0,"wait":26,"receive":9,"ssl":61},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Titan+One\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mrbeastgiftfree.netlify.app/","date":"2025-11-03T22:17:07.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:51 GMT","end":"Mon, 05 Jan 2026 08:38:50 GMT"},"fingerprint":{"sha1":"1D:8E:3A:85:91:AC:63:71:94:8B:0E:61:45:34:D9:86:AB:A6:E2:CE","sha256":"E6:93:4E:53:89:15:41:28:27:59:AA:84:50:96:96:1E:2A:98:7E:08:60:AE:68:62:AE:DD:86:AB:DB:0F:FE:2B"}}},"request":{"raw":"GET /css2?family=Titan+One\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrbeastgiftfree.netlify.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 03 Nov 2025 22:17:07 GMT\r\ndate: Mon, 03 Nov 2025 22:17:07 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-security-policy-report-only: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/bcfae741e379a885f2ab2cf83ebe6d32/mr\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":849,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"3e41c11fc44f5d3984d7501ad4251131","sha1":"340b5292c0d89d0b2c24480451a67707b4bc8488","sha256":"ce6ee22039ad7e16dc3a481f3c5b189d580371c7179725e0d99ed5549064624d","sha512":"e2da2ccdc30a37c58f3e2519ff039278419bc13a1e580571630216e12c66dc7986f9864454f3cf4132444e2b8e321e9d2d8ab05f4f5f0550e104d250f600d73a","ssdeep":"","tlshash":"320112d1082ba600e7430cc112ce3e33ef5e6150684095395ffe14c8bc57c596352b1e","first_seen":"2025-09-17T07:58:25.989245Z","last_seen":"2026-05-31T19:54:38.550116Z","times_seen":77,"resource_available":false,"data":null}},"time_used":381,"timings":{"blocked":136,"dns":0,"connect":20,"send":0,"wait":70,"receive":0,"ssl":148},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d13pxqgp3ixdbh.cloudfront.net/uploads/16835155892ec64137df5b248ab76c47e25694999a.png","fqdn":"d13pxqgp3ixdbh.cloudfront.net","domain":"d13pxqgp3ixdbh.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.245.211","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrbeastgiftfree.netlify.app/","date":"2025-11-03T22:17:07.782Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /uploads/16835155892ec64137df5b248ab76c47e25694999a.png HTTP/1.1\r\nHost: d13pxqgp3ixdbh.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrbeastgiftfree.netlify.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 40487\r\nlast-modified: Mon, 08 May 2023 03:13:10 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: K3W6z1jp..oMnVtT4KTyWalC4vdieYwW\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 03 Nov 2025 02:38:35 GMT\r\netag: \"6266b8f2f525ac7023cecae5e4ab82cb\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: F-Rms2RE-bonkjeno4PVcE5HMimPibyjnwSeU_y5orZhqd3DV3U1Gw==\r\nage: 70713\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":40487,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 458 x 572, 8-bit colormap, non-interlaced","md5":"6266b8f2f525ac7023cecae5e4ab82cb","sha1":"ea24e9e4902cfd472ea3adc157d16c0b968acd99","sha256":"27378bd826b632a551e00e8d4dbab0c7770bd71c56094edb77b317c99f66dc1d","sha512":"9db14b0274b4255f7f2b856b31716c9aae738947e769bba6c4539606e4d4e1d4e9d930ca9566ef7d4c918e6ef7549fc03377730a2eeca806792be4a0d1fa6bd3","ssdeep":"768:bKK9Buu/hzyT/5mPX2bMpwSnP13Q86LKegKFFvc7+gmXUOhD1rpKOG+MfFro59W:buupz85mPXWMpR9Q8CKAgmdd1rnG+M9v","tlshash":"a30301687c909339e9cca33755ab65a2ff240a747a063dbf31380951939bb1f7366205","first_seen":"2023-05-23T16:48:27Z","last_seen":"2026-05-17T05:46:22.681169Z","times_seen":45,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":44,"dns":0,"connect":0,"send":0,"wait":74,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"d13pxqgp3ixdbh.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"d13pxqgp3ixdbh.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"d13pxqgp3ixdbh.cloudfront.net/uploads/1683515581a1481b807a7aeaa03ec0d01cee167cc2.png","fqdn":"d13pxqgp3ixdbh.cloudfront.net","domain":"d13pxqgp3ixdbh.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.245.211","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrbeastgiftfree.netlify.app/","date":"2025-11-03T22:17:07.797Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /uploads/1683515581a1481b807a7aeaa03ec0d01cee167cc2.png HTTP/1.1\r\nHost: d13pxqgp3ixdbh.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrbeastgiftfree.netlify.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 36659\r\nlast-modified: Mon, 08 May 2023 03:13:02 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: GQo8DhlfHIni12OR35S2DCM0.OciQbhk\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 03 Nov 2025 09:01:39 GMT\r\netag: \"c5c4e6575965d0443b833f535a28b943\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: J8_0meeAS36SQ1dikDf8NBJrtFJqsxOkpOsynlFycf-69_AC6h7f2Q==\r\nage: 47729\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":36659,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 458 x 572, 8-bit colormap, non-interlaced","md5":"c5c4e6575965d0443b833f535a28b943","sha1":"61b6c7a6fb69187255e6de5dfcc6841fa92a05e4","sha256":"7f3f31e2bd3d27526ae0b4e41ff8a5359f8e13e3d7d70b7dcff2381af2069d4a","sha512":"b985bee678a37d29096e8cc20cce2d7032cb2c70b7e4d59ea6319aa0b84dd9291b4e4fe519dd23e13b573bf3238fdda0e742ce1a58875249ae646e81532f2830","ssdeep":"768:qJ05p/XHtu+R8+Maw9E3xd7tUN+blesUfdFxztl1HqswODHTvZy60:qIgaMauEBdi+bl7UftBHqVGHTvc60","tlshash":"75f202fabe3848ee5dce6761d487bb9860605297070f5051af89b6f79e6cb11006f03b","first_seen":"2023-05-23T16:48:27Z","last_seen":"2026-05-17T05:46:22.650915Z","times_seen":45,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":78,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"d13pxqgp3ixdbh.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"d13pxqgp3ixdbh.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"d13pxqgp3ixdbh.cloudfront.net/uploads/1683515576889384a64b3805cd83a49235578d0c84.png","fqdn":"d13pxqgp3ixdbh.cloudfront.net","domain":"d13pxqgp3ixdbh.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.245.211","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrbeastgiftfree.netlify.app/","date":"2025-11-03T22:17:07.808Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /uploads/1683515576889384a64b3805cd83a49235578d0c84.png HTTP/1.1\r\nHost: d13pxqgp3ixdbh.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrbeastgiftfree.netlify.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 18460\r\ndate: Mon, 03 Nov 2025 06:36:09 GMT\r\nlast-modified: Mon, 08 May 2023 03:12:57 GMT\r\netag: \"47d0911fea5995ac7f904a0e0b49b6ec\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: UrOazKAkSyJaE0Ifc7ErvSfCVAYHUxYy\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: TEnTilX5Wrr7VHNeojkViH5DzlSoIiZtq5sV6Myo1FvQPtlJ9mTVhg==\r\nage: 56459\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":18460,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 458 x 572, 8-bit colormap, non-interlaced","md5":"47d0911fea5995ac7f904a0e0b49b6ec","sha1":"9d8ccd45a6498cb958427f69d7a663e8f4f2f303","sha256":"d366653d0c2189d9e877a29c60f605251e1c8615b21edf82846917651c8bdb00","sha512":"64eaa80a92b2adcf1726349ec4ba235653e517fc2a7285038c8bd149ae98f90371e07233dd567a806f841cb65d39ee5a61840dc27618838ed9b24870adc2f782","ssdeep":"384:MqNZVca8snozTrVL8rdQd91xsQ9o8ghwZ8tPBf1OAnNhyK9haj9cnBefC7S1:MqbG6n8TrVAularvtJ9XC9cnBeb","tlshash":"ee82d157ea045a07d79d3021d49fda0be781faf3104e8adacf2b3a325460d9541e35f6","first_seen":"2023-05-23T16:48:27Z","last_seen":"2026-05-17T05:46:22.667918Z","times_seen":45,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":94,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"d13pxqgp3ixdbh.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"d13pxqgp3ixdbh.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dojy0dg181308.cloudfront.net/76b9d2e.js","fqdn":"dojy0dg181308.cloudfront.net","domain":"dojy0dg181308.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.245.187","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mrbeastgiftfree.netlify.app/","date":"2025-11-03T22:17:07.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /76b9d2e.js HTTP/1.1\r\nHost: dojy0dg181308.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrbeastgiftfree.netlify.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nserver: AmazonS3\r\nlast-modified: Thu, 30 Oct 2025 17:05:01 GMT\r\ncontent-encoding: br\r\ndate: Mon, 03 Nov 2025 22:00:38 GMT\r\netag: W/\"6f71ffb9a974716679657dc2be6f48a2\"\r\nvary: accept-encoding\r\nx-cache: Error from cloudfront\r\nvia: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: mfRYnM92s1fhlXcLayJpETB1UL551oA-WOr2dlnWhi5ZLdWnsq0M7w==\r\nage: 990\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":27325,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1637), with CRLF line terminators","md5":"6f71ffb9a974716679657dc2be6f48a2","sha1":"39559ee70c44e2cc86c540d28ec98f63b8d929ac","sha256":"beb56d146fa8ce59399730dca37f9ee41d29b6c53d49c07e0d219e0eb04e93ca","sha512":"da2fd18206595f8115993b5ad4f05753e06530143741b8698ab4d548bd11c632be8aa5adb71293faedd2a82da84556c55130ab679171ed8eb05ae1db57b5d8b5","ssdeep":"768:n5f2+236wBXroljZ1/peRXMiH54aGz1WCyQgmip4L/4aLv0NO:03Z7OZ1h2ayQgM","tlshash":"0bc2545aab5a1849867763b9df1f5208fa75032f1512c119bc7c88d85fb0d3442aaffc","first_seen":"2025-10-30T19:57:12.483415Z","last_seen":"2026-06-10T19:27:39.156555Z","times_seen":593,"resource_available":true,"data":null}},"time_used":666,"timings":{"blocked":117,"dns":74,"connect":1,"send":0,"wait":419,"receive":0,"ssl":53},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.blogger.com/static/v1/widgets/3704019819-widgets.js","fqdn":"www.blogger.com","domain":"blogger.com","tld":"com"},"ip":{"addr":"142.250.74.105","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mrbeastgiftfree.netlify.app/","date":"2025-11-03T22:17:07.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.blogger.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:37:18 GMT","end":"Mon, 05 Jan 2026 08:37:17 GMT"},"fingerprint":{"sha1":"53:D6:04:72:15:45:52:04:C4:A6:93:27:0C:81:AB:99:E7:9E:B5:C3","sha256":"6F:04:2D:52:74:8C:3D:49:3B:D3:DB:78:5D:5F:B6:C9:FD:25:24:69:E4:E7:E8:8D:55:92:AE:0E:E9:CA:C3:79"}}},"request":{"raw":"GET /static/v1/widgets/3704019819-widgets.js HTTP/1.1\r\nHost: www.blogger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrbeastgiftfree.netlify.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"blogger-tech\"\r\nreport-to: {\"group\":\"blogger-tech\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/blogger-tech\"}]}\r\ncontent-length: 51878\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 03 Nov 2025 15:02:31 GMT\r\nexpires: Tue, 03 Nov 2026 15:02:31 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Fri, 13 Dec 2024 02:55:07 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 26076\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":147434,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4137)","md5":"e5e94160e257182f70da510e8f3cc93e","sha1":"818ef6636e0a8e4c61ebb19aa6a99915f9887695","sha256":"b2a75bbc8fe9eafaa4322022c2e134a19f2566a197ae57bfff6099d1c7795050","sha512":"81d4c93f4e18548b04616027e33f69863cfb9438d074d4484de5d7b0db446579670379be3e322ff310e7e684671f88cb133af78534ce5b630f07830a3116b335","ssdeep":"1536:+wgXh1Zq36eAnyQAg5IlY/+138neRmo9vSFXwNAahj7TxFEgbzDLSZbVHR02AGsQ:b6eQv+16eQtdwNrjog05PsdYVcs0a","tlshash":"bbe30ad8b79270628373b4b5003f010ff13a79aae848496cb588d8e57e7496a5277f7c","first_seen":"2024-12-05T11:49:54.580547Z","last_seen":"2025-11-29T06:04:46.815561Z","times_seen":1200,"resource_available":true,"data":null}},"time_used":236,"timings":{"blocked":85,"dns":3,"connect":11,"send":0,"wait":44,"receive":15,"ssl":68},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d13pxqgp3ixdbh.cloudfront.net/uploads/1683515578dc7bf3e6a1b096eb8992eaadef8c37fa.png","fqdn":"d13pxqgp3ixdbh.cloudfront.net","domain":"d13pxqgp3ixdbh.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.245.211","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrbeastgiftfree.netlify.app/","date":"2025-11-03T22:17:07.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /uploads/1683515578dc7bf3e6a1b096eb8992eaadef8c37fa.png HTTP/1.1\r\nHost: d13pxqgp3ixdbh.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrbeastgiftfree.netlify.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 28684\r\nlast-modified: Mon, 08 May 2023 03:12:59 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: hRBfMVpNzd1xJ4G2OdiHPGSRabqdguMh\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 03 Nov 2025 09:01:39 GMT\r\netag: \"311741841d75fe0be41a42093e70ec21\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: _L-gUt2fcwW2d3T9lJV9zK0dsCYXtqpbK5yQY0lGmf-t6Vlgp4o_UA==\r\nage: 47729\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":28684,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 458 x 572, 8-bit colormap, non-interlaced","md5":"311741841d75fe0be41a42093e70ec21","sha1":"e3818c9e4cd5ab8fa0431a447a00d51a5eb98f24","sha256":"4114609554b57ce7b1a864ae3bf17b9505e33e901acbf8d993c27480aef4dea9","sha512":"8cdb16c8ea907628ab96e4268e17c6d10c2d8fc08b6cef9665e56f0abb7174ee43461df7db8b97696252190e5893d117a34276c8367aa26d11a69f3a1282d451","ssdeep":"768:X2uDAiEu2WGZfPZ/ywTsc13jMLr07rhiUDFDlBUOVdiw36z:muDXoxZIcVGQ7rhiqDBKz","tlshash":"cdd2e1653dcc592ebed9c79e9268e08507b760ecb38953b98145f40ade130ca1d137da","first_seen":"2023-05-23T16:48:27Z","last_seen":"2026-05-17T05:46:22.650062Z","times_seen":44,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":114,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"d13pxqgp3ixdbh.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"d13pxqgp3ixdbh.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"d13pxqgp3ixdbh.cloudfront.net/uploads/1683515577b67819cadd48b1796be797f19412a050.png","fqdn":"d13pxqgp3ixdbh.cloudfront.net","domain":"d13pxqgp3ixdbh.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.245.211","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrbeastgiftfree.netlify.app/","date":"2025-11-03T22:17:07.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /uploads/1683515577b67819cadd48b1796be797f19412a050.png HTTP/1.1\r\nHost: d13pxqgp3ixdbh.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrbeastgiftfree.netlify.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 31941\r\nlast-modified: Mon, 08 May 2023 03:12:58 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 6A.mVK4EpAafmiSOmiVCtXo_owFDtx2f\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 03 Nov 2025 07:19:29 GMT\r\netag: \"8b2fa9324c7e0345b732e937fecf6f44\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: ik39GHTkn4c4bukHJnRMnATB8k8nr8gKh3EtQBpISNEpzgq_Fi-SdQ==\r\nage: 53859\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":31941,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 458 x 572, 8-bit colormap, non-interlaced","md5":"8b2fa9324c7e0345b732e937fecf6f44","sha1":"15986229cf7315646c0d1658c91e9d6dd15c2373","sha256":"c6afe81cd2adabad89e5f1cb2810dfb0793c0e23197b71f51f6774889418e55e","sha512":"5d059e386ad2442d899118ef698352b275c035183667b73d3cc1d3cf59c4e7457f63d7c274b5d5dbcc7e7e926ad33ebd5075c3c724054e4fb0faba11103e3ca2","ssdeep":"768:eIw5x8GbHVTzrfAxl81DcAh40kjYrC9yHA+dmutMoet:e9n1zDAxl857W0rYeL1tdU","tlshash":"20e2f1731c0a273a6a3b3947d5ebb7f5ac3416b7c81b36ab2645d42b490b8e30521e12","first_seen":"2023-05-23T16:48:27Z","last_seen":"2026-05-17T05:46:22.638843Z","times_seen":45,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":89,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"d13pxqgp3ixdbh.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"d13pxqgp3ixdbh.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"d13pxqgp3ixdbh.cloudfront.net/uploads/168351557339e3880a6a59b3ce405f9a101166b46a.png","fqdn":"d13pxqgp3ixdbh.cloudfront.net","domain":"d13pxqgp3ixdbh.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.245.211","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrbeastgiftfree.netlify.app/","date":"2025-11-03T22:17:07.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /uploads/168351557339e3880a6a59b3ce405f9a101166b46a.png HTTP/1.1\r\nHost: d13pxqgp3ixdbh.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrbeastgiftfree.netlify.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 34081\r\nlast-modified: Mon, 08 May 2023 03:12:54 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: XSA2d926eNwoqbZW7ITsVnxoPesnGcVB\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 03 Nov 2025 07:19:28 GMT\r\netag: \"6cf0bae55a463390d06974884aafaedf\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: 76pzdGaMNSWQW-Lk64BivViuAIMvQYDdV1shWMN0sMZDf5Nt2V9LVQ==\r\nage: 53859\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":34081,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 458 x 572, 8-bit colormap, non-interlaced","md5":"6cf0bae55a463390d06974884aafaedf","sha1":"9049da10f0b3eb6cd700780a1f5261288659e700","sha256":"a36766d841bf45c04f61560d5b5844a2da25411fff5cc3c2c80779eccd895db9","sha512":"5b8118cf00ee9601bfe0e15d04bb34a3782250b7749112ea14061c27af2da9f32242cd4f124b8de8fddd7d5ff514b31decd4904a8575c3f84f89c8334b3d8dc0","ssdeep":"768:xLMQ6xJeXBrLnakOIJmYf52NJL+goqSPUzLPc/hoyqvuu+skg+:1MQ+MX52Nt+4S8zo0vf/A","tlshash":"a0e2f1b42b43be737e9c462fb89e6d814c4d91e49f39128413eb8472e7755e924200e7","first_seen":"2023-05-23T16:48:27Z","last_seen":"2026-05-17T05:46:22.663485Z","times_seen":45,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":89,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"d13pxqgp3ixdbh.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"d13pxqgp3ixdbh.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.blogger.com/static/v1/widgets/984859869-widgets.js","fqdn":"www.blogger.com","domain":"blogger.com","tld":"com"},"ip":{"addr":"142.250.74.105","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mrbeastgiftfree.netlify.app/","date":"2025-11-03T22:17:07.080Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.blogger.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:37:18 GMT","end":"Mon, 05 Jan 2026 08:37:17 GMT"},"fingerprint":{"sha1":"53:D6:04:72:15:45:52:04:C4:A6:93:27:0C:81:AB:99:E7:9E:B5:C3","sha256":"6F:04:2D:52:74:8C:3D:49:3B:D3:DB:78:5D:5F:B6:C9:FD:25:24:69:E4:E7:E8:8D:55:92:AE:0E:E9:CA:C3:79"}}},"request":{"raw":"GET /static/v1/widgets/984859869-widgets.js HTTP/1.1\r\nHost: www.blogger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrbeastgiftfree.netlify.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"blogger-tech\"\r\nreport-to: {\"group\":\"blogger-tech\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/blogger-tech\"}]}\r\ncontent-length: 51859\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 31 Oct 2025 20:05:15 GMT\r\nexpires: Sat, 31 Oct 2026 20:05:15 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 26 Nov 2024 18:56:09 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 267112\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":147356,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4137)","md5":"2a951b80caf40287497ddd3b99022a4d","sha1":"26d08691f48183d1a82c99cbc6b33e51f4e6d1fc","sha256":"57359a92f0b1c5eefc5e43e18844dd515d8402c9e8294b54b756fef1e98d9859","sha512":"6f5ae6b7ca747f9fb7ccdfa34df548bcc7a80072c29a9f25f4ceff2a77e3e97391257c9b8a4effffe6e269d3650cf7a7094a4fc3e9a03a403e9ad1d4e7006a23","ssdeep":"1536:+wgXh1Zq36eAnyQAg5IlY/+138NeRao9vSjxkNAahj7TxFEgbzDLSUbVHR02AeRW:b6eQv+1gest9kNrjog55PRuYRcV0a","tlshash":"14e30ad8b79270628373b4b5003f010ff13a79aae848496cb488d9e57e7496a5277f7c","first_seen":"2024-11-15T12:11:39.280202Z","last_seen":"2025-11-03T22:17:41.854551Z","times_seen":118,"resource_available":true,"data":null}},"time_used":220,"timings":{"blocked":83,"dns":4,"connect":11,"send":0,"wait":22,"receive":25,"ssl":63},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d13pxqgp3ixdbh.cloudfront.net/uploads/1683515586bb993477f94e1a2cb20d215d6bc40809.png","fqdn":"d13pxqgp3ixdbh.cloudfront.net","domain":"d13pxqgp3ixdbh.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.245.211","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrbeastgiftfree.netlify.app/","date":"2025-11-03T22:17:07.788Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /uploads/1683515586bb993477f94e1a2cb20d215d6bc40809.png HTTP/1.1\r\nHost: d13pxqgp3ixdbh.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrbeastgiftfree.netlify.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 32338\r\nlast-modified: Mon, 08 May 2023 03:13:07 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: zDjkuPydwVqEH4GQZY4XsPksmvWA.Y4g\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 03 Nov 2025 06:36:09 GMT\r\netag: \"4dc1429d4d6ba2491b7b4b7683bff776\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: 05uIph8Lnd1VIw6Q8vCL0DvfRYcl30bp4Og1_Y_jsHUSSeIouWzTEQ==\r\nage: 56459\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":32338,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 458 x 572, 8-bit colormap, non-interlaced","md5":"4dc1429d4d6ba2491b7b4b7683bff776","sha1":"5007e9b660d52c7230fea10a8493f9ca39c6a326","sha256":"595cd6740764ce432a7203f1fa7f1b4a24dab744547d866b8999f349a63bcc93","sha512":"d09e0dcaa51c6b742d21f94b08ce6b94851d17522b9b93a37fdf044ed6cae96be3a02263682093e4fa51e14668833fa8eb9b3f0b6e4c728c844c78ae73f0f999","ssdeep":"768:ryY7JsygrAJORINr4WHgTObUI4b5sMclE07l:r4y6AJJ4ggmv0bGV","tlshash":"6ee2e04737b8747124b7c38a09942cbe7750d6b5715936e60a44affa46473ca583f13c","first_seen":"2023-05-23T16:48:27Z","last_seen":"2026-05-17T05:46:22.721496Z","times_seen":46,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":36,"dns":0,"connect":0,"send":0,"wait":90,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"d13pxqgp3ixdbh.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"d13pxqgp3ixdbh.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"d13pxqgp3ixdbh.cloudfront.net/uploads/16835155804025a27ee677a002e9b9a9d00e60c803.png","fqdn":"d13pxqgp3ixdbh.cloudfront.net","domain":"d13pxqgp3ixdbh.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.245.211","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrbeastgiftfree.netlify.app/","date":"2025-11-03T22:17:07.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /uploads/16835155804025a27ee677a002e9b9a9d00e60c803.png HTTP/1.1\r\nHost: d13pxqgp3ixdbh.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrbeastgiftfree.netlify.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 62446\r\nlast-modified: Mon, 08 May 2023 03:13:01 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: DDThavJ1pfiOez4m0sXp6wVZhQvmKKsq\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 03 Nov 2025 07:19:29 GMT\r\netag: \"e651e90f8a8168ee3c3a16d2357424bf\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: nUdwlJM61-PhN_0sZ_m-0Aw78Re9olRtuEjkSSDgdqW1HOki1AU0mQ==\r\nage: 53859\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":62446,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 458 x 572, 8-bit colormap, non-interlaced","md5":"e651e90f8a8168ee3c3a16d2357424bf","sha1":"363cd4142a1c340d3d2e72681e387e1d158e334a","sha256":"2eeea5ad15c963d02def977da085cf3f15392d2222fc592765000accba2f6133","sha512":"e4c70ae418db2a64cfc139cc79eab3187f1abca6af2650a9835e3c499e607e66692c94b6859cd94315003944b76f54155c373a66d3fb135e93225d4806b14ea4","ssdeep":"1536:jmK8Td4y6SKiJd1cPbwatMudU7ul4oH4Dx0TXv:6l4y6SKitktMudxl4oHsOf","tlshash":"b153018c02ec4aaddd27f1baf8726a503d49f2791253e3074de4abf58fc8066a15d309","first_seen":"2023-05-23T16:48:27Z","last_seen":"2026-05-17T05:46:22.687271Z","times_seen":45,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":81,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"d13pxqgp3ixdbh.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"d13pxqgp3ixdbh.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"d1y3y09sav47f5.cloudfront.net/public/external/check.php?it=4199266\u0026time=1762208245379","fqdn":"d1y3y09sav47f5.cloudfront.net","domain":"d1y3y09sav47f5.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"3.167.7.98","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mrbeastgiftfree.netlify.app/","date":"2025-11-03T22:17:25.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /public/external/check.php?it=4199266\u0026time=1762208245379 HTTP/1.1\r\nHost: d1y3y09sav47f5.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrbeastgiftfree.netlify.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-length: 72\r\ndate: Mon, 03 Nov 2025 22:17:25 GMT\r\nx-powered-by: PHP/7.4.11\r\nserver: Apache/2.4.51 () OpenSSL/1.0.2k-fips PHP/7.4.11\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 53019ee090f087ca6c6fa860098bcd80.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: PjY2zcia8eTs0gIWotWz7M_LhrVuqvl8XwiClXg5y6-YveRzhRIlrQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenSSL:1.0.2k","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]},{"name":"Apache HTTP Server:2.4.51","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"PHP:7.4.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":72,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"69d77690ed201acd0627e99dd35c96eb","sha1":"05ffc794be6dae3836ee5df72d82d917323b2941","sha256":"577d248638c57941b7e35d9a19ef4b5d88d52482f6e59254142d4266c57bad38","sha512":"06aaf36275b0c4de82580319878333d973d3cd464f4c09df4281551f4381940dc792eb28c2c84b3a94196b53edf41751b01976ad77c5e393c0b62574c4b214bf","ssdeep":"","tlshash":"32a0220c0c02220f033230b080bbc8280030e3320bc0c3a8282aca8a2e03c3b2a0208e","first_seen":"2023-08-12T16:35:44Z","last_seen":"2026-06-14T22:27:54.022016Z","times_seen":3080,"resource_available":true,"data":null}},"time_used":349,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":348,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mrbeastgiftfree.netlify.app/","date":"2025-11-03T22:17:07.077Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:51 GMT","end":"Mon, 05 Jan 2026 08:38:50 GMT"},"fingerprint":{"sha1":"1D:8E:3A:85:91:AC:63:71:94:8B:0E:61:45:34:D9:86:AB:A6:E2:CE","sha256":"E6:93:4E:53:89:15:41:28:27:59:AA:84:50:96:96:1E:2A:98:7E:08:60:AE:68:62:AE:DD:86:AB:DB:0F:FE:2B"}}},"request":{"raw":"GET /ajax/libs/jquery/2.2.4/jquery.min.js HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrbeastgiftfree.netlify.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nreport-to: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30028\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 30 Oct 2025 09:39:43 GMT\r\nexpires: Fri, 30 Oct 2026 09:39:43 GMT\r\ncache-control: public, max-age=31536000, stale-while-revalidate=2592000\r\nlast-modified: Tue, 03 Mar 2020 19:15:00 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 391044\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":85578,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (32065)","md5":"2f6b11a7e914718e0290410e85366fe9","sha1":"69bb69e25ca7d5ef0935317584e6153f3fd9a88c","sha256":"05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e","sha512":"0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db","ssdeep":"1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2","tlshash":"1e83c6d9b2d6706297b734b850bf410bb17a98dab44c8c60f059d4e47eb4a8e507bf2c","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-15T01:16:33.894428Z","times_seen":284667,"resource_available":true,"data":null}},"time_used":312,"timings":{"blocked":142,"dns":1,"connect":10,"send":0,"wait":9,"receive":8,"ssl":138},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.blogger.com/static/v1/widgets/2263754362-widgets.js","fqdn":"www.blogger.com","domain":"blogger.com","tld":"com"},"ip":{"addr":"142.250.74.105","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mrbeastgiftfree.netlify.app/","date":"2025-11-03T22:17:07.080Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.blogger.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:37:18 GMT","end":"Mon, 05 Jan 2026 08:37:17 GMT"},"fingerprint":{"sha1":"53:D6:04:72:15:45:52:04:C4:A6:93:27:0C:81:AB:99:E7:9E:B5:C3","sha256":"6F:04:2D:52:74:8C:3D:49:3B:D3:DB:78:5D:5F:B6:C9:FD:25:24:69:E4:E7:E8:8D:55:92:AE:0E:E9:CA:C3:79"}}},"request":{"raw":"GET /static/v1/widgets/2263754362-widgets.js HTTP/1.1\r\nHost: www.blogger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrbeastgiftfree.netlify.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"blogger-tech\"\r\nreport-to: {\"group\":\"blogger-tech\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/blogger-tech\"}]}\r\ncontent-length: 51917\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 31 Oct 2025 20:05:15 GMT\r\nexpires: Sat, 31 Oct 2026 20:05:15 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 03 Dec 2024 17:54:04 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 267112\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":148283,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4137)","md5":"e4640162ff32475791a09609f26ccef6","sha1":"b70bbf28644e11940b9912202dd60e1be83a0823","sha256":"a20fb5dab9ec5f2ac4efd96922ce04abf595b243d9cbb43ff5610f763e6b0814","sha512":"e3eb0ec33cafe9dc1b4a4d0b572bc85b21cb628f10a106efd6ee8cf54032a9aeb7a009e178b58e0a8122e6bf2d56f77c136829d803afde393b510b85da217320","ssdeep":"1536:kX2MhntgTtonhQ8S8EOC5doeAx31g9bNAbKjVle/SgB+y/RVNYs9Vo52QUMySusv:rTtDjdoeQ0bNZjRgFM2QU141Li78d","tlshash":"76e30bd8bb9270668373b4b5003f050ff13a75aae848486cb088d8e57e7496a5677f7c","first_seen":"2024-11-29T02:52:05.696214Z","last_seen":"2025-11-03T22:17:41.859102Z","times_seen":303,"resource_available":true,"data":null}},"time_used":273,"timings":{"blocked":111,"dns":4,"connect":8,"send":0,"wait":34,"receive":9,"ssl":103},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d13pxqgp3ixdbh.cloudfront.net/uploads/16835155878748b3ee2e78d26f67f8a25ffdccbacc.png","fqdn":"d13pxqgp3ixdbh.cloudfront.net","domain":"d13pxqgp3ixdbh.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.245.211","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrbeastgiftfree.netlify.app/","date":"2025-11-03T22:17:07.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /uploads/16835155878748b3ee2e78d26f67f8a25ffdccbacc.png HTTP/1.1\r\nHost: d13pxqgp3ixdbh.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrbeastgiftfree.netlify.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 65158\r\ndate: Mon, 03 Nov 2025 06:36:09 GMT\r\nlast-modified: Mon, 08 May 2023 03:13:09 GMT\r\netag: \"133d0d39ff6d11fb644710258199cd5a\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: xbKq67PbSvBnkawBhRHWT9_RqHZsCehV\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: PVvq1R0LlARFWj9_L_HLIYL91aG03MtAbB73Zbt49VOPHkc96PIplg==\r\nage: 56459\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":65158,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 458 x 572, 8-bit colormap, non-interlaced","md5":"133d0d39ff6d11fb644710258199cd5a","sha1":"0d3da5546eb36b2422d3e2316b6b5a7449ff0409","sha256":"ecf4680310b17e123a6750bedd7b0a00372d9d15bb1c5a50d2b8c79873cf8e40","sha512":"0e03abb0e7e9ad38925b046c4619f811f0aebd27d1839594498f67ccb5e7a86634f0adaa76fa1e2da08438893b944018ec4ff6d0adb9cf3b5fbebf637c582ed2","ssdeep":"1536:XxQVH1cmsa/hhrqXs1YDMYaurRMkfCwyZVHp9Ki:u9q/a/hhrqXmxY1f+8i","tlshash":"285312ce5d462170a23dd5aa2312c10d9ef74938ed9c2057d155cebdb3ca7d12d3aa81","first_seen":"2023-05-23T16:48:27Z","last_seen":"2026-05-17T05:46:22.628426Z","times_seen":46,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":38,"dns":0,"connect":0,"send":0,"wait":21,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"d13pxqgp3ixdbh.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"d13pxqgp3ixdbh.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"d13pxqgp3ixdbh.cloudfront.net/uploads/1683515588d9add22281c8e75444fe5ae9fa465d51.png","fqdn":"d13pxqgp3ixdbh.cloudfront.net","domain":"d13pxqgp3ixdbh.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.245.211","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrbeastgiftfree.netlify.app/","date":"2025-11-03T22:17:07.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /uploads/1683515588d9add22281c8e75444fe5ae9fa465d51.png HTTP/1.1\r\nHost: d13pxqgp3ixdbh.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrbeastgiftfree.netlify.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 41703\r\nlast-modified: Mon, 08 May 2023 03:13:09 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: gjUoHvKSthHGQviyf3Wy63xE8leLIj2c\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 03 Nov 2025 07:19:27 GMT\r\netag: \"029baf671bd7510748af724461e90b08\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: i5sSFW-wr1qYaSdaMT1I3tqJbg5cYp59GTbG_UjTYxP0IL0m0ymykA==\r\nage: 53861\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":41703,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 458 x 572, 8-bit colormap, non-interlaced","md5":"029baf671bd7510748af724461e90b08","sha1":"f67ad74f438cf5a152164e30b9b02f4be463c3e4","sha256":"3ff4716e0ff098c7d31fe3f08d64104ed619df346fa7b4278b53e5dc93840684","sha512":"48041cdfbc7c5e6b49de4ed4e6584fc52627c5c5a4935489bd7ae08ede4ce5a75fd6987005a44cc41d7cb0d81c40ef2c66084282cfe5830bd5de54f0060e66a0","ssdeep":"768:T1fq/g8L4lbGi3zMd23Cu8dACccGm6fnBr0jgfyI+f/T29zO:1qY8LSbGO31jPxpnor29zO","tlshash":"e0130109899ea4e8caf59429018954c7bb03d5f2e3cfc84f839e1c5c6b9ba61c355dcd","first_seen":"2023-05-23T16:48:27Z","last_seen":"2026-05-17T05:46:22.678004Z","times_seen":45,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":37,"dns":0,"connect":0,"send":0,"wait":36,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"d13pxqgp3ixdbh.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"d13pxqgp3ixdbh.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"d13pxqgp3ixdbh.cloudfront.net/uploads/1683515581c543e9517e74262f450f0d5c3c8a40d2.png","fqdn":"d13pxqgp3ixdbh.cloudfront.net","domain":"d13pxqgp3ixdbh.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.245.211","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrbeastgiftfree.netlify.app/","date":"2025-11-03T22:17:07.797Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /uploads/1683515581c543e9517e74262f450f0d5c3c8a40d2.png HTTP/1.1\r\nHost: d13pxqgp3ixdbh.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrbeastgiftfree.netlify.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 36887\r\nlast-modified: Mon, 08 May 2023 03:13:02 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 8dIH_USFx0SZe_16F12V6XMfYAdppMTv\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 03 Nov 2025 09:01:39 GMT\r\netag: \"4c0b0d49825729cdb2543c56def1f17e\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: Pk4WYi_fkWutsOfUg3AS4ctV6dYVfTmQdyEfhLj_nF7ARzF2abFhLw==\r\nage: 47729\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":36887,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 458 x 572, 8-bit colormap, non-interlaced","md5":"4c0b0d49825729cdb2543c56def1f17e","sha1":"b0c6164ebbd23ad78c10bf3dda002559f7c9573a","sha256":"771fa8f69d0a07015b8840abb4cedc9666b97fb0806e2775a3bafa0e0420c000","sha512":"16046d7271569442cf454f508bee7b555371f531845cb5d01c96f8c2e1619058567e9a4bb393f7dc1f61739bf3048e272d9eaa899741fda61fc61c0f1505f995","ssdeep":"768:Udy4djvDviq26pBINHm6J9BA+nE11spDBIeiqb7v6J95cIF9KZGBoWKUDQW:UZJDvwwWNHm6HBHng1sDI8bUx9KooWKK","tlshash":"4af2f12c149ad44b2de56478a9ebf1d58cf405eb7bcf7f501ce416e0b6e602a02303ae","first_seen":"2023-05-23T16:48:27Z","last_seen":"2026-05-17T05:46:22.745794Z","times_seen":45,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":12,"dns":0,"connect":0,"send":0,"wait":71,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"d13pxqgp3ixdbh.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"d13pxqgp3ixdbh.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}