{"report_id":"a1bd122a-9d9a-421c-bc0c-54c9049676aa","version":0,"status":"done","tags":[],"date":"2026-09-04T14:38:28Z","url":{"schema":"http","addr":"looloobot.com/","fqdn":"looloobot.com","domain":"looloobot.com","tld":"com"},"ip":{"addr":"172.67.206.27","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"looloobot.com/","fqdn":"looloobot.com","domain":"looloobot.com","tld":"com"},"title":"LoolooBot: Automated Polymarket Bot for 5-Minute Crypto Rounds","dom":{"size":83486,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1438)","md5":"33a8c5592a229242657b50e6d7f6706f","sha1":"113aafc582fc9a9e99fdf9a93f6d703e70a3ecb3","sha256":"76a7c79a94851224ad735c1988e5b6e87b9110a8ddaef80103c4c97a7cc0914e","sha512":"f89dd2d67d6981879da7ace545df918e8714534b97075a54f5ff4b3a1deb0111cca954364baa903f3081e96df7d86c2a5c49fcd260eca829e3c457d7be22ca38","ssdeep":"1536:y04KDLvZwLaWP5xog1yYq31yYqtiWc3zzBY6jV0Cs8:MmpZ0y","tlshash":"44839471d1f4143e7023c4dd936a7b5a3595714be6060758b2ac32b0afdeda2bc236b8","dom_hash":"domhashe459d70aa48aaab6303b76c730c49178","first_seen":"2026-09-04T14:38:33.729157Z","last_seen":"2026-09-04T14:38:33.729157Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"looloobot.com/","fqdn":"looloobot.com","domain":"looloobot.com","tld":"com"},"ip":{"addr":"172.67.206.27","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-09T14:38:28Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"looloobot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-30T22:22:21.72184Z","alert_count":0,"request_count":9,"received_data":321880,"sent_data":5021,"comment":"","tags":null,"fingerprints":null},{"fqdn":"looloobot.com","ip":{"addr":"104.21.42.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-08-18","domain_rank":0,"first_seen":"2026-09-04T14:38:29.296499Z","last_seen":"2026-09-04T14:38:29.296499Z","alert_count":11,"request_count":11,"received_data":1060818,"sent_data":5722,"comment":"","tags":null,"fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-08-30T22:35:21.728174Z","alert_count":0,"request_count":1,"received_data":520294,"sent_data":476,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-30T22:24:29.229878Z","alert_count":0,"request_count":1,"received_data":14829,"sent_data":570,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"looloobot.com/","fqdn":"looloobot.com","domain":"looloobot.com","tld":"com"},"ip":{"addr":"104.21.42.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f850c8a8366d23ee0e58007c60118d7f","sha1":"fc71367597a3eb975537a94ee8f2fb617d9dcd32","sha256":"5444ffd27dba837883faf8bbd1f2f5b154610d291bea4396652b4bbd2fe39a6a","sha512":"9f65b42317f0dffaba59b75ec25cf1131b923d8e48fe30b9d9912bef5491cd76fb886bf5fee8c6a3b6e015d8b35166203e3cdb980f910bcb878e2aaeb579c867","ssdeep":"","tlshash":"bac08c8c210b0cb142a72e050b7fa600b0063201a490ea31190a22048f20d03e784828","size":154,"data":"","first_seen":"2026-09-04T14:38:33.743836Z","last_seen":"2026-09-04T14:38:33.743836Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"looloobot.com/","fqdn":"looloobot.com","domain":"looloobot.com","tld":"com"},"ip":{"addr":"104.21.42.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"010777e798a7dcb134ef41428bee1f1e","sha1":"093871a6492eefe74e550b399d74162e2005ea4e","sha256":"824ced40b99d550b012b3884d09e729c78ca1e63776b3636a6fef1f80136a9a6","sha512":"64cb98cfd6b14c81a526980f64ed7492e3968d0ba23b2fb9d2bea0db45a6b8d3d2adca183fff5e7a1e81efac91fea928aaf29de4abb0094bae4112055d345737","ssdeep":"192:2KCfqTv1VUq4fFBKvac1oeJgiWQ6koIxOoYIvl+gZxiS1h7lqNy:BzTUFBKvac1dbWQ6VIxJRnxP1hl6y","tlshash":"dcf1d76a50f36033242380fa536f1b0a5da92e033656c591739c67a59fc6e34b46beec","size":7565,"data":"","first_seen":"2026-09-04T14:38:33.744877Z","last_seen":"2026-09-04T14:38:33.744877Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"looloobot.com/","fqdn":"looloobot.com","domain":"looloobot.com","tld":"com"},"ip":{"addr":"104.21.42.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1490cefa14a833c0cb15ce3aa77ae198","sha1":"752dac7429468cac27876d9f88cfc9521b1e0f45","sha256":"62a1d32ebb28671302ef337011fc391907182f049ea580d68d9167551d9cbfca","sha512":"f77c1361829424fc94b64bd35b2672349b0ceb8721608e0c89382fab0084853c1c69f5d9e57e7d9c88f2812ed30d766f88eb8b039431170580a2f787d66d8ca4","ssdeep":"","tlshash":"8df0abab7d721b7128db04a796ef23c435a2449f2667e140ff1cd4346f278804438ee6","size":456,"data":"","first_seen":"2026-09-04T14:38:33.74593Z","last_seen":"2026-09-04T14:38:33.74593Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-HV0F3FRDVC","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6bfd93f6563ae8f7f2d11eb7e1bf9c1f","sha1":"9d8fc536f09cdec319cb923f43ffd37ad7a422b6","sha256":"ee9c47aca4935970b41e702b229798b6af6d07bf555beb7b2fc98af4dd2132b0","sha512":"1bce41c9144e419ebe0f002d5f69226f720ebf8b833cc8a0aefed6c8f32f59aba3195c783ccfc49eb9a351a1b9a5db8a16eaee4e4fd89080bc8d172dcd856525","ssdeep":"6144:oTT/1jihusz/QZBrRQ6OuhxizcHR/EEQv3sk70y5CY1vrztHo9L:A5AoZMcS0y5xvvSZ","tlshash":"66b409cd73c674229396f178903f018ba57b28a2b45cc89af289dce42d3469a5177f7c","size":519690,"data":"","first_seen":"2026-09-04T14:38:33.733544Z","last_seen":"2026-09-04T14:38:33.733544Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/fredoka/v17/X7n64b87HvSqjb_WIi2yDCRwoQ_k7367_DWu89U.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://looloobot.com/","date":"2026-09-04T14:37:57.601Z","timestamp":1788532677601,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/fredoka/v17/X7n64b87HvSqjb_WIi2yDCRwoQ_k7367_DWu89U.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://looloobot.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29732\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 02 Sep 2026 10:33:10 GMT\r\nexpires: Thu, 02 Sep 2027 10:33:10 GMT\r\ncache-control: public, max-age=31536000\r\nage: 187487\r\nlast-modified: Wed, 10 Sep 2025 16:42:18 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29732,"size_decoded":30545,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29732, version 1.0","md5":"9591efe1be62434d2d107e2b19702029","sha1":"6438e7de08adb0a989e1947ff06284771f884eb6","sha256":"99d6c78e043710d4f83ed90716779798b7b04eb690f73e0ad0e8f32d1f0e98c2","sha512":"3cc3323210ab19dc07513ef4df0bc9eb7b85b0143fa39c37d79b6fdb1b8309d34b96c452f264d3ab3a409b5a75c6872d48c22f54aead05e78454004106546067","ssdeep":"384:fNPmz/ALfS8CKEhoIqMViQziPMBdrB2PasMyqhdJf00dHmgJIW+uvTVsRZBhW7AC:8zoRCKEhTkQJdrQXqJf00GpubVsRZtI","tlshash":"0bd2f104c9605335c6ec64b69b114a7bffed488265e2b9d520a8eea61761fc8e09053f","first_seen":"2025-09-12T15:30:51.751475Z","last_seen":"2026-09-04T14:38:33.730676Z","times_seen":970,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"looloobot.com/api/whales","fqdn":"looloobot.com","domain":"looloobot.com","tld":"com"},"ip":{"addr":"104.21.42.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://looloobot.com/","date":"2026-09-04T14:38:05.583Z","timestamp":1788532685583,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"looloobot.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 12:14:08 GMT","end":"Mon, 16 Nov 2026 13:12:58 GMT"},"fingerprint":{"sha1":"EA:E9:62:A5:11:8C:69:DA:70:66:C0:9E:2A:13:17:7A:46:BF:F0:39","sha256":"5D:F8:86:D9:05:C0:62:83:B8:65:D2:29:1A:D9:D8:8D:A4:27:E7:ED:BC:25:76:59:F1:AB:01:43:0D:FF:3D:90"}}},"request":{"raw":"GET /api/whales HTTP/1.1\r\nHost: looloobot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://looloobot.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_HV0F3FRDVC=GS2.1.s1788532677$o1$g0$t1788532677$j60$l0$h0; _ga=GA1.1.890946082.1788532678\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 14:38:05 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"5f6-Gc5Mb0UX/3U9m8HSh9cC1rXs+pk\"\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9K%2Bu3ISjV4QClVyeAl3ADfIAFot6wwahllu2aptqgh%2F2qpb8VddqPDWp2WnzDq3sS2LsnjTrbeBwDR5cwOvoFrwS99dH8v7Ip1Ny9MxvmoAsbRLD%2BcPcmZX0dyqCReku\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a35dbc64e8eab503-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1526,"size_decoded":1454,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b557d32615f93b7f8222786a1a2234a2","sha1":"19ce4c6f4517ff753d9bc1d287d702d6b5ecfa99","sha256":"72f45b2a3eb5eecf5cb00e666f72008c075a70c6f5543f0641102a4e79fb6eea","sha512":"d25cc5c9f86047645ac3677f277fe5d5cd32c85d0f4ace8e4b6f3e2bb9bb7515d260442c48f35223229e313b00593e4386025592ca99f52da73c310d88db3173","ssdeep":"","tlshash":"9f311e4482ab9b7d408acf543d5259bdb08b038f5dcd04d890dacfd8e9a0e780937dca","first_seen":"2026-09-04T14:38:33.731306Z","last_seen":"2026-09-04T14:38:33.731306Z","times_seen":1,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"looloobot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"looloobot.com/api/prices","fqdn":"looloobot.com","domain":"looloobot.com","tld":"com"},"ip":{"addr":"104.21.42.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://looloobot.com/","date":"2026-09-04T14:38:12.497Z","timestamp":1788532692497,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"looloobot.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 12:14:08 GMT","end":"Mon, 16 Nov 2026 13:12:58 GMT"},"fingerprint":{"sha1":"EA:E9:62:A5:11:8C:69:DA:70:66:C0:9E:2A:13:17:7A:46:BF:F0:39","sha256":"5D:F8:86:D9:05:C0:62:83:B8:65:D2:29:1A:D9:D8:8D:A4:27:E7:ED:BC:25:76:59:F1:AB:01:43:0D:FF:3D:90"}}},"request":{"raw":"GET /api/prices HTTP/1.1\r\nHost: looloobot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://looloobot.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_HV0F3FRDVC=GS2.1.s1788532677$o1$g0$t1788532677$j60$l0$h0; _ga=GA1.1.890946082.1788532678\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 14:38:12 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=166GJWQsPfEoUZeLuq1Guiqpu9psWXTjw8EEvshv6OO4fSJQ3PSEKuBQ1soK%2FBGd2sw%2BNuCWn4BWXF0Wsf5mWhwoLrXc7TpS%2FkusYK0Kdk%2BFCb31GpA7H6zz2DCUg186\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"fc-ZVQoT9plkhJGMRAPLrwLv7Rw6Cc\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a35dbc902c0fb503-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":252,"size_decoded":786,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7259fc13aba225140d79398aeb6345d6","sha1":"6554284fda6592124631100f2ebc0bbfb470e827","sha256":"e8f35dce57b9654a410365ad8471f82d4d27eca93cc7de9468bf816f889e199d","sha512":"eec651afb2838c72ae1527cfcacc37667a53583081b45d725074a9367ff44e5604de8ac34c7b24306aac35b1664163a6607c57aaea2e0305fbcabe53620bbd2b","ssdeep":"","tlshash":"4dd0926f1b240177852873789a087751d8778379421dcf091bacf66e681ecffa0116e1","first_seen":"2026-09-04T14:38:33.732307Z","last_seen":"2026-09-04T14:38:33.732307Z","times_seen":1,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"looloobot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"looloobot.com/api/whales","fqdn":"looloobot.com","domain":"looloobot.com","tld":"com"},"ip":{"addr":"104.21.42.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://looloobot.com/","date":"2026-09-04T14:38:13.589Z","timestamp":1788532693589,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"looloobot.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 12:14:08 GMT","end":"Mon, 16 Nov 2026 13:12:58 GMT"},"fingerprint":{"sha1":"EA:E9:62:A5:11:8C:69:DA:70:66:C0:9E:2A:13:17:7A:46:BF:F0:39","sha256":"5D:F8:86:D9:05:C0:62:83:B8:65:D2:29:1A:D9:D8:8D:A4:27:E7:ED:BC:25:76:59:F1:AB:01:43:0D:FF:3D:90"}}},"request":{"raw":"GET /api/whales HTTP/1.1\r\nHost: looloobot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://looloobot.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_HV0F3FRDVC=GS2.1.s1788532677$o1$g0$t1788532677$j60$l0$h0; _ga=GA1.1.890946082.1788532678\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 14:38:13 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"5f6-Gc5Mb0UX/3U9m8HSh9cC1rXs+pk\"\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mCbd8W8IDb0YTXz%2FpFGTrlIJIpiIf%2BiONeaY5IhN4QVHA8I0KRiCWWUTPI%2FiolAZbENuEgWZ3ERIPBRaEuvzuG%2FrZT2P994gMmHxTe1CliOZ6uv6i6l9kNDi%2FbPijyRV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a35dbc970c7fb503-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1526,"size_decoded":1458,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b557d32615f93b7f8222786a1a2234a2","sha1":"19ce4c6f4517ff753d9bc1d287d702d6b5ecfa99","sha256":"72f45b2a3eb5eecf5cb00e666f72008c075a70c6f5543f0641102a4e79fb6eea","sha512":"d25cc5c9f86047645ac3677f277fe5d5cd32c85d0f4ace8e4b6f3e2bb9bb7515d260442c48f35223229e313b00593e4386025592ca99f52da73c310d88db3173","ssdeep":"","tlshash":"9f311e4482ab9b7d408acf543d5259bdb08b038f5dcd04d890dacfd8e9a0e780937dca","first_seen":"2026-09-04T14:38:33.731306Z","last_seen":"2026-09-04T14:38:33.731306Z","times_seen":1,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":179,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"looloobot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-HV0F3FRDVC","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://looloobot.com/","date":"2026-09-04T14:37:57.357Z","timestamp":1788532677357,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:41 GMT","end":"Mon, 02 Nov 2026 08:37:40 GMT"},"fingerprint":{"sha1":"DC:E6:38:9B:82:DB:20:21:19:E7:95:FC:30:E0:F0:F4:BC:CA:9A:1C","sha256":"2C:0E:42:66:EE:BA:84:59:3C:53:EB:87:C0:84:DD:32:F4:42:73:26:47:8C:4E:56:F9:5B:47:6C:AF:BA:C2:F9"}}},"request":{"raw":"GET /gtag/js?id=G-HV0F3FRDVC HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://looloobot.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Fri, 04 Sep 2026 14:37:57 GMT\r\nexpires: Fri, 04 Sep 2026 14:37:57 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 173967\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":519690,"size_decoded":174571,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6698)","md5":"6bfd93f6563ae8f7f2d11eb7e1bf9c1f","sha1":"9d8fc536f09cdec319cb923f43ffd37ad7a422b6","sha256":"ee9c47aca4935970b41e702b229798b6af6d07bf555beb7b2fc98af4dd2132b0","sha512":"1bce41c9144e419ebe0f002d5f69226f720ebf8b833cc8a0aefed6c8f32f59aba3195c783ccfc49eb9a351a1b9a5db8a16eaee4e4fd89080bc8d172dcd856525","ssdeep":"6144:oTT/1jihusz/QZBrRQ6OuhxizcHR/EEQv3sk70y5CY1vrztHo9L:A5AoZMcS0y5xvvSZ","tlshash":"66b409cd73c674229396f178903f018ba57b28a2b45cc89af289dce42d3469a5177f7c","first_seen":"2026-09-04T14:38:33.733544Z","last_seen":"2026-09-04T14:38:33.733544Z","times_seen":1,"resource_available":true,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":40,"receive":51,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Fredoka:wght@400;500;600;700\u0026family=Nunito:wght@400;600;700;800;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://looloobot.com/","date":"2026-09-04T14:37:57.360Z","timestamp":1788532677360,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css2?family=Fredoka:wght@400;500;600;700\u0026family=Nunito:wght@400;600;700;800;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://looloobot.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 04 Sep 2026 14:37:57 GMT\r\ndate: Fri, 04 Sep 2026 14:37:57 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14145,"size_decoded":1531,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"4e50b91abfcc6e2aecae7103333b186b","sha1":"ce626c753ed24d174cc173101f370da4012fffd6","sha256":"bdb5591ba6947c5d72610883b077665b4dad64a9c2f3a9f40174e3eef004694d","sha512":"3c44ccdf5a9016ef12d8cb606f4ffc6632f4f8967eab9557dd22bd3bf331fa4311f2b740b94814a464f8d131a9ceac096a021654d139f7643a1e190c0ea87135","ssdeep":"192:ZbYbIzb+b3bIEbvbGbI5bwbtbICbyH+yptkUkH0yXLkeLHbywkkdiHyy1RkoRHh9:FgwGLbzeuoRhul6DPe9hjcq","tlshash":"f952bc91041bd100eb832cc267df7e36ed4e61513818c57aebfd9898ecabd225365b1e","first_seen":"2026-03-24T02:28:31.17872Z","last_seen":"2026-09-04T14:38:33.734787Z","times_seen":15,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":34,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"looloobot.com/tutorial-hd.mp4","fqdn":"looloobot.com","domain":"looloobot.com","tld":"com"},"ip":{"addr":"104.21.42.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://looloobot.com/","date":"2026-09-04T14:37:57.589Z","timestamp":1788532677589,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"looloobot.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 12:14:08 GMT","end":"Mon, 16 Nov 2026 13:12:58 GMT"},"fingerprint":{"sha1":"EA:E9:62:A5:11:8C:69:DA:70:66:C0:9E:2A:13:17:7A:46:BF:F0:39","sha256":"5D:F8:86:D9:05:C0:62:83:B8:65:D2:29:1A:D9:D8:8D:A4:27:E7:ED:BC:25:76:59:F1:AB:01:43:0D:FF:3D:90"}}},"request":{"raw":"GET /tutorial-hd.mp4 HTTP/1.1\r\nHost: looloobot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://looloobot.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 14:37:58 GMT\r\ncontent-type: video/mp4\r\nserver-timing: cfExtPri\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"e9a4a8-1a0199b0a57\"\r\ncache-control: public, max-age=14400\r\nlast-modified: Wed, 19 Aug 2026 10:39:46 GMT\r\ncontent-range: bytes 0-15312039/15312040\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aSuMUcQEvQm6WDSYMOj6Y0TvGG11Cw0yIvH4JOtqgxsWLpgdyoaXRxsXTprqhvFc5jg7vPSgFvKdOwOKNgdogzrp2lVViUfOcmFPv68ZBfU3tUlAWQ%2BsWPaWP1kkLmi7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a35dbc32fd2db503-OSL\r\ncontent-length: 15312040\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":900803,"size_decoded":901516,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"b44ae4d293b335a53515e5c8db890dde","sha1":"ecc5bc342ce45f5e94a15da4daebfed79543f379","sha256":"0c706853daaa583791d652fdcada5e4f490ab3fc856ab37ea3efa5a676afae07","sha512":"1eaca0a2c75846ecef5af60be26bfc0e555a92e5cf51e0adf2bf805d99530a27e3ff0851d5315eab00b04193da73e71aa36b1492b1717f0ae8b29e0e886ad848","ssdeep":"12288:tGsD/EgQSClyXMf9Ve1OtvwyGDS0xYAnS4bExGbLsCSU5nipANKLe/asXNTGfsFv:tvr8SC3fA2AihxGbACSUZxYK9VesFv","tlshash":"ec15ef0af7e9162bdc32877095e24328b771e969274743cf96c4ab7cbc1a3a82d431d5","first_seen":"2026-09-04T14:38:33.73604Z","last_seen":"2026-09-04T14:38:33.73604Z","times_seen":1,"resource_available":false,"data":null}},"time_used":884,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":439,"receive":445,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"looloobot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"looloobot.com/api/whales","fqdn":"looloobot.com","domain":"looloobot.com","tld":"com"},"ip":{"addr":"104.21.42.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://looloobot.com/","date":"2026-09-04T14:38:21.640Z","timestamp":1788532701640,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"looloobot.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 12:14:08 GMT","end":"Mon, 16 Nov 2026 13:12:58 GMT"},"fingerprint":{"sha1":"EA:E9:62:A5:11:8C:69:DA:70:66:C0:9E:2A:13:17:7A:46:BF:F0:39","sha256":"5D:F8:86:D9:05:C0:62:83:B8:65:D2:29:1A:D9:D8:8D:A4:27:E7:ED:BC:25:76:59:F1:AB:01:43:0D:FF:3D:90"}}},"request":{"raw":"GET /api/whales HTTP/1.1\r\nHost: looloobot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://looloobot.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_HV0F3FRDVC=GS2.1.s1788532677$o1$g0$t1788532677$j60$l0$h0; _ga=GA1.1.890946082.1788532678\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 14:38:21 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"59b-UAopwvmj79cmemx+ZWr7WgC/k4Y\"\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BcyiIAlLqORgCA3axbqn0TmQuZHSLyAKT1CfQ7TWm2%2FzUDB4bb81JJ%2BnW5hsUCv65yFfEF2t9g4V%2FxW4D%2B78DGnT2KbVjSdW5NqAeVssViA1T8YbN15%2FNw4KtsCkhO5h\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a35dbcc94e29b503-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1435,"size_decoded":1373,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d81e8f4f5652f80461cbcf9277a30e45","sha1":"500a29c2f9a3efd7267a6c7e656afb5a00bf9386","sha256":"c972530c89d87ef247daf667baefa8e66f31529df1e5f0e63ff4a6ad3d486325","sha512":"02908e7c5725d617339908571421b29484f17ef1e6d9a20edffe9db496e4b8ddab8eaeeab1b5f97a9e176c7413c4981b3942536070709cb31724976e106f2c14","ssdeep":"","tlshash":"4321ce58620eafbe0139db582d5299beb2c7134f1f8c1586c88fce5499d89108a22cc6","first_seen":"2026-09-04T14:38:33.737196Z","last_seen":"2026-09-04T14:38:33.737196Z","times_seen":1,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":214,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"looloobot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"looloobot.com/","fqdn":"looloobot.com","domain":"looloobot.com","tld":"com"},"ip":{"addr":"104.21.42.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-04T14:37:56.731Z","timestamp":1788532676731,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"looloobot.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 12:14:08 GMT","end":"Mon, 16 Nov 2026 13:12:58 GMT"},"fingerprint":{"sha1":"EA:E9:62:A5:11:8C:69:DA:70:66:C0:9E:2A:13:17:7A:46:BF:F0:39","sha256":"5D:F8:86:D9:05:C0:62:83:B8:65:D2:29:1A:D9:D8:8D:A4:27:E7:ED:BC:25:76:59:F1:AB:01:43:0D:FF:3D:90"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: looloobot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 14:37:56 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xu0FUBr1Cdqs9PfRRLdAdYtFGnUSq5wu%2Bv4XtTosV0j%2FSYpKjHv6UT7h00mte4buiGAK2pI6690Mwxa6%2Bb35JKSXf%2FeVZprLi61gmjE7GuoVBhNifQyyTE%2FwGxoLbW9S\"}]}\r\npriority: u=0,i\r\nx-powered-by: Express\r\ncache-control: public, max-age=0\r\nlast-modified: Wed, 19 Aug 2026 17:07:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a35dbc2dece4b503-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}],"data":{"size":71481,"size_decoded":20398,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (548)","md5":"ef0577b7ced6142ff223cbb289c0fe65","sha1":"6d495ce71e937a711611d7f8478303d9555a1886","sha256":"0af4c58c84848c1ae775ad8e6145e864f1423657651f657bfcb5a41f854b455b","sha512":"d8e676bb35feed8589f72a1dbecf75ea3958d1d615bea07c44e7624f48cbf20dbf1dbc9e2959c2f1ed7569f7634d2c2302af834bbc5fcc2192569309ad6a9de7","ssdeep":"768:Eaa476u4KDLBi0urI65YZwLaWrU25zGZPIFWGzMzTUFBKvacfN6VSzxzsFM+dj0Y:B94KDLvZwLaWP5eqWcMzBY60p0f5e","tlshash":"1663c67190e8203e7423c89d937a7a5a35557047f60a0358b66c72a09fdfda7ec632b8","first_seen":"2026-09-04T14:38:33.738594Z","last_seen":"2026-09-04T14:38:33.738594Z","times_seen":1,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":20,"connect":30,"send":0,"wait":162,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"looloobot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://looloobot.com/","date":"2026-09-04T14:37:57.501Z","timestamp":1788532677501,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://looloobot.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 04 Sep 2026 10:29:37 GMT\r\nexpires: Sat, 04 Sep 2027 10:29:37 GMT\r\ncache-control: public, max-age=31536000\r\nage: 14900\r\nlast-modified: Mon, 15 Sep 2025 17:03:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39128,"size_decoded":39940,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39128, version 1.0","md5":"166202cc391c71a57730bed12cbcb159","sha1":"76388dbfe374be06fdc6f9ba38d3f4e479025eeb","sha256":"ba344451eab25b217a165363b1982048a5e5830a0daf36577973955a04cac793","sha512":"9f4d1c14aa729e837b964898a1dd27e99ff674256c43326aa982cc0c17fa8b0d71a0b7df627f03cb4ac6ec7f22f0a19d65302743ff09187ce81414dde74c43e2","ssdeep":"768:lxbc6Qon+A9wOfdj2rELqjOmaLqLqKeI+00t0xIj:layndm0j2cqjOmGq+tbUIj","tlshash":"d9030284fd6a02d8c7fc1f6ef25a9f28272c2078440b6a9c44a79a6bd5975f84dd3330","first_seen":"2025-09-17T01:48:11.920934Z","last_seen":"2026-09-04T19:07:09.722545Z","times_seen":51568,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":53,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/fredoka/v17/X7n64b87HvSqjb_WIi2yDCRwoQ_k7367_DWu89U.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://looloobot.com/","date":"2026-09-04T14:37:57.503Z","timestamp":1788532677503,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/fredoka/v17/X7n64b87HvSqjb_WIi2yDCRwoQ_k7367_DWu89U.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://looloobot.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29732\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 02 Sep 2026 10:33:10 GMT\r\nexpires: Thu, 02 Sep 2027 10:33:10 GMT\r\ncache-control: public, max-age=31536000\r\nage: 187487\r\nlast-modified: Wed, 10 Sep 2025 16:42:18 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29732,"size_decoded":30545,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29732, version 1.0","md5":"9591efe1be62434d2d107e2b19702029","sha1":"6438e7de08adb0a989e1947ff06284771f884eb6","sha256":"99d6c78e043710d4f83ed90716779798b7b04eb690f73e0ad0e8f32d1f0e98c2","sha512":"3cc3323210ab19dc07513ef4df0bc9eb7b85b0143fa39c37d79b6fdb1b8309d34b96c452f264d3ab3a409b5a75c6872d48c22f54aead05e78454004106546067","ssdeep":"384:fNPmz/ALfS8CKEhoIqMViQziPMBdrB2PasMyqhdJf00dHmgJIW+uvTVsRZBhW7AC:8zoRCKEhTkQJdrQXqJf00GpubVsRZtI","tlshash":"0bd2f104c9605335c6ec64b69b114a7bffed488265e2b9d520a8eea61761fc8e09053f","first_seen":"2025-09-12T15:30:51.751475Z","last_seen":"2026-09-04T14:38:33.730676Z","times_seen":970,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":29,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"looloobot.com/api/prices","fqdn":"looloobot.com","domain":"looloobot.com","tld":"com"},"ip":{"addr":"104.21.42.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://looloobot.com/","date":"2026-09-04T14:37:57.515Z","timestamp":1788532677515,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"looloobot.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 12:14:08 GMT","end":"Mon, 16 Nov 2026 13:12:58 GMT"},"fingerprint":{"sha1":"EA:E9:62:A5:11:8C:69:DA:70:66:C0:9E:2A:13:17:7A:46:BF:F0:39","sha256":"5D:F8:86:D9:05:C0:62:83:B8:65:D2:29:1A:D9:D8:8D:A4:27:E7:ED:BC:25:76:59:F1:AB:01:43:0D:FF:3D:90"}}},"request":{"raw":"GET /api/prices HTTP/1.1\r\nHost: looloobot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://looloobot.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 14:37:58 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GGG4M6qxnVVOwLU4VqEnsFrxCuKH5iB7%2Fk71FqswGsg1NEq0%2BpiQ1Ymy9zOW%2FgKFlVzSOMqHJ6ihdNPQSwq94VaUznplIUaZI%2F%2F2wvTp3MQx%2BEJ12qVraydkLiygwouZ\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"ee-mHBBfBGb2c8WwlFJtv5RtfIr60s\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a35dbc327d29b503-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":238,"size_decoded":780,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"3054e7b78daa555cd2211b5d1aca461b","sha1":"9870417c119bd9cf16c25149b6fe51b5f22beb4b","sha256":"858e3c0460784e20942b738039f3cbb8f9e50e2b13d6bd832a3f5dde259c3793","sha512":"266b643934e63a4ed5ca8947b3ed348c350c44cb0bc124f1b136ab346b1dda387ed2e9484104830e815d05ff898fa623df78aa553650d2aeddcc1ca06a3bda08","ssdeep":"","tlshash":"73d0c96f0b3401774929737859087740d8778379410dcf091bacf56e681dcff60116e1","first_seen":"2026-09-04T14:38:33.74057Z","last_seen":"2026-09-04T14:38:33.74057Z","times_seen":1,"resource_available":false,"data":null}},"time_used":602,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":602,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"looloobot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"looloobot.com/api/whales","fqdn":"looloobot.com","domain":"looloobot.com","tld":"com"},"ip":{"addr":"104.21.42.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://looloobot.com/","date":"2026-09-04T14:37:57.516Z","timestamp":1788532677516,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"looloobot.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 12:14:08 GMT","end":"Mon, 16 Nov 2026 13:12:58 GMT"},"fingerprint":{"sha1":"EA:E9:62:A5:11:8C:69:DA:70:66:C0:9E:2A:13:17:7A:46:BF:F0:39","sha256":"5D:F8:86:D9:05:C0:62:83:B8:65:D2:29:1A:D9:D8:8D:A4:27:E7:ED:BC:25:76:59:F1:AB:01:43:0D:FF:3D:90"}}},"request":{"raw":"GET /api/whales HTTP/1.1\r\nHost: looloobot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://looloobot.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 14:37:57 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"5f6-Gc5Mb0UX/3U9m8HSh9cC1rXs+pk\"\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K%2BTllt1nvRsqUIAs322U2P2f5ZuUALNXZSAsKRzyaPR6JwLYRwJF2aXZPO8pekXaZH6i%2BHk2XzXvMRx1gxlvYnq19c14NM93IurXH%2B%2BrqZOXmaJK2O8t0rBR4H1MKWmZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a35dbc327d28b503-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1526,"size_decoded":1456,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b557d32615f93b7f8222786a1a2234a2","sha1":"19ce4c6f4517ff753d9bc1d287d702d6b5ecfa99","sha256":"72f45b2a3eb5eecf5cb00e666f72008c075a70c6f5543f0641102a4e79fb6eea","sha512":"d25cc5c9f86047645ac3677f277fe5d5cd32c85d0f4ace8e4b6f3e2bb9bb7515d260442c48f35223229e313b00593e4386025592ca99f52da73c310d88db3173","ssdeep":"","tlshash":"9f311e4482ab9b7d408acf543d5259bdb08b038f5dcd04d890dacfd8e9a0e780937dca","first_seen":"2026-09-04T14:38:33.731306Z","last_seen":"2026-09-04T14:38:33.731306Z","times_seen":1,"resource_available":false,"data":null}},"time_used":356,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":356,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"looloobot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"looloobot.com/tutorial-poster.jpg","fqdn":"looloobot.com","domain":"looloobot.com","tld":"com"},"ip":{"addr":"104.21.42.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://looloobot.com/","date":"2026-09-04T14:37:57.366Z","timestamp":1788532677366,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"looloobot.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 12:14:08 GMT","end":"Mon, 16 Nov 2026 13:12:58 GMT"},"fingerprint":{"sha1":"EA:E9:62:A5:11:8C:69:DA:70:66:C0:9E:2A:13:17:7A:46:BF:F0:39","sha256":"5D:F8:86:D9:05:C0:62:83:B8:65:D2:29:1A:D9:D8:8D:A4:27:E7:ED:BC:25:76:59:F1:AB:01:43:0D:FF:3D:90"}}},"request":{"raw":"GET /tutorial-poster.jpg HTTP/1.1\r\nHost: looloobot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://looloobot.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 14:37:57 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nx-powered-by: Express\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Wed, 19 Aug 2026 10:39:46 GMT\r\netag: W/\"11dbf-1a0199b0a5a\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ndKQ3BwOu2PNO2EOYouZgLAOj0bAmM40k0MrWdmsv0ot%2BHUrsqsePPT6tI9BevuTtd8qhWCAjUWameRaHmwqY8H5s5H0cFyq6tBjG6UZi8fE5FK1E7I%2BFddYrAAQuMPP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a35dbc318d24b503-OSL\r\ncontent-length: 73151\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":73151,"size_decoded":73840,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 1520x824, components 3","md5":"28f37f538363861d8f6845f8ef7f6ea4","sha1":"01af9dbbebe5efd751be1530911d45bb25d18828","sha256":"d37dd3e64c67927123df371e0e8410dfc965b8dfe861d666a62f8fe61be99646","sha512":"81faeefaa3f51f70c8a295ecef9e2975fe088780379b6a79bb02d73c2e1bd082b63c38d5bb0dd6ea4ca541142df16d4cb8ae67ad70643c800b9769a019ec47df","ssdeep":"1536:n4AR28+5sWlLRgYlgGy8Sz7yXKmcf5++6wiYAKExuRXWnBOLn7t1UfUfUP:n4228+53EGyO6mcx++9iYAFxu0nBOL7i","tlshash":"1263e113cb55b0bec89c9f3204e70774ac80a6992a525e5192281f151cf3bf5be39bcb","first_seen":"2026-09-04T14:38:33.741703Z","last_seen":"2026-09-04T14:38:33.741703Z","times_seen":1,"resource_available":false,"data":null}},"time_used":551,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":451,"receive":100,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"looloobot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://looloobot.com/","date":"2026-09-04T14:37:57.496Z","timestamp":1788532677496,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://looloobot.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 04 Sep 2026 10:29:37 GMT\r\nexpires: Sat, 04 Sep 2027 10:29:37 GMT\r\ncache-control: public, max-age=31536000\r\nage: 14900\r\nlast-modified: Mon, 15 Sep 2025 17:03:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39128,"size_decoded":39940,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39128, version 1.0","md5":"166202cc391c71a57730bed12cbcb159","sha1":"76388dbfe374be06fdc6f9ba38d3f4e479025eeb","sha256":"ba344451eab25b217a165363b1982048a5e5830a0daf36577973955a04cac793","sha512":"9f4d1c14aa729e837b964898a1dd27e99ff674256c43326aa982cc0c17fa8b0d71a0b7df627f03cb4ac6ec7f22f0a19d65302743ff09187ce81414dde74c43e2","ssdeep":"768:lxbc6Qon+A9wOfdj2rELqjOmaLqLqKeI+00t0xIj:layndm0j2cqjOmGq+tbUIj","tlshash":"d9030284fd6a02d8c7fc1f6ef25a9f28272c2078440b6a9c44a79a6bd5975f84dd3330","first_seen":"2025-09-17T01:48:11.920934Z","last_seen":"2026-09-04T19:07:09.722545Z","times_seen":51568,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":31,"send":0,"wait":43,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://looloobot.com/","date":"2026-09-04T14:37:57.505Z","timestamp":1788532677505,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://looloobot.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 04 Sep 2026 10:29:37 GMT\r\nexpires: Sat, 04 Sep 2027 10:29:37 GMT\r\ncache-control: public, max-age=31536000\r\nage: 14900\r\nlast-modified: Mon, 15 Sep 2025 17:03:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39128,"size_decoded":39940,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39128, version 1.0","md5":"166202cc391c71a57730bed12cbcb159","sha1":"76388dbfe374be06fdc6f9ba38d3f4e479025eeb","sha256":"ba344451eab25b217a165363b1982048a5e5830a0daf36577973955a04cac793","sha512":"9f4d1c14aa729e837b964898a1dd27e99ff674256c43326aa982cc0c17fa8b0d71a0b7df627f03cb4ac6ec7f22f0a19d65302743ff09187ce81414dde74c43e2","ssdeep":"768:lxbc6Qon+A9wOfdj2rELqjOmaLqLqKeI+00t0xIj:layndm0j2cqjOmGq+tbUIj","tlshash":"d9030284fd6a02d8c7fc1f6ef25a9f28272c2078440b6a9c44a79a6bd5975f84dd3330","first_seen":"2025-09-17T01:48:11.920934Z","last_seen":"2026-09-04T19:07:09.722545Z","times_seen":51568,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":55,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/fredoka/v17/X7n64b87HvSqjb_WIi2yDCRwoQ_k7367_DWu89U.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://looloobot.com/","date":"2026-09-04T14:37:57.508Z","timestamp":1788532677508,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/fredoka/v17/X7n64b87HvSqjb_WIi2yDCRwoQ_k7367_DWu89U.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://looloobot.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29732\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 02 Sep 2026 10:33:10 GMT\r\nexpires: Thu, 02 Sep 2027 10:33:10 GMT\r\ncache-control: public, max-age=31536000\r\nage: 187487\r\nlast-modified: Wed, 10 Sep 2025 16:42:18 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29732,"size_decoded":30545,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29732, version 1.0","md5":"9591efe1be62434d2d107e2b19702029","sha1":"6438e7de08adb0a989e1947ff06284771f884eb6","sha256":"99d6c78e043710d4f83ed90716779798b7b04eb690f73e0ad0e8f32d1f0e98c2","sha512":"3cc3323210ab19dc07513ef4df0bc9eb7b85b0143fa39c37d79b6fdb1b8309d34b96c452f264d3ab3a409b5a75c6872d48c22f54aead05e78454004106546067","ssdeep":"384:fNPmz/ALfS8CKEhoIqMViQziPMBdrB2PasMyqhdJf00dHmgJIW+uvTVsRZBhW7AC:8zoRCKEhTkQJdrQXqJf00GpubVsRZtI","tlshash":"0bd2f104c9605335c6ec64b69b114a7bffed488265e2b9d520a8eea61761fc8e09053f","first_seen":"2025-09-12T15:30:51.751475Z","last_seen":"2026-09-04T14:38:33.730676Z","times_seen":970,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":36,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"looloobot.com/favicon.svg","fqdn":"looloobot.com","domain":"looloobot.com","tld":"com"},"ip":{"addr":"104.21.42.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://looloobot.com/","date":"2026-09-04T14:37:58.231Z","timestamp":1788532678231,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"looloobot.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 12:14:08 GMT","end":"Mon, 16 Nov 2026 13:12:58 GMT"},"fingerprint":{"sha1":"EA:E9:62:A5:11:8C:69:DA:70:66:C0:9E:2A:13:17:7A:46:BF:F0:39","sha256":"5D:F8:86:D9:05:C0:62:83:B8:65:D2:29:1A:D9:D8:8D:A4:27:E7:ED:BC:25:76:59:F1:AB:01:43:0D:FF:3D:90"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: looloobot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://looloobot.com/\r\nCookie: _ga_HV0F3FRDVC=GS2.1.s1788532677$o1$g0$t1788532677$j60$l0$h0; _ga=GA1.1.890946082.1788532678\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 14:37:58 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\npriority: u=6,i=?0\r\nx-powered-by: Express\r\ncache-control: public, max-age=14400\r\nlast-modified: Tue, 18 Aug 2026 13:40:34 GMT\r\netag: W/\"2f6-1a0151a3502\"\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YjJUQfVkY1zfqHrgF5p6LmrBfvg2d04yWdlKr%2FXbczrLnkEINf6ogkU%2BB57S7pS%2FM2wmVj0Ec%2BRrvj3YG2Ykqc4SUyaJ3ibNwncbDZtLrRi7pLcNxFFLo%2B%2FHUnT2gN3S\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a35dbc36fd56b503-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":758,"size_decoded":1043,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4b56232414417a991bf7abcae6f1a50e","sha1":"6426177b024d4603e723a65e9f729dfe2530310c","sha256":"16e58ac8542b6d61c59564be8dcebe0116d43c728ddf285f6df6fefec12bf919","sha512":"62d61ca59024b53ee213369eb504b46e27ba04d5f0c144add1f4e94cb2e6b70c3280b676e21e44f402a07a89bc7554fbd79b5d388a3dbc7007f1214d1e8d1bc3","ssdeep":"","tlshash":"f20128a4a19c981dda50020c6b2e30a53077e1df434a4145b8a02c77b2942dbfc772f9","first_seen":"2026-09-04T14:38:33.742746Z","last_seen":"2026-09-04T14:38:33.742746Z","times_seen":1,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"looloobot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"looloobot.com/favicon.svg","fqdn":"looloobot.com","domain":"looloobot.com","tld":"com"},"ip":{"addr":"104.21.42.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://looloobot.com/","date":"2026-09-04T14:37:58.233Z","timestamp":1788532678233,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"looloobot.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 12:14:08 GMT","end":"Mon, 16 Nov 2026 13:12:58 GMT"},"fingerprint":{"sha1":"EA:E9:62:A5:11:8C:69:DA:70:66:C0:9E:2A:13:17:7A:46:BF:F0:39","sha256":"5D:F8:86:D9:05:C0:62:83:B8:65:D2:29:1A:D9:D8:8D:A4:27:E7:ED:BC:25:76:59:F1:AB:01:43:0D:FF:3D:90"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: looloobot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://looloobot.com/\r\nCookie: _ga_HV0F3FRDVC=GS2.1.s1788532677$o1$g0$t1788532677$j60$l0$h0; _ga=GA1.1.890946082.1788532678\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 14:37:58 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\npriority: u=6,i=?0\r\nx-powered-by: Express\r\ncache-control: public, max-age=14400\r\nlast-modified: Tue, 18 Aug 2026 13:40:34 GMT\r\netag: W/\"2f6-1a0151a3502\"\r\ncontent-encoding: gzip\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zr5WtMt4Jm8yqLzj4gCcA54aeSoa8dOreU9yG1uwSlCm4tOYspCb0mONzfTMP96yz%2BU2Jq4dEmP0%2BiqnAxoPvixfWBCDsrbw6NSeaUB9V%2Bzj%2BXbAMkR%2B2JbpU0h5WCS%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a35dbc36fd57b503-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":758,"size_decoded":1046,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4b56232414417a991bf7abcae6f1a50e","sha1":"6426177b024d4603e723a65e9f729dfe2530310c","sha256":"16e58ac8542b6d61c59564be8dcebe0116d43c728ddf285f6df6fefec12bf919","sha512":"62d61ca59024b53ee213369eb504b46e27ba04d5f0c144add1f4e94cb2e6b70c3280b676e21e44f402a07a89bc7554fbd79b5d388a3dbc7007f1214d1e8d1bc3","ssdeep":"","tlshash":"f20128a4a19c981dda50020c6b2e30a53077e1df434a4145b8a02c77b2942dbfc772f9","first_seen":"2026-09-04T14:38:33.742746Z","last_seen":"2026-09-04T14:38:33.742746Z","times_seen":1,"resource_available":false,"data":null}},"time_used":455,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":455,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"looloobot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/fredoka/v17/X7n64b87HvSqjb_WIi2yDCRwoQ_k7367_DWu89U.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://looloobot.com/","date":"2026-09-04T14:37:57.497Z","timestamp":1788532677497,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/fredoka/v17/X7n64b87HvSqjb_WIi2yDCRwoQ_k7367_DWu89U.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://looloobot.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29732\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 02 Sep 2026 10:33:10 GMT\r\nexpires: Thu, 02 Sep 2027 10:33:10 GMT\r\ncache-control: public, max-age=31536000\r\nage: 187487\r\nlast-modified: Wed, 10 Sep 2025 16:42:18 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29732,"size_decoded":30545,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29732, version 1.0","md5":"9591efe1be62434d2d107e2b19702029","sha1":"6438e7de08adb0a989e1947ff06284771f884eb6","sha256":"99d6c78e043710d4f83ed90716779798b7b04eb690f73e0ad0e8f32d1f0e98c2","sha512":"3cc3323210ab19dc07513ef4df0bc9eb7b85b0143fa39c37d79b6fdb1b8309d34b96c452f264d3ab3a409b5a75c6872d48c22f54aead05e78454004106546067","ssdeep":"384:fNPmz/ALfS8CKEhoIqMViQziPMBdrB2PasMyqhdJf00dHmgJIW+uvTVsRZBhW7AC:8zoRCKEhTkQJdrQXqJf00GpubVsRZtI","tlshash":"0bd2f104c9605335c6ec64b69b114a7bffed488265e2b9d520a8eea61761fc8e09053f","first_seen":"2025-09-12T15:30:51.751475Z","last_seen":"2026-09-04T14:38:33.730676Z","times_seen":970,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":20,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://looloobot.com/","date":"2026-09-04T14:37:57.500Z","timestamp":1788532677500,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://looloobot.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 04 Sep 2026 10:29:37 GMT\r\nexpires: Sat, 04 Sep 2027 10:29:37 GMT\r\ncache-control: public, max-age=31536000\r\nage: 14900\r\nlast-modified: Mon, 15 Sep 2025 17:03:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39128,"size_decoded":39940,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39128, version 1.0","md5":"166202cc391c71a57730bed12cbcb159","sha1":"76388dbfe374be06fdc6f9ba38d3f4e479025eeb","sha256":"ba344451eab25b217a165363b1982048a5e5830a0daf36577973955a04cac793","sha512":"9f4d1c14aa729e837b964898a1dd27e99ff674256c43326aa982cc0c17fa8b0d71a0b7df627f03cb4ac6ec7f22f0a19d65302743ff09187ce81414dde74c43e2","ssdeep":"768:lxbc6Qon+A9wOfdj2rELqjOmaLqLqKeI+00t0xIj:layndm0j2cqjOmGq+tbUIj","tlshash":"d9030284fd6a02d8c7fc1f6ef25a9f28272c2078440b6a9c44a79a6bd5975f84dd3330","first_seen":"2025-09-17T01:48:11.920934Z","last_seen":"2026-09-04T19:07:09.722545Z","times_seen":51568,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":50,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://looloobot.com/","date":"2026-09-04T14:37:57.507Z","timestamp":1788532677507,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://looloobot.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 04 Sep 2026 10:29:37 GMT\r\nexpires: Sat, 04 Sep 2027 10:29:37 GMT\r\ncache-control: public, max-age=31536000\r\nage: 14900\r\nlast-modified: Mon, 15 Sep 2025 17:03:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39128,"size_decoded":39940,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39128, version 1.0","md5":"166202cc391c71a57730bed12cbcb159","sha1":"76388dbfe374be06fdc6f9ba38d3f4e479025eeb","sha256":"ba344451eab25b217a165363b1982048a5e5830a0daf36577973955a04cac793","sha512":"9f4d1c14aa729e837b964898a1dd27e99ff674256c43326aa982cc0c17fa8b0d71a0b7df627f03cb4ac6ec7f22f0a19d65302743ff09187ce81414dde74c43e2","ssdeep":"768:lxbc6Qon+A9wOfdj2rELqjOmaLqLqKeI+00t0xIj:layndm0j2cqjOmGq+tbUIj","tlshash":"d9030284fd6a02d8c7fc1f6ef25a9f28272c2078440b6a9c44a79a6bd5975f84dd3330","first_seen":"2025-09-17T01:48:11.920934Z","last_seen":"2026-09-04T19:07:09.722545Z","times_seen":51568,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":61,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
