{"report_id":"ad931222-32c5-419a-b84d-e5d7d9ca4085","version":6,"status":"done","tags":[],"date":"2025-09-28T15:25:32Z","url":{"schema":"http","addr":"haxloppd.com/e/zxs2lihufsbx","fqdn":"haxloppd.com","domain":"haxloppd.com","tld":"com"},"ip":{"addr":"104.21.72.69","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"haxloppd.com/e/zxs2lihufsbx","fqdn":"haxloppd.com","domain":"haxloppd.com","tld":"com"},"title":"haxloppd.com/e/zxs2lihufsbx"},"submit":{"url":{"schema":"http","addr":"haxloppd.com/e/zxs2lihufsbx","fqdn":"haxloppd.com","domain":"haxloppd.com","tld":"com"},"ip":{"addr":"104.21.72.69","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-02T15:25:32Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"haxloppd.com","ip":{"addr":"172.67.176.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-07-16","domain_rank":512342,"first_seen":"2025-07-19T18:11:31.824083Z","last_seen":"2025-09-27T14:09:27.520929Z","alert_count":0,"request_count":6,"received_data":484808,"sent_data":2850,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.2.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Bootstrap:5.3.0","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2025-09-21T22:12:58.070161Z","alert_count":0,"request_count":1,"received_data":81737,"sent_data":460,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2025-09-21T22:12:58.000435Z","alert_count":0,"request_count":2,"received_data":264753,"sent_data":1013,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-09-21T22:11:31.071214Z","alert_count":0,"request_count":8,"received_data":1261725,"sent_data":5154,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-2TL7NH453R\u0026cx=c\u0026gtm=4e59n2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a404986cd18d7d49fff18e0a53f0d852","sha1":"a12acc6d1a5378b9b7e256676a659394f7631e9a","sha256":"60b9d764472bbb1b4b0aa39ccaadaaff91704382b02873176bbcaa0d5b8017d4","sha512":"495b24b65be169ec192cce93dd8240312794bbc12e388495d1c92d0c330addc9264b66126bbdae07724e3d1cf543f1df04f8f790df9bfee1d952e767c772b746","ssdeep":"6144:nBDpmM2/RNpvYqkD1g1/9G1SvuVcH9+23WBA:B9mLRYly/LwY","tlshash":"ee9409ce73d674265396e078907f018ba5bb28a2f44cc899f189dce42d74a9a4137f7c","size":419738,"data":"","first_seen":"2025-09-28T15:25:34.675556Z","last_seen":"2025-09-28T15:25:34.675556Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haxloppd.com/e/zxs2lihufsbx","fqdn":"haxloppd.com","domain":"haxloppd.com","tld":"com"},"ip":{"addr":"172.67.176.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b26d6f86c4345f37c33c9b3b6dc9338b","sha1":"b92b66a7dadcc3acefe2c4cbd34f36c525ef4a24","sha256":"5b3474edb6863ae89e1cfe842fb92e8ffdb6d4084a837040d36d497c4a864216","sha512":"4a761629227e8640b5401c3d20d4c21820fde23b975ac94da139912a7a4ef592f86ae1117eaa52a510b7155e9ac3c1b8413c75d429e95ff473b0b9333946382e","ssdeep":"","tlshash":"1dc02b8c720a0cb041fb27408b3fbb00b002321495d56931494923048d30e03db54c14","size":153,"data":"","first_seen":"2023-05-25T01:59:38Z","last_seen":"2026-04-02T13:28:52.639295Z","times_seen":604,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haxloppd.com/e/zxs2lihufsbx","fqdn":"haxloppd.com","domain":"haxloppd.com","tld":"com"},"ip":{"addr":"172.67.176.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cb3a2f747e90c553769c2155d20f3ebf","sha1":"d10496bb17cb31e6c493f1429655fd723dfa3cfb","sha256":"79ac617398535f8ab3b7a4ec458a94ef2156acd847ff57111afef826d82d3742","sha512":"a1bc1a88e5a27e3270f872097bde105a03e1f7c2281f4067f2c81dee984a6be21d5e207d3237314315b7153d39c9805701b3c0486ac74137ff83230fff68540d","ssdeep":"","tlshash":"8cc09b8c251e5cb195f72740db7fb604b4423214d4d56a314d5d63845d30f17db55954","size":153,"data":"","first_seen":"2025-05-19T10:11:33.51975Z","last_seen":"2026-04-02T13:28:52.640293Z","times_seen":367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haxloppd.com/e/zxs2lihufsbx","fqdn":"haxloppd.com","domain":"haxloppd.com","tld":"com"},"ip":{"addr":"172.67.176.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b9a4a0464df7382770fdbb6120bb289d","sha1":"de4d12911183f9bfcf5ceccc00f5d46d170eda87","sha256":"6541e6c013e24c03ab4e6a3be5bd05923a5f87a2ead361aa1fa0a01a4b9db9ce","sha512":"d10b3b04fb5a78c4735168d2267e5abff619ae740d125c724d66dd7bd980b3ef8769a32444b61787ab09322462439268a4fbf147734ccf51466c797612267aec","ssdeep":"","tlshash":"91f00ea53cdc44248336022627bba548746a69392c0afd19f18d84822f9deac18bb88c","size":527,"data":"","first_seen":"2025-06-22T23:12:43.524632Z","last_seen":"2026-04-02T13:28:52.641227Z","times_seen":117,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haxloppd.com/HG1/js/jquery-3.2.1.min.js","fqdn":"haxloppd.com","domain":"haxloppd.com","tld":"com"},"ip":{"addr":"172.67.176.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c9f5aeeca3ad37bf2aa006139b935f0a","sha1":"1055018c28ab41087ef9ccefe411606893dabea2","sha256":"87083882cc6015984eb0411a99d3981817f5dc5c90ba24f0940420c5548d82de","sha512":"dcff2b5c2b8625d3593a7531ff4ddcd633939cc9f7acfeb79c18a9e6038fdaa99487960075502f159d44f902d965b0b5aed32b41bfa66a1dc07d85b5d5152b58","ssdeep":"1536:YNhEyjjTikEJO4edXXe9J578go6MWX2xkj8e4c4j2ll2AckaXEP6n15HZ+FhFcQ7:uxc2yjx4j2uX/kcQDU8Cu9","tlshash":"4483e6d9b2c67062977730b950bf410bb17a98dab44c8c60f158d9d47eb8a8d907bf2c","size":86659,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-04T07:37:27.045736Z","times_seen":77220,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.0-alpha3/dist/js/bootstrap.bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"78c4cd0c84838bea16844c9f9ef24b83","sha1":"8cd7971318371ab3d16379df6cfb254a5c649fca","sha256":"ea8fe021a4ace4f6786fecc418f70b658fc2dc02d136e8fe5c6ab6b62a46d5d0","sha512":"bc80244dddc0af2f6bc1fd25adbf64222a722246af2a96069f2a29057b3a4a22df352cc0bc236fbd0bcac015795e56a0e0ef286696795399f86c7a04ac64318f","ssdeep":"1536:2Iif7R2qTTR2t4iYniNw+inrJuQolwxLBAF927wXtWJTI5TrtgK:gR2c7tLBW27wXtSTI5t","tlshash":"6573b7593254b4730ade85b68037420bf2265994b24b802cb5bcadde2a7dcc67277f7c","size":80578,"data":"","first_seen":"2023-04-09T07:05:04Z","last_seen":"2026-04-04T05:56:02.713596Z","times_seen":4211,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-E2BG6CPV2J","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"713b9c62374d56e81fe2108edde279ef","sha1":"09db731485428401421e8e24eeee5fc4958a413f","sha256":"a78d725074eb597eff8f38c9aac23fb61a0baa5bf9a543f0bfbee5ffe5c00afc","sha512":"c422d1440d804bf5e7c3975d93ef6fb65a126176cc3f0e8485025dcf2eacc13f89d794d34559bc01d61c484b207d4f4540e7334d40e5df8ea7a81474dd9671b4","ssdeep":"6144:qBApmM2/RNpvYqkD1g1/9G1SvuVcH9+23WBj:kOmLRYly/Lwr","tlshash":"db9409ce73d674265396e478903f018ba5bb28a2f44cc899f189dce42d74a9a4137f7c","size":419446,"data":"","first_seen":"2025-09-28T00:21:20.803763Z","last_seen":"2025-09-28T21:12:38.234974Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-2TL7NH453R","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2d18a3aa738726ac19d3f75eebf92a78","sha1":"32c3dbee5fc178341216a9a276cbba2dd1f7d931","sha256":"ac8d488e73b98da5d7266e55a2f289eba21f35b6b1a2668af2091b7aea6458e3","sha512":"682c01114ccafd419eee04a581474bdf886024c935445d6017f184ac934237665aec95b11d8781a87aae04e7baf54ccbf494506ae49a0eda0082aa330bd33f80","ssdeep":"6144:nBlpmM2/RNpvYqkD1g1/9G1SvuVcH9+23WBj:BnmLRYly/Lwr","tlshash":"879409ce73d674265396e078907f018ba5bb28a2f44cc899f189dce42d74a9a4137f7c","size":419729,"data":"","first_seen":"2025-09-28T15:25:34.665136Z","last_seen":"2025-09-28T15:25:34.665136Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-2TL7NH453R","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://haxloppd.com/e/zxs2lihufsbx","date":"2025-09-28T15:25:10.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:34:53 GMT","end":"Mon, 01 Dec 2025 08:34:52 GMT"},"fingerprint":{"sha1":"DF:7E:8A:F9:1C:B5:DC:9E:90:E3:71:A7:92:85:2C:8F:2B:B4:42:8E","sha256":"3A:65:11:10:B9:58:2F:E1:BF:38:98:8D:2E:3E:A2:01:9D:C6:BE:69:5B:AD:F7:99:53:F9:AB:A6:6B:82:47:F1"}}},"request":{"raw":"GET /gtag/js?id=G-2TL7NH453R HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haxloppd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 28 Sep 2025 15:25:10 GMT\r\nexpires: Sun, 28 Sep 2025 15:25:10 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 140006\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":419729,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"2d18a3aa738726ac19d3f75eebf92a78","sha1":"32c3dbee5fc178341216a9a276cbba2dd1f7d931","sha256":"ac8d488e73b98da5d7266e55a2f289eba21f35b6b1a2668af2091b7aea6458e3","sha512":"682c01114ccafd419eee04a581474bdf886024c935445d6017f184ac934237665aec95b11d8781a87aae04e7baf54ccbf494506ae49a0eda0082aa330bd33f80","ssdeep":"6144:nBlpmM2/RNpvYqkD1g1/9G1SvuVcH9+23WBj:BnmLRYly/Lwr","tlshash":"879409ce73d674265396e078907f018ba5bb28a2f44cc899f189dce42d74a9a4137f7c","first_seen":"2025-09-28T15:25:34.665136Z","last_seen":"2025-09-28T15:25:34.665136Z","times_seen":1,"resource_available":true,"data":null}},"time_used":410,"timings":{"blocked":151,"dns":0,"connect":17,"send":0,"wait":64,"receive":41,"ssl":136},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haxloppd.com/favicon.ico","fqdn":"haxloppd.com","domain":"haxloppd.com","tld":"com"},"ip":{"addr":"172.67.176.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://haxloppd.com/e/zxs2lihufsbx","date":"2025-09-28T15:25:10.449Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haxloppd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 06:00:08 GMT","end":"Sat, 13 Dec 2025 04:58:44 GMT"},"fingerprint":{"sha1":"3A:53:BA:A8:0F:91:ED:60:F3:3F:BB:DD:7D:FE:8D:AF:86:99:3E:03","sha256":"58:4B:93:1C:A5:F7:3C:1C:C3:F3:A1:77:D5:B9:9B:F9:3C:67:CD:A6:02:BE:9A:CF:6B:7D:73:22:55:D3:F5:59"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: haxloppd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haxloppd.com/e/zxs2lihufsbx\r\nCookie: lang=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 15:25:10 GMT\r\ncontent-type: image/x-icon\r\nvary: accept-encoding\r\nlast-modified: Fri, 06 Dec 2024 03:40:36 GMT\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SehjRCywf1Pih%2BTyMUWAS%2FjmwtWW%2FMJBR84dtza3dYi%2BnIUTYoVqgX9uBZ7TYhP%2Ba2iY8HMGGrMtOXpgQmjRLlPFC13R9lQCvgZOPw%3D%3D\"}]}\r\nexpires: Fri, 03 Oct 2025 10:09:38 GMT\r\ncache-control: max-age=604800\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 191731\r\ncf-cache-status: HIT\r\netag: W/\"67527234-3c2e\"\r\ncf-ray: 9864407c49c8120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15406,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"b2c5203adab5e7b787bdb86d1c00f44f","sha1":"e12ac26f0ad579e2e32d36b00fb58867cd11a46c","sha256":"6ce20250cd83244a68b895f2aeeba18ff240c0988cd8adba70d8afa4be0b5ff5","sha512":"8784c9956ceda82d804c08d0bad22a5e23dd64b1abf767f0b1d4c324b2123f2c49a10c994f05c7ab4c0b121256b43e8cb67837c7627bf0854efa98747e54d5e2","ssdeep":"192:r0muBBo8m8ztSQdGJkh84D+N7UAPbEbs:4muDogztSHm84D+N7XJ","tlshash":"1c62f8ab7d72850ec4a9c3712cb52cee3de4fc0f9148179781d4363b6a1b9b406aa4d7","first_seen":"2024-12-18T23:10:44.072182Z","last_seen":"2026-04-02T13:28:52.613269Z","times_seen":264,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/a?id=G-2TL7NH453R\u0026v=3\u0026t=t\u0026pid=1573160633\u0026cv=1\u0026rv=59n2\u0026tc=15\u0026tag_exp=101509157~103116026~103200004~103233427~104527906~104528501~104684208~104684211~104948813~115480710~115497442~115616986\u0026es=1\u0026e=gtm.js\u0026eid=3\u0026u=AAAAAAAAAAAAAAAAAAAAAABA\u0026h=Ag\u0026tr=1gct\u0026ti=1gct\u0026z=0","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://haxloppd.com/e/zxs2lihufsbx","date":"2025-09-28T15:25:10.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:34:53 GMT","end":"Mon, 01 Dec 2025 08:34:52 GMT"},"fingerprint":{"sha1":"DF:7E:8A:F9:1C:B5:DC:9E:90:E3:71:A7:92:85:2C:8F:2B:B4:42:8E","sha256":"3A:65:11:10:B9:58:2F:E1:BF:38:98:8D:2E:3E:A2:01:9D:C6:BE:69:5B:AD:F7:99:53:F9:AB:A6:6B:82:47:F1"}}},"request":{"raw":"GET /a?id=G-2TL7NH453R\u0026v=3\u0026t=t\u0026pid=1573160633\u0026cv=1\u0026rv=59n2\u0026tc=15\u0026tag_exp=101509157~103116026~103200004~103233427~104527906~104528501~104684208~104684211~104948813~115480710~115497442~115616986\u0026es=1\u0026e=gtm.js\u0026eid=3\u0026u=AAAAAAAAAAAAAAAAAAAAAABA\u0026h=Ag\u0026tr=1gct\u0026ti=1gct\u0026z=0 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haxloppd.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 28 Sep 2025 15:25:10 GMT\r\ncontent-type: text/html\r\nserver: Google Tag Manager\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T07:46:07.547347Z","times_seen":13322606,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haxloppd.com/HG1/js/jquery-3.2.1.min.js","fqdn":"haxloppd.com","domain":"haxloppd.com","tld":"com"},"ip":{"addr":"172.67.176.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://haxloppd.com/e/zxs2lihufsbx","date":"2025-09-28T15:25:10.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haxloppd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 06:00:08 GMT","end":"Sat, 13 Dec 2025 04:58:44 GMT"},"fingerprint":{"sha1":"3A:53:BA:A8:0F:91:ED:60:F3:3F:BB:DD:7D:FE:8D:AF:86:99:3E:03","sha256":"58:4B:93:1C:A5:F7:3C:1C:C3:F3:A1:77:D5:B9:9B:F9:3C:67:CD:A6:02:BE:9A:CF:6B:7D:73:22:55:D3:F5:59"}}},"request":{"raw":"GET /HG1/js/jquery-3.2.1.min.js HTTP/1.1\r\nHost: haxloppd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haxloppd.com/e/zxs2lihufsbx\r\nCookie: lang=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 28 Sep 2025 15:25:10 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sat, 03 Jun 2023 09:33:43 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SRjUCY6UMjHoTKRQl%2FZlcC0cmQkgwIKG3079PfHUPKZhnB%2BVFnXGblcCJKl%2Fq55m25VjYEa1Xl5Uw%2FlXRXsdR0cDaocciaJHdyI%3D\"}]}\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block\r\nage: 4822\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"15283-5fd365d994940\"\r\ncontent-encoding: br\r\ncf-ray: 9864407aa8bc56a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86659,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32058)","md5":"c9f5aeeca3ad37bf2aa006139b935f0a","sha1":"1055018c28ab41087ef9ccefe411606893dabea2","sha256":"87083882cc6015984eb0411a99d3981817f5dc5c90ba24f0940420c5548d82de","sha512":"dcff2b5c2b8625d3593a7531ff4ddcd633939cc9f7acfeb79c18a9e6038fdaa99487960075502f159d44f902d965b0b5aed32b41bfa66a1dc07d85b5d5152b58","ssdeep":"1536:YNhEyjjTikEJO4edXXe9J578go6MWX2xkj8e4c4j2ll2AckaXEP6n15HZ+FhFcQ7:uxc2yjx4j2uX/kcQDU8Cu9","tlshash":"4483e6d9b2c67062977730b950bf410bb17a98dab44c8c60f158d9d47eb8a8d907bf2c","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-04T07:37:27.045736Z","times_seen":77220,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haxloppd.com/HG1/css/style.css","fqdn":"haxloppd.com","domain":"haxloppd.com","tld":"com"},"ip":{"addr":"172.67.176.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://haxloppd.com/e/zxs2lihufsbx","date":"2025-09-28T15:25:10.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haxloppd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 06:00:08 GMT","end":"Sat, 13 Dec 2025 04:58:44 GMT"},"fingerprint":{"sha1":"3A:53:BA:A8:0F:91:ED:60:F3:3F:BB:DD:7D:FE:8D:AF:86:99:3E:03","sha256":"58:4B:93:1C:A5:F7:3C:1C:C3:F3:A1:77:D5:B9:9B:F9:3C:67:CD:A6:02:BE:9A:CF:6B:7D:73:22:55:D3:F5:59"}}},"request":{"raw":"GET /HG1/css/style.css HTTP/1.1\r\nHost: haxloppd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haxloppd.com/e/zxs2lihufsbx\r\nCookie: lang=1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 28 Sep 2025 15:25:10 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 09 Jun 2023 22:43:37 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Jv3RxhPKJofQeCdK%2FRmFFgljmWlmVwjfvU0lQ9uV%2BpU1v%2Br0jTD1gIQqk9OBfUOlGPUHLZOf%2B8RQEvlmWPSk4IFkwXweP%2BAALuw%3D\"}]}\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block\r\nage: 4822\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"4b05c-5fdba1984cd4a\"\r\ncontent-encoding: br\r\ncf-ray: 9864407aa8ba56a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":307292,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF, LF line terminators","md5":"d1461d62815948cd0bd5e8c10a92f619","sha1":"6bb029f373652784c5231c462233aaa7c95aecca","sha256":"ba94d1e713cc58c3523c9fc373b079479e7a7c675d69864928a8c1ca5513666d","sha512":"3f217c933b2e2d0b85c6f867726fae281975a04ca8cf8febe9984f4807012043b50479fca7b58e9a8f6808c3521e49f44fb106137df4179e37179b77ae3e0678","ssdeep":"1536:b06vofpL1+RI6l6WigViauN3IjNbPZMoa5SJJ2MNjR2bUA0F2c+szW:bK1+RI6l6NxauN3IjNbPZ1WSJJ/a","tlshash":"a464312afde11518342b495866cabff97f7c80878609ddb678df2224cf467d148d2ac8","first_seen":"2024-12-14T00:38:50.495113Z","last_seen":"2026-04-02T13:28:52.629409Z","times_seen":132,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.0-alpha3/dist/js/bootstrap.bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://haxloppd.com/e/zxs2lihufsbx","date":"2025-09-28T15:25:10.193Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/bootstrap@5.3.0-alpha3/dist/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haxloppd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 28 Sep 2025 15:25:10 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 24750\r\ncf-ray: 9864407afea40b3d-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 5.3.0-alpha3\r\nx-jsd-version-type: version\r\netag: W/\"13ac2-jNeXExg3GrPRY3nfbPslSlxkn8o\"\r\ncontent-encoding: br\r\nx-served-by: cache-fra-eddf8230059-FRA, cache-lga21961-LGA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 291672\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=tTymwjcL8cHyMtH6usIyF3LWqb4FKt07gjKnAmdFt8wcmQyalbVkH90D6%2BGCS7SadwY1%2FZhfjT8fg5WAhrW9%2BC%2BEhgdkrjW%2FvTB7xF9VZDsQHGKWJqonJ17%2BBA63uLo2Pg0%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":80578,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65292)","md5":"78c4cd0c84838bea16844c9f9ef24b83","sha1":"8cd7971318371ab3d16379df6cfb254a5c649fca","sha256":"ea8fe021a4ace4f6786fecc418f70b658fc2dc02d136e8fe5c6ab6b62a46d5d0","sha512":"bc80244dddc0af2f6bc1fd25adbf64222a722246af2a96069f2a29057b3a4a22df352cc0bc236fbd0bcac015795e56a0e0ef286696795399f86c7a04ac64318f","ssdeep":"1536:2Iif7R2qTTR2t4iYniNw+inrJuQolwxLBAF927wXtWJTI5TrtgK:gR2c7tLBW27wXtSTI5t","tlshash":"6573b7593254b4730ade85b68037420bf2265994b24b802cb5bcadde2a7dcc67277f7c","first_seen":"2023-04-09T07:05:04Z","last_seen":"2026-04-04T05:56:02.713596Z","times_seen":4211,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":39,"dns":0,"connect":2,"send":0,"wait":13,"receive":1,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/a?id=G-2TL7NH453R\u0026v=3\u0026t=t\u0026pid=1573160633\u0026cv=1\u0026rv=59n2\u0026tc=15\u0026tag_exp=101509157~103116026~103200004~103233427~104527906~104528501~104684208~104684211~104948813~115480710~115497442~115616986\u0026es=1\u0026e=gtm.init\u0026eid=2\u0026u=AAAAAAAAAAAAAAAAAAAAAABA\u0026h=Ag\u0026tr=1ogt1pdatav2.1ccdgafirst.1setproductsettings.1ccdgaregscope.1ccdemdownload.1ccdemform.1ccdemoutboundclick.1ccdempageview.1ccdemscroll.1ccdemsitesearch.1ccdemvideo.1ccdconversionmarking.1ccdautoredact.1ccdgalast\u0026ti=2ogt1pdatav2.2ccdgafirst.2setproductsettings.2ccdgaregscope.2ccdemdownload.2ccdemform.2ccdemoutboundclick.2ccdempageview.2ccdemscroll.2ccdemsitesearch.2ccdemvideo.2ccdconversionmarking.2ccdautoredact.2ccdgalast\u0026z=0","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://haxloppd.com/e/zxs2lihufsbx","date":"2025-09-28T15:25:10.490Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:34:53 GMT","end":"Mon, 01 Dec 2025 08:34:52 GMT"},"fingerprint":{"sha1":"DF:7E:8A:F9:1C:B5:DC:9E:90:E3:71:A7:92:85:2C:8F:2B:B4:42:8E","sha256":"3A:65:11:10:B9:58:2F:E1:BF:38:98:8D:2E:3E:A2:01:9D:C6:BE:69:5B:AD:F7:99:53:F9:AB:A6:6B:82:47:F1"}}},"request":{"raw":"GET /a?id=G-2TL7NH453R\u0026v=3\u0026t=t\u0026pid=1573160633\u0026cv=1\u0026rv=59n2\u0026tc=15\u0026tag_exp=101509157~103116026~103200004~103233427~104527906~104528501~104684208~104684211~104948813~115480710~115497442~115616986\u0026es=1\u0026e=gtm.init\u0026eid=2\u0026u=AAAAAAAAAAAAAAAAAAAAAABA\u0026h=Ag\u0026tr=1ogt1pdatav2.1ccdgafirst.1setproductsettings.1ccdgaregscope.1ccdemdownload.1ccdemform.1ccdemoutboundclick.1ccdempageview.1ccdemscroll.1ccdemsitesearch.1ccdemvideo.1ccdconversionmarking.1ccdautoredact.1ccdgalast\u0026ti=2ogt1pdatav2.2ccdgafirst.2setproductsettings.2ccdgaregscope.2ccdemdownload.2ccdemform.2ccdemoutboundclick.2ccdempageview.2ccdemscroll.2ccdemsitesearch.2ccdemvideo.2ccdconversionmarking.2ccdautoredact.2ccdgalast\u0026z=0 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haxloppd.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 28 Sep 2025 15:25:10 GMT\r\ncontent-type: text/html\r\nserver: Google Tag Manager\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T07:46:07.547347Z","times_seen":13322606,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/a?id=G-2TL7NH453R\u0026v=3\u0026t=t\u0026pid=1573160633\u0026cv=1\u0026rv=59n2\u0026tc=15\u0026tag_exp=101509157~103116026~103200004~103233427~104527906~104528501~104684208~104684211~104948813~115480710~115497442~115616986\u0026es=1\u0026e=gtm.dom\u0026eid=12\u0026u=AAAAAAAAAAAAAIAAAAAAAABA\u0026h=Ag\u0026z=0","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://haxloppd.com/e/zxs2lihufsbx","date":"2025-09-28T15:25:10.503Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:34:53 GMT","end":"Mon, 01 Dec 2025 08:34:52 GMT"},"fingerprint":{"sha1":"DF:7E:8A:F9:1C:B5:DC:9E:90:E3:71:A7:92:85:2C:8F:2B:B4:42:8E","sha256":"3A:65:11:10:B9:58:2F:E1:BF:38:98:8D:2E:3E:A2:01:9D:C6:BE:69:5B:AD:F7:99:53:F9:AB:A6:6B:82:47:F1"}}},"request":{"raw":"GET /a?id=G-2TL7NH453R\u0026v=3\u0026t=t\u0026pid=1573160633\u0026cv=1\u0026rv=59n2\u0026tc=15\u0026tag_exp=101509157~103116026~103200004~103233427~104527906~104528501~104684208~104684211~104948813~115480710~115497442~115616986\u0026es=1\u0026e=gtm.dom\u0026eid=12\u0026u=AAAAAAAAAAAAAIAAAAAAAABA\u0026h=Ag\u0026z=0 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haxloppd.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 28 Sep 2025 15:25:10 GMT\r\ncontent-type: text/html\r\nserver: Google Tag Manager\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T07:46:07.547347Z","times_seen":13322606,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haxloppd.com/e/zxs2lihufsbx","fqdn":"haxloppd.com","domain":"haxloppd.com","tld":"com"},"ip":{"addr":"172.67.176.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-28T15:25:09.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haxloppd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 06:00:08 GMT","end":"Sat, 13 Dec 2025 04:58:44 GMT"},"fingerprint":{"sha1":"3A:53:BA:A8:0F:91:ED:60:F3:3F:BB:DD:7D:FE:8D:AF:86:99:3E:03","sha256":"58:4B:93:1C:A5:F7:3C:1C:C3:F3:A1:77:D5:B9:9B:F9:3C:67:CD:A6:02:BE:9A:CF:6B:7D:73:22:55:D3:F5:59"}}},"request":{"raw":"GET /e/zxs2lihufsbx HTTP/1.1\r\nHost: haxloppd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 28 Sep 2025 15:25:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZBD%2FLcoPU6yAtelzFg0akPhW8A4ZIyLUfggjfnHGwlYafmq0td1TibUDhIYUseNUFNTugzp3%2Bm7Lmbl6eID0QiAP7n1kTkb8cr0%3D\"}]}\r\nexpires: Sat, 27 Sep 2025 15:25:10 GMT\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nset-cookie: lang=1; HttpOnly; Path=/; Domain=haxloppd.com\r\ncf-ray: 98644079afee56a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.2.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Bootstrap:5.3.0","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}],"data":{"size":3535,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"ebaa5e1b552f6691771ae66fc4d3fb14","sha1":"8267529fed269013938662bf0b7de5aa5354447a","sha256":"63c8487c6a9df49c302d582ca0ed1650c72fd2c446e1394e77c62090d24aab94","sha512":"51ace8a3c20b67511770be2386f6a31540c1d2fec57a9d47b497cb137fe02d863c2b1aace27d4136c0f7f4ce564f49984b3792fad61ed184c68bb8ec9425eb16","ssdeep":"","tlshash":"9d71841aacc55c3b81a252a4b672bb0cb992e603d617dd0472ed43882fc1fc7cc93888","first_seen":"2025-08-18T17:39:03.993901Z","last_seen":"2025-10-23T01:37:22.829595Z","times_seen":7,"resource_available":false,"data":null}},"time_used":627,"timings":{"blocked":264,"dns":1,"connect":2,"send":0,"wait":99,"receive":0,"ssl":260},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.7.1/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://haxloppd.com/e/zxs2lihufsbx","date":"2025-09-28T15:25:10.193Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 19:09:23 GMT","end":"Tue, 16 Dec 2025 20:08:48 GMT"},"fingerprint":{"sha1":"E5:FA:6E:21:DA:AB:92:8F:E0:CB:31:C2:87:D4:E2:CE:9F:23:BF:C1","sha256":"E8:C7:D4:A8:29:E6:45:C0:C5:E3:AD:6A:90:36:30:4A:D7:2E:7C:F7:8F:57:44:E8:3B:2D:AF:F6:80:F7:4B:46"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.7.1/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haxloppd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 28 Sep 2025 15:25:10 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 22415\r\ncf-ray: 9864407ace96b28a-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"673e23f5-578f\"\r\nlast-modified: Wed, 20 Nov 2024 18:01:25 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 379019\r\nexpires: Fri, 18 Sep 2026 15:25:10 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=rxR8Axm4QXytgHZTQyDN67Brv7%2FgCXA7pToAFI7P8KTGUbAxej0WLxPa4ObmT4hcjHN3Ho6bu%2FPKEegusWW8bItMhOAUdGeZMdVF1D2zQCBgQCaT0fuxHR%2B6UKAvwwPUHxD2ZCua\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":104502,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (58875)","md5":"bde2a1ac06ec87a30967e54da50f5c15","sha1":"5b0c53fe2da7a616e4d4197f579ad62cdeb9e81d","sha256":"320d572dfb844e7152480b7b62374236c4896ccca3ac9d69bb03f3bc2034acb8","sha512":"e47b37745d8010f92934047b5223876dafa545224d78cd840a4c31508c42d50fc52f27064db35aa565c1e2d3fcf3d9394f926ef1fb386f53f9cff881e2731f49","ssdeep":"1536:YbM1MvMaMfMRQFlDZ4eU+9GoW/WTb+1V568sQLebc9UjA691m:hpZZU+0opQLeI9u191m","tlshash":"73a330127d84015bb8064dff3895bfb466f6d7149a9100b9b470ac463eb28acb19f7b3","first_seen":"2024-11-25T11:12:50.821981Z","last_seen":"2026-04-04T06:28:21.022608Z","times_seen":1863,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":14,"dns":0,"connect":1,"send":0,"wait":11,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haxloppd.com/HG1/fonts/Toroka-Regular.woff","fqdn":"haxloppd.com","domain":"haxloppd.com","tld":"com"},"ip":{"addr":"172.67.176.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://haxloppd.com/e/zxs2lihufsbx","date":"2025-09-28T15:25:10.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haxloppd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 06:00:08 GMT","end":"Sat, 13 Dec 2025 04:58:44 GMT"},"fingerprint":{"sha1":"3A:53:BA:A8:0F:91:ED:60:F3:3F:BB:DD:7D:FE:8D:AF:86:99:3E:03","sha256":"58:4B:93:1C:A5:F7:3C:1C:C3:F3:A1:77:D5:B9:9B:F9:3C:67:CD:A6:02:BE:9A:CF:6B:7D:73:22:55:D3:F5:59"}}},"request":{"raw":"GET /HG1/fonts/Toroka-Regular.woff HTTP/1.1\r\nHost: haxloppd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haxloppd.com/HG1/css/style.css\r\nCookie: lang=1\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 28 Sep 2025 15:25:10 GMT\r\ncontent-type: font/woff\r\ncontent-length: 53652\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sat, 03 Jun 2023 09:33:42 GMT\r\netag: \"d194-5fd365d864229\"\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U3vYmiOIEL5jUzRKLTCIfP3cogrFwCgR5cOmDjbgAsdcccyDOBy9K1mkQuKjuyDmhjK4B3HB3jT9zNJvjjUkki4W5lbA6ZzQmtk%3D\"}]}\r\ncf-ray: 9864407af8ee56a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53652,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, CFF, length 53652, version 1.0","md5":"bab07f48345f390d8ea28d00f4771e34","sha1":"4998d8ee76133c9246290ef2f7e19eedeaa669d3","sha256":"6176d18bda6fff5825e2af23ddcbcaf342b226d8c4a686f9af5d8b5a801397b4","sha512":"1eef2218d639fbf30b54f8ffe3d9b719008d4b184c07a030fdcc6402d3c92e7786947b39a5a93651ed71f6b24d09e0b77e75661d6e4a88a79837f96c8b5b5edd","ssdeep":"768:/Gwz6JKNlC4CXvUQekXzBfRDGqoTNIdj8q0VT256iS6+LHBMQGXPFco8TVvNKeA:/Vz641KvUQZXNfRDGqsWCq0VM63G/sHs","tlshash":"39330283e79883b74710d93a74899d7ffde2b2c7401d3aed0fe69f9a600244928495b6","first_seen":"2024-12-14T00:38:50.474063Z","last_seen":"2026-04-02T13:28:52.633457Z","times_seen":132,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":141,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-2TL7NH453R\u0026cx=c\u0026gtm=4e59n2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://haxloppd.com/e/zxs2lihufsbx","date":"2025-09-28T15:25:10.462Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:34:53 GMT","end":"Mon, 01 Dec 2025 08:34:52 GMT"},"fingerprint":{"sha1":"DF:7E:8A:F9:1C:B5:DC:9E:90:E3:71:A7:92:85:2C:8F:2B:B4:42:8E","sha256":"3A:65:11:10:B9:58:2F:E1:BF:38:98:8D:2E:3E:A2:01:9D:C6:BE:69:5B:AD:F7:99:53:F9:AB:A6:6B:82:47:F1"}}},"request":{"raw":"GET /gtag/js?id=G-2TL7NH453R\u0026cx=c\u0026gtm=4e59n2 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haxloppd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 28 Sep 2025 15:25:10 GMT\r\nexpires: Sun, 28 Sep 2025 15:25:10 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 139998\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":419738,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"a404986cd18d7d49fff18e0a53f0d852","sha1":"a12acc6d1a5378b9b7e256676a659394f7631e9a","sha256":"60b9d764472bbb1b4b0aa39ccaadaaff91704382b02873176bbcaa0d5b8017d4","sha512":"495b24b65be169ec192cce93dd8240312794bbc12e388495d1c92d0c330addc9264b66126bbdae07724e3d1cf543f1df04f8f790df9bfee1d952e767c772b746","ssdeep":"6144:nBDpmM2/RNpvYqkD1g1/9G1SvuVcH9+23WBA:B9mLRYly/LwY","tlshash":"ee9409ce73d674265396e078907f018ba5bb28a2f44cc899f189dce42d74a9a4137f7c","first_seen":"2025-09-28T15:25:34.675556Z","last_seen":"2025-09-28T15:25:34.675556Z","times_seen":1,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":38,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/a?id=G-2TL7NH453R\u0026v=3\u0026t=t\u0026pid=1573160633\u0026cv=1\u0026rv=59n2\u0026tc=15\u0026tag_exp=101509157~103116026~103200004~103233427~104527906~104528501~104684208~104684211~104948813~115480710~115497442~115616986\u0026es=1\u0026e=gtag.config\u0026eid=9\u0026u=AAAAAAAAAAAAAIAAAAAAAABA\u0026h=Ag\u0026epr=1G.2G\u0026z=0","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://haxloppd.com/e/zxs2lihufsbx","date":"2025-09-28T15:25:10.496Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:34:53 GMT","end":"Mon, 01 Dec 2025 08:34:52 GMT"},"fingerprint":{"sha1":"DF:7E:8A:F9:1C:B5:DC:9E:90:E3:71:A7:92:85:2C:8F:2B:B4:42:8E","sha256":"3A:65:11:10:B9:58:2F:E1:BF:38:98:8D:2E:3E:A2:01:9D:C6:BE:69:5B:AD:F7:99:53:F9:AB:A6:6B:82:47:F1"}}},"request":{"raw":"GET /a?id=G-2TL7NH453R\u0026v=3\u0026t=t\u0026pid=1573160633\u0026cv=1\u0026rv=59n2\u0026tc=15\u0026tag_exp=101509157~103116026~103200004~103233427~104527906~104528501~104684208~104684211~104948813~115480710~115497442~115616986\u0026es=1\u0026e=gtag.config\u0026eid=9\u0026u=AAAAAAAAAAAAAIAAAAAAAABA\u0026h=Ag\u0026epr=1G.2G\u0026z=0 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haxloppd.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 28 Sep 2025 15:25:10 GMT\r\ncontent-type: text/html\r\nserver: Google Tag Manager\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T07:46:07.547347Z","times_seen":13322606,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-E2BG6CPV2J","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://haxloppd.com/e/zxs2lihufsbx","date":"2025-09-28T15:25:10.192Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:34:53 GMT","end":"Mon, 01 Dec 2025 08:34:52 GMT"},"fingerprint":{"sha1":"DF:7E:8A:F9:1C:B5:DC:9E:90:E3:71:A7:92:85:2C:8F:2B:B4:42:8E","sha256":"3A:65:11:10:B9:58:2F:E1:BF:38:98:8D:2E:3E:A2:01:9D:C6:BE:69:5B:AD:F7:99:53:F9:AB:A6:6B:82:47:F1"}}},"request":{"raw":"GET /gtag/js?id=G-E2BG6CPV2J HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haxloppd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 28 Sep 2025 15:25:10 GMT\r\nexpires: Sun, 28 Sep 2025 15:25:10 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 139844\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":419446,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"713b9c62374d56e81fe2108edde279ef","sha1":"09db731485428401421e8e24eeee5fc4958a413f","sha256":"a78d725074eb597eff8f38c9aac23fb61a0baa5bf9a543f0bfbee5ffe5c00afc","sha512":"c422d1440d804bf5e7c3975d93ef6fb65a126176cc3f0e8485025dcf2eacc13f89d794d34559bc01d61c484b207d4f4540e7334d40e5df8ea7a81474dd9671b4","ssdeep":"6144:qBApmM2/RNpvYqkD1g1/9G1SvuVcH9+23WBj:kOmLRYly/Lwr","tlshash":"db9409ce73d674265396e478903f018ba5bb28a2f44cc899f189dce42d74a9a4137f7c","first_seen":"2025-09-28T00:21:20.803763Z","last_seen":"2025-09-28T21:12:38.234974Z","times_seen":10,"resource_available":true,"data":null}},"time_used":309,"timings":{"blocked":93,"dns":0,"connect":17,"send":0,"wait":58,"receive":61,"ssl":78},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haxloppd.com/HG1/images/logo.svg","fqdn":"haxloppd.com","domain":"haxloppd.com","tld":"com"},"ip":{"addr":"172.67.176.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://haxloppd.com/e/zxs2lihufsbx","date":"2025-09-28T15:25:10.192Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haxloppd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 06:00:08 GMT","end":"Sat, 13 Dec 2025 04:58:44 GMT"},"fingerprint":{"sha1":"3A:53:BA:A8:0F:91:ED:60:F3:3F:BB:DD:7D:FE:8D:AF:86:99:3E:03","sha256":"58:4B:93:1C:A5:F7:3C:1C:C3:F3:A1:77:D5:B9:9B:F9:3C:67:CD:A6:02:BE:9A:CF:6B:7D:73:22:55:D3:F5:59"}}},"request":{"raw":"GET /HG1/images/logo.svg HTTP/1.1\r\nHost: haxloppd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haxloppd.com/e/zxs2lihufsbx\r\nCookie: lang=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 28 Sep 2025 15:25:10 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sat, 03 Jun 2023 09:33:42 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5EvxroQ22UDfWnw5VsCAtu57R%2FR2A4QC1zOtTqaiBNQFpfR8YlSL1IiBDlUzO7kC4rKZ7xx%2BEYCdUm1KOeiNT6tFZ1ASEWFwD7Q%3D\"}]}\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"360d-5fd365d8a12b9\"\r\ncontent-encoding: br\r\ncf-ray: 9864407aa8bf56a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13837,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5dd2e5f8cfd76e5d763cb4c3768fc713","sha1":"72b460b966cb2bee28672197aaea6e62a2186671","sha256":"6c0d5b9417d7ab991e9d848f8b6dac094062f6a0e34fd14daf352da9a50793cf","sha512":"6e81c13131a805f91ba48b9eb941683d534c12b0bafed37864c5a8a45151747cd66a2892e77f58f26b69401a80e9c263ff707e595d2a5c2cd1f3ad9b29cc41b7","ssdeep":"384:198T98FlulXjXhWJmxHY0AcYp7963kBGV:D8Z8/ZJmxHY0AcYp8kg","tlshash":"6b5298c61770a7dda9cdc9aeef31d5a4a14a90fe75b7d5c18a9e8f08184fc84f608c50","first_seen":"2024-12-14T09:22:28.587422Z","last_seen":"2026-03-20T10:48:06.211662Z","times_seen":158,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.7.1/webfonts/fa-solid-900.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://haxloppd.com/e/zxs2lihufsbx","date":"2025-09-28T15:25:10.259Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 19:09:23 GMT","end":"Tue, 16 Dec 2025 20:08:48 GMT"},"fingerprint":{"sha1":"E5:FA:6E:21:DA:AB:92:8F:E0:CB:31:C2:87:D4:E2:CE:9F:23:BF:C1","sha256":"E8:C7:D4:A8:29:E6:45:C0:C5:E3:AD:6A:90:36:30:4A:D7:2E:7C:F7:8F:57:44:E8:3B:2D:AF:F6:80:F7:4B:46"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.7.1/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://haxloppd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 28 Sep 2025 15:25:10 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 158224\r\ncf-ray: 9864407b2aada0f0-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"673e23f5-26a10\"\r\nlast-modified: Wed, 20 Nov 2024 18:01:25 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 291317\r\nexpires: Fri, 18 Sep 2026 15:25:10 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=V7%2FRoHUkXuyWTcMEy2BMNRFJQplTIJRCHvClLZhDGopPwsGGyQrM%2B76gpP1UQYWE33n3pxaeBl1I8wmTlHeKRd5cl7e5LDdF0sA0H4LDF%2FG91M1qdzS9L5sf8xZrquWcifcrKEOt\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":158224,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 158224, version 775.768","md5":"8569e341029ad642d6f62398649236b4","sha1":"1b3b218d84feb031d8adcc70742c80b625cba4ed","sha256":"38e76ab3d359e772e9f2aab11fbb07a2e2209318183a89ced0a97d6b958a7a6f","sha512":"4f6d022dc44d79c64835078a28629a91f21301e69755306a1dfe5128ade1956158e0b919caeaa5ee922971b87dd4f3a5dcf0fdc2a1606c6b12580e9ad9edfb2a","ssdeep":"3072:MM1Qd+B1NmuitFBwBEj4jSLLGNGM5W1o9fvwumLiF6Ps7Nk:I+B1NCpj4jSnGoo9fvwpOF6sNk","tlshash":"d5f3123eb5005b9bd91e1b8782ff497b5d368178e290519daa3f28a415c0e0d753cafc","first_seen":"2024-11-25T11:12:50.83498Z","last_seen":"2026-04-04T06:28:21.050446Z","times_seen":2383,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":8,"dns":0,"connect":0,"send":0,"wait":15,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/a?id=G-2TL7NH453R\u0026v=3\u0026t=t\u0026pid=1573160633\u0026cv=1\u0026rv=59n2\u0026tc=15\u0026tag_exp=101509157~103116026~103200004~103233427~104527906~104528501~104684208~104684211~104948813~115480710~115497442~115616986\u0026es=1\u0026e=gtag.config\u0026eid=11\u0026u=AAAAAAAAAAAAAIAAAAAAAABA\u0026h=Ag\u0026z=0","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://haxloppd.com/e/zxs2lihufsbx","date":"2025-09-28T15:25:10.496Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:34:53 GMT","end":"Mon, 01 Dec 2025 08:34:52 GMT"},"fingerprint":{"sha1":"DF:7E:8A:F9:1C:B5:DC:9E:90:E3:71:A7:92:85:2C:8F:2B:B4:42:8E","sha256":"3A:65:11:10:B9:58:2F:E1:BF:38:98:8D:2E:3E:A2:01:9D:C6:BE:69:5B:AD:F7:99:53:F9:AB:A6:6B:82:47:F1"}}},"request":{"raw":"GET /a?id=G-2TL7NH453R\u0026v=3\u0026t=t\u0026pid=1573160633\u0026cv=1\u0026rv=59n2\u0026tc=15\u0026tag_exp=101509157~103116026~103200004~103233427~104527906~104528501~104684208~104684211~104948813~115480710~115497442~115616986\u0026es=1\u0026e=gtag.config\u0026eid=11\u0026u=AAAAAAAAAAAAAIAAAAAAAABA\u0026h=Ag\u0026z=0 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haxloppd.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 28 Sep 2025 15:25:10 GMT\r\ncontent-type: text/html\r\nserver: Google Tag Manager\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T07:46:07.547347Z","times_seen":13322606,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}