{"report_id":"bab048df-d958-4225-b167-8c88ba3df99c","version":0,"status":"done","tags":[],"date":"2026-08-13T23:45:55Z","url":{"schema":"https","addr":"bloxlink.win/gen","fqdn":"bloxlink.win","domain":"bloxlink.win","tld":"win"},"ip":{"addr":"5.175.169.200","port":0,"asn":209193,"as":"Super Cell Network For Internet Services Ltd","country":"Iraq","country_code":"IQ"},"final":{"url":{"schema":"https","addr":"bloxlink.win/gen","fqdn":"bloxlink.win","domain":"bloxlink.win","tld":"win"},"title":"Fake Bloxlink Gen","dom":{"size":21694,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (10052)","md5":"4b1fa86b9c2e8586810dc338ea3806a9","sha1":"58c66bb10ca9abb001d44ab1ac0406eb82d20e5b","sha256":"31cb32703b5b23b53ac5942869a20019957b2d4ada666a23f1a2d6f4ca2fca85","sha512":"401e1745c95b92daca8147ed0a3bda18975059c4209a61f87d06a2a1e031af05cb5d524d069d916a1e0e3df2dbf7f8c6a7a2e26037319c712bd4d51b422cf7fc","ssdeep":"384:ewgEiU7hL7lld8hEy+WbQ+oArp4wSN+HOaZhAp:ewgEiU7hnLihEy+WbQR2JSNkEp","tlshash":"b3a2a51976a110196c53c0f5eae8b6687a3dd1c3da2fcebcba9e5510afc35a61dc3304","dom_hash":"domhash46d1c9ff8b38663bad4b0afc6a833641","first_seen":"2026-08-13T23:45:59.664381Z","last_seen":"2026-08-13T23:45:59.664381Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"bloxlink.win/gen","fqdn":"bloxlink.win","domain":"bloxlink.win","tld":"win"},"ip":{"addr":"5.175.169.200","port":0,"asn":209193,"as":"Super Cell Network For Internet Services Ltd","country":"Iraq","country_code":"IQ"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-17T23:45:55Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"bloxlink.win","ip":{"addr":"5.175.169.200","port":443,"asn":209193,"as":"Super Cell Network For Internet Services Ltd","country":"Iraq","country_code":"IQ"},"domain_registered":"2026-08-12","domain_rank":0,"first_seen":"2026-08-13T23:45:56.338818Z","last_seen":"2026-08-13T23:45:56.338818Z","alert_count":0,"request_count":4,"received_data":377103,"sent_data":1839,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]}]},{"fqdn":"cdn.tailwindcss.com","ip":{"addr":"172.67.68.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-07-20","domain_rank":117330,"first_seen":"2018-07-09T05:46:13Z","last_seen":"2026-08-10T09:00:58.423729Z","alert_count":0,"request_count":2,"received_data":408711,"sent_data":930,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"172.67.68.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","size":407279,"data":"","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-08-14T03:22:02.080125Z","times_seen":49096,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bloxlink.win/app.js","fqdn":"bloxlink.win","domain":"bloxlink.win","tld":"win"},"ip":{"addr":"5.175.169.200","port":443,"asn":209193,"as":"Super Cell Network For Internet Services Ltd","country":"Iraq","country_code":"IQ"},"introduction_type":"scriptElement","is_inline":false,"md5":"cbd5799c7eeaa7aca3d11eeff946bd9f","sha1":"8562c2e935e27b57b55219aab1fac5a54d1c4900","sha256":"9383026e937c6f39d9bc148436b08aff31150968c117d05ab2f17bf2a8932c51","sha512":"e56990b88d673afd6a0c43f6eeaec2f2370031736b849424b12f504c7cf2906d2bcb6ac7a53a497d3249b8a85eee28b45b0b8b3f20b92561eaf845f2f8eb0664","ssdeep":"1536:tVhZBUv5j6ln6hZfuGJRQBaVqxxl+P6Jlz3ipC331HSW3cPAD:Xav5j6ln6hZfu9xxl+Put3jVWC","tlshash":"66f39797684fac33d3cd9904492f58188aeb286633cc7c2cdf55d64a3a6466c77ef0a1","size":158476,"data":"","first_seen":"2026-08-13T23:45:59.667861Z","last_seen":"2026-08-13T23:45:59.667861Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bloxlink.win/gen","fqdn":"bloxlink.win","domain":"bloxlink.win","tld":"win"},"ip":{"addr":"5.175.169.200","port":443,"asn":209193,"as":"Super Cell Network For Internet Services Ltd","country":"Iraq","country_code":"IQ"},"introduction_type":"Function","is_inline":false,"md5":"198ac3aea73c4223e8f2daa3227a40cf","sha1":"25fd38ab732ec66167da0e0c127fb3dbcc470dd2","sha256":"86a2b3be4303cbb5c8d56df4168cdf6d9a706d4c891b32433495dbad1f0f79d7","sha512":"723413dfa834128c245fce5f3e453fb9c23b0913ad2985803afb282ea21aa09a9b4415bffa4b42258bed3dd6078a005aa0b6c4fd06750baac67bca7535e2f28e","ssdeep":"1536:qV/mRbyVr8JPh1JZQBaXGVN4ZsLn34pChXnYW9cxwY:RRbyVr8JZMVN4ZsD39dip","tlshash":"dee38557684f6c73e3cd98044a1f64188aeb2866338c7c5cef56d64a3a6065c77ef0a2","size":156059,"data":"","first_seen":"2026-08-13T23:45:59.669917Z","last_seen":"2026-08-13T23:45:59.669917Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"warn","text":"cdn.tailwindcss.com should not be used in production. To use Tailwind CSS in production, install it as a PostCSS plugin or use the Tailwind CLI: https://tailwindcss.com/docs/installation","filename":"https://cdn.tailwindcss.com/","line_number":64,"column_number":1711}]},"http":[{"url":{"schema":"https","addr":"bloxlink.win/domains.txt","fqdn":"bloxlink.win","domain":"bloxlink.win","tld":"win"},"ip":{"addr":"5.175.169.200","port":443,"asn":209193,"as":"Super Cell Network For Internet Services Ltd","country":"Iraq","country_code":"IQ"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bloxlink.win/gen","date":"2026-08-13T23:45:21.992Z","timestamp":1786664721992,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bloxlink.win","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 19:25:03 GMT","end":"Tue, 10 Nov 2026 19:25:02 GMT"},"fingerprint":{"sha1":"80:43:2F:E9:A3:97:7B:61:C3:0E:06:2A:A8:8D:51:90:92:8B:E4:61","sha256":"18:F5:2F:AC:41:08:41:75:96:7A:05:C8:96:1C:F7:93:08:D5:49:9D:59:3C:66:D3:01:17:8E:E7:78:6D:51:BC"}}},"request":{"raw":"GET /domains.txt HTTP/1.1\r\nHost: bloxlink.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bloxlink.win/gen\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Thu, 13 Aug 2026 23:45:22 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 60\r\nEggy-Wall: 15.6\r\nAbuse: abuse@eggywall.org\r\nLast-Modified: Sun, 10 May 2026 14:50:48 GMT\r\nEtag: \"6a009b48-3c\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":60,"size_decoded":332,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with CRLF line terminators","md5":"115658699f805c3d8645cd2a8e688928","sha1":"e2a078b43c87ea1bf7a927d63608e802cc36cc42","sha256":"d3c5d466b6ca66ecf303e50b0531f312b4af07502118eaa77973799c82c4cebb","sha512":"7507ee4959038d8c414b588c74ecd6015cb938bbe50609d025412ed921d40d64f9ebc16157485f5e3490806bb894738ffc9a0746414313e075fc6b27a4fdace0","ssdeep":"","tlshash":"dba0027c57041402b0565801d01c04a0700500f00000d3cbcb53753c4f0491c34500f3","first_seen":"2026-08-13T23:45:59.665487Z","last_seen":"2026-08-13T23:45:59.665487Z","times_seen":1,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":0,"dns":0,"connect":28,"send":0,"wait":34,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bloxlink.win/gen","fqdn":"bloxlink.win","domain":"bloxlink.win","tld":"win"},"ip":{"addr":"5.175.169.200","port":443,"asn":209193,"as":"Super Cell Network For Internet Services Ltd","country":"Iraq","country_code":"IQ"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-13T23:45:18.040Z","timestamp":1786664718040,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bloxlink.win","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 19:25:03 GMT","end":"Tue, 10 Nov 2026 19:25:02 GMT"},"fingerprint":{"sha1":"80:43:2F:E9:A3:97:7B:61:C3:0E:06:2A:A8:8D:51:90:92:8B:E4:61","sha256":"18:F5:2F:AC:41:08:41:75:96:7A:05:C8:96:1C:F7:93:08:D5:49:9D:59:3C:66:D3:01:17:8E:E7:78:6D:51:BC"}}},"request":{"raw":"GET /gen HTTP/1.1\r\nHost: bloxlink.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Thu, 13 Aug 2026 23:45:18 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Encoding: gzip\r\nContent-Length: 2745\r\nEggy-Wall: 15.6\r\nAbuse: abuse@eggywall.org\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nLast-Modified: Sun, 03 May 2026 20:44:23 GMT\r\nEtag: \"2f3d-650efe1082bdc-gzip\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]}],"data":{"size":12093,"size_decoded":3077,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (325)","md5":"06fd2af6f3abd7e36ffd998490408a1e","sha1":"973415c2a7b3a2a5c93f3c8de60f4e2aa1333149","sha256":"d1fc813d972fbd2eab8b1e9f671c020776d64efec466e9b7c837fd2bdaf95e5c","sha512":"d0b838600f3d3a8f27b16b327d043e5e42811ad0f90194611b3eee74e309f02cbef111cfd57343ea27a045430fc99c305f5413ea6730186c35c8a8c0c684b130","ssdeep":"192:qhcykFPfxyG6PfVy0Ky80ofUys3YyQs66S0tFehoTQUPD2YUdP6mfpDYtQOGyc9G:qwgEiUDcArp4wSN+I8Mkq","tlshash":"5042615d29f32159204791b02bad7b397e7cd503d61fcd6c3a9da690df82a826ec3318","first_seen":"2026-08-13T23:45:59.666379Z","last_seen":"2026-08-13T23:45:59.666379Z","times_seen":1,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":63,"connect":28,"send":0,"wait":40,"receive":0,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"172.67.68.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bloxlink.win/gen","date":"2026-08-13T23:45:18.533Z","timestamp":1786664718533,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 20:38:38 GMT","end":"Thu, 15 Oct 2026 21:38:35 GMT"},"fingerprint":{"sha1":"AF:4F:AD:59:FA:ED:77:04:0D:32:56:48:B0:E5:1B:38:67:6D:7D:02","sha256":"E7:FC:CF:2D:6A:CC:F5:3C:4C:1E:9D:CD:21:8A:72:A3:DB:7C:B1:50:0F:83:D1:DC:E4:AD:25:90:8F:98:37:0F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bloxlink.win/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Thu, 13 Aug 2026 23:45:21 GMT\r\ncache-control: max-age=14400\r\nlocation: /3.4.17\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::sdsdt-1786664342211-c8684dacbc34\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 379\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bJIwdTM0S7dQ9vzT63JGO%2FZ8j9Qn0agPcbRdSjG08IUvKGdgb6%2Fx%2Bn10UcxC0nNgwLCZhZb%2Bizll%2Fe9nUzJyy5zDdsAwWt1k0aGvyTovnB05SttWIkNXklM%2FPjWa8tK6NpK4LRc%3D\"}]}\r\ncf-ray: a2ab97ce59e4120a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T03:51:58.108275Z","times_seen":17880330,"resource_available":true,"data":null}},"time_used":3130,"timings":{"blocked":-1,"dns":3,"connect":1,"send":0,"wait":5,"receive":0,"ssl":3120},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bloxlink.win/app.js","fqdn":"bloxlink.win","domain":"bloxlink.win","tld":"win"},"ip":{"addr":"5.175.169.200","port":443,"asn":209193,"as":"Super Cell Network For Internet Services Ltd","country":"Iraq","country_code":"IQ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bloxlink.win/gen","date":"2026-08-13T23:45:18.534Z","timestamp":1786664718534,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bloxlink.win","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 19:25:03 GMT","end":"Tue, 10 Nov 2026 19:25:02 GMT"},"fingerprint":{"sha1":"80:43:2F:E9:A3:97:7B:61:C3:0E:06:2A:A8:8D:51:90:92:8B:E4:61","sha256":"18:F5:2F:AC:41:08:41:75:96:7A:05:C8:96:1C:F7:93:08:D5:49:9D:59:3C:66:D3:01:17:8E:E7:78:6D:51:BC"}}},"request":{"raw":"GET /app.js HTTP/1.1\r\nHost: bloxlink.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bloxlink.win/gen\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Thu, 13 Aug 2026 23:45:18 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nContent-Encoding: gzip\r\nContent-Length: 45211\r\nEggy-Wall: 15.6\r\nAbuse: abuse@eggywall.org\r\nX-Cache-Url: https://bloxlink.win/app.js\r\nLast-Modified: Sun, 10 May 2026 20:25:03 GMT\r\nX-Cache: HIT\r\nEtag: W/\"6a00e99f-26b0c\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":158476,"size_decoded":45561,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"cbd5799c7eeaa7aca3d11eeff946bd9f","sha1":"8562c2e935e27b57b55219aab1fac5a54d1c4900","sha256":"9383026e937c6f39d9bc148436b08aff31150968c117d05ab2f17bf2a8932c51","sha512":"e56990b88d673afd6a0c43f6eeaec2f2370031736b849424b12f504c7cf2906d2bcb6ac7a53a497d3249b8a85eee28b45b0b8b3f20b92561eaf845f2f8eb0664","ssdeep":"1536:tVhZBUv5j6ln6hZfuGJRQBaVqxxl+P6Jlz3ipC331HSW3cPAD:Xav5j6ln6hZfu9xxl+Put3jVWC","tlshash":"66f39797684fac33d3cd9904492f58188aeb286633cc7c2cdf55d64a3a6466c77ef0a1","first_seen":"2026-08-13T23:45:59.667861Z","last_seen":"2026-08-13T23:45:59.667861Z","times_seen":1,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/3.4.17","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"172.67.68.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bloxlink.win/gen","date":"2026-08-13T23:45:21.670Z","timestamp":1786664721670,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 20:38:38 GMT","end":"Thu, 15 Oct 2026 21:38:35 GMT"},"fingerprint":{"sha1":"AF:4F:AD:59:FA:ED:77:04:0D:32:56:48:B0:E5:1B:38:67:6D:7D:02","sha256":"E7:FC:CF:2D:6A:CC:F5:3C:4C:1E:9D:CD:21:8A:72:A3:DB:7C:B1:50:0F:83:D1:DC:E4:AD:25:90:8F:98:37:0F"}}},"request":{"raw":"GET /3.4.17 HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bloxlink.win/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 13 Aug 2026 23:45:21 GMT\r\ncontent-type: text/javascript\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::kcph7-1785159739950-b8e36432cd95\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nage: 1504981\r\nlast-modified: Thu, 30 Jul 2026 09:47:27 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HfDZngZKByu2USJQWK8wNq7svW7keh6ZwatwKK%2FRttToJ%2BX%2F%2FndRXadhop2I9ExTo5ezA6GxJIQGl4iWHLIuHgKNW0fc9U7a5BTOYHpEpeZ199%2FAhH8IbiiKGhRWpZG0aKttEN4%3D\"}]}\r\ncf-ray: a2ab97ce6a06120a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":407279,"size_decoded":127124,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (52853)","md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-08-14T03:22:02.080125Z","times_seen":49096,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bloxlink.win/favicon.ico","fqdn":"bloxlink.win","domain":"bloxlink.win","tld":"win"},"ip":{"addr":"5.175.169.200","port":443,"asn":209193,"as":"Super Cell Network For Internet Services Ltd","country":"Iraq","country_code":"IQ"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bloxlink.win/gen","date":"2026-08-13T23:45:21.988Z","timestamp":1786664721988,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bloxlink.win","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 19:25:03 GMT","end":"Tue, 10 Nov 2026 19:25:02 GMT"},"fingerprint":{"sha1":"80:43:2F:E9:A3:97:7B:61:C3:0E:06:2A:A8:8D:51:90:92:8B:E4:61","sha256":"18:F5:2F:AC:41:08:41:75:96:7A:05:C8:96:1C:F7:93:08:D5:49:9D:59:3C:66:D3:01:17:8E:E7:78:6D:51:BC"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: bloxlink.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bloxlink.win/gen\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Thu, 13 Aug 2026 23:45:21 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Encoding: gzip\r\nContent-Length: 45358\r\nEggy-Wall: 15.6\r\nAbuse: abuse@eggywall.org\r\nLast-Modified: Sun, 17 May 2026 17:54:20 GMT\r\nEtag: \"32145-6520722afaa2a-gzip\"\r\nX-Cache: HIT\r\nX-Cache-Url: https://bloxlink.win/favicon.ico\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":205125,"size_decoded":45753,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (17374), with CRLF line terminators","md5":"827d945e35c71263c91ac1cc2ac5d721","sha1":"8f5a89924f731ad7de341d5d478bcee0204399a9","sha256":"57f94a1e89a0992b8425c3dbabe7d700fcbbaf77eaa59b1fe8e01e8bdbd885d0","sha512":"d76e4b2830ddf153505ae35ccdc1e9416eda790e3093815953975c41a8037f10f453d89ecaeb974fde6157a1013b168ca9b7bd3090630ee05199871a12ba04f6","ssdeep":"1536:1/YrYRHuBbF9i3agRa0En3EQSivBQdin/E/JJMJjKazumlISoo2brrlCc:NYrY8tFaagA0ougQGYC2LZv","tlshash":"8e1471ec8c9593168b1355744033279a9945842ee6863566bb8cf24fe7abdd1e3c3ccc","first_seen":"2026-05-24T16:49:56.041732Z","last_seen":"2026-08-13T23:45:59.66939Z","times_seen":4,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}