{"report_id":"be4463dc-dc83-46cf-90af-a5e5df0e5b70","version":6,"status":"done","tags":[],"date":"2026-03-31T16:33:58Z","url":{"schema":"https","addr":"robloxwin.com/","fqdn":"robloxwin.com","domain":"robloxwin.com","tld":"com"},"ip":{"addr":"104.21.64.71","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"lootx.com/?r=603893","fqdn":"lootx.com","domain":"lootx.com","tld":"com"},"title":"Earn Points, Redeem Loot | Free Gift Cards \u0026 Crypto - LootX","dom":{"size":39,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"086707e4369f60afedcafb16050a7618","sha1":"8216b0cc6876cbd44f01c158e7dff3833ceccd41","sha256":"a7fe83ec64bb23eb28090598db3d166ed98e52e39d1afbbfd74c579553f93e4e","sha512":"aade21843813e2cab329b99185c6f61db7907a556ea974e0315dcf3ad967cab20fee66d4f10db0d0ec43a71e086ce6d700d5524103deaefa3ce5f6be74ba5737","ssdeep":"","tlshash":"6a9000fee0a2000efc303bc00cc2238a0c28c3a830028e002ac038b8c80822bcc032c8","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"2023-03-07T01:03:24Z","last_seen":"2026-08-05T12:02:55.495787Z","times_seen":1035332,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"robloxwin.com/","fqdn":"robloxwin.com","domain":"robloxwin.com","tld":"com"},"ip":{"addr":"104.21.64.71","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-05T16:33:58Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-03-31","alert":"Hunting_JS_WebAssembly","trigger":"s.nitropay.com/ads-1828.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null},"summary":[{"fqdn":"ad-delivery.net","ip":{"addr":"172.66.148.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-05-03","domain_rank":3060,"first_seen":"2017-06-22T05:33:30Z","last_seen":"2026-03-26T00:14:50.757619Z","alert_count":0,"request_count":11,"received_data":12826,"sent_data":4403,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"robloxwin.com","ip":{"addr":"172.67.177.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-07-20","domain_rank":0,"first_seen":"2026-03-31T16:34:02.522353Z","last_seen":"2026-03-31T16:34:02.522353Z","alert_count":0,"request_count":1,"received_data":29550,"sent_data":482,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-29T22:16:18.281815Z","alert_count":0,"request_count":9,"received_data":398427,"sent_data":4844,"comment":"","tags":null,"fingerprints":null},{"fqdn":"lootx.com","ip":{"addr":"104.26.13.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-10-09","domain_rank":235023,"first_seen":"2015-04-19T19:04:03Z","last_seen":"2025-12-29T07:33:48.665208Z","alert_count":0,"request_count":17,"received_data":654551,"sent_data":8440,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Font Awesome","description":"Font Awesome is a font and icon toolkit based on CSS and Less.","website":"https://fontawesome.com/","common_platform_enumeration":"","icon":"Font Awesome.svg","categories":["Font scripts"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"jQuery:3.6.3","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]},{"fqdn":"ats-wrapper.privacymanager.io","ip":{"addr":"3.167.2.72","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2019-11-21","domain_rank":15932,"first_seen":"2021-09-15T20:22:08Z","last_seen":"2026-03-29T04:20:28.814132Z","alert_count":0,"request_count":2,"received_data":256216,"sent_data":876,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-29T22:20:07.848058Z","alert_count":0,"request_count":7,"received_data":49196,"sent_data":3185,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.confiant-integrations.net","ip":{"addr":"104.18.43.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-07-28","domain_rank":9120,"first_seen":"2022-09-15T09:38:48Z","last_seen":"2026-03-28T16:28:02.507606Z","alert_count":0,"request_count":4,"received_data":1633414,"sent_data":1689,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"s.nitropay.com","ip":{"addr":"104.18.3.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2003-11-04","domain_rank":155654,"first_seen":"2018-05-21T15:18:02Z","last_seen":"2026-03-25T19:34:06.566314Z","alert_count":1,"request_count":10,"received_data":905174,"sent_data":4021,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"consent.nitrocnct.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-07-21","domain_rank":164926,"first_seen":"2022-10-31T21:02:17Z","last_seen":"2026-03-27T09:16:41.121416Z","alert_count":0,"request_count":2,"received_data":914886,"sent_data":847,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}]},{"fqdn":"kit.fontawesome.com","ip":{"addr":"104.18.40.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-10-18","domain_rank":16651,"first_seen":"2019-03-29T02:12:52Z","last_seen":"2026-03-30T03:31:28.031913Z","alert_count":0,"request_count":1,"received_data":15898,"sent_data":410,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"t.nit.ro","ip":{"addr":"35.244.144.25","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":102716,"first_seen":"2023-12-02T03:29:23Z","last_seen":"2026-03-25T19:34:07.771104Z","alert_count":0,"request_count":1,"received_data":170,"sent_data":547,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"ab.dns-finder.com","ip":{"addr":"34.36.200.111","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2024-07-18","domain_rank":0,"first_seen":"2025-10-24T08:56:49.667026Z","last_seen":"2026-03-28T12:02:00.952687Z","alert_count":0,"request_count":2,"received_data":810,"sent_data":804,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"api.btloader.com","ip":{"addr":"130.211.23.194","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2020-10-06","domain_rank":7055,"first_seen":"2020-10-14T15:25:59Z","last_seen":"2026-03-26T05:53:14.948038Z","alert_count":0,"request_count":3,"received_data":876,"sent_data":1451,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"floors.nitropay.com","ip":{"addr":"35.244.144.25","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2003-11-04","domain_rank":194472,"first_seen":"2025-01-13T15:35:22.272241Z","last_seen":"2026-03-25T19:34:06.481819Z","alert_count":0,"request_count":1,"received_data":272,"sent_data":413,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-03-29T22:23:59.734728Z","alert_count":0,"request_count":3,"received_data":763618,"sent_data":1835,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ka-f.fontawesome.com","ip":{"addr":"172.67.139.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-10-18","domain_rank":58377,"first_seen":"2019-12-17T06:36:13Z","last_seen":"2026-03-30T11:14:15.353619Z","alert_count":0,"request_count":5,"received_data":221944,"sent_data":2318,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"btloader.com","ip":{"addr":"104.20.20.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-10-06","domain_rank":975,"first_seen":"2020-10-22T20:38:52Z","last_seen":"2026-03-26T00:14:50.62659Z","alert_count":0,"request_count":2,"received_data":159779,"sent_data":955,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-199556335-1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fbfd508602e78c00f5cd785b2f2e51a9","sha1":"2cc3bd108aa4de8c29fb87bcb17329a911bad869","sha256":"844b13f9df901a92283f9178b5a3f30581aadfcbd55c80ebac56eeecafd88a91","sha512":"b2e9b0f203837ac7ccbb1b4ccd11cb6f99b7f4071f7fcccc675fc23cbd541238c7ee6530e3703a9eecd4776481c0877efb96ef79edd9f42ead66d019207386f6","ssdeep":"6144:85J1WXfSmQT2CVEhMjyR8USsXDhs1M1LjvDNXtbpb8BTL:RSmQTnVEh98ZwVtby","tlshash":"4f7419cdb3d674665393a478903f008ba27a79d2f84cc899f185d8d42e706aa4277f3d","size":352538,"data":"","first_seen":"2026-03-31T16:34:06.506324Z","last_seen":"2026-03-31T16:36:13.106171Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.nitropay.com/ads-arcspan.8fc7578a2d00f8aa7a18.js","fqdn":"s.nitropay.com","domain":"nitropay.com","tld":"com"},"ip":{"addr":"104.18.3.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cbe2f3d8d7a18d0914dc44bd15c0d5df","sha1":"6854a48cec3864ae05beede8804e7b64e13460f6","sha256":"6d51cc4c1338720545dc666f4df3fe1a78b2e9d97058dad6afe5c9353b60312c","sha512":"7095baa45125fc87d834eeeb173ebdf710198596ad24a472ad8114dcf019c6ea1837eed19e27aec0ef368c660978315b56870cabe516c1e8a25ce88d38865a38","ssdeep":"","tlshash":"10f0235a3689c49e11dd18e980b5d555ec0d10082685cd96a29b0cc4b83eedf7126f4c","size":652,"data":"","first_seen":"2025-12-16T22:05:48.084242Z","last_seen":"2026-08-01T20:39:17.580103Z","times_seen":589,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lootx.com/assets/js/connect.js?v=1.1.1","fqdn":"lootx.com","domain":"lootx.com","tld":"com"},"ip":{"addr":"104.26.13.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e604f10de84691b525723fc7111027a7","sha1":"620d7509f02ae8e95a9765f62eff048bdc11e941","sha256":"2dbb2a9687708d39deb90361684abc403d4b9952f33fa061e42d251070f0877a","sha512":"6b4a3178a9c0df2ff40b8ce34bf30526c1cc42b6f3622054b96b5a4152a27e8d688fd548da89c038936db623587c40dc7dd55cfceeef61d1b0af01f46fa2d91d","ssdeep":"96:nPnV+1kHHWHn/4tvyrk9Qt6Gnfd2+BaSznDU5+8HlaRh:PlHHWHn/4tX2P3U88HlAh","tlshash":"e1e1b889b9f65031647b753a4bff6060323a848b664cde147ebc8fa00f4425966f3bd9","size":7204,"data":"","first_seen":"2025-12-17T14:51:52.990476Z","last_seen":"2026-03-31T16:36:13.12509Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lootx.com/assets/plugins/bootstrap/popper.min.js","fqdn":"lootx.com","domain":"lootx.com","tld":"com"},"ip":{"addr":"104.26.13.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3eefbcee739df47939de2a79653da4b0","sha1":"145d05b4aa8f7d3e0253406951abc69b11d7af58","sha256":"55305bb9041fddba69d6eee99b956bb169fe5a7e9c84e896d94d5d38c060f59b","sha512":"c8e31bb6f70b4ed2af4cd2909037e1453e91d5243529bebeac4a7edeb97e9af73fbb353a37041ed6a6a9f70fb2c85ff3078476ed322f324ffbfea495fe03976e","ssdeep":"384:fIhLSLf4UzgFyKnxRsUPMbOXrEQAkxHOxvqAQD75zfS5vIXm3EzGp/ARdOgHhgza:YLSLAUzgFpbMbcxHOxvwD7pS5vazy/AT","tlshash":"e692a3cc3294b06647ab91a7a07f960eb2339875610e9410f19df2d97c30ef9a13bd79","size":20611,"data":"","first_seen":"2023-03-07T12:02:20Z","last_seen":"2026-07-22T04:44:01.009844Z","times_seen":138,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lootx.com/sandbox%20eval%20code","fqdn":"lootx.com","domain":"lootx.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"92b651082ce234f66bb544e678befda3","sha1":"14c21c55ddce43b6f677caadf51d4ab98c6a3df8","sha256":"25d57d1d97abeb84531d3d3e5754dd5cb19a2c115edfa7cfc7af8247084faded","sha512":"b4fcbc037e0a3d91db2a624921e96b878e9e18dd998ad5649d77d7d053faf28b09c8725a0542aef702310bf85f3037b70985c274db8acabd021efb171d41f361","ssdeep":"","tlshash":"34c08ca3e74026ae2a1166b2b810e003a2866b015aa78402b00a003b1441fe21aaa1a8","size":147,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-06-07T08:18:38.896325Z","times_seen":921522,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ats-wrapper.privacymanager.io/ats-modules/438cb908-ed61-41e9-b716-05d5f4122a64/ats.js","fqdn":"ats-wrapper.privacymanager.io","domain":"privacymanager.io","tld":"io"},"ip":{"addr":"3.167.2.72","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bed77b09df36050cffca2f15ec751180","sha1":"7047dcf4a72a70b0a64239f91cd2e872b6c0c29a","sha256":"16001190a7a501f9c484e3c887db95d8f68a5959e044bf2066c96d62b7681442","sha512":"aeabf1907f3e59828f1e95ea2fa30ff02def506133054348917779bd6d1d59a3135087c587a2991fceec188ae485fc877bb920b7f1058e2faa2b73ce43c42f70","ssdeep":"1536:1T1wG6qJdvIt2iIo+TSq9vLq7ikbqJkO29askn0iCsLxxucK97IYgQ/s8VERzODo:1Q0dvIt2iIo+TSiLXkbQ2Ask0sacOtAN","tlshash":"00c32bca31e1f4d613e750f0902f610ab3b268a9281cd490f7a4dce56d76b4e91b3f69","size":127492,"data":"","first_seen":"2026-02-11T17:09:00.637431Z","last_seen":"2026-07-19T15:33:24.827042Z","times_seen":331,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.confiant-integrations.net/gptprebidnative/202601281034/wrap.js","fqdn":"cdn.confiant-integrations.net","domain":"confiant-integrations.net","tld":"net"},"ip":{"addr":"104.18.43.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ce66050670b29f88d4d2f8ac96e7a116","sha1":"2bd53510a841a01f5cf2216c4471f9858c1f1fb2","sha256":"7a3dc3fc38ff4e0f2e6d4b827bca5c88497993aa726f960a714c0470f6d77ea5","sha512":"4ef5bd6fd871760822d35c678f306dca9512bfee6e7d5a40df622e418d76a67335ffc627a515bd12ac18bf3548bd338793c1bd3b7822530b284ff9105e888340","ssdeep":"","tlshash":"0e11af6c0c9191a14f5781961a1abf82f331de9e6bddce016026b3ec3e41c34d08b9bd","size":1001,"data":"","first_seen":"2026-01-29T22:42:08.691943Z","last_seen":"2026-06-05T05:22:18.952898Z","times_seen":85,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lootx.com/assets/js/pages/dashboard.js","fqdn":"lootx.com","domain":"lootx.com","tld":"com"},"ip":{"addr":"104.26.13.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"acfd7bcc329a483633580b70cbb47c9d","sha1":"ca7bf10f6a68b5f3c7a8f2a5757b6aea8e65e60f","sha256":"e2116cd024b031f3e633acd3fb7104255ce6ce4911c7b7a6680fadf1f89a16e9","sha512":"335f6c9fe4c09840723b6e6c85283356e8ef0126af2eb1b221a7b71b887d732140c67a509b53b976d6d5e66b675115c8b34214b6eb00549848e87de1617314d3","ssdeep":"192:Fy/FhFea/NY6OvBcyeg/qzuQe9XeyWrp2J:FwcZp9Oy8p6","tlshash":"f002fca8a4a24255e1aafb681b7af111556d354b6cce7e14ba3c12000fad5ec37f4f8c","size":8296,"data":"","first_seen":"2025-12-17T14:51:52.975462Z","last_seen":"2026-03-31T16:36:13.108377Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google-analytics.com/analytics.js","fqdn":"www.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f24128d0c9cba7be2916c693427a3483","sha1":"1b6397d496ea896ebc2018b01b995cee4f166029","sha256":"58173de4697da1a218f04c3a783a733bab4e769ceabc37cd42da9dc3e036a7e8","sha512":"c4950733b44e258bbc817ce6396f002caec1e11a6413fd0038c9baef2d5f1d992b1fd0ec52515aba52faedb52c28b996a7fc063f28a0f45f3aab5e2f91bf5be5","ssdeep":"96:A1VdZYqhPnjpWx4/eTe8qSMbqaQd6VL2Jyt9LdJoyayCVPVD5wdBfQPfCHiUr3:AXdZYqNjpU4yPqSMbqaQGL2QfdDayCZC","tlshash":"a6a1dc9939fb50210233b1bd1bafa918b23895236208dd61b98c9364bf94437d7f1fc9","size":4691,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-06-07T08:18:38.899011Z","times_seen":919823,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-EET80J08NY\u0026cx=c\u0026gtm=4e63u0","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"196913ddff9986e7a9725418e8a5d69f","sha1":"25afebd143aa0af44cccc9cc23fd61159295e3c6","sha256":"5e67fa47dd1e5f745c747e051df9ecd91dc72ddc052752f69768c48ded6fa01f","sha512":"01dd11707fd2082d78ad2043b71936f50f1519fe9124497af92c85f7a473ddbaa1481ce174011639a36b91e5e0772c5d2a4afcb56b057f074efd8f280b2789f8","ssdeep":"","tlshash":"c011ed1af009a8b6c022eb71b2df6585223e44f2875c384097aa84ac2d745b9342b75f","size":1000,"data":"","first_seen":"2025-12-17T14:51:53.028952Z","last_seen":"2026-03-31T16:34:06.653519Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.nitropay.com/gpp-61d490e.min.js","fqdn":"s.nitropay.com","domain":"nitropay.com","tld":"com"},"ip":{"addr":"104.18.3.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f395e7dd1a28244d02ec61ab69555c1b","sha1":"6eb5f963cf2cdc08f9272909481535932491d8af","sha256":"fc5521185e7dec9f2c67fdf916d6a81db3ca1d571b1e8d89ffb7dec282e83d31","sha512":"7000e497d5d64c35303d43a8dbaa225091040a7f97a8d2273d84528ea8bdb9a1bbfcc146ea00d9c4e004ffb3659a421226cff0900937b5cc696094014d12ca49","ssdeep":"6144:KDkB6373jBqwke6WYr4mVeMrGlX6mUJVneJ7ODnt1fQLZPlTwGLf5qHDIf4RakOh:EEyi4m2WWvyO5jIsy0","tlshash":"72342b4476f0a0b6115f40a3c62af5267a353968940818607ebc7ccd1fc6ace9c6bfbd","size":232723,"data":"","first_seen":"2025-06-27T23:48:54.667058Z","last_seen":"2026-08-01T20:39:17.568692Z","times_seen":2662,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lootx.com/?r=603893","fqdn":"lootx.com","domain":"lootx.com","tld":"com"},"ip":{"addr":"104.26.13.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cda057d86b488f670aeddaa0659236f2","sha1":"438ff52a80891591ea84cf9a691e95cf6305908b","sha256":"e3c6a7c6540755f114b2a3a4c925383e1c722f4a9ebbb092591e41b7c84bb0c8","sha512":"b2019e29677b0576001d0169298a777af5be624fc3b39bea580c8240e4ee2ba3935a3906d49677a24a931869b397edf2883d354741e9942c5b98a24b87903273","ssdeep":"","tlshash":"82d08c88211b4c7192b72b0a4b6fe600b0062213a5909d223d0e63048f21e03eb58804","size":195,"data":"","first_seen":"2024-09-19T21:29:09.899979Z","last_seen":"2026-03-31T16:36:13.222548Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.confiant-integrations.net/IKOzVPjtHv3tevs-RDaJOMdtkBI/video/config.js","fqdn":"cdn.confiant-integrations.net","domain":"confiant-integrations.net","tld":"net"},"ip":{"addr":"104.18.43.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4bcf1ed016e281d87ecb0b617b3d5c4e","sha1":"5acfc5b2e9c526afc5ae50acace11859ab5b3b82","sha256":"ddb6be17d4450a82bc54179aea3111775d79da1a8f5623e0954d33d693fb8c15","sha512":"1525915d9b24b3a2484ab983ccd35f86fdf43b6e0fd41bf53566e483d4dfb7397ef7ab2f19db70cfdd0938b3be75ee74ca2c9e12e756d3d62b8c372218566fd1","ssdeep":"3072:9FWen+PkM7Z2A2WrB8LN7qfKTVPrAlAUOK4WiMODO8uQ6Uj:XWw+PkuoA2WrB8JKKBPrAlNOK4Wq6rQn","tlshash":"0444991e096e247cf56339dbd69f1d20a59d12cbabecc9a0d6537f8c024b7012d2f568","size":266164,"data":"","first_seen":"2026-03-31T16:34:06.483184Z","last_seen":"2026-03-31T16:36:13.157309Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lootx.com/assets/plugins/jquery/jquery-3.6.3.min.js","fqdn":"lootx.com","domain":"lootx.com","tld":"com"},"ip":{"addr":"104.26.13.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a509c54b5330e1e3386a99004732dd64","sha1":"0c858ce6baba14a44f983abc9dfa00198e24eea3","sha256":"c43e0e050891f2c148041a5d4fa51f628c5eae5c67eb6bbbad6525bb83892686","sha512":"7f091c733b51fedf75aaeef06aa32b74b1da80dabbaf37240be841f076663515ef24d4379d7a6b797d58d5f867f463f097a759bea04400105832f4e2d224c1ac","ssdeep":"1536:TNjxXU9rnxD9o5EZxkMVC6YLtg7HtDuU3zh8cmnPMEgWzJvBQUmkm4M5gPtcNRQA:TcqmCU3zhINzfmR4lb3e34UQ47GKb","tlshash":"f79318ddb2c6b06247a770ba407f610ff236199d684d4400f169d8e9bc78a4a827bf7d","size":89947,"data":"","first_seen":"2023-03-12T18:12:58Z","last_seen":"2026-08-01T15:28:56.8168Z","times_seen":1075,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lootx.com/sandbox%20eval%20code","fqdn":"lootx.com","domain":"lootx.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"f019f144761e15f741f6ab1e4cf566a5","sha1":"1c73bccb222e44ae4633750eda7c357460a81a03","sha256":"4cacaf0fd3e370c4840c87c79f923f1ffb69ff7ce5d8172390783c8f83861d62","sha512":"614dbb696b7185a4291bf2c43c4b7442e46740b0a76ec537472bb0fdae208c239642f5160175cef935876f72df688409f170513809606f8aefdfe6613f88947f","ssdeep":"","tlshash":"04c08c92aa5018ed2a602ab176206013e2c676012be3d585f00a00ab5080eba18585a0","size":148,"data":"","first_seen":"2023-05-05T22:57:25Z","last_seen":"2026-06-07T07:52:12.995561Z","times_seen":38138,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.amazon-adsystem.com/aax2/apstag.js","fqdn":"c.amazon-adsystem.com","domain":"amazon-adsystem.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"7099d0c144c906961206e41b26b23c05","sha1":"59a67da2d27d4e5fc0e183bb2baeebe39404f553","sha256":"3f19f9cf504b435adb7e62aac1b420facfc0048d6a4950910fd6f126548cc69e","sha512":"c92d4da99978949c6a2d856ee6afd9f61d296e4e0414e6197f600312dc79e2e639755874c2776e9cc80dfe8341ac5210567afdc4d79193f8f750e759d36b700a","ssdeep":"","tlshash":"de31db6d69f10c650061b42b1baba6757726409b2d88fed1fe4c96708f0e05fa1f0bdc","size":1585,"data":"","first_seen":"2023-05-05T22:57:25Z","last_seen":"2026-06-07T07:52:12.991387Z","times_seen":37362,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.confiant-integrations.net/video/202601281034/wrap.js","fqdn":"cdn.confiant-integrations.net","domain":"confiant-integrations.net","tld":"net"},"ip":{"addr":"104.18.43.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ce66050670b29f88d4d2f8ac96e7a116","sha1":"2bd53510a841a01f5cf2216c4471f9858c1f1fb2","sha256":"7a3dc3fc38ff4e0f2e6d4b827bca5c88497993aa726f960a714c0470f6d77ea5","sha512":"4ef5bd6fd871760822d35c678f306dca9512bfee6e7d5a40df622e418d76a67335ffc627a515bd12ac18bf3548bd338793c1bd3b7822530b284ff9105e888340","ssdeep":"","tlshash":"0e11af6c0c9191a14f5781961a1abf82f331de9e6bddce016026b3ec3e41c34d08b9bd","size":1001,"data":"","first_seen":"2026-01-29T22:42:08.691943Z","last_seen":"2026-06-05T05:22:18.952898Z","times_seen":85,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lootx.com/assets/plugins/jquery-slimscroll/jquery.slimscroll.min.js","fqdn":"lootx.com","domain":"lootx.com","tld":"com"},"ip":{"addr":"104.26.13.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ed14573390c14ad99b335577adadffd9","sha1":"7d18a09f62b6568189f7e20625a8137c4e403f00","sha256":"77178397a6bf306d1ed2592bfbf81b0d2e9b44fddba5cce5f5a22e56bae668f5","sha512":"8a9252437b9a3e3c3145352dd9d01fc112632e9b24e1a7db9f39252670ab25e3b934d52b2ca2f0a2bfd007583581196056842622d7698bf2a50835633d4c0528","ssdeep":"96:6uHzEtP6JwwJT69kAbEfSUrJm+6Ocs9Hy7Q8Shdj:rzYP6JwWT696tGQp","tlshash":"14a1632d372630b585efb3afe09b4f09623280529617845572acdcf41f6992d77b1e1c","size":4736,"data":"","first_seen":"2023-03-07T23:34:10Z","last_seen":"2026-03-31T16:36:13.049855Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kit.fontawesome.com/1b97f88d48.js","fqdn":"kit.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"104.18.40.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c0a35014147f74dd63af32d9f5587789","sha1":"ff81d4fb6bfaf52e93d7a901ea4ba2020975d088","sha256":"4d319c0a903372b0c3f4ed187ad7aed0393d95ebe41e76014723ee2d55076908","sha512":"b8318db7cfc29a1be1f19e0a609031f526dc564c5509b6f44894fc71371417730684b2cfd9f5b7ad8bd3d968f88fdf6c25e0fcf42b44ec6ee7f62e51e1d107d3","ssdeep":"192:QkGliHAg8N/Cps9EyRDEbCpgeMfhhvlLoN6IQEZcJZuKwPXUxb/pfvh3CzYXyl8t:QkKDC7CKhhtqVUMFqnh3CzYXyl8YGce","tlshash":"5262e81c7a81b43a86ef7192843f670fb639352b30129461e25cdae49c7ce9da123f1c","size":15298,"data":"","first_seen":"2026-03-31T16:34:06.411463Z","last_seen":"2026-03-31T16:36:13.166926Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lootx.com/?r=603893","fqdn":"lootx.com","domain":"lootx.com","tld":"com"},"ip":{"addr":"104.26.13.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e698aaea881aa19426d92820643d1ca2","sha1":"6ffc3687771740ed5b67d35103c8b9873191e695","sha256":"305e1002c3e237878d55e25f2cd1cb9d5c127bebb71b851db93171fa9410840f","sha512":"c6d2a312ab480402a385c345a58ab8811e95a5b128e12f970252d8d094d43b1de4faf4b3671b26818f2531c249e6286413a800bb7a24b78ae358f2890a6b7acc","ssdeep":"","tlshash":"53f0dc9e2c43a85637fe253dc767aaab2762070368c2d409be0dc4152fd4a961c569ce","size":552,"data":"","first_seen":"2024-09-19T21:29:09.901637Z","last_seen":"2026-03-31T16:34:06.666841Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lootx.com/?r=603893","fqdn":"lootx.com","domain":"lootx.com","tld":"com"},"ip":{"addr":"104.26.13.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e603f7d415dda5966e8294926319ebda","sha1":"8b2a513c29840dce76ea23a0526bfa5898e0704a","sha256":"9028819fdaba58b944901a6e4bacfc615ec6591faf42ab1bc45229615804a53e","sha512":"138d386ba538ef7e2973a7200c0eb49ed55e27b4325a7e11c3fbf56f0e37f0e2a1ca52ff98639408e8fabaa258246e8afec9c443d4bd3e7ef130411dcb4da5c4","ssdeep":"","tlshash":"75d0a92e24e8b28f057120b206fb63136c92022028000a05032048ebf8b1a0b8a06aca","size":223,"data":"","first_seen":"2023-03-14T11:06:12Z","last_seen":"2026-07-22T06:52:36.18526Z","times_seen":455,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepubads.g.doubleclick.net/tag/js/gpt.js","fqdn":"securepubads.g.doubleclick.net","domain":"doubleclick.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"0c9ed134ae3d5ffe972da2a3e59dc428","sha1":"620df222551395592e46e4c5f425cf23dcdad891","sha256":"5f9efa604bfe2aee8c1a90376125a098306ba390530a6f9b2ecb0a67cdac178d","sha512":"439231f58951b81e4a2587649aa79dbad9d39f64456569301ce3290cc5c537cea970eac765da2e60d4eb06b1d84012ce8e63b75cf5ee1c4d0742d92297946dba","ssdeep":"192:AzZ0ltIlcoaplEbajdKRFQ1A3kutlpg4m4EDac2AV7Lek8wVI+ZQkb8YkCavaun4:UqGbax07e4K22ykJUa8LHT7tBgG8h84","tlshash":"c1421e193af369ba55a3f0af0b6f510ab13888533d0df9407d6c92195f8d82d82f17e9","size":13104,"data":"","first_seen":"2023-04-05T04:46:03Z","last_seen":"2026-06-07T07:56:57.284078Z","times_seen":147384,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lootx.com/?r=603893","fqdn":"lootx.com","domain":"lootx.com","tld":"com"},"ip":{"addr":"104.26.13.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ca281296fb1711c3b19be853e994965b","sha1":"384d778541f2012254d8311bdb1eb0e7a3bc6802","sha256":"f6461399cc6bf2abc01365b993d8f7c2c45e968ab8b859f4ded463cf6a4df589","sha512":"68e3f8877deee50463097a5d576a521aa5c61b4646eb6b774ade4f534df28feea465864441fd60ee5b3995bec4706e30b8809345c5528cd1509516c6ba9a97e2","ssdeep":"","tlshash":"5be020ab57d548360bf995311d0673023a30942b1c0749463dac21f97fb4f03b8b05cd","size":371,"data":"","first_seen":"2025-09-28T13:41:12.471347Z","last_seen":"2026-03-31T16:34:06.677631Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lootx.com/assets/plugins/bootstrap/js/bootstrap.min.js","fqdn":"lootx.com","domain":"lootx.com","tld":"com"},"ip":{"addr":"104.26.13.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e1d98d47689e00f8ecbc5d9f61bdb42e","sha1":"6778fed3cf095a318141a31f455c8f4663885bde","sha256":"0a34a87842c539c1f4feec56bba982fd596b73500046a6e6fe38a22260c6577b","sha512":"021e615983f30ec5477fd8b611e8c5045ac6d9900f9a9bb8649b56e0c7d282965a727f8cf501c3b7e1ddff02f5b44924d5481bcea7a926be8a9e166314a07ed0","ssdeep":"768:5NYyDyKAmHVaS3m3Dqp0NwCkXDtdFDLmTV+miDNJcJiQMRqyPiYtB6UvcCg8YGk:5NTKktDLmTF8yJL45XtHjoGk","tlshash":"1243c90a725478b205df9176917f420bb737688ae94ac16cb91d98ed1e7cc893227f3c","size":58072,"data":"","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-08-05T08:36:28.716456Z","times_seen":28300,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lootx.com/sandbox%20eval%20code","fqdn":"lootx.com","domain":"lootx.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"fb4eb094524daea58bf7f82331598541","sha1":"f5ca39eb98fa1685f8647514a627d3d7f216f7ef","sha256":"7cbf1e77bb9277bac7030ded2087246adf5c59564a5a1f28ce8c09be6ef48683","sha512":"316e84930b062a939f8ae6e0f256bf68257e8c01b0f56f499ccf557628a1fdc99258a069b0e11aa956b96109ccc6fd63225f13191abf42ea4f36b89485c66ba4","ssdeep":"","tlshash":"f4c02b63f77025dd1f183ab07511600363c6eb044bb74002f006003f5440fb519b80a4","size":136,"data":"","first_seen":"2023-04-11T21:23:25Z","last_seen":"2026-06-07T07:56:57.266545Z","times_seen":161086,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.nitropay.com/ads-captify.2015da149c7dcef90582.js","fqdn":"s.nitropay.com","domain":"nitropay.com","tld":"com"},"ip":{"addr":"104.18.3.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a84a120fe9e7fc2d94e23f9507c5d848","sha1":"4f8cfb304111c0186893260b2b6f30184bd3b03d","sha256":"eeaf94da90366254c9bd9e785dd8885dc14eb2802b41626208d111aea09c8fdb","sha512":"1bd201c3adf8796217770b11caf006023216e172e040ac87ea181cabcb9682dd10a84df8a259df8ed498d2d763df579c7ef8f5bbae33a1d9f16998840d5933a2","ssdeep":"","tlshash":"3211230fe246a37a31e818ff5577a210e4791090f81c812065aa4c813d64dcf47b9ecf","size":892,"data":"","first_seen":"2026-01-07T08:55:16.621861Z","last_seen":"2026-08-01T20:39:17.567329Z","times_seen":510,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ats-wrapper.privacymanager.io/ats-modules/438cb908-ed61-41e9-b716-05d5f4122a64/ats.js","fqdn":"ats-wrapper.privacymanager.io","domain":"privacymanager.io","tld":"io"},"ip":{"addr":"3.167.2.72","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bed77b09df36050cffca2f15ec751180","sha1":"7047dcf4a72a70b0a64239f91cd2e872b6c0c29a","sha256":"16001190a7a501f9c484e3c887db95d8f68a5959e044bf2066c96d62b7681442","sha512":"aeabf1907f3e59828f1e95ea2fa30ff02def506133054348917779bd6d1d59a3135087c587a2991fceec188ae485fc877bb920b7f1058e2faa2b73ce43c42f70","ssdeep":"1536:1T1wG6qJdvIt2iIo+TSq9vLq7ikbqJkO29askn0iCsLxxucK97IYgQ/s8VERzODo:1Q0dvIt2iIo+TSiLXkbQ2Ask0sacOtAN","tlshash":"00c32bca31e1f4d613e750f0902f610ab3b268a9281cd490f7a4dce56d76b4e91b3f69","size":127492,"data":"","first_seen":"2026-02-11T17:09:00.637431Z","last_seen":"2026-07-19T15:33:24.827042Z","times_seen":331,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lootx.com/assets/custom-js/loaders.js?v=1.0.1","fqdn":"lootx.com","domain":"lootx.com","tld":"com"},"ip":{"addr":"104.26.13.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7d1a34875f2bfab70a05338aab56e24d","sha1":"b30ccd9d9b79a89c79d503d5f6e40063631882fc","sha256":"7f57c7790a84faed4a52cdc11f3f7281bdfa6ea799d0fecd279cfd9123cd658f","sha512":"a7589c0aad3bc6eea1662034bffc1383aaf0527308d4fb6783d7dd5f6613234932e25cec44c993b9fd7865705dc8780efba152b9991b62f5f510fecea8559e54","ssdeep":"","tlshash":"a901c0d670a12d31466f7adb70878bee7ce159088c1820118d3c1e9128b5ca57a9fe8e","size":809,"data":"","first_seen":"2025-12-17T14:51:53.020815Z","last_seen":"2026-03-31T16:36:13.083605Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lootx.com/?r=603893","fqdn":"lootx.com","domain":"lootx.com","tld":"com"},"ip":{"addr":"104.26.13.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"baa847ad38998d510f4c732b405ea903","sha1":"ea559796641e3bb72058e46679924ace03c7d2cf","sha256":"e1a4746c4944295718a52640cf0d201b71fdee8bb5f02c82693ce8091a0b997a","sha512":"a1524503ee78c1bf8246bf77a0c100a80de87067dccdc95ea59fd35f041e78f92cd0622fe997ca9be7068250ef2118f081f483a9639f3f564250465bac6df33d","ssdeep":"","tlshash":"3331ac0e74fa1a26c27370760bffd0553129555b5548cf083c4e4b800f51a1a7e92edc","size":1479,"data":"","first_seen":"2026-03-31T16:34:06.684159Z","last_seen":"2026-03-31T16:34:06.684159Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.confiant-integrations.net/QwN0KdjTe-a-6y-70Vps9qMqCzM/gpt_and_prebid/config.js","fqdn":"cdn.confiant-integrations.net","domain":"confiant-integrations.net","tld":"net"},"ip":{"addr":"104.18.43.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f96db0235fc73a6b06baaba5d3ad25a3","sha1":"ba48650d3156eca43abfb73829db2e42354ce649","sha256":"0693106a25aa3a3d03ec4513390f6bbf801fb81d00095fa67027d320805ff741","sha512":"cef3938beba89aa9de68307333bb3e112e23da427336638b5cc1fdd5ede7339eae984a11a157a3c25cc5d7c57c04a1b07f3fca6037dd67ff9bcd0237d057e4e1","ssdeep":"6144:J1itXNP6HT/5gFVk1xERx74dRoA2WrB8JKKBPrxlNOK4WqS2A:c0z/5gFVCe+yDyB8JKYxlQK9qS2A","tlshash":"29c4d41f095f202cba723ad7ab6f6d5459dd21cb7eedc654e3a23e4c03097122e27858","size":587560,"data":"","first_seen":"2026-03-31T16:34:06.502896Z","last_seen":"2026-03-31T16:36:13.14997Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btloader.com/tag?o=6278260873756672\u0026upapi=true","fqdn":"btloader.com","domain":"btloader.com","tld":"com"},"ip":{"addr":"104.20.20.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6e3f2eb0554a35da0e68e7eeac07a379","sha1":"0cfb85dd29ff77b577ea61926ba257e50c2560fe","sha256":"26ffe7954d4717e1a35788d916354a39886d66afbc5cbb4f297b87da5b7543e9","sha512":"d362a41bc73a51422423c37a6cdc4be1b9039d9944111b2f956564cf3d46cc588cbfed43864b3e627d73b1fd3889fb1b11fd4cd91aada966dd3853ec622dfef4","ssdeep":"","tlshash":"1011a2c97aa4f1a037b339b0802f3807e33a1648bd5859419194e5d11da542bd223d6d","size":1000,"data":"","first_seen":"2026-03-08T16:56:27.191744Z","last_seen":"2026-04-20T13:55:13.228292Z","times_seen":70,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lootx.com/?r=603893","fqdn":"lootx.com","domain":"lootx.com","tld":"com"},"ip":{"addr":"104.26.13.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b1c78f1b70e5ac5526e0c8dfa90edbd2","sha1":"8042e2204e2dd2da9e7fab829ece59fe7bcb648b","sha256":"e437186a3a6e06109c0fe30c5141fa49fa11a5140d8ae971f3f25535e68e3143","sha512":"cade8a7dc1bbc5b2f667bcb4ec5140900b33291bf4da256e36735f41bc8eed3eb18f9f30c0773cd8d2d609b1e2bd5b7cc678af85a16ce78eabc5f70aa5bb02d2","ssdeep":"","tlshash":"6931788870fb31965833313e4b5f86402a396163100acd2d3fac43c14f099ade259bac","size":1817,"data":"","first_seen":"2026-03-31T16:34:06.690573Z","last_seen":"2026-03-31T16:34:06.690573Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lato/v25/S6uyw4BMUTPHjx4wXg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://lootx.com/?r=603893","date":"2026-03-31T16:33:36.286Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:39 GMT","end":"Mon, 01 Jun 2026 08:37:38 GMT"},"fingerprint":{"sha1":"31:A8:B5:C1:CD:F5:51:78:A9:8C:E3:B4:73:92:CF:C0:6D:69:48:19","sha256":"81:9A:84:FB:F5:4C:AB:82:DF:C1:27:CC:60:46:A6:23:A8:49:56:99:47:CF:C4:05:3F:0D:87:31:DD:2C:23:A2"}}},"request":{"raw":"GET /s/lato/v25/S6uyw4BMUTPHjx4wXg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://lootx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23580\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 28 Mar 2026 00:30:45 GMT\r\nexpires: Sun, 28 Mar 2027 00:30:45 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 17:09:41 GMT\r\ncontent-type: font/woff2\r\nage: 316971\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23580,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23580, version 1.0","md5":"e1b3b5908c9cf23dfb2b9c52b9a023ab","sha1":"fcd4136085f2a03481d9958cc6793a5ed98e714c","sha256":"918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537","sha512":"b2da7ef768385707afed62ca1f178efc6aa14519762e3f270129b3afee4d3782cb991e6fa66b3b08a2f81ff7caba0b4c34c726d952198b2ac4a784b36eb2a828","ssdeep":"384:dRkIAJ8pVwWTW5VVjdVn8+2yvAMdriCEOY0kfW9GkAPqpPHi2vUuUSzB8:dKIAJ8pVHTZ+riY9oCpPHiodUeK","tlshash":"91b2e1ce5d546e3a8028213785c17b488273572e9edf42c6dd83a6263a7092cfd3d96e","first_seen":"2023-04-05T13:28:45Z","last_seen":"2026-08-05T12:00:59.349987Z","times_seen":253821,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":96,"dns":9,"connect":19,"send":0,"wait":29,"receive":1,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad-delivery.net/px.gif?ch=2\u0026e=0.8140703634124075","fqdn":"ad-delivery.net","domain":"ad-delivery.net","tld":"net"},"ip":{"addr":"172.66.148.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://lootx.com/?r=603893","date":"2026-03-31T16:33:43.890Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ad-delivery.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Feb 2026 23:01:03 GMT","end":"Wed, 27 May 2026 00:00:46 GMT"},"fingerprint":{"sha1":"F1:55:14:26:AC:03:34:3A:69:CF:36:47:37:82:FD:10:32:4B:30:E5","sha256":"89:C8:2C:BC:DF:9A:57:EC:C4:33:DB:D8:2F:1B:99:EF:06:DC:1D:82:D7:44:B6:8E:44:8D:7E:36:43:2F:F9:3B"}}},"request":{"raw":"GET /px.gif?ch=2\u0026e=0.8140703634124075 HTTP/1.1\r\nHost: ad-delivery.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 31 Mar 2026 16:33:43 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nx-guploader-uploadid: ABgVH8-dIwnXuxz_AvoFtZgdE5tOR27RwF_-NyTqfsJ3BdAeGjCQBEH-zlJ2d7IRMDk5df9x\r\nx-goog-generation: 1620242732037093\r\nx-goog-metageneration: 5\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 43\r\nx-goog-hash: crc32c=cpEfJQ==, md5=rUsPYG4PhGW8TEwXCzfhow==\r\nx-goog-storage-class: MULTI_REGIONAL\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: cloudflare\r\nexpires: Wed, 11 Mar 2026 03:15:54 GMT\r\ncache-control: public, max-age=86400\r\nage: 1778845\r\nlast-modified: Wed, 05 May 2021 19:25:32 GMT\r\netag: \"ad4b0f606e0f8465bc4c4c170b37e1a3\"\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"gfe-default_product_name\"\r\nreport-to: {\"group\":\"gfe-default_product_name\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/default_product_name\"}]}\r\ncf-cache-status: HIT\r\ncf-ray: 9e50c1e94eaa4e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-08-05T11:59:40.855667Z","times_seen":376088,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":2,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kit.fontawesome.com/1b97f88d48.js","fqdn":"kit.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"104.18.40.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lootx.com/?r=603893","date":"2026-03-31T16:33:35.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 21:43:48 GMT","end":"Sun, 17 May 2026 22:43:44 GMT"},"fingerprint":{"sha1":"68:2C:9A:93:3E:79:C4:A9:4F:7C:67:91:C5:DD:D4:80:FF:AA:F6:D3","sha256":"23:30:F3:82:6A:12:7D:FC:FD:2B:DC:77:90:BA:22:FA:FE:28:51:07:4A:5F:54:D2:37:CA:F0:99:12:97:71:6F"}}},"request":{"raw":"GET /1b97f88d48.js HTTP/1.1\r\nHost: kit.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://lootx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 31 Mar 2026 16:33:35 GMT\r\ncontent-type: text/javascript\r\ncontent-encoding: gzip\r\naccess-control-allow-headers: accept, accept-langauge, content-language, content-type, fa-kit-token\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 3000\r\ncache-control: max-age=60, public, stale-while-revalidate=30\r\nvary: origin, accept-encoding, access-control-request-headers, access-control-request-method\r\nx-request-id: GJ4WIrEfZG3jdBRZPE5B\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: 9e50c1b6bc69712d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15298,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (14835)","md5":"c0a35014147f74dd63af32d9f5587789","sha1":"ff81d4fb6bfaf52e93d7a901ea4ba2020975d088","sha256":"4d319c0a903372b0c3f4ed187ad7aed0393d95ebe41e76014723ee2d55076908","sha512":"b8318db7cfc29a1be1f19e0a609031f526dc564c5509b6f44894fc71371417730684b2cfd9f5b7ad8bd3d968f88fdf6c25e0fcf42b44ec6ee7f62e51e1d107d3","ssdeep":"192:QkGliHAg8N/Cps9EyRDEbCpgeMfhhvlLoN6IQEZcJZuKwPXUxb/pfvh3CzYXyl8t:QkKDC7CKhhtqVUMFqnh3CzYXyl8YGce","tlshash":"5262e81c7a81b43a86ef7192843f670fb639352b30129461e25cdae49c7ce9da123f1c","first_seen":"2026-03-31T16:34:06.411463Z","last_seen":"2026-03-31T16:36:13.166926Z","times_seen":2,"resource_available":true,"data":null}},"time_used":152,"timings":{"blocked":22,"dns":1,"connect":4,"send":0,"wait":89,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lootx.com/assets/new-css.css?v=2.0.6","fqdn":"lootx.com","domain":"lootx.com","tld":"com"},"ip":{"addr":"104.26.13.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lootx.com/?r=603893","date":"2026-03-31T16:33:35.777Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lootx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 04:41:27 GMT","end":"Sun, 10 May 2026 05:41:22 GMT"},"fingerprint":{"sha1":"FB:4E:30:6E:1E:4F:E3:CF:34:82:A9:4B:BE:A2:31:32:DB:E1:E6:23","sha256":"D3:75:08:81:CE:43:48:04:F4:0D:FA:91:0A:C1:82:59:D3:C7:3D:D0:4D:F3:A1:65:3A:70:D7:23:6A:F9:BE:F7"}}},"request":{"raw":"GET /assets/new-css.css?v=2.0.6 HTTP/1.1\r\nHost: lootx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://lootx.com/?r=603893\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=71bc540c1af21d9eddc7f3c9e6b4e0b3\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 31 Mar 2026 16:33:35 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Wed, 23 Jul 2025 01:09:23 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68803643-166e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nage: 431776\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W8f6L47w92e%2BLfTUKpgeN7NZFWSfX3v%2B%2BvKHtfPWbnnAtUSuuVTrKRCP5FkuGl8SfZSUW7%2BGYZgK8JPK9KGCBEKqGXJJpqYJQMMQyVSCugvw0q29RmFTSHHJkw%3D%3D\"}]}\r\ncf-ray: 9e50c1b678fa723c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5742,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, ASCII text, with CRLF line terminators","md5":"c9968cc8b1c784a9ace1a2ed9339ef23","sha1":"954ca841581b58739079dbd803e49612cba54510","sha256":"68de362a248068d1ac99e91652cb3818373adf6f9889c198f59c05e511b6e7c7","sha512":"f7ded5fe37fa7e4a21fb4376578b20f70f441cf1af4dfc9630e66fdbc2d37bb38d3b0847008f7dceabd02a8afe5dacc7ca905080606b4599748aac4fe28eea60","ssdeep":"96:S984bDLQpeicbU99/pMczRr1ngsEN0E3RbaGUSA8FziT2bpm6Lpk:94jQsZUafzVplFk","tlshash":"d1c1e15a9355a48636320f75f363ba68eb5c101a460287fcbad6aa108ff43b56610f8d","first_seen":"2025-12-17T14:51:52.996321Z","last_seen":"2026-03-31T16:36:13.037511Z","times_seen":3,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://lootx.com/?r=603893","date":"2026-03-31T16:33:36.284Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:39 GMT","end":"Mon, 01 Jun 2026 08:37:38 GMT"},"fingerprint":{"sha1":"31:A8:B5:C1:CD:F5:51:78:A9:8C:E3:B4:73:92:CF:C0:6D:69:48:19","sha256":"81:9A:84:FB:F5:4C:AB:82:DF:C1:27:CC:60:46:A6:23:A8:49:56:99:47:CF:C4:05:3F:0D:87:31:DD:2C:23:A2"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://lootx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 31 Mar 2026 02:01:49 GMT\r\nexpires: Wed, 31 Mar 2027 02:01:49 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 52307\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-05T11:59:46.937302Z","times_seen":253084,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":92,"dns":10,"connect":12,"send":0,"wait":33,"receive":2,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/materialicons/v145/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://lootx.com/?r=603893","date":"2026-03-31T16:33:36.290Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:39 GMT","end":"Mon, 01 Jun 2026 08:37:38 GMT"},"fingerprint":{"sha1":"31:A8:B5:C1:CD:F5:51:78:A9:8C:E3:B4:73:92:CF:C0:6D:69:48:19","sha256":"81:9A:84:FB:F5:4C:AB:82:DF:C1:27:CC:60:46:A6:23:A8:49:56:99:47:CF:C4:05:3F:0D:87:31:DD:2C:23:A2"}}},"request":{"raw":"GET /s/materialicons/v145/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://lootx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 128352\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 30 Mar 2026 22:52:56 GMT\r\nexpires: Tue, 30 Mar 2027 22:52:56 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 17 Sep 2025 16:29:55 GMT\r\ncontent-type: font/woff2\r\nage: 63640\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":128352,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 128352, version 1.0","md5":"53436aca8627a49f4deaaa44dc9e3c05","sha1":"0bc0c675480d94ec7e8609dda6227f88c5d08d2c","sha256":"8265f64786397d6b832d1ca0aafdf149ad84e72759fffa9f7272e91a0fb015d1","sha512":"6655e0426eb0c78a7cb4d4216a3af7a6edd50aba8c92316608b1f79b8fc15f895cba9314beb7a35400228786e2a78a33e8c03322da04e0da94c2f109241547e8","ssdeep":"3072:b4XkN5u3RbAR2r4lJ8FBnP7fNblbKBRvqy:fGdA8FBP7fNb5y","tlshash":"91c3231efc32af9a2e1724ec288521809c1e92fbe0b3512cf565f437e76517d999ca09","first_seen":"2023-04-05T13:19:11Z","last_seen":"2026-08-05T10:30:23.371985Z","times_seen":75057,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":85,"dns":0,"connect":0,"send":0,"wait":21,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ats-wrapper.privacymanager.io/ats-modules/438cb908-ed61-41e9-b716-05d5f4122a64/ats.js","fqdn":"ats-wrapper.privacymanager.io","domain":"privacymanager.io","tld":"io"},"ip":{"addr":"3.167.2.72","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lootx.com/?r=603893","date":"2026-03-31T16:33:37.780Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.privacymanager.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Mon, 26 May 2025 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DF:60:3B:90:B0:FE:13:05:53:10:08:5C:25:5A:F8:C4:CD:D8:84:96","sha256":"0A:53:A4:E2:7B:1C:31:25:0C:53:84:0D:F4:CC:69:55:CE:3F:A6:F9:C3:6C:6E:FA:7E:5F:A8:AA:6B:0C:28:AB"}}},"request":{"raw":"GET /ats-modules/438cb908-ed61-41e9-b716-05d5f4122a64/ats.js HTTP/1.1\r\nHost: ats-wrapper.privacymanager.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 11 Feb 2026 06:46:37 GMT\r\nserver: AmazonS3\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: TeF9K5j8FeAE5n018RwEB4sEoyaU1OSm\r\ncontent-encoding: gzip\r\ndate: Tue, 31 Mar 2026 16:15:40 GMT\r\ncache-control: must-revalidate,public,max-age=3600\r\netag: W/\"bed77b09df36050cffca2f15ec751180\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 0dab08166aa7b915b2e3314728d79750.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: OP-9oqaWPWeZ_Wt-FNqdMTqA7mewY4by0jCN-_vf4h1AfI33zB9Aig==\r\nage: 1078\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":127492,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"bed77b09df36050cffca2f15ec751180","sha1":"7047dcf4a72a70b0a64239f91cd2e872b6c0c29a","sha256":"16001190a7a501f9c484e3c887db95d8f68a5959e044bf2066c96d62b7681442","sha512":"aeabf1907f3e59828f1e95ea2fa30ff02def506133054348917779bd6d1d59a3135087c587a2991fceec188ae485fc877bb920b7f1058e2faa2b73ce43c42f70","ssdeep":"1536:1T1wG6qJdvIt2iIo+TSq9vLq7ikbqJkO29askn0iCsLxxucK97IYgQ/s8VERzODo:1Q0dvIt2iIo+TSiLXkbQ2Ask0sacOtAN","tlshash":"00c32bca31e1f4d613e750f0902f610ab3b268a9281cd490f7a4dce56d76b4e91b3f69","first_seen":"2026-02-11T17:09:00.637431Z","last_seen":"2026-07-19T15:33:24.827042Z","times_seen":331,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Montserrat:400,500,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lootx.com/?r=603893","date":"2026-03-31T16:33:35.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:47 GMT","end":"Mon, 01 Jun 2026 08:37:46 GMT"},"fingerprint":{"sha1":"84:E2:03:36:CA:39:FF:65:64:D9:12:E7:E2:28:88:8C:3C:A0:CA:BA","sha256":"45:AF:9C:39:77:2B:D1:D7:B8:04:BB:2C:0E:98:C5:BB:8A:E8:99:A6:C3:AF:7F:90:AA:23:EA:F2:8F:AD:8F:B1"}}},"request":{"raw":"GET /css?family=Montserrat:400,500,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 31 Mar 2026 16:33:35 GMT\r\ndate: Tue, 31 Mar 2026 16:33:35 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5781,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"148cc8bc3772ef785e0c9e5dcc14c96b","sha1":"a813a47fcb59092a94e27056f64c22032a6fd3cc","sha256":"861e24f2671c62fc6904b65b99285a64d7d1a7eb0452e0d8bb9b43f9ce9fcac2","sha512":"ebb272fc8f02f2c57efe2b8c5259e3d01876149b2930ca8ff4ef716756496fa10bf6089b9f8a46084eeff72cd993cc088013490c5bbe4f405ce818550cc31678","ssdeep":"96:AOOEaRwOOEaOFZOhOOEaJOOEaeJc+udOOEau9NtOOXaRwOOXaOFZOhOOXaJOOXa9:YRo7TbOmuwRv7M0OFu6RB7W+Oju8","tlshash":"dbc1be91105be500e6472cc923cf7e2add4e21667494c5797ffe2ca8adeac224325b3d","first_seen":"2025-09-09T07:23:51.356456Z","last_seen":"2026-08-04T19:29:34.005955Z","times_seen":1897,"resource_available":false,"data":null}},"time_used":441,"timings":{"blocked":179,"dns":1,"connect":17,"send":0,"wait":64,"receive":0,"ssl":173},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://lootx.com/?r=603893","date":"2026-03-31T16:33:36.251Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:39 GMT","end":"Mon, 01 Jun 2026 08:37:38 GMT"},"fingerprint":{"sha1":"31:A8:B5:C1:CD:F5:51:78:A9:8C:E3:B4:73:92:CF:C0:6D:69:48:19","sha256":"81:9A:84:FB:F5:4C:AB:82:DF:C1:27:CC:60:46:A6:23:A8:49:56:99:47:CF:C4:05:3F:0D:87:31:DD:2C:23:A2"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://lootx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 28 Mar 2026 02:00:45 GMT\r\nexpires: Sun, 28 Mar 2027 02:00:45 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nage: 311571\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-08-05T12:00:59.243129Z","times_seen":546466,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":123,"dns":1,"connect":7,"send":0,"wait":10,"receive":8,"ssl":111},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lato/v25/S6u9w4BMUTPHh6UVSwiPGQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://lootx.com/?r=603893","date":"2026-03-31T16:33:36.271Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:39 GMT","end":"Mon, 01 Jun 2026 08:37:38 GMT"},"fingerprint":{"sha1":"31:A8:B5:C1:CD:F5:51:78:A9:8C:E3:B4:73:92:CF:C0:6D:69:48:19","sha256":"81:9A:84:FB:F5:4C:AB:82:DF:C1:27:CC:60:46:A6:23:A8:49:56:99:47:CF:C4:05:3F:0D:87:31:DD:2C:23:A2"}}},"request":{"raw":"GET /s/lato/v25/S6u9w4BMUTPHh6UVSwiPGQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://lootx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23040\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 27 Mar 2026 21:37:47 GMT\r\nexpires: Sat, 27 Mar 2027 21:37:47 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 17:11:31 GMT\r\ncontent-type: font/woff2\r\nage: 327349\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23040,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23040, version 1.0","md5":"de69cf9e514df447d1b0bb16f49d2457","sha1":"2ac78601179c3a63ba3f3f3081556b12ddcaf655","sha256":"c447dd7677b419db7b21dbdfc6277c7816a913ffda76fd2e52702df538de0e49","sha512":"4aebb7e54d88827d4a02808f04901c0d09b756c518202b056a6c0f664948f5585221d16967f546e064187c6545acef15d59b68d0a7a59897bd899d3e9dda37b1","ssdeep":"384:adpABC4a0HkBpR1HWtGu06B6lsoAKiwY0HcLKglV6Z+DVb35PJZDdiZeJ1vqYg:0AHa0Ezf2tZn6lsoABwTKK46ZQb3V7wD","tlshash":"fca2e1c05cc1e2d4ae02daf7fda5a4eab4e2f01123a8f65f8f114b75d505993640fe01","first_seen":"2023-04-05T13:28:45Z","last_seen":"2026-08-05T11:53:37.050384Z","times_seen":184756,"resource_available":false,"data":null}},"time_used":422,"timings":{"blocked":203,"dns":1,"connect":23,"send":0,"wait":10,"receive":1,"ssl":168},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btloader.com/tag?o=6278260873756672\u0026upapi=true","fqdn":"btloader.com","domain":"btloader.com","tld":"com"},"ip":{"addr":"104.20.20.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lootx.com/?r=603893","date":"2026-03-31T16:33:37.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btloader.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Mar 2026 04:06:14 GMT","end":"Mon, 22 Jun 2026 05:05:42 GMT"},"fingerprint":{"sha1":"37:58:9D:A8:D4:E8:A6:B6:DB:0A:E1:B7:17:E2:2A:37:F9:E3:E1:1B","sha256":"16:F0:F5:0E:CC:48:48:B3:B5:E5:90:2A:CD:99:87:FC:9C:7D:80:AB:F6:0C:E0:AC:31:AA:46:CF:10:04:86:AF"}}},"request":{"raw":"GET /tag?o=6278260873756672\u0026upapi=true HTTP/1.1\r\nHost: btloader.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 31 Mar 2026 16:33:37 GMT\r\ncontent-type: application/javascript\r\ncf-ray: 9e50c1c36c870b02-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, nofollow\r\ncache-control: public, max-age=300, stale-if-error=3600, stale-while-revalidate=300\r\netag: W/\"d5b6b603221feab76034882f5fd3e0d1\"\r\nlast-modified: Tue, 31 Mar 2026 15:49:41 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding, X-Acceptable-Ads, DNT\r\nvia: 1.1 google\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":152919,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65408)","md5":"7a865d7c853c9257236df2f7d1ec7bd1","sha1":"e9305ae4925d307fb763aef2ded460a0bf149fd1","sha256":"4ab9d7d77ec8279fd440d678a9e85c89908e2f27de0bb134171299044b81bdaa","sha512":"0e06826c7d3e1e5e3450ea82ed4bc31b3cb20b4fb9f6596b6f8e2ed3aaa06d12c4f4b286318feec419ac55fe95ad977bd21303327e877884bf687d41fa6ffe87","ssdeep":"1536:BVCz++xjpLobuFCov4KtOOqQmiSpVqcQeHqusoygySRiNm3X:6VoBKtOuepAeHqusoygyScNoX","tlshash":"69e3728db66065fe46ce8255c1263b025f6c356ab687b840fc0f5e8238ff5ca243597b","first_seen":"2026-03-27T20:46:48.281986Z","last_seen":"2026-04-01T04:51:57.045802Z","times_seen":9,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":16,"dns":0,"connect":1,"send":0,"wait":19,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.confiant-integrations.net/video/202601281034/wrap.js","fqdn":"cdn.confiant-integrations.net","domain":"confiant-integrations.net","tld":"net"},"ip":{"addr":"104.18.43.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lootx.com/?r=603893","date":"2026-03-31T16:33:37.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"confiant-integrations.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Feb 2026 05:45:03 GMT","end":"Sat, 23 May 2026 06:44:55 GMT"},"fingerprint":{"sha1":"7E:3A:B2:37:88:29:7A:94:3D:F5:99:E3:F6:66:08:E4:62:0D:E1:97","sha256":"E5:CC:34:3A:73:6F:EC:10:FB:3B:85:E9:15:50:9F:C7:86:4A:12:F8:1E:B4:EE:AB:C7:21:33:7E:EF:A0:2E:68"}}},"request":{"raw":"GET /video/202601281034/wrap.js HTTP/1.1\r\nHost: cdn.confiant-integrations.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 31 Mar 2026 16:33:37 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 127141\r\nx-amz-id-2: P6AjVUT62OQM9t8YfzBnMfNe4lYWzX8idgspt2/H21xgy9Jab2yNpzEfr5tunSkRfBs08+rcnmsd5I+sQDgaWjjO8mA7h1yOg8hpNo58XzI=\r\nx-amz-request-id: J314MVBCB5FDQ627\r\nlast-modified: Wed, 28 Jan 2026 15:37:08 GMT\r\netag: \"0388544a1b72fd8dd44e1af1b241ba79\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\nage: 1006233\r\ncf-cache-status: HIT\r\ncf-ray: 9e50c1c3cffb5685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":364460,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10568)","md5":"e735588497f0d908b08ad7c98ea77b74","sha1":"7944a22c0f3b23d4676c3137e134c2352b95422a","sha256":"c5056f37213e7cfeae12b78a281704b0d07449cb90ba809fb0042942b1673539","sha512":"2d4fc0fcac5b26e450d104cfc46d817d5731974352abb0fa016f8f983111c096d687edf69e150141af3556a0e7fdf1f4396f065ddc29717064e10cf596586d17","ssdeep":"6144:5pTRmvj4sObuGa/VtB3JTmrEdwb6fqjjsgNyduidvbmZgo/GgmS3mOS2:HRDb+B5dwb6fqvjy4Qvbpvg9","tlshash":"a574b4552f90bc8923d79b7bba2f70d1f46a085b68880c4fe102fc5479e8613fad59b1","first_seen":"2026-01-29T16:27:08.413655Z","last_seen":"2026-06-05T05:22:18.877333Z","times_seen":240,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.nitropay.com/cmp/lang.png","fqdn":"s.nitropay.com","domain":"nitropay.com","tld":"com"},"ip":{"addr":"104.18.3.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lootx.com/?r=603893","date":"2026-03-31T16:33:39.896Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nitropay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Feb 2026 10:45:55 GMT","end":"Sat, 23 May 2026 11:45:52 GMT"},"fingerprint":{"sha1":"46:DE:2B:EC:F8:2E:E8:B7:C4:9A:D7:D6:8A:5C:13:5F:32:BD:7C:48","sha256":"FA:4A:D5:59:D5:F5:75:CE:ED:A9:8E:38:E2:79:E1:F3:49:F1:7B:10:75:E7:6E:6E:02:4D:59:36:25:64:9B:FA"}}},"request":{"raw":"GET /cmp/lang.png HTTP/1.1\r\nHost: s.nitropay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 31 Mar 2026 16:33:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 1887\r\nx-guploader-uploadid: AMNfjG2RhUSSRiV_RgZupLGtVIFOn4XCHdkPJub-9aJw59bzEGZSGpjIy5B6SGRCHh11Wpmp\r\nexpires: Tue, 31 Mar 2026 16:59:08 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Fri, 21 Oct 2022 09:20:58 GMT\r\netag: \"ca072a3965f49a2c242c45d535163a53\"\r\nx-goog-generation: 1666344058779792\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 1887\r\nx-goog-hash: crc32c=7x+tRA==, md5=ygcqOWX0miwkLEXVNRY6Uw==\r\nx-goog-storage-class: MULTI_REGIONAL\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Type\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nage: 2070\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000; includeSubDomains\r\nset-cookie: __cf_bm=4_N8weiIsXLX9.32W8kJlP_nFtN9BVNd84DKpOL6e8E-1774974819.8963137-1.0.1.1-vtS.tdLVlrm6eGVQPVDwC.SzgAjvPUbO2fBYgGBQl5VM.L9nT6H5CkC6GbKKpJzwC4YO.L8Z0K0.kTsfd3zdwNSmrWMRpcye2I23FW2bQ7iFthw7kc6HaQK70suEyiNh; HttpOnly; Secure; Path=/; Domain=nitropay.com; Expires=Tue, 31 Mar 2026 17:03:39 GMT\r\ncf-ray: 9e50c1d05ebbb1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1887,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 20 x 23, 8-bit/color RGBA, non-interlaced","md5":"ca072a3965f49a2c242c45d535163a53","sha1":"365e8c94931edd4bb5548861d856390662fc39bb","sha256":"eda5ec1c59939f001bdc15f557f3a905110aac0a60afc5a1eb92d8cdc2d2cbb5","sha512":"55d24b34455ed2ee5ee5cc07fe9b51fec9fbe02e29d97d775cb1529231b28d574f913b8f2cb354551c736ffcc1633d25153ae487f487a7c3daa445cd06317ee7","ssdeep":"","tlshash":"9c411b19e4002d406744f92259d215239e239c12abc0e253bacfc8732cb3bf138769cf","first_seen":"2023-04-16T18:13:19Z","last_seen":"2026-08-01T20:39:17.575561Z","times_seen":3120,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lootx.com/assets/css/custom-as.css?v=1.0.0","fqdn":"lootx.com","domain":"lootx.com","tld":"com"},"ip":{"addr":"104.26.13.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lootx.com/?r=603893","date":"2026-03-31T16:33:35.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lootx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 04:41:27 GMT","end":"Sun, 10 May 2026 05:41:22 GMT"},"fingerprint":{"sha1":"FB:4E:30:6E:1E:4F:E3:CF:34:82:A9:4B:BE:A2:31:32:DB:E1:E6:23","sha256":"D3:75:08:81:CE:43:48:04:F4:0D:FA:91:0A:C1:82:59:D3:C7:3D:D0:4D:F3:A1:65:3A:70:D7:23:6A:F9:BE:F7"}}},"request":{"raw":"GET /assets/css/custom-as.css?v=1.0.0 HTTP/1.1\r\nHost: lootx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://lootx.com/?r=603893\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=71bc540c1af21d9eddc7f3c9e6b4e0b3\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 31 Mar 2026 16:33:35 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 17 Jul 2025 09:26:21 GMT\r\nvary: Accept-Encoding\r\netag: \"6878c1bd-c1\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nage: 431776\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ROAF36C60TdUdXrnrf%2FKw02i0qDxbnHv12DsMv3y2FdlgF1qtr01Fe5L7IrXWXlvJHd%2B3AanQtIt6MRdCez9MNbqa9l7j7%2BJQ2%2Bkf%2Bu7PFkcJclxIUz2k7qatQ%3D%3D\"}]}\r\ncf-ray: 9e50c1b678ed723c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":193,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"7b0298fabb34412537d29e914bec78ae","sha1":"8c95cfac99e6e398abcdf60da8529e20479ed566","sha256":"04545a15145611e8445c5935fe05618fa4826d024a499e0a3c6b5eed85d1145b","sha512":"ffccdb8654d592b8e00bf607ee8b52026489aaba02913a8d0ace43bea73820b371379962b49d6979d30ae26f32b69c7837c96f8dd24e127fca9b7ff8dd6a7776","ssdeep":"","tlshash":"35c022c3f9a3040270128495aeb103c2f30c280b103ac60ab620306cce00a980021480","first_seen":"2025-12-17T14:51:52.971701Z","last_seen":"2026-03-31T16:36:13.122956Z","times_seen":3,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lootx.com/assets/plugins/bootstrap/popper.min.js","fqdn":"lootx.com","domain":"lootx.com","tld":"com"},"ip":{"addr":"104.26.13.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lootx.com/?r=603893","date":"2026-03-31T16:33:35.787Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lootx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 04:41:27 GMT","end":"Sun, 10 May 2026 05:41:22 GMT"},"fingerprint":{"sha1":"FB:4E:30:6E:1E:4F:E3:CF:34:82:A9:4B:BE:A2:31:32:DB:E1:E6:23","sha256":"D3:75:08:81:CE:43:48:04:F4:0D:FA:91:0A:C1:82:59:D3:C7:3D:D0:4D:F3:A1:65:3A:70:D7:23:6A:F9:BE:F7"}}},"request":{"raw":"GET /assets/plugins/bootstrap/popper.min.js HTTP/1.1\r\nHost: lootx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://lootx.com/?r=603893\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=71bc540c1af21d9eddc7f3c9e6b4e0b3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 31 Mar 2026 16:33:35 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 17 Jul 2025 09:25:55 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6878c1a3-5083\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nage: 431776\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vPGm9hkFJH%2FD15AX15%2B0rh6Qvp%2BMf4sFy1bk%2FwfBwFY1buAiSSd%2Fho0iGn1nri9W0W0wl6tFnkxLHkV8fjdiGeKye5aP0S524ritaxm1yah4eCoBh9%2FmQxZDcA%3D%3D\"}]}\r\ncf-ray: 9e50c1b68916723c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20611,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (20438)","md5":"3eefbcee739df47939de2a79653da4b0","sha1":"145d05b4aa8f7d3e0253406951abc69b11d7af58","sha256":"55305bb9041fddba69d6eee99b956bb169fe5a7e9c84e896d94d5d38c060f59b","sha512":"c8e31bb6f70b4ed2af4cd2909037e1453e91d5243529bebeac4a7edeb97e9af73fbb353a37041ed6a6a9f70fb2c85ff3078476ed322f324ffbfea495fe03976e","ssdeep":"384:fIhLSLf4UzgFyKnxRsUPMbOXrEQAkxHOxvqAQD75zfS5vIXm3EzGp/ARdOgHhgza:YLSLAUzgFpbMbcxHOxvwD7pS5vazy/AT","tlshash":"e692a3cc3294b06647ab91a7a07f960eb2339875610e9410f19df2d97c30ef9a13bd79","first_seen":"2023-03-07T12:02:20Z","last_seen":"2026-07-22T04:44:01.009844Z","times_seen":138,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lootx.com/favicon.ico","fqdn":"lootx.com","domain":"lootx.com","tld":"com"},"ip":{"addr":"104.26.13.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lootx.com/?r=603893","date":"2026-03-31T16:33:36.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lootx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 04:41:27 GMT","end":"Sun, 10 May 2026 05:41:22 GMT"},"fingerprint":{"sha1":"FB:4E:30:6E:1E:4F:E3:CF:34:82:A9:4B:BE:A2:31:32:DB:E1:E6:23","sha256":"D3:75:08:81:CE:43:48:04:F4:0D:FA:91:0A:C1:82:59:D3:C7:3D:D0:4D:F3:A1:65:3A:70:D7:23:6A:F9:BE:F7"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: lootx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://lootx.com/?r=603893\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=71bc540c1af21d9eddc7f3c9e6b4e0b3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 31 Mar 2026 16:33:36 GMT\r\ncontent-type: image/x-icon\r\nserver: cloudflare\r\nlast-modified: Thu, 17 Jul 2025 09:25:34 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sza0y8eccUWLaMZzU9%2FxVzyeFAINqadYQadcrEFk4qkcDifLqBQpFAQtEniz4enQikyjpGfq2O7ra7KbiVoGDS4fD8OdXq4nf5hJHVoju7wjCUykgBJ8jkR7gw%3D%3D\"}]}\r\nage: 438391\r\ncf-cache-status: HIT\r\netag: W/\"6878c18e-10be\"\r\ncontent-encoding: br\r\ncf-ray: 9e50c1bcdd0a723c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"4daa809f12b14d38a34966ca0316b60d","sha1":"3ff1c35e6cee6204d44e4b4bda5a51e6e86477a3","sha256":"748ac9bb75d4dd8d32924cfa2487f9a912e1bd49d0b969c3b4493e5a8d6fed37","sha512":"fb4d2e356b462aab5576863e1f513b9547ae5f629fcd5d2dffff5d3eab540bacbda4708cd897cfb563a4302e50dc9a4d963dc2295840d1a9eff8a62dd32d1b7f","ssdeep":"48:/Z9nHSmtYElPfqb6/3hOXkZKwT+T4wwEOR80pE44D:BsmtYEOX4K3wEOR80v4D","tlshash":"529146c67e01c427c20123b3e575d95581002fed5221517368eafeef375f62b8a5d279","first_seen":"2024-09-19T21:29:09.863397Z","last_seen":"2026-03-31T16:36:13.056153Z","times_seen":5,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.nitropay.com/ads-captify.2015da149c7dcef90582.js","fqdn":"s.nitropay.com","domain":"nitropay.com","tld":"com"},"ip":{"addr":"104.18.3.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lootx.com/?r=603893","date":"2026-03-31T16:33:37.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nitropay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Feb 2026 10:45:55 GMT","end":"Sat, 23 May 2026 11:45:52 GMT"},"fingerprint":{"sha1":"46:DE:2B:EC:F8:2E:E8:B7:C4:9A:D7:D6:8A:5C:13:5F:32:BD:7C:48","sha256":"FA:4A:D5:59:D5:F5:75:CE:ED:A9:8E:38:E2:79:E1:F3:49:F1:7B:10:75:E7:6E:6E:02:4D:59:36:25:64:9B:FA"}}},"request":{"raw":"GET /ads-captify.2015da149c7dcef90582.js HTTP/1.1\r\nHost: s.nitropay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 31 Mar 2026 16:33:37 GMT\r\ncontent-type: text/javascript\r\ncf-ray: 9e50c1c31b4cb1b8-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\nage: 491734\r\ncache-control: public, max-age:43200\r\nexpires: Thu, 25 Mar 2027 23:58:03 GMT\r\nlast-modified: Wed, 25 Mar 2026 23:57:14 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=2592000; includeSubDomains\r\nvary: Accept-Encoding\r\naccess-control-expose-headers: Content-Type\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-goog-generation: 1774483033944050\r\nx-goog-hash: crc32c=5Q7mFw==, md5=qEoSD+nn/C2U4j+VB8XYSA==\r\nx-goog-meta-goog-reserved-file-mtime: 1774481996\r\nx-goog-metageneration: 1\r\nx-goog-storage-class: MULTI_REGIONAL\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 892\r\nx-guploader-uploadid: AMNfjG0wSguOPOWsMmSMNrz3V2wuOLnuHXOwWMPw0gvJL-DnMevp2Zjyo5sQlh3oZE0_HHA\r\nset-cookie: __cf_bm=7xQJxP7YnAyWO7r8a5hIqlGCy824qiU9AKIDmeyeIRQ-1774974817.778673-1.0.1.1-Kvn6Yyukx8ywRWzHsY5NK3sx15aFLp0e2z7l3kOEeAdS_6i1f8EC6AikLzi0FuxUmnuyyBHWLfPiDal9Te8GTg6TR8_Zxx8plhDLq4U8ARg_3mh5e4KgFy.5YN0wd9Zz; HttpOnly; Secure; Path=/; Domain=nitropay.com; Expires=Tue, 31 Mar 2026 17:03:37 GMT\r\netag: W/\"a84a120fe9e7fc2d94e23f9507c5d848\"\r\ncontent-encoding: gzip\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":892,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (892), with no line terminators","md5":"a84a120fe9e7fc2d94e23f9507c5d848","sha1":"4f8cfb304111c0186893260b2b6f30184bd3b03d","sha256":"eeaf94da90366254c9bd9e785dd8885dc14eb2802b41626208d111aea09c8fdb","sha512":"1bd201c3adf8796217770b11caf006023216e172e040ac87ea181cabcb9682dd10a84df8a259df8ed498d2d763df579c7ef8f5bbae33a1d9f16998840d5933a2","ssdeep":"","tlshash":"3211230fe246a37a31e818ff5577a210e4791090f81c812065aa4c813d64dcf47b9ecf","first_seen":"2026-01-07T08:55:16.621861Z","last_seen":"2026-08-01T20:39:17.567329Z","times_seen":510,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.confiant-integrations.net/IKOzVPjtHv3tevs-RDaJOMdtkBI/video/config.js","fqdn":"cdn.confiant-integrations.net","domain":"confiant-integrations.net","tld":"net"},"ip":{"addr":"104.18.43.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lootx.com/?r=603893","date":"2026-03-31T16:33:37.832Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"confiant-integrations.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Feb 2026 05:45:03 GMT","end":"Sat, 23 May 2026 06:44:55 GMT"},"fingerprint":{"sha1":"7E:3A:B2:37:88:29:7A:94:3D:F5:99:E3:F6:66:08:E4:62:0D:E1:97","sha256":"E5:CC:34:3A:73:6F:EC:10:FB:3B:85:E9:15:50:9F:C7:86:4A:12:F8:1E:B4:EE:AB:C7:21:33:7E:EF:A0:2E:68"}}},"request":{"raw":"GET /IKOzVPjtHv3tevs-RDaJOMdtkBI/video/config.js HTTP/1.1\r\nHost: cdn.confiant-integrations.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 31 Mar 2026 16:33:37 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 55944\r\nx-amz-id-2: MXBuaETP7PHAEsYzLTE47oBfxRbHHecmUYAr+zW9ehJyT6pAxZ1xxd8ssqYYjzZMUGvHdIhD/B0=\r\nx-amz-request-id: HZW427JBMGXHRN5W\r\nlast-modified: Tue, 31 Mar 2026 16:12:20 GMT\r\netag: \"13b8318ed63916eb14a1ce24501f397a\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=900, stale-while-revalidate=3600\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nvary: accept-encoding\r\nage: 765\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\ncf-ray: 9e50c1c37fb85685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":266164,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (64598)","md5":"4bcf1ed016e281d87ecb0b617b3d5c4e","sha1":"5acfc5b2e9c526afc5ae50acace11859ab5b3b82","sha256":"ddb6be17d4450a82bc54179aea3111775d79da1a8f5623e0954d33d693fb8c15","sha512":"1525915d9b24b3a2484ab983ccd35f86fdf43b6e0fd41bf53566e483d4dfb7397ef7ab2f19db70cfdd0938b3be75ee74ca2c9e12e756d3d62b8c372218566fd1","ssdeep":"3072:9FWen+PkM7Z2A2WrB8LN7qfKTVPrAlAUOK4WiMODO8uQ6Uj:XWw+PkuoA2WrB8JKKBPrAlNOK4Wq6rQn","tlshash":"0444991e096e247cf56339dbd69f1d20a59d12cbabecc9a0d6537f8c024b7012d2f568","first_seen":"2026-03-31T16:34:06.483184Z","last_seen":"2026-03-31T16:36:13.157309Z","times_seen":2,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lootx.com/assets/plugins/bootstrap/js/bootstrap.min.js","fqdn":"lootx.com","domain":"lootx.com","tld":"com"},"ip":{"addr":"104.26.13.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lootx.com/?r=603893","date":"2026-03-31T16:33:35.790Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lootx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 04:41:27 GMT","end":"Sun, 10 May 2026 05:41:22 GMT"},"fingerprint":{"sha1":"FB:4E:30:6E:1E:4F:E3:CF:34:82:A9:4B:BE:A2:31:32:DB:E1:E6:23","sha256":"D3:75:08:81:CE:43:48:04:F4:0D:FA:91:0A:C1:82:59:D3:C7:3D:D0:4D:F3:A1:65:3A:70:D7:23:6A:F9:BE:F7"}}},"request":{"raw":"GET /assets/plugins/bootstrap/js/bootstrap.min.js HTTP/1.1\r\nHost: lootx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://lootx.com/?r=603893\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=71bc540c1af21d9eddc7f3c9e6b4e0b3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 31 Mar 2026 16:33:35 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 17 Jul 2025 09:25:55 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6878c1a3-e2d8\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nage: 431775\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qXqbNdf05tzUF1qxzCudxqW46tL35cI%2FUxj9uTm27FKOzPzH97BHaAkd1p6YOThZQEYSlANuzvXytDVrqOMziHxMrVqwdsPSa%2FEZYVR0QqtSbYgEW4jB0WW8pg%3D%3D\"}]}\r\ncf-ray: 9e50c1b68918723c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58072,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (57791)","md5":"e1d98d47689e00f8ecbc5d9f61bdb42e","sha1":"6778fed3cf095a318141a31f455c8f4663885bde","sha256":"0a34a87842c539c1f4feec56bba982fd596b73500046a6e6fe38a22260c6577b","sha512":"021e615983f30ec5477fd8b611e8c5045ac6d9900f9a9bb8649b56e0c7d282965a727f8cf501c3b7e1ddff02f5b44924d5481bcea7a926be8a9e166314a07ed0","ssdeep":"768:5NYyDyKAmHVaS3m3Dqp0NwCkXDtdFDLmTV+miDNJcJiQMRqyPiYtB6UvcCg8YGk:5NTKktDLmTF8yJL45XtHjoGk","tlshash":"1243c90a725478b205df9176917f420bb737688ae94ac16cb91d98ed1e7cc893227f3c","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-08-05T08:36:28.716456Z","times_seen":28300,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"consent.nitrocnct.com/vendor-list-v3.json","fqdn":"consent.nitrocnct.com","domain":"nitrocnct.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lootx.com/?r=603893","date":"2026-03-31T16:33:37.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nitrocnct.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 31 Mar 2026 01:28:17 GMT","end":"Mon, 29 Jun 2026 02:26:01 GMT"},"fingerprint":{"sha1":"77:26:17:1B:A0:47:5F:B1:27:3D:42:98:89:F7:FA:9E:33:36:0D:9E","sha256":"DC:9B:B9:12:C8:08:50:86:6B:F2:E7:26:99:AA:05:0D:A1:6B:18:F6:77:72:A9:B8:B3:B6:5A:15:83:31:B5:E5"}}},"request":{"raw":"GET /vendor-list-v3.json HTTP/1.1\r\nHost: consent.nitrocnct.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://lootx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 31 Mar 2026 16:33:37 GMT\r\ncontent-type: application/json\r\nx-guploader-uploadid: AMNfjG2n8pRhf5JHIp8wXYFpOKa1qFC0eAtzVc_owA27U2q-CzJYYkkeoYqK9VM1ICWqLR1s\r\nx-goog-generation: 1774541716902706\r\nx-goog-metageneration: 2\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 803198\r\nx-goog-hash: crc32c=9RZ57w==, md5=a4yGIdDnllwqYhc4pFhoLA==\r\nx-goog-storage-class: STANDARD\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UWPYMOvYar8TgsRmugaYErFnPPR%2F2ZIG%2BwtXIXucurS0DZbntAPzA2ao%2F4LlpjV%2FAwPDuPJcEbhvq6gx9nxdZ1e8ad7UXpVnjkod07zVQr%2BzWV6ph9UUZKiaCFdyzOFltJ5yTQUUtRg%3D\"}]}\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Length, Content-Type, Date, Origin, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: cloudflare\r\nexpires: Sat, 04 Apr 2026 07:13:00 GMT\r\ncache-control: public, max-age=604800\r\nage: 292825\r\nlast-modified: Thu, 26 Mar 2026 16:15:17 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\netag: W/\"6b8c8621d0e7965c2a621738a458682c\"\r\ncontent-encoding: br\r\ncf-ray: 9e50c1c42a5a0daa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":803198,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"6b8c8621d0e7965c2a621738a458682c","sha1":"a186b6a6558d22fd040ced3ac98e1e87c7792064","sha256":"69a2c3ed0a7d72583dce730bfc289758238571360ab3d42473035c966d6fab34","sha512":"051dc90310bd1636778c137b808d158d5ff7473829f78b7e5be8bb98d5be4ed4e377d1c3f920ed18eeab10187d425e246cac50954f986627c22d3da31da72b2a","ssdeep":"3072:0sR02NgiSQQ19ajJgyOdqhJOmKzPdvtUE2kqlo:rRXhjzJOTFvtZ4o","tlshash":"2a05356f1280083977bb5399d60677c759d9307e4fac18e9b89d193e17e41e33a2228f","first_seen":"2026-03-26T17:07:23.650176Z","last_seen":"2026-04-09T12:27:02.230608Z","times_seen":90,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":56,"dns":24,"connect":3,"send":0,"wait":8,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btloader.com/trustedIframe.html?o=6278260873756672\u0026upapi=true","fqdn":"btloader.com","domain":"btloader.com","tld":"com"},"ip":{"addr":"104.20.20.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://lootx.com/?r=603893","date":"2026-03-31T16:33:37.926Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btloader.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Mar 2026 04:06:14 GMT","end":"Mon, 22 Jun 2026 05:05:42 GMT"},"fingerprint":{"sha1":"37:58:9D:A8:D4:E8:A6:B6:DB:0A:E1:B7:17:E2:2A:37:F9:E3:E1:1B","sha256":"16:F0:F5:0E:CC:48:48:B3:B5:E5:90:2A:CD:99:87:FC:9C:7D:80:AB:F6:0C:E0:AC:31:AA:46:CF:10:04:86:AF"}}},"request":{"raw":"GET /trustedIframe.html?o=6278260873756672\u0026upapi=true HTTP/1.1\r\nHost: btloader.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://lootx.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 31 Mar 2026 16:33:38 GMT\r\ncontent-type: text/html\r\ncache-control: public, max-age=3600, stale-while-revalidate=3600\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e50c1c40d230b02-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6114,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"8f4e5f1e62e8fe401a5648544a11fff8","sha1":"bf26da209783aef723058606cb68728a9da02817","sha256":"534d77307d5423aeac1b7d9d763079bb8b5bd8fb38ecc20083de0e2497e944e8","sha512":"a320dde29f4bcc7dde00db4951c5791570d0d71f3f356a06f468e3be1dddf581d097ef126919221d3c95845b9dd9827b9ad97f2f47caf6904b4b15f17b361f56","ssdeep":"96:5U5ZF5j5t30P3QV6O/v3JzbuX81BCTbvQQZL35Xb54W65TBu:505B0vQV6S/Jzq71J6Du","tlshash":"69c1659b28f454204257e0252a4bf422f525d05f76cedc54bacc78b57f8d33d8ab1b8a","first_seen":"2025-12-17T14:51:53.005949Z","last_seen":"2026-03-31T16:36:13.190339Z","times_seen":4,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.nitropay.com/cmp/logo.png","fqdn":"s.nitropay.com","domain":"nitropay.com","tld":"com"},"ip":{"addr":"104.18.3.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lootx.com/?r=603893","date":"2026-03-31T16:33:39.899Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nitropay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Feb 2026 10:45:55 GMT","end":"Sat, 23 May 2026 11:45:52 GMT"},"fingerprint":{"sha1":"46:DE:2B:EC:F8:2E:E8:B7:C4:9A:D7:D6:8A:5C:13:5F:32:BD:7C:48","sha256":"FA:4A:D5:59:D5:F5:75:CE:ED:A9:8E:38:E2:79:E1:F3:49:F1:7B:10:75:E7:6E:6E:02:4D:59:36:25:64:9B:FA"}}},"request":{"raw":"GET /cmp/logo.png HTTP/1.1\r\nHost: s.nitropay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 31 Mar 2026 16:33:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 2592\r\nx-guploader-uploadid: AMNfjG1GGoHdcMNC3qcMMQy2Zz4XT1_rpXaXLhZcK4uWRorz1Lv8vq3JzVraI8EBE501Nuo9\r\nx-goog-generation: 1666344058842900\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 2592\r\nx-goog-hash: crc32c=naGVVg==, md5=lAqluB6Zu7dBSsxHSom62Q==\r\nx-goog-storage-class: MULTI_REGIONAL\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Type\r\nserver: cloudflare\r\nexpires: Tue, 31 Mar 2026 16:34:53 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Fri, 21 Oct 2022 09:20:58 GMT\r\netag: \"940aa5b81e99bbb7414acc474a89bad9\"\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nage: 3525\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000; includeSubDomains\r\nset-cookie: __cf_bm=hrVhrwELCyhdBeCXLa4ikSAD.rHHEgc4FkjproPhdaw-1774974819.8967621-1.0.1.1-l8hL_Y46MU0k0ANQkl6.jyu.qcW6Q97c2M1r_LqnZPkB1ddWgVl4_1FXEkWZAt7S4narkkgV3yaOOCPY781n7w7ePYGsBTqikgu4azhcX9LnNgkOavjhIwY1HmoNiz2w; HttpOnly; Secure; Path=/; Domain=nitropay.com; Expires=Tue, 31 Mar 2026 17:03:39 GMT\r\ncf-ray: 9e50c1d05ec5b1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":2592,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 62, 8-bit/color RGBA, non-interlaced","md5":"940aa5b81e99bbb7414acc474a89bad9","sha1":"e19998a580400a11fe57b72acb87e6eb27fbf1ee","sha256":"6d8fea63a817b75ec9bfbc153b60b576dd31392e4d2afbec0d83cc813f8aca4d","sha512":"5ded9bdf3259435ed290332bfce4fdb22ec1cde73fa812f809b0640d5111bbbda2e929937b935940e624e5a3b1e165b2281cc7b73bcd4955e2bfd1b3f4cae4bf","ssdeep":"","tlshash":"23511a8fa121b483b60d89617cf652a3ac5304d4ca919d63edcd8c3918e147746e57c3","first_seen":"2023-04-16T18:13:19Z","last_seen":"2026-08-01T20:39:17.578634Z","times_seen":3118,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lootx.com/assets/js/connect.js?v=1.1.1","fqdn":"lootx.com","domain":"lootx.com","tld":"com"},"ip":{"addr":"104.26.13.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lootx.com/?r=603893","date":"2026-03-31T16:33:35.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lootx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 04:41:27 GMT","end":"Sun, 10 May 2026 05:41:22 GMT"},"fingerprint":{"sha1":"FB:4E:30:6E:1E:4F:E3:CF:34:82:A9:4B:BE:A2:31:32:DB:E1:E6:23","sha256":"D3:75:08:81:CE:43:48:04:F4:0D:FA:91:0A:C1:82:59:D3:C7:3D:D0:4D:F3:A1:65:3A:70:D7:23:6A:F9:BE:F7"}}},"request":{"raw":"GET /assets/js/connect.js?v=1.1.1 HTTP/1.1\r\nHost: lootx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://lootx.com/?r=603893\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=71bc540c1af21d9eddc7f3c9e6b4e0b3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 31 Mar 2026 16:33:35 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 17 Jul 2025 09:25:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6878c18f-1c24\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nage: 431775\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O6OYWcisdbRiUOGT2hHBbU36p3cNaF%2FoEb%2B6mg9lCmEdtL84bA2mQsYpOTtiJDpFRXVvxzA9S5r3tLwFTn5hvR04MvO%2FLkVlyBLvAKplNglDZwV5qCiRQ2ZEMA%3D%3D\"}]}\r\ncf-ray: 9e50c1b6891d723c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7204,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"e604f10de84691b525723fc7111027a7","sha1":"620d7509f02ae8e95a9765f62eff048bdc11e941","sha256":"2dbb2a9687708d39deb90361684abc403d4b9952f33fa061e42d251070f0877a","sha512":"6b4a3178a9c0df2ff40b8ce34bf30526c1cc42b6f3622054b96b5a4152a27e8d688fd548da89c038936db623587c40dc7dd55cfceeef61d1b0af01f46fa2d91d","ssdeep":"96:nPnV+1kHHWHn/4tvyrk9Qt6Gnfd2+BaSznDU5+8HlaRh:PlHHWHn/4tX2P3U88HlAh","tlshash":"e1e1b889b9f65031647b753a4bff6060323a848b664cde147ebc8fa00f4425966f3bd9","first_seen":"2025-12-17T14:51:52.990476Z","last_seen":"2026-03-31T16:36:13.12509Z","times_seen":3,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://lootx.com/?r=603893","date":"2026-03-31T16:33:36.261Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:39 GMT","end":"Mon, 01 Jun 2026 08:37:38 GMT"},"fingerprint":{"sha1":"31:A8:B5:C1:CD:F5:51:78:A9:8C:E3:B4:73:92:CF:C0:6D:69:48:19","sha256":"81:9A:84:FB:F5:4C:AB:82:DF:C1:27:CC:60:46:A6:23:A8:49:56:99:47:CF:C4:05:3F:0D:87:31:DD:2C:23:A2"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://lootx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 28 Mar 2026 02:00:45 GMT\r\nexpires: Sun, 28 Mar 2027 02:00:45 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nage: 311571\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-08-05T12:00:59.243129Z","times_seen":546466,"resource_available":false,"data":null}},"time_used":611,"timings":{"blocked":297,"dns":1,"connect":34,"send":0,"wait":8,"receive":2,"ssl":256},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.confiant-integrations.net/QwN0KdjTe-a-6y-70Vps9qMqCzM/gpt_and_prebid/config.js","fqdn":"cdn.confiant-integrations.net","domain":"confiant-integrations.net","tld":"net"},"ip":{"addr":"104.18.43.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lootx.com/?r=603893","date":"2026-03-31T16:33:36.939Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"confiant-integrations.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Feb 2026 05:45:03 GMT","end":"Sat, 23 May 2026 06:44:55 GMT"},"fingerprint":{"sha1":"7E:3A:B2:37:88:29:7A:94:3D:F5:99:E3:F6:66:08:E4:62:0D:E1:97","sha256":"E5:CC:34:3A:73:6F:EC:10:FB:3B:85:E9:15:50:9F:C7:86:4A:12:F8:1E:B4:EE:AB:C7:21:33:7E:EF:A0:2E:68"}}},"request":{"raw":"GET /QwN0KdjTe-a-6y-70Vps9qMqCzM/gpt_and_prebid/config.js HTTP/1.1\r\nHost: cdn.confiant-integrations.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 31 Mar 2026 16:33:36 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 112987\r\nx-amz-id-2: akQSXq9NnfEfRbeK8tuKj4XLDKRA1ftAbS3F/s89xuyo48xwQ/B/it/FhdbtCXVhg5/w6owzZ9/fmFF+xSxtow==\r\nx-amz-request-id: QW8W5CG684PD7XAH\r\nlast-modified: Tue, 31 Mar 2026 16:10:49 GMT\r\netag: \"8d8dc0a8a0759594eaf05e89b6e1068a\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=900, stale-while-revalidate=3600\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nvary: accept-encoding\r\nage: 494\r\ncf-cache-status: HIT\r\ncf-ray: 9e50c1be1904b4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":587560,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (64217)","md5":"f96db0235fc73a6b06baaba5d3ad25a3","sha1":"ba48650d3156eca43abfb73829db2e42354ce649","sha256":"0693106a25aa3a3d03ec4513390f6bbf801fb81d00095fa67027d320805ff741","sha512":"cef3938beba89aa9de68307333bb3e112e23da427336638b5cc1fdd5ede7339eae984a11a157a3c25cc5d7c57c04a1b07f3fca6037dd67ff9bcd0237d057e4e1","ssdeep":"6144:J1itXNP6HT/5gFVk1xERx74dRoA2WrB8JKKBPrxlNOK4WqS2A:c0z/5gFVCe+yDyB8JKYxlQK9qS2A","tlshash":"29c4d41f095f202cba723ad7ab6f6d5459dd21cb7eedc654e3a23e4c03097122e27858","first_seen":"2026-03-31T16:34:06.502896Z","last_seen":"2026-03-31T16:36:13.14997Z","times_seen":2,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":39,"dns":21,"connect":1,"send":0,"wait":5,"receive":4,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad-delivery.net/px.gif?ch=1\u0026e=0.1933554741160901","fqdn":"ad-delivery.net","domain":"ad-delivery.net","tld":"net"},"ip":{"addr":"172.66.148.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://lootx.com/?r=603893","date":"2026-03-31T16:33:37.924Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ad-delivery.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Feb 2026 23:01:03 GMT","end":"Wed, 27 May 2026 00:00:46 GMT"},"fingerprint":{"sha1":"F1:55:14:26:AC:03:34:3A:69:CF:36:47:37:82:FD:10:32:4B:30:E5","sha256":"89:C8:2C:BC:DF:9A:57:EC:C4:33:DB:D8:2F:1B:99:EF:06:DC:1D:82:D7:44:B6:8E:44:8D:7E:36:43:2F:F9:3B"}}},"request":{"raw":"GET /px.gif?ch=1\u0026e=0.1933554741160901 HTTP/1.1\r\nHost: ad-delivery.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 31 Mar 2026 16:33:37 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nx-guploader-uploadid: ABgVH8-dIwnXuxz_AvoFtZgdE5tOR27RwF_-NyTqfsJ3BdAeGjCQBEH-zlJ2d7IRMDk5df9x\r\nx-goog-generation: 1620242732037093\r\nx-goog-metageneration: 5\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 43\r\nx-goog-hash: crc32c=cpEfJQ==, md5=rUsPYG4PhGW8TEwXCzfhow==\r\nx-goog-storage-class: MULTI_REGIONAL\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: cloudflare\r\nexpires: Wed, 11 Mar 2026 03:15:54 GMT\r\ncache-control: public, max-age=86400\r\nage: 1778839\r\nlast-modified: Wed, 05 May 2021 19:25:32 GMT\r\netag: \"ad4b0f606e0f8465bc4c4c170b37e1a3\"\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"gfe-default_product_name\"\r\nreport-to: {\"group\":\"gfe-default_product_name\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/default_product_name\"}]}\r\ncf-cache-status: HIT\r\ncf-ray: 9e50c1c44df14e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-08-05T11:59:40.855667Z","times_seen":376088,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":42,"dns":5,"connect":4,"send":0,"wait":4,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad-delivery.net/px.gif?ch=1\u0026e=0.6590535768247422","fqdn":"ad-delivery.net","domain":"ad-delivery.net","tld":"net"},"ip":{"addr":"172.66.148.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://lootx.com/?r=603893","date":"2026-03-31T16:33:41.825Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ad-delivery.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Feb 2026 23:01:03 GMT","end":"Wed, 27 May 2026 00:00:46 GMT"},"fingerprint":{"sha1":"F1:55:14:26:AC:03:34:3A:69:CF:36:47:37:82:FD:10:32:4B:30:E5","sha256":"89:C8:2C:BC:DF:9A:57:EC:C4:33:DB:D8:2F:1B:99:EF:06:DC:1D:82:D7:44:B6:8E:44:8D:7E:36:43:2F:F9:3B"}}},"request":{"raw":"GET /px.gif?ch=1\u0026e=0.6590535768247422 HTTP/1.1\r\nHost: ad-delivery.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 31 Mar 2026 16:33:41 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nx-guploader-uploadid: ABgVH8-dIwnXuxz_AvoFtZgdE5tOR27RwF_-NyTqfsJ3BdAeGjCQBEH-zlJ2d7IRMDk5df9x\r\nx-goog-generation: 1620242732037093\r\nx-goog-metageneration: 5\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 43\r\nx-goog-hash: crc32c=cpEfJQ==, md5=rUsPYG4PhGW8TEwXCzfhow==\r\nx-goog-storage-class: MULTI_REGIONAL\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: cloudflare\r\nexpires: Wed, 11 Mar 2026 03:15:54 GMT\r\ncache-control: public, max-age=86400\r\nage: 1778843\r\nlast-modified: Wed, 05 May 2021 19:25:32 GMT\r\netag: \"ad4b0f606e0f8465bc4c4c170b37e1a3\"\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"gfe-default_product_name\"\r\nreport-to: {\"group\":\"gfe-default_product_name\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/default_product_name\"}]}\r\ncf-cache-status: HIT\r\ncf-ray: 9e50c1dc68c54e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-08-05T11:59:40.855667Z","times_seen":376088,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-199556335-1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lootx.com/?r=603893","date":"2026-03-31T16:33:35.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:36:15 GMT","end":"Mon, 01 Jun 2026 08:36:14 GMT"},"fingerprint":{"sha1":"58:CB:88:A1:C4:55:4E:E5:46:DC:A0:9C:B3:54:25:79:20:1E:E8:09","sha256":"0B:B5:96:A2:57:57:EC:BA:63:14:8A:AF:4C:C2:32:63:18:8B:75:80:8F:78:1D:1F:5B:00:B7:B3:7E:C9:B7:18"}}},"request":{"raw":"GET /gtag/js?id=UA-199556335-1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 31 Mar 2026 16:33:35 GMT\r\nexpires: Tue, 31 Mar 2026 16:33:35 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Tue, 31 Mar 2026 16:01:33 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 122382\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":352538,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5930)","md5":"fbfd508602e78c00f5cd785b2f2e51a9","sha1":"2cc3bd108aa4de8c29fb87bcb17329a911bad869","sha256":"844b13f9df901a92283f9178b5a3f30581aadfcbd55c80ebac56eeecafd88a91","sha512":"b2e9b0f203837ac7ccbb1b4ccd11cb6f99b7f4071f7fcccc675fc23cbd541238c7ee6530e3703a9eecd4776481c0877efb96ef79edd9f42ead66d019207386f6","ssdeep":"6144:85J1WXfSmQT2CVEhMjyR8USsXDhs1M1LjvDNXtbpb8BTL:RSmQTnVEh98ZwVtby","tlshash":"4f7419cdb3d674665393a478903f008ba27a79d2f84cc899f185d8d42e706aa4277f3d","first_seen":"2026-03-31T16:34:06.506324Z","last_seen":"2026-03-31T16:36:13.106171Z","times_seen":2,"resource_available":true,"data":null}},"time_used":359,"timings":{"blocked":119,"dns":1,"connect":26,"send":0,"wait":45,"receive":57,"ssl":105},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Montserrat:wght@400;700;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lootx.com/?r=603893","date":"2026-03-31T16:33:35.780Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:47 GMT","end":"Mon, 01 Jun 2026 08:37:46 GMT"},"fingerprint":{"sha1":"84:E2:03:36:CA:39:FF:65:64:D9:12:E7:E2:28:88:8C:3C:A0:CA:BA","sha256":"45:AF:9C:39:77:2B:D1:D7:B8:04:BB:2C:0E:98:C5:BB:8A:E8:99:A6:C3:AF:7F:90:AA:23:EA:F2:8F:AD:8F:B1"}}},"request":{"raw":"GET /css2?family=Montserrat:wght@400;700;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 31 Mar 2026 16:33:35 GMT\r\ndate: Tue, 31 Mar 2026 16:33:35 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5781,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"f40b37ed004929253961dcdc45024d1c","sha1":"85abb01bdab73c889b4f31bb7d0324f0fd31546a","sha256":"a73e1f01101ac79dc973fceb8ce38944242ac2afd1910f2121a8859dad164886","sha512":"73466caf22b7519cfd9c74c098e1d6ad4ff749e37a96508c0cfdc097fd916572778b4db02cb5cdec732956d4bf616690da13800f35f84bd78cff239d9ebd1247","ssdeep":"96:AOOEaRwOOEaOFZOhOOEaJOOEaeJc+udOOEau9NtOOpaRwOOpaOFZOhOOpaJOOpa5:YRo7TbOmu6RB7W+OjuMR77wIO5u8","tlshash":"20c1be91105be500e6472cc923cf7e26dd4e21627494c57a7ffe2ca8adeac224325b3d","first_seen":"2025-09-08T12:19:08.928504Z","last_seen":"2026-07-31T22:57:26.997709Z","times_seen":687,"resource_available":false,"data":null}},"time_used":407,"timings":{"blocked":163,"dns":0,"connect":34,"send":0,"wait":50,"receive":0,"ssl":155},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ka-f.fontawesome.com/releases/v6.7.2/webfonts/free-fa-brands-400.woff2","fqdn":"ka-f.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"172.67.139.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://lootx.com/?r=603893","date":"2026-03-31T16:33:36.630Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ka-f.fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 00:37:45 GMT","end":"Thu, 14 May 2026 01:37:41 GMT"},"fingerprint":{"sha1":"04:59:0D:80:7A:49:BB:1E:B1:8D:3E:19:59:3F:30:52:81:A8:E8:64","sha256":"C3:87:91:E9:A0:66:F9:A2:38:71:52:C8:EE:5B:C5:BD:54:B5:5D:64:77:06:DF:1E:6D:DA:DF:25:B8:D4:F8:C2"}}},"request":{"raw":"GET /releases/v6.7.2/webfonts/free-fa-brands-400.woff2 HTTP/1.1\r\nHost: ka-f.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://lootx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 31 Mar 2026 16:33:36 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 118696\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nlast-modified: Mon, 16 Dec 2024 16:08:29 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-headers: fa-kit-token\r\ncache-control: max-age=31556926\r\netag: \"e45da7adeca3d43feb19fa7736201689\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 3bd19ecae9d202e55626096b4934d62e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: jMgZPho58djRDzKfNqpiiAXbjl9yaq4VFHYvdAa_9J8XMYh4F31lPg==\r\nage: 192459\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QflrTkw4K14LrhsWoYkNoDHA7083%2FuMGipd55rvkWWrA4R2sgQj8c%2FPojHpA6ia3pjhiWkq%2FRg%2BLly6OfI7TTyVT6%2BKXxUuK5ONNAdKVRTaspWPUcg8oP3steUt7zzBd4RDglf0iCg%3D%3D\"}]}\r\ncf-ray: 9e50c1bbeab42efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":118696,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 118696, version 775.1280","md5":"e45da7adeca3d43feb19fa7736201689","sha1":"7e10560e5ba072b6744cb06066cec4d37c631f16","sha256":"cc90a2b68dabba4496647c4e8644ad0ca0444c3fffa5355100482731b2959618","sha512":"f841c42a049680cd0ed489c670f66703dbfb3a6cfed258fec5768cddf35c70b2c1099151d2bde5b57219acc7c40e0dedd313590c360f9e458223f3d102bd788d","ssdeep":"3072:/s0sEGeI2tuiZwN9hCj/54V0qFWugENotGeUv+l/hG:5sehz54RFz1Noge/l5G","tlshash":"e5c3128ae8ccdb19b026463bf18d92854f2751e9744106b4a353fd221dbba43c2e7eb5","first_seen":"2024-12-19T14:38:39.090068Z","last_seen":"2026-08-04T21:27:44.188374Z","times_seen":2952,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.nitropay.com/ads-video.c740523671257b19988c.js","fqdn":"s.nitropay.com","domain":"nitropay.com","tld":"com"},"ip":{"addr":"104.18.3.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://lootx.com/?r=603893","date":"2026-03-31T16:33:37.748Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nitropay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Feb 2026 10:45:55 GMT","end":"Sat, 23 May 2026 11:45:52 GMT"},"fingerprint":{"sha1":"46:DE:2B:EC:F8:2E:E8:B7:C4:9A:D7:D6:8A:5C:13:5F:32:BD:7C:48","sha256":"FA:4A:D5:59:D5:F5:75:CE:ED:A9:8E:38:E2:79:E1:F3:49:F1:7B:10:75:E7:6E:6E:02:4D:59:36:25:64:9B:FA"}}},"request":{"raw":"GET /ads-video.c740523671257b19988c.js HTTP/1.1\r\nHost: s.nitropay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 31 Mar 2026 16:33:37 GMT\r\ncontent-type: text/javascript\r\ncf-ray: 9e50c1c2eaddb1b8-OSL\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nage: 491734\r\ncache-control: public, max-age:43200\r\nexpires: Thu, 25 Mar 2027 23:58:03 GMT\r\nlast-modified: Wed, 25 Mar 2026 23:57:14 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=2592000; includeSubDomains\r\nvary: Accept-Encoding\r\naccess-control-expose-headers: Content-Type\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-goog-generation: 1774483034098974\r\nx-goog-hash: crc32c=qwR2FA==, md5=1I6RFBBsAUR5osX5UarVBA==\r\nx-goog-meta-goog-reserved-file-mtime: 1774481996\r\nx-goog-metageneration: 1\r\nx-goog-storage-class: MULTI_REGIONAL\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 962\r\nx-guploader-uploadid: AGQBYWxpxInGzNMETBjE6VnWO7GrZntnOB3muNBojug2gGQ5Lloe-bTkx0lEMuH6saC6J4Psuvd9my8\r\nset-cookie: __cf_bm=65oOASeicIRgwzJcNrBiKncwuqysBk6B4mAGO9qMDbc-1774974817.7458382-1.0.1.1-Y9xVoTGShH4EhP.IU253K8.0TkViIaE6gNKLiE.gi31eoRv4RcPYejvvb1p5Q34NgPmidlM32mBqtLuY0dL097ZYb1a309V7BfHHmwGVZWWRzi18qO28EMonOkAQvNdr; HttpOnly; Secure; Path=/; Domain=nitropay.com; Expires=Tue, 31 Mar 2026 17:03:37 GMT\r\netag: W/\"d48e9114106c014479a2c5f951aad504\"\r\ncontent-encoding: gzip\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":962,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (962), with no line terminators","md5":"d48e9114106c014479a2c5f951aad504","sha1":"cd07b93a2536e0d618e8538bd307b9d6e89414f7","sha256":"b426a4d2569b4079a14052c3a6bba3c10f8cc2ce82844ec922bff0e903d2ae65","sha512":"5d72e4c13499a0c37ef07f89e321400702b7f82a86b48866640f81c868f8d6056a54bbb5359b453ac594a0bb9dd33acce16afdf4cad404a6bac3d10e0cb88357","ssdeep":"","tlshash":"f21121f95b51232dec8662cde55245006b1e589aa72f8838b7275943398bb287e38f80","first_seen":"2025-11-25T18:51:50.09543Z","last_seen":"2026-06-26T05:49:43.805398Z","times_seen":322,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"robloxwin.com/","fqdn":"robloxwin.com","domain":"robloxwin.com","tld":"com"},"ip":{"addr":"172.67.177.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-31T16:33:35.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"robloxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 20:33:43 GMT","end":"Sun, 07 Jun 2026 21:31:39 GMT"},"fingerprint":{"sha1":"E4:D2:64:A1:90:31:1E:26:B0:42:39:8E:33:09:3D:59:89:40:83:AC","sha256":"72:D6:76:EC:F4:E9:A6:77:15:DE:3F:39:3D:82:F7:D4:8C:23:B8:2C:B6:82:FF:2A:9C:30:54:CF:7A:01:C8:4A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: robloxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Tue, 31 Mar 2026 16:33:35 GMT\r\ncontent-length: 0\r\nlocation: https://lootx.com/?r=603893\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i8CKYpwhvHlr6kTiwWGeticvtaM4vPdh99jVBbMknOve%2BAmrfuKIf2O1QzH0ePQKycgdFhOXgHjBGx19Z2hBupMqfcv6K%2FbNoTIIYCwHwgbNPxKE0Sokd0PhQuvkEvGn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9e50c1b459c456c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29020,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T12:03:16.307422Z","times_seen":17724130,"resource_available":true,"data":null}},"time_used":161,"timings":{"blocked":75,"dns":28,"connect":2,"send":0,"wait":8,"receive":0,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lootx.com/assets/images/lootx-logo-light.png","fqdn":"lootx.com","domain":"lootx.com","tld":"com"},"ip":{"addr":"104.26.13.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lootx.com/?r=603893","date":"2026-03-31T16:33:35.782Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lootx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 04:41:27 GMT","end":"Sun, 10 May 2026 05:41:22 GMT"},"fingerprint":{"sha1":"FB:4E:30:6E:1E:4F:E3:CF:34:82:A9:4B:BE:A2:31:32:DB:E1:E6:23","sha256":"D3:75:08:81:CE:43:48:04:F4:0D:FA:91:0A:C1:82:59:D3:C7:3D:D0:4D:F3:A1:65:3A:70:D7:23:6A:F9:BE:F7"}}},"request":{"raw":"GET /assets/images/lootx-logo-light.png HTTP/1.1\r\nHost: lootx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://lootx.com/?r=603893\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=71bc540c1af21d9eddc7f3c9e6b4e0b3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 31 Mar 2026 16:33:35 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Thu, 17 Jul 2025 09:26:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6878c1bc-493c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\ncf-polished: format_not_supported\r\ncf-bgj: imgq:100,h2pri\r\nage: 86263\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bE5PkGKOlKtbv4487JSIEbvAkgxKPNS3E7efp3ib0%2Foh%2FrVU1IZGb95dynFsRSvS6QQUtvm%2Bc9mM0qd4NMfphu7ORSF2LNrJtgDzfg5TDm3%2Fj%2B4HgfXTlEzPzQ%3D%3D\"}]}\r\ncf-ray: 9e50c1b67904723c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18748,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1203 x 234, 8-bit/color RGBA, non-interlaced","md5":"36887f3339c53ca5f8efe49a481f1f23","sha1":"65699bf3092ae926bfb45ab8e2f5db13172bf7cf","sha256":"69f0d4549414a7303c479b0ae7bd267c2e0d810d168870e5492d64b9005c79af","sha512":"19e028b0d5d5dd878d2d4551c029f1d73c117f10c32430001beb9ee6537a8c3f040c22794802bd8d8a2c0db0e0bfc0bc204733b6b7af78706325513984bc289f","ssdeep":"384:ZmWaQymz3Wd1H/Hn4i1ipxxWxQqLRyLbKCBqSWjI5kSwhaEq:Zm1QdW//H4U+4QS4HKmqa53whaL","tlshash":"a582df96b9a3dd8c21e86374702d2d0206b71587e22a5adb3feb486f7760437c943cb5","first_seen":"2025-12-17T14:51:53.015702Z","last_seen":"2026-03-31T16:36:13.181066Z","times_seen":3,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Montserrat:wght@500;600;700;800;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lootx.com/?r=603893","date":"2026-03-31T16:33:35.877Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:47 GMT","end":"Mon, 01 Jun 2026 08:37:46 GMT"},"fingerprint":{"sha1":"84:E2:03:36:CA:39:FF:65:64:D9:12:E7:E2:28:88:8C:3C:A0:CA:BA","sha256":"45:AF:9C:39:77:2B:D1:D7:B8:04:BB:2C:0E:98:C5:BB:8A:E8:99:A6:C3:AF:7F:90:AA:23:EA:F2:8F:AD:8F:B1"}}},"request":{"raw":"GET /css2?family=Montserrat:wght@500;600;700;800;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lootx.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 31 Mar 2026 16:33:36 GMT\r\ndate: Tue, 31 Mar 2026 16:33:36 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9635,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"ab7d87bc879b10a24ffbb03a5cc6269e","sha1":"d80c71dc8ab93b5a5ffd45de8d71723636f5486b","sha256":"bb4ad708a64cb2b157600e1a1dee4bed6c2f040816d269800dfbba64b51e6746","sha512":"4b940176650eda2bde41b40b70b3bbf67cae0be496f6f8bc24c372184d61555ae535b3b5f0c4e7cf50cf349d3149c1a8be8b7ef294aaaa4ec47d0c66012ef473","ssdeep":"192:fRv7M0OFupRS719Ocu6RB7W+OjuTRU7XPOKuMR77wIO5u8:JTzajdfMfPE","tlshash":"6412ad91105be500e6472cc923cf7e26dd4e21627494c5797ffe2ca8adeac220325b3d","first_seen":"2025-09-08T03:59:13.744964Z","last_seen":"2026-08-03T23:06:23.442009Z","times_seen":33,"resource_available":false,"data":null}},"time_used":272,"timings":{"blocked":79,"dns":1,"connect":31,"send":0,"wait":95,"receive":0,"ssl":61},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ka-f.fontawesome.com/releases/v6.7.2/css/free-v5-font-face.min.css?token=1b97f88d48","fqdn":"ka-f.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"172.67.139.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://lootx.com/?r=603893","date":"2026-03-31T16:33:36.224Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ka-f.fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 00:37:45 GMT","end":"Thu, 14 May 2026 01:37:41 GMT"},"fingerprint":{"sha1":"04:59:0D:80:7A:49:BB:1E:B1:8D:3E:19:59:3F:30:52:81:A8:E8:64","sha256":"C3:87:91:E9:A0:66:F9:A2:38:71:52:C8:EE:5B:C5:BD:54:B5:5D:64:77:06:DF:1E:6D:DA:DF:25:B8:D4:F8:C2"}}},"request":{"raw":"GET /releases/v6.7.2/css/free-v5-font-face.min.css?token=1b97f88d48 HTTP/1.1\r\nHost: ka-f.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://lootx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 31 Mar 2026 16:33:36 GMT\r\ncontent-type: text/css\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nlast-modified: Mon, 16 Dec 2024 16:06:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=31556926\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9t2y49HALEkto4MQa3Qa8ABMVDWcXojUhmSHVfpPXxRcRnMVjgR8BcNkswH6CevsTkqTbSkdMcl62xuu5MGNyGmLtVjtxxj7lupsTkTUT94rczSk25IJE%2B2ZFFw4kQQRExjjvoeArQ%3D%3D\"}]}\r\nserver: cloudflare\r\naccess-control-allow-headers: fa-kit-token\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 be3750c9aa69fd9d53a35aea8d9dab16.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: r7DrqWEU7HiSpIxF2dWxxWWTQlL-TVU-2XhKWA6MglhvtZ6PHDWCmw==\r\nage: 431776\r\ncf-cache-status: HIT\r\netag: W/\"ce9c230eaa656cebb4bcb218cc034374\"\r\ncontent-encoding: br\r\ncf-ray: 9e50c1ba1dff2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":823,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (608)","md5":"ce9c230eaa656cebb4bcb218cc034374","sha1":"e7c962a7b5113bd9273f8eb56b1fd75d9a152d2d","sha256":"da44f714aafade532fab93527bdcec46596d87cfef74a613d529e34686b6a064","sha512":"38a99c70f756999b2a49b4d2f27aa2de516bcbf19596d63db88cabfa6251b3bb7f75621d4829ee18098ca63f9fc03a5bd1ab3ed757f0a30e011e841aac1ace6d","ssdeep":"","tlshash":"14012b5d4569006141510f1138dbbb0abd0ab16778a95ea3911b8d2c4cfa90773f5f09","first_seen":"2024-12-18T12:55:36.292311Z","last_seen":"2026-08-05T07:10:01.25146Z","times_seen":7034,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":118,"dns":53,"connect":5,"send":0,"wait":8,"receive":0,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ats-wrapper.privacymanager.io/ats-modules/438cb908-ed61-41e9-b716-05d5f4122a64/ats.js","fqdn":"ats-wrapper.privacymanager.io","domain":"privacymanager.io","tld":"io"},"ip":{"addr":"3.167.2.72","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lootx.com/?r=603893","date":"2026-03-31T16:33:36.938Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.privacymanager.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Mon, 26 May 2025 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DF:60:3B:90:B0:FE:13:05:53:10:08:5C:25:5A:F8:C4:CD:D8:84:96","sha256":"0A:53:A4:E2:7B:1C:31:25:0C:53:84:0D:F4:CC:69:55:CE:3F:A6:F9:C3:6C:6E:FA:7E:5F:A8:AA:6B:0C:28:AB"}}},"request":{"raw":"GET /ats-modules/438cb908-ed61-41e9-b716-05d5f4122a64/ats.js HTTP/1.1\r\nHost: ats-wrapper.privacymanager.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 11 Feb 2026 06:46:37 GMT\r\nserver: AmazonS3\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: TeF9K5j8FeAE5n018RwEB4sEoyaU1OSm\r\ncontent-encoding: gzip\r\ndate: Tue, 31 Mar 2026 16:15:40 GMT\r\ncache-control: must-revalidate,public,max-age=3600\r\netag: W/\"bed77b09df36050cffca2f15ec751180\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 0dab08166aa7b915b2e3314728d79750.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: Je1QjgioqnUTxqUvnNHwbU_Mv17jH6OOQFn7WjP6SurFMDdckqWGTQ==\r\nage: 1077\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":127492,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"bed77b09df36050cffca2f15ec751180","sha1":"7047dcf4a72a70b0a64239f91cd2e872b6c0c29a","sha256":"16001190a7a501f9c484e3c887db95d8f68a5959e044bf2066c96d62b7681442","sha512":"aeabf1907f3e59828f1e95ea2fa30ff02def506133054348917779bd6d1d59a3135087c587a2991fceec188ae485fc877bb920b7f1058e2faa2b73ce43c42f70","ssdeep":"1536:1T1wG6qJdvIt2iIo+TSq9vLq7ikbqJkO29askn0iCsLxxucK97IYgQ/s8VERzODo:1Q0dvIt2iIo+TSiLXkbQ2Ask0sacOtAN","tlshash":"00c32bca31e1f4d613e750f0902f610ab3b268a9281cd490f7a4dce56d76b4e91b3f69","first_seen":"2026-02-11T17:09:00.637431Z","last_seen":"2026-07-19T15:33:24.827042Z","times_seen":331,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":43,"dns":36,"connect":1,"send":0,"wait":1,"receive":0,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t.nit.ro/p?d=QhtodHRwczovL2xvb3R4LmNvbS8%2Fcj02MDM4OTNaJDAxOWQ0NGJlLTU2MDItNzM1OS04N2VjLTQwNDI1ZTE1MzM4OWICTk9qAjAzkgEgZjc2OWMyN2IzMjIxZmZmNmFhYzNlZmFkZDM1NTk2YWGaAQc3MWZkMjQyuAEA0AGkDtgBAQ%3D%3D","fqdn":"t.nit.ro","domain":"nit.ro","tld":"ro"},"ip":{"addr":"35.244.144.25","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://lootx.com/?r=603893","date":"2026-03-31T16:33:37.814Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nit.ro","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Feb 2026 04:41:11 GMT","end":"Tue, 26 May 2026 05:37:06 GMT"},"fingerprint":{"sha1":"C9:06:33:67:44:BB:4C:10:67:C7:77:B6:7A:B9:56:36:EA:2B:AA:E2","sha256":"6A:E7:47:1C:87:CE:48:83:38:F6:D4:1D:70:83:FB:33:79:28:6B:00:54:02:1A:31:C0:EE:9D:7F:27:7C:FA:3F"}}},"request":{"raw":"GET /p?d=QhtodHRwczovL2xvb3R4LmNvbS8%2Fcj02MDM4OTNaJDAxOWQ0NGJlLTU2MDItNzM1OS04N2VjLTQwNDI1ZTE1MzM4OWICTk9qAjAzkgEgZjc2OWMyN2IzMjIxZmZmNmFhYzNlZmFkZDM1NTk2YWGaAQc3MWZkMjQyuAEA0AGkDtgBAQ%3D%3D HTTP/1.1\r\nHost: t.nit.ro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\nvary: Origin\r\ndate: Tue, 31 Mar 2026 16:33:38 GMT\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T12:03:16.307422Z","times_seen":17724130,"resource_available":true,"data":null}},"time_used":407,"timings":{"blocked":128,"dns":20,"connect":26,"send":0,"wait":151,"receive":0,"ssl":79},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad-delivery.net/px.gif?ch=2\u0026e=0.036256136413568396","fqdn":"ad-delivery.net","domain":"ad-delivery.net","tld":"net"},"ip":{"addr":"172.66.148.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://lootx.com/?r=603893","date":"2026-03-31T16:33:37.916Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ad-delivery.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Feb 2026 23:01:03 GMT","end":"Wed, 27 May 2026 00:00:46 GMT"},"fingerprint":{"sha1":"F1:55:14:26:AC:03:34:3A:69:CF:36:47:37:82:FD:10:32:4B:30:E5","sha256":"89:C8:2C:BC:DF:9A:57:EC:C4:33:DB:D8:2F:1B:99:EF:06:DC:1D:82:D7:44:B6:8E:44:8D:7E:36:43:2F:F9:3B"}}},"request":{"raw":"GET /px.gif?ch=2\u0026e=0.036256136413568396 HTTP/1.1\r\nHost: ad-delivery.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 31 Mar 2026 16:33:37 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nx-guploader-uploadid: ABgVH8-dIwnXuxz_AvoFtZgdE5tOR27RwF_-NyTqfsJ3BdAeGjCQBEH-zlJ2d7IRMDk5df9x\r\nx-goog-generation: 1620242732037093\r\nx-goog-metageneration: 5\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 43\r\nx-goog-hash: crc32c=cpEfJQ==, md5=rUsPYG4PhGW8TEwXCzfhow==\r\nx-goog-storage-class: MULTI_REGIONAL\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: cloudflare\r\nexpires: Wed, 11 Mar 2026 03:15:54 GMT\r\ncache-control: public, max-age=86400\r\nage: 1778839\r\nlast-modified: Wed, 05 May 2021 19:25:32 GMT\r\netag: \"ad4b0f606e0f8465bc4c4c170b37e1a3\"\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"gfe-default_product_name\"\r\nreport-to: {\"group\":\"gfe-default_product_name\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/default_product_name\"}]}\r\ncf-cache-status: HIT\r\ncf-ray: 9e50c1c42d8e4e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-08-05T11:59:40.855667Z","times_seen":376088,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":25,"dns":3,"connect":4,"send":0,"wait":5,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.nitropay.com/cmp/cancel.png","fqdn":"s.nitropay.com","domain":"nitropay.com","tld":"com"},"ip":{"addr":"104.18.3.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lootx.com/?r=603893","date":"2026-03-31T16:33:39.898Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nitropay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Feb 2026 10:45:55 GMT","end":"Sat, 23 May 2026 11:45:52 GMT"},"fingerprint":{"sha1":"46:DE:2B:EC:F8:2E:E8:B7:C4:9A:D7:D6:8A:5C:13:5F:32:BD:7C:48","sha256":"FA:4A:D5:59:D5:F5:75:CE:ED:A9:8E:38:E2:79:E1:F3:49:F1:7B:10:75:E7:6E:6E:02:4D:59:36:25:64:9B:FA"}}},"request":{"raw":"GET /cmp/cancel.png HTTP/1.1\r\nHost: s.nitropay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 31 Mar 2026 16:33:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 1302\r\nx-guploader-uploadid: AMNfjG0MNBgCQOAVt2IYaG55KQNyR1TGUaMNjduZEfej54sWWaE2RRbUBxJwPTmP0OG3ANEC\r\nexpires: Tue, 31 Mar 2026 16:59:11 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Fri, 21 Oct 2022 09:20:58 GMT\r\netag: \"c707b2d501a53bc2c66e98e4e5cabefb\"\r\nx-goog-generation: 1666344058825998\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 1302\r\nx-goog-hash: crc32c=QrhBNA==, md5=xwey1QGlO8LGbpjk5cq++w==\r\nx-goog-storage-class: MULTI_REGIONAL\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Type\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nage: 2067\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000; includeSubDomains\r\nset-cookie: __cf_bm=Z2SBBuCCKo8oPtDEfTNvK2WPU1wls8xv1vy_UCjd8WM-1774974819.8964584-1.0.1.1-M1QMgyLy1zgHb2LToMqaAyLN0.GPmQeXgUpDOks9Z2Ei6mvCeoHWO7hW1AlyvpcKN10sf0yyUHqLM8Z2RuLsT95Pdf5xkZp_cC7_AoKk8fpTPbaTkLc2PmBImVInuBQr; HttpOnly; Secure; Path=/; Domain=nitropay.com; Expires=Tue, 31 Mar 2026 17:03:39 GMT\r\ncf-ray: 9e50c1d05ebfb1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1302,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"c707b2d501a53bc2c66e98e4e5cabefb","sha1":"428a51cba1d520eae0c90de0cf367fd0ea0b9622","sha256":"89863d0411e5273c7c2befe50bceeab57034e26b5df8751cc13c3bd78c73511d","sha512":"e8efac1e9234f7257b67623921c485d3d05c2160937276971ecf6b4ccd57f6f2842a507639b67b9dfbf3902c65e66fc0e3cce9d0cf22aad11a31b6f1abbe1560","ssdeep":"","tlshash":"c4218089ddd029c3b909ddc220fe50366a2349e086e8d466b9ced01a08771a50db4acb","first_seen":"2023-04-16T23:52:30Z","last_seen":"2026-08-01T20:39:17.576326Z","times_seen":3120,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lootx.com/?r=603893","fqdn":"lootx.com","domain":"lootx.com","tld":"com"},"ip":{"addr":"104.26.13.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-31T16:33:35.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lootx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 04:41:27 GMT","end":"Sun, 10 May 2026 05:41:22 GMT"},"fingerprint":{"sha1":"FB:4E:30:6E:1E:4F:E3:CF:34:82:A9:4B:BE:A2:31:32:DB:E1:E6:23","sha256":"D3:75:08:81:CE:43:48:04:F4:0D:FA:91:0A:C1:82:59:D3:C7:3D:D0:4D:F3:A1:65:3A:70:D7:23:6A:F9:BE:F7"}}},"request":{"raw":"GET /?r=603893 HTTP/1.1\r\nHost: lootx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 31 Mar 2026 16:33:35 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nset-cookie: PHPSESSID=71bc540c1af21d9eddc7f3c9e6b4e0b3; expires=Wed, 01 Apr 2026 16:33:35 GMT; Max-Age=86400; path=/; secure; HttpOnly\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-permitted-cross-domain-policies: master-only\r\nreferrer-policy: same-origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2rJqOPXgCij%2FvtF4CwQUmI3%2FEdkRGtclVdRwFxGiFfMHgvHxgiytGRWAs5dl7HMAVPPa7H471Q9uwgfCg%2F0O8qpqH6vWWpQHDTpnAhAecZgWaUOsIvWaYWVihQ%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e50c1b49adc723c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Font Awesome","description":"Font Awesome is a font and icon toolkit based on CSS and Less.","website":"https://fontawesome.com/","common_platform_enumeration":"","icon":"Font Awesome.svg","categories":["Font scripts"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"jQuery:3.6.3","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":29020,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (359), with CRLF, LF line terminators","md5":"091482340ee93bd7b11ba7a5125c0735","sha1":"5965a2ba90429f8e1d346741b13fb405c0f157c5","sha256":"d03dcc1cedc50cc748f035193d615c28f222672e4977dbab54c8f34bdac5c3ec","sha512":"bef86512b7ca2e4b3ed287020dc7d0c4e015c0faa9992271740debfec45704fa19b9c6c31cc9a5d632a47cab3ddf3db94158b8ddb10f0eab635eeabc7c7f3c01","ssdeep":"192:oGvLEE5mM84iNZWzf9AZZgxjSiq9h9Pn196kmLEoGR+akilXvVCrNU+IFe9DbjLw:oy57xjSzB+QVtS+FkccGRjhALNgq1Ih5","tlshash":"87d2a71667e02017067392b59bb3b65afbb09007d34289987aec02649ff5ed6d853fcc","first_seen":"2026-03-31T16:34:06.5348Z","last_seen":"2026-03-31T16:36:13.063049Z","times_seen":2,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":25,"dns":5,"connect":2,"send":0,"wait":124,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Lato:400,700,900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lootx.com/?r=603893","date":"2026-03-31T16:33:35.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:47 GMT","end":"Mon, 01 Jun 2026 08:37:46 GMT"},"fingerprint":{"sha1":"84:E2:03:36:CA:39:FF:65:64:D9:12:E7:E2:28:88:8C:3C:A0:CA:BA","sha256":"45:AF:9C:39:77:2B:D1:D7:B8:04:BB:2C:0E:98:C5:BB:8A:E8:99:A6:C3:AF:7F:90:AA:23:EA:F2:8F:AD:8F:B1"}}},"request":{"raw":"GET /css?family=Lato:400,700,900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 31 Mar 2026 16:33:35 GMT\r\ndate: Tue, 31 Mar 2026 16:33:35 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2470,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"ed89eb825bd93640150e9b77f3f954cf","sha1":"e52e6bc979fb5e676f205117af0feed8c99373f0","sha256":"115ab28f77901e6bdcaacec3cc554508f9ed503db60b29cdc8d4e18f682b2578","sha512":"25bf2fad43255a7b1c13a844928c74cbd26b612221d51106446ef49a6be8e27451bed6fc6e905f962d450822ed591f3ccf5fd36466c10a7a1d713bb44dd7fd73","ssdeep":"","tlshash":"ac51be9105aba508db870cc212cd7e36ff1e625064559935affe14c8bc97c299362b0d","first_seen":"2025-09-17T11:41:34.134138Z","last_seen":"2026-08-05T05:02:19.386125Z","times_seen":2278,"resource_available":false,"data":null}},"time_used":343,"timings":{"blocked":144,"dns":1,"connect":31,"send":0,"wait":52,"receive":0,"ssl":112},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lootx.com/assets/css/connect.css?v=1.1.2","fqdn":"lootx.com","domain":"lootx.com","tld":"com"},"ip":{"addr":"104.26.13.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lootx.com/?r=603893","date":"2026-03-31T16:33:35.772Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lootx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 04:41:27 GMT","end":"Sun, 10 May 2026 05:41:22 GMT"},"fingerprint":{"sha1":"FB:4E:30:6E:1E:4F:E3:CF:34:82:A9:4B:BE:A2:31:32:DB:E1:E6:23","sha256":"D3:75:08:81:CE:43:48:04:F4:0D:FA:91:0A:C1:82:59:D3:C7:3D:D0:4D:F3:A1:65:3A:70:D7:23:6A:F9:BE:F7"}}},"request":{"raw":"GET /assets/css/connect.css?v=1.1.2 HTTP/1.1\r\nHost: lootx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://lootx.com/?r=603893\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=71bc540c1af21d9eddc7f3c9e6b4e0b3\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 31 Mar 2026 16:33:35 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Wed, 23 Jul 2025 01:14:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6880377a-14e73\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nage: 86263\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aRgIJLnafvqlCTHm%2BiarMLefE%2BMREozQHbBjyVjZ0oI4zLqEMhgSRe%2FSsEJYIvN3pk1Th4lNeLkZlxu8my9CT1j3rQYqTqjS40UhrD1i25sWJdPLDf2jjq%2FNSA%3D%3D\"}]}\r\ncf-ray: 9e50c1b678ce723c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":85619,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, ASCII text","md5":"fb1eada0a40e0633030c2feac45d22b3","sha1":"08b187c7a2b99cce7cfdcf9b40363ee17c52e3c6","sha256":"e8bb2e9a8b4f9e3f1e95cd592e0c22a0428a9a4cb06dbd154fd499095084cb9c","sha512":"4fea0f86b845f0149327b8b8410ac45d7bdd0e820101e588121cf8cc4324a6620c70f560bb7f2183b2945ec994d1e5b4d2bf6c3d18efe519a2876c2058d2fad9","ssdeep":"1536:S3aTDuBoCKysPZP1O9n6ji57t6d4ey54n:iaTDuBoCjsPZP1wa4L54n","tlshash":"ee836656eeb32d41742bc2986bdbfba1a72d0083a10dcd6d7b4e77584f46298503bf48","first_seen":"2025-12-17T14:51:53.014581Z","last_seen":"2026-03-31T16:36:13.120744Z","times_seen":3,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lootx.com/assets/plugins/jquery/jquery-3.6.3.min.js","fqdn":"lootx.com","domain":"lootx.com","tld":"com"},"ip":{"addr":"104.26.13.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lootx.com/?r=603893","date":"2026-03-31T16:33:35.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lootx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 04:41:27 GMT","end":"Sun, 10 May 2026 05:41:22 GMT"},"fingerprint":{"sha1":"FB:4E:30:6E:1E:4F:E3:CF:34:82:A9:4B:BE:A2:31:32:DB:E1:E6:23","sha256":"D3:75:08:81:CE:43:48:04:F4:0D:FA:91:0A:C1:82:59:D3:C7:3D:D0:4D:F3:A1:65:3A:70:D7:23:6A:F9:BE:F7"}}},"request":{"raw":"GET /assets/plugins/jquery/jquery-3.6.3.min.js HTTP/1.1\r\nHost: lootx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://lootx.com/?r=603893\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=71bc540c1af21d9eddc7f3c9e6b4e0b3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 31 Mar 2026 16:33:35 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 17 Jul 2025 09:25:47 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6878c19b-15f5b\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nage: 86263\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P4LTqJwiVD2Lq7WtC6uMoHeSxaIKkxZLmP%2BXNR%2BGPoFoqL4dhfSmMGZWxsIJyc6M0eoza9xOgzGfFaFeHkGTGnNw%2FP%2FccCwboCWU%2FhdTy2oz46o3hK%2FzAUNWXQ%3D%3D\"}]}\r\ncf-ray: 9e50c1b6890d723c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89947,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65446), with CRLF line terminators","md5":"a509c54b5330e1e3386a99004732dd64","sha1":"0c858ce6baba14a44f983abc9dfa00198e24eea3","sha256":"c43e0e050891f2c148041a5d4fa51f628c5eae5c67eb6bbbad6525bb83892686","sha512":"7f091c733b51fedf75aaeef06aa32b74b1da80dabbaf37240be841f076663515ef24d4379d7a6b797d58d5f867f463f097a759bea04400105832f4e2d224c1ac","ssdeep":"1536:TNjxXU9rnxD9o5EZxkMVC6YLtg7HtDuU3zh8cmnPMEgWzJvBQUmkm4M5gPtcNRQA:TcqmCU3zhINzfmR4lb3e34UQ47GKb","tlshash":"f79318ddb2c6b06247a770ba407f610ff236199d684d4400f169d8e9bc78a4a827bf7d","first_seen":"2023-03-12T18:12:58Z","last_seen":"2026-08-01T15:28:56.8168Z","times_seen":1075,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lootx.com/assets/custom-js/loaders.js?v=1.0.1","fqdn":"lootx.com","domain":"lootx.com","tld":"com"},"ip":{"addr":"104.26.13.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lootx.com/?r=603893","date":"2026-03-31T16:33:35.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lootx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 04:41:27 GMT","end":"Sun, 10 May 2026 05:41:22 GMT"},"fingerprint":{"sha1":"FB:4E:30:6E:1E:4F:E3:CF:34:82:A9:4B:BE:A2:31:32:DB:E1:E6:23","sha256":"D3:75:08:81:CE:43:48:04:F4:0D:FA:91:0A:C1:82:59:D3:C7:3D:D0:4D:F3:A1:65:3A:70:D7:23:6A:F9:BE:F7"}}},"request":{"raw":"GET /assets/custom-js/loaders.js?v=1.0.1 HTTP/1.1\r\nHost: lootx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://lootx.com/?r=603893\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=71bc540c1af21d9eddc7f3c9e6b4e0b3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 31 Mar 2026 16:33:35 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 17 Jul 2025 09:25:41 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6878c195-329\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nage: 431775\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=omEG0TPui792HO3VOJn33qJN7jeqMUdSiUUFmboLNkLpEL3OSE3SSXwjGAJzYJ%2FGiXfmlUvX8D88vuUE22otkIbvN6kLMngmHnqX%2Fg5Mjx1wLN2yrVe%2BUPXn8Q%3D%3D\"}]}\r\ncf-ray: 9e50c1b69955723c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":809,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"7d1a34875f2bfab70a05338aab56e24d","sha1":"b30ccd9d9b79a89c79d503d5f6e40063631882fc","sha256":"7f57c7790a84faed4a52cdc11f3f7281bdfa6ea799d0fecd279cfd9123cd658f","sha512":"a7589c0aad3bc6eea1662034bffc1383aaf0527308d4fb6783d7dd5f6613234932e25cec44c993b9fd7865705dc8780efba152b9991b62f5f510fecea8559e54","ssdeep":"","tlshash":"a901c0d670a12d31466f7adb70878bee7ce159088c1820118d3c1e9128b5ca57a9fe8e","first_seen":"2025-12-17T14:51:53.020815Z","last_seen":"2026-03-31T16:36:13.083605Z","times_seen":3,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.nitropay.com/gpp-61d490e.min.js","fqdn":"s.nitropay.com","domain":"nitropay.com","tld":"com"},"ip":{"addr":"104.18.3.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lootx.com/?r=603893","date":"2026-03-31T16:33:37.788Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nitropay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Feb 2026 10:45:55 GMT","end":"Sat, 23 May 2026 11:45:52 GMT"},"fingerprint":{"sha1":"46:DE:2B:EC:F8:2E:E8:B7:C4:9A:D7:D6:8A:5C:13:5F:32:BD:7C:48","sha256":"FA:4A:D5:59:D5:F5:75:CE:ED:A9:8E:38:E2:79:E1:F3:49:F1:7B:10:75:E7:6E:6E:02:4D:59:36:25:64:9B:FA"}}},"request":{"raw":"GET /gpp-61d490e.min.js HTTP/1.1\r\nHost: s.nitropay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 31 Mar 2026 16:33:37 GMT\r\ncontent-type: text/javascript\r\nx-guploader-uploadid: AMNfjG2Lku81pLQ4OaTj-j0Jh6ME9Xsfi5DmQnsXBOM9mH6DJClQbl8_UAfPiPDGfZEpGV4\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Apr 2026 23:58:03 GMT\r\nlast-modified: Mon, 23 Jun 2025 17:15:57 GMT\r\nset-cookie: __cf_bm=X53i_cBvlNN.Qr9h66obuuUtWIgyjwnjgVbJby95WAU-1774974817.7790244-1.0.1.1-bea_zw.l7LPV3WCCc6kf45K7EDCfAPAoP9SwVKVaZRO9ATZ3s1FZWqQh8NjfbIV3WuX20LmEkV7cHrq.UBJEi84OQR.ivDpl0ZDK9sRwuMzMEYhnSN5iKRtreLzBu0PO; HttpOnly; Secure; Path=/; Domain=nitropay.com; Expires=Tue, 31 Mar 2026 17:03:37 GMT\r\nx-goog-generation: 1750698957275780\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 232723\r\nx-goog-hash: crc32c=kd50Hw==, md5=85Xn3RooJE0C7GGraVVcGw==\r\nx-goog-storage-class: MULTI_REGIONAL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Type\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nage: 491734\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000; includeSubDomains\r\netag: W/\"f395e7dd1a28244d02ec61ab69555c1b\"\r\ncontent-encoding: gzip\r\ncf-ray: 9e50c1c31b4fb1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":232723,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65471)","md5":"f395e7dd1a28244d02ec61ab69555c1b","sha1":"6eb5f963cf2cdc08f9272909481535932491d8af","sha256":"fc5521185e7dec9f2c67fdf916d6a81db3ca1d571b1e8d89ffb7dec282e83d31","sha512":"7000e497d5d64c35303d43a8dbaa225091040a7f97a8d2273d84528ea8bdb9a1bbfcc146ea00d9c4e004ffb3659a421226cff0900937b5cc696094014d12ca49","ssdeep":"6144:KDkB6373jBqwke6WYr4mVeMrGlX6mUJVneJ7ODnt1fQLZPlTwGLf5qHDIf4RakOh:EEyi4m2WWvyO5jIsy0","tlshash":"72342b4476f0a0b6115f40a3c62af5267a353968940818607ebc7ccd1fc6ace9c6bfbd","first_seen":"2025-06-27T23:48:54.667058Z","last_seen":"2026-08-01T20:39:17.568692Z","times_seen":2662,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ab.dns-finder.com/meta/dns","fqdn":"ab.dns-finder.com","domain":"dns-finder.com","tld":"com"},"ip":{"addr":"34.36.200.111","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://lootx.com/?r=603893","date":"2026-03-31T16:33:42.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ab.dns-finder.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 01:19:17 GMT","end":"Thu, 07 May 2026 02:14:08 GMT"},"fingerprint":{"sha1":"CA:3E:FC:BD:D0:F5:27:B0:A7:61:0F:A3:60:23:91:19:25:F1:52:7A","sha256":"DA:67:0A:73:1D:C0:7D:41:F9:D5:4F:00:84:A1:5E:7B:55:FC:AB:39:8D:36:D3:12:AB:4D:FE:48:1F:77:99:AE"}}},"request":{"raw":"GET /meta/dns HTTP/1.1\r\nHost: ab.dns-finder.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://lootx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Resolver\r\ncache-control: private, max-age=180, stale-if-error=180, stale-while-revalidate=180\r\nvary: Origin\r\ndate: Tue, 31 Mar 2026 16:33:42 GMT\r\ncontent-length: 2\r\ncontent-type: text/plain; charset=utf-8\r\nvia: 1.1 google\r\nx-resolver: default\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-08-05T11:58:59.713012Z","times_seen":445375,"resource_available":true,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lato/v25/S6uyw4BMUTPHjxAwXjeu.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://lootx.com/?r=603893","date":"2026-03-31T16:33:41.715Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:39 GMT","end":"Mon, 01 Jun 2026 08:37:38 GMT"},"fingerprint":{"sha1":"31:A8:B5:C1:CD:F5:51:78:A9:8C:E3:B4:73:92:CF:C0:6D:69:48:19","sha256":"81:9A:84:FB:F5:4C:AB:82:DF:C1:27:CC:60:46:A6:23:A8:49:56:99:47:CF:C4:05:3F:0D:87:31:DD:2C:23:A2"}}},"request":{"raw":"GET /s/lato/v25/S6uyw4BMUTPHjxAwXjeu.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://lootx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 5612\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 31 Mar 2026 02:02:15 GMT\r\nexpires: Wed, 31 Mar 2027 02:02:15 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 17:09:42 GMT\r\ncontent-type: font/woff2\r\nage: 52286\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5612,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 5612, version 1.0","md5":"633f8feda2188d767d2396652da17377","sha1":"d35cc70037f82ab61d86f2c4d80685a474821d45","sha256":"8b9fc9737043f88c1a9a7195c27a239bd329cc33d928ffb67736c61ae7a1dbbd","sha512":"edadc35473adc7d3d2b6c0bc04789dc78c7f38c0eccac6f08625738d5c8cfa9203c1d9ef2ee6ce721fabc5a4eba41cd19f47e56dc85ff3bc1f7f0ede2ec5ba0b","ssdeep":"96:iD0G8mpQLE+J8uftoCUdUZ/OGjfSg7uov39XTr9a8dBmhPk7jJ5lpqaAjiv/8qBA:7xXLZ8uVoCUdUFOGjJ7Pv39Pw0MiZ5cB","tlshash":"23c1af36b54e1d4bf74201b8137b823e41c70c621637356dbb16aa9418dcf4161371e7","first_seen":"2025-09-17T03:45:02.002945Z","last_seen":"2026-08-05T10:06:11.482768Z","times_seen":5339,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.btloader.com/pv?nlf=false\u0026tid=EWrf0wVvEt-0QRmrwzZR-9d44be5671\u0026sid=X3WdVRixsa-V1fDr9X6-9d44be5671\u0026cv=2.1.186\u0026upapi=true","fqdn":"api.btloader.com","domain":"btloader.com","tld":"com"},"ip":{"addr":"130.211.23.194","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://lootx.com/?r=603893","date":"2026-03-31T16:33:44.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.btloader.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Mar 2026 19:14:14 GMT","end":"Fri, 05 Jun 2026 20:08:47 GMT"},"fingerprint":{"sha1":"25:50:57:33:6C:C6:FC:C6:62:E6:5C:AF:AE:86:D2:4A:80:3E:2F:AF","sha256":"69:3E:EC:E2:E2:0C:F3:D5:0D:0A:C7:32:CC:E2:BA:DB:FE:F9:22:36:3E:3B:37:6F:AF:1C:16:12:E2:E2:1B:C2"}}},"request":{"raw":"POST /pv?nlf=false\u0026tid=EWrf0wVvEt-0QRmrwzZR-9d44be5671\u0026sid=X3WdVRixsa-V1fDr9X6-9d44be5671\u0026cv=2.1.186\u0026upapi=true HTTP/1.1\r\nHost: api.btloader.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Length: 1149\r\nOrigin: https://lootx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1149,"data":"{\"w\":\"5152690249662464\",\"o\":\"6278260873756672\",\"widget\":false,\"vr\":{\"w\":1280,\"h\":1024},\"pageURL\":\"https://lootx.com/?r=603893\",\"spa_view_change\":false,\"un\":false,\"r\":false,\"br\":[{\"name\":\"ad-delivery-ab\",\"type\":\"url\",\"signals\":{\"ab\":false},\"meta\":{\"attempt\":7,\"durMs\":6498,\"responseStatus\":0}},{\"name\":\"doubleclick-ab\",\"type\":\"url\",\"signals\":{\"ab\":true},\"meta\":{\"attempt\":2,\"durMs\":423,\"responseStatus\":null}},{\"name\":\"bt-legacy-bait-element\",\"type\":\"element\",\"signals\":{\"ab\":false},\"meta\":{\"attempt\":14,\"durMs\":3009}},{\"name\":\"ad-delivery-aa\",\"type\":\"url\",\"signals\":{\"aa\":true},\"meta\":{\"attempt\":2,\"durMs\":4359,\"responseStatus\":0}},{\"name\":\"ab-dns-finder-nlf\",\"type\":\"url\",\"signals\":{\"ab\":false},\"meta\":{\"responseStatus\":200}},{\"name\":\"element-aa-detection\",\"type\":\"element\",\"signals\":{\"aa\":false},\"meta\":{\"m5c2t8q\":{\"isHidden\":false,\"attempt\":14,\"durMs\":3011},\"v8n6y4p\":{\"isHidden\":false,\"attempt\":14,\"durMs\":3013},\"w3p9m6d\":{\"isHidden\":false,\"attempt\":14,\"durMs\":3015},\"k2y8f7x\":{\"isHidden\":false,\"attempt\":14,\"durMs\":3017},\"q7d5z1l\":{\"isHidden\":false,\"attempt\":14,\"durMs\":3018},\"x9a7b3k\":{\"isHidden\":false,\"attempt\":14,\"durMs\":3018}}}],\"pm\":true}"}},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-origin: *\r\ncache-control: no-cache, no-store, must-revalidate\r\nvary: Origin\r\ndate: Tue, 31 Mar 2026 16:33:44 GMT\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T12:03:16.307422Z","times_seen":17724130,"resource_available":true,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://lootx.com/?r=603893","date":"2026-03-31T16:33:36.289Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:39 GMT","end":"Mon, 01 Jun 2026 08:37:38 GMT"},"fingerprint":{"sha1":"31:A8:B5:C1:CD:F5:51:78:A9:8C:E3:B4:73:92:CF:C0:6D:69:48:19","sha256":"81:9A:84:FB:F5:4C:AB:82:DF:C1:27:CC:60:46:A6:23:A8:49:56:99:47:CF:C4:05:3F:0D:87:31:DD:2C:23:A2"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://lootx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 28 Mar 2026 02:00:45 GMT\r\nexpires: Sun, 28 Mar 2027 02:00:45 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nage: 311571\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-08-05T12:00:59.243129Z","times_seen":546466,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":85,"dns":0,"connect":0,"send":0,"wait":19,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-EET80J08NY\u0026cx=c\u0026gtm=4e63u0","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lootx.com/?r=603893","date":"2026-03-31T16:33:36.611Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:36:15 GMT","end":"Mon, 01 Jun 2026 08:36:14 GMT"},"fingerprint":{"sha1":"58:CB:88:A1:C4:55:4E:E5:46:DC:A0:9C:B3:54:25:79:20:1E:E8:09","sha256":"0B:B5:96:A2:57:57:EC:BA:63:14:8A:AF:4C:C2:32:63:18:8B:75:80:8F:78:1D:1F:5B:00:B7:B3:7E:C9:B7:18"}}},"request":{"raw":"GET /gtag/js?id=G-EET80J08NY\u0026cx=c\u0026gtm=4e63u0 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 31 Mar 2026 16:33:36 GMT\r\nexpires: Tue, 31 Mar 2026 16:33:36 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 141454\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":409642,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5930)","md5":"11e3265c52d3b3b343067a1f05aa55fb","sha1":"c10f2f0435abb4a86a151661e220e13fecc18c98","sha256":"d71ac4216656b90b0df79691a3e41d046cd49deff00d896ea24479597e011c5e","sha512":"db7dcec6c15a19c40c906080412aadcaf52b84839ce8ffb7e2263ea6e42d30f8520ebb192b8d196607f66af63f8700e07e5b6ea402e54af600f3f60c179fa8cf","ssdeep":"6144:F5J1WXfhnuQTQCVEhMjBegR8US0gDhs1M1LTvDHlg1r7:ahnuQT9VEhweW8i2S","tlshash":"089419ceb3d674665393f478903f008ba57a29e2b44cc899f189c8d42e7469a4277f3d","first_seen":"2026-03-31T16:34:06.565969Z","last_seen":"2026-03-31T16:34:06.565969Z","times_seen":1,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad-delivery.net/px.gif?ch=1\u0026e=0.7236048646987334","fqdn":"ad-delivery.net","domain":"ad-delivery.net","tld":"net"},"ip":{"addr":"172.66.148.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://lootx.com/?r=603893","date":"2026-03-31T16:33:42.663Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ad-delivery.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Feb 2026 23:01:03 GMT","end":"Wed, 27 May 2026 00:00:46 GMT"},"fingerprint":{"sha1":"F1:55:14:26:AC:03:34:3A:69:CF:36:47:37:82:FD:10:32:4B:30:E5","sha256":"89:C8:2C:BC:DF:9A:57:EC:C4:33:DB:D8:2F:1B:99:EF:06:DC:1D:82:D7:44:B6:8E:44:8D:7E:36:43:2F:F9:3B"}}},"request":{"raw":"GET /px.gif?ch=1\u0026e=0.7236048646987334 HTTP/1.1\r\nHost: ad-delivery.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 31 Mar 2026 16:33:42 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nx-guploader-uploadid: ABgVH8-dIwnXuxz_AvoFtZgdE5tOR27RwF_-NyTqfsJ3BdAeGjCQBEH-zlJ2d7IRMDk5df9x\r\nx-goog-generation: 1620242732037093\r\nx-goog-metageneration: 5\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 43\r\nx-goog-hash: crc32c=cpEfJQ==, md5=rUsPYG4PhGW8TEwXCzfhow==\r\nx-goog-storage-class: MULTI_REGIONAL\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: cloudflare\r\nexpires: Wed, 11 Mar 2026 03:15:54 GMT\r\ncache-control: public, max-age=86400\r\nage: 1778844\r\nlast-modified: Wed, 05 May 2021 19:25:32 GMT\r\netag: \"ad4b0f606e0f8465bc4c4c170b37e1a3\"\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"gfe-default_product_name\"\r\nreport-to: {\"group\":\"gfe-default_product_name\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/default_product_name\"}]}\r\ncf-cache-status: HIT\r\ncf-ray: 9e50c1e198c24e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-08-05T11:59:40.855667Z","times_seen":376088,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad-delivery.net/px.gif?ch=1\u0026e=0.7893028493456169","fqdn":"ad-delivery.net","domain":"ad-delivery.net","tld":"net"},"ip":{"addr":"172.66.148.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://lootx.com/?r=603893","date":"2026-03-31T16:33:42.874Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ad-delivery.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Feb 2026 23:01:03 GMT","end":"Wed, 27 May 2026 00:00:46 GMT"},"fingerprint":{"sha1":"F1:55:14:26:AC:03:34:3A:69:CF:36:47:37:82:FD:10:32:4B:30:E5","sha256":"89:C8:2C:BC:DF:9A:57:EC:C4:33:DB:D8:2F:1B:99:EF:06:DC:1D:82:D7:44:B6:8E:44:8D:7E:36:43:2F:F9:3B"}}},"request":{"raw":"GET /px.gif?ch=1\u0026e=0.7893028493456169 HTTP/1.1\r\nHost: ad-delivery.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 31 Mar 2026 16:33:42 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nx-guploader-uploadid: ABgVH8-dIwnXuxz_AvoFtZgdE5tOR27RwF_-NyTqfsJ3BdAeGjCQBEH-zlJ2d7IRMDk5df9x\r\nx-goog-generation: 1620242732037093\r\nx-goog-metageneration: 5\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 43\r\nx-goog-hash: crc32c=cpEfJQ==, md5=rUsPYG4PhGW8TEwXCzfhow==\r\nx-goog-storage-class: MULTI_REGIONAL\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: cloudflare\r\nexpires: Wed, 11 Mar 2026 03:15:54 GMT\r\ncache-control: public, max-age=86400\r\nage: 1778844\r\nlast-modified: Wed, 05 May 2021 19:25:32 GMT\r\netag: \"ad4b0f606e0f8465bc4c4c170b37e1a3\"\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"gfe-default_product_name\"\r\nreport-to: {\"group\":\"gfe-default_product_name\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/default_product_name\"}]}\r\ncf-cache-status: HIT\r\ncf-ray: 9e50c1e2fc924e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-08-05T11:59:40.855667Z","times_seen":376088,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad-delivery.net/px.gif?ch=2\u0026e=0.5789155972255268","fqdn":"ad-delivery.net","domain":"ad-delivery.net","tld":"net"},"ip":{"addr":"172.66.148.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://lootx.com/?r=603893","date":"2026-03-31T16:33:43.478Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ad-delivery.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Feb 2026 23:01:03 GMT","end":"Wed, 27 May 2026 00:00:46 GMT"},"fingerprint":{"sha1":"F1:55:14:26:AC:03:34:3A:69:CF:36:47:37:82:FD:10:32:4B:30:E5","sha256":"89:C8:2C:BC:DF:9A:57:EC:C4:33:DB:D8:2F:1B:99:EF:06:DC:1D:82:D7:44:B6:8E:44:8D:7E:36:43:2F:F9:3B"}}},"request":{"raw":"GET /px.gif?ch=2\u0026e=0.5789155972255268 HTTP/1.1\r\nHost: ad-delivery.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 31 Mar 2026 16:33:43 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nx-guploader-uploadid: ABgVH8-dIwnXuxz_AvoFtZgdE5tOR27RwF_-NyTqfsJ3BdAeGjCQBEH-zlJ2d7IRMDk5df9x\r\nx-goog-generation: 1620242732037093\r\nx-goog-metageneration: 5\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 43\r\nx-goog-hash: crc32c=cpEfJQ==, md5=rUsPYG4PhGW8TEwXCzfhow==\r\nx-goog-storage-class: MULTI_REGIONAL\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: cloudflare\r\nexpires: Wed, 11 Mar 2026 03:15:54 GMT\r\ncache-control: public, max-age=86400\r\nage: 1778844\r\nlast-modified: Wed, 05 May 2021 19:25:32 GMT\r\netag: \"ad4b0f606e0f8465bc4c4c170b37e1a3\"\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"gfe-default_product_name\"\r\nreport-to: {\"group\":\"gfe-default_product_name\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/default_product_name\"}]}\r\ncf-cache-status: HIT\r\ncf-ray: 9e50c1e6bf914e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-08-05T11:59:40.855667Z","times_seen":376088,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lootx.com/assets/css/custom.css?v=5.0.3","fqdn":"lootx.com","domain":"lootx.com","tld":"com"},"ip":{"addr":"104.26.13.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lootx.com/?r=603893","date":"2026-03-31T16:33:35.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lootx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 04:41:27 GMT","end":"Sun, 10 May 2026 05:41:22 GMT"},"fingerprint":{"sha1":"FB:4E:30:6E:1E:4F:E3:CF:34:82:A9:4B:BE:A2:31:32:DB:E1:E6:23","sha256":"D3:75:08:81:CE:43:48:04:F4:0D:FA:91:0A:C1:82:59:D3:C7:3D:D0:4D:F3:A1:65:3A:70:D7:23:6A:F9:BE:F7"}}},"request":{"raw":"GET /assets/css/custom.css?v=5.0.3 HTTP/1.1\r\nHost: lootx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://lootx.com/?r=603893\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=71bc540c1af21d9eddc7f3c9e6b4e0b3\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 31 Mar 2026 16:33:35 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Wed, 23 Jul 2025 00:03:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"688026b6-1a3d\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nage: 431776\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZfC8%2F6UVXwZlIhTEyU8RKexjpPdtA3KUQCbcPuQlHpdK%2B46GRSUN%2BLZgkrdKBZPe4mtiYV%2FH069D2bH97ZcHAcpAW8aszgyct9QyFMli%2Fc92CRZ7U%2FBhlEz3jA%3D%3D\"}]}\r\ncf-ray: 9e50c1b678ec723c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6717,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"0b8e09bd07ff1759a6f5c71c5f923d87","sha1":"0282bc6d6b640426644b2b8467d2b6343667a768","sha256":"08207763f03d0d6e38a1d4db2cbcc57bc8e578ba0d89ec18a1b1e3522d91e623","sha512":"9dfaee3195a52bf75e71d58e77eb51b9474ea17874dbc2e90cfe69ec2618d4d75bca1de1d8e8d3fd2e9f9f8e901f54a203191eb5aacdbcc3da16fee2f5f4ee3e","ssdeep":"192:jgR9PcXKUEMIghjOFZm3NpdwxKSepMcXK:0RZiJhSFZm3NpdjK","tlshash":"91d16666a96b1901b01fc0a863e7b77c152c40c7d617ce2c7798b5a8cf813ab5672f88","first_seen":"2025-12-17T14:51:53.01961Z","last_seen":"2026-03-31T16:36:13.047849Z","times_seen":3,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.nitropay.com/ads-1828.js","fqdn":"s.nitropay.com","domain":"nitropay.com","tld":"com"},"ip":{"addr":"104.18.3.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lootx.com/?r=603893","date":"2026-03-31T16:33:35.779Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nitropay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Feb 2026 10:45:55 GMT","end":"Sat, 23 May 2026 11:45:52 GMT"},"fingerprint":{"sha1":"46:DE:2B:EC:F8:2E:E8:B7:C4:9A:D7:D6:8A:5C:13:5F:32:BD:7C:48","sha256":"FA:4A:D5:59:D5:F5:75:CE:ED:A9:8E:38:E2:79:E1:F3:49:F1:7B:10:75:E7:6E:6E:02:4D:59:36:25:64:9B:FA"}}},"request":{"raw":"GET /ads-1828.js HTTP/1.1\r\nHost: s.nitropay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 31 Mar 2026 16:33:36 GMT\r\ncontent-type: text/javascript\r\ncf-ray: 9e50c1b6eb695684-OSL\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=rP0riZw8NEvS_DSTIp.SdxXd.Kf_yz1giuEdURiJ2Ps-1774974815.821231-1.0.1.1-njD.3JgIjUdPCyENNAWKSjvPXVcAGrR2Rhcnru_3Q80IgSrkfgOOFXePoJ5_d2J3C0PV9m95jX6B9R0N0wiotfVKoihw_0rCPxLdUv9AkHHp2Djau4VNndOqW7sPgiOP; HttpOnly; Secure; Path=/; Domain=nitropay.com; Expires=Tue, 31 Mar 2026 17:03:36 GMT\r\naccess-control-allow-origin: *\r\ncache-control: private, max-age=600\r\nx-guploader-uploadid: AMNfjG1XPc9wcwC8jxzB94w63nRYGKl8ftTCyhEWoAKYu5zTcFmYmmr4A9ELGCMGqfswIahL\r\nexpires: Wed, 31 Mar 2027 16:33:35 GMT\r\nlast-modified: Tue, 31 Mar 2026 16:32:54 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=2592000; includeSubDomains\r\naccess-control-expose-headers: Content-Type\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-goog-generation: 1774893592462041\r\nx-goog-hash: crc32c=AA/beg==, md5=IIuN6myzbxbcSzfWuS49RA==\r\nx-goog-meta-goog-reserved-file-mtime: 1774893158\r\nx-goog-metageneration: 1\r\nx-goog-storage-class: MULTI_REGIONAL\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 638193\r\netag: W/\"208b8dea6cb36f16dc4b37d6b92e3d44:1774974774000:NO\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":643811,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (59852)","md5":"514e85580321b1f002425d3f3d204d07","sha1":"304f34f7942abac009872b0e78a40fc6582fcb89","sha256":"2ed94207f1d2d50ecca7a53c717b6fac8df9ae50a0da7a34905dcaa024de96ba","sha512":"83d4f5b630979fa77de9bf9e5f8e03fd2bae06381c5b81a076a496634a9ca6c777c3a45fe5362e57297ced88a73382b65baa3fd8b25dbaacda3c93719c2bc110","ssdeep":"12288:o7tkxsfmNRLbB24UyF8HO2QnSqZDRbVyPh/EJZdn/1O3WfIw:o7tkxsfmNRLbBiyF8HO2QnSqDb0h/EJt","tlshash":"0cd45c8a3292f4ba03f654e5d03b4706f2396a053409c450f52eadeb3569e9b7273f78","first_seen":"2026-03-31T16:34:06.57479Z","last_seen":"2026-03-31T16:36:13.081458Z","times_seen":2,"resource_available":false,"data":null}},"time_used":997,"timings":{"blocked":38,"dns":24,"connect":3,"send":0,"wait":909,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-03-31","alert":"Hunting_JS_WebAssembly","trigger":"s.nitropay.com/ads-1828.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"ka-f.fontawesome.com/releases/v6.7.2/css/free.min.css?token=1b97f88d48","fqdn":"ka-f.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"172.67.139.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://lootx.com/?r=603893","date":"2026-03-31T16:33:36.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ka-f.fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 00:37:45 GMT","end":"Thu, 14 May 2026 01:37:41 GMT"},"fingerprint":{"sha1":"04:59:0D:80:7A:49:BB:1E:B1:8D:3E:19:59:3F:30:52:81:A8:E8:64","sha256":"C3:87:91:E9:A0:66:F9:A2:38:71:52:C8:EE:5B:C5:BD:54:B5:5D:64:77:06:DF:1E:6D:DA:DF:25:B8:D4:F8:C2"}}},"request":{"raw":"GET /releases/v6.7.2/css/free.min.css?token=1b97f88d48 HTTP/1.1\r\nHost: ka-f.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://lootx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 31 Mar 2026 16:33:36 GMT\r\ncontent-type: text/css\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nlast-modified: Mon, 16 Dec 2024 16:06:36 GMT\r\netag: W/\"14f5eecc946f901d192b02550e4dad67\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=31556926\r\nserver: cloudflare\r\naccess-control-allow-headers: fa-kit-token\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 16015e09e0d70f7cc17ec5c4f52b310e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: T64XF52AjRBgdLq9yA5x1kto8wax4ItDElFg8In2rBp0XCfF6mXiMg==\r\nage: 431776\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HGqCDvEBmBvVSHgKJk5RSEWIrB6GD4lRD79sHamD92PZGdOKxEju7oj7UNKFrZ9wtXsFWdZEvX%2Bd1gXqjby9pdoe3tBdEIFMRABPS36aoKA468lp6LvApJ04JXv3sRCBRye5HH4BCA%3D%3D\"}]}\r\ncf-ray: 9e50c1ba2e0d2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73986,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65321)","md5":"14f5eecc946f901d192b02550e4dad67","sha1":"45d6a10e09484d078cad37282708d611e19a06e6","sha256":"8f13446769cd1916cbbbdc2be7eb5be4b331bc7ef9ed8b799ecb4674e48095bf","sha512":"82e20fec5704c5784624775facba87c0c85893707e6905e44390ca6671b3a3e212a0bbf7161bf5c779aaefc22a71be24c38043d3077aedfd2e53483cde032072","ssdeep":"1536:/rM1MvMaMfMRQdm0grfT/QypZhzZHpSjA691Q:ilgrLXzZJg191Q","tlshash":"3f731f16ad84019bb4568d7f3885bf34a6f2eb28aad14495e4344d847ef28fd314fb32","first_seen":"2024-12-18T04:50:29.606533Z","last_seen":"2026-08-05T07:10:01.262825Z","times_seen":7331,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":125,"dns":55,"connect":1,"send":0,"wait":10,"receive":0,"ssl":64},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://lootx.com/?r=603893","date":"2026-03-31T16:33:36.280Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:39 GMT","end":"Mon, 01 Jun 2026 08:37:38 GMT"},"fingerprint":{"sha1":"31:A8:B5:C1:CD:F5:51:78:A9:8C:E3:B4:73:92:CF:C0:6D:69:48:19","sha256":"81:9A:84:FB:F5:4C:AB:82:DF:C1:27:CC:60:46:A6:23:A8:49:56:99:47:CF:C4:05:3F:0D:87:31:DD:2C:23:A2"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://lootx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 31 Mar 2026 02:01:49 GMT\r\nexpires: Wed, 31 Mar 2027 02:01:49 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 52307\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-05T11:59:46.937302Z","times_seen":253084,"resource_available":false,"data":null}},"time_used":560,"timings":{"blocked":285,"dns":11,"connect":13,"send":0,"wait":8,"receive":3,"ssl":231},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"floors.nitropay.com/f?s=1828\u0026c=NO\u0026v=2","fqdn":"floors.nitropay.com","domain":"nitropay.com","tld":"com"},"ip":{"addr":"35.244.144.25","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://lootx.com/?r=603893","date":"2026-03-31T16:33:36.926Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nitropay.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 23:37:36 GMT","end":"Wed, 03 Jun 2026 00:33:31 GMT"},"fingerprint":{"sha1":"80:C5:F5:7E:3A:20:AD:65:23:E0:16:27:C5:DC:6D:AD:59:2F:6B:46","sha256":"DC:25:88:CD:17:DC:ED:84:33:7A:26:76:44:E3:30:BF:F7:6D:FE:ED:AB:F4:B5:12:78:9B:5D:31:CD:C8:0C:FD"}}},"request":{"raw":"GET /f?s=1828\u0026c=NO\u0026v=2 HTTP/1.1\r\nHost: floors.nitropay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://lootx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncontent-type: application/json\r\nvary: Origin\r\ndate: Tue, 31 Mar 2026 16:33:37 GMT\r\ncontent-length: 26\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-08-05T11:59:12.736544Z","times_seen":755263,"resource_available":true,"data":null}},"time_used":360,"timings":{"blocked":111,"dns":20,"connect":13,"send":0,"wait":138,"receive":0,"ssl":76},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.nitropay.com/ads-standalone.3b313a8b36833b85aa35.js","fqdn":"s.nitropay.com","domain":"nitropay.com","tld":"com"},"ip":{"addr":"104.18.3.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://lootx.com/?r=603893","date":"2026-03-31T16:33:37.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nitropay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Feb 2026 10:45:55 GMT","end":"Sat, 23 May 2026 11:45:52 GMT"},"fingerprint":{"sha1":"46:DE:2B:EC:F8:2E:E8:B7:C4:9A:D7:D6:8A:5C:13:5F:32:BD:7C:48","sha256":"FA:4A:D5:59:D5:F5:75:CE:ED:A9:8E:38:E2:79:E1:F3:49:F1:7B:10:75:E7:6E:6E:02:4D:59:36:25:64:9B:FA"}}},"request":{"raw":"GET /ads-standalone.3b313a8b36833b85aa35.js HTTP/1.1\r\nHost: s.nitropay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 31 Mar 2026 16:33:37 GMT\r\ncontent-type: text/javascript\r\ncf-ray: 9e50c1c2eae1b1b8-OSL\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nage: 491734\r\ncache-control: public, max-age:43200\r\nexpires: Thu, 25 Mar 2027 23:58:03 GMT\r\nlast-modified: Wed, 25 Mar 2026 23:57:14 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=2592000; includeSubDomains\r\nvary: Accept-Encoding\r\naccess-control-expose-headers: Content-Type\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-goog-generation: 1774483034011330\r\nx-goog-hash: crc32c=+ftBRA==, md5=r3U7TVLmvV+b9LIQYKKXcA==\r\nx-goog-meta-goog-reserved-file-mtime: 1774481996\r\nx-goog-metageneration: 1\r\nx-goog-storage-class: MULTI_REGIONAL\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 7688\r\nx-guploader-uploadid: AMNfjG1KeAd2Onn0WwsSKxuTvhyqy0RjOtoA2pOUYoVWFKsN1ooLy9jeMB9RHOv95qyodgVYx-xtyx8\r\nset-cookie: __cf_bm=4JGR098iNVq3JEy3OmcJuJPTTbHedCzQKXVTrdD.D3k-1774974817.7468126-1.0.1.1-5Z_vpF28GH0UezbzdYMnf_gT52x7.P0S8zN3Cr3kd1cLndqkn4w71c.xrm7lQES6nakMERbfa3eyL_9PmOkvu8PVOmRvct_yaqIIcSgzkEf5soYOvMzbbcDic.deWDmH; HttpOnly; Secure; Path=/; Domain=nitropay.com; Expires=Tue, 31 Mar 2026 17:03:37 GMT\r\netag: W/\"af753b4d52e6bd5f9bf4b21060a29770\"\r\ncontent-encoding: gzip\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7688,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (7688), with no line terminators","md5":"af753b4d52e6bd5f9bf4b21060a29770","sha1":"14359ae09d2040f8cdfe97b48d955b99a9f36fa2","sha256":"a017f9ff5b2ecf3b8d3a69880acad582d6f0eed8c26ad5675f8790e3365a9e64","sha512":"4905f47d5477d8f36b193a7f273256754d3dbdfd055abd4bff9eb5a23ff1ef6934b8b22d0f1d1941cb78980b10a920a39c15e78a27d1832104db6383e19aff82","ssdeep":"96:lbY4I8c4Gf3vMpJqk9LgX1NHPBGZ4OZ4zIMaDrFpKKo7Nu1/INi:BY4ImGf3vMpJqkKXr0rMI77ViNu1Z","tlshash":"a1f173523b7845be408cc2af711d8215b134324bae6a953d78adedebb24cccd66209b1","first_seen":"2025-11-25T18:51:50.068235Z","last_seen":"2026-06-07T03:46:27.951283Z","times_seen":312,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.nitropay.com/ads-arcspan.8fc7578a2d00f8aa7a18.js","fqdn":"s.nitropay.com","domain":"nitropay.com","tld":"com"},"ip":{"addr":"104.18.3.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lootx.com/?r=603893","date":"2026-03-31T16:33:37.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nitropay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Feb 2026 10:45:55 GMT","end":"Sat, 23 May 2026 11:45:52 GMT"},"fingerprint":{"sha1":"46:DE:2B:EC:F8:2E:E8:B7:C4:9A:D7:D6:8A:5C:13:5F:32:BD:7C:48","sha256":"FA:4A:D5:59:D5:F5:75:CE:ED:A9:8E:38:E2:79:E1:F3:49:F1:7B:10:75:E7:6E:6E:02:4D:59:36:25:64:9B:FA"}}},"request":{"raw":"GET /ads-arcspan.8fc7578a2d00f8aa7a18.js HTTP/1.1\r\nHost: s.nitropay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 31 Mar 2026 16:33:37 GMT\r\ncontent-type: text/javascript\r\ncf-ray: 9e50c1c31b4bb1b8-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\nage: 491734\r\ncache-control: public, max-age:43200\r\nexpires: Thu, 25 Mar 2027 23:58:03 GMT\r\nlast-modified: Wed, 25 Mar 2026 23:57:14 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=2592000; includeSubDomains\r\nvary: Accept-Encoding\r\naccess-control-expose-headers: Content-Type\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-goog-generation: 1774483033939835\r\nx-goog-hash: crc32c=ANbcIA==, md5=y+Lz2NehjQkU3ES9FcDV3w==\r\nx-goog-meta-goog-reserved-file-mtime: 1774481996\r\nx-goog-metageneration: 1\r\nx-goog-storage-class: MULTI_REGIONAL\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 652\r\nx-guploader-uploadid: AMNfjG31LsLolNSc7RM0CDlVXY3KU5VcsWIeKHeDHawIISm77Fa6nCwP8MYT1P6j0NTSUdg\r\nset-cookie: __cf_bm=rSvBu9tq.dn_s9JE3A_dW.I276Ms3xdqjgVw7G6G14M-1774974817.7783554-1.0.1.1-YNu0HEfvXiHibHrFUoJEfPVd_iyovfcICi4xLGi1uCcXL_RrotTW5j_c5cLveXDAzbtMIeKudILlip_QEMdsyIPEwW7UlJKJccHaN3BRDapJtRHWXzndNAAv0uMorcPv; HttpOnly; Secure; Path=/; Domain=nitropay.com; Expires=Tue, 31 Mar 2026 17:03:37 GMT\r\netag: W/\"cbe2f3d8d7a18d0914dc44bd15c0d5df\"\r\ncontent-encoding: gzip\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":652,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (652), with no line terminators","md5":"cbe2f3d8d7a18d0914dc44bd15c0d5df","sha1":"6854a48cec3864ae05beede8804e7b64e13460f6","sha256":"6d51cc4c1338720545dc666f4df3fe1a78b2e9d97058dad6afe5c9353b60312c","sha512":"7095baa45125fc87d834eeeb173ebdf710198596ad24a472ad8114dcf019c6ea1837eed19e27aec0ef368c660978315b56870cabe516c1e8a25ce88d38865a38","ssdeep":"","tlshash":"10f0235a3689c49e11dd18e980b5d555ec0d10082685cd96a29b0cc4b83eedf7126f4c","first_seen":"2025-12-16T22:05:48.084242Z","last_seen":"2026-08-01T20:39:17.580103Z","times_seen":589,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Material+Icons|Material+Icons+Outlined|Material+Icons+Two+Tone|Material+Icons+Round|Material+Icons+Sharp","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lootx.com/?r=603893","date":"2026-03-31T16:33:35.768Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:47 GMT","end":"Mon, 01 Jun 2026 08:37:46 GMT"},"fingerprint":{"sha1":"84:E2:03:36:CA:39:FF:65:64:D9:12:E7:E2:28:88:8C:3C:A0:CA:BA","sha256":"45:AF:9C:39:77:2B:D1:D7:B8:04:BB:2C:0E:98:C5:BB:8A:E8:99:A6:C3:AF:7F:90:AA:23:EA:F2:8F:AD:8F:B1"}}},"request":{"raw":"GET /css?family=Material+Icons|Material+Icons+Outlined|Material+Icons+Two+Tone|Material+Icons+Round|Material+Icons+Sharp HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 31 Mar 2026 16:33:35 GMT\r\ndate: Tue, 31 Mar 2026 16:33:35 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3038,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"dfd906109a99a6dd44e88ea0a287a0c4","sha1":"cef5d3a1b3eb702a6acc03a8ed9985d173213b95","sha256":"6753b90a0a6e786195aaf7dec2eecf8be0f71c8b392fcd85bc03969f58f0b404","sha512":"2ad339ccdfd9feff88711f75338ab2ac885838a22f6d088d1bf5c43785c9c63554289ec14a702f45a4e8025a17c79bc4b91cdb42a46683725f6fd28f689ccf49","ssdeep":"","tlshash":"1a519969be569886a6210c96334f3f165d2d411fa80ac8fe8b861d4c8dfe5bb134670f","first_seen":"2025-09-19T17:10:41.2751Z","last_seen":"2026-08-05T03:48:16.981261Z","times_seen":1654,"resource_available":false,"data":null}},"time_used":313,"timings":{"blocked":129,"dns":0,"connect":16,"send":0,"wait":35,"receive":0,"ssl":124},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lootx.com/assets/css/dark_theme.css?v=1.1.6","fqdn":"lootx.com","domain":"lootx.com","tld":"com"},"ip":{"addr":"104.26.13.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lootx.com/?r=603893","date":"2026-03-31T16:33:35.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lootx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 04:41:27 GMT","end":"Sun, 10 May 2026 05:41:22 GMT"},"fingerprint":{"sha1":"FB:4E:30:6E:1E:4F:E3:CF:34:82:A9:4B:BE:A2:31:32:DB:E1:E6:23","sha256":"D3:75:08:81:CE:43:48:04:F4:0D:FA:91:0A:C1:82:59:D3:C7:3D:D0:4D:F3:A1:65:3A:70:D7:23:6A:F9:BE:F7"}}},"request":{"raw":"GET /assets/css/dark_theme.css?v=1.1.6 HTTP/1.1\r\nHost: lootx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://lootx.com/?r=603893\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=71bc540c1af21d9eddc7f3c9e6b4e0b3\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 31 Mar 2026 16:33:35 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Sun, 20 Jul 2025 22:13:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"687d6a20-581c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nage: 431776\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GHvd%2B%2BUVCQjJvuPRHDKgcRtxRatOJAiWEoUl%2BhT4BvCR6cDzFwz9HkkvabVGPXQd2%2Bq%2BMQ8rQ8aVm1HWZ1P34B98SQ1dXYBaF87qTa2NFJ8%2F4IkWgr0UcVKCIw%3D%3D\"}]}\r\ncf-ray: 9e50c1b678e6723c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22556,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"9c249d7b83ecff09037308c549e5137d","sha1":"2ad5a9555bba9e3c0513dca1236f0252dc75d210","sha256":"877565a208d62165d44b2f61b6c345b132f790b6db89e9abcbcbb843ed0df101","sha512":"aa152f2cb7b2fff68a5dbbf023c71324e2f827a33ff10d2bf039489e912197f7da68ca2a6bac2b8f07d32075139de17a41c3da9b663ca0fcd8b42898d3b27f1c","ssdeep":"192:OYsAl/T8ec+nTvuL/xOUsOkidOO2MwZmU1h5P2xpag9UYNFjUy9Nn51P6viN0clq:jX/TbijxEmhBPU+uIu3","tlshash":"6da27d91f2e72d66211bc958112efe911f9d328e92c84ffdb61da2b01f64286bd31f41","first_seen":"2025-12-17T14:51:52.96729Z","last_seen":"2026-03-31T16:36:13.045519Z","times_seen":3,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lootx.com/assets/js/pages/dashboard.js","fqdn":"lootx.com","domain":"lootx.com","tld":"com"},"ip":{"addr":"104.26.13.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lootx.com/?r=603893","date":"2026-03-31T16:33:35.798Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lootx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 04:41:27 GMT","end":"Sun, 10 May 2026 05:41:22 GMT"},"fingerprint":{"sha1":"FB:4E:30:6E:1E:4F:E3:CF:34:82:A9:4B:BE:A2:31:32:DB:E1:E6:23","sha256":"D3:75:08:81:CE:43:48:04:F4:0D:FA:91:0A:C1:82:59:D3:C7:3D:D0:4D:F3:A1:65:3A:70:D7:23:6A:F9:BE:F7"}}},"request":{"raw":"GET /assets/js/pages/dashboard.js HTTP/1.1\r\nHost: lootx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://lootx.com/?r=603893\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=71bc540c1af21d9eddc7f3c9e6b4e0b3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 31 Mar 2026 16:33:35 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 17 Jul 2025 09:25:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6878c190-2068\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nage: 86263\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9xTA%2F4OjXZUV2c4mYEvlWBuOAfGuLdcElUZ%2BP7bSMPLcUq0Q4fGM5mJVQLfziGH8JA3eTLmhPRkbuz73hYU5vzci%2BbAZ%2B%2BRS7TEQxK2efY4ydljJeVMGwwouMQ%3D%3D\"}]}\r\ncf-ray: 9e50c1b68921723c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8296,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"acfd7bcc329a483633580b70cbb47c9d","sha1":"ca7bf10f6a68b5f3c7a8f2a5757b6aea8e65e60f","sha256":"e2116cd024b031f3e633acd3fb7104255ce6ce4911c7b7a6680fadf1f89a16e9","sha512":"335f6c9fe4c09840723b6e6c85283356e8ef0126af2eb1b221a7b71b887d732140c67a509b53b976d6d5e66b675115c8b34214b6eb00549848e87de1617314d3","ssdeep":"192:Fy/FhFea/NY6OvBcyeg/qzuQe9XeyWrp2J:FwcZp9Oy8p6","tlshash":"f002fca8a4a24255e1aafb681b7af111556d354b6cce7e14ba3c12000fad5ec37f4f8c","first_seen":"2025-12-17T14:51:52.975462Z","last_seen":"2026-03-31T16:36:13.108377Z","times_seen":3,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.btloader.com/exd?tid=EWrf0wVvEt-0QRmrwzZR-9d44be5671\u0026sid=X3WdVRixsa-V1fDr9X6-9d44be5671\u0026cv=2.1.186\u0026upapi=true","fqdn":"api.btloader.com","domain":"btloader.com","tld":"com"},"ip":{"addr":"130.211.23.194","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://lootx.com/?r=603893","date":"2026-03-31T16:33:41.718Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.btloader.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Mar 2026 19:14:14 GMT","end":"Fri, 05 Jun 2026 20:08:47 GMT"},"fingerprint":{"sha1":"25:50:57:33:6C:C6:FC:C6:62:E6:5C:AF:AE:86:D2:4A:80:3E:2F:AF","sha256":"69:3E:EC:E2:E2:0C:F3:D5:0D:0A:C7:32:CC:E2:BA:DB:FE:F9:22:36:3E:3B:37:6F:AF:1C:16:12:E2:E2:1B:C2"}}},"request":{"raw":"POST /exd?tid=EWrf0wVvEt-0QRmrwzZR-9d44be5671\u0026sid=X3WdVRixsa-V1fDr9X6-9d44be5671\u0026cv=2.1.186\u0026upapi=true HTTP/1.1\r\nHost: api.btloader.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Length: 292\r\nOrigin: https://lootx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":292,"data":"{\"websiteID\":\"5152690249662464\",\"orgID\":\"6278260873756672\",\"pageUrl\":\"https://lootx.com/?r=603893\",\"extensionsData\":{\"signals\":{\"xAcceptableAdsHeader\":\"\"},\"trustedIframe\":{\"meta\":{\"loadStatus\":\"LOADED\",\"loadTime\":3718},\"htmlSignalAttributes\":[]}},\"sentOnUnload\":false,\"sentOnSPAChange\":false}"}},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-origin: *\r\ncache-control: no-cache, no-store, must-revalidate\r\nvary: Origin\r\ndate: Tue, 31 Mar 2026 16:33:41 GMT\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T12:03:16.307422Z","times_seen":17724130,"resource_available":true,"data":null}},"time_used":341,"timings":{"blocked":100,"dns":1,"connect":12,"send":0,"wait":137,"receive":0,"ssl":88},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lootx.com/assets/plugins/bootstrap/css/bootstrap.min.css","fqdn":"lootx.com","domain":"lootx.com","tld":"com"},"ip":{"addr":"104.26.13.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lootx.com/?r=603893","date":"2026-03-31T16:33:35.770Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lootx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 04:41:27 GMT","end":"Sun, 10 May 2026 05:41:22 GMT"},"fingerprint":{"sha1":"FB:4E:30:6E:1E:4F:E3:CF:34:82:A9:4B:BE:A2:31:32:DB:E1:E6:23","sha256":"D3:75:08:81:CE:43:48:04:F4:0D:FA:91:0A:C1:82:59:D3:C7:3D:D0:4D:F3:A1:65:3A:70:D7:23:6A:F9:BE:F7"}}},"request":{"raw":"GET /assets/plugins/bootstrap/css/bootstrap.min.css HTTP/1.1\r\nHost: lootx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://lootx.com/?r=603893\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=71bc540c1af21d9eddc7f3c9e6b4e0b3\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 31 Mar 2026 16:33:35 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 17 Jul 2025 09:25:55 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6878c1a3-2606e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nage: 431776\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZA0TQXOHpWWkYMjlQIZLJcYGSZg4R%2FCmMa6wZooXwO9RRSOafTZMlJptUpb0Xpg24tpp9PfWsTlnZixKDS8Xv4GeBEQXmN8A%2Fr%2BrbTkGMFaOUfk4tzkUAqdC0A%3D%3D\"}]}\r\ncf-ray: 9e50c1b668c3723c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":155758,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65324)","md5":"a15c2ac3234aa8f6064ef9c1f7383c37","sha1":"6e10354828454898fda80f55f3decb347fd9ed21","sha256":"60b19e5da6a9234ff9220668a5ec1125c157a268513256188ee80f2d2c8d8d36","sha512":"b435cf71a9ae66c59677a3ac285c87ea702a87f32367fe5893cf13e68f9a31fca0a8d14f6a7d692f23c5027751ce63961ca4fe8d20f35a926ff24ae3eb1d4b30","ssdeep":"1536:b/xImT+IcCQYYDnDEBi83NcuSEk/ekX/uKiq3SYiLENM6HN26F:b/Riz7G3q3SYiLENM6HN26F","tlshash":"68e386a6f5a0312de4a7c61964d0bafe156f8145d7220bfbf8273b7447892c70a63e4c","first_seen":"2023-04-05T08:00:04Z","last_seen":"2026-08-05T10:00:40.674593Z","times_seen":44219,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;700;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lootx.com/?r=603893","date":"2026-03-31T16:33:35.781Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:47 GMT","end":"Mon, 01 Jun 2026 08:37:46 GMT"},"fingerprint":{"sha1":"84:E2:03:36:CA:39:FF:65:64:D9:12:E7:E2:28:88:8C:3C:A0:CA:BA","sha256":"45:AF:9C:39:77:2B:D1:D7:B8:04:BB:2C:0E:98:C5:BB:8A:E8:99:A6:C3:AF:7F:90:AA:23:EA:F2:8F:AD:8F:B1"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;700;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 31 Mar 2026 16:33:35 GMT\r\ndate: Tue, 31 Mar 2026 16:33:35 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7581,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"5b55d0d76046c27c0cd9bdd9920f01fd","sha1":"b682256b366259440837e1a2f9b120a7536dfd0e","sha256":"0a206b235e1b9f87482a19a79ecf00868c6de851137fa77e62508ffc69e7df56","sha512":"a8619a1fc11944367378db5b0fee651c19206ab73dd16139afde499b136ba3749c529029466dfaeb7c1bab421d95fd9417259cf1e72a6fc282cf01b9d6ccf77e","ssdeep":"192:9NNIxO34OxDONEhYO3RrxGYNCbOO3Lxxgx:vXY+RQK","tlshash":"39f18a92002ba400ab971dc233cf7f3aaece10896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-12T07:08:37.181106Z","last_seen":"2026-08-04T21:13:22.358332Z","times_seen":424,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":-1,"dns":0,"connect":22,"send":0,"wait":67,"receive":0,"ssl":157},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lootx.com/assets/plugins/jquery-slimscroll/jquery.slimscroll.min.js","fqdn":"lootx.com","domain":"lootx.com","tld":"com"},"ip":{"addr":"104.26.13.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lootx.com/?r=603893","date":"2026-03-31T16:33:35.794Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lootx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 04:41:27 GMT","end":"Sun, 10 May 2026 05:41:22 GMT"},"fingerprint":{"sha1":"FB:4E:30:6E:1E:4F:E3:CF:34:82:A9:4B:BE:A2:31:32:DB:E1:E6:23","sha256":"D3:75:08:81:CE:43:48:04:F4:0D:FA:91:0A:C1:82:59:D3:C7:3D:D0:4D:F3:A1:65:3A:70:D7:23:6A:F9:BE:F7"}}},"request":{"raw":"GET /assets/plugins/jquery-slimscroll/jquery.slimscroll.min.js HTTP/1.1\r\nHost: lootx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://lootx.com/?r=603893\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=71bc540c1af21d9eddc7f3c9e6b4e0b3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 31 Mar 2026 16:33:35 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 17 Jul 2025 09:25:41 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6878c195-1280\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nage: 431775\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p45qlg5m%2FmPtI2DfDHiEHKdmya6CrdOhcFV%2FE9VJbQjY3mzhEZ804yWC5UqnL1zwk5h6uyVk5w2CWmMrjykzF8XrldWeUu%2BAiQ4HRDGWgS8MlZR3YlbDGhTJrQ%3D%3D\"}]}\r\ncf-ray: 9e50c1b6891a723c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4736,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (531)","md5":"ed14573390c14ad99b335577adadffd9","sha1":"7d18a09f62b6568189f7e20625a8137c4e403f00","sha256":"77178397a6bf306d1ed2592bfbf81b0d2e9b44fddba5cce5f5a22e56bae668f5","sha512":"8a9252437b9a3e3c3145352dd9d01fc112632e9b24e1a7db9f39252670ab25e3b934d52b2ca2f0a2bfd007583581196056842622d7698bf2a50835633d4c0528","ssdeep":"96:6uHzEtP6JwwJT69kAbEfSUrJm+6Ocs9Hy7Q8Shdj:rzYP6JwWT696tGQp","tlshash":"14a1632d372630b585efb3afe09b4f09623280529617845572acdcf41f6992d77b1e1c","first_seen":"2023-03-07T23:34:10Z","last_seen":"2026-03-31T16:36:13.049855Z","times_seen":13,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lootx.com/?r=603893","date":"2026-03-31T16:33:35.878Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:47 GMT","end":"Mon, 01 Jun 2026 08:37:46 GMT"},"fingerprint":{"sha1":"84:E2:03:36:CA:39:FF:65:64:D9:12:E7:E2:28:88:8C:3C:A0:CA:BA","sha256":"45:AF:9C:39:77:2B:D1:D7:B8:04:BB:2C:0E:98:C5:BB:8A:E8:99:A6:C3:AF:7F:90:AA:23:EA:F2:8F:AD:8F:B1"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lootx.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 31 Mar 2026 16:33:35 GMT\r\ndate: Tue, 31 Mar 2026 16:33:35 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10108,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e85517dadd43448782d60d7f207fddce","sha1":"6cd31f870727ba8090fac9602b42524b4139a619","sha256":"88fbd0b95222be288587a149c324189ecbd8de0d6f0c94f528ec53857e52b66c","sha512":"5edc78df5bb062a9a2e1ea6724c14dd7eb80d77ea0fa9572de4bb0d52bbd0d163815b08a1ae77084f99fbefbb07715da1c61f0bb36fb498710c91387792955f8","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGx:vXuM0p2+4","tlshash":"04227792002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-10T18:13:11.065101Z","last_seen":"2026-08-05T10:52:39.641429Z","times_seen":39335,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.confiant-integrations.net/gptprebidnative/202601281034/wrap.js","fqdn":"cdn.confiant-integrations.net","domain":"confiant-integrations.net","tld":"net"},"ip":{"addr":"104.18.43.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lootx.com/?r=603893","date":"2026-03-31T16:33:37.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"confiant-integrations.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Feb 2026 05:45:03 GMT","end":"Sat, 23 May 2026 06:44:55 GMT"},"fingerprint":{"sha1":"7E:3A:B2:37:88:29:7A:94:3D:F5:99:E3:F6:66:08:E4:62:0D:E1:97","sha256":"E5:CC:34:3A:73:6F:EC:10:FB:3B:85:E9:15:50:9F:C7:86:4A:12:F8:1E:B4:EE:AB:C7:21:33:7E:EF:A0:2E:68"}}},"request":{"raw":"GET /gptprebidnative/202601281034/wrap.js HTTP/1.1\r\nHost: cdn.confiant-integrations.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 31 Mar 2026 16:33:37 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 145217\r\nx-amz-id-2: SmFkyO5vaQ8kxYtg17gGx4bYACkbIQOiYEtjGt58CK75ZsjcENqckYyxNxuE6KOXdCwMqmQGwmOFvDvRwrA5i/MQ/fsE/8pFadbltlm2C9U=\r\nx-amz-request-id: DWJ84ET1KVHH6E5Z\r\nlast-modified: Wed, 28 Jan 2026 15:37:09 GMT\r\netag: \"e19c971ac3f78801b5317f4b95fc99da\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nvary: accept-encoding\r\nage: 1073062\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\ncf-ray: 9e50c1c36fb05685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":412568,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10568)","md5":"4d12dc92a4f1d5f6677edc2b071a709f","sha1":"8be298b04db8df5c0a4ee5e8fbef7e960a9d6ee1","sha256":"d862bc766fa3045902025df0000d58458744779bc4b4c60cae39f024ad88b83f","sha512":"c3b2f436cd0d70dacc5dff4f4750561d6a42bf58fbbe61dc3361c3a61326df57499a24c80363a7fc1c90106a97850cef40c6ce0f3630c81b61568fca2fdb6a74","ssdeep":"6144:5pTRmvj4sObuGa/VtB3JTmrEdwb6fqjqrvZ7sgNyduidvbmlwoKDob2nt:HRDb+B5dwb6fqYZ7jy4QvbpomoUt","tlshash":"2994e8516bd0bc592bd36b7bba1b70d1f49b089628940c0fd212fca479ec61beac15f4","first_seen":"2026-01-29T18:23:04.464093Z","last_seen":"2026-06-05T05:22:18.891719Z","times_seen":581,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":7,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ab.dns-finder.com/meta/dns","fqdn":"ab.dns-finder.com","domain":"dns-finder.com","tld":"com"},"ip":{"addr":"34.36.200.111","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://lootx.com/?r=603893","date":"2026-03-31T16:33:37.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ab.dns-finder.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 01:19:17 GMT","end":"Thu, 07 May 2026 02:14:08 GMT"},"fingerprint":{"sha1":"CA:3E:FC:BD:D0:F5:27:B0:A7:61:0F:A3:60:23:91:19:25:F1:52:7A","sha256":"DA:67:0A:73:1D:C0:7D:41:F9:D5:4F:00:84:A1:5E:7B:55:FC:AB:39:8D:36:D3:12:AB:4D:FE:48:1F:77:99:AE"}}},"request":{"raw":"GET /meta/dns HTTP/1.1\r\nHost: ab.dns-finder.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://lootx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Resolver\r\ncache-control: private, max-age=180, stale-if-error=180, stale-while-revalidate=180\r\nvary: Origin\r\ndate: Tue, 31 Mar 2026 16:33:38 GMT\r\ncontent-length: 2\r\ncontent-type: text/plain; charset=utf-8\r\nvia: 1.1 google\r\nx-resolver: default\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-08-05T11:58:59.713012Z","times_seen":445375,"resource_available":true,"data":null}},"time_used":291,"timings":{"blocked":76,"dns":5,"connect":13,"send":0,"wait":138,"receive":0,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/a?v=3\u0026t=l\u0026pid=1370704424\u0026rv=63u0\u0026tag_exp=0~115938465~115938469~116991817~117384406~117484252~118128922\u0026u=AAAAAIAAAAAAAIAAAAAAAAEY\u0026ut=Ag\u0026h=Ag\u0026gtm=45je63u0v9110590563za20g\u0026cl=3.1.0\u0026ccid=110590563\u0026cid=G-EET80J08NY\u0026l=L862.S43.B29.E4892.I964.TC10.HTC0.F899.C3~gtm.init_consent.S1.V1.E49~gtm.init.S2.V2.E50.TS5ogtgasend.TI10.TE1.TS5ogtreferralexclusion.TI12.TE1.TS5ogtsessiontimeout.TI13.TE1.TS5ogt1pdatav2.TI14.TE1.TS5ccdgafirst.TI19.TE1.TS5ccdgaregscope.TI17.TE3.TS5setproductsettings.TI18.TE39.TS5ccdconversionmarking.TI16.TE37.TS5ccdgalast.TI15.TE37~gtm.js.E37.TS5gct.TI7.TE2~gtm.dom.S1.V1.E22~gtm.load.S2.V1.E12~GA595","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lootx.com/?r=603893","date":"2026-03-31T16:33:41.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:36:15 GMT","end":"Mon, 01 Jun 2026 08:36:14 GMT"},"fingerprint":{"sha1":"58:CB:88:A1:C4:55:4E:E5:46:DC:A0:9C:B3:54:25:79:20:1E:E8:09","sha256":"0B:B5:96:A2:57:57:EC:BA:63:14:8A:AF:4C:C2:32:63:18:8B:75:80:8F:78:1D:1F:5B:00:B7:B3:7E:C9:B7:18"}}},"request":{"raw":"GET /a?v=3\u0026t=l\u0026pid=1370704424\u0026rv=63u0\u0026tag_exp=0~115938465~115938469~116991817~117384406~117484252~118128922\u0026u=AAAAAIAAAAAAAIAAAAAAAAEY\u0026ut=Ag\u0026h=Ag\u0026gtm=45je63u0v9110590563za20g\u0026cl=3.1.0\u0026ccid=110590563\u0026cid=G-EET80J08NY\u0026l=L862.S43.B29.E4892.I964.TC10.HTC0.F899.C3~gtm.init_consent.S1.V1.E49~gtm.init.S2.V2.E50.TS5ogtgasend.TI10.TE1.TS5ogtreferralexclusion.TI12.TE1.TS5ogtsessiontimeout.TI13.TE1.TS5ogt1pdatav2.TI14.TE1.TS5ccdgafirst.TI19.TE1.TS5ccdgaregscope.TI17.TE3.TS5setproductsettings.TI18.TE39.TS5ccdconversionmarking.TI16.TE37.TS5ccdgalast.TI15.TE37~gtm.js.E37.TS5gct.TI7.TE2~gtm.dom.S1.V1.E22~gtm.load.S2.V1.E12~GA595 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 31 Mar 2026 16:33:41 GMT\r\ncontent-type: text/html\r\nserver: Google Tag Manager\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T12:03:16.307422Z","times_seen":17724130,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lootx.com/assets/lootx-landing-hero.webp","fqdn":"lootx.com","domain":"lootx.com","tld":"com"},"ip":{"addr":"104.26.13.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lootx.com/?r=603893","date":"2026-03-31T16:33:35.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lootx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 04:41:27 GMT","end":"Sun, 10 May 2026 05:41:22 GMT"},"fingerprint":{"sha1":"FB:4E:30:6E:1E:4F:E3:CF:34:82:A9:4B:BE:A2:31:32:DB:E1:E6:23","sha256":"D3:75:08:81:CE:43:48:04:F4:0D:FA:91:0A:C1:82:59:D3:C7:3D:D0:4D:F3:A1:65:3A:70:D7:23:6A:F9:BE:F7"}}},"request":{"raw":"GET /assets/lootx-landing-hero.webp HTTP/1.1\r\nHost: lootx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://lootx.com/?r=603893\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=71bc540c1af21d9eddc7f3c9e6b4e0b3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 31 Mar 2026 16:33:35 GMT\r\ncontent-type: image/webp\r\ncontent-length: 123504\r\nserver: cloudflare\r\nlast-modified: Sun, 20 Jul 2025 01:10:36 GMT\r\nvary: Accept-Encoding\r\netag: \"687c420c-1e270\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 86263\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xV97otbc20O3VRWorhVbsgt2%2FFQmcvbFJ8M6DuCeQQ9LShTO3Ml51UYITAJn145wVz8kKaWM5pI4KrA9LudkNYCLzYY8jecOo9QT6Rt6ImZOcSM9sqsASYvDGA%3D%3D\"}]}\r\ncf-ray: 9e50c1b67909723c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":123504,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ffe72ee679b8665ac78ecab67de52c9d","sha1":"fbb972dabad4936adf17fe7eda3e0e4fee833ca8","sha256":"501994e2e4d296a282e05df433957c86087615e82b20bae9679c6c76338c25ab","sha512":"9b794bbab986e5d69b0fcbceb3a06567ae1c4cc65c284ec81a865a19e4807f8f96320129e755fa55e7a2371b73b813f7c8ee15063b823ad7a599f954cb6943d7","ssdeep":"1536:n17o7RbPgLW+XeuZThGp+BPqJPTXSt03YqvElbWCZfTYMnnV+Ux0b9g2u2yHMdoK:FUPgZlGMFoYqsWCFnCXu2KFvYaQF1","tlshash":"2ac312da478807f8db5167f68075b6250ede128853bb1bd0dea69e46ff868c5030dbc4","first_seen":"2025-12-17T14:51:53.009763Z","last_seen":"2026-03-31T16:36:13.101938Z","times_seen":3,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ka-f.fontawesome.com/releases/v6.7.2/css/free-v4-font-face.min.css?token=1b97f88d48","fqdn":"ka-f.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"172.67.139.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://lootx.com/?r=603893","date":"2026-03-31T16:33:36.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ka-f.fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 00:37:45 GMT","end":"Thu, 14 May 2026 01:37:41 GMT"},"fingerprint":{"sha1":"04:59:0D:80:7A:49:BB:1E:B1:8D:3E:19:59:3F:30:52:81:A8:E8:64","sha256":"C3:87:91:E9:A0:66:F9:A2:38:71:52:C8:EE:5B:C5:BD:54:B5:5D:64:77:06:DF:1E:6D:DA:DF:25:B8:D4:F8:C2"}}},"request":{"raw":"GET /releases/v6.7.2/css/free-v4-font-face.min.css?token=1b97f88d48 HTTP/1.1\r\nHost: ka-f.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://lootx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 31 Mar 2026 16:33:36 GMT\r\ncontent-type: text/css\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nlast-modified: Mon, 16 Dec 2024 16:06:36 GMT\r\netag: W/\"3e20aa01a74cb21290faa04e29684ce4\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=31556926\r\nserver: cloudflare\r\naccess-control-allow-headers: fa-kit-token\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 8e70b5396a94f70fe0478eaebad6b4d2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS56-P1\r\nx-amz-cf-id: 2wfeYk4UNnRsGINCqLHCXB-i5yv9WB0u8Vn_8zj69Hg5r25s-t-qrA==\r\nage: 431776\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=41B3TSMitkqLBEsFz4TuUdB8bCxFyOZiVJo2IxnUkvinac9TF81za9N9ZppFbLpfW6NtqQzoU%2BMfz%2Fb1SFf4OgkhF3jCMf%2Fjf7wHFzcZvM0tJZbLBEOymy2P8AEKbIQy%2FNS9y9SI9g%3D%3D\"}]}\r\ncf-ray: 9e50c1ba2e2c2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1775,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1560)","md5":"3e20aa01a74cb21290faa04e29684ce4","sha1":"9279c7200c52d95369427e5a9dd013a327e4c8b3","sha256":"e855bc2e1c23e76ebb884cb182a037c64af2cacc49eac782dd43fa0454ee1f27","sha512":"22dbdda00c128ae18ee4f2c09d6d2316bfacc58fea0749207905cdcad0fe1c3725754200d9182916d3e08e2a333c15de9d8f143fcdc482ead539fef21ccbb147","ssdeep":"","tlshash":"2231f02846d401b0b0313f193ac77125eeae74669bb95e63d62b88140dfec55f3d5f48","first_seen":"2025-04-07T02:17:37.738288Z","last_seen":"2026-08-05T07:10:01.261238Z","times_seen":6850,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":123,"dns":54,"connect":6,"send":0,"wait":10,"receive":0,"ssl":62},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.nitropay.com/1.gif?x=1\u0026adslot=","fqdn":"s.nitropay.com","domain":"nitropay.com","tld":"com"},"ip":{"addr":"104.18.3.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lootx.com/?r=603893","date":"2026-03-31T16:33:36.923Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nitropay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Feb 2026 10:45:55 GMT","end":"Sat, 23 May 2026 11:45:52 GMT"},"fingerprint":{"sha1":"46:DE:2B:EC:F8:2E:E8:B7:C4:9A:D7:D6:8A:5C:13:5F:32:BD:7C:48","sha256":"FA:4A:D5:59:D5:F5:75:CE:ED:A9:8E:38:E2:79:E1:F3:49:F1:7B:10:75:E7:6E:6E:02:4D:59:36:25:64:9B:FA"}}},"request":{"raw":"GET /1.gif?x=1\u0026adslot= HTTP/1.1\r\nHost: s.nitropay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 31 Mar 2026 16:33:36 GMT\r\ncontent-type: image/gif\r\ncontent-length: 42\r\nx-guploader-uploadid: AMNfjG3-tbkXefhuWndFIV7VE9LjZpXflPjrahp-6OQ7rjiDfJr5UM-K7botAVQaDP-ZN3SGm7vFQp0\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Apr 2026 23:58:03 GMT\r\nlast-modified: Fri, 22 Jan 2021 08:58:45 GMT\r\netag: \"d89746888da2d9510b64a9f031eaecd5\"\r\nx-goog-generation: 1611305925409947\r\nx-goog-metageneration: 3\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 42\r\nx-goog-meta-: \r\nx-goog-custom-time: 1970-01-01T00:00:00Z\r\nx-goog-hash: crc32c=ljrbyA==, md5=2JdGiI2i2VELZKnwMers1Q==\r\nx-goog-storage-class: MULTI_REGIONAL\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Type\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nage: 491733\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000; includeSubDomains\r\nset-cookie: __cf_bm=rbk.pf2Mp35D5hWXu4mQRF3rpbYHmzRcTeoi4NQhky8-1774974816.9210591-1.0.1.1-2vnjKQmahfMrZMzzYFeEyoQZ7WIrw5cPKBHH8XqyiqXzSoFORMTJy.fzRjfFgY4YOmP7M8qN9C17gtFrf_B_gHHtb_yPSC7zQ.KHbuGmIvcE5zYOQ.fvFEWhYm6cgw8V; HttpOnly; Secure; Path=/; Domain=nitropay.com; Expires=Tue, 31 Mar 2026 17:03:36 GMT\r\ncf-ray: 9e50c1bdcac2b1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-08-05T11:58:11.680506Z","times_seen":1020925,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad-delivery.net/px.gif?ch=2\u0026e=0.9876694066166309","fqdn":"ad-delivery.net","domain":"ad-delivery.net","tld":"net"},"ip":{"addr":"172.66.148.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://lootx.com/?r=603893","date":"2026-03-31T16:33:42.653Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ad-delivery.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Feb 2026 23:01:03 GMT","end":"Wed, 27 May 2026 00:00:46 GMT"},"fingerprint":{"sha1":"F1:55:14:26:AC:03:34:3A:69:CF:36:47:37:82:FD:10:32:4B:30:E5","sha256":"89:C8:2C:BC:DF:9A:57:EC:C4:33:DB:D8:2F:1B:99:EF:06:DC:1D:82:D7:44:B6:8E:44:8D:7E:36:43:2F:F9:3B"}}},"request":{"raw":"GET /px.gif?ch=2\u0026e=0.9876694066166309 HTTP/1.1\r\nHost: ad-delivery.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 31 Mar 2026 16:33:42 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nx-guploader-uploadid: ABgVH8-dIwnXuxz_AvoFtZgdE5tOR27RwF_-NyTqfsJ3BdAeGjCQBEH-zlJ2d7IRMDk5df9x\r\nx-goog-generation: 1620242732037093\r\nx-goog-metageneration: 5\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 43\r\nx-goog-hash: crc32c=cpEfJQ==, md5=rUsPYG4PhGW8TEwXCzfhow==\r\nx-goog-storage-class: MULTI_REGIONAL\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: cloudflare\r\nexpires: Wed, 11 Mar 2026 03:15:54 GMT\r\ncache-control: public, max-age=86400\r\nage: 1778844\r\nlast-modified: Wed, 05 May 2021 19:25:32 GMT\r\netag: \"ad4b0f606e0f8465bc4c4c170b37e1a3\"\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"gfe-default_product_name\"\r\nreport-to: {\"group\":\"gfe-default_product_name\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/default_product_name\"}]}\r\ncf-cache-status: HIT\r\ncf-ray: 9e50c1e188994e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-08-05T11:59:40.855667Z","times_seen":376088,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.btloader.com/country?o=6278260873756672","fqdn":"api.btloader.com","domain":"btloader.com","tld":"com"},"ip":{"addr":"130.211.23.194","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://lootx.com/?r=603893","date":"2026-03-31T16:33:44.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.btloader.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Mar 2026 19:14:14 GMT","end":"Fri, 05 Jun 2026 20:08:47 GMT"},"fingerprint":{"sha1":"25:50:57:33:6C:C6:FC:C6:62:E6:5C:AF:AE:86:D2:4A:80:3E:2F:AF","sha256":"69:3E:EC:E2:E2:0C:F3:D5:0D:0A:C7:32:CC:E2:BA:DB:FE:F9:22:36:3E:3B:37:6F:AF:1C:16:12:E2:E2:1B:C2"}}},"request":{"raw":"GET /country?o=6278260873756672 HTTP/1.1\r\nHost: api.btloader.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://lootx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncache-control: private, max-age=300, stale-while-revalidate=600, stale-if-error=600\r\ncontent-type: application/json\r\nvary: Origin\r\ndate: Tue, 31 Mar 2026 16:33:44 GMT\r\ncontent-length: 37\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":37,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"bdfe458835550c34f45fc9fdfeebb12a","sha1":"0f08aa02e7bcbf4c5e991a5defb2fdbd03a86f3d","sha256":"ad26ec64cc613fbfbd47faaf39f9921c2b19769bde1d3c5c2857a671e7863cf9","sha512":"b35ead78688d8dc972f767a1f990afc5c4c3f5e5a6fd61ab09b256afb6c261b54841a77fba54a69804fde2aff36116c054fbf4cd41f17dc7f3d5e6031ce180b5","ssdeep":"","tlshash":"3e80040510305d4c4c51414411033101004cd531f105d015d4c73514d3430c44430040","first_seen":"2024-04-13T09:55:46Z","last_seen":"2026-06-30T02:24:54.205431Z","times_seen":20825,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ka-f.fontawesome.com/releases/v6.7.2/css/free-v4-shims.min.css?token=1b97f88d48","fqdn":"ka-f.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"172.67.139.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://lootx.com/?r=603893","date":"2026-03-31T16:33:36.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ka-f.fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 00:37:45 GMT","end":"Thu, 14 May 2026 01:37:41 GMT"},"fingerprint":{"sha1":"04:59:0D:80:7A:49:BB:1E:B1:8D:3E:19:59:3F:30:52:81:A8:E8:64","sha256":"C3:87:91:E9:A0:66:F9:A2:38:71:52:C8:EE:5B:C5:BD:54:B5:5D:64:77:06:DF:1E:6D:DA:DF:25:B8:D4:F8:C2"}}},"request":{"raw":"GET /releases/v6.7.2/css/free-v4-shims.min.css?token=1b97f88d48 HTTP/1.1\r\nHost: ka-f.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://lootx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 31 Mar 2026 16:33:36 GMT\r\ncontent-type: text/css\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nlast-modified: Mon, 16 Dec 2024 16:06:36 GMT\r\netag: W/\"43c494a755b81101cd0097c73bf4bd42\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=31556926\r\nserver: cloudflare\r\naccess-control-allow-headers: fa-kit-token\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 e6220bd7bee9300eb5b87a282645e6ec.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: PhHkathAX7fluwhgv6ekT6fkLfbNtZVRK4FRL6lp9OYpNz4YnWr5Dw==\r\nage: 431776\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oMoQxPvVx30l6QKWv5X6Ya0gUVNpSyMLjI2punIQfHT%2Fhv9X4exSHbPA8%2BzVcTBBIxjX%2FMFT0Dvi%2Fb9GsKUqDqlZiIofsK8qSI%2Be2dv7QExXIH0ZqOu0poEqnO3fKEM7o09pkSs8gA%3D%3D\"}]}\r\ncf-ray: 9e50c1ba2e172efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21210,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (20995)","md5":"43c494a755b81101cd0097c73bf4bd42","sha1":"f4102ef32474a0629d2989a777ee5e738af6a6ec","sha256":"c723bc4b9c56380b5ccc209f6c288c26028e2ecad0d27795f665fb01a9f4e9ac","sha512":"7839dd420acce148a9ca85b74bdf7995ce7640eeb0cfacc26eb83e78154b0a59e7ea0ddfe63ebb6becec3b2821b53696a1120c3edcf720d2fe870697bd61418a","ssdeep":"384:/Wl6sTnnbF+PJeQlGngUHPAHyw5+E9mu1t:/O60OJigUHPAHyCtb","tlshash":"199258051b2d90a3b2dc3c6bb4417ee42776278919d64c51e3273c84bee789b31eeb61","first_seen":"2024-12-18T04:50:29.505919Z","last_seen":"2026-08-05T07:10:01.245271Z","times_seen":7288,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":126,"dns":54,"connect":5,"send":0,"wait":7,"receive":0,"ssl":65},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"consent.nitrocnct.com/additional-consent-providers.csv","fqdn":"consent.nitrocnct.com","domain":"nitrocnct.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lootx.com/?r=603893","date":"2026-03-31T16:33:37.883Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nitrocnct.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 31 Mar 2026 01:28:17 GMT","end":"Mon, 29 Jun 2026 02:26:01 GMT"},"fingerprint":{"sha1":"77:26:17:1B:A0:47:5F:B1:27:3D:42:98:89:F7:FA:9E:33:36:0D:9E","sha256":"DC:9B:B9:12:C8:08:50:86:6B:F2:E7:26:99:AA:05:0D:A1:6B:18:F6:77:72:A9:B8:B3:B6:5A:15:83:31:B5:E5"}}},"request":{"raw":"GET /additional-consent-providers.csv HTTP/1.1\r\nHost: consent.nitrocnct.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://lootx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 31 Mar 2026 16:33:38 GMT\r\ncontent-type: text/csv\r\ncontent-length: 109172\r\nx-guploader-uploadid: AMNfjG2O_TuDE3nnQhX09tyB2OpV6VvZaGbiXRl435pnEtY0dWFz-bHCS7QmWPWZ5by7gBVo\r\nx-goog-generation: 1740499050366347\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 109172\r\nx-goog-hash: crc32c=46FWvA==, md5=C5ebpuopeCk4sUi4/a0dgg==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Length, Content-Type, Date, Origin, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: cloudflare\r\nexpires: Tue, 31 Mar 2026 17:06:00 GMT\r\ncache-control: public, max-age=3600\r\nage: 1816\r\nlast-modified: Tue, 25 Feb 2025 15:57:30 GMT\r\netag: \"0b979ba6ea29782938b148b8fdad1d82\"\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IYGCM2kOfKlm5%2FhZJwMAxq97SOQTHtZWa2heZ8rNeCCLjg22LjkmHtxAJZ37OkaCtMX03rYijebhQzeurPMxv1d9PtrzO9WyNXCaXpJW%2FzQz%2BZhwq74cOPpM5SZj4%2FkHqMtu8eh9Jh8%3D\"}]}\r\ncf-ray: 9e50c1c41a4e0daa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":109172,"size_decoded":0,"mime_type":"text/csv","magic":"CSV Unicode text, UTF-8 text","md5":"0b979ba6ea29782938b148b8fdad1d82","sha1":"7bca27fc650b8d19ca89858e78db11884b0440b5","sha256":"e476ab4a8be9030adc26a696199faae8701289ba6c25a9c9465bfda00987f705","sha512":"9f02e60655b048eda854b22db620d1c8e7ebbd1e4e25eb44c0ee96ee12e7defd999b23b21f6799692db0b95f1991d038f43e8c19c4dd60664df488fd73694f1b","ssdeep":"1536:Ofu2YtuSGzMTaUWcvRfWnosn7gDP8aOXHMCPaLtj1kfTSXopyPn7o42ad:YYrGzFcgnRn7gDDOXHMCPaLtjqLSXrB","tlshash":"e5b3a67f8441d22c4b7441ccba7fa34cb5ca116fa9e9cefbcf94841656827da30586e8","first_seen":"2025-03-01T19:40:51.861483Z","last_seen":"2026-08-01T20:39:17.572834Z","times_seen":2879,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":55,"dns":25,"connect":3,"send":0,"wait":77,"receive":4,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad-delivery.net/px.gif?ch=2\u0026e=0.8157870570929114","fqdn":"ad-delivery.net","domain":"ad-delivery.net","tld":"net"},"ip":{"addr":"172.66.148.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://lootx.com/?r=603893","date":"2026-03-31T16:33:41.733Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ad-delivery.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Feb 2026 23:01:03 GMT","end":"Wed, 27 May 2026 00:00:46 GMT"},"fingerprint":{"sha1":"F1:55:14:26:AC:03:34:3A:69:CF:36:47:37:82:FD:10:32:4B:30:E5","sha256":"89:C8:2C:BC:DF:9A:57:EC:C4:33:DB:D8:2F:1B:99:EF:06:DC:1D:82:D7:44:B6:8E:44:8D:7E:36:43:2F:F9:3B"}}},"request":{"raw":"GET /px.gif?ch=2\u0026e=0.8157870570929114 HTTP/1.1\r\nHost: ad-delivery.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 31 Mar 2026 16:33:41 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nx-guploader-uploadid: ABgVH8-dIwnXuxz_AvoFtZgdE5tOR27RwF_-NyTqfsJ3BdAeGjCQBEH-zlJ2d7IRMDk5df9x\r\nx-goog-generation: 1620242732037093\r\nx-goog-metageneration: 5\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 43\r\nx-goog-hash: crc32c=cpEfJQ==, md5=rUsPYG4PhGW8TEwXCzfhow==\r\nx-goog-storage-class: MULTI_REGIONAL\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: cloudflare\r\nexpires: Wed, 11 Mar 2026 03:15:54 GMT\r\ncache-control: public, max-age=86400\r\nage: 1778843\r\nlast-modified: Wed, 05 May 2021 19:25:32 GMT\r\netag: \"ad4b0f606e0f8465bc4c4c170b37e1a3\"\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"gfe-default_product_name\"\r\nreport-to: {\"group\":\"gfe-default_product_name\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/default_product_name\"}]}\r\ncf-cache-status: HIT\r\ncf-ray: 9e50c1dbceff4e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-08-05T11:59:40.855667Z","times_seen":376088,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad-delivery.net/px.gif?ch=2\u0026e=0.6793945041395454","fqdn":"ad-delivery.net","domain":"ad-delivery.net","tld":"net"},"ip":{"addr":"172.66.148.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://lootx.com/?r=603893","date":"2026-03-31T16:33:43.069Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ad-delivery.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Feb 2026 23:01:03 GMT","end":"Wed, 27 May 2026 00:00:46 GMT"},"fingerprint":{"sha1":"F1:55:14:26:AC:03:34:3A:69:CF:36:47:37:82:FD:10:32:4B:30:E5","sha256":"89:C8:2C:BC:DF:9A:57:EC:C4:33:DB:D8:2F:1B:99:EF:06:DC:1D:82:D7:44:B6:8E:44:8D:7E:36:43:2F:F9:3B"}}},"request":{"raw":"GET /px.gif?ch=2\u0026e=0.6793945041395454 HTTP/1.1\r\nHost: ad-delivery.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 31 Mar 2026 16:33:43 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nx-guploader-uploadid: ABgVH8-dIwnXuxz_AvoFtZgdE5tOR27RwF_-NyTqfsJ3BdAeGjCQBEH-zlJ2d7IRMDk5df9x\r\nx-goog-generation: 1620242732037093\r\nx-goog-metageneration: 5\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 43\r\nx-goog-hash: crc32c=cpEfJQ==, md5=rUsPYG4PhGW8TEwXCzfhow==\r\nx-goog-storage-class: MULTI_REGIONAL\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: cloudflare\r\nexpires: Wed, 11 Mar 2026 03:15:54 GMT\r\ncache-control: public, max-age=86400\r\nage: 1778844\r\nlast-modified: Wed, 05 May 2021 19:25:32 GMT\r\netag: \"ad4b0f606e0f8465bc4c4c170b37e1a3\"\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"gfe-default_product_name\"\r\nreport-to: {\"group\":\"gfe-default_product_name\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/default_product_name\"}]}\r\ncf-cache-status: HIT\r\ncf-ray: 9e50c1e42fc74e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-08-05T11:59:40.855667Z","times_seen":376088,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad-delivery.net/px.gif?ch=2\u0026e=0.33644122714431723","fqdn":"ad-delivery.net","domain":"ad-delivery.net","tld":"net"},"ip":{"addr":"172.66.148.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://lootx.com/?r=603893","date":"2026-03-31T16:33:44.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ad-delivery.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Feb 2026 23:01:03 GMT","end":"Wed, 27 May 2026 00:00:46 GMT"},"fingerprint":{"sha1":"F1:55:14:26:AC:03:34:3A:69:CF:36:47:37:82:FD:10:32:4B:30:E5","sha256":"89:C8:2C:BC:DF:9A:57:EC:C4:33:DB:D8:2F:1B:99:EF:06:DC:1D:82:D7:44:B6:8E:44:8D:7E:36:43:2F:F9:3B"}}},"request":{"raw":"GET /px.gif?ch=2\u0026e=0.33644122714431723 HTTP/1.1\r\nHost: ad-delivery.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 31 Mar 2026 16:33:44 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nx-guploader-uploadid: ABgVH8-dIwnXuxz_AvoFtZgdE5tOR27RwF_-NyTqfsJ3BdAeGjCQBEH-zlJ2d7IRMDk5df9x\r\nx-goog-generation: 1620242732037093\r\nx-goog-metageneration: 5\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 43\r\nx-goog-hash: crc32c=cpEfJQ==, md5=rUsPYG4PhGW8TEwXCzfhow==\r\nx-goog-storage-class: MULTI_REGIONAL\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: cloudflare\r\nexpires: Wed, 11 Mar 2026 03:15:54 GMT\r\ncache-control: public, max-age=86400\r\nage: 1778845\r\nlast-modified: Wed, 05 May 2021 19:25:32 GMT\r\netag: \"ad4b0f606e0f8465bc4c4c170b37e1a3\"\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"gfe-default_product_name\"\r\nreport-to: {\"group\":\"gfe-default_product_name\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/default_product_name\"}]}\r\ncf-cache-status: HIT\r\ncf-ray: 9e50c1ebee7e4e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-08-05T11:59:40.855667Z","times_seen":376088,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}