{"report_id":"cab3c668-f583-45f3-907f-2add869fa555","version":6,"status":"done","tags":[],"date":"2025-12-21T14:32:17Z","url":{"schema":"http","addr":"gadgetsweb.xyz/?id=eUdIWlY5N2o2cGVQa3JENXJRcmU3QnJLUHRNSzJwQ2tsUHN5eE1NY0RMdDNqYTdmcG9lTjNCNGkxa0EwY09zeTREODJ3OEpzTkwreURGTUR1RkI0WmwyZTNUVjd5eCtkdVg1amhLS2dPbHJqVU9lR1lNU0JmUHI4a1E4dmJoalZUUXc2dTArZWpYSUZqT2IwL1FPRHRhU1kyQ1F0MHlSZ0FFbDZUZGRBampzMHlNOW10eHRTVDJLZGlyTVVyaTdmQVpRQkdOSHg0eWJ4UG9YdkVsbFFjQT09","fqdn":"gadgetsweb.xyz","domain":"gadgetsweb.xyz","tld":"xyz"},"ip":{"addr":"104.21.1.124","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"gadgetsweb.xyz/homelander/","fqdn":"gadgetsweb.xyz","domain":"gadgetsweb.xyz","tld":"xyz"},"title":"Mediator Page.. | Please Wait.. | Gadgetsweb","dom":{"size":51097,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (19802)","md5":"8f6d920a35615d4cb79fd037fb7eee5e","sha1":"eb4753380a22537cb34a4b049b900afc5469520f","sha256":"2ad9f8b73d2a637b24ec0e8ee554fad76b741823e138410199898fa3ad8ab831","sha512":"96d1bfd73106924be42d3449c05ecc752ac2cbca78baf42bfed7ad2acdee73dd6d25a0d1337d48e04178068103c18cfbd8282b87e0c0e1868e04e93b3d3df380","ssdeep":"768:3S/s34kqqNQooaEyD8CHuyqbw5j692gUhTvDeFXYcq6OueGydKIzodFduHHUXYWg:tFqEQorEyACOyqbw5j6926q6A","tlshash":"71331b322fe42438b317c6b6f396b188f614940bd60789aaf11cb974dfd658596332bc","dom_hash":"domhashe1973f9de0b407ef4439e5e5d070d2e7","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"gadgetsweb.xyz/?id=eUdIWlY5N2o2cGVQa3JENXJRcmU3QnJLUHRNSzJwQ2tsUHN5eE1NY0RMdDNqYTdmcG9lTjNCNGkxa0EwY09zeTREODJ3OEpzTkwreURGTUR1RkI0WmwyZTNUVjd5eCtkdVg1amhLS2dPbHJqVU9lR1lNU0JmUHI4a1E4dmJoalZUUXc2dTArZWpYSUZqT2IwL1FPRHRhU1kyQ1F0MHlSZ0FFbDZUZGRBampzMHlNOW10eHRTVDJLZGlyTVVyaTdmQVpRQkdOSHg0eWJ4UG9YdkVsbFFjQT09","fqdn":"gadgetsweb.xyz","domain":"gadgetsweb.xyz","tld":"xyz"},"ip":{"addr":"104.21.1.124","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-25T14:32:17Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"d9r4lqt28t1fm.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"ukankingwithea.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"ukankingwithea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"ukankingwithea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"ukankingwithea.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"d9r4lqt28t1fm.cloudfront.net","ip":{"addr":"54.192.209.219","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2025-01-13T18:30:16.259771Z","last_seen":"2025-12-04T07:14:58.557916Z","alert_count":2,"request_count":2,"received_data":191878,"sent_data":1136,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"accounts.google.com","ip":{"addr":"142.250.150.84","port":443,"asn":15169,"as":"GOOGLE","country":"Finland","country_code":"FI"},"domain_registered":"1997-09-15","domain_rank":103,"first_seen":"2012-05-23T06:57:57Z","last_seen":"2025-12-15T00:11:33.757655Z","alert_count":0,"request_count":6,"received_data":13862,"sent_data":3772,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}]},{"fqdn":"gadgetsweb.xyz","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-08-04","domain_rank":0,"first_seen":"2025-11-12T01:51:06.84723Z","last_seen":"2025-11-12T01:51:06.84723Z","alert_count":0,"request_count":4,"received_data":104028,"sent_data":2291,"comment":"","tags":null,"fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]},{"name":"scrollreveal","description":"","website":"https://scrollrevealjs.org","common_platform_enumeration":"","icon":"scrollreveal.svg","categories":["JavaScript libraries"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"WordPress:6.9","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-12-14T22:17:06.291076Z","alert_count":0,"request_count":2,"received_data":35933,"sent_data":1029,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-12-14T22:13:59.416786Z","alert_count":0,"request_count":1,"received_data":63294,"sent_data":541,"comment":"","tags":null,"fingerprints":null},{"fqdn":"torealiukzemydr.org","ip":{"addr":"172.67.130.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-10-06","domain_rank":0,"first_seen":"2025-12-21T08:49:45.283212Z","last_seen":"2025-12-21T08:49:45.283212Z","alert_count":0,"request_count":1,"received_data":523,"sent_data":578,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.cdnfonts.com","ip":{"addr":"172.67.184.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-10-03","domain_rank":50661,"first_seen":"2020-06-10T09:02:17Z","last_seen":"2025-12-15T22:44:54.220929Z","alert_count":0,"request_count":2,"received_data":78534,"sent_data":948,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-12-14T22:17:32.87103Z","alert_count":0,"request_count":1,"received_data":384761,"sent_data":435,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"sads.adsboosters.xyz","ip":{"addr":"104.26.11.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-08-26","domain_rank":0,"first_seen":"2025-11-06T06:06:53.207047Z","last_seen":"2025-12-15T09:10:25.678252Z","alert_count":0,"request_count":1,"received_data":116092,"sent_data":443,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"ukankingwithea.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-01-01","domain_rank":32650,"first_seen":"2024-09-05T12:50:03Z","last_seen":"2025-12-15T21:43:12.030896Z","alert_count":4,"request_count":1,"received_data":832,"sent_data":434,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cads.adsboosters.xyz","ip":{"addr":"104.26.11.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-08-26","domain_rank":0,"first_seen":"2025-11-06T06:06:53.204548Z","last_seen":"2025-12-15T09:10:24.782191Z","alert_count":0,"request_count":1,"received_data":537,"sent_data":652,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"uads.adsboosters.xyz","ip":{"addr":"104.26.11.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-08-26","domain_rank":0,"first_seen":"2025-11-06T06:06:53.203603Z","last_seen":"2025-12-15T09:10:24.763857Z","alert_count":0,"request_count":1,"received_data":715,"sent_data":408,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"d9r4lqt28t1fm.cloudfront.net/?tqlrd=1142489","fqdn":"d9r4lqt28t1fm.cloudfront.net","domain":"d9r4lqt28t1fm.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.192.209.219","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f3b70611d312475d6afb389d3f37b88b","sha1":"38bad3c8e55c5dd280fb35866fa05b3fe565c443","sha256":"1b4b5b1917cf0cacd5a73dfc6f93fe4086fc038ac2f2124f20ea433a08a61cbc","sha512":"ba16cb0dc181e63b44661fdbc6e87501449c3c697288fa9d1fd280cd8cb6877de1c601a2d6ad5af17ffb7ce99373cb56aa73d53803716260af800abdff50037c","ssdeep":"3072:XBUNP5+Ya/06R42Da7oV6+53UOng7L9vN9x:XuNR+t/06G2D026","tlshash":"19045cc9be92346d836374b540bf528a723f4a68b8184cd4e496d4d17db8d0a437bfac","size":190282,"data":"","first_seen":"2025-12-21T14:32:22.085247Z","last_seen":"2025-12-21T14:32:22.085247Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sads.adsboosters.xyz/f052d1708d0c10d62d856020ae4e5466.js","fqdn":"sads.adsboosters.xyz","domain":"adsboosters.xyz","tld":"xyz"},"ip":{"addr":"104.26.11.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4fa889b86a6c8724c562761e1fa16887","sha1":"0b73ee192f8031af0489eb8748c54e3bfa0a0525","sha256":"572f5ae372529b9698128b1aa890eb9a49ef05e6233da84658ee32cae011e2c3","sha512":"c8afe2ba14b2177750e9ed73f06605d9c59b63be4e58a659a6c3f6534cd5b4867a666be7906cb30785d3bc020f155170383948af734d670f6daead7074ee9880","ssdeep":"1536:ZDM90WnYw6wF9tC5o3c9JKBn6bKFHSxTgDq8zSvF0CLe/930B35cPkio2fXRv6:ZDM9LtrC5owmuKFyxTgxSpeJv6","tlshash":"29b3e700b391167a9fe74b9fb72290e2e06e197a754c4c26f13d7d192af2a48e5fc530","size":115315,"data":"","first_seen":"2025-12-04T07:15:00.478274Z","last_seen":"2026-01-26T15:27:35.378175Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uads.adsboosters.xyz/","fqdn":"uads.adsboosters.xyz","domain":"adsboosters.xyz","tld":"xyz"},"ip":{"addr":"104.26.11.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"13b0875166f6ece45e12356632d91cdc","sha1":"9f51ab2dfd07251ce48c03bd1069be70001e54d3","sha256":"8ba98a3b197aa2faabe73ae6ae0401a11ca92931f7bbf4a7fce64b3c71a75ac4","sha512":"a6581d4de8fe446a0f816d953907273e711db11c9c5a8dc22674ca26cb8cab654a781b7ee2dfbd6f0234e7fc19f6f6220c4114a2c3ebd02d3601d86f0f32e604","ssdeep":"","tlshash":"24d022084ced76423ba78aa1020334042fff8419aaca84c1ec603d4ac0cae47326cabc","size":208,"data":"","first_seen":"2025-12-21T14:32:22.092374Z","last_seen":"2025-12-21T14:32:22.092374Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gadgetsweb.xyz/homelander/","fqdn":"gadgetsweb.xyz","domain":"gadgetsweb.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2fa0363d06269552019d76c6d62449fb","sha1":"13efe9edab2adda1790c38946d93db982c1dfbc4","sha256":"f18900764371e94191fb83d54fea2e85967e2407a9a87de5967eb74e32f6e446","sha512":"7e3b80f192966f31e7487e8170779187f8a4d5a75c24a38d50d365baa05feebb06a6bdb1c84766de67f00df949956821424c3394f15d30c85d7bf65aeef10e23","ssdeep":"","tlshash":"14c02b8c310e0cb441f72744cf7fb600b042321ca4d46931480923049d30f03d744c10","size":153,"data":"","first_seen":"2025-06-29T08:49:31.023635Z","last_seen":"2026-04-04T03:48:09.490721Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gadgetsweb.xyz/homelander/","fqdn":"gadgetsweb.xyz","domain":"gadgetsweb.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"17e6b951fb1c7e7d1fb2f9a2c1c8570d","sha1":"3a4b8c8614add935c4e53da3771421967241b0a0","sha256":"8b4c3f8bac2834f57e8d1ccc852cf9c8a6658a5241af7e6b59eedccd92eaba40","sha512":"49b3d15ad6ad8c91d1681152561b753f5ee662bfd4357947378239a1c475080a7d7a6406e1ea1c7912829d7fda86e1825b414e15a70deed06b69bf0474d881ce","ssdeep":"","tlshash":"4ad05beb0965193446b774545e1fb25839ab506f104bb6017d4c46540f5431e831bbc9","size":252,"data":"","first_seen":"2025-09-11T07:54:48.607943Z","last_seen":"2026-02-01T19:37:49.244104Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-0VNN2EN5NK","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"452a3de6c263c3c976767ced59118ed5","sha1":"8ae16d5daa11e73af3520af6ec912666278634f4","sha256":"8ea01780a0ed76f4fc1dd81e4b56aa85b450f05b606879f92e1bf99f49dc80c4","sha512":"5f9db35c639e58a7c35d5f8ef866fdf2cb0b00ebd827a1bced46548689b17f04eb2e9322d99c123a8bdd9f445642925404e5f6b1823867cb3baff3ed879189fa","ssdeep":"6144:64Ie7ma2bulKY/1u99xHDmHYmyBFzvnszmxWovPad4FpC1+T:0C8bu7/1mbrnsOWdMpX","tlshash":"c28419ce73c674669392a078503f118ba57b69e2f44cc895f18acce42d746aa4237f7c","size":384157,"data":"","first_seen":"2025-12-21T14:32:22.086272Z","last_seen":"2025-12-21T14:32:22.086272Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gadgetsweb.xyz/homelander/","fqdn":"gadgetsweb.xyz","domain":"gadgetsweb.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"bc98af945904ad1fbd18c05c0d2112ff","sha1":"a2ccd9369916f746b34a73cf7e4d433f65882238","sha256":"042bbcc1082b7f7e11eef7a5dbb7858d213113cf16d7d779ee457d0a6953cbfe","sha512":"d65d2135f13dc0b602a55868a299cc67bcb894beb0666b3eb6a23f35d98e6f260f514f3e33155375e1c9cc3f429e379cd6e0288764fe76c54c835a1c50a5292c","ssdeep":"192:+ug4vDMN9bXSBc6j6uBtMPVsueWCpmLYuUCNyr/nf4WKIROVUdodFP1u0JLQvFx+:+uTvDeFXSBcq6ustsueWCpmLYuUCNydW","tlshash":"5f22221a6fd054a4076f06dff31b70c4f0d6285e6e88492bc211bd6ab8b5247f6b16bc","size":10370,"data":"","first_seen":"2025-02-01T17:56:43.376057Z","last_seen":"2026-04-04T03:48:09.492804Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d9r4lqt28t1fm.cloudfront.net/6NFQ5eXBXO1cfT0A9XURBBWALTUgNckkLFVJpXhgUUzFNCgdRNhcBCU5yUwofWiQEEkNQPQwgJlg6AV8ETjAESVZYNVceTRIxVxpNBXJYHRIJZB8NAFs/BBIXTj5BHB9YMUNfBVVpVBYKXThVGFUGEgxXQBFmCVEHXTpdFgdHcQtJHkBxC0lBBHoJXEN2cQ-tJB106D01VBxYcS0BMYg1cQ3ZxC0kCQnEKOEEHYBdJWRFmCR4VVz9WXEJyZglIQARlCUhVBmRfEAJRMlYBVQYSCEpEGmQfDE0F","fqdn":"d9r4lqt28t1fm.cloudfront.net","domain":"d9r4lqt28t1fm.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.192.209.219","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"524e14bbc442a463f6eb20435ed3b807","sha1":"c2be468b76a14ed37eb86f48742043fcb6956420","sha256":"763c94e778ff3c584ab359ed973f0cbddc57c1384aa42b2a5cc71f8341df82ec","sha512":"2d78efc7dc060ffa76c4abc134a51e022bf3f26803501f9d3b316adf3b6005d8ffa2efd22aa53ccbb0fdf731111d250ed87591fa4eb58e7d6b5e8a32dc72e15d","ssdeep":"","tlshash":"960120fcbc04da2310fa0b1af3eab559d34855ed40629e3e496147815e1ce6f9a01914","size":754,"data":"","first_seen":"2025-12-21T14:32:22.079585Z","last_seen":"2025-12-21T14:32:22.079585Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gadgetsweb.xyz/?id=eUdIWlY5N2o2cGVQa3JENXJRcmU3QnJLUHRNSzJwQ2tsUHN5eE1NY0RMdDNqYTdmcG9lTjNCNGkxa0EwY09zeTREODJ3OEpzTkwreURGTUR1RkI0WmwyZTNUVjd5eCtkdVg1amhLS2dPbHJqVU9lR1lNU0JmUHI4a1E4dmJoalZUUXc2dTArZWpYSUZqT2IwL1FPRHRhU1kyQ1F0MHlSZ0FFbDZUZGRBampzMHlNOW10eHRTVDJLZGlyTVVyaTdmQVpRQkdOSHg0eWJ4UG9YdkVsbFFjQT09","fqdn":"gadgetsweb.xyz","domain":"gadgetsweb.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f3818d944cc56bfe6df041d3c203ae69","sha1":"66b22d93506106dfc230a88ffbc9de42b5f18697","sha256":"4c4bff3a1f8d3f941ad5f282240675da199be2acde30427bffb2a05651ff809e","sha512":"4c101575e071684f253fbc74cd9cd3e99af76a42d3abe8165d0eeb42f78b486ea379fb4671a736eab4ae02a60bf56b43f8c4ea317b76709ee1e2eaecbb6fa4a0","ssdeep":"","tlshash":"d411944571553a1ba66a0469c072060ca73242b67e24b92d259fcb40be0398a3af7ee2","size":940,"data":"","first_seen":"2025-12-21T14:32:22.099Z","last_seen":"2025-12-21T14:32:22.099Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"d9r4lqt28t1fm.cloudfront.net/6NFQ5eXBXO1cfT0A9XURBBWALTUgNckkLFVJpXhgUUzFNCgdRNhcBCU5yUwofWiQEEkNQPQwgJlg6AV8ETjAESVZYNVceTRIxVxpNBXJYHRIJZB8NAFs/BBIXTj5BHB9YMUNfBVVpVBYKXThVGFUGEgxXQBFmCVEHXTpdFgdHcQtJHkBxC0lBBHoJXEN2cQ-tJB106D01VBxYcS0BMYg1cQ3ZxC0kCQnEKOEEHYBdJWRFmCR4VVz9WXEJyZglIQARlCUhVBmRfEAJRMlYBVQYSCEpEGmQfDE0F","fqdn":"d9r4lqt28t1fm.cloudfront.net","domain":"d9r4lqt28t1fm.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.192.209.219","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gadgetsweb.xyz/homelander/","date":"2025-12-21T14:31:57.784Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /6NFQ5eXBXO1cfT0A9XURBBWALTUgNckkLFVJpXhgUUzFNCgdRNhcBCU5yUwofWiQEEkNQPQwgJlg6AV8ETjAESVZYNVceTRIxVxpNBXJYHRIJZB8NAFs/BBIXTj5BHB9YMUNfBVVpVBYKXThVGFUGEgxXQBFmCVEHXTpdFgdHcQtJHkBxC0lBBHoJXEN2cQ-tJB106D01VBxYcS0BMYg1cQ3ZxC0kCQnEKOEEHYBdJWRFmCR4VVz9WXEJyZglIQARlCUhVBmRfEAJRMlYBVQYSCEpEGmQfDE0F HTTP/1.1\r\nHost: d9r4lqt28t1fm.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gadgetsweb.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 545\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31556926\r\ncontent-encoding: gzip\r\ndate: Sun, 21 Dec 2025 14:31:57 GMT\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 d229ccc15dd984a81023d1b57fa0adbc.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: YnahDa-O6XSFXEQwxYdj7vYgJFyRj3HN-S2qwiaLBAY7xfbNvTZaEQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":754,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with very long lines (754), with no line terminators","md5":"524e14bbc442a463f6eb20435ed3b807","sha1":"c2be468b76a14ed37eb86f48742043fcb6956420","sha256":"763c94e778ff3c584ab359ed973f0cbddc57c1384aa42b2a5cc71f8341df82ec","sha512":"2d78efc7dc060ffa76c4abc134a51e022bf3f26803501f9d3b316adf3b6005d8ffa2efd22aa53ccbb0fdf731111d250ed87591fa4eb58e7d6b5e8a32dc72e15d","ssdeep":"","tlshash":"960120fcbc04da2310fa0b1af3eab559d34855ed40629e3e496147815e1ce6f9a01914","first_seen":"2025-12-21T14:32:22.079585Z","last_seen":"2025-12-21T14:32:22.079585Z","times_seen":1,"resource_available":true,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"d9r4lqt28t1fm.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico\u0026dsh=S403818859%3A1766327517875230\u0026hl=en\u0026ifkv=Ac2yZaUMODy8GxyR5KX-jgjR9Bpctca7--xQT0lYl91y_3f0sMPCYfomneklr6CBoxYk7zyIGwqkNw\u0026passive=true\u0026service=mail\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.150.84","port":443,"asn":15169,"as":"GOOGLE","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gadgetsweb.xyz/homelander/","date":"2025-12-21T14:31:57.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:57:32 GMT","end":"Wed, 25 Feb 2026 15:57:31 GMT"},"fingerprint":{"sha1":"F5:06:14:04:6B:D5:32:C9:BA:A9:B4:13:02:C3:F0:62:2A:24:BC:90","sha256":"D8:34:74:17:27:E1:E2:E3:A9:BB:5D:58:F5:DB:40:51:4E:6C:34:33:BF:88:83:62:03:97:DC:4B:FB:67:B5:45"}}},"request":{"raw":"GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico\u0026dsh=S403818859%3A1766327517875230\u0026hl=en\u0026ifkv=Ac2yZaUMODy8GxyR5KX-jgjR9Bpctca7--xQT0lYl91y_3f0sMPCYfomneklr6CBoxYk7zyIGwqkNw\u0026passive=true\u0026service=mail\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gadgetsweb.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sun, 21 Dec 2025 14:31:57 GMT\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport, script-src 'nonce-2Psu3hgyztHcKaesbugS_Q' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://www.google.com/tools/feedback/ https://www.gstatic.com/feedback/js/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/ https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://support.google.com/inapp/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist\r\ncontent-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js https://translate.google.com/translate_a/element.js https://www.google.com/recaptcha/api.js https://www.google.com/recaptcha/enterprise.js https://www.gstatic.com/recaptcha/ https://www.google.com/tools/feedback/chat_load.js https://www.google.com/tools/feedback/help_api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.gstatic.com/feedback/js/ https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.jam3aJYHpRA.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://translate.googleapis.com/_/translate_http/_/js/ https://www.gstatic.com/recaptcha/releases/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"AccountsSignInUi\"\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\nreport-to: {\"group\":\"AccountsSignInUi\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi\"}]}\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T02:47:04.217168Z","times_seen":13356183,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gadgetsweb.xyz/?id=eUdIWlY5N2o2cGVQa3JENXJRcmU3QnJLUHRNSzJwQ2tsUHN5eE1NY0RMdDNqYTdmcG9lTjNCNGkxa0EwY09zeTREODJ3OEpzTkwreURGTUR1RkI0WmwyZTNUVjd5eCtkdVg1amhLS2dPbHJqVU9lR1lNU0JmUHI4a1E4dmJoalZUUXc2dTArZWpYSUZqT2IwL1FPRHRhU1kyQ1F0MHlSZ0FFbDZUZGRBampzMHlNOW10eHRTVDJLZGlyTVVyaTdmQVpRQkdOSHg0eWJ4UG9YdkVsbFFjQT09","fqdn":"gadgetsweb.xyz","domain":"gadgetsweb.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-21T14:31:54.279Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gadgetsweb.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 13:46:10 GMT","end":"Tue, 03 Feb 2026 14:42:44 GMT"},"fingerprint":{"sha1":"0E:4E:9E:04:56:5D:A7:34:62:8B:FD:32:12:D3:A9:3D:5E:6D:DF:58","sha256":"CF:0A:D2:2A:9E:2A:DD:3F:73:D4:42:2E:38:21:31:1D:F0:A4:C7:17:9B:A1:5A:F1:C8:63:39:4E:20:73:D5:72"}}},"request":{"raw":"GET /?id=eUdIWlY5N2o2cGVQa3JENXJRcmU3QnJLUHRNSzJwQ2tsUHN5eE1NY0RMdDNqYTdmcG9lTjNCNGkxa0EwY09zeTREODJ3OEpzTkwreURGTUR1RkI0WmwyZTNUVjd5eCtkdVg1amhLS2dPbHJqVU9lR1lNU0JmUHI4a1E4dmJoalZUUXc2dTArZWpYSUZqT2IwL1FPRHRhU1kyQ1F0MHlSZ0FFbDZUZGRBampzMHlNOW10eHRTVDJLZGlyTVVyaTdmQVpRQkdOSHg0eWJ4UG9YdkVsbFFjQT09 HTTP/1.1\r\nHost: gadgetsweb.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 14:31:54 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ci6jRoRfaexJBuedSg9uHw5T6cdrd0wREED7MutruwWVILD3J39SDyvTWvPeDjyUs3N0oz4pwHr1opK%2BWv80NIWWGAtlFPkvxlOBBw%3D%3D\"}]}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sun, 21 Dec 2025 14:31:54 GMT\r\ncontent-encoding: br\r\ncf-ray: 9b1815f48c72712a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1727,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (763)","md5":"09010f1471cad76ff55f346b1a9f713c","sha1":"6cd5c7fcd1fc080439a2a75b0403212220464789","sha256":"7af6e665121b864d69d80b835e3c35c8c06e2adce91a6d37dd367e08f9c29e32","sha512":"b732a98912360a45db337c9731b44aed53b82b38fd65349e18667d8584081af9b1513adb651001e3ed00bae183da9cdc47453cf60e1f09d74b6f705dc0e3f827","ssdeep":"","tlshash":"ea31bb57a402351ea6320036c472371c27348470771abd1e56cbb7669f81fc776f7a95","first_seen":"2025-12-21T14:32:22.08147Z","last_seen":"2025-12-21T14:32:22.08147Z","times_seen":1,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":45,"dns":25,"connect":1,"send":0,"wait":119,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gadgetsweb.xyz/favicon.ico","fqdn":"gadgetsweb.xyz","domain":"gadgetsweb.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gadgetsweb.xyz/?id=eUdIWlY5N2o2cGVQa3JENXJRcmU3QnJLUHRNSzJwQ2tsUHN5eE1NY0RMdDNqYTdmcG9lTjNCNGkxa0EwY09zeTREODJ3OEpzTkwreURGTUR1RkI0WmwyZTNUVjd5eCtkdVg1amhLS2dPbHJqVU9lR1lNU0JmUHI4a1E4dmJoalZUUXc2dTArZWpYSUZqT2IwL1FPRHRhU1kyQ1F0MHlSZ0FFbDZUZGRBampzMHlNOW10eHRTVDJLZGlyTVVyaTdmQVpRQkdOSHg0eWJ4UG9YdkVsbFFjQT09","date":"2025-12-21T14:31:54.575Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gadgetsweb.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 13:46:10 GMT","end":"Tue, 03 Feb 2026 14:42:44 GMT"},"fingerprint":{"sha1":"0E:4E:9E:04:56:5D:A7:34:62:8B:FD:32:12:D3:A9:3D:5E:6D:DF:58","sha256":"CF:0A:D2:2A:9E:2A:DD:3F:73:D4:42:2E:38:21:31:1D:F0:A4:C7:17:9B:A1:5A:F1:C8:63:39:4E:20:73:D5:72"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: gadgetsweb.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: xla=s4t\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Sun, 21 Dec 2025 14:31:54 GMT\r\ncontent-type: text/html\r\ncache-control: private, max-age=14400, must-revalidate\r\npragma: no-cache\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 286633\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X6F4R6mg6oiHqC1CV3e%2FQjXqVSryYPk0VF9%2FtYMVKFN9e3vr7VPJSKuGT0EHwdcV%2BrsHdo5jsLTJon5BG%2Bu9kiPbiCSAG4XmAqpfxw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9b1815f61e6eb4fd-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1163,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"279ec9507ec57b9396016a872cb7d9da","sha1":"f1cfa5e770443af61ea8487f51125e0bc6d86bf6","sha256":"7becc0246aa4fcb8127b3459b2b8c6c04879c6855b0fcf370f8c83d2de88d319","sha512":"c44a7bb77d94cb2f31650673fe2d39d5e84e12ff58d096a1adf2862989e4d6398d264ccaf18990a6f0279fd0d271982c21e47f1c35215127f786246998f81456","ssdeep":"","tlshash":"2e21443ec2c1560ad0271154fb81e3983669831291570fa13b8eb1a7f6cd0bb56a37c8","first_seen":"2024-01-13T11:26:01Z","last_seen":"2026-04-04T10:38:00.532743Z","times_seen":3039,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gadgetsweb.xyz/homelander/","fqdn":"gadgetsweb.xyz","domain":"gadgetsweb.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-21T14:31:56.571Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gadgetsweb.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 13:46:10 GMT","end":"Tue, 03 Feb 2026 14:42:44 GMT"},"fingerprint":{"sha1":"0E:4E:9E:04:56:5D:A7:34:62:8B:FD:32:12:D3:A9:3D:5E:6D:DF:58","sha256":"CF:0A:D2:2A:9E:2A:DD:3F:73:D4:42:2E:38:21:31:1D:F0:A4:C7:17:9B:A1:5A:F1:C8:63:39:4E:20:73:D5:72"}}},"request":{"raw":"GET /homelander/ HTTP/1.1\r\nHost: gadgetsweb.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: xla=s4t\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 21 Dec 2025 14:31:56 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 286205\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nlast-modified: Thu, 18 Dec 2025 07:01:51 GMT\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EpFkpkZ0nFpWg5tI01Fprfvo7uIdLsutHF7d9z056N7r%2Bq3U4%2BaId6tkplNjTHijn1UXhM2ZRtbDR9ova%2F50Mh0%2BP0XJIMoD6oDtQg%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9b1816029fafb4fd-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]},{"name":"scrollreveal","description":"","website":"https://scrollrevealjs.org","common_platform_enumeration":"","icon":"scrollreveal.svg","categories":["JavaScript libraries"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":50497,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (19802)","md5":"089ce3234368e719478d12f0889a4cf8","sha1":"5ea14d7d462d8a7f17f3894e2d485ce451b1d603","sha256":"64fca35cfb602685a4910d68ec2cfbb8343d0328e07986ac0e975cb42c5aa9e2","sha512":"09c067547d8f03ed64617eb0c5449f726cb4dd9cd605d129fa1978ad3c3c235484a875d8528908a8175ce6747a358bcef5262d6493200ce76b8434f0c54ce558","ssdeep":"768:WS/s34kqqNQooaEyD8CHuyqbw5j69xDkTvDeFXYcq6OueGydKIzodFduHHUXYWL:8FqEQorEyACOyqbw5j69xdq6r","tlshash":"74332c322fe42038b317c676f396b184f614d44bd60789aaf15cb964efc6585a6332bc","first_seen":"2025-11-12T01:51:15.648011Z","last_seen":"2026-01-26T15:27:35.372701Z","times_seen":5,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=DM+Sans:ital,opsz,wght@0,9..40,100..1000;1,9..40,100..1000\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gadgetsweb.xyz/homelander/","date":"2025-12-21T14:31:56.657Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:54:11 GMT","end":"Wed, 25 Feb 2026 15:54:10 GMT"},"fingerprint":{"sha1":"43:D3:3F:93:6C:4F:F7:67:58:9D:D5:48:20:4C:74:A2:69:DB:13:9F","sha256":"8C:DB:D2:85:E1:AB:12:7B:1D:5A:65:A7:EC:22:67:6F:B3:A6:65:01:28:29:FA:D2:3B:01:8D:10:7E:4D:09:52"}}},"request":{"raw":"GET /css2?family=DM+Sans:ital,opsz,wght@0,9..40,100..1000;1,9..40,100..1000\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gadgetsweb.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 21 Dec 2025 14:31:56 GMT\r\ndate: Sun, 21 Dec 2025 14:31:56 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1729,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"5ffc15542a2c42f67876d646f086f9eb","sha1":"a075c5d2469c886c1e4c2aeb9be62dcb436c26d6","sha256":"fb05ad76b6b4f1c851a30b94a677bae20d3d99203e83ebdfc3772aa6accc55f2","sha512":"a19fb78fa78c8a5c6fba1a37f25e4860f7011ca00f209d840890ee156fabef593c7de21a57116c0777eec28568fe4a3337afdef886414fa08831d7885b88259c","ssdeep":"","tlshash":"9231df81087b6114e7571dc122ce7e32ef1fa1906454a874bbfe2894fc56c6e5371b4d","first_seen":"2025-09-12T01:48:17.883282Z","last_seen":"2026-04-05T02:18:57.972083Z","times_seen":5410,"resource_available":false,"data":null}},"time_used":331,"timings":{"blocked":133,"dns":3,"connect":15,"send":0,"wait":62,"receive":0,"ssl":115},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d9r4lqt28t1fm.cloudfront.net/?tqlrd=1142489","fqdn":"d9r4lqt28t1fm.cloudfront.net","domain":"d9r4lqt28t1fm.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.192.209.219","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gadgetsweb.xyz/homelander/","date":"2025-12-21T14:31:56.664Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /?tqlrd=1142489 HTTP/1.1\r\nHost: d9r4lqt28t1fm.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gadgetsweb.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 64243\r\naccess-control-allow-origin: *\r\ncache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform\r\ncontent-encoding: gzip\r\npragma: no-cache\r\ndate: Sun, 21 Dec 2025 14:31:56 GMT\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 d229ccc15dd984a81023d1b57fa0adbc.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: Y_agGyr_N9p8dpyHabl2y-KGNYAIxgIQDfa5eBl6CfLpADHBnmaAvw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":190282,"size_decoded":0,"mime_type":"text/plain","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (38488)","md5":"f3b70611d312475d6afb389d3f37b88b","sha1":"38bad3c8e55c5dd280fb35866fa05b3fe565c443","sha256":"1b4b5b1917cf0cacd5a73dfc6f93fe4086fc038ac2f2124f20ea433a08a61cbc","sha512":"ba16cb0dc181e63b44661fdbc6e87501449c3c697288fa9d1fd280cd8cb6877de1c601a2d6ad5af17ffb7ce99373cb56aa73d53803716260af800abdff50037c","ssdeep":"3072:XBUNP5+Ya/06R42Da7oV6+53UOng7L9vN9x:XuNR+t/06G2D026","tlshash":"19045cc9be92346d836374b540bf528a723f4a68b8184cd4e496d4d17db8d0a437bfac","first_seen":"2025-12-21T14:32:22.085247Z","last_seen":"2025-12-21T14:32:22.085247Z","times_seen":1,"resource_available":true,"data":null}},"time_used":310,"timings":{"blocked":66,"dns":32,"connect":1,"send":0,"wait":172,"receive":4,"ssl":31},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"d9r4lqt28t1fm.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-0VNN2EN5NK","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gadgetsweb.xyz/homelander/","date":"2025-12-21T14:31:56.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:27 GMT","end":"Wed, 25 Feb 2026 15:49:26 GMT"},"fingerprint":{"sha1":"2C:B9:1B:62:2A:F9:04:B9:16:E2:30:B0:A8:B2:85:0C:68:BC:79:25","sha256":"AE:CB:A0:2C:92:1E:CB:D2:CB:6C:0D:37:5E:A2:4E:27:AE:4E:CA:0C:EC:53:D5:50:E6:C1:3D:EB:17:C1:F2:C9"}}},"request":{"raw":"GET /gtag/js?id=G-0VNN2EN5NK HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gadgetsweb.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 21 Dec 2025 14:31:56 GMT\r\nexpires: Sun, 21 Dec 2025 14:31:56 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 132255\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":384157,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"452a3de6c263c3c976767ced59118ed5","sha1":"8ae16d5daa11e73af3520af6ec912666278634f4","sha256":"8ea01780a0ed76f4fc1dd81e4b56aa85b450f05b606879f92e1bf99f49dc80c4","sha512":"5f9db35c639e58a7c35d5f8ef866fdf2cb0b00ebd827a1bced46548689b17f04eb2e9322d99c123a8bdd9f445642925404e5f6b1823867cb3baff3ed879189fa","ssdeep":"6144:64Ie7ma2bulKY/1u99xHDmHYmyBFzvnszmxWovPad4FpC1+T:0C8bu7/1mbrnsOWdMpX","tlshash":"c28419ce73c674669392a078503f118ba57b69e2f44cc895f18acce42d746aa4237f7c","first_seen":"2025-12-21T14:32:22.086272Z","last_seen":"2025-12-21T14:32:22.086272Z","times_seen":1,"resource_available":true,"data":null}},"time_used":321,"timings":{"blocked":129,"dns":1,"connect":7,"send":0,"wait":28,"receive":26,"ssl":127},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sads.adsboosters.xyz/f052d1708d0c10d62d856020ae4e5466.js","fqdn":"sads.adsboosters.xyz","domain":"adsboosters.xyz","tld":"xyz"},"ip":{"addr":"104.26.11.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gadgetsweb.xyz/homelander/","date":"2025-12-21T14:31:56.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adsboosters.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Oct 2025 19:40:43 GMT","end":"Thu, 22 Jan 2026 20:40:41 GMT"},"fingerprint":{"sha1":"82:15:AA:74:5F:4F:23:C6:CA:B5:F5:08:50:B1:90:AE:E4:ED:3F:33","sha256":"D6:95:11:66:0B:33:08:A0:AB:54:E9:22:6E:15:5A:34:BD:4B:B8:61:30:D8:53:09:54:5F:F7:A9:B8:83:81:9C"}}},"request":{"raw":"GET /f052d1708d0c10d62d856020ae4e5466.js HTTP/1.1\r\nHost: sads.adsboosters.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gadgetsweb.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 14:31:57 GMT\r\ncontent-type: application/javascript\r\nx-amz-id-2: F0ptSed7i48E4wwXubtudAvDHwYsiXzj3kmyvhxVSakbSZVqh+VXypEl6jmrt0glQfUzNiL8DiJtYEJOFtqeLBxXG9EsrgD7\r\nx-amz-request-id: 18RP2WDRG2XVRFHH\r\nlast-modified: Tue, 02 Dec 2025 11:50:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-amz-server-side-encryption: AES256\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qdtsv32%2BDEZn686PJNHRvJ0tx1SwLJ9vAi6Rkk5t4IQaSdCJkq8jpKcPpyarquRcxnFhxtm1UhyyMfvid4NhkzHF1eDCINUiDfTjWOjErd1c\"}]}\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\netag: W/\"4fa889b86a6c8724c562761e1fa16887\"\r\ncontent-encoding: br\r\ncf-ray: 9b1816038a69569a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":115315,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"4fa889b86a6c8724c562761e1fa16887","sha1":"0b73ee192f8031af0489eb8748c54e3bfa0a0525","sha256":"572f5ae372529b9698128b1aa890eb9a49ef05e6233da84658ee32cae011e2c3","sha512":"c8afe2ba14b2177750e9ed73f06605d9c59b63be4e58a659a6c3f6534cd5b4867a666be7906cb30785d3bc020f155170383948af734d670f6daead7074ee9880","ssdeep":"1536:ZDM90WnYw6wF9tC5o3c9JKBn6bKFHSxTgDq8zSvF0CLe/930B35cPkio2fXRv6:ZDM9LtrC5owmuKFyxTgxSpeJv6","tlshash":"29b3e700b391167a9fe74b9fb72290e2e06e197a754c4c26f13d7d192af2a48e5fc530","first_seen":"2025-12-04T07:15:00.478274Z","last_seen":"2026-01-26T15:27:35.378175Z","times_seen":4,"resource_available":true,"data":null}},"time_used":764,"timings":{"blocked":62,"dns":22,"connect":1,"send":0,"wait":628,"receive":0,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmsans/v17/rP2Hp2ywxg089UriCZOIHTWCBl0-8Q.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gadgetsweb.xyz/homelander/","date":"2025-12-21T14:31:57.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/dmsans/v17/rP2Hp2ywxg089UriCZOIHTWCBl0-8Q.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://gadgetsweb.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 62460\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 20 Dec 2025 10:59:45 GMT\r\nexpires: Sun, 20 Dec 2026 10:59:45 GMT\r\ncache-control: public, max-age=31536000\r\nage: 99132\r\nlast-modified: Wed, 10 Sep 2025 16:30:17 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":62460,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 62460, version 1.0","md5":"4c04ee82dc1deb4f32b244195d258e9b","sha1":"9bd2bc9c6f54075acd20589f87c17a73e3ab07b3","sha256":"ab72fd10c9ac5633c1f9ae4267864b674596062e023458e02973080bd1098904","sha512":"43bd417c75382fbcad7a44c73db7ec8e883bb505b63215ec67488eb205b61acd94031d5740bdf70cf413fcb126ac6a567b4c71831eeb063e5643fa0adc704895","ssdeep":"1536:Hjv9lkTtdw0aS3yPvWdfDSFdW6KK8zPJ86DQMBXQX:Hz9ceS3y2FDSFdRKNzPJj5gX","tlshash":"8753028264d3489c8c8b69d354847f1c707ef88fc1b88995a8e33ca14d4b1e6e85ad7f","first_seen":"2025-09-11T19:26:36.805532Z","last_seen":"2026-04-05T03:07:42.877892Z","times_seen":7345,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":92,"dns":3,"connect":7,"send":0,"wait":8,"receive":13,"ssl":71},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=mail","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.150.84","port":443,"asn":15169,"as":"GOOGLE","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gadgetsweb.xyz/homelander/","date":"2025-12-21T14:31:57.781Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:57:32 GMT","end":"Wed, 25 Feb 2026 15:57:31 GMT"},"fingerprint":{"sha1":"F5:06:14:04:6B:D5:32:C9:BA:A9:B4:13:02:C3:F0:62:2A:24:BC:90","sha256":"D8:34:74:17:27:E1:E2:E3:A9:BB:5D:58:F5:DB:40:51:4E:6C:34:33:BF:88:83:62:03:97:DC:4B:FB:67:B5:45"}}},"request":{"raw":"GET /ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=mail HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gadgetsweb.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: application/binary\r\nset-cookie: __Host-GAPS=1:TXZcV4soyonmnKHllejxhb-FHlDRfQ:Mw2fTp01g5zYpXRJ; Expires=Tue, 21-Dec-2027 14:31:57 GMT; Path=/; Secure; HttpOnly; Priority=HIGH\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sun, 21 Dec 2025 14:31:57 GMT\r\nlocation: https://accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=mail\u0026uilel=3\u0026dsh=S403818859:1766327517875230\u0026ifkv=Ac2yZaVI_bMyFnWkl6nVguP6deRNJkxn6hcWZ17wd1-t8kif54rMBbRIPefupLYMtAS4EY00af-fzw\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-opener-policy: unsafe-none\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport, script-src 'nonce-fxpv6fZLJhDFvtqnQfbdyQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncross-origin-resource-policy: cross-origin\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T02:47:04.217168Z","times_seen":13356183,"resource_available":true,"data":null}},"time_used":193,"timings":{"blocked":85,"dns":0,"connect":15,"send":0,"wait":22,"receive":1,"ssl":68},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gadgetsweb.xyz/homelander/cropped-cropped-1-1-1-2-1.png","fqdn":"gadgetsweb.xyz","domain":"gadgetsweb.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gadgetsweb.xyz/homelander/","date":"2025-12-21T14:31:57.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gadgetsweb.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 13:46:10 GMT","end":"Tue, 03 Feb 2026 14:42:44 GMT"},"fingerprint":{"sha1":"0E:4E:9E:04:56:5D:A7:34:62:8B:FD:32:12:D3:A9:3D:5E:6D:DF:58","sha256":"CF:0A:D2:2A:9E:2A:DD:3F:73:D4:42:2E:38:21:31:1D:F0:A4:C7:17:9B:A1:5A:F1:C8:63:39:4E:20:73:D5:72"}}},"request":{"raw":"GET /homelander/cropped-cropped-1-1-1-2-1.png HTTP/1.1\r\nHost: gadgetsweb.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gadgetsweb.xyz/homelander/\r\nCookie: xla=s4t; _ga_0VNN2EN5NK=GS2.1.s1766327517$o1$g0$t1766327517$j60$l0$h0; _ga=GA1.1.973833308.1766327517\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Sun, 21 Dec 2025 14:31:57 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: private, max-age=14400, must-revalidate\r\nx-ua-compatible: IE=edge\r\nlink: \u003chttps://gadgetsweb.xyz/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 359752\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rr8yLRfe8VZiq1ZJ7eRj2lJGFX81f7EGczUHVOuiAeHlHdHMc8KSIC1wHu%2BwXfMns1HzzFdpJUnr91Pag287lJzaPakB8vTTfXx%2B%2Bg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9b18160a2d8cb4fd-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"WordPress:6.9","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":47756,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9149)","md5":"996a7e09062d0225daa22e41b1cf0566","sha1":"a723d48c8f13384f626807085bd8100c67b260a4","sha256":"4bad6c2b7e3417bc148c24b7996f4fc71f73cf2f2d40346ae98191c866d66afd","sha512":"b308a34c906991eeb229792e0a55c5016fca533fc557a1fe88a24eb95727518b086c0654f034b633f2fe4ba2c00a4c1e18b48f12e62e1d4e7681df1a6b711992","ssdeep":"768:5KEacAdiWWjZdypJ9p8z17Kg/TNQjQTtnOT0CWfzTjqlDkwcFzO2brzTu8TU7+Uu:5XnypwbPTu8Tk+0kL","tlshash":"cd2309b2c2f418f63a6e836d8680b3187495e515df026be8f1f5e12856cdef605a3b0d","first_seen":"2025-12-21T14:32:22.089319Z","last_seen":"2025-12-21T14:32:22.089319Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ukankingwithea.com/","fqdn":"ukankingwithea.com","domain":"ukankingwithea.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gadgetsweb.xyz/homelander/","date":"2025-12-21T14:31:57.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ukankingwithea.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 14:27:37 GMT","end":"Wed, 21 Jan 2026 15:26:07 GMT"},"fingerprint":{"sha1":"9D:07:9C:6F:57:10:86:CD:16:B0:52:82:27:D1:5A:15:62:C4:01:4D","sha256":"45:86:DC:CE:A9:11:84:B3:7C:78:71:DB:1D:F8:E8:6C:0F:4A:58:72:2C:CF:60:ED:8D:11:60:CB:9F:03:63:EF"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ukankingwithea.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gadgetsweb.xyz/\r\nOrigin: https://gadgetsweb.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 14:31:57 GMT\r\ncontent-type: text/plain\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: csu=542125170806031@1@1766327517; Max-Age=31104000; Secure; SameSite=None\r\naccess-control-allow-origin: https://gadgetsweb.xyz\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: X-Requested-With, content-type\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DAumlLE0H9LjCuL22ARX%2FdoLXaZGn%2F4drQOWRq0rsFBSNdeu0P9X8b6ug9sJR0DRu15AwlwNfQFtIJoo%2BB5qlF10kE4pzSPmsV%2FlEHXwj7w%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9b18160a694a0afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"1f32770052347beece9b7f812799eacc","sha1":"05979ed9100e39c3dec912c0698cb585d34029c8","sha256":"e7a5b5901cd04f8dc019a60c7c6826a14808d8c6dcc05556c333cc7e6b0177a4","sha512":"4ab7ab733f15231dc9a1a916dc9c5b5b0da178e61aa822c5a7d197fe9b5fc3b194a3a9456baf2e9ee5fb0bce1c88f56205ad2dcb50a1cead8e67abfa1cd803f4","ssdeep":"","tlshash":"8f800020a82a3330020c800f0082022b02ea808b832a00ca0300230000a20020208c20","first_seen":"2025-12-21T14:32:22.090572Z","last_seen":"2025-12-21T14:32:22.090572Z","times_seen":1,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":44,"dns":20,"connect":1,"send":0,"wait":132,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"ukankingwithea.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"ukankingwithea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"ukankingwithea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"ukankingwithea.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=mail\u0026uilel=3\u0026dsh=S403818859:1766327517875230\u0026ifkv=Ac2yZaVI_bMyFnWkl6nVguP6deRNJkxn6hcWZ17wd1-t8kif54rMBbRIPefupLYMtAS4EY00af-fzw","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.150.84","port":443,"asn":15169,"as":"GOOGLE","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gadgetsweb.xyz/homelander/","date":"2025-12-21T14:31:57.901Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:57:32 GMT","end":"Wed, 25 Feb 2026 15:57:31 GMT"},"fingerprint":{"sha1":"F5:06:14:04:6B:D5:32:C9:BA:A9:B4:13:02:C3:F0:62:2A:24:BC:90","sha256":"D8:34:74:17:27:E1:E2:E3:A9:BB:5D:58:F5:DB:40:51:4E:6C:34:33:BF:88:83:62:03:97:DC:4B:FB:67:B5:45"}}},"request":{"raw":"GET /InteractiveLogin?continue=https://www.google.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=mail\u0026uilel=3\u0026dsh=S403818859:1766327517875230\u0026ifkv=Ac2yZaVI_bMyFnWkl6nVguP6deRNJkxn6hcWZ17wd1-t8kif54rMBbRIPefupLYMtAS4EY00af-fzw HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gadgetsweb.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: text/html; charset=UTF-8\r\nset-cookie: __Host-GAPS=1:KPsQZ2tTMQUeyHRf3Wq9ty5azSoyCw:ivgVfvASCei3y642;Path=/;Expires=Tue, 21-Dec-2027 14:31:57 GMT;Secure;HttpOnly;Priority=HIGH\r\nx-frame-options: DENY\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sun, 21 Dec 2025 14:31:57 GMT\r\nlocation: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico\u0026dsh=S403818859%3A1766327517875230\u0026hl=en\u0026ifkv=Ac2yZaUMODy8GxyR5KX-jgjR9Bpctca7--xQT0lYl91y_3f0sMPCYfomneklr6CBoxYk7zyIGwqkNw\u0026passive=true\u0026service=mail\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreport-to: {\"group\":\"coop_gse_qebhlk\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gse_qebhlk\"}]}\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /cspreport, script-src 'nonce-67S8L35q3rtwmiqij4lgdQ' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_gse_qebhlk\"\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 417\r\nserver: GSE\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T02:47:04.217168Z","times_seen":13356183,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026dsh=S386627194:1766327517877100\u0026ifkv=Ac2yZaVKhfNyWELRtR3j6tGPdMKnVX9feCDdQ4d2gjHfZFF5Wr5UdQLGjZF6b07IVgg0S_c0gHF3Ig","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.150.84","port":443,"asn":15169,"as":"GOOGLE","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gadgetsweb.xyz/homelander/","date":"2025-12-21T14:31:57.903Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:57:32 GMT","end":"Wed, 25 Feb 2026 15:57:31 GMT"},"fingerprint":{"sha1":"F5:06:14:04:6B:D5:32:C9:BA:A9:B4:13:02:C3:F0:62:2A:24:BC:90","sha256":"D8:34:74:17:27:E1:E2:E3:A9:BB:5D:58:F5:DB:40:51:4E:6C:34:33:BF:88:83:62:03:97:DC:4B:FB:67:B5:45"}}},"request":{"raw":"GET /InteractiveLogin?continue=https://www.youtube.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026dsh=S386627194:1766327517877100\u0026ifkv=Ac2yZaVKhfNyWELRtR3j6tGPdMKnVX9feCDdQ4d2gjHfZFF5Wr5UdQLGjZF6b07IVgg0S_c0gHF3Ig HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gadgetsweb.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: text/html; charset=UTF-8\r\nset-cookie: __Host-GAPS=1:sqPskssl5uwxdhbyFW6n2PiU2h4QYQ:5mOTjvEhvDu1xsr8;Path=/;Expires=Tue, 21-Dec-2027 14:31:57 GMT;Secure;HttpOnly;Priority=HIGH\r\nx-frame-options: DENY\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sun, 21 Dec 2025 14:31:57 GMT\r\nlocation: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico\u0026dsh=S386627194%3A1766327517877100\u0026hl=en\u0026ifkv=Ac2yZaV-W3ApAwMm79zw_IuhbAxxmMMMu3Xql43u08evnwaL0tLMdOUFArhHOgR4UEWGEq7pAaPz2w\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: script-src 'nonce-tvrT3oYiBsxSfIZpPfSREw' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_gse_qebhlk\"\r\nreport-to: {\"group\":\"coop_gse_qebhlk\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gse_qebhlk\"}]}\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 418\r\nserver: GSE\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T02:47:04.217168Z","times_seen":13356183,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cads.adsboosters.xyz/?id=97487\u0026c=NO\u0026r=\u0026l=521\u0026b=Firefox\u0026bv=0\u0026os=Win10\u0026mob=0\u0026v=2.53.7\u0026lg=en-US\u0026ref=aHR0cHM6Ly9nYWRnZXRzd2ViLnh5ei9ob21lbGFuZGVyLw%3D%3D\u0026ruri=\u0026s=ab943eac08822008871933191932fdd003787252f64932e122bdd3ba4f6fdc14\u0026e=FDIAz5vF\u0026st=W\u0026iv=-1","fqdn":"cads.adsboosters.xyz","domain":"adsboosters.xyz","tld":"xyz"},"ip":{"addr":"104.26.11.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gadgetsweb.xyz/homelander/","date":"2025-12-21T14:31:58.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adsboosters.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Oct 2025 19:40:43 GMT","end":"Thu, 22 Jan 2026 20:40:41 GMT"},"fingerprint":{"sha1":"82:15:AA:74:5F:4F:23:C6:CA:B5:F5:08:50:B1:90:AE:E4:ED:3F:33","sha256":"D6:95:11:66:0B:33:08:A0:AB:54:E9:22:6E:15:5A:34:BD:4B:B8:61:30:D8:53:09:54:5F:F7:A9:B8:83:81:9C"}}},"request":{"raw":"GET /?id=97487\u0026c=NO\u0026r=\u0026l=521\u0026b=Firefox\u0026bv=0\u0026os=Win10\u0026mob=0\u0026v=2.53.7\u0026lg=en-US\u0026ref=aHR0cHM6Ly9nYWRnZXRzd2ViLnh5ei9ob21lbGFuZGVyLw%3D%3D\u0026ruri=\u0026s=ab943eac08822008871933191932fdd003787252f64932e122bdd3ba4f6fdc14\u0026e=FDIAz5vF\u0026st=W\u0026iv=-1 HTTP/1.1\r\nHost: cads.adsboosters.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gadgetsweb.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 14:31:58 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dkuBUMwTxUTkrRwpmByHk4CzoRzaKS%2FVgUI%2B3kOWKdsvRiiM3qbBRkONdjxAotSqou7Vlke7PjIYgNZ%2BxIhJMPUZB1G7pdH1V%2BLBnDrHjbcJ\"}]}\r\nserver: cloudflare\r\ncf-ray: 9b18160cda58569a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"57f187c7a868faeac558007a8eb6cb2e","sha1":"11ab10ab109fdb53d91d444ac781101f5a6360c6","sha256":"aa03dc59bdca72631d2301e4297cfa030bd31b907dc138e7b973d12311c90a22","sha512":"3844065e1dd778a05e8cc39901fbf3191ded380d594359df137901ec56ca52e03d57eb60acc2421a0ee74f0733bbb5d781b7744685c26fb013a236f49b02fed3","ssdeep":"","tlshash":"5f900407c1500051c151c4310444cf1017407570010d030d50dc1055dc1715d0d01100","first_seen":"2023-04-07T09:22:11Z","last_seen":"2026-04-05T02:51:49.41441Z","times_seen":56111,"resource_available":true,"data":null}},"time_used":505,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":482,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"torealiukzemydr.org/MGs4NHgfVFtHRVMvYmM2dzlydj91JW5xMWAyeVAcYzpuWTpcWx5AEVRWCQVMAl8ADV5AAlwJSRYYTFUMRRgFBV5ZBV5bRRYdBQVWA18WB04eXB5BRQFNTEQZV1YJEghEH1QJSQddDgdKB14JA0gCWQ","fqdn":"torealiukzemydr.org","domain":"torealiukzemydr.org","tld":"org"},"ip":{"addr":"172.67.130.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gadgetsweb.xyz/homelander/","date":"2025-12-21T14:31:57.047Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"torealiukzemydr.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Dec 2025 16:32:37 GMT","end":"Wed, 04 Mar 2026 17:29:41 GMT"},"fingerprint":{"sha1":"E4:88:98:0C:79:8A:86:67:9B:27:C3:69:5F:77:A4:65:E6:18:C9:F3","sha256":"6F:A1:4B:E2:F8:C7:BF:1C:EE:EA:6D:4F:44:EA:A3:8C:6C:8B:11:75:C8:28:F1:EA:BF:9D:32:1A:85:10:12:55"}}},"request":{"raw":"GET /MGs4NHgfVFtHRVMvYmM2dzlydj91JW5xMWAyeVAcYzpuWTpcWx5AEVRWCQVMAl8ADV5AAlwJSRYYTFUMRRgFBV5ZBV5bRRYdBQVWA18WB04eXB5BRQFNTEQZV1YJEghEH1QJSQddDgdKB14JA0gCWQ HTTP/1.1\r\nHost: torealiukzemydr.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gadgetsweb.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sun, 21 Dec 2025 14:31:57 GMT\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z3IytFdzYXuAtnjDFvrz06WgG7QRwki%2BjZAQp70gH1wfrv6%2BbGIwP12E4vDi90vCgMMV%2FWOOcTpdd3J8AYUFI8WANv1OeVu7MgcmPUsi3sHvQzY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9b181605e92c5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T02:47:04.217168Z","times_seen":13356183,"resource_available":true,"data":null}},"time_used":250,"timings":{"blocked":57,"dns":34,"connect":1,"send":0,"wait":121,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uads.adsboosters.xyz/","fqdn":"uads.adsboosters.xyz","domain":"adsboosters.xyz","tld":"xyz"},"ip":{"addr":"104.26.11.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gadgetsweb.xyz/homelander/","date":"2025-12-21T14:31:57.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adsboosters.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Oct 2025 19:40:43 GMT","end":"Thu, 22 Jan 2026 20:40:41 GMT"},"fingerprint":{"sha1":"82:15:AA:74:5F:4F:23:C6:CA:B5:F5:08:50:B1:90:AE:E4:ED:3F:33","sha256":"D6:95:11:66:0B:33:08:A0:AB:54:E9:22:6E:15:5A:34:BD:4B:B8:61:30:D8:53:09:54:5F:F7:A9:B8:83:81:9C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: uads.adsboosters.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gadgetsweb.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 14:31:58 GMT\r\ncontent-type: application/javascript\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aEDNBHANOYRD7OZyoO6o5rvvT7cT%2Bw9dWJ7EIRUZuVCHOCFSPvnw1cGWju3Cr31g%2Bk5JS6qHqsyymk6qFfwRNCVRMyTgG4bcm06TWHlvNM%2F8\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b1816098f24569a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":208,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"13b0875166f6ece45e12356632d91cdc","sha1":"9f51ab2dfd07251ce48c03bd1069be70001e54d3","sha256":"8ba98a3b197aa2faabe73ae6ae0401a11ca92931f7bbf4a7fce64b3c71a75ac4","sha512":"a6581d4de8fe446a0f816d953907273e711db11c9c5a8dc22674ca26cb8cab654a781b7ee2dfbd6f0234e7fc19f6f6220c4114a2c3ebd02d3601d86f0f32e604","ssdeep":"","tlshash":"24d022084ced76423ba78aa1020334042fff8419aaca84c1ec603d4ac0cae47326cabc","first_seen":"2025-12-21T14:32:22.092374Z","last_seen":"2025-12-21T14:32:22.092374Z","times_seen":1,"resource_available":true,"data":null}},"time_used":513,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":493,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=youtube","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.150.84","port":443,"asn":15169,"as":"GOOGLE","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gadgetsweb.xyz/homelander/","date":"2025-12-21T14:31:57.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:57:32 GMT","end":"Wed, 25 Feb 2026 15:57:31 GMT"},"fingerprint":{"sha1":"F5:06:14:04:6B:D5:32:C9:BA:A9:B4:13:02:C3:F0:62:2A:24:BC:90","sha256":"D8:34:74:17:27:E1:E2:E3:A9:BB:5D:58:F5:DB:40:51:4E:6C:34:33:BF:88:83:62:03:97:DC:4B:FB:67:B5:45"}}},"request":{"raw":"GET /ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=youtube HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gadgetsweb.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: application/binary\r\nset-cookie: __Host-GAPS=1:AnQ2qJh-52rtGpKtAx9BT34mEng6pw:mvdO8P3L5uLnnWd3; Expires=Tue, 21-Dec-2027 14:31:57 GMT; Path=/; Secure; HttpOnly; Priority=HIGH\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sun, 21 Dec 2025 14:31:57 GMT\r\nlocation: https://accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026dsh=S386627194:1766327517877100\u0026ifkv=Ac2yZaVKhfNyWELRtR3j6tGPdMKnVX9feCDdQ4d2gjHfZFF5Wr5UdQLGjZF6b07IVgg0S_c0gHF3Ig\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport, script-src 'nonce-kMg-zbL55LOjtwna6p2Ndg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: unsafe-none\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T02:47:04.217168Z","times_seen":13356183,"resource_available":true,"data":null}},"time_used":193,"timings":{"blocked":84,"dns":1,"connect":16,"send":0,"wait":22,"receive":0,"ssl":67},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico\u0026dsh=S386627194%3A1766327517877100\u0026hl=en\u0026ifkv=Ac2yZaV-W3ApAwMm79zw_IuhbAxxmMMMu3Xql43u08evnwaL0tLMdOUFArhHOgR4UEWGEq7pAaPz2w\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.150.84","port":443,"asn":15169,"as":"GOOGLE","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gadgetsweb.xyz/homelander/","date":"2025-12-21T14:31:57.951Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:57:32 GMT","end":"Wed, 25 Feb 2026 15:57:31 GMT"},"fingerprint":{"sha1":"F5:06:14:04:6B:D5:32:C9:BA:A9:B4:13:02:C3:F0:62:2A:24:BC:90","sha256":"D8:34:74:17:27:E1:E2:E3:A9:BB:5D:58:F5:DB:40:51:4E:6C:34:33:BF:88:83:62:03:97:DC:4B:FB:67:B5:45"}}},"request":{"raw":"GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico\u0026dsh=S386627194%3A1766327517877100\u0026hl=en\u0026ifkv=Ac2yZaV-W3ApAwMm79zw_IuhbAxxmMMMu3Xql43u08evnwaL0tLMdOUFArhHOgR4UEWGEq7pAaPz2w\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gadgetsweb.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sun, 21 Dec 2025 14:31:57 GMT\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport, script-src 'nonce-5xzb9KWYCELSyQIa3g62LQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://www.google.com/tools/feedback/ https://www.gstatic.com/feedback/js/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/ https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://support.google.com/inapp/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"AccountsSignInUi\"\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\ncontent-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js https://translate.google.com/translate_a/element.js https://www.google.com/recaptcha/api.js https://www.google.com/recaptcha/enterprise.js https://www.gstatic.com/recaptcha/ https://www.google.com/tools/feedback/chat_load.js https://www.google.com/tools/feedback/help_api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.gstatic.com/feedback/js/ https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.jam3aJYHpRA.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://translate.googleapis.com/_/translate_http/_/js/ https://www.gstatic.com/recaptcha/releases/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist\r\nreport-to: {\"group\":\"AccountsSignInUi\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi\"}]}\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T02:47:04.217168Z","times_seen":13356183,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.cdnfonts.com/css/trebuchet-ms-2","fqdn":"fonts.cdnfonts.com","domain":"cdnfonts.com","tld":"com"},"ip":{"addr":"172.67.184.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gadgetsweb.xyz/homelander/","date":"2025-12-21T14:31:56.660Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnfonts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Nov 2025 10:17:08 GMT","end":"Thu, 05 Feb 2026 11:15:09 GMT"},"fingerprint":{"sha1":"B9:7D:94:49:89:7C:6E:38:37:7E:D0:CD:6D:FF:99:13:66:F0:79:DA","sha256":"42:3A:81:1C:77:8F:FA:09:04:03:7D:C8:D9:29:DC:10:48:C2:FC:CD:CD:E1:1E:CB:B1:BE:6B:3B:C2:F4:8A:97"}}},"request":{"raw":"GET /css/trebuchet-ms-2 HTTP/1.1\r\nHost: fonts.cdnfonts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gadgetsweb.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 14:31:56 GMT\r\ncontent-type: text/css;charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nage: 198296\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nlast-modified: Fri, 19 Dec 2025 07:27:00 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fi9nzjvHNYBPW2IKvTGmyVeA1M04WSApCQ5Tj2ZzggpgmLPk2DvKby%2BTQMB5QmfW%2Bow0mOaskMGUAnHf87w9trqeWeLfIAcwd0Rtz8sEVLk%3D\"}]}\r\ncf-ray: 9b1816033ae4b505-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":407,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text","md5":"2a89e5541509127129d14b56db0c9851","sha1":"a87f5ee8acf12e4721f324106cdbc60cd11fa394","sha256":"f26c90244e27028e2d3fad83f9957e210246aed7a0f2e37821ee0ca5166c06b3","sha512":"5fab362bc3047cd4f87cbac911e498ea91d7bc1c31a7466b603a61d19c61a40c82389e036e16a613555f6caec5a818a6a67dfdcfce04b893d5556652bc95ce4d","ssdeep":"","tlshash":"9ce065e248df66a4a4210c8e336f25144e0e106b2009c52c3afa3e548fe35d9438076c","first_seen":"2025-02-01T17:56:43.358642Z","last_seen":"2026-04-04T03:48:09.476854Z","times_seen":20,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":16,"dns":0,"connect":1,"send":0,"wait":6,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Montserrat:100,100i,200,200i,300,300i,400,400i,500,500i,600,600i,700,700i,800,800i,900,900i","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gadgetsweb.xyz/homelander/","date":"2025-12-21T14:31:56.662Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:54:11 GMT","end":"Wed, 25 Feb 2026 15:54:10 GMT"},"fingerprint":{"sha1":"43:D3:3F:93:6C:4F:F7:67:58:9D:D5:48:20:4C:74:A2:69:DB:13:9F","sha256":"8C:DB:D2:85:E1:AB:12:7B:1D:5A:65:A7:EC:22:67:6F:B3:A6:65:01:28:29:FA:D2:3B:01:8D:10:7E:4D:09:52"}}},"request":{"raw":"GET /css?family=Montserrat:100,100i,200,200i,300,300i,400,400i,500,500i,600,600i,700,700i,800,800i,900,900i HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gadgetsweb.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 21 Dec 2025 14:31:56 GMT\r\ndate: Sun, 21 Dec 2025 14:31:56 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32832,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"bcd2a357a0584de6104bb44722d6c259","sha1":"6e07ca403758ea6f34632f02f5634f397acbeb30","sha256":"af5abb977620003efaf1e16e703472ff6c962064cede280b86c51495c9243f75","sha512":"fcb293b5b9152cf851571050b7b7abf6688a3a438684f6e106321d9b447341f3f76863487359dd4df88ca5e39ab662b12200b319175ecc50bc2a7b74e4e812c0","ssdeep":"384:A3Mw3hF363636xwSFXLTew3FsccLwgFx9dwwVFGGeFwmFjHnCw7FYIw/wkF9pR0P:0//aaz/QMib","tlshash":"ace2ac51101ae500a7432cca23cf7d26ce4e62667494c476bbfe2ca8bde5c361361b7d","first_seen":"2025-09-05T03:00:03.793695Z","last_seen":"2026-04-05T02:45:08.845111Z","times_seen":3378,"resource_available":false,"data":null}},"time_used":311,"timings":{"blocked":127,"dns":1,"connect":28,"send":0,"wait":47,"receive":0,"ssl":106},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.cdnfonts.com/s/12558/trebuc.woff","fqdn":"fonts.cdnfonts.com","domain":"cdnfonts.com","tld":"com"},"ip":{"addr":"172.67.184.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gadgetsweb.xyz/homelander/","date":"2025-12-21T14:31:57.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnfonts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Nov 2025 10:17:08 GMT","end":"Thu, 05 Feb 2026 11:15:09 GMT"},"fingerprint":{"sha1":"B9:7D:94:49:89:7C:6E:38:37:7E:D0:CD:6D:FF:99:13:66:F0:79:DA","sha256":"42:3A:81:1C:77:8F:FA:09:04:03:7D:C8:D9:29:DC:10:48:C2:FC:CD:CD:E1:1E:CB:B1:BE:6B:3B:C2:F4:8A:97"}}},"request":{"raw":"GET /s/12558/trebuc.woff HTTP/1.1\r\nHost: fonts.cdnfonts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://gadgetsweb.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.cdnfonts.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 21 Dec 2025 14:31:57 GMT\r\ncontent-type: font/woff\r\ncontent-length: 76692\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 05 Feb 2022 02:00:36 GMT\r\netag: \"12b94-5d73bbbc2bbf0\"\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 3872380\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E9X2qIHnRqo8%2BBkAn4a61JR8FdaUukooJBBXFVQf5c8X8%2FuphnyrkvKPoS2i%2BzGs8G%2BC8qNj45j412AQFQiq%2BQgkRmM998o1yztJdme8I1X2wA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b181605e91849c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":76692,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 76692, version 0.0","md5":"15ae772499285cd1361e0d4035138124","sha1":"da4998af83a8be8abfcddbc71ef5f7b98f51b4c1","sha256":"bd3257df1a6ea4aaf65cc2947546207f7228ce54b4e168496d2c47fa772ba387","sha512":"e20eec1a64702cc12e4d9e82af1a93225900eae6def25175aadd1c3974849f5181d139b3b8443fc3e1617ed8f171705170f99bacea3d0d7fed1ef2ba3d1341a3","ssdeep":"1536:1dpklxVg4yArRDybockDzr9EeS8NhatOuesfFvsWLnA:1glPg4vsocelS8ytqsfFTnA","tlshash":"9273128ce4f152c2da42d2396fd09bc4c718dd26f303da6b8f98fde059a240b189e752","first_seen":"2023-05-01T16:47:57Z","last_seen":"2026-04-04T03:48:09.465356Z","times_seen":99,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":34,"dns":6,"connect":0,"send":0,"wait":5,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}