{"report_id":"cf48326f-9db0-4bfa-91f9-e2f7d02bee25","version":6,"status":"done","tags":[],"date":"2026-05-23T21:06:25Z","url":{"schema":"https","addr":"noctrunhub.xyz","fqdn":"noctrunhub.xyz","domain":"noctrunhub.xyz","tld":"xyz"},"ip":{"addr":"75.2.60.5","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"noctrunhub.xyz/","fqdn":"noctrunhub.xyz","domain":"noctrunhub.xyz","tld":"xyz"},"title":"(1) New Message!","dom":{"size":102305,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"6ae9b24b5ea1d0ae59d9dcf1b7e0ade7","sha1":"7245d80f5f5780f2d9936a84405fc5190a7ff42d","sha256":"1b58490980f0bcfb88054194f7bd02f1bf9219c10882470541c64e794a4534ea","sha512":"dcf6f239535c4f91973eda10843894c50d98275af926288c493e66ca324ce1a2600e269c066964a54e63d1b111aba908609d69a34c72ea948de0a0b483c267ff","ssdeep":"768:NkF0M0wFrFk6FHF7PuguWlJgLuJufuDuRKCZgMSL0V3al7zKs:+aRwJW6VVgLKCZgMSL0V3al7b","tlshash":"08a3be5e3ea1098c1527871d47ff1e383768e1630965acaf73a2494acf87e5897c930b","dom_hash":"domhashe7dd010d3d2d144cb884afc56b594239","first_seen":"2026-05-23T21:04:28.379721Z","last_seen":"2026-05-23T21:06:34.328112Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"noctrunhub.xyz","fqdn":"noctrunhub.xyz","domain":"noctrunhub.xyz","tld":"xyz"},"ip":{"addr":"75.2.60.5","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-27T21:06:25Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":4,"urlquery":0,"analyzer":19}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-05-23T21:06:03Z","timestamp":1779570363,"ip_dst":{"addr":"104.18.38.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":39042,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Online Application Hosting Domain (supabase .co in TLS SNI)","source":"{\"timestamp\":\"2026-05-23T21:06:03.881365+0000\",\"flow_id\":1097164809521637,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.39\",\"src_port\":39042,\"dest_ip\":\"104.18.38.10\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2050130,\"rev\":1,\"signature\":\"ET INFO Observed Online Application Hosting Domain (supabase .co in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_01_17\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2024_01_17\"]}},\"tls\":{\"sni\":\"nlcwreopotnsqcbqphri.supabase.co\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":934,\"bytes_toclient\":1654,\"start\":\"2026-05-23T21:06:03.870885+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-05-23T21:06:03Z","timestamp":1779570363,"ip_dst":{"addr":"104.18.38.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":39054,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Online Application Hosting Domain (supabase .co in TLS SNI)","source":"{\"timestamp\":\"2026-05-23T21:06:03.900391+0000\",\"flow_id\":1046771958259032,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.39\",\"src_port\":39054,\"dest_ip\":\"104.18.38.10\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2050130,\"rev\":1,\"signature\":\"ET INFO Observed Online Application Hosting Domain (supabase .co in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_01_17\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2024_01_17\"]}},\"tls\":{\"sni\":\"nlcwreopotnsqcbqphri.supabase.co\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":934,\"bytes_toclient\":3518,\"start\":\"2026-05-23T21:06:03.892248+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-05-23T21:06:03Z","timestamp":1779570363,"ip_dst":{"addr":"104.18.38.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":39050,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Online Application Hosting Domain (supabase .co in TLS SNI)","source":"{\"timestamp\":\"2026-05-23T21:06:03.901106+0000\",\"flow_id\":10679817569533,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.39\",\"src_port\":39050,\"dest_ip\":\"104.18.38.10\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2050130,\"rev\":1,\"signature\":\"ET INFO Observed Online Application Hosting Domain (supabase .co in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_01_17\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2024_01_17\"]}},\"tls\":{\"sni\":\"nlcwreopotnsqcbqphri.supabase.co\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":934,\"bytes_toclient\":3517,\"start\":\"2026-05-23T21:06:03.886013+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-05-23T21:06:03Z","timestamp":1779570363,"ip_dst":{"addr":"104.18.38.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":39058,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Online Application Hosting Domain (supabase .co in TLS SNI)","source":"{\"timestamp\":\"2026-05-23T21:06:03.961352+0000\",\"flow_id\":1127708469457888,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.39\",\"src_port\":39058,\"dest_ip\":\"104.18.38.10\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2050130,\"rev\":1,\"signature\":\"ET INFO Observed Online Application Hosting Domain (supabase .co in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_01_17\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2024_01_17\"]}},\"tls\":{\"sni\":\"nlcwreopotnsqcbqphri.supabase.co\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3448,\"start\":\"2026-05-23T21:06:03.947168+0000\"}}"}],"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"workdeadlinededicate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"pl28598832.effectivegatecpm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"pl28598832.effectivegatecpm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"cdn.conditionfuneral.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"pl29007865.profitablecpmratenetwork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"pl29007865.profitablecpmratenetwork.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-23","alert":"Phishing Block","trigger":"pl29007865.profitablecpmratenetwork.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"pl28598832.profitablecpmratenetwork.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"pl28598832.profitablecpmratenetwork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-23","alert":"Phishing Block","trigger":"pl28598832.profitablecpmratenetwork.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"pl28598848.effectivegatecpm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"pl28598848.effectivegatecpm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"quarrelsomebitter.com","ip":{"addr":"88.85.69.211","port":443,"asn":35415,"as":"Webzilla B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2026-04-19","domain_rank":0,"first_seen":"2026-05-03T20:35:12.275144Z","last_seen":"2026-05-23T21:04:22.769965Z","alert_count":0,"request_count":8,"received_data":155147,"sent_data":5237,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.show-sb.com","ip":{"addr":"172.67.170.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-08-20","domain_rank":187612,"first_seen":"2024-08-31T03:46:04Z","last_seen":"2026-05-22T01:02:38.062166Z","alert_count":2,"request_count":1,"received_data":2054,"sent_data":494,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"pl28598832.effectivegatecpm.com","ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2025-10-07","domain_rank":0,"first_seen":"2026-05-23T21:04:22.17592Z","last_seen":"2026-05-23T21:04:22.17592Z","alert_count":2,"request_count":1,"received_data":98520,"sent_data":463,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"preferencenail.com","ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-07-01","domain_rank":20606,"first_seen":"2025-07-08T12:55:47.271261Z","last_seen":"2026-05-21T19:26:20.89766Z","alert_count":4,"request_count":2,"received_data":171912,"sent_data":824,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"workdeadlinededicate.com","ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2024-09-03","domain_rank":0,"first_seen":"2025-11-13T08:41:33.674059Z","last_seen":"2026-05-19T19:14:54.850891Z","alert_count":2,"request_count":2,"received_data":6781,"sent_data":958,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.conditionfuneral.com","ip":{"addr":"172.67.197.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-05-11","domain_rank":0,"first_seen":"2026-05-11T13:31:35.764861Z","last_seen":"2026-05-18T20:03:44.169386Z","alert_count":4,"request_count":4,"received_data":92123,"sent_data":1948,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"pl29007865.profitablecpmratenetwork.com","ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2026-03-17","domain_rank":0,"first_seen":"2026-05-23T21:04:22.187685Z","last_seen":"2026-05-23T21:04:22.187685Z","alert_count":3,"request_count":1,"received_data":93758,"sent_data":471,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"flushpersist.com","ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2025-07-01","domain_rank":23810,"first_seen":"2025-07-08T10:43:12.76905Z","last_seen":"2026-05-21T22:10:27.573735Z","alert_count":4,"request_count":2,"received_data":1060,"sent_data":1532,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"bolt.new","ip":{"addr":"104.26.6.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-07-09","domain_rank":52588,"first_seen":"2024-09-06T16:09:14Z","last_seen":"2026-05-22T17:50:45.847727Z","alert_count":0,"request_count":1,"received_data":727,"sent_data":443,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"pl28598832.profitablecpmratenetwork.com","ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2026-03-17","domain_rank":0,"first_seen":"2026-05-23T21:06:29.307855Z","last_seen":"2026-05-23T21:06:29.307855Z","alert_count":3,"request_count":1,"received_data":98530,"sent_data":471,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-05-17T22:21:01.756487Z","alert_count":0,"request_count":1,"received_data":17441,"sent_data":430,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"noctrunhub.xyz","ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2026-01-28","domain_rank":0,"first_seen":"2026-05-23T21:04:22.185608Z","last_seen":"2026-05-23T21:04:22.185608Z","alert_count":0,"request_count":6,"received_data":2523540,"sent_data":3063,"comment":"","tags":null,"fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google AdSense","description":"Google AdSense is a program run by Google through which website publishers serve advertisements that are targeted to the site content and audience.","website":"https://www.google.com/adsense/start/","common_platform_enumeration":"","icon":"Google AdSense.svg","categories":["Advertising"]}]},{"fqdn":"nlcwreopotnsqcbqphri.supabase.co","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":7,"received_data":1620950,"sent_data":4473,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"cdn.storageimagedisplay.com","ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2024-09-13","domain_rank":170153,"first_seen":"2024-09-13T12:56:32Z","last_seen":"2026-05-22T01:35:00.102055Z","alert_count":0,"request_count":2,"received_data":104519,"sent_data":922,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-05-17T22:18:09.532627Z","alert_count":0,"request_count":2,"received_data":87940,"sent_data":1098,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn62542989.ahacdn.me","ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2016-12-21","domain_rank":2102921,"first_seen":"2025-08-31T08:25:28.680337Z","last_seen":"2026-05-21T22:10:26.82389Z","alert_count":0,"request_count":1,"received_data":147992,"sent_data":466,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.married-ring.com","ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2026-04-06","domain_rank":0,"first_seen":"2026-05-21T22:10:25.450172Z","last_seen":"2026-05-21T22:10:25.450172Z","alert_count":0,"request_count":2,"received_data":208210,"sent_data":914,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"pl28598848.effectivegatecpm.com","ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2025-10-07","domain_rank":0,"first_seen":"2026-05-06T08:43:01.636494Z","last_seen":"2026-05-23T21:04:23.123313Z","alert_count":2,"request_count":1,"received_data":48955,"sent_data":461,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"tr.rbxcdn.com","ip":{"addr":"52.84.50.57","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2013-07-17","domain_rank":26027,"first_seen":"2019-05-23T12:45:13Z","last_seen":"2026-05-23T05:55:07.117951Z","alert_count":0,"request_count":9,"received_data":1283963,"sent_data":4392,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"realizationnewestfangs.com","ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2024-09-03","domain_rank":0,"first_seen":"2025-10-02T06:26:57.543488Z","last_seen":"2026-05-22T18:00:06.198399Z","alert_count":8,"request_count":8,"received_data":13289,"sent_data":7590,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fizzyacerbitymellow.com","ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2026-02-02","domain_rank":0,"first_seen":"2026-02-16T17:00:32.078738Z","last_seen":"2026-05-17T12:44:41.2878Z","alert_count":0,"request_count":1,"received_data":5974,"sent_data":455,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"protrafficinspector.com","ip":{"addr":"63.179.187.103","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2025-06-18","domain_rank":614186,"first_seen":"2025-07-25T22:45:21.95813Z","last_seen":"2026-05-21T04:03:31.668062Z","alert_count":0,"request_count":1,"received_data":767,"sent_data":444,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"pl28598832.profitablecpmratenetwork.com/d3/c8/16/d3c816227a7ae3184fc1874b2722fab1.js","fqdn":"pl28598832.profitablecpmratenetwork.com","domain":"profitablecpmratenetwork.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8df8855897c52ea0fe2c011020a2bfb2","sha1":"5eb47612e2c960af95485af0de512cdf0b9f4958","sha256":"e8921dea288dffea5d5ef0f6389292f5ed6c480a25d8dea70c1522e338b7f902","sha512":"bef2665ab710faee223f855eea252706faf78e18acf497b0968caf9e74a9b9d0065e8e00400f2e0468c14830b4c628f406cc524bbb6b1a380d6a7b4e9c28abea","ssdeep":"1536:iLPsaX4kt3cFjjAR908hExcqm6UHo9jrLOv+HNAd7kcFe/lZLgbanTh:O4RjjY94zL0dA/lDN","tlshash":"0c93d89c7f41b05c539a20b7212f682ff1198d06549ce4acea43f8f4ee6831ef476669","size":97665,"data":"","first_seen":"2026-05-23T21:06:34.441955Z","last_seen":"2026-05-23T21:06:34.441955Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"noctrunhub.xyz/","fqdn":"noctrunhub.xyz","domain":"noctrunhub.xyz","tld":"xyz"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"f4b20557d63dfe61c70ef50ffcbc6f26","sha1":"5cb0331281d7102f25fc0586c145ba30f2ea5833","sha256":"bf23e873e24904f431581d1336c99504bdaa3b084f9170615e1d7c1dad5e53e4","sha512":"9dcdb7d7dadd120d7f231ac05f013b716101025dbe4c25daf9329ef3f93a0058011c8ab0db9cbc198f3a8b2747289987bc701873289c30549952a4eedb7201ad","ssdeep":"","tlshash":"8fe05edfbae31245e99333a41fbf61c439b1a4ab5404c906782c89801ff0a77105bfc4","size":292,"data":"","first_seen":"2026-05-23T21:04:28.503183Z","last_seen":"2026-05-23T21:06:34.489213Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"quarrelsomebitter.com/b.X_VWsZdjGvlS0DYYWScW/QezmL9/uFZyUblNkAPOTqcKwXMGzgMW0/MRzdc/tfNuz/AdzNMFzsQd0NMuQO","fqdn":"quarrelsomebitter.com","domain":"quarrelsomebitter.com","tld":"com"},"ip":{"addr":"88.85.69.211","port":443,"asn":35415,"as":"Webzilla B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"979ddde5e391ece927db3cea3b050111","sha1":"56a23258fb4ecf542795fef61fa6046437569ad1","sha256":"d9503dff1fc56da9132b9e1a4fc70899e24e66cce7dbebea289cd8ddeae36cb2","sha512":"453ab131cc0eb464f0610c839099124676197df62676fa6613ca7e1a1ed04407e22e719d77abc92fb8b3041a3695e5fc656b6d7c0f7abbbb6ae20ed1ea5eaafb","ssdeep":"768:0lwiZg7J09MxiMZFvLnHvECJYgSboEBkleZ29oOcLluqhbpp4Gj+OiG82IACLvJf:0lHg7JpoIvECJZSboEBkleZ2ZcLlbppA","tlshash":"70f2b6c871c3642642eb507d713b7218b23a1465642db028bc79c8e4bca9e9f8577bbd","size":37560,"data":"","first_seen":"2026-05-23T21:06:34.341209Z","last_seen":"2026-05-23T21:06:34.341209Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"quarrelsomebitter.com/b/XMVAsed.GdlF0EYbWEcv/ceyma9uu/Z/UflOk-P/TkcBwGMlzbMuz/OZTsMNtwNYz/AJzyMXzbMP5SN/wI","fqdn":"quarrelsomebitter.com","domain":"quarrelsomebitter.com","tld":"com"},"ip":{"addr":"88.85.69.211","port":443,"asn":35415,"as":"Webzilla B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"a97a356b9f4f8c3d19d15cbbf8ee369b","sha1":"552068fc726ad2b10178b981454390e454f77b4a","sha256":"ef4859b5f9a3c330953b8da96824b07c47d50d65f2c3c18a93274a5b2775ce8f","sha512":"53a75b4a4add3de95fdac9fd93b7999b93830a76be8c48bd344a48ada77b0aa85a2c1c98477f4d143ed1175570a9fc803dab1677c0140b849290266270db1da0","ssdeep":"768:0lwiZg7J09MxiMZFvLnHvECJYgSboEBkleZ29oOcLluqhbpp4Gj+OiG82IApuHKO:0lHg7JpoIvECJZSboEBkleZ2ZcLlbpp2","tlshash":"fd03c7c871c3642642eb507c753b7218b23a1465642df028bc79c8e4bca9e9f8577bbd","size":37805,"data":"","first_seen":"2026-05-23T21:06:34.403805Z","last_seen":"2026-05-23T21:06:34.403805Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pl28598848.effectivegatecpm.com/8af20b6b650c82858ee24d3c66adbc7b/invoke.js","fqdn":"pl28598848.effectivegatecpm.com","domain":"effectivegatecpm.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"23b785978e59dcc57a3574f6ea801a68","sha1":"824245ac5c356008df75bfa17b890673862b5840","sha256":"7705d64b60c1b8f67369a2fe574ee9d5558c7cdc630ed98e0c9fd8238b4b2099","sha512":"e2e2bb54780b46972211efa0dec165b7ce185a9159c4764285c506103fc52258a36573d5abd05547b06e21b02953322a9bed520dcbe4f2e4836f21682d2e54fc","ssdeep":"768:e1WE5NpJEOlhP/0Nf962B74SJbyQuwMl/T+NBhfdClsoXnxEHBYsK1GY5:EWuNONf9/BUmbyxl/T+NBhgl44","tlshash":"9c2383c87f90b06e82e664b3233fcd0bf23a1d0151dc9698d917d0e9aa6d719c67da18","size":48098,"data":"","first_seen":"2026-05-23T21:04:28.471057Z","last_seen":"2026-05-23T21:06:34.480835Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pl28598832.effectivegatecpm.com/d3/c8/16/d3c816227a7ae3184fc1874b2722fab1.js","fqdn":"pl28598832.effectivegatecpm.com","domain":"effectivegatecpm.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e1fab6c52f985fc456327ba4e7cd026a","sha1":"b208dc25b299b71ef51c56dcbe9cd22cea1ed911","sha256":"14a88c878b283a8f6c0baf9c44d1b25f2f4d42939700814fc4552b25ef0ac12f","sha512":"6681d7d3d87d62bbdb6b31fcd2107ff86a1ab50cae8ef4d6a9c1ac157f2094d91649ad871e1c4b1609fc9a2a840082572ebcfb3b6b8476ac5e507d0b838a35be","ssdeep":"1536:iLPsaX4kt3cFjjAR908hExcqm6UHo9jrLOv+HNAd7kcFe/lZLgNCnJh:O4RjjY94zL0dA/lJf","tlshash":"6d93d79c7f41b05c539a20b7212f682ff1198d06549ce4acea43f8f4ee6831ef476669","size":97663,"data":"","first_seen":"2026-05-23T21:06:34.363692Z","last_seen":"2026-05-23T21:06:34.363692Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"workdeadlinededicate.com/9c/5d/14/9c5d14453d6b11cdec5b98e5ce5af0dc.js","fqdn":"workdeadlinededicate.com","domain":"workdeadlinededicate.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9454b75035bf1e7fbd8bc933d239763a","sha1":"05ac0f19656d2fd1882cb0ec3bc347cf2dbec25e","sha256":"261c1fc4c2d7eadeabb8edc511b4d3681cad5a27060128b4c3a6690484ccaffd","sha512":"8ec190336b0024f3fe41752f3d850ecb0e31157b2b2a80f9cabf627f95f05e0211f367f259bf6318c64243943faad6d9ee583b3b9893bf4463e0faa8c18272c8","ssdeep":"96:wa7EWyNaHUHRLQjFAqZPXU5ZLbCqEKNbuCKwMBPP2z6vgdgM:KWOSUoaXjxqiY+0gdL","tlshash":"11b144dd3f80b0d00ba620b36b1f251ab0694c21e55fd498f50b91a03e6da1fda67fb5","size":5126,"data":"","first_seen":"2026-05-04T13:56:21.08631Z","last_seen":"2026-08-10T10:29:39.496594Z","times_seen":7126,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","size":85379,"data":"","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-08-15T18:58:55.839295Z","times_seen":26545,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.married-ring.com/ecc874/affb19e803e3.js","fqdn":"www.married-ring.com","domain":"married-ring.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bb60b24a6cee40207666a201fb429207","sha1":"a53e2187196ca0f096a959038e190a68795b6cfd","sha256":"e6e5f44b078fb52374d01a56264ccb5074d501c61d32ceb8b25b0e7d24155cac","sha512":"3aa1bb5750fd3db16dac34e48516e2b89a93a1cacb26bb657e1616899bebd03678d0378189fe147dfe2d38d4e7f710626908a49593b8b211a3b7cdd2b1c0d22e","ssdeep":"1536:rM+iZ3YOYuyx6PUQwRxcs8P3nhkQ8vL7T7Q6eGozzwVEnHzHRbPv8:OijxEQq3P5Enne9zkWHLC","tlshash":"dfa33461350b64fd2ad0c1e7eb6720886c295810e469cca1ecd1d7c7d6eb8e3429b5f7","size":103674,"data":"","first_seen":"2026-05-21T22:10:52.017008Z","last_seen":"2026-05-24T21:45:46.151269Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c3ed2947407dba7dbc086ca113ff9f6","sha1":"99147108b198ca7698556d526a26781b71001330","sha256":"28b7b929a659ec929acac0f37745a8ce1cd345a6f23a7b77db6fb15611247ffd","sha512":"be89ff17ff99e9903faff77e724f6540fc6f950cfb12c22c83a8ef9004f4c003639b2fb6e544b99784b423883df7f58492756450275539b11a8a0b67731467d7","ssdeep":"","tlshash":"4bf042167f244a7c45ffe3d5697f327e3ba2028a86c5110e7034574e087355156c6b6f","size":601,"data":"","first_seen":"2026-05-23T21:04:28.507621Z","last_seen":"2026-05-23T21:06:34.494894Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"noctrunhub.xyz/","fqdn":"noctrunhub.xyz","domain":"noctrunhub.xyz","tld":"xyz"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"65a8f3c75320c82c9dbf7120247f54fc","sha1":"6b441c12f96b8903b6ec95c56f6786eb74a84f0b","sha256":"1f7abb677b235024d192956bade8b54d4d95534932f2960f97441c666f1657cf","sha512":"1ab0212296185c95767e115fe441c36c4439e6135373a3d84e0e3613b212254f7eca5adb78eab6da8c9d29ba74f9dfd9236e94976011cc9822f0cd551834f9cb","ssdeep":"","tlshash":"90f0279d88731420126b206823ab21106961902f0c82e405baaed64a5fd0dadc1a6a5a","size":489,"data":"","first_seen":"2026-05-23T21:04:28.512982Z","last_seen":"2026-05-23T21:06:34.502446Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pl29007865.profitablecpmratenetwork.com/d2/0b/ae/d20baef8978de37611d98b1b8882082b.js","fqdn":"pl29007865.profitablecpmratenetwork.com","domain":"profitablecpmratenetwork.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b5cd7abaab476e08a3c8396a4496b6b7","sha1":"65613472922a353f665e60a714e7ac6a3f478d92","sha256":"c9cb8432247919f29f195feafe559bc3acef4dadf84bd9fac5974c42ab6acfc3","sha512":"2213210df919d4abaf176b8503d11683f1588eb80ffa8830f8a0c85ba5be02de2cdea511cd0797d784e7bf44ff64ef4afa87670fdeae6691dee7b0fd03e007b1","ssdeep":"1536:vp941I379G73WLJkntq9ER4UHdVsXQdAX:vYKhUtq9t3","tlshash":"0f93f78c3fd970ed825a6073236fa116f15b5c527648e888d113b9e9fefc31ada31909","size":92893,"data":"","first_seen":"2026-05-23T21:04:28.443438Z","last_seen":"2026-05-23T21:06:34.377091Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"quarrelsomebitter.com/aNWOZ_y.PQ2RQS9TM-TVcW3XOYT_Ua3bMcDdM-2fMgzhki2_OkTlcm4nN-DpMqxrMsi_Zupvcw2x1-1zbAHBRCp_dEGFFGnHP-TJNKlLNM2_ZOjPOQDRN-iTNU2VUW4_ZYDZAawbY-jdEeyfMgj_kizjYkWlU-5nNozpEq5_ZsWtNukvM-mxMyyzJAm_1C1DbEHFR-pHdIGJFKn_YMmNFOuPb-mRVSyTPUX_RWyXdYWZU-mbccndJep_ZgDh0izjZ-TldmmnYoz_gqzrYsjtd-lvOwGxQyw_MAGBICxDM-jFIG5HMI2_FKlLOMTNc-xPOQWRVSj_ZUDVJWjXM-iZZa6bbc2_5elfagWhQ-9jNkzlAmz_MozpQqyrO-Qt?iframeId=zfkfav","fqdn":"quarrelsomebitter.com","domain":"quarrelsomebitter.com","tld":"com"},"ip":{"addr":"88.85.69.211","port":443,"asn":35415,"as":"Webzilla B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"d30ef272a15eb78a386bfe61d9eddedd","sha1":"5531ecd14aa0c06aac6c24326c48a2398a154ce7","sha256":"ae68e64c9badf0dfc5b4f824aca333736f03d1b486acf4cb18830e8df4c3d1e4","sha512":"01c8bb0e94a1ba297045e1ffcd813b65b7462c0edbf5dec610027723037e517559fb74a9f6b293aae4276034546e2c2dbcec7aaf9efa2963fedd3cea73fb7e1c","ssdeep":"","tlshash":"d021639b989005af46828644b759b13437322618321064b2f2fe7a422b889de84613dd","size":1111,"data":"","first_seen":"2026-05-23T21:06:34.507013Z","last_seen":"2026-05-23T21:06:34.507013Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","size":85379,"data":"","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-08-15T18:58:55.839295Z","times_seen":26545,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"noctrunhub.xyz/assets/index-Cw0dH60j.js","fqdn":"noctrunhub.xyz","domain":"noctrunhub.xyz","tld":"xyz"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"97c2ab8b645b2fe9688b016a7c3f1266","sha1":"0093dad28e1ee873374ea82f4d938383719645c6","sha256":"a689b32a8780f23700fa716456d043804f6117ed510925ea1290b16e4e52e16c","sha512":"0edcd20ca9d10cec564a983ba5ddd247ae99f8cb7d437f701539df912e09568d532d20654772b5e20244565871b06e3889df7f73b4babbfda5593c87f4bc496e","ssdeep":"6144:FGlsUDhYvxSQS3d/rLjkQV+wDOsFUSLctquSE+UMntMHnrBE0NlcIKTrnOe1XSQG:g2ouYfUttx3I1XSQHO32iI4Lvxyg","tlshash":"30f47d44b152ba6d5af349e4a43f1105b32f1a29f90ec4e5f07cd89a29b400a7677bfc","size":784762,"data":"","first_seen":"2026-05-23T21:04:28.454692Z","last_seen":"2026-05-23T21:06:34.381392Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"quarrelsomebitter.com/bpX.VMsAd/Ghln0iYaWTce/veZmC9JuzZDUOlkkkPpT-cfweM/ziMR0zMVj/E-tJNkzvAwzeM/zsQyypN/QL","fqdn":"quarrelsomebitter.com","domain":"quarrelsomebitter.com","tld":"com"},"ip":{"addr":"88.85.69.211","port":443,"asn":35415,"as":"Webzilla B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"9a62ab2112a10c96e2db33216735d5db","sha1":"851815773497f2d28bec8994591677192fccd38a","sha256":"c963bd43cbeeb2f99fcf3935a3990fabacf3e88b3e1bd013f183b2f96e21c26d","sha512":"ce93adef11b68426778bbff195421767dfb15fd691f1357e7df51fd3749687595093df77babde328dc3581491b7d28878fac8248cb223afc9177c89e1f2120d1","ssdeep":"1536:0lHg7JpoIvECJZSboEBkleZ2ZcLlbpp4G5iG82IrcjHicPTdsVgsMePr5:SDgoboEBkleZy+pp4GYr8dsVgsMi","tlshash":"1943e9c8b186643a42db503d713f620973361465642db028bc79c8e9acbdd8f8677bbd","size":56537,"data":"","first_seen":"2026-05-23T21:06:34.457206Z","last_seen":"2026-05-23T21:06:34.457206Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fizzyacerbitymellow.com/53/23/86/5323869a8beda1d7db01e9c875b2f49f.js","fqdn":"fizzyacerbitymellow.com","domain":"fizzyacerbitymellow.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9454b75035bf1e7fbd8bc933d239763a","sha1":"05ac0f19656d2fd1882cb0ec3bc347cf2dbec25e","sha256":"261c1fc4c2d7eadeabb8edc511b4d3681cad5a27060128b4c3a6690484ccaffd","sha512":"8ec190336b0024f3fe41752f3d850ecb0e31157b2b2a80f9cabf627f95f05e0211f367f259bf6318c64243943faad6d9ee583b3b9893bf4463e0faa8c18272c8","ssdeep":"96:wa7EWyNaHUHRLQjFAqZPXU5ZLbCqEKNbuCKwMBPP2z6vgdgM:KWOSUoaXjxqiY+0gdL","tlshash":"11b144dd3f80b0d00ba620b36b1f251ab0694c21e55fd498f50b91a03e6da1fda67fb5","size":5126,"data":"","first_seen":"2026-05-04T13:56:21.08631Z","last_seen":"2026-08-10T10:29:39.496594Z","times_seen":7126,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"workdeadlinededicate.com/9c/5d/14/9c5d14453d6b11cdec5b98e5ce5af0dc.js","fqdn":"workdeadlinededicate.com","domain":"workdeadlinededicate.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://noctrunhub.xyz/","date":"2026-05-23T21:06:04.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"workdeadlinededicate.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 00:44:47 GMT","end":"Mon, 27 Jul 2026 00:44:46 GMT"},"fingerprint":{"sha1":"B2:89:22:5D:2D:93:D6:5F:5A:1E:20:6A:F9:7C:82:61:CD:1B:4B:5A","sha256":"B7:17:42:1C:C7:69:36:5F:B7:F6:FC:74:D7:06:80:33:40:84:19:A9:7B:C3:25:DA:2D:5B:DF:90:9B:69:F4:EF"}}},"request":{"raw":"GET /9c/5d/14/9c5d14453d6b11cdec5b98e5ce5af0dc.js HTTP/1.1\r\nHost: workdeadlinededicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://noctrunhub.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sat, 23 May 2026 21:06:04 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 2569\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Mobile,Device-Stock-UA,X-UCBrowser-Device-UA,User-Agent,Sec-CH-UA-Platform-Version,Sec-CH-UA,X-Device-User-Agent,X-OperaMini-Phone-UA,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List\r\nx-envoy-upstream-service-time: 2\r\nHost: workdeadlinededicate.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 57d83164a56affca8f465dfc1eb92e5b\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5126,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5126), with no line terminators","md5":"9454b75035bf1e7fbd8bc933d239763a","sha1":"05ac0f19656d2fd1882cb0ec3bc347cf2dbec25e","sha256":"261c1fc4c2d7eadeabb8edc511b4d3681cad5a27060128b4c3a6690484ccaffd","sha512":"8ec190336b0024f3fe41752f3d850ecb0e31157b2b2a80f9cabf627f95f05e0211f367f259bf6318c64243943faad6d9ee583b3b9893bf4463e0faa8c18272c8","ssdeep":"96:wa7EWyNaHUHRLQjFAqZPXU5ZLbCqEKNbuCKwMBPP2z6vgdgM:KWOSUoaXjxqiY+0gdL","tlshash":"11b144dd3f80b0d00ba620b36b1f251ab0694c21e55fd498f50b91a03e6da1fda67fb5","first_seen":"2026-05-04T13:56:21.08631Z","last_seen":"2026-08-10T10:29:39.496594Z","times_seen":7126,"resource_available":true,"data":null}},"time_used":649,"timings":{"blocked":274,"dns":1,"connect":91,"send":0,"wait":95,"receive":1,"ssl":185},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"workdeadlinededicate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"noctrunhub.xyz/chatgpt_image_29_01_2026,_13_14_08.png","fqdn":"noctrunhub.xyz","domain":"noctrunhub.xyz","tld":"xyz"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://noctrunhub.xyz/","date":"2026-05-23T21:06:05.601Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"noctrunhub.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 29 Mar 2026 23:03:49 GMT","end":"Sat, 27 Jun 2026 23:03:48 GMT"},"fingerprint":{"sha1":"E6:15:7A:45:66:B7:CA:02:D8:5B:B6:F0:08:BD:72:A6:F4:1F:C5:FC","sha256":"B7:10:89:5A:58:2C:9D:17:3C:D6:C4:CD:E4:E5:C6:6C:13:5E:4B:32:E0:BD:A1:F9:42:8B:F8:FF:29:98:28:49"}}},"request":{"raw":"GET /chatgpt_image_29_01_2026,_13_14_08.png HTTP/1.1\r\nHost: noctrunhub.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://noctrunhub.xyz/\r\nCookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=aa2145c7-28f4-4fe8-8464-b398d39c0e09%3A1%3A1; sb_main_d20baef8978de37611d98b1b8882082b=1; sb_count_d20baef8978de37611d98b1b8882082b=1; hu8935j4i9fq3hpuj9q39=true; s9ifs0idfjlwfie32dekl=0; pp_main_d3c816227a7ae3184fc1874b2722fab1=1; pbpr0tpuw4isk85t8yg3jb2lj5vqf=realizationnewestfangs.com\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 368\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-type: image/png\r\ndate: Sat, 23 May 2026 21:06:05 GMT\r\netag: \"f3c3b5195313f5b9b278dbfd0de51162-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KSBAHN5BB1AF6SE5WQYVYH1C\r\ncontent-length: 832660\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":832660,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGB, non-interlaced","md5":"3fb4a07e96bcd07dcc4486b241bf067b","sha1":"8bcbe8ec1879892fb9987e1c73844fcc5146eedc","sha256":"17d799ceade68e370cc85407f3b8a30a5894eeb1cf2bd5014426c2abd7515b88","sha512":"3d9de55fc350d1333775dea30d8781be205fb494d72372e48b7f199bd909e8b68e26994436e223a0f2c37b93651263b71b98d7475237b79974bde705e188282e","ssdeep":"24576:jGqyZ6oCd0cX34Z14yfAK7GmXCe6ubWvbUMy+XNP71v:jGqyZQ0cHQiqVGkj69z0INP7l","tlshash":"24052369b6d0ef94db1bb576d06e2f30453e8ad56cc2961c04fbe5800c58b0db91be2e","first_seen":"2026-05-23T21:04:28.459599Z","last_seen":"2026-05-23T21:06:34.336697Z","times_seen":2,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":123,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"noctrunhub.xyz/chatgpt_image_29_01_2026,_13_14_08.png","fqdn":"noctrunhub.xyz","domain":"noctrunhub.xyz","tld":"xyz"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://noctrunhub.xyz/","date":"2026-05-23T21:06:03.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"noctrunhub.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 29 Mar 2026 23:03:49 GMT","end":"Sat, 27 Jun 2026 23:03:48 GMT"},"fingerprint":{"sha1":"E6:15:7A:45:66:B7:CA:02:D8:5B:B6:F0:08:BD:72:A6:F4:1F:C5:FC","sha256":"B7:10:89:5A:58:2C:9D:17:3C:D6:C4:CD:E4:E5:C6:6C:13:5E:4B:32:E0:BD:A1:F9:42:8B:F8:FF:29:98:28:49"}}},"request":{"raw":"GET /chatgpt_image_29_01_2026,_13_14_08.png HTTP/1.1\r\nHost: noctrunhub.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://noctrunhub.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 366\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-type: image/png\r\ndate: Sat, 23 May 2026 21:06:03 GMT\r\netag: \"f3c3b5195313f5b9b278dbfd0de51162-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KSBAHKDTX9EWYBMQKTF736NG\r\ncontent-length: 832660\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":832660,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGB, non-interlaced","md5":"3fb4a07e96bcd07dcc4486b241bf067b","sha1":"8bcbe8ec1879892fb9987e1c73844fcc5146eedc","sha256":"17d799ceade68e370cc85407f3b8a30a5894eeb1cf2bd5014426c2abd7515b88","sha512":"3d9de55fc350d1333775dea30d8781be205fb494d72372e48b7f199bd909e8b68e26994436e223a0f2c37b93651263b71b98d7475237b79974bde705e188282e","ssdeep":"24576:jGqyZ6oCd0cX34Z14yfAK7GmXCe6ubWvbUMy+XNP71v:jGqyZQ0cHQiqVGkj69z0INP7l","tlshash":"24052369b6d0ef94db1bb576d06e2f30453e8ad56cc2961c04fbe5800c58b0db91be2e","first_seen":"2026-05-23T21:04:28.459599Z","last_seen":"2026-05-23T21:06:34.336697Z","times_seen":2,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"quarrelsomebitter.com/b.X_VWsZdjGvlS0DYYWScW/QezmL9/uFZyUblNkAPOTqcKwXMGzgMW0/MRzdc/tfNuz/AdzNMFzsQd0NMuQO","fqdn":"quarrelsomebitter.com","domain":"quarrelsomebitter.com","tld":"com"},"ip":{"addr":"88.85.69.211","port":443,"asn":35415,"as":"Webzilla B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://noctrunhub.xyz/","date":"2026-05-23T21:06:03.856Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"quarrelsomebitter.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Apr 2026 16:05:02 GMT","end":"Sat, 18 Jul 2026 16:05:01 GMT"},"fingerprint":{"sha1":"D0:3E:F6:80:E3:E3:52:21:5F:40:0F:BE:27:4E:56:19:B2:12:93:A3","sha256":"85:08:C9:99:5A:F1:9D:34:2D:79:C1:83:99:9B:59:C6:27:37:09:A5:6C:65:37:4F:CB:A0:FD:DE:85:12:42:31"}}},"request":{"raw":"GET /b.X_VWsZdjGvlS0DYYWScW/QezmL9/uFZyUblNkAPOTqcKwXMGzgMW0/MRzdc/tfNuz/AdzNMFzsQd0NMuQO HTTP/1.1\r\nHost: quarrelsomebitter.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://noctrunhub.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 23 May 2026 21:06:03 GMT\r\ncontent-type: application/javascript\r\nexpires: Mon, 26 Jul 2011 05:00:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\naccept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-origin: https://noctrunhub.xyz\r\nlast-modified: Sat, 23 May 2026 21:06:03 GMT\r\naccess-control-allow-headers: Content-Type\r\nx-frame-options: DENY\r\naccess-control-allow-methods: GET\r\naccess-control-allow-credentials: true\r\nset-cookie: uniqCookie=966e375ea512dcc6e96eb616308ca436; max-age=1782162364; path=/\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":37560,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (23392)","md5":"979ddde5e391ece927db3cea3b050111","sha1":"56a23258fb4ecf542795fef61fa6046437569ad1","sha256":"d9503dff1fc56da9132b9e1a4fc70899e24e66cce7dbebea289cd8ddeae36cb2","sha512":"453ab131cc0eb464f0610c839099124676197df62676fa6613ca7e1a1ed04407e22e719d77abc92fb8b3041a3695e5fc656b6d7c0f7abbbb6ae20ed1ea5eaafb","ssdeep":"768:0lwiZg7J09MxiMZFvLnHvECJYgSboEBkleZ29oOcLluqhbpp4Gj+OiG82IACLvJf:0lHg7JpoIvECJZSboEBkleZ2ZcLlbppA","tlshash":"70f2b6c871c3642642eb507d713b7218b23a1465642db028bc79c8e4bca9e9f8577bbd","first_seen":"2026-05-23T21:06:34.341209Z","last_seen":"2026-05-23T21:06:34.341209Z","times_seen":1,"resource_available":true,"data":null}},"time_used":283,"timings":{"blocked":107,"dns":0,"connect":19,"send":0,"wait":69,"receive":0,"ssl":81},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tr.rbxcdn.com/180DAY-0bc6c7741481792c60b9a4c5cbc7f936/480/270/Image/Png/noFilter","fqdn":"tr.rbxcdn.com","domain":"rbxcdn.com","tld":"com"},"ip":{"addr":"52.84.50.57","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://noctrunhub.xyz/","date":"2026-05-23T21:06:04.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rbxcdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 09 Oct 2025 00:00:00 GMT","end":"Sat, 07 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0D:DC:44:16:2A:50:86:97:28:B7:54:7B:F1:62:AE:8D:85:A2:B2:8B","sha256":"E6:A2:4B:B5:0E:CF:E8:60:AD:08:DA:72:4E:0E:FB:04:62:FA:BC:04:9A:44:20:C8:C3:69:23:4A:74:90:B4:F4"}}},"request":{"raw":"GET /180DAY-0bc6c7741481792c60b9a4c5cbc7f936/480/270/Image/Png/noFilter HTTP/1.1\r\nHost: tr.rbxcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://noctrunhub.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/Png\r\ncontent-length: 211556\r\ndate: Wed, 01 Apr 2026 14:01:30 GMT\r\nserver: public-gateway\r\ncache-control: no-cache\r\nedge-cache-tag: 180DAY-0bc6c7741481792c60b9a4c5cbc7f936\r\nstrict-transport-security: max-age=31536000\r\nx-frame-options: SAMEORIGIN\r\nroblox-machine-id: e06aa6cc-c739-e45b-e663-b11dfb0a7009\r\nx-envoy-upstream-service-time: 768\r\nx-terms-message: Terms apply https://rblx.co/TOU.\r\nx-ratelimit-limit: 300000, 300000;w=60\r\nx-ratelimit-remaining: 286970\r\nx-ratelimit-reset: 30\r\nx-ingress-proxy: true\r\nx-roblox-edge: c080\r\nreport-to: {\"group\":\"network-errors\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://ncs.roblox.com/upload\"}]}\r\nnel: {\"report_to\":\"network-errors\",\"max_age\":604800,\"success_fraction\":0,\"failure_fraction\":0.05,\"response_headers\":[\"Rbx-Cdn-Provider\",\"vary\"]}\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 1ad6d29ff66cbe7838d3a30dae2f9382.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: PcrB6VbtUqp3slbTw6WlAi5kIT7-_Uwr-qf_XNPvqiKlIZfSwBNndA==\r\nage: 4518273\r\nrbx-cdn-provider: aws\r\ntiming-allow-origin: *\r\nvary: Origin\r\nserver-timing: cdn-cache-hit,cdn-pop;desc=\"OSL50-P3\",cdn-rid;desc=\"PcrB6VbtUqp3slbTw6WlAi5kIT7-_Uwr-qf_XNPvqiKlIZfSwBNndA==\",cdn-hit-layer;desc=\"EDGE\",cdn-downstream-fbl;dur=3\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":211556,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 480 x 270, 8-bit/color RGBA, non-interlaced","md5":"8ac068ede63b82696c1763543f39d667","sha1":"4b95617e3a0b545bced26b99fc69e41f39bf6004","sha256":"8f54d75c5843f70f30c9d1d1f969e99d8101b859aeeee3e2bf26249ee9588ee0","sha512":"181d4dcd41c71f5a717f03f4b7e80ec071490431e09a03894937287799bff99049eade533c9c4c79c3be147b0f99206e617ba98075fce3fe339e337ee59ebf28","ssdeep":"6144:w5r8Dei0TmKveVQRTm/fe4BXCUsfTG/CJkg+CZITuRs:U8GSKveVQRTm/WINCug+CZeua","tlshash":"ea2423b84aae6c1365cb52ca45d35a032bfbe0d20d5bf03ee685b091e880dd76d0ed74","first_seen":"2026-05-23T21:06:34.345921Z","last_seen":"2026-05-23T21:06:34.345921Z","times_seen":1,"resource_available":false,"data":null}},"time_used":363,"timings":{"blocked":166,"dns":136,"connect":1,"send":0,"wait":18,"receive":5,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tr.rbxcdn.com/180DAY-d72c3cae696292e59f459d51dc79e17d/480/270/Image/Png/noFilter","fqdn":"tr.rbxcdn.com","domain":"rbxcdn.com","tld":"com"},"ip":{"addr":"52.84.50.57","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://noctrunhub.xyz/","date":"2026-05-23T21:06:04.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rbxcdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 09 Oct 2025 00:00:00 GMT","end":"Sat, 07 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0D:DC:44:16:2A:50:86:97:28:B7:54:7B:F1:62:AE:8D:85:A2:B2:8B","sha256":"E6:A2:4B:B5:0E:CF:E8:60:AD:08:DA:72:4E:0E:FB:04:62:FA:BC:04:9A:44:20:C8:C3:69:23:4A:74:90:B4:F4"}}},"request":{"raw":"GET /180DAY-d72c3cae696292e59f459d51dc79e17d/480/270/Image/Png/noFilter HTTP/1.1\r\nHost: tr.rbxcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://noctrunhub.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/Png\r\ncontent-length: 235662\r\ndate: Sun, 26 Apr 2026 02:35:42 GMT\r\nserver: public-gateway\r\ncache-control: no-cache\r\nedge-cache-tag: 180DAY-d72c3cae696292e59f459d51dc79e17d\r\nstrict-transport-security: max-age=31536000\r\nx-frame-options: SAMEORIGIN\r\nroblox-machine-id: 55daf4b4-b636-8117-a9c0-62cb28208609\r\nx-envoy-upstream-service-time: 223\r\nx-terms-message: Terms apply https://rblx.co/TOU.\r\nx-ratelimit-limit: 300000, 300000;w=60\r\nx-ratelimit-remaining: 297479\r\nx-ratelimit-reset: 18\r\nx-ingress-proxy: true\r\nx-roblox-edge: c086\r\nreport-to: {\"group\":\"network-errors\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://ncs.roblox.com/upload\"}]}\r\nnel: {\"report_to\":\"network-errors\",\"max_age\":604800,\"success_fraction\":0,\"failure_fraction\":0.05,\"response_headers\":[\"Rbx-Cdn-Provider\",\"vary\"]}\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 1ad6d29ff66cbe7838d3a30dae2f9382.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: D91oqAEfclyo0FzTP_XEEkUv6jtTXGdCkF8zcqk76wA1rO_iKEruVA==\r\nage: 2399422\r\nrbx-cdn-provider: aws\r\ntiming-allow-origin: *\r\nvary: Origin\r\nserver-timing: cdn-cache-hit,cdn-pop;desc=\"OSL50-P3\",cdn-rid;desc=\"D91oqAEfclyo0FzTP_XEEkUv6jtTXGdCkF8zcqk76wA1rO_iKEruVA==\",cdn-hit-layer;desc=\"EDGE\",cdn-downstream-fbl;dur=2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":235662,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 480 x 270, 8-bit/color RGB, non-interlaced","md5":"691a1d6b28dc616e1f19a501e77ca781","sha1":"1e56cdf9b5969656fea5d0b2435facf8bba40dfd","sha256":"1048d2d251e71dc58d89ed038421560f81a193015e6530f94a98c1c65ffef442","sha512":"6ecd6e166f5739b00ff4ebad6a95c54f887c4ad1cec5dad0d31e32ca51115ce26c11f9faea4980cf9e86d8b7f562ba2d9d64031fdec5a9a83ee745d20e0713e6","ssdeep":"6144:yAx/QEHIGdk+y4wLVT13ymZ3E0PodN6UbgRLzm:RxIEH7wLT3XHy4ta","tlshash":"f134229a9173f292f60037e381ad6685bde4e0d279c715cb61c79431ab2d8fcbb44278","first_seen":"2026-05-23T21:06:34.350312Z","last_seen":"2026-05-23T21:06:34.350312Z","times_seen":1,"resource_available":false,"data":null}},"time_used":386,"timings":{"blocked":177,"dns":137,"connect":1,"send":0,"wait":16,"receive":6,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"realizationnewestfangs.com/impr.gif?sid=H4sIAAAAAAAC_1RSPWwcRRidddxRIAKEBtAKpQDBnWd_bm83KSJF_BVgA0mUgmr-1pl4b2e9s3t3vsohQIdkOqBav7PjBkXQBYkCneksIbEF0hVxQ0mJlIIKnX1S4JPm-9Gb4n3vfV_u16eki5rNP_rQTHSWsbVel7qv39a5NCPrrt90PdqlV93bOo_Cq-54kcrhFS8Iu_QN9z0ltsyaTz1KPeq57-pSpWa8doZCF98nXjeh3dDver0Q4_L_s60dWOZADk_JRWjZPvtn-im0mCEf_PC2sluVKd56Z1BnrDIlhvLoVr6Vm1GOwdM2LR2k-dHyN4xtCflmBSY_Wm4AMzxYbACuW7Jy6TF4frSkCT48PGfKM6gcXD6D0XAGlc2g2QzC3IeWvxNASKxvIB88WDfliO2co2yBtmT1yd_Qo5asPn4B-eDh9UyP3Rsmqyttcotx2kCPZ9CbMxT1MarJCvToGKL6DFr-RtaefIB8cLBhMwMt55cZ872wJ_odP07DTpiquBOHUdjhQRLLIBFU0eRMIp3OwKyDevG0gzp1UBcOBnLuhjQOhceCKE2k6NOQhaFUnCaxTylLRB-1uAct9yDKXRTlLrb0Hqx0YCuCoWwOZWZ92zyQma25t6z-sgbN1FSb--zQVJsqJ2DlHkrZHOhi296HqC5MJ6mVU7NIjFfNlHHZTLWsCMrt-WXqJaoXsbgjacI6_X4kOkkSiU7Qi7w4ZXGSyuQgtVXd7Ben5LmFxM5PL6XYUnNX-pQzlcZJP5Yq6EeeJ5OYezyOY5_GPofVDbRdORNmoltyyzlBoVvy5vsKnB3DZscQ-mWw-hWwUQN2p8Ekf5gbUZV1fqfm3fHOBNI0KKpVVDvOfnZKnp9-cvP6L2deq6_-gBIn104fffzXF68-gigbFGWDu_pXgs3s3o8bRaUHesIW5t-oWKUugOmWkNk2hG7Ji_-UZ3d45cJrEMUubHFybf7tIr6DNQS8cJBpgkydkGWA8Qb2PzN_2u_bz7FZOuCZM-VZ6RzwrMy-Pqdp9dxNA-ULSuN-5AVxqrwglCLtxWEiI0aDQKGy7d2Ll37-NwAA__9ukKGKBQQAAA==","fqdn":"realizationnewestfangs.com","domain":"realizationnewestfangs.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://noctrunhub.xyz/","date":"2026-05-23T21:06:05.634Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"realizationnewestfangs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 23:41:18 GMT","end":"Sun, 26 Jul 2026 23:41:17 GMT"},"fingerprint":{"sha1":"A3:A7:19:A7:E1:1E:FA:B7:D5:D2:AB:89:E2:E5:2D:BA:31:4C:DC:31","sha256":"9B:B1:9D:73:D4:D6:68:DF:63:E8:A6:F5:27:EB:47:26:AA:6F:52:E3:A6:56:1C:FF:EE:AC:3E:F6:06:CE:09:CA"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1RSPWwcRRidddxRIAKEBtAKpQDBnWd_bm83KSJF_BVgA0mUgmr-1pl4b2e9s3t3vsohQIdkOqBav7PjBkXQBYkCneksIbEF0hVxQ0mJlIIKnX1S4JPm-9Gb4n3vfV_u16eki5rNP_rQTHSWsbVel7qv39a5NCPrrt90PdqlV93bOo_Cq-54kcrhFS8Iu_QN9z0ltsyaTz1KPeq57-pSpWa8doZCF98nXjeh3dDver0Q4_L_s60dWOZADk_JRWjZPvtn-im0mCEf_PC2sluVKd56Z1BnrDIlhvLoVr6Vm1GOwdM2LR2k-dHyN4xtCflmBSY_Wm4AMzxYbACuW7Jy6TF4frSkCT48PGfKM6gcXD6D0XAGlc2g2QzC3IeWvxNASKxvIB88WDfliO2co2yBtmT1yd_Qo5asPn4B-eDh9UyP3Rsmqyttcotx2kCPZ9CbMxT1MarJCvToGKL6DFr-RtaefIB8cLBhMwMt55cZ872wJ_odP07DTpiquBOHUdjhQRLLIBFU0eRMIp3OwKyDevG0gzp1UBcOBnLuhjQOhceCKE2k6NOQhaFUnCaxTylLRB-1uAct9yDKXRTlLrb0Hqx0YCuCoWwOZWZ92zyQma25t6z-sgbN1FSb--zQVJsqJ2DlHkrZHOhi296HqC5MJ6mVU7NIjFfNlHHZTLWsCMrt-WXqJaoXsbgjacI6_X4kOkkSiU7Qi7w4ZXGSyuQgtVXd7Ben5LmFxM5PL6XYUnNX-pQzlcZJP5Yq6EeeJ5OYezyOY5_GPofVDbRdORNmoltyyzlBoVvy5vsKnB3DZscQ-mWw-hWwUQN2p8Ekf5gbUZV1fqfm3fHOBNI0KKpVVDvOfnZKnp9-cvP6L2deq6_-gBIn104fffzXF68-gigbFGWDu_pXgs3s3o8bRaUHesIW5t-oWKUugOmWkNk2hG7Ji_-UZ3d45cJrEMUubHFybf7tIr6DNQS8cJBpgkydkGWA8Qb2PzN_2u_bz7FZOuCZM-VZ6RzwrMy-Pqdp9dxNA-ULSuN-5AVxqrwglCLtxWEiI0aDQKGy7d2Ll37-NwAA__9ukKGKBQQAAA== HTTP/1.1\r\nHost: realizationnewestfangs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://noctrunhub.xyz/\r\nCookie: uid_id2=aa2145c7-28f4-4fe8-8464-b398d39c0e09:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl28907366=1; slecd20baef8978de37611d98b1b8882082b=[6655446]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sat, 23 May 2026 21:06:05 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Sec-CH-UA-Mobile,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Platform,Device-Stock-UA,X-Device-User-Agent,User-Agent,Sec-CH-UA-Platform-Version,Sec-CH-UA,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model\r\nset-cookie: iprc_l+57977703d3c2e7f5afa952c965f1881a=6655446; expires=Sun, 24 May 2026 21:06:05 GMT; path=/; secure; SameSite=None\niprc_l:6655446=1; expires=Sun, 24 May 2026 21:06:05 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 2\r\nHost: realizationnewestfangs.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 231d0d506ebb78b5c8c6291bf024305c\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T19:04:39.868583Z","times_seen":17906266,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nlcwreopotnsqcbqphri.supabase.co/storage/v1/object/public/script-thumbnails/1778322105669-ajwggi.png","fqdn":"nlcwreopotnsqcbqphri.supabase.co","domain":"nlcwreopotnsqcbqphri.supabase.co","tld":"supabase.co"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://noctrunhub.xyz/","date":"2026-05-23T21:06:04.617Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supabase.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Apr 2026 07:48:36 GMT","end":"Wed, 29 Jul 2026 08:48:34 GMT"},"fingerprint":{"sha1":"CA:A1:55:FA:10:0A:42:25:AC:57:D5:30:F6:D2:6F:06:35:61:90:C0","sha256":"B9:B8:F4:CE:6C:86:1D:3D:D1:67:87:08:FA:4A:40:62:10:7E:E7:05:0B:52:82:0F:99:10:50:F1:2E:B2:91:00"}}},"request":{"raw":"GET /storage/v1/object/public/script-thumbnails/1778322105669-ajwggi.png HTTP/1.1\r\nHost: nlcwreopotnsqcbqphri.supabase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://noctrunhub.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T19:04:39.868583Z","times_seen":17906266,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tr.rbxcdn.com/180DAY-2da9181d1d07dfa504380928e9b51f7a/480/270/Image/Png/noFilter","fqdn":"tr.rbxcdn.com","domain":"rbxcdn.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://noctrunhub.xyz/","date":"2026-05-23T21:06:04.637Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /180DAY-2da9181d1d07dfa504380928e9b51f7a/480/270/Image/Png/noFilter HTTP/1.1\r\nHost: tr.rbxcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://noctrunhub.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T19:04:39.868583Z","times_seen":17906266,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.show-sb.com/sb/au/24/54/4e/24544ed07f7394384bbb75023b9b0b3a/1591713925.html","fqdn":"cdn.show-sb.com","domain":"show-sb.com","tld":"com"},"ip":{"addr":"172.67.170.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://noctrunhub.xyz/","date":"2026-05-23T21:06:05.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"show-sb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Apr 2026 00:48:28 GMT","end":"Fri, 03 Jul 2026 01:44:30 GMT"},"fingerprint":{"sha1":"21:8F:F6:2A:0C:60:8F:CF:6C:90:BD:69:DB:F8:82:BF:D5:02:9E:2A","sha256":"20:0D:6D:8F:30:A5:C6:F8:45:FA:9B:D0:D8:76:12:30:CC:08:8F:44:47:0D:A2:CA:80:14:E3:AA:E1:AF:EA:5F"}}},"request":{"raw":"GET /sb/au/24/54/4e/24544ed07f7394384bbb75023b9b0b3a/1591713925.html HTTP/1.1\r\nHost: cdn.show-sb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://noctrunhub.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://noctrunhub.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 23 May 2026 21:06:05 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Sat, 07 May 2022 03:21:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7gGiN0lIkY3%2Fe%2Bg5ekzDRA5F5NW%2BGSADEB0eYWnpHfIQfVp2tiqODzaaFK31hBbx90bV1OIU5pmwG%2BBHYqSVCFlCn7SOn6uviFc8nZWueR4XlkFvn2QC11pKsrw%2Bf0uv4dE%3D\"}]}\r\nage: 126\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: a00705bdce455684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1274,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"d0ad675486e71d2572491722d28ce9d9","sha1":"3dffb067589240dad5167db540b8af1e1f6b3355","sha256":"c8b69d3ee0e9fbe2d1c5c07bd250ba3d7edf5bf26e3567629e9e332248273daa","sha512":"d40b4a6f2771640afe909ab06b0292769d0f51f873b2d31cab579a71cd17929ec816378b6c836bed56699469ac90f457ccd2d0e5a1053d4bc7dc7c7738b3b7e4","ssdeep":"","tlshash":"a42168262cc9d07721b381d6ba302f9bfe96958bc84b690037fd1a535fbae44ca03507","first_seen":"2023-05-06T00:25:55Z","last_seen":"2026-08-15T18:19:00.608619Z","times_seen":1232,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":37,"dns":1,"connect":4,"send":0,"wait":10,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"noctrunhub.xyz/chatgpt_image_29_01_2026,_13_14_08.png","fqdn":"noctrunhub.xyz","domain":"noctrunhub.xyz","tld":"xyz"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://noctrunhub.xyz/","date":"2026-05-23T21:06:03.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"noctrunhub.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 29 Mar 2026 23:03:49 GMT","end":"Sat, 27 Jun 2026 23:03:48 GMT"},"fingerprint":{"sha1":"E6:15:7A:45:66:B7:CA:02:D8:5B:B6:F0:08:BD:72:A6:F4:1F:C5:FC","sha256":"B7:10:89:5A:58:2C:9D:17:3C:D6:C4:CD:E4:E5:C6:6C:13:5E:4B:32:E0:BD:A1:F9:42:8B:F8:FF:29:98:28:49"}}},"request":{"raw":"GET /chatgpt_image_29_01_2026,_13_14_08.png HTTP/1.1\r\nHost: noctrunhub.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://noctrunhub.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T19:04:39.868583Z","times_seen":17906266,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"quarrelsomebitter.com/Yu2vx-p.ZxWy5z0AZ_GCFD0EYFT-9HyIcJmKl_kMPNTORPk-ORWSYTzUN_jWMXyYYZz-BbkcNdWeE_ygYh2iMj2-MlTmUn5oM_TqMrzsMtD-VvjwYxWyI_xAMBmCEDy-","fqdn":"quarrelsomebitter.com","domain":"quarrelsomebitter.com","tld":"com"},"ip":{"addr":"88.85.69.211","port":443,"asn":35415,"as":"Webzilla B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://noctrunhub.xyz/","date":"2026-05-23T21:06:04.200Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"quarrelsomebitter.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Apr 2026 16:05:02 GMT","end":"Sat, 18 Jul 2026 16:05:01 GMT"},"fingerprint":{"sha1":"D0:3E:F6:80:E3:E3:52:21:5F:40:0F:BE:27:4E:56:19:B2:12:93:A3","sha256":"85:08:C9:99:5A:F1:9D:34:2D:79:C1:83:99:9B:59:C6:27:37:09:A5:6C:65:37:4F:CB:A0:FD:DE:85:12:42:31"}}},"request":{"raw":"POST /Yu2vx-p.ZxWy5z0AZ_GCFD0EYFT-9HyIcJmKl_kMPNTORPk-ORWSYTzUN_jWMXyYYZz-BbkcNdWeE_ygYh2iMj2-MlTmUn5oM_TqMrzsMtD-VvjwYxWyI_xAMBmCEDy- HTTP/1.1\r\nHost: quarrelsomebitter.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 44\r\nOrigin: https://noctrunhub.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://noctrunhub.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":44,"data":"ref=https%3A%2F%2Fnoctrunhub.xyz%2F\u0026prevRef="}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 23 May 2026 21:06:04 GMT\r\ncontent-length: 0\r\nexpires: Mon, 26 Jul 2011 05:00:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\naccept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T19:04:39.868583Z","times_seen":17906266,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nlcwreopotnsqcbqphri.supabase.co/storage/v1/object/public/script-thumbnails/1777710165463-0mz054.png","fqdn":"nlcwreopotnsqcbqphri.supabase.co","domain":"nlcwreopotnsqcbqphri.supabase.co","tld":"supabase.co"},"ip":{"addr":"104.18.38.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://noctrunhub.xyz/","date":"2026-05-23T21:06:04.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supabase.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Apr 2026 07:48:36 GMT","end":"Wed, 29 Jul 2026 08:48:34 GMT"},"fingerprint":{"sha1":"CA:A1:55:FA:10:0A:42:25:AC:57:D5:30:F6:D2:6F:06:35:61:90:C0","sha256":"B9:B8:F4:CE:6C:86:1D:3D:D1:67:87:08:FA:4A:40:62:10:7E:E7:05:0B:52:82:0F:99:10:50:F1:2E:B2:91:00"}}},"request":{"raw":"GET /storage/v1/object/public/script-thumbnails/1777710165463-0mz054.png HTTP/1.1\r\nHost: nlcwreopotnsqcbqphri.supabase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://noctrunhub.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 23 May 2026 21:06:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 119346\r\ncf-ray: a00705bb1cb7712a-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=3600\r\netag: \"34c272dbaef215d7b699977e6e20fc41\"\r\nlast-modified: Sat, 02 May 2026 08:22:47 GMT\r\nserver: cloudflare\r\nsb-gateway-mode: direct\r\nsb-gateway-version: 1\r\nsb-project-ref: nlcwreopotnsqcbqphri\r\nsb-request-id: 019e56a8-d0f9-7fd5-953b-cf890ce5db69\r\nx-robots-tag: none\r\nx-smart-cdn: true\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nset-cookie: __cf_bm=XefNnBenZ9PibNe8GUJYyvVegOZN0HXdrr6qIf0VZsU-1779570364.6592963-1.0.1.1-L_EG4L6_HKJuX4ku9Ys3ByEX_BUnVZSEE1yV0cNnDIlZF1Bx_rYT8GazeKUWs853JWRHgXxfnIHzo5ql8i50tdif35d.y1s5bASLxI_xblHCgvnBrUZtLXjK18Rd_TAu; HttpOnly; SameSite=None; Secure; Path=/; Domain=supabase.co; Expires=Sat, 23 May 2026 21:36:05 GMT\r\npriority: u=4,i=?0\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":119346,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 480 x 270, 8-bit/color RGB, non-interlaced","md5":"34c272dbaef215d7b699977e6e20fc41","sha1":"341675d8ac74132ee6096ba9bc91bc785e77fbc1","sha256":"640d8aa5a8a71eb6921dd24b922bf1673e78339490b5247033ea9c9bb78fa8d3","sha512":"b39c4ee10fb0a336f98a305fb29899629115b8bbbd25b7cbc55c95b06c1f99cb3fb8371d7e1efa7cfc9bf8ce8e9a898e1aeef2b37275510c2b63a89ee6bda1f3","ssdeep":"3072:ZTc22AOFqTIW4fbnMAyfQzPHFWS7RVcEIxB361aexfctVL:ZtOFyI55zdWPEIj61xfcL","tlshash":"9ac3128aeb1364a26e6e09a118f1d911a211fe945f7cf6ecf57685e209f0da738c0b50","first_seen":"2026-05-23T21:06:34.359844Z","last_seen":"2026-05-23T21:06:34.359844Z","times_seen":1,"resource_available":false,"data":null}},"time_used":375,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":363,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pl28598832.effectivegatecpm.com/d3/c8/16/d3c816227a7ae3184fc1874b2722fab1.js","fqdn":"pl28598832.effectivegatecpm.com","domain":"effectivegatecpm.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://noctrunhub.xyz/","date":"2026-05-23T21:06:03.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"effectivegatecpm.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 21:35:48 GMT","end":"Sat, 04 Jul 2026 21:35:47 GMT"},"fingerprint":{"sha1":"00:5B:7F:82:8B:8C:03:4F:58:4E:1C:74:BB:C2:B6:8B:E1:2F:A7:5C","sha256":"D6:6E:A3:BC:82:DE:B5:02:67:F0:AB:44:7A:50:4A:F9:12:98:1B:38:37:B4:40:28:79:05:74:4D:62:08:E4:73"}}},"request":{"raw":"GET /d3/c8/16/d3c816227a7ae3184fc1874b2722fab1.js HTTP/1.1\r\nHost: pl28598832.effectivegatecpm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://noctrunhub.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sat, 23 May 2026 21:06:04 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 35474\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Sec-CH-UA-Platform-Version,Sec-CH-UA,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Platform,Sec-CH-UA-Model,Device-Stock-UA,X-Device-User-Agent,X-OperaMini-Phone-UA,User-Agent,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 3\r\nHost: pl28598832.effectivegatecpm.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 55b021f59408a14ff22cc85e7109cc5c\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":97663,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"e1fab6c52f985fc456327ba4e7cd026a","sha1":"b208dc25b299b71ef51c56dcbe9cd22cea1ed911","sha256":"14a88c878b283a8f6c0baf9c44d1b25f2f4d42939700814fc4552b25ef0ac12f","sha512":"6681d7d3d87d62bbdb6b31fcd2107ff86a1ab50cae8ef4d6a9c1ac157f2094d91649ad871e1c4b1609fc9a2a840082572ebcfb3b6b8476ac5e507d0b838a35be","ssdeep":"1536:iLPsaX4kt3cFjjAR908hExcqm6UHo9jrLOv+HNAd7kcFe/lZLgNCnJh:O4RjjY94zL0dA/lJf","tlshash":"6d93d79c7f41b05c539a20b7212f682ff1198d06549ce4acea43f8f4ee6831ef476669","first_seen":"2026-05-23T21:06:34.363692Z","last_seen":"2026-05-23T21:06:34.363692Z","times_seen":1,"resource_available":true,"data":null}},"time_used":774,"timings":{"blocked":288,"dns":1,"connect":94,"send":0,"wait":100,"receive":92,"ssl":194},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"pl28598832.effectivegatecpm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"pl28598832.effectivegatecpm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"quarrelsomebitter.com/aNWOZ_y.PQ2RQS9TM-TVcW3XOYT_Ua3bMcDdM-2fMgzhki2_OkTlcm4nN-DpMqxrMsi_Zupvcw2x1-1zbAHBRCp_dEGFFGnHP-TJNKlLNM2_ZOjPOQDRN-iTNU2VUW4_ZYDZAawbY-jdEeyfMgj_kizjYkWlU-5nNozpEq5_ZsWtNukvM-mxMyyzJAm_1C1DbEHFR-pHdIGJFKn_YMmNFOuPb-mRVSyTPUX_RWyXdYWZU-mbccndJep_ZgDh0izjZ-TldmmnYoz_gqzrYsjtd-lvOwGxQyw_MAGBICxDM-jFIG5HMI2_FKlLOMTNc-xPOQWRVSj_ZUDVJWjXM-iZZa6bbc2_5elfagWhQ-9jNkzlAmz_MozpQqyrO-Qt?iframeId=zfkfav","fqdn":"quarrelsomebitter.com","domain":"quarrelsomebitter.com","tld":"com"},"ip":{"addr":"88.85.69.211","port":443,"asn":35415,"as":"Webzilla B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://noctrunhub.xyz/","date":"2026-05-23T21:06:04.160Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"quarrelsomebitter.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Apr 2026 16:05:02 GMT","end":"Sat, 18 Jul 2026 16:05:01 GMT"},"fingerprint":{"sha1":"D0:3E:F6:80:E3:E3:52:21:5F:40:0F:BE:27:4E:56:19:B2:12:93:A3","sha256":"85:08:C9:99:5A:F1:9D:34:2D:79:C1:83:99:9B:59:C6:27:37:09:A5:6C:65:37:4F:CB:A0:FD:DE:85:12:42:31"}}},"request":{"raw":"GET /aNWOZ_y.PQ2RQS9TM-TVcW3XOYT_Ua3bMcDdM-2fMgzhki2_OkTlcm4nN-DpMqxrMsi_Zupvcw2x1-1zbAHBRCp_dEGFFGnHP-TJNKlLNM2_ZOjPOQDRN-iTNU2VUW4_ZYDZAawbY-jdEeyfMgj_kizjYkWlU-5nNozpEq5_ZsWtNukvM-mxMyyzJAm_1C1DbEHFR-pHdIGJFKn_YMmNFOuPb-mRVSyTPUX_RWyXdYWZU-mbccndJep_ZgDh0izjZ-TldmmnYoz_gqzrYsjtd-lvOwGxQyw_MAGBICxDM-jFIG5HMI2_FKlLOMTNc-xPOQWRVSj_ZUDVJWjXM-iZZa6bbc2_5elfagWhQ-9jNkzlAmz_MozpQqyrO-Qt?iframeId=zfkfav HTTP/1.1\r\nHost: quarrelsomebitter.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://noctrunhub.xyz/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 23 May 2026 21:06:04 GMT\r\ncontent-type: text/html;charset=UTF-8\r\nvary: Accept-Encoding\r\nexpires: Mon, 26 Jul 2011 05:00:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\naccept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64\r\nx-step: is real impression\r\nx-ad-id: 534553\r\np3p: CP=\"CUR ADM OUR NOR STA NID\"\r\nlast-modified: Sat, 23 May 2026 21:06:04 GMT\r\nset-cookie: uniqCookie=c40688bde5b7ef4a94384aa505b5fa09; max-age=1782162364; path=/\nkadCCap=681631:2:1763300269;187145:1:1760276183;787505:1:1766446705;172736:4:1766148180;788494:1:1772548082;480766:15:1761200580;773283:1:1765049500;723659:1:1770865863;540373:1:1773486365;727625:1:1760387158;340989:4:1766884594;789616:1:1769167973;780330:1:1774862815;639733:1:1764361348;611366:1:1776958370;337454:1:1773508508;790667:1:1772661062;761031:1:1764198123;770142:1:1769374815;869708:1:1779568472;770155:1:1768117452;179116:1:1761091143;352095:1:1761415687;177035:1:1760306019;832912:1:1772395685;705955:5:1762464096;892613:1:1779255798;834370:1:1772699843;836596:1:1772859028;319840:1:1771775371;782630:4:1766243155;755173:1:1763104240;554656:1:1772104083;828804:1:1775245136;831339:1:1772045108;737338:4:1765014474;319026:2:1764132195;202595:1:1761091982;243581:4:1765744793;784217:1:1772395716;770152:1:1769371330;518003:1:1764797531;791450:64:1767001548;788124:1:1766876096;654646:1:1769388467;639730:1:1762539999;172038:1:1770988489;620216:1:1762717409;574303:1:1763245754;319027:1:1772656375;778355:1:1767211802;851675:1:1776638533;480751:1:1762452216;343686:1:1763782951;875194:1:1777913037;833228:1:1772481104;639351:1:1763853658; max-age=1811106364; path=/\nkadACap=1148264:1:1773564388;617592:1:1760599855;884030:1:1778785199;1213541:1:1779173761;1044153:1:1760700974;535713:1:1779250050;1177898:1:1774939325;1094262:64:1767781413;1081526:1:1766341368;1161828:1:1773541826;1047950:1:1771817541;448198:1:1766191438;613534:1:1770851058;1045168:1:1763729461;1068286:1:1777994156;384014:1:1768074049;1018554:1:1777566858;560695:2:1760862587;1097061:1:1765873599;1071745:1:1765721712;417809:1:1777327662;1081648:1:1766259023;1029610:1:1765964688;535727:1:1772717733;1080170:1:1770072115;1068446:4:1768724207;396855:1:1761091143;1103537:1:1772323013;1148503:1:1772057298;1213546:1:1778785225;1146274:1:1770861709;772296:1:1776449432;1148262:1:1773525195;772297:5:1767643467;1215140:1:1779484096;892490:1:1760577243;863845:4:1769234865;1151589:1:1779413659;1047949:1:1771165504;1213538:1:1778220454;1051729:1:1764801488;1132128:1:1772253309;1132126:1:1769726090;884034:1:1778785225;1012095:4:1768730207;1144858:1:1771940665;951033:1:1764530549;1047951:1:1765859337;1051867:1:1764730202;534731:1:1778731552;1204733:1:1777913037;1083595:1:1768258277;1146324:1:1770896901;947160:1:1763753983;1071956:1:1765721712;1195192:1:1777149723;1047954:1:1770746585;1021259:1:1771064862;1069459:1:1772195405;383973:4:1768582026;1047946:1:1770946979;534540:1:1776466829;534733:1:1779492964;631531:1:1777233604;1018555:1:1775083128;1132122:1:1771397630;1020380:4:1769594033;1098995:4:1765835722;1069638:1:1771940665;387560:4:1766148180;1215065:1:1779173751;884031:1:1778220455;1177905:1:1775629701;1020384:1:1777150079;560690:3:1761285251;1058800:1:1764659475;617590:1:1761233185;1132567:1:1774683944;1059468:4:1769648534;1141024:1:1771171300;1045452:1:1761091778;346327:1:1779535911;535732:1:1779073862;534555:1:1778437069;617241:1:1773508508;1148279:1:1770983574;1071709:1:1763231641;1059265:1:1764579376;1144874:1:1770745461;1151588:1:1779563146;1045165:1:1764324898;876566:1:1771164794;1071957:1:1766539824;535729:1:1778437069;1132121:1:1771508378;516969:1:1764746498;1171321:1:1776591474;1047953:1:1770468578;1171367:1:1776273276;1080974:1:1764352700;613535:1:1774445819;419321:1:1773858315;1206999:1:1778526611;1151592:1:1778352169;1172156:1:1775370145;902286:1:1768662578;1037297:1:1761177316;1212780:1:1779492417;1044176:1:1760700712;1172154:1:1775662135;637001:1:1776017392;944300:1:1760569836;1044161:1:1760700707;1080012:4:1769208262;1045163:1:1760773528;1081610:4:1766210516;772298:1:1772206836;1148261:1:1773525383;1094281:1:1765733497;637675:1:1775993810;1164826:1:1774542495;835776:4:1769336485;1037296:1:1761128106;1215142:1:1779295466;383975:1:1770674609;1177904:1:1775397138;1151591:1:1779069532;1215144:1:1778989221;1177908:1:1775394754;1059363:1:1764730201;419301:1:1776118086;679015:1:1776713865;1101890:1:1772553468;1215128:1:1779145918;1215070:2:1779173761;637002:1:1773713238;1068284:1:1779569301;1213536:1:1779173758;884033:1:1779173726;1069492:2:1769726989;446879:3:1760567745;863517:1:1770060229;386599:1:1770988489;651040:1:1763210271;1228863:1:1779531089;1213545:1:1779173724;1047948:1:1770735633;863435:1:1771940849;1172158:1:1776295928;1132123:1:1771536437;534810:1:1772364986;1079980:2:1769267027;1172155:1:1775673222;390509:1:1760567610;631501:4:1765590476;384007:1:1769052427;1207000:1:1777321019;617595:1:1760395292;1215067:1:1779173755;637003:1:1775286402;741472:1:1765104051;876570:1:1771113395;1069480:4:1769205018;1177903:1:1775401220;1215141:1:1779004730;876569:1:1771178455;1193952:1:1776233742;1123293:1:1770891614;876568:1:1770072840;516971:1:1770633292;1146341:1:1773525239;899813:1:1770807018;534545:1:1779531708;1037886:1:1761128105;1044066:1:1760700860;430133:1:1761091982;1079991:1:1772275778;1177907:1:1775468261;884035:1:1779173761;1215068:1:1779173640;534814:1:1777870585;637676:1:1776962071;1151590:1:1779531050;1132125:1:1770073891;1080458:1:1779550142;1170974:1:1774732841;884032:1:1778785320;1045164:1:1760865500;1049271:2:1768382306;1047947:1:1768097816;596738:1:1777833114;1094981:1:1767137869;1071727:1:1763462735;1215064:1:1779531064;534542:1:1779535050;741471:1:1761144703;884026:1:1778785309;884029:1:1779174073;1132554:2:1770110544;581897:1:1760567396;1155521:1:1774424827;534553:1:1779204923;1213535:1:1778785453;410254:1:1772916859;1081474:1:1764340529;1068287:3:1779152493;1213544:1:1779173764;1081306:1:1764132014;534535:1:1777263189;1202229:1:1779492416;1064766:1:1770276938;1070939:4:1763752607;1080024:1:1770459878;629000:1:1760706797;1071958:1:1766201596;884027:1:1775673323;1147388:1:1771909166;637674:1:1778874564;1146276:1:1770864184;629619:1:1778697991;1006270:1:1771941180;408266:1:1760276183;1109279:1:1769167973;1132127:1:1771397632;1155325:1:1772031916;884028:1:1775674266;1100599:1:1766618600;1177900:1:1775445792;1070796:1:1763038139;1172157:1:1775737484;1081649:1:1766376559;1148268:1:1772037452;1111983:1:1767825424;1054299:1:1763848650;1213539:1:1778785148;695566:1:1766734891;536740:1:1776580082;597409:1:1760597808;1213537:1:1779531088;1129213:1:1773701262;876567:1:1769689158; max-age=1811106364; path=/\nkadCSCap=869708:1:1779568472; path=/\nkadASCap=1151588:2:1779533981;1215140:1:1779484096;1215064:1:1779531064;534545:1:1779531708;1228863:1:1779531089;1212780:1:1779492417;346327:1:1779535911;1202229:1:1779492416;1213537:1:1779531088;1080458:1:1779550142;534733:1:1779492964;534542:1:1779535050;1068284:3:1779507449; path=/\nkadUnP3=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; max-age=1811106364; path=/\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3085,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (1557)","md5":"405f61519f6daae914ba89e755b7dc02","sha1":"79709ef383a3cc1815f7461f925c9d9c8188c313","sha256":"69f35a6e754b4590eee86e77bdcb312d447c59d6580c232304898a45220b33eb","sha512":"f6ae01518cbc52dd603378d9d352a7ef5d625f3ce2883ffcea99cdcf107a28d60006263d3dc62bfafcfa81ea8e2a197e5bc4e01a3dd6abac43f65fc829907d13","ssdeep":"","tlshash":"8351b89780d0a0af9611c5087bab79743432042d5695c8b5f2bfbfb21f2d6e5881636d","first_seen":"2026-05-23T21:06:34.367636Z","last_seen":"2026-05-23T21:06:34.367636Z","times_seen":1,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.conditionfuneral.com/sb/notifications/dating/default/us/desk-all/css/style.css","fqdn":"cdn.conditionfuneral.com","domain":"conditionfuneral.com","tld":"com"},"ip":{"addr":"172.67.197.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://noctrunhub.xyz/","date":"2026-05-23T21:06:05.134Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"conditionfuneral.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 08:03:50 GMT","end":"Sun, 09 Aug 2026 08:03:49 GMT"},"fingerprint":{"sha1":"53:AE:CE:5A:72:97:87:54:EF:32:07:08:B5:D8:80:A5:92:F7:32:4B","sha256":"B5:57:4E:D5:5A:73:3D:17:CA:A6:71:13:3D:42:7A:56:B5:A7:CD:54:65:92:79:67:F7:81:C4:B3:8C:1A:E3:1A"}}},"request":{"raw":"GET /sb/notifications/dating/default/us/desk-all/css/style.css HTTP/1.1\r\nHost: cdn.conditionfuneral.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://noctrunhub.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://noctrunhub.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 23 May 2026 21:06:05 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:23:50 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"65aa85f6-1676\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: gzip\r\nage: 125\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u60e3pmJlraX0PAJTRk4leXEJhgLLiLjVHVmE9xvtpI4UjH02HUx452%2BKeKpvwO2WUvzCbY%2FiCNr4XJMonjm9fh0kOyc4P%2Bd7dBTDrfX6oZrEMW762XY%2BK966OcZINJagBoP0%2FhjJeX4PNY%3D\"}]}\r\ncf-ray: a00705be2a1f0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5750,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"2648ad78701bb00949b244fe3f1a8bf5","sha1":"22d324dcf9f1f838e39963096d60becd2c539372","sha256":"77e68f8d0c801a8ac9e6446ecd0f742d039290c6e7e6023b2f88a78c06ba390e","sha512":"f1b4579331fb3d7aef31a3ad4d177cc2684d3e6eb1f92e36663eeca8258a1dd105f99c8afc42c3095fd98e945d45f8d30f38f2b11e4cff3d7adc23f968c9f04f","ssdeep":"96:iTMXkG4Pz2HhN6F+iQImJxMX5ei4wFlFDJUTQHjbl+VF3XYv9ytWFHF2rBHhZrTB:IMX6r2HhAF+JxMX5mwFlFDJmGjbcPAFS","tlshash":"11c1dd9a2a771904b807d56b3f6a2747272540078a0fe9653fcd724c8fca1e8c9d27db","first_seen":"2024-01-21T17:21:58Z","last_seen":"2026-08-15T18:19:00.62528Z","times_seen":908,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":12,"dns":1,"connect":1,"send":0,"wait":6,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"cdn.conditionfuneral.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/si/05/c8/20/05c820d9ce67af6dea2e5441dbe3e8f9/1683231080.png","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://noctrunhub.xyz/","date":"2026-05-23T21:06:05.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 02:33:42 GMT","end":"Tue, 04 Aug 2026 02:33:41 GMT"},"fingerprint":{"sha1":"C1:98:76:68:C0:8B:B9:63:F0:C3:39:51:44:97:B5:E1:8D:C0:2F:94","sha256":"05:2D:DF:45:9A:F6:C6:13:32:59:AB:3B:E0:4C:DB:4B:C6:CA:48:07:A2:C1:1E:0C:F8:98:05:76:B4:C8:E3:FF"}}},"request":{"raw":"GET /si/05/c8/20/05c820d9ce67af6dea2e5441dbe3e8f9/1683231080.png HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 23 May 2026 21:06:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 39220\r\nserver: nginx/1.21.6\r\nlast-modified: Thu, 04 May 2023 20:11:29 GMT\r\netag: \"64541171-9934\"\r\nexpires: Mon, 25 May 2026 21:06:05 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":39220,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"6451b63b68b5068db02571051f6f6a30","sha1":"32badef5d69090b4d2ea7b300bb5264938e198ef","sha256":"b1b0a314a2d4924b2849fec48b7863ccc68413e58330d99f6ad901bfa6282819","sha512":"12f2c9fce754fb585d60201d30028ef03fd634d7c175dbb13b75e8f6d4b788373460c9d52f4188b320ca975c16f93174582f8b9e9427116a9701b34b1a9d8226","ssdeep":"768:BcC935u4uKqUlIv6kZPZmzfolE0L7olKyeofZG3xi/vp1:BcC17uiW6gZizSoreoq2z","tlshash":"d003f1d23a76cce2c1340527ab7514a7dead028bb9b3f0a832475e43f58c3e758ac516","first_seen":"2023-05-05T23:11:51Z","last_seen":"2026-08-15T18:19:00.626335Z","times_seen":2605,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":48,"dns":0,"connect":0,"send":0,"wait":73,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pl29007865.profitablecpmratenetwork.com/d2/0b/ae/d20baef8978de37611d98b1b8882082b.js","fqdn":"pl29007865.profitablecpmratenetwork.com","domain":"profitablecpmratenetwork.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://noctrunhub.xyz/","date":"2026-05-23T21:06:03.211Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"profitablecpmratenetwork.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 21:34:33 GMT","end":"Fri, 14 Aug 2026 21:34:32 GMT"},"fingerprint":{"sha1":"7F:FD:1F:39:4E:85:34:70:D4:B2:B0:C1:AC:B8:21:EC:15:9B:C2:9E","sha256":"E4:7C:B1:26:7C:AC:26:34:08:C9:63:9F:13:54:66:FA:0C:12:48:01:6C:2A:F5:F5:EA:73:C0:44:5E:96:4C:12"}}},"request":{"raw":"GET /d2/0b/ae/d20baef8978de37611d98b1b8882082b.js HTTP/1.1\r\nHost: pl29007865.profitablecpmratenetwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://noctrunhub.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sat, 23 May 2026 21:06:03 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 35179\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Mobile,X-Device-User-Agent,X-OperaMini-Phone-UA,Sec-CH-UA-Platform-Version,Sec-CH-UA,Sec-CH-UA-Full-Version,Device-Stock-UA,X-UCBrowser-Device-UA,User-Agent,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Full-Version-List\r\nx-envoy-upstream-service-time: 6\r\nHost: pl29007865.profitablecpmratenetwork.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 010fe64d3d494d6b229588b7352c1be9\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":92893,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"b5cd7abaab476e08a3c8396a4496b6b7","sha1":"65613472922a353f665e60a714e7ac6a3f478d92","sha256":"c9cb8432247919f29f195feafe559bc3acef4dadf84bd9fac5974c42ab6acfc3","sha512":"2213210df919d4abaf176b8503d11683f1588eb80ffa8830f8a0c85ba5be02de2cdea511cd0797d784e7bf44ff64ef4afa87670fdeae6691dee7b0fd03e007b1","ssdeep":"1536:vp941I379G73WLJkntq9ER4UHdVsXQdAX:vYKhUtq9t3","tlshash":"0f93f78c3fd970ed825a6073236fa116f15b5c527648e888d113b9e9fefc31ada31909","first_seen":"2026-05-23T21:04:28.443438Z","last_seen":"2026-05-23T21:06:34.377091Z","times_seen":2,"resource_available":true,"data":null}},"time_used":748,"timings":{"blocked":272,"dns":1,"connect":92,"send":0,"wait":101,"receive":92,"ssl":187},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"pl29007865.profitablecpmratenetwork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"pl29007865.profitablecpmratenetwork.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-23","alert":"Phishing Block","trigger":"pl29007865.profitablecpmratenetwork.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"noctrunhub.xyz/assets/index-Cw0dH60j.js","fqdn":"noctrunhub.xyz","domain":"noctrunhub.xyz","tld":"xyz"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://noctrunhub.xyz/","date":"2026-05-23T21:06:03.215Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"noctrunhub.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 29 Mar 2026 23:03:49 GMT","end":"Sat, 27 Jun 2026 23:03:48 GMT"},"fingerprint":{"sha1":"E6:15:7A:45:66:B7:CA:02:D8:5B:B6:F0:08:BD:72:A6:F4:1F:C5:FC","sha256":"B7:10:89:5A:58:2C:9D:17:3C:D6:C4:CD:E4:E5:C6:6C:13:5E:4B:32:E0:BD:A1:F9:42:8B:F8:FF:29:98:28:49"}}},"request":{"raw":"GET /assets/index-Cw0dH60j.js HTTP/1.1\r\nHost: noctrunhub.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://noctrunhub.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 368\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Sat, 23 May 2026 21:06:03 GMT\r\netag: \"d1447a2b5fcb5f1ccbc2c021ea7ad6ef-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KSBAHJTB32Q72KXACGF58FKV\r\ncontent-length: 220593\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":784762,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (37534)","md5":"97c2ab8b645b2fe9688b016a7c3f1266","sha1":"0093dad28e1ee873374ea82f4d938383719645c6","sha256":"a689b32a8780f23700fa716456d043804f6117ed510925ea1290b16e4e52e16c","sha512":"0edcd20ca9d10cec564a983ba5ddd247ae99f8cb7d437f701539df912e09568d532d20654772b5e20244565871b06e3889df7f73b4babbfda5593c87f4bc496e","ssdeep":"6144:FGlsUDhYvxSQS3d/rLjkQV+wDOsFUSLctquSE+UMntMHnrBE0NlcIKTrnOe1XSQG:g2ouYfUttx3I1XSQHO32iI4Lvxyg","tlshash":"30f47d44b152ba6d5af349e4a43f1105b32f1a29f90ec4e5f07cd89a29b400a7677bfc","first_seen":"2026-05-23T21:04:28.454692Z","last_seen":"2026-05-23T21:06:34.381392Z","times_seen":2,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":66,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://noctrunhub.xyz/","date":"2026-05-23T21:06:03.711Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"preferencenail.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 01:34:17 GMT","end":"Mon, 27 Jul 2026 01:34:16 GMT"},"fingerprint":{"sha1":"95:86:03:59:0E:03:98:91:87:F0:07:36:44:10:95:8E:67:97:47:D8","sha256":"51:F3:91:79:18:08:9A:FD:A7:80:AD:AA:80:FB:C8:8B:AE:27:FD:79:25:B6:37:2F:1B:C5:60:67:25:A8:A7:02"}}},"request":{"raw":"GET /sfp.js HTTP/1.1\r\nHost: preferencenail.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://noctrunhub.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sat, 23 May 2026 21:06:03 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nContent-Length: 32181\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nVary: Accept-Encoding\r\nHost: preferencenail.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 8b324f3c02c1d97aca64dfed637d74a5\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":85379,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-08-15T18:58:55.839295Z","times_seen":26545,"resource_available":true,"data":null}},"time_used":161,"timings":{"blocked":59,"dns":1,"connect":18,"send":0,"wait":23,"receive":18,"ssl":40},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flushpersist.com/pxf.gif?uuid=aa2145c7-28f4-4fe8-8464-b398d39c0e09\u0026eb=bff3d6bf6d16c0bb5e58232c1a99ef63\u0026te=fe015aeda515c30449c87b1701cc307f\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=d3c816227a7ae3184fc1874b2722fab1\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=21","fqdn":"flushpersist.com","domain":"flushpersist.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://noctrunhub.xyz/","date":"2026-05-23T21:06:05.056Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"flushpersist.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 22:15:44 GMT","end":"Sun, 26 Jul 2026 22:15:43 GMT"},"fingerprint":{"sha1":"A4:CC:8E:38:1E:86:20:D5:CF:AC:A0:E9:32:E9:DF:AA:71:7A:98:E5","sha256":"B2:02:B9:E5:21:88:DB:AF:AE:5F:6C:FB:16:F4:3A:D8:44:9D:C2:FF:BE:D7:7B:A1:08:43:78:33:05:96:96:7F"}}},"request":{"raw":"GET /pxf.gif?uuid=aa2145c7-28f4-4fe8-8464-b398d39c0e09\u0026eb=bff3d6bf6d16c0bb5e58232c1a99ef63\u0026te=fe015aeda515c30449c87b1701cc307f\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=d3c816227a7ae3184fc1874b2722fab1\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=21 HTTP/1.1\r\nHost: flushpersist.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://noctrunhub.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sat, 23 May 2026 21:06:05 GMT\r\nContent-Type: image/gif\r\nContent-Length: 1\r\nConnection: keep-alive\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\nx-envoy-upstream-service-time: 1\r\nHost: flushpersist.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 95fdc1b9ebccea5d23fbea94bb050fc9\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T19:04:39.868583Z","times_seen":17906266,"resource_available":true,"data":null}},"time_used":671,"timings":{"blocked":289,"dns":5,"connect":91,"send":0,"wait":94,"receive":0,"ssl":189},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.conditionfuneral.com/sb/notifications/dating/default/us/desk-all/img/close.png","fqdn":"cdn.conditionfuneral.com","domain":"conditionfuneral.com","tld":"com"},"ip":{"addr":"104.21.76.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://noctrunhub.xyz/","date":"2026-05-23T21:06:05.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"conditionfuneral.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 08:03:50 GMT","end":"Sun, 09 Aug 2026 08:03:49 GMT"},"fingerprint":{"sha1":"53:AE:CE:5A:72:97:87:54:EF:32:07:08:B5:D8:80:A5:92:F7:32:4B","sha256":"B5:57:4E:D5:5A:73:3D:17:CA:A6:71:13:3D:42:7A:56:B5:A7:CD:54:65:92:79:67:F7:81:C4:B3:8C:1A:E3:1A"}}},"request":{"raw":"GET /sb/notifications/dating/default/us/desk-all/img/close.png HTTP/1.1\r\nHost: cdn.conditionfuneral.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 23 May 2026 21:06:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 4022\r\nlast-modified: Fri, 19 Jan 2024 14:23:50 GMT\r\npriority: u=4,i=?0\r\netag: \"65aa85f6-fb6\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\naccept-ranges: bytes\r\nage: 277979\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gKvDvuHA6hdPQGwFCtlmbM5O2stj%2BvW6GBwFSn4miTH9%2FSDpqgkyAq6I%2BQC2lco9thpVL3khg770TSIrvhNgUt1c2v6o414JBUptAVnQ11zgx8qTr0XsH81JL4TDeLjO05HnJOH5cz9a%2Ftg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a00705becd7d5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4022,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit gray+alpha, non-interlaced","md5":"23e9690b0e7ac26868363a6248f44467","sha1":"d7ad0eae64e0c1e65b12eda0aa9d2b91996dd64f","sha256":"f362c67320d739ccf3bea21f857b9620075bd20ceacda8c51261b9612fe28395","sha512":"d5a8801b98aec11957fb8dc20b1595f1f47504d528bd89833b407ee71e715a57387e9762e3ef7f9d7ebcc87596737f9bddecab21c7ba3f456c8f3b111e025170","ssdeep":"","tlshash":"d981193882564c7cca0a77a10501f861e21f386cf97fb4678873a4d8430e2abe75f17a","first_seen":"2023-04-05T23:50:36Z","last_seen":"2026-08-15T18:19:00.684393Z","times_seen":3143,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"cdn.conditionfuneral.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://noctrunhub.xyz/","date":"2026-05-23T21:06:05.647Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:07 GMT","end":"Thu, 30 Jul 2026 15:53:06 GMT"},"fingerprint":{"sha1":"71:33:19:F6:6D:02:E4:65:D5:EB:19:E4:3B:93:00:75:12:EB:BA:E0","sha256":"7A:E1:E3:B3:B6:85:B0:38:E5:62:97:1A:D2:7E:AC:A6:EE:72:1D:20:88:68:87:D3:90:F1:3A:C7:49:7D:22:55"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://noctrunhub.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 23 May 2026 14:48:25 GMT\r\nexpires: Sun, 23 May 2027 14:48:25 GMT\r\ncache-control: public, max-age=31536000\r\nage: 22660\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-08-15T19:04:26.529733Z","times_seen":263027,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":60,"dns":0,"connect":20,"send":0,"wait":8,"receive":6,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"noctrunhub.xyz/assets/index-Be9QPyTI.css","fqdn":"noctrunhub.xyz","domain":"noctrunhub.xyz","tld":"xyz"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://noctrunhub.xyz/","date":"2026-05-23T21:06:03.216Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"noctrunhub.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 29 Mar 2026 23:03:49 GMT","end":"Sat, 27 Jun 2026 23:03:48 GMT"},"fingerprint":{"sha1":"E6:15:7A:45:66:B7:CA:02:D8:5B:B6:F0:08:BD:72:A6:F4:1F:C5:FC","sha256":"B7:10:89:5A:58:2C:9D:17:3C:D6:C4:CD:E4:E5:C6:6C:13:5E:4B:32:E0:BD:A1:F9:42:8B:F8:FF:29:98:28:49"}}},"request":{"raw":"GET /assets/index-Be9QPyTI.css HTTP/1.1\r\nHost: noctrunhub.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://noctrunhub.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 368\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=UTF-8\r\ndate: Sat, 23 May 2026 21:06:03 GMT\r\netag: \"b31c53b1e0bfebc97b2dd036b7ea4715-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KSBAHJTBW7S3PAZ56H0Y8SG1\r\ncontent-length: 10079\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":66651,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"c85398f0208508555804da55ee4e5c49","sha1":"c53e952d41db2b6f7526088bb1b030c88168e828","sha256":"0b3ec82c878356b58d283617cd872ea621ebf08269c87e2e0d432136edbc0554","sha512":"b69eae4ccb3be545d3a9c42d10260dec21a48be11fa4a909b7a8c21e531c020e06a19c9afc7930a07eef6f8341aaa4de496249b49db8340804df4452929ea9cf","ssdeep":"768:MD3dF+RWhaYFY8ckPB3ka6QStDIJZNRr0eKJE:MD3dF+RWhaYFY8dBx6ageKJE","tlshash":"655363395aa1107b7c57a1f9d2dcb95dfa1bb1c0cf2a47eabc82521067e23f21c57a00","first_seen":"2026-05-23T21:04:28.40867Z","last_seen":"2026-05-23T21:06:34.394528Z","times_seen":2,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bolt.new/badge.js?s=3e29130a-b13a-41cb-9113-63e153ff05f7","fqdn":"bolt.new","domain":"bolt.new","tld":"new"},"ip":{"addr":"104.26.6.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://noctrunhub.xyz/","date":"2026-05-23T21:06:03.218Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bolt.new","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 10 May 2026 01:21:46 GMT","end":"Sat, 08 Aug 2026 02:21:45 GMT"},"fingerprint":{"sha1":"2A:B5:02:5A:A7:5E:D9:B2:89:BC:E7:80:A6:FA:45:77:62:9E:E3:C1","sha256":"46:3D:56:B4:7B:DF:5A:9C:1B:D4:00:32:90:C4:0D:78:86:87:57:63:17:AB:2E:80:1C:AA:60:95:E0:95:17:BE"}}},"request":{"raw":"GET /badge.js?s=3e29130a-b13a-41cb-9113-63e153ff05f7 HTTP/1.1\r\nHost: bolt.new\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://noctrunhub.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 23 May 2026 21:06:03 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 0\r\ncache-control: max-age=60, public\r\ncf-placement: local-OSL\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gnrs99G9KOIac79xA5IHcOKyfVAXZH%2Fx4IYO%2FXDhKXZg8CUwaZEsFR7VxQlJg7e90x9aGigoDAuga6R3Hh%2FE8kTW9sdAbn7t5lVsagv0P92bebxbN2BJYrqLBg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nstrict-transport-security: max-age=15552000\r\naccept-ranges: bytes\r\nlast-modified: Sat, 23 May 2026 21:06:03 GMT\r\ncf-cache-status: EXPIRED\r\ncf-ray: a00705b2283ab51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T19:04:39.868583Z","times_seen":17906266,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":2,"dns":0,"connect":1,"send":0,"wait":80,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nlcwreopotnsqcbqphri.supabase.co/rest/v1/scripts?select=*\u0026order=created_at.desc","fqdn":"nlcwreopotnsqcbqphri.supabase.co","domain":"nlcwreopotnsqcbqphri.supabase.co","tld":"supabase.co"},"ip":{"addr":"104.18.38.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://noctrunhub.xyz/","date":"2026-05-23T21:06:03.888Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supabase.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Apr 2026 07:48:36 GMT","end":"Wed, 29 Jul 2026 08:48:34 GMT"},"fingerprint":{"sha1":"CA:A1:55:FA:10:0A:42:25:AC:57:D5:30:F6:D2:6F:06:35:61:90:C0","sha256":"B9:B8:F4:CE:6C:86:1D:3D:D1:67:87:08:FA:4A:40:62:10:7E:E7:05:0B:52:82:0F:99:10:50:F1:2E:B2:91:00"}}},"request":{"raw":"OPTIONS /rest/v1/scripts?select=*\u0026order=created_at.desc HTTP/1.1\r\nHost: nlcwreopotnsqcbqphri.supabase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: accept-profile,apikey,authorization,x-client-info\r\nReferer: https://noctrunhub.xyz/\r\nOrigin: https://noctrunhub.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 23 May 2026 21:06:04 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\naccess-control-allow-headers: accept-profile,apikey,authorization,x-client-info\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE,OPTIONS,TRACE,CONNECT\r\naccess-control-max-age: 3600\r\nsb-gateway-version: 1\r\nsb-project-ref: nlcwreopotnsqcbqphri\r\nsb-request-id: 019e56a8-ce4d-7490-b5c6-50e03f698d74\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nset-cookie: __cf_bm=M3Jl5Y.93XHuhLdMdFOA.wgNbTE9wKoesEa7gbLAXfs-1779570363.9766448-1.0.1.1-pz3mrbti.padCxiT0F9Jt75kLAHkNbflJ6clzMCunuj2KisQfzO.mUiQWS.IjP2yuAKyXDeE8sw1TJ5Eu4qT9NxPJBGxsN9.EEmNgEzHVIR4ZLI42.ENGVgHL8wMSyFY; HttpOnly; SameSite=None; Secure; Path=/; Domain=supabase.co; Expires=Sat, 23 May 2026 21:36:04 GMT\r\nserver: cloudflare\r\ncf-ray: a00705b6de02a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T19:04:39.868583Z","times_seen":17906266,"resource_available":true,"data":null}},"time_used":211,"timings":{"blocked":87,"dns":0,"connect":2,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn62542989.ahacdn.me/71940/283394/534539_eb13f.png","fqdn":"cdn62542989.ahacdn.me","domain":"ahacdn.me","tld":"me"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://quarrelsomebitter.com/aNWOZ_y.PQ2RQS9TM-TVcW3XOYT_Ua3bMcDdM-2fMgzhki2_OkTlcm4nN-DpMqxrMsi_Zupvcw2x1-1zbAHBRCp_dEGFFGnHP-TJNKlLNM2_ZOjPOQDRN-iTNU2VUW4_ZYDZAawbY-jdEeyfMgj_kizjYkWlU-5nNozpEq5_ZsWtNukvM-mxMyyzJAm_1C1DbEHFR-pHdIGJFKn_YMmNFOuPb-mRVSyTPUX_RWyXdYWZU-mbccndJep_ZgDh0izjZ-TldmmnYoz_gqzrYsjtd-lvOwGxQyw_MAGBICxDM-jFIG5HMI2_FKlLOMTNc-xPOQWRVSj_ZUDVJWjXM-iZZa6bbc2_5elfagWhQ-9jNkzlAmz_MozpQqyrO-Qt?iframeId=zfkfav","date":"2026-05-23T21:06:04.335Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ahacdn.me","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV CA","organization":"GoGetSSL"},"validity":{"start":"Thu, 29 Jan 2026 00:00:00 GMT","end":"Sun, 28 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"1E:7B:BE:34:BE:1F:D0:5B:E8:57:94:2E:46:15:D3:4C:08:3B:15:6C","sha256":"F6:CE:02:00:BD:EE:F2:E8:00:C4:DA:06:64:B9:B0:D9:EB:09:81:38:79:2E:4D:17:31:77:D3:95:4C:4E:66:96"}}},"request":{"raw":"GET /71940/283394/534539_eb13f.png HTTP/1.1\r\nHost: cdn62542989.ahacdn.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://quarrelsomebitter.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 23 May 2026 21:06:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 147452\r\nserver: nginx\r\netag: \"b8029e9daa9ccd517f65a01120fca09c\"\r\nlast-modified: Thu, 28 Sep 2023 15:24:36 GMT\r\nx-timestamp: 1695914675.69056\r\nx-trans-id: txd385e3ef53004572b73eb-0068f619c8\r\nx-openstack-request-id: txd385e3ef53004572b73eb-0068f619c8\r\ncache-control: max-age=172800\r\nexpires: Mon, 25 May 2026 21:06:04 GMT\r\nx-cdn-host-id: AH1004,AH0543\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":147452,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 250, 8-bit/color RGB, non-interlaced","md5":"b8029e9daa9ccd517f65a01120fca09c","sha1":"d68b70bcfbd089d9ea2497fec8a7764704e9cd3f","sha256":"24b99ce3def0b577a885b7875a186c0b9540248b76bba44a307d9e19570da4b0","sha512":"e2a10d4ebe18e215b34de5e97578c9d51ee46e6e941021d526a16edace4c381a3d3206f28dcae8a748566eeeffac98bf595eeef5ccc96c45e25d9072bd29e995","ssdeep":"3072:HVQSOA4myKTc2fGWEQ90nshEm2moMm6kd4d36xXq0uEQED:HvO7myuqshdFmrd4da5r","tlshash":"cfe312f546a89234332f78090c669e794dc8a5b1667037dcf9c0fd624c877325e98aeb","first_seen":"2023-12-30T08:44:21Z","last_seen":"2026-05-23T21:06:34.397792Z","times_seen":35,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":81,"dns":1,"connect":24,"send":0,"wait":20,"receive":62,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"realizationnewestfangs.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.conditionfuneral.com%2Fsb%2Fnotifications%2Fdating%2Fdefault%2Fus%2Fdesk-all%2Fcss%2Fstyle.css\u0026l=5750\u0026fd=35","fqdn":"realizationnewestfangs.com","domain":"realizationnewestfangs.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://noctrunhub.xyz/","date":"2026-05-23T21:06:05.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"realizationnewestfangs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 23:41:18 GMT","end":"Sun, 26 Jul 2026 23:41:17 GMT"},"fingerprint":{"sha1":"A3:A7:19:A7:E1:1E:FA:B7:D5:D2:AB:89:E2:E5:2D:BA:31:4C:DC:31","sha256":"9B:B1:9D:73:D4:D6:68:DF:63:E8:A6:F5:27:EB:47:26:AA:6F:52:E3:A6:56:1C:FF:EE:AC:3E:F6:06:CE:09:CA"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.conditionfuneral.com%2Fsb%2Fnotifications%2Fdating%2Fdefault%2Fus%2Fdesk-all%2Fcss%2Fstyle.css\u0026l=5750\u0026fd=35 HTTP/1.1\r\nHost: realizationnewestfangs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://noctrunhub.xyz/\r\nCookie: uid_id2=aa2145c7-28f4-4fe8-8464-b398d39c0e09:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl28907366=1; slecd20baef8978de37611d98b1b8882082b=[6655446]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sat, 23 May 2026 21:06:05 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: X-OperaMini-Phone-UA, Sec-CH-UA, Sec-CH-UA-PlatformUser-Agent, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Device-Stock-UA, X-Device-User-Agent, X-UCBrowser-Device-UA, User-Agent, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Model, Sec-CH-UA-Mobile\r\nHost: realizationnewestfangs.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T19:04:39.868583Z","times_seen":17906266,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"realizationnewestfangs.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.conditionfuneral.com%2Fsb%2Fnotifications%2Fdating%2Fdefault%2Fus%2Fdesk-all%2Fcss%2Fanimate.css\u0026l=78689\u0026fd=41","fqdn":"realizationnewestfangs.com","domain":"realizationnewestfangs.com","tld":"com"},"ip":{"addr":"172.240.127.243","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://noctrunhub.xyz/","date":"2026-05-23T21:06:05.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"realizationnewestfangs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 23:41:18 GMT","end":"Sun, 26 Jul 2026 23:41:17 GMT"},"fingerprint":{"sha1":"A3:A7:19:A7:E1:1E:FA:B7:D5:D2:AB:89:E2:E5:2D:BA:31:4C:DC:31","sha256":"9B:B1:9D:73:D4:D6:68:DF:63:E8:A6:F5:27:EB:47:26:AA:6F:52:E3:A6:56:1C:FF:EE:AC:3E:F6:06:CE:09:CA"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.conditionfuneral.com%2Fsb%2Fnotifications%2Fdating%2Fdefault%2Fus%2Fdesk-all%2Fcss%2Fanimate.css\u0026l=78689\u0026fd=41 HTTP/1.1\r\nHost: realizationnewestfangs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://noctrunhub.xyz/\r\nCookie: uid_id2=aa2145c7-28f4-4fe8-8464-b398d39c0e09:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl28907366=1; slecd20baef8978de37611d98b1b8882082b=[6655446]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sat, 23 May 2026 21:06:05 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: Sec-CH-UA-Platform, Sec-CH-UA-Mobile, User-Agent, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Device-Stock-UA, X-Device-User-Agent, X-OperaMini-Phone-UA, X-UCBrowser-Device-UA, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-PlatformUser-Agent\r\nHost: realizationnewestfangs.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T19:04:39.868583Z","times_seen":17906266,"resource_available":true,"data":null}},"time_used":656,"timings":{"blocked":279,"dns":0,"connect":92,"send":0,"wait":94,"receive":0,"ssl":188},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"quarrelsomebitter.com/Yg2_xipjZ.Wk5l0-ZnGoFp0qY_Ts9tyucvm-lxkyPzTAN_lCND2EZFj-OHDINJiKN_2MUN4OZPD-ARwSYTjUE_yWMXjYkZz-YbWcUd5eN_zgEh5iZjW-NlkmMnmoM_yq","fqdn":"quarrelsomebitter.com","domain":"quarrelsomebitter.com","tld":"com"},"ip":{"addr":"88.85.69.211","port":443,"asn":35415,"as":"Webzilla B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://noctrunhub.xyz/","date":"2026-05-23T21:06:04.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"quarrelsomebitter.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Apr 2026 16:05:02 GMT","end":"Sat, 18 Jul 2026 16:05:01 GMT"},"fingerprint":{"sha1":"D0:3E:F6:80:E3:E3:52:21:5F:40:0F:BE:27:4E:56:19:B2:12:93:A3","sha256":"85:08:C9:99:5A:F1:9D:34:2D:79:C1:83:99:9B:59:C6:27:37:09:A5:6C:65:37:4F:CB:A0:FD:DE:85:12:42:31"}}},"request":{"raw":"POST /Yg2_xipjZ.Wk5l0-ZnGoFp0qY_Ts9tyucvm-lxkyPzTAN_lCND2EZFj-OHDINJiKN_2MUN4OZPD-ARwSYTjUE_yWMXjYkZz-YbWcUd5eN_zgEh5iZjW-NlkmMnmoM_yq HTTP/1.1\r\nHost: quarrelsomebitter.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 44\r\nOrigin: https://noctrunhub.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://noctrunhub.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":44,"data":"ref=https%3A%2F%2Fnoctrunhub.xyz%2F\u0026prevRef="}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 23 May 2026 21:06:04 GMT\r\ncontent-length: 0\r\npragma: no-cache\r\naccept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64\r\nexpires: Mon, 26 Jul 2011 05:00:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T19:04:39.868583Z","times_seen":17906266,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"quarrelsomebitter.com/Yn2-xppqZ.Wr5s0_ZuGvFw0xY-Tz9AyBcCm_lEkFPGTHR-iJYKmLIM3_NODPRQlRN-GTYUxVYWj_EYwZYaTbJ-mdMeWfUgz_Yizjgk2lZ-DnZokpYqj_dsktMuDvl-ix","fqdn":"quarrelsomebitter.com","domain":"quarrelsomebitter.com","tld":"com"},"ip":{"addr":"88.85.69.211","port":443,"asn":35415,"as":"Webzilla B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://noctrunhub.xyz/","date":"2026-05-23T21:06:04.203Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"quarrelsomebitter.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Apr 2026 16:05:02 GMT","end":"Sat, 18 Jul 2026 16:05:01 GMT"},"fingerprint":{"sha1":"D0:3E:F6:80:E3:E3:52:21:5F:40:0F:BE:27:4E:56:19:B2:12:93:A3","sha256":"85:08:C9:99:5A:F1:9D:34:2D:79:C1:83:99:9B:59:C6:27:37:09:A5:6C:65:37:4F:CB:A0:FD:DE:85:12:42:31"}}},"request":{"raw":"POST /Yn2-xppqZ.Wr5s0_ZuGvFw0xY-Tz9AyBcCm_lEkFPGTHR-iJYKmLIM3_NODPRQlRN-GTYUxVYWj_EYwZYaTbJ-mdMeWfUgz_Yizjgk2lZ-DnZokpYqj_dsktMuDvl-ix HTTP/1.1\r\nHost: quarrelsomebitter.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 44\r\nOrigin: https://noctrunhub.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://noctrunhub.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":44,"data":"ref=https%3A%2F%2Fnoctrunhub.xyz%2F\u0026prevRef="}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 23 May 2026 21:06:04 GMT\r\ncontent-length: 0\r\naccept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64\r\nexpires: Mon, 26 Jul 2011 05:00:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T19:04:39.868583Z","times_seen":17906266,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fizzyacerbitymellow.com/53/23/86/5323869a8beda1d7db01e9c875b2f49f.js","fqdn":"fizzyacerbitymellow.com","domain":"fizzyacerbitymellow.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://noctrunhub.xyz/","date":"2026-05-23T21:06:04.334Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"fizzyacerbitymellow.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 21:12:07 GMT","end":"Thu, 02 Jul 2026 21:12:06 GMT"},"fingerprint":{"sha1":"FD:8F:91:3D:83:35:B1:A0:65:AE:19:71:12:B0:D3:4E:80:D2:14:AD","sha256":"1F:88:BD:64:7C:A1:4B:5A:7A:FD:C2:8D:38:0B:6F:5F:CE:5F:FD:E2:E4:74:AD:F1:EB:EC:DA:B7:85:44:9E:5D"}}},"request":{"raw":"GET /53/23/86/5323869a8beda1d7db01e9c875b2f49f.js HTTP/1.1\r\nHost: fizzyacerbitymellow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://noctrunhub.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sat, 23 May 2026 21:06:04 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 2569\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: X-UCBrowser-Device-UA,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Full-Version,Sec-CH-UA-Platform,Sec-CH-UA-Mobile,Device-Stock-UA,X-OperaMini-Phone-UA,User-Agent,Sec-CH-UA-Platform-Version,Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,X-Device-User-Agent\r\nx-envoy-upstream-service-time: 1\r\nHost: fizzyacerbitymellow.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 0fe236771a87a5b894c5870cb949c657\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5126,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5126), with no line terminators","md5":"9454b75035bf1e7fbd8bc933d239763a","sha1":"05ac0f19656d2fd1882cb0ec3bc347cf2dbec25e","sha256":"261c1fc4c2d7eadeabb8edc511b4d3681cad5a27060128b4c3a6690484ccaffd","sha512":"8ec190336b0024f3fe41752f3d850ecb0e31157b2b2a80f9cabf627f95f05e0211f367f259bf6318c64243943faad6d9ee583b3b9893bf4463e0faa8c18272c8","ssdeep":"96:wa7EWyNaHUHRLQjFAqZPXU5ZLbCqEKNbuCKwMBPP2z6vgdgM:KWOSUoaXjxqiY+0gdL","tlshash":"11b144dd3f80b0d00ba620b36b1f251ab0694c21e55fd498f50b91a03e6da1fda67fb5","first_seen":"2026-05-04T13:56:21.08631Z","last_seen":"2026-08-10T10:29:39.496594Z","times_seen":7126,"resource_available":true,"data":null}},"time_used":670,"timings":{"blocked":285,"dns":0,"connect":95,"send":0,"wait":95,"receive":0,"ssl":192},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flushpersist.com/pxf.gif?uuid=aa2145c7-28f4-4fe8-8464-b398d39c0e09\u0026eb=bff3d6bf6d16c0bb5e58232c1a99ef63\u0026te=fe015aeda515c30449c87b1701cc307f\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=d20baef8978de37611d98b1b8882082b\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=21","fqdn":"flushpersist.com","domain":"flushpersist.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://noctrunhub.xyz/","date":"2026-05-23T21:06:05.055Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"flushpersist.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 22:15:44 GMT","end":"Sun, 26 Jul 2026 22:15:43 GMT"},"fingerprint":{"sha1":"A4:CC:8E:38:1E:86:20:D5:CF:AC:A0:E9:32:E9:DF:AA:71:7A:98:E5","sha256":"B2:02:B9:E5:21:88:DB:AF:AE:5F:6C:FB:16:F4:3A:D8:44:9D:C2:FF:BE:D7:7B:A1:08:43:78:33:05:96:96:7F"}}},"request":{"raw":"GET /pxf.gif?uuid=aa2145c7-28f4-4fe8-8464-b398d39c0e09\u0026eb=bff3d6bf6d16c0bb5e58232c1a99ef63\u0026te=fe015aeda515c30449c87b1701cc307f\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=d20baef8978de37611d98b1b8882082b\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=21 HTTP/1.1\r\nHost: flushpersist.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://noctrunhub.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sat, 23 May 2026 21:06:05 GMT\r\nContent-Type: image/gif\r\nContent-Length: 1\r\nConnection: keep-alive\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\nx-envoy-upstream-service-time: 1\r\nHost: flushpersist.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: c98e4bc65ed37723a9531d34aab95a24\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T19:04:39.868583Z","times_seen":17906266,"resource_available":true,"data":null}},"time_used":678,"timings":{"blocked":292,"dns":6,"connect":94,"send":0,"wait":94,"receive":0,"ssl":188},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"quarrelsomebitter.com/b/XMVAsed.GdlF0EYbWEcv/ceyma9uu/Z/UflOk-P/TkcBwGMlzbMuz/OZTsMNtwNYz/AJzyMXzbMP5SN/wI","fqdn":"quarrelsomebitter.com","domain":"quarrelsomebitter.com","tld":"com"},"ip":{"addr":"88.85.69.211","port":443,"asn":35415,"as":"Webzilla B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://noctrunhub.xyz/","date":"2026-05-23T21:06:03.857Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"quarrelsomebitter.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Apr 2026 16:05:02 GMT","end":"Sat, 18 Jul 2026 16:05:01 GMT"},"fingerprint":{"sha1":"D0:3E:F6:80:E3:E3:52:21:5F:40:0F:BE:27:4E:56:19:B2:12:93:A3","sha256":"85:08:C9:99:5A:F1:9D:34:2D:79:C1:83:99:9B:59:C6:27:37:09:A5:6C:65:37:4F:CB:A0:FD:DE:85:12:42:31"}}},"request":{"raw":"GET /b/XMVAsed.GdlF0EYbWEcv/ceyma9uu/Z/UflOk-P/TkcBwGMlzbMuz/OZTsMNtwNYz/AJzyMXzbMP5SN/wI HTTP/1.1\r\nHost: quarrelsomebitter.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://noctrunhub.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 23 May 2026 21:06:03 GMT\r\ncontent-type: application/javascript\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\naccept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64\r\nexpires: Mon, 26 Jul 2011 05:00:00 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://noctrunhub.xyz\r\nlast-modified: Sat, 23 May 2026 21:06:03 GMT\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: GET\r\nset-cookie: uniqCookie=1ab92c4d86f3ed64a5fb0bd1826d93a2; max-age=1782162364; path=/\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":37805,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (23392)","md5":"a97a356b9f4f8c3d19d15cbbf8ee369b","sha1":"552068fc726ad2b10178b981454390e454f77b4a","sha256":"ef4859b5f9a3c330953b8da96824b07c47d50d65f2c3c18a93274a5b2775ce8f","sha512":"53a75b4a4add3de95fdac9fd93b7999b93830a76be8c48bd344a48ada77b0aa85a2c1c98477f4d143ed1175570a9fc803dab1677c0140b849290266270db1da0","ssdeep":"768:0lwiZg7J09MxiMZFvLnHvECJYgSboEBkleZ29oOcLluqhbpp4Gj+OiG82IApuHKO:0lHg7JpoIvECJZSboEBkleZ2ZcLlbpp2","tlshash":"fd03c7c871c3642642eb507c753b7218b23a1465642df028bc79c8e4bca9e9f8577bbd","first_seen":"2026-05-23T21:06:34.403805Z","last_seen":"2026-05-23T21:06:34.403805Z","times_seen":1,"resource_available":true,"data":null}},"time_used":304,"timings":{"blocked":114,"dns":1,"connect":19,"send":0,"wait":74,"receive":0,"ssl":80},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nlcwreopotnsqcbqphri.supabase.co/storage/v1/object/public/script-thumbnails/1777710165463-0mz054.png","fqdn":"nlcwreopotnsqcbqphri.supabase.co","domain":"nlcwreopotnsqcbqphri.supabase.co","tld":"supabase.co"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://noctrunhub.xyz/","date":"2026-05-23T21:06:04.634Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supabase.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Apr 2026 07:48:36 GMT","end":"Wed, 29 Jul 2026 08:48:34 GMT"},"fingerprint":{"sha1":"CA:A1:55:FA:10:0A:42:25:AC:57:D5:30:F6:D2:6F:06:35:61:90:C0","sha256":"B9:B8:F4:CE:6C:86:1D:3D:D1:67:87:08:FA:4A:40:62:10:7E:E7:05:0B:52:82:0F:99:10:50:F1:2E:B2:91:00"}}},"request":{"raw":"GET /storage/v1/object/public/script-thumbnails/1777710165463-0mz054.png HTTP/1.1\r\nHost: nlcwreopotnsqcbqphri.supabase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://noctrunhub.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T19:04:39.868583Z","times_seen":17906266,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.conditionfuneral.com/sb/notifications/dating/default/us/desk-all/js/script.js","fqdn":"cdn.conditionfuneral.com","domain":"conditionfuneral.com","tld":"com"},"ip":{"addr":"172.67.197.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://noctrunhub.xyz/","date":"2026-05-23T21:06:05.144Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"conditionfuneral.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 08:03:50 GMT","end":"Sun, 09 Aug 2026 08:03:49 GMT"},"fingerprint":{"sha1":"53:AE:CE:5A:72:97:87:54:EF:32:07:08:B5:D8:80:A5:92:F7:32:4B","sha256":"B5:57:4E:D5:5A:73:3D:17:CA:A6:71:13:3D:42:7A:56:B5:A7:CD:54:65:92:79:67:F7:81:C4:B3:8C:1A:E3:1A"}}},"request":{"raw":"GET /sb/notifications/dating/default/us/desk-all/js/script.js HTTP/1.1\r\nHost: cdn.conditionfuneral.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://noctrunhub.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://noctrunhub.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 23 May 2026 21:06:05 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:23:50 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vd7zatQ6n1udFwg1xK2yIt1eUREiAX8LWWIsbfSvkj9GvbxVVR9qie7%2FcI1qPXfEXoUxFyi5iF65DtqfaztqSma7szR5XmB%2FmJKA0AUp0DPLDjwSxzZ%2B%2BO7RJ9IZgDE33RqaZ7gAHrSAXaY%3D\"}]}\r\nage: 125\r\ncf-cache-status: HIT\r\netag: W/\"65aa85f6-182\"\r\ncontent-encoding: br\r\ncf-ray: a00705be2a220883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":386,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"5ca8c1679ba9453cfa512e01d6fec9c5","sha1":"45628341eb20e4acee5e812d3b2dfc8f23962daf","sha256":"520a0196a18cbe656f7382a02ec828125e68bdac511b9ebe2bf27f31e262d037","sha512":"842e878cb264f7362266570b9a8e4b50187e8bedf2a499c0b8fe5e9fa2c563fa7577427039f58540b103c4da5197287373efc5f031ebd7ce17e5b34bbb8d11f7","ssdeep":"","tlshash":"86e02b386158513487f7d1a2619f27df2730469ed00a025e702c474f0ce1fa622c1d9b","first_seen":"2023-04-05T09:22:06Z","last_seen":"2026-08-15T18:19:00.660445Z","times_seen":3531,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"cdn.conditionfuneral.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"noctrunhub.xyz/","fqdn":"noctrunhub.xyz","domain":"noctrunhub.xyz","tld":"xyz"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-23T21:06:02.850Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"noctrunhub.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 29 Mar 2026 23:03:49 GMT","end":"Sat, 27 Jun 2026 23:03:48 GMT"},"fingerprint":{"sha1":"E6:15:7A:45:66:B7:CA:02:D8:5B:B6:F0:08:BD:72:A6:F4:1F:C5:FC","sha256":"B7:10:89:5A:58:2C:9D:17:3C:D6:C4:CD:E4:E5:C6:6C:13:5E:4B:32:E0:BD:A1:F9:42:8B:F8:FF:29:98:28:49"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: noctrunhub.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 2\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; fwd=stale\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sat, 23 May 2026 21:06:03 GMT\r\netag: \"c9806e3f0afdee8b38f593ad10f9f50b-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KSBAHJH1838BCZY9Y5AC7XDC\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"Google AdSense","description":"Google AdSense is a program run by Google through which website publishers serve advertisements that are targeted to the site content and audience.","website":"https://www.google.com/adsense/start/","common_platform_enumeration":"","icon":"Google AdSense.svg","categories":["Advertising"]}],"data":{"size":4667,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"914d39a70c1e80dfac23d3afd8c0a219","sha1":"81f49a9167f0cf5da906da175a8adbcdaf6417b8","sha256":"8f7736fcbfc0659e8e98475d5174cb03e947e5dbc15b9108dd2db2b02027ea25","sha512":"d759f412c6755040af8faa70595fafc7e0d777a7370b319910d07a61a468dc7c446aba49a5bc5d65da5c6e5947264918c70aff5562981d0c6a80cc525404d494","ssdeep":"96:ICHn7PtswS3bxbjbKvmE3HeiwGpb3g8HgEv:5Lm5Vjc53HeiwGd35HgEv","tlshash":"e4a152f39df0c802632201a658ebb08c6ae6500b4540ecd9f59d25ad4fc5bdd89b37e9","first_seen":"2026-05-23T21:04:28.439256Z","last_seen":"2026-05-23T21:06:34.411729Z","times_seen":2,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":52,"dns":1,"connect":1,"send":0,"wait":150,"receive":0,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.married-ring.com/ecc874/affb19e803e3.js","fqdn":"www.married-ring.com","domain":"married-ring.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://noctrunhub.xyz/","date":"2026-05-23T21:06:04.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.married-ring.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 May 2026 07:04:16 GMT","end":"Wed, 19 Aug 2026 07:04:15 GMT"},"fingerprint":{"sha1":"98:56:F2:8F:27:E4:FB:1B:34:21:EF:D7:43:04:CD:FA:83:0C:E4:4D","sha256":"93:A4:24:1B:54:CE:67:5F:9B:10:69:04:09:D4:A9:C3:C6:50:1F:73:9D:B1:87:03:4B:2F:F0:51:3D:5A:04:C8"}}},"request":{"raw":"GET /ecc874/affb19e803e3.js HTTP/1.1\r\nHost: www.married-ring.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-type: text/plain\r\nOrigin: https://noctrunhub.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://noctrunhub.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 23 May 2026 21:06:04 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: Content-Type\r\ncache-control: max-age=172800\r\ncontent-encoding: gzip\r\nexpires: Mon, 25 May 2026 21:06:04 GMT\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":103674,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65533), with no line terminators","md5":"bb60b24a6cee40207666a201fb429207","sha1":"a53e2187196ca0f096a959038e190a68795b6cfd","sha256":"e6e5f44b078fb52374d01a56264ccb5074d501c61d32ceb8b25b0e7d24155cac","sha512":"3aa1bb5750fd3db16dac34e48516e2b89a93a1cacb26bb657e1616899bebd03678d0378189fe147dfe2d38d4e7f710626908a49593b8b211a3b7cdd2b1c0d22e","ssdeep":"1536:rM+iZ3YOYuyx6PUQwRxcs8P3nhkQ8vL7T7Q6eGozzwVEnHzHRbPv8:OijxEQq3P5Enne9zkWHLC","tlshash":"dfa33461350b64fd2ad0c1e7eb6720886c295810e469cca1ecd1d7c7d6eb8e3429b5f7","first_seen":"2026-05-21T22:10:52.017008Z","last_seen":"2026-05-24T21:45:46.151269Z","times_seen":30,"resource_available":true,"data":null}},"time_used":121,"timings":{"blocked":36,"dns":1,"connect":19,"send":0,"wait":38,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tr.rbxcdn.com/180DAY-0bc6c7741481792c60b9a4c5cbc7f936/480/270/Image/Png/noFilter","fqdn":"tr.rbxcdn.com","domain":"rbxcdn.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://noctrunhub.xyz/","date":"2026-05-23T21:06:04.643Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /180DAY-0bc6c7741481792c60b9a4c5cbc7f936/480/270/Image/Png/noFilter HTTP/1.1\r\nHost: tr.rbxcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://noctrunhub.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T19:04:39.868583Z","times_seen":17906266,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"realizationnewestfangs.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.conditionfuneral.com%2Fsb%2Fnotifications%2Fdating%2Fdefault%2Fus%2Fdesk-all%2Fjs%2Fscript.js\u0026l=386\u0026fd=26","fqdn":"realizationnewestfangs.com","domain":"realizationnewestfangs.com","tld":"com"},"ip":{"addr":"172.240.127.243","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://noctrunhub.xyz/","date":"2026-05-23T21:06:05.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"realizationnewestfangs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 23:41:18 GMT","end":"Sun, 26 Jul 2026 23:41:17 GMT"},"fingerprint":{"sha1":"A3:A7:19:A7:E1:1E:FA:B7:D5:D2:AB:89:E2:E5:2D:BA:31:4C:DC:31","sha256":"9B:B1:9D:73:D4:D6:68:DF:63:E8:A6:F5:27:EB:47:26:AA:6F:52:E3:A6:56:1C:FF:EE:AC:3E:F6:06:CE:09:CA"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.conditionfuneral.com%2Fsb%2Fnotifications%2Fdating%2Fdefault%2Fus%2Fdesk-all%2Fjs%2Fscript.js\u0026l=386\u0026fd=26 HTTP/1.1\r\nHost: realizationnewestfangs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://noctrunhub.xyz/\r\nCookie: uid_id2=aa2145c7-28f4-4fe8-8464-b398d39c0e09:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl28907366=1; slecd20baef8978de37611d98b1b8882082b=[6655446]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sat, 23 May 2026 21:06:05 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: Sec-CH-UA-Model, Sec-CH-UA-Mobile, X-OperaMini-Phone-UA, X-UCBrowser-Device-UA, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Device-Stock-UA, X-Device-User-Agent, User-Agent, Sec-CH-UA-Platform-Version, Sec-CH-UA-PlatformUser-Agent\r\nHost: realizationnewestfangs.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T19:04:39.868583Z","times_seen":17906266,"resource_available":true,"data":null}},"time_used":661,"timings":{"blocked":282,"dns":1,"connect":92,"send":0,"wait":93,"receive":0,"ssl":187},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"realizationnewestfangs.com/sbar.json?key=d20baef8978de37611d98b1b8882082b\u0026uuid=aa2145c7-28f4-4fe8-8464-b398d39c0e09%3A1%3A1","fqdn":"realizationnewestfangs.com","domain":"realizationnewestfangs.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://noctrunhub.xyz/","date":"2026-05-23T21:06:04.256Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"realizationnewestfangs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 23:41:18 GMT","end":"Sun, 26 Jul 2026 23:41:17 GMT"},"fingerprint":{"sha1":"A3:A7:19:A7:E1:1E:FA:B7:D5:D2:AB:89:E2:E5:2D:BA:31:4C:DC:31","sha256":"9B:B1:9D:73:D4:D6:68:DF:63:E8:A6:F5:27:EB:47:26:AA:6F:52:E3:A6:56:1C:FF:EE:AC:3E:F6:06:CE:09:CA"}}},"request":{"raw":"GET /sbar.json?key=d20baef8978de37611d98b1b8882082b\u0026uuid=aa2145c7-28f4-4fe8-8464-b398d39c0e09%3A1%3A1 HTTP/1.1\r\nHost: realizationnewestfangs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://noctrunhub.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://noctrunhub.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sat, 23 May 2026 21:06:04 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 3624\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Sec-CH-UA-Mobile,X-Device-User-Agent,X-UCBrowser-Device-UA,Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform,Device-Stock-UA,X-OperaMini-Phone-UA,User-Agent,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Full-Version,Sec-CH-UA-Model\r\naccess-control-allow-origin: https://noctrunhub.xyz\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\nset-cookie: uid_id2=aa2145c7-28f4-4fe8-8464-b398d39c0e09:1:1; expires=Sat, 30 May 2026 21:06:04 GMT; path=/; secure; SameSite=None\npdhtkv=true; expires=Sun, 24 May 2026 21:06:04 GMT; path=/; secure; SameSite=None\nuncs=1; expires=Sun, 24 May 2026 21:06:04 GMT; path=/; secure; SameSite=None\npdhtkv29=true; expires=Sun, 24 May 2026 21:06:04 GMT; path=/; secure; SameSite=None\nuncs29=1; expires=Sun, 24 May 2026 21:06:04 GMT; path=/; secure; SameSite=None\nu_pl28907366=1; expires=Sun, 24 May 2026 21:06:04 GMT; path=/; secure; SameSite=None\nslecd20baef8978de37611d98b1b8882082b=[6655446]; expires=Sat, 23 May 2026 21:06:09 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 219\r\nHost: realizationnewestfangs.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 0bffba4c9942067ae5f6cf7f9ffd7444\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5705,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"JSON text data","md5":"71ccf2b581a839df97269b0798b76808","sha1":"82c2edbe94acd32875f4a0001b246329a037f3fc","sha256":"56ecb6a9c89e8441a4ba8848ed8a8f32194c0947dddf693a45e7f9c3b01ce9b8","sha512":"75c5767f1e0980db35840390bb7e2dddd80ebf574bae69ac1eb473ec6f0b4d037f764fc2d9591e34136635f12ef3e545784a694e5bd405d1fe7f3197d9fb6150","ssdeep":"96:9zo0BqsBJxuoFYMZXr5zpDXuEbsKXY1W0BqsBJxuoFYMZNf7e1gPFHUzUSQlEylz:9z7BFQMZXr5FL4MYHBFQMZmgtHUYlEy5","tlshash":"6bc15dbe24412df18690a88246df3f780dd6a91f4868fbf5455b677cc53f020940e2b1","first_seen":"2026-05-23T21:06:34.41699Z","last_seen":"2026-05-23T21:06:34.41699Z","times_seen":1,"resource_available":false,"data":null}},"time_used":896,"timings":{"blocked":266,"dns":1,"connect":91,"send":0,"wait":349,"receive":0,"ssl":187},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://noctrunhub.xyz/","date":"2026-05-23T21:06:04.333Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"preferencenail.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 01:34:17 GMT","end":"Mon, 27 Jul 2026 01:34:16 GMT"},"fingerprint":{"sha1":"95:86:03:59:0E:03:98:91:87:F0:07:36:44:10:95:8E:67:97:47:D8","sha256":"51:F3:91:79:18:08:9A:FD:A7:80:AD:AA:80:FB:C8:8B:AE:27:FD:79:25:B6:37:2F:1B:C5:60:67:25:A8:A7:02"}}},"request":{"raw":"GET /sfp.js HTTP/1.1\r\nHost: preferencenail.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://noctrunhub.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sat, 23 May 2026 21:06:04 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nContent-Length: 32181\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nVary: Accept-Encoding\r\nHost: preferencenail.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: d422a75833783e1448b8224ef38bf5f9\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":85379,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-08-15T18:58:55.839295Z","times_seen":26545,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tr.rbxcdn.com/180DAY-2da9181d1d07dfa504380928e9b51f7a/480/270/Image/Png/noFilter","fqdn":"tr.rbxcdn.com","domain":"rbxcdn.com","tld":"com"},"ip":{"addr":"52.84.50.57","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://noctrunhub.xyz/","date":"2026-05-23T21:06:04.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rbxcdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 09 Oct 2025 00:00:00 GMT","end":"Sat, 07 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0D:DC:44:16:2A:50:86:97:28:B7:54:7B:F1:62:AE:8D:85:A2:B2:8B","sha256":"E6:A2:4B:B5:0E:CF:E8:60:AD:08:DA:72:4E:0E:FB:04:62:FA:BC:04:9A:44:20:C8:C3:69:23:4A:74:90:B4:F4"}}},"request":{"raw":"GET /180DAY-2da9181d1d07dfa504380928e9b51f7a/480/270/Image/Png/noFilter HTTP/1.1\r\nHost: tr.rbxcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://noctrunhub.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/Png\r\ncontent-length: 201245\r\ndate: Sun, 26 Apr 2026 18:46:50 GMT\r\nserver: public-gateway\r\ncache-control: no-cache\r\nedge-cache-tag: 180DAY-2da9181d1d07dfa504380928e9b51f7a\r\nstrict-transport-security: max-age=31536000\r\nx-frame-options: SAMEORIGIN\r\nroblox-machine-id: a32b25eb-e1d8-1eba-166a-1d4f0aca0add\r\nx-envoy-upstream-service-time: 468\r\nx-terms-message: Terms apply https://rblx.co/TOU.\r\nx-ratelimit-limit: 300000, 300000;w=60\r\nx-ratelimit-remaining: 252575\r\nx-ratelimit-reset: 10\r\nx-ingress-proxy: true\r\nx-roblox-edge: c088\r\nreport-to: {\"group\":\"network-errors\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://ncs.roblox.com/upload\"}]}\r\nnel: {\"report_to\":\"network-errors\",\"max_age\":604800,\"success_fraction\":0,\"failure_fraction\":0.05,\"response_headers\":[\"Rbx-Cdn-Provider\",\"vary\"]}\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 1ad6d29ff66cbe7838d3a30dae2f9382.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: Rn0fJZ0HZedl8L5UNsCsfbIg2Q1C61AasMFKX5QouZB6TFn-So3Vpw==\r\nage: 2341154\r\nrbx-cdn-provider: aws\r\ntiming-allow-origin: *\r\nvary: Origin\r\nserver-timing: cdn-cache-hit,cdn-pop;desc=\"OSL50-P3\",cdn-rid;desc=\"Rn0fJZ0HZedl8L5UNsCsfbIg2Q1C61AasMFKX5QouZB6TFn-So3Vpw==\",cdn-hit-layer;desc=\"EDGE\",cdn-downstream-fbl;dur=2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":201245,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 480 x 270, 8-bit/color RGBA, non-interlaced","md5":"0d5a8d28bc9710797be879f077926d9f","sha1":"5968ffff34391344b4c1907d8a325ca2fff9b073","sha256":"b257046291713ffd30ec7c2dd113c57025d368c88294424e931329b4f6b86618","sha512":"bfc719c9a6a4879cfee4a80db318d72374044b4c042fb73738a04fb3e1f606bcdad4f80474b185e498ad342b9c47cdedd4cd8733c3f8d53649da0524a212b7b9","ssdeep":"6144:DBvuUSGFZn3QLfTih/XzCFBCZVcmEQ+az6TruO+V:dVnUfK7C9mEQ+aWTyO+V","tlshash":"a71422e09440bb882327c372728159165c3620bf5436f91dbd9f6a7f53a1a89d8fbc6c","first_seen":"2026-05-23T21:06:34.419888Z","last_seen":"2026-05-23T21:06:34.419888Z","times_seen":1,"resource_available":false,"data":null}},"time_used":345,"timings":{"blocked":163,"dns":135,"connect":0,"send":0,"wait":4,"receive":9,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tr.rbxcdn.com/180DAY-3f24d2434838bb30cbfdb92695b1b1a8/480/270/Image/Png/noFilter","fqdn":"tr.rbxcdn.com","domain":"rbxcdn.com","tld":"com"},"ip":{"addr":"52.84.50.57","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://noctrunhub.xyz/","date":"2026-05-23T21:06:04.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rbxcdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 09 Oct 2025 00:00:00 GMT","end":"Sat, 07 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0D:DC:44:16:2A:50:86:97:28:B7:54:7B:F1:62:AE:8D:85:A2:B2:8B","sha256":"E6:A2:4B:B5:0E:CF:E8:60:AD:08:DA:72:4E:0E:FB:04:62:FA:BC:04:9A:44:20:C8:C3:69:23:4A:74:90:B4:F4"}}},"request":{"raw":"GET /180DAY-3f24d2434838bb30cbfdb92695b1b1a8/480/270/Image/Png/noFilter HTTP/1.1\r\nHost: tr.rbxcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://noctrunhub.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/Png\r\ncontent-length: 157526\r\ndate: Sat, 25 Apr 2026 01:36:13 GMT\r\nserver: public-gateway\r\ncache-control: no-cache\r\nedge-cache-tag: 180DAY-3f24d2434838bb30cbfdb92695b1b1a8\r\nstrict-transport-security: max-age=31536000\r\nx-frame-options: SAMEORIGIN\r\nroblox-machine-id: 5ec49d59-c8f9-e734-be61-e3fd1ee43c75\r\nx-envoy-upstream-service-time: 380\r\nx-terms-message: Terms apply https://rblx.co/TOU.\r\nx-ratelimit-limit: 300000, 300000;w=60\r\nx-ratelimit-remaining: 295268\r\nx-ratelimit-reset: 46\r\nx-ingress-proxy: true\r\nx-roblox-edge: c088\r\nreport-to: {\"group\":\"network-errors\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://ncs.roblox.com/upload\"}]}\r\nnel: {\"report_to\":\"network-errors\",\"max_age\":604800,\"success_fraction\":0,\"failure_fraction\":0.05,\"response_headers\":[\"Rbx-Cdn-Provider\",\"vary\"]}\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 1ad6d29ff66cbe7838d3a30dae2f9382.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: kG8w3JKeHwVMZwDSH5XWJ3lz8kKHu_0cz0OJzAnBGZdvcwSMWxmjwA==\r\nage: 2489390\r\nrbx-cdn-provider: aws\r\ntiming-allow-origin: *\r\nvary: Origin\r\nserver-timing: cdn-cache-hit,cdn-pop;desc=\"OSL50-P3\",cdn-rid;desc=\"kG8w3JKeHwVMZwDSH5XWJ3lz8kKHu_0cz0OJzAnBGZdvcwSMWxmjwA==\",cdn-hit-layer;desc=\"EDGE\",cdn-downstream-fbl;dur=1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":157526,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 480 x 270, 8-bit/color RGB, non-interlaced","md5":"09b4db1cee6b817616e215327b821a19","sha1":"fc590023664172d3f15ea5ac086c59fbd300a207","sha256":"8e7b130c6494b4b49a0121311079a8b2d3f5591f32fd699fa97826802ef39f07","sha512":"1c2f0d6c3f3003d772082de85a9d2605178307df4a11cedcd1fbd5de481199afefb59863baf655ac5c437733dd27771f26926996637daf1efe0d0b33ce6b9bb5","ssdeep":"3072:8JDI99QjFJbYBNy6J71BiNZYMjkzTupJ4WYDXiMSJSr5N1/BFTfdpw:fQjFJsl5Bi/t5pJziSNJSP1pFJO","tlshash":"43f313af848cb5157bbcb2924dda99941fd4d62ce4e0152e51e8e12dcc8850efc09ff9","first_seen":"2026-05-23T21:06:34.423983Z","last_seen":"2026-05-23T21:06:34.423983Z","times_seen":1,"resource_available":false,"data":null}},"time_used":420,"timings":{"blocked":202,"dns":134,"connect":9,"send":0,"wait":4,"receive":4,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"realizationnewestfangs.com/pixel/sbs?c=1","fqdn":"realizationnewestfangs.com","domain":"realizationnewestfangs.com","tld":"com"},"ip":{"addr":"172.240.127.243","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://noctrunhub.xyz/","date":"2026-05-23T21:06:05.636Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"realizationnewestfangs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 23:41:18 GMT","end":"Sun, 26 Jul 2026 23:41:17 GMT"},"fingerprint":{"sha1":"A3:A7:19:A7:E1:1E:FA:B7:D5:D2:AB:89:E2:E5:2D:BA:31:4C:DC:31","sha256":"9B:B1:9D:73:D4:D6:68:DF:63:E8:A6:F5:27:EB:47:26:AA:6F:52:E3:A6:56:1C:FF:EE:AC:3E:F6:06:CE:09:CA"}}},"request":{"raw":"GET /pixel/sbs?c=1 HTTP/1.1\r\nHost: realizationnewestfangs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://noctrunhub.xyz/\r\nCookie: uid_id2=aa2145c7-28f4-4fe8-8464-b398d39c0e09:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl28907366=1; slecd20baef8978de37611d98b1b8882082b=[6655446]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sat, 23 May 2026 21:06:05 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: Sec-CH-UA-Mobile, Device-Stock-UA, X-Device-User-Agent, X-UCBrowser-Device-UA, User-Agent, Sec-CH-UA-Platform-Version, Sec-CH-UA-Platform, Sec-CH-UA-Model, X-OperaMini-Phone-UA, Sec-CH-UA, Sec-CH-UA-PlatformUser-Agent, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List\r\nHost: realizationnewestfangs.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T19:04:39.868583Z","times_seen":17906266,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"protrafficinspector.com/stats","fqdn":"protrafficinspector.com","domain":"protrafficinspector.com","tld":"com"},"ip":{"addr":"63.179.187.103","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://noctrunhub.xyz/","date":"2026-05-23T21:06:03.717Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"statistics.it.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 14 Apr 2026 00:00:00 GMT","end":"Wed, 28 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:66:77:D7:9E:99:80:D4:C4:22:4B:79:2F:16:2B:49:2C:08:07:99","sha256":"54:26:39:E0:45:11:B3:20:EE:6C:3E:B3:C0:57:5D:F2:28:8C:E0:E1:C4:F0:BD:56:E7:8C:91:6B:40:CC:0E:0D"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: protrafficinspector.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://noctrunhub.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://noctrunhub.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 23 May 2026 21:06:03 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\nserver: fasthttp\r\naccept-ch: Sec-CH-UA-Platform,Sec-CH-UA-Model,X-Device-User-Agent,X-UCBrowser-Device-UA,User-Agent,Sec-CH-UA-Platform-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Device-Stock-UA,X-OperaMini-Phone-UA,Sec-CH-UA,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Full-Version\r\naccess-control-allow-origin: https://noctrunhub.xyz\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nset-cookie: uid_id2=aa2145c7-28f4-4fe8-8464-b398d39c0e09:1:1; expires=Tue, 20 May 2036 21:06:03 GMT; secure; SameSite=None\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"51db952cb216497d4b1e2a41d08d9d17","sha1":"ff6aebe5fd25ac30d5fe808ce494cfd5c3fc168c","sha256":"393867ba3bbc1e6224bce84555252d06dbe15f05f57f7ad5a8d58368580362db","sha512":"f9b5980f153893b9140ceef8a104adf9670fad30efa93eabab2cf4ba9e071f7fdd9c4b5cd34882a611915b41e85c37664b66ff776797da097bca6ef4e343936b","ssdeep":"","tlshash":"5e90041cd74054104c4cdd51c044030104d4c57d045d533df410c40d501055d4371544","first_seen":"2026-05-23T21:06:34.42979Z","last_seen":"2026-05-23T21:06:34.42979Z","times_seen":1,"resource_available":false,"data":null}},"time_used":330,"timings":{"blocked":153,"dns":22,"connect":21,"send":0,"wait":21,"receive":0,"ssl":109},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"nlcwreopotnsqcbqphri.supabase.co/realtime/v1/websocket?apikey=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6Im5sY3dyZW9wb3Ruc3FjYnFwaHJpIiwicm9sZSI6ImFub24iLCJpYXQiOjE3Njk1NDE1MDEsImV4cCI6MjA4NTExNzUwMX0.l69R0cMcbNTEh2eD17XpfN5orBfuv0_rZEOKg-u4F2o\u0026vsn=1.0.0","fqdn":"nlcwreopotnsqcbqphri.supabase.co","domain":"nlcwreopotnsqcbqphri.supabase.co","tld":"supabase.co"},"ip":{"addr":"104.18.38.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://noctrunhub.xyz/","date":"2026-05-23T21:06:03.864Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supabase.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Apr 2026 07:48:36 GMT","end":"Wed, 29 Jul 2026 08:48:34 GMT"},"fingerprint":{"sha1":"CA:A1:55:FA:10:0A:42:25:AC:57:D5:30:F6:D2:6F:06:35:61:90:C0","sha256":"B9:B8:F4:CE:6C:86:1D:3D:D1:67:87:08:FA:4A:40:62:10:7E:E7:05:0B:52:82:0F:99:10:50:F1:2E:B2:91:00"}}},"request":{"raw":"GET /realtime/v1/websocket?apikey=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6Im5sY3dyZW9wb3Ruc3FjYnFwaHJpIiwicm9sZSI6ImFub24iLCJpYXQiOjE3Njk1NDE1MDEsImV4cCI6MjA4NTExNzUwMX0.l69R0cMcbNTEh2eD17XpfN5orBfuv0_rZEOKg-u4F2o\u0026vsn=1.0.0 HTTP/1.1\r\nHost: nlcwreopotnsqcbqphri.supabase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://noctrunhub.xyz\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 9tircWABk+hziuHFtI4wVQ==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Sat, 23 May 2026 21:06:04 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: RODxycwGKpbwr3X+tZKCBOVeRB0=\r\nCF-Ray: a00705b6eaae0b51-OSL\r\nCF-Cache-Status: DYNAMIC\r\nCache-Control: max-age=0, private, must-revalidate\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains; preload\r\nsb-gateway-mode: direct\r\nsb-gateway-version: 1\r\nsb-project-ref: nlcwreopotnsqcbqphri\r\nsb-request-id: 019e56a8-ce65-7302-ac0f-7d1a553b033c\r\nSet-Cookie: __cf_bm=2TSDvoo_gDdl.an79zztNMktkTvhLCFeo6ymjYywlDc-1779570364-1.0.1.1-R5VKxtsdRzfbwArhH.hB8OBPVYkI3.5AKoCPmzNoO_loBfv414aO0RPUzABDKWKocq0DS8xKWcjCmr6hVOA3Gd9xcX3v2WcgWBAOs3Rbb8s; path=/; expires=Sat, 23-May-26 21:36:04 GMT; domain=.supabase.co; HttpOnly; Secure; SameSite=None\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T19:04:39.868583Z","times_seen":17906266,"resource_available":true,"data":null}},"time_used":327,"timings":{"blocked":6,"dns":73,"connect":82,"send":0,"wait":135,"receive":0,"ssl":112},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"workdeadlinededicate.com/pixel/purst?dl=0\u0026th=0\u0026sc=0\u0026rs=1413\u0026rd=1413\u0026fd=511\u0026bv=2026.5.0\u0026tmpl=70","fqdn":"workdeadlinededicate.com","domain":"workdeadlinededicate.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://noctrunhub.xyz/","date":"2026-05-23T21:06:04.330Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"workdeadlinededicate.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 00:44:47 GMT","end":"Mon, 27 Jul 2026 00:44:46 GMT"},"fingerprint":{"sha1":"B2:89:22:5D:2D:93:D6:5F:5A:1E:20:6A:F9:7C:82:61:CD:1B:4B:5A","sha256":"B7:17:42:1C:C7:69:36:5F:B7:F6:FC:74:D7:06:80:33:40:84:19:A9:7B:C3:25:DA:2D:5B:DF:90:9B:69:F4:EF"}}},"request":{"raw":"GET /pixel/purst?dl=0\u0026th=0\u0026sc=0\u0026rs=1413\u0026rd=1413\u0026fd=511\u0026bv=2026.5.0\u0026tmpl=70 HTTP/1.1\r\nHost: workdeadlinededicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://noctrunhub.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sat, 23 May 2026 21:06:04 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: Sec-CH-UA-Mobile, Device-Stock-UA, X-Device-User-Agent, X-UCBrowser-Device-UA, User-Agent, Sec-CH-UA-Platform-Version, Sec-CH-UA-Platform, Sec-CH-UA-Model, X-OperaMini-Phone-UA, Sec-CH-UA, Sec-CH-UA-PlatformUser-Agent, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List\r\nHost: workdeadlinededicate.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T19:04:39.868583Z","times_seen":17906266,"resource_available":true,"data":null}},"time_used":657,"timings":{"blocked":281,"dns":1,"connect":93,"send":0,"wait":92,"receive":1,"ssl":186},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"workdeadlinededicate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"quarrelsomebitter.com/a.W-1fwgchmiV_zkcl2mlnv-bpjq9rhsZ_GulvkwPxT-UzzANBDCU_1EMFyGZHi-dJGK4L9MQ_2OdPKQTR1-RT4USVUWp_ZYbZkapb2-WdVedfSga_ViljXkNlW-tnNoTpHql_0setUu5vB-Rx0y9zOAT_ECVDBEdFy-0HtIJJmKN_0MPNWOxPx-cRXSpTlUZ_zWJXiYYZj-FbmcedGeZ_wgehmiwj0-alWmln1oJ_mqQr9sMtT-cv3wOxTyU_3AMBDCMD2-MFzGkH2IO_TKcL4MNND-MPxQMRiSZ_pUZVnWJXh-bZWaVbpcZ_De1f6gZhm-tjmkYlXmY_moapXqNrt-dtWuxv0wa_XyRzhAZBz-0DzEZFTGd_mIYJzKgLz-YNjOdPlQO_GSQTwUMVG-IXxYMZjaI_5cMd2eFfl-OhTicjxkO_WmVnjoZpD-JrjsMtiuZ_twdxWyxz0-aBXCRDhEZ_2GJHhIbJm-5LlMcNjO1_0QcRnSVTl-JVnWJXyYa_WaQb9cMd2-Uf3gZhmiM_4kMl2mIn3-ZpTqhrksM_DuBviwMxT-IzyAOBTCN_hEZFTGkH3-MJTKlLlMY_2OQPyQYRz-ITmUeVmW9_uYZZWalbk-PdTecfwgM_ziMj0kMlj-kn","fqdn":"quarrelsomebitter.com","domain":"quarrelsomebitter.com","tld":"com"},"ip":{"addr":"88.85.69.211","port":443,"asn":35415,"as":"Webzilla B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://noctrunhub.xyz/","date":"2026-05-23T21:06:04.539Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"quarrelsomebitter.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Apr 2026 16:05:02 GMT","end":"Sat, 18 Jul 2026 16:05:01 GMT"},"fingerprint":{"sha1":"D0:3E:F6:80:E3:E3:52:21:5F:40:0F:BE:27:4E:56:19:B2:12:93:A3","sha256":"85:08:C9:99:5A:F1:9D:34:2D:79:C1:83:99:9B:59:C6:27:37:09:A5:6C:65:37:4F:CB:A0:FD:DE:85:12:42:31"}}},"request":{"raw":"GET /a.W-1fwgchmiV_zkcl2mlnv-bpjq9rhsZ_GulvkwPxT-UzzANBDCU_1EMFyGZHi-dJGK4L9MQ_2OdPKQTR1-RT4USVUWp_ZYbZkapb2-WdVedfSga_ViljXkNlW-tnNoTpHql_0setUu5vB-Rx0y9zOAT_ECVDBEdFy-0HtIJJmKN_0MPNWOxPx-cRXSpTlUZ_zWJXiYYZj-FbmcedGeZ_wgehmiwj0-alWmln1oJ_mqQr9sMtT-cv3wOxTyU_3AMBDCMD2-MFzGkH2IO_TKcL4MNND-MPxQMRiSZ_pUZVnWJXh-bZWaVbpcZ_De1f6gZhm-tjmkYlXmY_moapXqNrt-dtWuxv0wa_XyRzhAZBz-0DzEZFTGd_mIYJzKgLz-YNjOdPlQO_GSQTwUMVG-IXxYMZjaI_5cMd2eFfl-OhTicjxkO_WmVnjoZpD-JrjsMtiuZ_twdxWyxz0-aBXCRDhEZ_2GJHhIbJm-5LlMcNjO1_0QcRnSVTl-JVnWJXyYa_WaQb9cMd2-Uf3gZhmiM_4kMl2mIn3-ZpTqhrksM_DuBviwMxT-IzyAOBTCN_hEZFTGkH3-MJTKlLlMY_2OQPyQYRz-ITmUeVmW9_uYZZWalbk-PdTecfwgM_ziMj0kMlj-kn HTTP/1.1\r\nHost: quarrelsomebitter.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://noctrunhub.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 23 May 2026 21:06:04 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 0\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\naccept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64\r\nexpires: Mon, 26 Jul 2011 05:00:00 GMT\r\np3p: CP=\"CUR ADM OUR NOR STA NID\"\r\nlast-modified: Sat, 23 May 2026 21:06:04 GMT\r\nset-cookie: uniqCookie=7361c1afb73ad0dd630551ac6875962b; max-age=1782162364; path=/\nkadCCap=480766:15:1761200580;770155:1:1768117452;352095:1:1761415687;343686:1:1763782951;869708:1:1779568472;518003:1:1764797531;788494:1:1772548082;705955:5:1762464096;831339:1:1772045108;784217:1:1772395716;172736:4:1766148180;836596:1:1772859028;755173:1:1763104240;639730:1:1762539999;172038:1:1770988489;187145:1:1760276183;770142:1:1769374815;737338:4:1765014474;480751:1:1762452216;790667:1:1772661062;828804:1:1775245136;319026:2:1764132195;727625:1:1760387158;789616:1:1769167973;832912:1:1772395685;639733:1:1764361348;773283:1:1765049500;770152:1:1769371330;787505:1:1766446705;761031:1:1764198123;179116:1:1761091143;243581:4:1765744793;791450:64:1767001548;654646:1:1769388467;319027:1:1772656375;851675:1:1776638533;340989:4:1766884594;611366:1:1776958370;202595:1:1761091982;337454:1:1773508508;177035:1:1760306019;574303:1:1763245754;875194:1:1777913037;639351:1:1763853658;681631:2:1763300269;540373:1:1773486365;834370:1:1772699843;319840:1:1771775371;782630:4:1766243155;620216:1:1762717409;833228:1:1772481104;780330:1:1774862815;554656:1:1772104083;788124:1:1766876096;723659:1:1770865863;778355:1:1767211802;892613:1:1779255798; max-age=1811106364; path=/\nkadACap=617592:1:1760599855;1081648:1:1766259023;1132126:1:1769726090;884032:1:1778785320;1070796:1:1763038139;1213546:1:1778785225;1045452:1:1761091778;1206999:1:1778526611;1172156:1:1775370145;637001:1:1776017392;1059363:1:1764730201;1101890:1:1772553468;1132125:1:1770073891;417809:1:1777327662;1215140:1:1779484096;383973:4:1768582026;1132121:1:1771508378;534545:1:1779531708;1170974:1:1774732841;1047949:1:1771165504;1079980:2:1769267027;1155521:1:1774424827;1146276:1:1770864184;384014:1:1768074049;387560:4:1766148180;1171321:1:1776591474;1071958:1:1766201596;629619:1:1778697991;1058800:1:1764659475;1037297:1:1761177316;383975:1:1770674609;448198:1:1766191438;1132567:1:1774683944;534555:1:1778437069;1123293:1:1770891614;408266:1:1760276183;534731:1:1778731552;1071745:1:1765721712;1047946:1:1770946979;951033:1:1764530549;1172154:1:1775662135;1080458:1:1779550142;1068286:1:1777994156;1177908:1:1775394754;1148262:1:1773525195;947160:1:1763753983;384007:1:1769052427;876568:1:1770072840;1081474:1:1764340529;1213539:1:1778785148;1069492:2:1769726989;863435:1:1771940849;1213535:1:1778785453;1109279:1:1769167973;1213537:1:1779531088;1177898:1:1774939325;1146274:1:1770861709;631531:1:1777233604;534814:1:1777870585;534542:1:1779535050;1172157:1:1775737484;1213538:1:1778220454;534540:1:1776466829;1069638:1:1771940665;419321:1:1773858315;1141024:1:1771171300;884030:1:1778785199;535727:1:1772717733;944300:1:1760569836;1068446:4:1768724207;1151591:1:1779069532;1068287:3:1779152493;1059468:4:1769648534;346327:1:1779535911;1215141:1:1779004730;1047954:1:1770746585;1047953:1:1770468578;772298:1:1772206836;1018554:1:1777566858;1051729:1:1764801488;1047951:1:1765859337;1071957:1:1766539824;902286:1:1768662578;446879:3:1760567745;534810:1:1772364986;884029:1:1779174073;1044176:1:1760700712;651040:1:1763210271;863845:4:1769234865;884031:1:1778220455;1071709:1:1763231641;516969:1:1764746498;1161828:1:1773541826;1029610:1:1765964688;1148503:1:1772057298;535732:1:1779073862;1094281:1:1765733497;1215144:1:1778989221;1079991:1:1772275778;1202229:1:1779492416;1212780:1:1779492417;1213545:1:1779173724;390509:1:1760567610;1193952:1:1776233742;884027:1:1775673323;1177900:1:1775445792;1080012:4:1769208262;1147388:1:1771909166;1006270:1:1771941180;1177905:1:1775629701;1081610:4:1766210516;1215070:2:1779173761;884028:1:1775674266;1081649:1:1766376559;396855:1:1761091143;560695:2:1760862587;1068284:1:1779569301;1172155:1:1775673222;1037886:1:1761128105;1151590:1:1779531050;1132554:2:1770110544;1213544:1:1779173764;1080974:1:1764352700;1044161:1:1760700707;863517:1:1770060229;1054299:1:1763848650;535729:1:1778437069;741472:1:1765104051;1044066:1:1760700860;637675:1:1775993810;1207000:1:1777321019;1146341:1:1773525239;876566:1:1771164794;613535:1:1774445819;1195192:1:1777149723;1059265:1:1764579376;1215068:1:1779173640;1146324:1:1770896901;1045165:1:1764324898;637676:1:1776962071;1064766:1:1770276938;1045168:1:1763729461;410254:1:1772916859;1177904:1:1775397138;1228863:1:1779531089;1215064:1:1779531064;1018555:1:1775083128;1094981:1:1767137869;534553:1:1779570364;835776:4:1769336485;617595:1:1760395292;637003:1:1775286402;1177903:1:1775401220;1020384:1:1777150079;617241:1:1773508508;876570:1:1771113395;1070939:4:1763752607;1144858:1:1771940665;617590:1:1761233185;1172158:1:1776295928;876567:1:1769689158;1047950:1:1771817541;1098995:4:1765835722;1171367:1:1776273276;1047948:1:1770735633;1069480:4:1769205018;876569:1:1771178455;516971:1:1770633292;1132127:1:1771397632;1111983:1:1767825424;535713:1:1779250050;772296:1:1776449432;1132123:1:1771536437;1069459:1:1772195405;629000:1:1760706797;1080170:1:1770072115;1083595:1:1768258277;899813:1:1770807018;637674:1:1778874564;1071956:1:1765721712;1020380:4:1769594033;1045164:1:1760865500;596738:1:1777833114;534535:1:1777263189;1044153:1:1760700974;1103537:1:1772323013;419301:1:1776118086;1215128:1:1779145918;1047947:1:1768097816;741471:1:1761144703;772297:5:1767643467;560690:3:1761285251;1045163:1:1760773528;1037296:1:1761128106;1213536:1:1779173758;1051867:1:1764730202;1094262:64:1767781413;1144874:1:1770745461;1177907:1:1775468261;1148268:1:1772037452;695566:1:1766734891;1021259:1:1771064862;1100599:1:1766618600;892490:1:1760577243;1132128:1:1772253309;1151592:1:1778352169;884035:1:1779173761;581897:1:1760567396;597409:1:1760597808;1097061:1:1765873599;1132122:1:1771397630;884026:1:1778785309;1151589:1:1779413659;386599:1:1770988489;1071727:1:1763462735;1155325:1:1772031916;534733:1:1779492964;1215142:1:1779295466;1129213:1:1773701262;1012095:4:1768730207;1148261:1:1773525383;1204733:1:1777913037;1164826:1:1774542495;884033:1:1779173726;1081306:1:1764132014;1213541:1:1779173761;1151588:1:1779563146;679015:1:1776713865;1081526:1:1766341368;1215067:1:1779173755;536740:1:1776580082;637002:1:1773713238;631501:4:1765590476;430133:1:1761091982;1148264:1:1773564388;884034:1:1778785225;1215065:1:1779173751;1148279:1:1770983574;1080024:1:1770459878;613534:1:1770851058;1049271:2:1768382306; max-age=1811106364; path=/\nkadCSCap=869708:1:1779568472; path=/\nkadASCap=1151588:2:1779533981;534545:1:1779531708;1213537:1:1779531088;1080458:1:1779550142;534542:1:1779535050;1068284:3:1779507449;534553:1:1779570364;1215140:1:1779484096;1215064:1:1779531064;1228863:1:1779531089;1212780:1:1779492417;346327:1:1779535911;1202229:1:1779492416;534733:1:1779492964; path=/\nkadUnP3=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; max-age=1811106364; path=/\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T19:04:39.868583Z","times_seen":17906266,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nlcwreopotnsqcbqphri.supabase.co/storage/v1/object/public/script-thumbnails/1778322105669-ajwggi.png","fqdn":"nlcwreopotnsqcbqphri.supabase.co","domain":"nlcwreopotnsqcbqphri.supabase.co","tld":"supabase.co"},"ip":{"addr":"104.18.38.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://noctrunhub.xyz/","date":"2026-05-23T21:06:04.663Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supabase.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Apr 2026 07:48:36 GMT","end":"Wed, 29 Jul 2026 08:48:34 GMT"},"fingerprint":{"sha1":"CA:A1:55:FA:10:0A:42:25:AC:57:D5:30:F6:D2:6F:06:35:61:90:C0","sha256":"B9:B8:F4:CE:6C:86:1D:3D:D1:67:87:08:FA:4A:40:62:10:7E:E7:05:0B:52:82:0F:99:10:50:F1:2E:B2:91:00"}}},"request":{"raw":"GET /storage/v1/object/public/script-thumbnails/1778322105669-ajwggi.png HTTP/1.1\r\nHost: nlcwreopotnsqcbqphri.supabase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://noctrunhub.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 23 May 2026 21:06:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 544755\r\ncf-ray: a00705bb1cb4712a-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=3600\r\netag: \"052e580f61aecf16318d9863504627a6\"\r\nlast-modified: Sat, 09 May 2026 10:21:48 GMT\r\nserver: cloudflare\r\nsb-gateway-mode: direct\r\nsb-gateway-version: 1\r\nsb-project-ref: nlcwreopotnsqcbqphri\r\nsb-request-id: 019e56a8-d0f6-76fe-aad1-d029e9ac21cb\r\nx-robots-tag: none\r\nx-smart-cdn: true\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nset-cookie: __cf_bm=FGfFh9kvszKZyNqhxg1i_E9nCMo_G3cj_lTHksrv.6U-1779570364.6577945-1.0.1.1-MfPLjsMJyj18CJNphIa7xVjiBZht9MdbRhYBAuLwq0xLDE5v0Ii5cFjoULBoD7wXC8T5IpY8lwrG.pVM51qY3pJ4oFk53P83erReDLxqM3z94G6Hl6l0z.z1dULHaKON; HttpOnly; SameSite=None; Secure; Path=/; Domain=supabase.co; Expires=Sat, 23 May 2026 21:36:05 GMT\r\npriority: u=4,i=?0\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":544755,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 787 x 435, 8-bit/color RGBA, non-interlaced","md5":"052e580f61aecf16318d9863504627a6","sha1":"e1594dc91369bea71242f3b06106a66b1a1f5e67","sha256":"d5c5026c647798bc5050042080282c86db76bd409c1b79150d73fac7124b40d7","sha512":"493ef078a9a99069324c301b47733a0800477b79045d52f2f9542eb7a2d01286183e05498f3c676756bf7fcd19b8a15999f110ce54e6823f345ac1e9c348cb28","ssdeep":"12288:UFE/760+chbLScXdYoMffSvxhYAsQkcaqoJmbxtPbFxt:Uy/762dLZNGfebk/Tgb1v","tlshash":"4ec4231e4bfe318453f12a54bde90dda4c6db66ee88a11a0bdec72b0f07a44479ddc24","first_seen":"2026-05-23T21:06:34.437812Z","last_seen":"2026-05-23T21:06:34.437812Z","times_seen":1,"resource_available":false,"data":null}},"time_used":417,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":386,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pl28598832.profitablecpmratenetwork.com/d3/c8/16/d3c816227a7ae3184fc1874b2722fab1.js","fqdn":"pl28598832.profitablecpmratenetwork.com","domain":"profitablecpmratenetwork.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://noctrunhub.xyz/","date":"2026-05-23T21:06:03.769Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"profitablecpmratenetwork.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 21:34:33 GMT","end":"Fri, 14 Aug 2026 21:34:32 GMT"},"fingerprint":{"sha1":"7F:FD:1F:39:4E:85:34:70:D4:B2:B0:C1:AC:B8:21:EC:15:9B:C2:9E","sha256":"E4:7C:B1:26:7C:AC:26:34:08:C9:63:9F:13:54:66:FA:0C:12:48:01:6C:2A:F5:F5:EA:73:C0:44:5E:96:4C:12"}}},"request":{"raw":"GET /d3/c8/16/d3c816227a7ae3184fc1874b2722fab1.js HTTP/1.1\r\nHost: pl28598832.profitablecpmratenetwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://noctrunhub.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sat, 23 May 2026 21:06:04 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 35494\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Sec-CH-UA-Platform,Device-Stock-UA,Sec-CH-UA-Platform-Version,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Model,Sec-CH-UA-Mobile,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA,User-Agent,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Full-Version-List\r\nx-envoy-upstream-service-time: 3\r\nHost: pl28598832.profitablecpmratenetwork.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: be9a4e1427c85e46bb7f520aa290456b\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":97665,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"8df8855897c52ea0fe2c011020a2bfb2","sha1":"5eb47612e2c960af95485af0de512cdf0b9f4958","sha256":"e8921dea288dffea5d5ef0f6389292f5ed6c480a25d8dea70c1522e338b7f902","sha512":"bef2665ab710faee223f855eea252706faf78e18acf497b0968caf9e74a9b9d0065e8e00400f2e0468c14830b4c628f406cc524bbb6b1a380d6a7b4e9c28abea","ssdeep":"1536:iLPsaX4kt3cFjjAR908hExcqm6UHo9jrLOv+HNAd7kcFe/lZLgbanTh:O4RjjY94zL0dA/lDN","tlshash":"0c93d89c7f41b05c539a20b7212f682ff1198d06549ce4acea43f8f4ee6831ef476669","first_seen":"2026-05-23T21:06:34.441955Z","last_seen":"2026-05-23T21:06:34.441955Z","times_seen":1,"resource_available":true,"data":null}},"time_used":770,"timings":{"blocked":288,"dns":1,"connect":91,"send":0,"wait":98,"receive":92,"ssl":196},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"pl28598832.profitablecpmratenetwork.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"pl28598832.profitablecpmratenetwork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-23","alert":"Phishing Block","trigger":"pl28598832.profitablecpmratenetwork.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tr.rbxcdn.com/180DAY-da525289338642275e4838a07d685e93/480/270/Image/Png/noFilter","fqdn":"tr.rbxcdn.com","domain":"rbxcdn.com","tld":"com"},"ip":{"addr":"52.84.50.57","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://noctrunhub.xyz/","date":"2026-05-23T21:06:04.668Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rbxcdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 09 Oct 2025 00:00:00 GMT","end":"Sat, 07 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0D:DC:44:16:2A:50:86:97:28:B7:54:7B:F1:62:AE:8D:85:A2:B2:8B","sha256":"E6:A2:4B:B5:0E:CF:E8:60:AD:08:DA:72:4E:0E:FB:04:62:FA:BC:04:9A:44:20:C8:C3:69:23:4A:74:90:B4:F4"}}},"request":{"raw":"GET /180DAY-da525289338642275e4838a07d685e93/480/270/Image/Png/noFilter HTTP/1.1\r\nHost: tr.rbxcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://noctrunhub.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/Png\r\ncontent-length: 166677\r\ndate: Mon, 12 Jan 2026 17:55:54 GMT\r\nserver: public-gateway\r\ncache-control: no-cache\r\nstrict-transport-security: max-age=31536000\r\nx-frame-options: SAMEORIGIN\r\nroblox-machine-id: 1e7eb955-033a-7230-52bf-f5ba5517038e\r\nx-envoy-upstream-service-time: 571\r\nx-terms-message: Terms apply https://rblx.co/TOU.\r\nx-ratelimit-limit: 1000, 1000;w=60\r\nx-ratelimit-remaining: 937\r\nx-ratelimit-reset: 6\r\nx-ingress-proxy: true\r\nx-roblox-edge: c080\r\nreport-to: {\"group\":\"network-errors\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://ncs.roblox.com/upload\"}]}\r\nnel: {\"report_to\":\"network-errors\",\"max_age\":604800,\"success_fraction\":0,\"failure_fraction\":0.05,\"response_headers\":[\"Rbx-Cdn-Provider\",\"vary\"]}\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 1ad6d29ff66cbe7838d3a30dae2f9382.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: VSnX59xsgN6r3WKzuLarVjoK0FUn7sQKf8dOzU4H8YiLihbNwJGGWA==\r\nage: 11329810\r\nrbx-cdn-provider: aws\r\ntiming-allow-origin: *\r\nvary: Origin\r\nserver-timing: cdn-cache-hit,cdn-pop;desc=\"OSL50-P3\",cdn-rid;desc=\"VSnX59xsgN6r3WKzuLarVjoK0FUn7sQKf8dOzU4H8YiLihbNwJGGWA==\",cdn-hit-layer;desc=\"EDGE\",cdn-downstream-fbl;dur=1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":166677,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 480 x 270, 8-bit/color RGBA, non-interlaced","md5":"30a76b3a53839123986c002e0ca46cb6","sha1":"44b9bef4cc8208b8c4242229d9af35ea3fc9eb9b","sha256":"473164e040214e2c3457e5c8b5a6b2d6c1f3a82812856f2c90371489331e366c","sha512":"63cd4c1f04c9467b4aee19839032084e53c4566c6d31d0cbc3791b8a69e73d67e9aed5c885d73ed5825a9932c540a9577659c06a06dcd3ba25e6d1f82b911f17","ssdeep":"3072:hAbzzc5H59Oiz1k7FxbR8WDRHbnK5sZ+FwIPV4Qn3IANyYa6PQSIi:uz2H59Oa1UDR7dZ+FjV4UPxhf","tlshash":"05f312685dcdbca7362a215dda0b266e7fb90ff9600203c4ddb1d404fe3c9d227a9952","first_seen":"2026-05-23T21:06:34.445888Z","last_seen":"2026-05-23T21:06:34.445888Z","times_seen":1,"resource_available":false,"data":null}},"time_used":367,"timings":{"blocked":168,"dns":134,"connect":1,"send":0,"wait":20,"receive":4,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tr.rbxcdn.com/180DAY-8ed2a086bd24394c0f49267e90f0ae42/480/270/Image/Png/noFilter","fqdn":"tr.rbxcdn.com","domain":"rbxcdn.com","tld":"com"},"ip":{"addr":"52.84.50.57","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://noctrunhub.xyz/","date":"2026-05-23T21:06:04.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rbxcdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 09 Oct 2025 00:00:00 GMT","end":"Sat, 07 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0D:DC:44:16:2A:50:86:97:28:B7:54:7B:F1:62:AE:8D:85:A2:B2:8B","sha256":"E6:A2:4B:B5:0E:CF:E8:60:AD:08:DA:72:4E:0E:FB:04:62:FA:BC:04:9A:44:20:C8:C3:69:23:4A:74:90:B4:F4"}}},"request":{"raw":"GET /180DAY-8ed2a086bd24394c0f49267e90f0ae42/480/270/Image/Png/noFilter HTTP/1.1\r\nHost: tr.rbxcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://noctrunhub.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/Png\r\ncontent-length: 108098\r\ndate: Mon, 11 May 2026 16:05:56 GMT\r\nserver: public-gateway\r\ncache-control: no-cache\r\nedge-cache-tag: 180DAY-8ed2a086bd24394c0f49267e90f0ae42\r\nstrict-transport-security: max-age=31536000\r\nx-frame-options: SAMEORIGIN\r\nroblox-machine-id: 3337807e-4040-3000-848b-5826a95b36e7\r\nx-envoy-upstream-service-time: 568\r\nx-terms-message: Terms apply https://rblx.co/TOU.\r\nx-ratelimit-limit: 300000, 300000;w=60\r\nx-ratelimit-remaining: 299234\r\nx-ratelimit-reset: 5\r\nx-ingress-proxy: true\r\nx-roblox-edge: c088\r\nreport-to: {\"group\":\"network-errors\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://ncs.roblox.com/upload\"}]}\r\nnel: {\"report_to\":\"network-errors\",\"max_age\":604800,\"success_fraction\":0,\"failure_fraction\":0.05,\"response_headers\":[\"Rbx-Cdn-Provider\",\"vary\"]}\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 1ad6d29ff66cbe7838d3a30dae2f9382.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: as1vB8K23b1d_bAekvIwtLJkGM1Wfl02W4VRz-DO19mitA07_zsW7Q==\r\nage: 1054808\r\nrbx-cdn-provider: aws\r\ntiming-allow-origin: *\r\nvary: Origin\r\nserver-timing: cdn-cache-hit,cdn-pop;desc=\"OSL50-P3\",cdn-rid;desc=\"as1vB8K23b1d_bAekvIwtLJkGM1Wfl02W4VRz-DO19mitA07_zsW7Q==\",cdn-hit-layer;desc=\"EDGE\",cdn-downstream-fbl;dur=2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":108098,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 480 x 253, 8-bit/color RGBA, non-interlaced","md5":"56b27caa9409babe9f0d561458eab88f","sha1":"d9181df52668b3d11005937f6f4c3c279f2beea3","sha256":"577b85729f1a61990297f0765a0ea471823bf23df42304b2cfaf8b45fc36497e","sha512":"1bbab6a501657685bbe1e96097eaa9f0f5f9b27e34e1ae784b36d0079e1c939e0c5912c1279f9e5d3609dd016289c96a7309f3876d45054da98539de168c00c1","ssdeep":"3072:Rd73mccSNznOgia8aT6TyuTBj64GBmgnWR3:R5mGua8agyu5LGBfnI3","tlshash":"08b31216f7fe08eb621d6f521dcd726858611b61ee63d845602f90cfcf8262e046d3ea","first_seen":"2026-05-23T21:06:34.450161Z","last_seen":"2026-05-23T21:06:34.450161Z","times_seen":1,"resource_available":false,"data":null}},"time_used":400,"timings":{"blocked":192,"dns":133,"connect":8,"send":0,"wait":7,"receive":3,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"realizationnewestfangs.com/ren.gif?sid=H4sIAAAAAAAC_1RSPWwcRRidddxRIAKEBtAKpQDBnWd_bm83KSJF_BVgA0mUgmr-1pl4b2e9s3t3vsohQIdkOqBav7PjBkXQBYkCneksIbEF0hVxQ0mJlIIKnX1S4JPm-9Gb4n3vfV_u16eki5rNP_rQTHSWsbVel7qv39a5NCPrrt90PdqlV93bOo_Cq-54kcrhFS8Iu_QN9z0ltsyaTz1KPeq57-pSpWa8doZCF98nXjeh3dDver0Q4_L_s60dWOZADk_JRWjZPvtn-im0mCEf_PC2sluVKd56Z1BnrDIlhvLoVr6Vm1GOwdM2LR2k-dHyN4xtCflmBSY_Wm4AMzxYbACuW7Jy6TF4frSkCT48PGfKM6gcXD6D0XAGlc2g2QzC3IeWvxNASKxvIB88WDfliO2co2yBtmT1yd_Qo5asPn4B-eDh9UyP3Rsmqyttcotx2kCPZ9CbMxT1MarJCvToGKL6DFr-RtaefIB8cLBhMwMt55cZ872wJ_odP07DTpiquBOHUdjhQRLLIBFU0eRMIp3OwKyDevG0gzp1UBcOBnLuhjQOhceCKE2k6NOQhaFUnCaxTylLRB-1uAct9yDKXRTlLrb0Hqx0YCuCoWwOZWZ92zyQma25t6z-sgbN1FSb--zQVJsqJ2DlHkrZHOhi296HqC5MJ6mVU7NIjFfNlHHZTLWsCMrt-WXqJaoXsbgjacI6_X4kOkkSiU7Qi7w4ZXGSyuQgtVXd7Ben5LmFxM5PL6XYUnNX-pQzlcZJP5Yq6EeeJ5OYezyOY5_GPofVDbRdORNmoltyyzlBoVvy5vsKnB3DZscQ-mWw-hWwUQN2p8Ekf5gbUZV1fqfm3fHOBNI0KKpVVDvOfnZKnp9-cvP6L2deq6_-gBIn104fffzXF68-gigbFGWDu_pXgs3s3o8bRaUHesIW5t-oWKUugOmWkNk2hG7Ji_-UZ3d45cJrEMUubHFybf7tIr6DNQS8cJBpgkydkGWA8Qb2PzN_2u_bz7FZOuCZM-VZ6RzwrMy-Pqdp9dzt-TyI4jhSaSTTQAZ-IJMeVUnIkihMwh4q2969eOnnfwMAAP__kvgxVAUEAAA=","fqdn":"realizationnewestfangs.com","domain":"realizationnewestfangs.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://noctrunhub.xyz/","date":"2026-05-23T21:06:05.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"realizationnewestfangs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 23:41:18 GMT","end":"Sun, 26 Jul 2026 23:41:17 GMT"},"fingerprint":{"sha1":"A3:A7:19:A7:E1:1E:FA:B7:D5:D2:AB:89:E2:E5:2D:BA:31:4C:DC:31","sha256":"9B:B1:9D:73:D4:D6:68:DF:63:E8:A6:F5:27:EB:47:26:AA:6F:52:E3:A6:56:1C:FF:EE:AC:3E:F6:06:CE:09:CA"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_1RSPWwcRRidddxRIAKEBtAKpQDBnWd_bm83KSJF_BVgA0mUgmr-1pl4b2e9s3t3vsohQIdkOqBav7PjBkXQBYkCneksIbEF0hVxQ0mJlIIKnX1S4JPm-9Gb4n3vfV_u16eki5rNP_rQTHSWsbVel7qv39a5NCPrrt90PdqlV93bOo_Cq-54kcrhFS8Iu_QN9z0ltsyaTz1KPeq57-pSpWa8doZCF98nXjeh3dDver0Q4_L_s60dWOZADk_JRWjZPvtn-im0mCEf_PC2sluVKd56Z1BnrDIlhvLoVr6Vm1GOwdM2LR2k-dHyN4xtCflmBSY_Wm4AMzxYbACuW7Jy6TF4frSkCT48PGfKM6gcXD6D0XAGlc2g2QzC3IeWvxNASKxvIB88WDfliO2co2yBtmT1yd_Qo5asPn4B-eDh9UyP3Rsmqyttcotx2kCPZ9CbMxT1MarJCvToGKL6DFr-RtaefIB8cLBhMwMt55cZ872wJ_odP07DTpiquBOHUdjhQRLLIBFU0eRMIp3OwKyDevG0gzp1UBcOBnLuhjQOhceCKE2k6NOQhaFUnCaxTylLRB-1uAct9yDKXRTlLrb0Hqx0YCuCoWwOZWZ92zyQma25t6z-sgbN1FSb--zQVJsqJ2DlHkrZHOhi296HqC5MJ6mVU7NIjFfNlHHZTLWsCMrt-WXqJaoXsbgjacI6_X4kOkkSiU7Qi7w4ZXGSyuQgtVXd7Ben5LmFxM5PL6XYUnNX-pQzlcZJP5Yq6EeeJ5OYezyOY5_GPofVDbRdORNmoltyyzlBoVvy5vsKnB3DZscQ-mWw-hWwUQN2p8Ekf5gbUZV1fqfm3fHOBNI0KKpVVDvOfnZKnp9-cvP6L2deq6_-gBIn104fffzXF68-gigbFGWDu_pXgs3s3o8bRaUHesIW5t-oWKUugOmWkNk2hG7Ji_-UZ3d45cJrEMUubHFybf7tIr6DNQS8cJBpgkydkGWA8Qb2PzN_2u_bz7FZOuCZM-VZ6RzwrMy-Pqdp9dzt-TyI4jhSaSTTQAZ-IJMeVUnIkihMwh4q2969eOnnfwMAAP__kvgxVAUEAAA= HTTP/1.1\r\nHost: realizationnewestfangs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://noctrunhub.xyz/\r\nCookie: uid_id2=aa2145c7-28f4-4fe8-8464-b398d39c0e09:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl28907366=1; slecd20baef8978de37611d98b1b8882082b=[6655446]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sat, 23 May 2026 21:06:05 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Sec-CH-UA-Mobile,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Platform,Device-Stock-UA,X-Device-User-Agent,User-Agent,Sec-CH-UA-Platform-Version,Sec-CH-UA,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model\r\nx-envoy-upstream-service-time: 1\r\nHost: realizationnewestfangs.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 44b6c04bb0056d369b27f7ca4401b275\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T19:04:39.868583Z","times_seen":17906266,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"realizationnewestfangs.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.show-sb.com%2Fsb%2Fau%2F24%2F54%2F4e%2F24544ed07f7394384bbb75023b9b0b3a%2F1591713925.html\u0026l=1274\u0026fd=107","fqdn":"realizationnewestfangs.com","domain":"realizationnewestfangs.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://noctrunhub.xyz/","date":"2026-05-23T21:06:05.121Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"realizationnewestfangs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 23:41:18 GMT","end":"Sun, 26 Jul 2026 23:41:17 GMT"},"fingerprint":{"sha1":"A3:A7:19:A7:E1:1E:FA:B7:D5:D2:AB:89:E2:E5:2D:BA:31:4C:DC:31","sha256":"9B:B1:9D:73:D4:D6:68:DF:63:E8:A6:F5:27:EB:47:26:AA:6F:52:E3:A6:56:1C:FF:EE:AC:3E:F6:06:CE:09:CA"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.show-sb.com%2Fsb%2Fau%2F24%2F54%2F4e%2F24544ed07f7394384bbb75023b9b0b3a%2F1591713925.html\u0026l=1274\u0026fd=107 HTTP/1.1\r\nHost: realizationnewestfangs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://noctrunhub.xyz/\r\nCookie: uid_id2=aa2145c7-28f4-4fe8-8464-b398d39c0e09:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl28907366=1; slecd20baef8978de37611d98b1b8882082b=[6655446]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sat, 23 May 2026 21:06:05 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: X-OperaMini-Phone-UA, Sec-CH-UA, Sec-CH-UA-PlatformUser-Agent, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Device-Stock-UA, X-Device-User-Agent, X-UCBrowser-Device-UA, User-Agent, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Model, Sec-CH-UA-Mobile\r\nHost: realizationnewestfangs.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T19:04:39.868583Z","times_seen":17906266,"resource_available":true,"data":null}},"time_used":108,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.conditionfuneral.com/sb/notifications/dating/default/us/desk-all/css/animate.css","fqdn":"cdn.conditionfuneral.com","domain":"conditionfuneral.com","tld":"com"},"ip":{"addr":"172.67.197.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://noctrunhub.xyz/","date":"2026-05-23T21:06:05.126Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"conditionfuneral.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 08:03:50 GMT","end":"Sun, 09 Aug 2026 08:03:49 GMT"},"fingerprint":{"sha1":"53:AE:CE:5A:72:97:87:54:EF:32:07:08:B5:D8:80:A5:92:F7:32:4B","sha256":"B5:57:4E:D5:5A:73:3D:17:CA:A6:71:13:3D:42:7A:56:B5:A7:CD:54:65:92:79:67:F7:81:C4:B3:8C:1A:E3:1A"}}},"request":{"raw":"GET /sb/notifications/dating/default/us/desk-all/css/animate.css HTTP/1.1\r\nHost: cdn.conditionfuneral.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://noctrunhub.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://noctrunhub.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 23 May 2026 21:06:05 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:23:50 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"65aa85f6-13361\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: gzip\r\nage: 125\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rXQ4FSYFaeHGBBCWBXYf3%2FOCHNLnSAbGRwhAwt0HGOGJvsYuQH8AxDYLWGX9ZDm6goFqowb2A6Z8aYT14x8yTGcZmO8sG1USZXA%2FcdKdn%2FRcYRXjwJaCX24yQNLCr4mchRIK3A2D4FW92YY%3D\"}]}\r\ncf-ray: a00705be2a330883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78689,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"3d4123dbfb33d27a5cfdfcfa91df6783","sha1":"e7d0eeeec54b848f0bc3da8685fa3bc88429d660","sha256":"cb7d1393b65701b2f97d8da244c2c6023e9cbc3463ecb0136b915cfc775c6887","sha512":"75c8a48dc207595e201b50b87ff68782112a21aded9f15f14185c07d40f0151d6afe74a2b278aa575caf12ac422e8166316296ed7b6573ea24e667cca4af51dd","ssdeep":"384:jvuAuF81dghu3ublZlX/m/Gu7uNUtrL4VrbZJgBhLYNKwZiMUL6Vpaj7F:jvuAu21dghu3uLu7uNKwZiMUL6Vpaj7F","tlshash":"22731bad399115845263861d83df9e68273ce5731826acef73c2488bcf8bf9867c9147","first_seen":"2024-01-20T06:37:31Z","last_seen":"2026-08-15T18:40:04.612955Z","times_seen":13375,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":22,"dns":0,"connect":1,"send":0,"wait":7,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"cdn.conditionfuneral.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://noctrunhub.xyz/","date":"2026-05-23T21:06:05.644Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:07 GMT","end":"Thu, 30 Jul 2026 15:53:06 GMT"},"fingerprint":{"sha1":"71:33:19:F6:6D:02:E4:65:D5:EB:19:E4:3B:93:00:75:12:EB:BA:E0","sha256":"7A:E1:E3:B3:B6:85:B0:38:E5:62:97:1A:D2:7E:AC:A6:EE:72:1D:20:88:68:87:D3:90:F1:3A:C7:49:7D:22:55"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://noctrunhub.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 23 May 2026 14:48:25 GMT\r\nexpires: Sun, 23 May 2027 14:48:25 GMT\r\ncache-control: public, max-age=31536000\r\nage: 22660\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-08-15T19:04:26.529733Z","times_seen":263027,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":49,"dns":1,"connect":7,"send":0,"wait":8,"receive":9,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"quarrelsomebitter.com/bpX.VMsAd/Ghln0iYaWTce/veZmC9JuzZDUOlkkkPpT-cfweM/ziMR0zMVj/E-tJNkzvAwzeM/zsQyypN/QL","fqdn":"quarrelsomebitter.com","domain":"quarrelsomebitter.com","tld":"com"},"ip":{"addr":"88.85.69.211","port":443,"asn":35415,"as":"Webzilla B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://noctrunhub.xyz/","date":"2026-05-23T21:06:03.858Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"quarrelsomebitter.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Apr 2026 16:05:02 GMT","end":"Sat, 18 Jul 2026 16:05:01 GMT"},"fingerprint":{"sha1":"D0:3E:F6:80:E3:E3:52:21:5F:40:0F:BE:27:4E:56:19:B2:12:93:A3","sha256":"85:08:C9:99:5A:F1:9D:34:2D:79:C1:83:99:9B:59:C6:27:37:09:A5:6C:65:37:4F:CB:A0:FD:DE:85:12:42:31"}}},"request":{"raw":"GET /bpX.VMsAd/Ghln0iYaWTce/veZmC9JuzZDUOlkkkPpT-cfweM/ziMR0zMVj/E-tJNkzvAwzeM/zsQyypN/QL HTTP/1.1\r\nHost: quarrelsomebitter.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://noctrunhub.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 23 May 2026 21:06:03 GMT\r\ncontent-type: application/javascript\r\naccept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64\r\nexpires: Mon, 26 Jul 2011 05:00:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\naccess-control-allow-headers: Content-Type\r\nlast-modified: Sat, 23 May 2026 21:06:03 GMT\r\naccess-control-allow-methods: GET\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-origin: https://noctrunhub.xyz\r\nset-cookie: uniqCookie=5070f8851bef10d95d7539faf8188721; max-age=1782162363; path=/\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":56537,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (23392)","md5":"9a62ab2112a10c96e2db33216735d5db","sha1":"851815773497f2d28bec8994591677192fccd38a","sha256":"c963bd43cbeeb2f99fcf3935a3990fabacf3e88b3e1bd013f183b2f96e21c26d","sha512":"ce93adef11b68426778bbff195421767dfb15fd691f1357e7df51fd3749687595093df77babde328dc3581491b7d28878fac8248cb223afc9177c89e1f2120d1","ssdeep":"1536:0lHg7JpoIvECJZSboEBkleZ2ZcLlbpp4G5iG82IrcjHicPTdsVgsMePr5:SDgoboEBkleZy+pp4GYr8dsVgsMi","tlshash":"1943e9c8b186643a42db503d713f620973361465642db028bc79c8e9acbdd8f8677bbd","first_seen":"2026-05-23T21:06:34.457206Z","last_seen":"2026-05-23T21:06:34.457206Z","times_seen":1,"resource_available":true,"data":null}},"time_used":274,"timings":{"blocked":97,"dns":1,"connect":20,"send":0,"wait":77,"receive":0,"ssl":76},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tr.rbxcdn.com/180DAY-c89cd09a56b3cd168b2f32552bddf644/480/270/Image/Png/noFilter","fqdn":"tr.rbxcdn.com","domain":"rbxcdn.com","tld":"com"},"ip":{"addr":"52.84.50.57","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://noctrunhub.xyz/","date":"2026-05-23T21:06:04.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rbxcdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 09 Oct 2025 00:00:00 GMT","end":"Sat, 07 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0D:DC:44:16:2A:50:86:97:28:B7:54:7B:F1:62:AE:8D:85:A2:B2:8B","sha256":"E6:A2:4B:B5:0E:CF:E8:60:AD:08:DA:72:4E:0E:FB:04:62:FA:BC:04:9A:44:20:C8:C3:69:23:4A:74:90:B4:F4"}}},"request":{"raw":"GET /180DAY-c89cd09a56b3cd168b2f32552bddf644/480/270/Image/Png/noFilter HTTP/1.1\r\nHost: tr.rbxcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://noctrunhub.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/Png\r\ncontent-length: 194241\r\ndate: Thu, 23 Apr 2026 05:17:46 GMT\r\nserver: public-gateway\r\ncache-control: no-cache\r\nedge-cache-tag: 180DAY-c89cd09a56b3cd168b2f32552bddf644\r\nstrict-transport-security: max-age=31536000\r\nx-frame-options: SAMEORIGIN\r\nroblox-machine-id: 25045411-cecd-5dca-af11-6807d8031977\r\nx-envoy-upstream-service-time: 688\r\nx-terms-message: Terms apply https://rblx.co/TOU.\r\nx-ratelimit-limit: 300000, 300000;w=60\r\nx-ratelimit-remaining: 291188\r\nx-ratelimit-reset: 13\r\nx-ingress-proxy: true\r\nx-roblox-edge: c080\r\nreport-to: {\"group\":\"network-errors\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://ncs.roblox.com/upload\"}]}\r\nnel: {\"report_to\":\"network-errors\",\"max_age\":604800,\"success_fraction\":0,\"failure_fraction\":0.05,\"response_headers\":[\"Rbx-Cdn-Provider\",\"vary\"]}\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 1ad6d29ff66cbe7838d3a30dae2f9382.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: jJoNJXulp3xAVFTQGxXN4PF88SymxMLjlzfuA0K9guaSMwKxTQTWGg==\r\nage: 2648897\r\nrbx-cdn-provider: aws\r\ntiming-allow-origin: *\r\nvary: Origin\r\nserver-timing: cdn-cache-hit,cdn-pop;desc=\"OSL50-P3\",cdn-rid;desc=\"jJoNJXulp3xAVFTQGxXN4PF88SymxMLjlzfuA0K9guaSMwKxTQTWGg==\",cdn-hit-layer;desc=\"EDGE\",cdn-downstream-fbl;dur=2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":194241,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 480 x 270, 8-bit/color RGBA, non-interlaced","md5":"371da814512a17048fc7858751fa41b0","sha1":"3e79b1622efe52f82482a249dda51a36c71d67d4","sha256":"de535d4fd5ce80e1324770d3e7e82e46be0ff5a9cb1c6de5d4ad2a12b0ceb6f4","sha512":"8697cf8a6567f294dfd90ca7566b73a2de04ba866706cc0b263c7a5c5589a50b5f47b2f35af2cda888c016a51931f33ddb3540ad6ccd8d1cf0d44520f42b20ab","ssdeep":"3072:xI6NaMNuSXHD5++bdrqvO+wGrJIKpV22cfvNG+4JHJGKavgxSiBfrl4angBDUkbB:xI6NVrHF++btqvBzbpVsD41cySOZAIgB","tlshash":"c8142382366bc507e2450388394d5517f23b05f0d95b4a874e8b6a8f934b1bf2fdae74","first_seen":"2026-05-23T21:06:34.470966Z","last_seen":"2026-05-23T21:06:34.470966Z","times_seen":1,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":160,"dns":0,"connect":0,"send":0,"wait":15,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:300,400,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://noctrunhub.xyz/","date":"2026-05-23T21:06:05.248Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:08 GMT","end":"Thu, 30 Jul 2026 15:53:07 GMT"},"fingerprint":{"sha1":"A0:20:9F:E4:EB:B9:7E:2F:51:C6:BD:BB:AF:02:44:35:C1:8D:84:74","sha256":"EB:51:AB:28:F2:0A:E5:3F:51:9B:1B:F4:37:AA:7D:8A:6F:D7:99:5E:A2:B6:9C:EC:43:85:C5:36:68:23:BE:CD"}}},"request":{"raw":"GET /css?family=Roboto:300,400,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 23 May 2026 21:06:05 GMT\r\ndate: Sat, 23 May 2026 21:06:05 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16755,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"1936a90eef3ebd4c6b40eb59d72e164d","sha1":"4c698f8dc97e2e6186d46215e209aca1b1194a5d","sha256":"412d98c2f4410a048131a7d9362fb38456ce2ff67cd4731ea411708a7996a021","sha512":"07ad2431175e5566ae435738d94d4da3e96e4856a1fe1d5917c52474cab28808cd940fec0e8f75eb2f3d573e6fe8497fc12636ef4738d1b67e9144725192b580","ssdeep":"384:p9f59g9P9r9yU9/qY4+949Y9p9fM919W969yh9/qY4X9N9t949fd9k9D939yQ9/O:pDS99YURRuWDyjooYhREHPWP2ZZYQRVs","tlshash":"48721091041704009b834ce223cebf35fe1f52117142d0b5abfd9b6b9ddbca6526939d","first_seen":"2026-02-19T22:28:01.752187Z","last_seen":"2026-08-15T18:19:00.638143Z","times_seen":10653,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":110,"dns":1,"connect":21,"send":0,"wait":32,"receive":0,"ssl":89},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/si/b3/dd/fd/b3ddfd7cf6f212b3bce3129fb7a007fc/1683231156.png","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://noctrunhub.xyz/","date":"2026-05-23T21:06:05.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 02:33:42 GMT","end":"Tue, 04 Aug 2026 02:33:41 GMT"},"fingerprint":{"sha1":"C1:98:76:68:C0:8B:B9:63:F0:C3:39:51:44:97:B5:E1:8D:C0:2F:94","sha256":"05:2D:DF:45:9A:F6:C6:13:32:59:AB:3B:E0:4C:DB:4B:C6:CA:48:07:A2:C1:1E:0C:F8:98:05:76:B4:C8:E3:FF"}}},"request":{"raw":"GET /si/b3/dd/fd/b3ddfd7cf6f212b3bce3129fb7a007fc/1683231156.png HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 23 May 2026 21:06:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 64601\r\nserver: nginx/1.21.6\r\nlast-modified: Thu, 04 May 2023 20:12:45 GMT\r\netag: \"645411bd-fc59\"\r\nexpires: Mon, 25 May 2026 21:06:05 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":64601,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"887812a53b8ea2dbad33f6ae105b8c2d","sha1":"f83d97ef46827200fa62093ed09b4b6fa25b26d8","sha256":"9443edf293511b0732211234002c799508a2bfc63a3e28a57d7b12ee30f277e9","sha512":"83d31c81c672ae6eec74c4fdfdfb660b5f7bff5f11adf46f455d1dfb1f9461bb34a8fe132121cae669c3c2337cb476e1c130f10a1d18a7e7c426329c1767dd46","ssdeep":"1536:6Pc0RaMAwV3e6sdzcxwkFXDcohfdZh0jYCnzX0TJ59G:6k0RBV3Erkxwohfj0YCnr0N5c","tlshash":"46530204775eb63e718713a17bced422d11916235c828a16d63ca7e29ffa07d7fca482","first_seen":"2023-05-05T23:11:51Z","last_seen":"2026-08-15T18:19:00.627229Z","times_seen":2609,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":42,"dns":0,"connect":21,"send":0,"wait":40,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pl28598848.effectivegatecpm.com/8af20b6b650c82858ee24d3c66adbc7b/invoke.js","fqdn":"pl28598848.effectivegatecpm.com","domain":"effectivegatecpm.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://noctrunhub.xyz/","date":"2026-05-23T21:06:03.772Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"effectivegatecpm.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 21:35:48 GMT","end":"Sat, 04 Jul 2026 21:35:47 GMT"},"fingerprint":{"sha1":"00:5B:7F:82:8B:8C:03:4F:58:4E:1C:74:BB:C2:B6:8B:E1:2F:A7:5C","sha256":"D6:6E:A3:BC:82:DE:B5:02:67:F0:AB:44:7A:50:4A:F9:12:98:1B:38:37:B4:40:28:79:05:74:4D:62:08:E4:73"}}},"request":{"raw":"GET /8af20b6b650c82858ee24d3c66adbc7b/invoke.js HTTP/1.1\r\nHost: pl28598848.effectivegatecpm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://noctrunhub.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sat, 23 May 2026 21:06:04 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 17602\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Mobile,X-Device-User-Agent,X-OperaMini-Phone-UA,Sec-CH-UA-Platform-Version,Sec-CH-UA,Sec-CH-UA-Full-Version,Device-Stock-UA,X-UCBrowser-Device-UA,User-Agent,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Full-Version-List\r\nx-envoy-upstream-service-time: 2\r\nHost: pl28598848.effectivegatecpm.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 9d813a44e60fa87eadbb2bd9c4cd1875\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":48098,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (48096), with no line terminators","md5":"23b785978e59dcc57a3574f6ea801a68","sha1":"824245ac5c356008df75bfa17b890673862b5840","sha256":"7705d64b60c1b8f67369a2fe574ee9d5558c7cdc630ed98e0c9fd8238b4b2099","sha512":"e2e2bb54780b46972211efa0dec165b7ce185a9159c4764285c506103fc52258a36573d5abd05547b06e21b02953322a9bed520dcbe4f2e4836f21682d2e54fc","ssdeep":"768:e1WE5NpJEOlhP/0Nf962B74SJbyQuwMl/T+NBhfdClsoXnxEHBYsK1GY5:EWuNONf9/BUmbyxl/T+NBhgl44","tlshash":"9c2383c87f90b06e82e664b3233fcd0bf23a1d0151dc9698d917d0e9aa6d719c67da18","first_seen":"2026-05-23T21:04:28.471057Z","last_seen":"2026-05-23T21:06:34.480835Z","times_seen":2,"resource_available":true,"data":null}},"time_used":777,"timings":{"blocked":292,"dns":1,"connect":92,"send":0,"wait":97,"receive":91,"ssl":195},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"pl28598848.effectivegatecpm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"pl28598848.effectivegatecpm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nlcwreopotnsqcbqphri.supabase.co/rest/v1/scripts?select=*\u0026order=created_at.desc","fqdn":"nlcwreopotnsqcbqphri.supabase.co","domain":"nlcwreopotnsqcbqphri.supabase.co","tld":"supabase.co"},"ip":{"addr":"104.18.38.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://noctrunhub.xyz/","date":"2026-05-23T21:06:04.041Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supabase.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Apr 2026 07:48:36 GMT","end":"Wed, 29 Jul 2026 08:48:34 GMT"},"fingerprint":{"sha1":"CA:A1:55:FA:10:0A:42:25:AC:57:D5:30:F6:D2:6F:06:35:61:90:C0","sha256":"B9:B8:F4:CE:6C:86:1D:3D:D1:67:87:08:FA:4A:40:62:10:7E:E7:05:0B:52:82:0F:99:10:50:F1:2E:B2:91:00"}}},"request":{"raw":"GET /rest/v1/scripts?select=*\u0026order=created_at.desc HTTP/1.1\r\nHost: nlcwreopotnsqcbqphri.supabase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://noctrunhub.xyz/\r\naccept-profile: public\r\napikey: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6Im5sY3dyZW9wb3Ruc3FjYnFwaHJpIiwicm9sZSI6ImFub24iLCJpYXQiOjE3Njk1NDE1MDEsImV4cCI6MjA4NTExNzUwMX0.l69R0cMcbNTEh2eD17XpfN5orBfuv0_rZEOKg-u4F2o\r\nauthorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6Im5sY3dyZW9wb3Ruc3FjYnFwaHJpIiwicm9sZSI6ImFub24iLCJpYXQiOjE3Njk1NDE1MDEsImV4cCI6MjA4NTExNzUwMX0.l69R0cMcbNTEh2eD17XpfN5orBfuv0_rZEOKg-u4F2o\r\nx-client-info: supabase-js-web/2.57.4\r\nOrigin: https://noctrunhub.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 23 May 2026 21:06:04 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-range: 0-645/*\r\ncf-ray: a00705b72ee4a0f0-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://noctrunhub.xyz\r\ncontent-encoding: gzip\r\ncontent-location: /scripts?order=created_at.desc\u0026select=%2A\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\naccess-control-expose-headers: Content-Encoding, Content-Location, Content-Range, Content-Type, Date, Location, Server, Transfer-Encoding, Range-Unit\r\ncontent-profile: public\r\nsb-gateway-version: 1\r\nsb-project-ref: nlcwreopotnsqcbqphri\r\nsb-request-id: 019e56a8-ce7b-76b0-9ae4-a0a4f9dddf3c\r\nx-envoy-attempt-count: 1\r\nx-envoy-upstream-service-time: 123\r\nset-cookie: __cf_bm=IyMyZYmTrf8ygo4jybGrpFi7KYS.6VTlecff2PZoit4-1779570364.0239878-1.0.1.1-AYLYd2weROBjfQmxwBqawjKlPKxs2KzaGbaBNeQ_NaKJE78ROsOQ63l9bsVOJLhEuz6Kv8A3Pc2n6LTO0KJzR8MzR1t09_I_t8Fwuodkvpde1qlZ.NO8U9rJ1rq0FRxo; HttpOnly; SameSite=None; Secure; Path=/; Domain=supabase.co; Expires=Sat, 23 May 2026 21:36:04 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":951865,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"2502015a845c82dfb046cde577375f6d","sha1":"4b342381630505ed817f82a6d06a79f0ccecc0af","sha256":"8515a4fd7e0b660a85c2e7f423214992b46a86c08ea86e68bcb40e5b7e044f45","sha512":"099dda6075a8688f84934060e4b7bd259282edca89edff59384befb7a76bed9a7b6f0deeb16bf491f58033a2caf16eb17cf47e67e1c8feefbbcbdb8c6952b2dc","ssdeep":"12288:6Ob/lAxIWau1Tpqo8dJvBbiMrlhfCiuI0+asXG0kCRf2c/+R4o:V/lAxIWxso8dJZiMrrayZ3G0kCROV","tlshash":"7a151b2fab70907e0b7500c6bc1d744a6bbc713b4200dbb2ec99d51c56d2793ab3a95b","first_seen":"2026-05-23T21:06:34.484852Z","last_seen":"2026-05-23T21:06:34.484852Z","times_seen":1,"resource_available":false,"data":null}},"time_used":427,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":427,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.married-ring.com/ecc874/affb19e803e3.js","fqdn":"www.married-ring.com","domain":"married-ring.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://noctrunhub.xyz/","date":"2026-05-23T21:06:04.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.married-ring.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 May 2026 07:04:16 GMT","end":"Wed, 19 Aug 2026 07:04:15 GMT"},"fingerprint":{"sha1":"98:56:F2:8F:27:E4:FB:1B:34:21:EF:D7:43:04:CD:FA:83:0C:E4:4D","sha256":"93:A4:24:1B:54:CE:67:5F:9B:10:69:04:09:D4:A9:C3:C6:50:1F:73:9D:B1:87:03:4B:2F:F0:51:3D:5A:04:C8"}}},"request":{"raw":"GET /ecc874/affb19e803e3.js HTTP/1.1\r\nHost: www.married-ring.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://noctrunhub.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 23 May 2026 21:06:04 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: Content-Type\r\ncache-control: max-age=172800\r\ncontent-encoding: gzip\r\nexpires: Mon, 25 May 2026 21:06:04 GMT\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":103674,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65533), with no line terminators","md5":"bb60b24a6cee40207666a201fb429207","sha1":"a53e2187196ca0f096a959038e190a68795b6cfd","sha256":"e6e5f44b078fb52374d01a56264ccb5074d501c61d32ceb8b25b0e7d24155cac","sha512":"3aa1bb5750fd3db16dac34e48516e2b89a93a1cacb26bb657e1616899bebd03678d0378189fe147dfe2d38d4e7f710626908a49593b8b211a3b7cdd2b1c0d22e","ssdeep":"1536:rM+iZ3YOYuyx6PUQwRxcs8P3nhkQ8vL7T7Q6eGozzwVEnHzHRbPv8:OijxEQq3P5Enne9zkWHLC","tlshash":"dfa33461350b64fd2ad0c1e7eb6720886c295810e469cca1ecd1d7c7d6eb8e3429b5f7","first_seen":"2026-05-21T22:10:52.017008Z","last_seen":"2026-05-24T21:45:46.151269Z","times_seen":30,"resource_available":true,"data":null}},"time_used":130,"timings":{"blocked":41,"dns":1,"connect":20,"send":0,"wait":38,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}