{"report_id":"d0ca9291-7b11-4ea0-af02-db1f108cbdf3","version":6,"status":"done","tags":[],"date":"2026-04-17T03:58:38Z","url":{"schema":"https","addr":"robloxiconmakertool.pages.dev","fqdn":"robloxiconmakertool.pages.dev","domain":"robloxiconmakertool.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.122","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"robloxiconmakertool.pages.dev/","fqdn":"robloxiconmakertool.pages.dev","domain":"robloxiconmakertool.pages.dev","tld":"pages.dev"},"title":"Roblox Icon Maker Tool | Roblox Icon Maker Tool","dom":{"size":8037,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (3721)","md5":"edbcd8b835c88bce3281d5544d4959db","sha1":"40cbe8033f2d00b59fcddbfdc5b046aefb247ed0","sha256":"fd885412648bd71ecb443ffb20792215d4976dfaad12f6b83681088da731d887","sha512":"daa60761d28e2ef1049268981695da50fc56cf7887a45e4f06d77251332923f1969d1b5de06cbd64d936338d0fa09e2d271d85719bbf5e3a067a1a5a32789424","ssdeep":"192:WcgUJZfKry1kFN4KzkbI8A2VmQzZ7Kry1kFN4KzkbI8A2VvSV3VCkCaO:BZCrlrubT3zZWrlrubTGl2","tlshash":"3ef13bf7cda491b40968f9b5793af9ce7924d10d3d119d42fc9c5298af302720e60cd4","dom_hash":"domhashdc54fbe1ae197f2d0347c91caad45e38","first_seen":"2026-04-17T03:58:43.29901Z","last_seen":"2026-04-17T03:58:43.29901Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"robloxiconmakertool.pages.dev","fqdn":"robloxiconmakertool.pages.dev","domain":"robloxiconmakertool.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.122","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-22T03:58:38Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":16}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-17T03:58:16Z","timestamp":1776398296,"ip_dst":{"addr":"172.66.44.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":49344,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)","source":"{\"timestamp\":\"2026-04-17T03:58:16.475889+0000\",\"flow_id\":1792443126687467,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.4\",\"src_port\":49344,\"dest_ip\":\"172.66.44.134\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2057746,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_11_20\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\"],\"updated_at\":[\"2024_11_20\"]}},\"tls\":{\"sni\":\"robloxiconmakertool.pages.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":931,\"bytes_toclient\":3574,\"start\":\"2026-04-17T03:58:16.435947+0000\"}}"}],"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"immigrationacre.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"immigrationacre.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"cdn.show-creative1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"cdn.show-creative1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.show-creative1.com","ip":{"addr":"172.67.208.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-08-20","domain_rank":392451,"first_seen":"2024-08-27T12:23:01Z","last_seen":"2026-04-16T08:11:52.184663Z","alert_count":4,"request_count":2,"received_data":4419,"sent_data":1055,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"realizationnewestfangs.com","ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2024-09-03","domain_rank":0,"first_seen":"2025-10-02T06:26:57.543488Z","last_seen":"2026-04-10T12:20:47.73808Z","alert_count":16,"request_count":8,"received_data":22970,"sent_data":8514,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"links.mtevor.com","ip":{"addr":"104.21.21.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-10-31","domain_rank":0,"first_seen":"2026-03-10T23:35:42.996415Z","last_seen":"2026-04-14T16:50:33.449658Z","alert_count":0,"request_count":1,"received_data":761,"sent_data":469,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"mtevor.com","ip":{"addr":"104.21.21.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-10-31","domain_rank":3995008,"first_seen":"2019-11-04T00:42:52Z","last_seen":"2026-04-17T03:53:37.332977Z","alert_count":0,"request_count":1,"received_data":7818,"sent_data":428,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"skinnycrawlinglax.com","ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2024-09-01","domain_rank":38609,"first_seen":"2025-07-09T22:28:05.771371Z","last_seen":"2026-04-16T11:11:33.57775Z","alert_count":20,"request_count":5,"received_data":207743,"sent_data":6812,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"cdn.nightdestruct.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-30","domain_rank":0,"first_seen":"2026-03-30T18:41:21.656654Z","last_seen":"2026-04-13T20:25:04.58189Z","alert_count":0,"request_count":11,"received_data":505482,"sent_data":5474,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.storageimagedisplay.com","ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2024-09-13","domain_rank":170153,"first_seen":"2024-09-13T12:56:32Z","last_seen":"2026-04-16T23:33:44.541218Z","alert_count":0,"request_count":2,"received_data":121539,"sent_data":924,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"immigrationacre.com","ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2026-01-21","domain_rank":0,"first_seen":"2026-01-30T08:57:45.831225Z","last_seen":"2026-04-17T03:53:37.654785Z","alert_count":8,"request_count":4,"received_data":291378,"sent_data":1860,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"robloxiconmakertool.pages.dev","ip":{"addr":"172.66.44.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-02","domain_rank":0,"first_seen":"2026-04-17T03:58:40.170783Z","last_seen":"2026-04-17T03:58:40.170783Z","alert_count":0,"request_count":4,"received_data":59473,"sent_data":1968,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"preferencenail.com","ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-07-01","domain_rank":20606,"first_seen":"2025-07-08T12:55:47.271261Z","last_seen":"2026-04-16T08:11:51.226974Z","alert_count":9,"request_count":3,"received_data":257868,"sent_data":1281,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"tse1.mm.bing.net","ip":{"addr":"150.171.27.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"domain_registered":"1997-09-03","domain_rank":17960,"first_seen":"2014-03-13T14:42:52Z","last_seen":"2026-04-15T12:34:54.503783Z","alert_count":0,"request_count":1,"received_data":48814,"sent_data":498,"comment":"","tags":null,"fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-04-12T22:16:45.621325Z","alert_count":0,"request_count":4,"received_data":175884,"sent_data":2256,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-04-12T22:20:19.752051Z","alert_count":0,"request_count":2,"received_data":34862,"sent_data":860,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"protrafficinspector.com","ip":{"addr":"63.182.85.33","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2025-06-18","domain_rank":614186,"first_seen":"2025-07-25T22:45:21.95813Z","last_seen":"2026-04-15T20:56:11.843562Z","alert_count":0,"request_count":2,"received_data":1418,"sent_data":948,"comment":"","tags":null,"fingerprints":null},{"fqdn":"sourshaped.com","ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2024-09-03","domain_rank":0,"first_seen":"2025-10-06T14:35:38.581947Z","last_seen":"2026-04-12T13:21:12.374899Z","alert_count":39,"request_count":13,"received_data":22672,"sent_data":12657,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"adxpy.pages.dev","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-02","domain_rank":0,"first_seen":"2025-12-08T23:25:40.439519Z","last_seen":"2026-04-17T03:53:37.512813Z","alert_count":0,"request_count":4,"received_data":13719,"sent_data":1781,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"adxpy.pages.dev/ads.js","fqdn":"adxpy.pages.dev","domain":"adxpy.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"28a8ee5b231d6993efeaeb288506fba6","sha1":"185e282511210752916a8d4fcc28642f02e4dc5e","sha256":"81496c62f33c7090e09cd8ea1d016980fc4432fb6ca00450ccea59b926daa7e1","sha512":"b1cf24abc589692314ada61a5a266b280ce2ad1297f5be58b94ececb90e2d718021795ca3998cb142e5937cff260d4aaeaffe5759bb8e67dff20e76bec939658","ssdeep":"","tlshash":"cb81011920a100651eb7236a7be3625dfba43053b81281a4bdccdb185fb9d1091f7fed","size":4034,"data":"","first_seen":"2025-10-25T03:17:17.993778Z","last_seen":"2026-08-05T18:54:41.26013Z","times_seen":411,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/af/25/da/af25da8381e0bd0494ba4018c76898a2.js","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"70416caa464712cf44264d24374e6a8c","sha1":"12df5c21f53ca7dec3341a64ca8334adb65f4329","sha256":"fb8fa81f02b8db1ff90ef7632367cc4365565d88e27fd90d56a2cc85a9b93436","sha512":"dff54e02ce71541db8205870e0abb8bcbcc8e872977d1e4befcb88a17379655cd5b5a858b07f8775e84e88df7abbc13c77c3da34ea44ef33633e325391528d1f","ssdeep":"1536:1sgv0NC4Y5Tll1apjTHlxn0WuXvon8USxNKo4hRl+GdM9LHEf7G:agvA25lIpZxn0WuXvon8pCTM67G","tlshash":"3c93e8887fb272ed439a307b362fb006f22a9d512498f4f4d586b4e52e7876da437704","size":91785,"data":"","first_seen":"2026-04-17T03:58:43.323552Z","last_seen":"2026-04-17T03:58:43.323552Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"5a76e833d6313fcde1d55af24cb60dab","sha1":"2dd733f3cc2fedc78b72aab5d6b55c6d315d201b","sha256":"f1ec1603b82a76b7f4329ad22679f4d77af5ffeaaae91d87858fd22bb0005785","sha512":"dc43ac10757c57d2758a00f221b245aef7cdf0de2f0f5a6fa615fcecdc404c6addd039b71b6944acbc032fa8fa83fb860daaaac967d858d65769217f27609c83","ssdeep":"192:OBfEF7XsocrcYmBa5xUfThW6m3whUReZYAe/9+ox9VurIjrz/iWEJUewdZIToJ:SzCy6meueZYAe/9bxQIjrTiWEJUd/n","tlshash":"0d12d94849ba9852c142002d00ff2522f3240993acb9bee53f9e81415f9d82f79be67f","size":9676,"data":"","first_seen":"2026-03-25T19:41:47.19838Z","last_seen":"2026-04-17T10:06:14.699185Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"a529894d3286d527219ac471e1cd5a47","sha1":"4ac04d024d5e097b20a2ec99493a5b40a07def7f","sha256":"de7f25c63f8aee85b80dc11ecb1878e4487e52e537205d76023746f9786aea27","sha512":"c0ac07fabc2441e29f9db33a992c001edce654c4d7341f71a75ea85824d38231a304d8463bca7c03cfaf9341c0e3104e9d73c634267a94ba30ce855ef9a6b9a2","ssdeep":"","tlshash":"e0c08ca4eb04087071ac3ebd330aa3e2e8e876123030088296948090e2b92330420c80","size":145,"data":"","first_seen":"2025-12-16T03:50:13.718611Z","last_seen":"2026-08-05T18:54:41.30032Z","times_seen":304,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"robloxiconmakertool.pages.dev/","fqdn":"robloxiconmakertool.pages.dev","domain":"robloxiconmakertool.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6a5c3f4396296db830de5f25e8f400a6","sha1":"46664b129676128f4d7bc5cdccda373b015427b4","sha256":"4d5e83c3e814dd196dc740101922eb013dd89d411011be2d941519fd221b578c","sha512":"8c10fb3d830a7a5945fa073c30cd27a8a20f7c99e6cf951bb204d0e0191250b760f4967a01749d0adbfe03d277df55dc9a9b507c75d582ebdadb69d269d1bc3b","ssdeep":"","tlshash":"8db0127071d344c42854923ec141c0301d9cd462d8d7008cec1430084f2e20280074df","size":90,"data":"","first_seen":"2026-04-17T03:58:43.362186Z","last_seen":"2026-04-17T03:58:43.362186Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"robloxiconmakertool.pages.dev/","fqdn":"robloxiconmakertool.pages.dev","domain":"robloxiconmakertool.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"81f04c41f8acbe1896a04adf683a5f50","sha1":"c43780b476488b7b723c6e463397263d268c0612","sha256":"d7c38975e1b16aa76895318026d67c2ca83a41ae43b9419041a898facd34720b","sha512":"f477f31fc8d52891075cc8889855386d8705476038e9d646ca0b6001cefab5bd0f438c72c4fd0d9654bf25092223c7a4dd7d25ff9419f97744adecec35990616","ssdeep":"","tlshash":"58d05b340d00021604721dec6c959fb47e367c41b3742160f9bcd91591d1947c162feb","size":258,"data":"","first_seen":"2023-03-09T05:07:28Z","last_seen":"2026-08-05T19:49:52.768532Z","times_seen":1675,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adxpy.pages.dev/magic.js","fqdn":"adxpy.pages.dev","domain":"adxpy.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9bcbb02a6bf94ae8762ddcda5d1c80d3","sha1":"fade830681bb5b7b138db5482e7a495c1c9b296a","sha256":"b26277e44f2fe29283a55a632166f8a45dd1407a0970c13e08287406f94a0772","sha512":"54914b0f4d7625f4e40e13b11bb2bfd47c87dc6a14714c427c48c75e955980826d6605abbac7b3ca6c043356f1b91618b6f16abaf6be339be38d8ffa825e71e5","ssdeep":"","tlshash":"c101fe6e229200a84d7a509803a3fa0cfda832577160c0e1bacedb602f35f20419e4d8","size":671,"data":"","first_seen":"2025-12-08T23:25:47.209165Z","last_seen":"2026-08-05T18:54:41.256186Z","times_seen":391,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"robloxiconmakertool.pages.dev/","fqdn":"robloxiconmakertool.pages.dev","domain":"robloxiconmakertool.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bb27232549abd814635dde5a338cbc9e","sha1":"90b24ec16b789453aec40bcd9b3b620ac4721335","sha256":"2f136d970baa2f3c28b182172051502e723fd8ce872321a266be73da9cf97afa","sha512":"7575109e4beefb0aadde26992f1016198461e154e0a5b94d05dc718373963f73de511184d1e072acf5bbb6ccb4feef0184d2d26e61497c22f18e2abda1285bc4","ssdeep":"","tlshash":"cfc04cad5044b54830b2cdf42979c644e120cdd4354abc3526e2541155cc64e9c7677d","size":147,"data":"","first_seen":"2025-12-18T23:27:07.103769Z","last_seen":"2026-08-05T18:54:41.301049Z","times_seen":350,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"immigrationacre.com/c6/4a/a1/c64aa11db612c16c65959b87a44dac81.js","fqdn":"immigrationacre.com","domain":"immigrationacre.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4702845c26fbb7b79ad44de45cd21e6d","sha1":"9ff79182434b2bee96625c5aa9e97a3afe946d8d","sha256":"5d47988cabc34fb9fb57afa4657c8025d8178e643bdb5f8534ab4c4eb5b50fa7","sha512":"ffcd7e024a35f52e729fcf076ac3edcea1348a8dc1b351044fd65f36b8410c29da6b52e3a90b761a3ee5adc2f3ea13087249b16c1209ca3048a6c297b0643022","ssdeep":"1536:7d1PqZWem5Kvg/+UriOXwaHe4J+LXFk8Xmj8sV:Gpv4WUR+1DFw9V","tlshash":"5c93e78c3fc1f0a513a5203b222f714ef0994d85546ce468f783f56a2f7ca4ae536b98","size":93646,"data":"","first_seen":"2026-03-31T19:28:00.711486Z","last_seen":"2026-04-17T03:58:43.310343Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"immigrationacre.com/c2/07/ec/c207ec84c2456af201cc563cadc36c46.js","fqdn":"immigrationacre.com","domain":"immigrationacre.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"390f61f750f14734f4fcf15f732aa585","sha1":"951ff8ad04ef75f5dd33d1ffbb821803c0daaa25","sha256":"19d4b88b1c36010470ba8aac961da084ab9db784c397bab5464f42054380bcb2","sha512":"8139f338b3e929ae562c6c373704df99e679db6d3c97b2f287a1dfef0e96dba89e05848ce003e9ea61a15df6027b455b358e8cd89db4e701aeab63ff7a7c7eff","ssdeep":"1536:1sgv0NC4Y5Tll1apjTHlxn0WuXvon8USxNKo4hRl+GdLALCEf7x:agvA25lIpZxn0WuXvon8pCTLw7x","tlshash":"e493e8887fb272ed439a307b362fb006f22a9d512498f4f4d586b4e52e7876da437704","size":91759,"data":"","first_seen":"2026-03-31T19:28:00.680699Z","last_seen":"2026-04-17T04:00:19.732644Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"robloxiconmakertool.pages.dev/","fqdn":"robloxiconmakertool.pages.dev","domain":"robloxiconmakertool.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"a73d26dd421e931fcd8e269f07769d64","sha1":"1a82dcc6914fcd0bde9ad067afe327f864f417ef","sha256":"dbec47c6cca1b7f4d56e8ceb1d4cfa69d78067c7480a8c04bd9b96afe74e0af9","sha512":"f02e979135efca3b320a922788bfa4647013506e61a50d0e000b576eb984bca5f399213ee9ea56ba4a33825ab8c3aaf4c212ab233d340107df27759b16a5347e","ssdeep":"","tlshash":"107000080a0ae0a8080a0a023822c00c02800082000ae0a200000a0020000088820220","size":18,"data":"","first_seen":"2025-01-05T08:04:41.550371Z","last_seen":"2026-08-05T18:54:41.287425Z","times_seen":387,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"robloxiconmakertool.pages.dev/","fqdn":"robloxiconmakertool.pages.dev","domain":"robloxiconmakertool.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fb73c9c1f5ecb08f9a0205a14e2841e0","sha1":"dd5807b9d4c32d9dff08f8f14c726804f49bfd5e","sha256":"63578fe671a2d9eeff56bb7df57695eb7728b49bfb50db91bf2cf74430df93c9","sha512":"b18875be5353ae7972e16617a0eadc0adbe806c68cd098cd54f462b4308c7dff48e7ce73da68968f66d9dcc00ac1cc891e8d1b1312298a75990eeecdbc8187ca","ssdeep":"","tlshash":"7fc08cf68004b21820e7caf02028c0c0a324ec20300a383166e0081082ac50d0cb2bb8","size":146,"data":"","first_seen":"2025-12-16T03:50:13.724775Z","last_seen":"2026-08-05T18:54:41.303071Z","times_seen":326,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"robloxiconmakertool.pages.dev/","fqdn":"robloxiconmakertool.pages.dev","domain":"robloxiconmakertool.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b73f73772a980d0b71c8097aeb93ba73","sha1":"dbd8ebdebe2e0f452407bb38a76deec742b80027","sha256":"496ed8b94f856087f1a4384dc7fa33b769c1c9439932825b506455b5bf4930b7","sha512":"a00b2f097b0624952e4c5ca29ba1c6fddd0187080cadb301185692695abe516a7d3c38d3a4d2d8f1357c0f6ffd80fb61519dbe59f028ee25fba80f30d19720c9","ssdeep":"","tlshash":"b9019eff24004c7448de19eeb2a8778ae8b6005b7d19142424194c7576a4b7603d2fb6","size":668,"data":"","first_seen":"2023-03-09T05:07:28Z","last_seen":"2026-08-05T19:49:52.774504Z","times_seen":1647,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"robloxiconmakertool.pages.dev/","fqdn":"robloxiconmakertool.pages.dev","domain":"robloxiconmakertool.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3043924babea44e8e94b0aa19f11d89d","sha1":"c6ccf78fba768952994a37ad33a8309fe9454b5f","sha256":"5f96af838dd14f1b76712ba6f84df12026e8c0431a381c5e062361d390970d36","sha512":"9c78e351a02bfcc7181420b6ec071906e24734f3421c5d1b8e4a92a9973fd5125242fb6b22d6cfa53dea13a2aa99685055b52bcc8cc4a2fe88c8e0742621b6c5","ssdeep":"","tlshash":"7dd02bb1d12c0332029da14a7423c394713434daf3423080a01f87f950c4f96d41fcbd","size":273,"data":"","first_seen":"2023-03-09T05:07:28Z","last_seen":"2026-08-05T19:49:52.775031Z","times_seen":1696,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","size":85379,"data":"","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-08-08T16:43:59.770378Z","times_seen":26069,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"d6c61116072a3aed150693303749f3a3","sha1":"5ffb5b5427225efd2d592d1bf4bf3613027e69e8","sha256":"7f098ee0db613906e057c8814237ba1a33c352d04c1fd2b72ab5235d24082287","sha512":"f3498eb18f02a60e53e802581e42658f2d0b280610791645ebcd50374bc951aeab13f30e244c6167f3bfd1c1c38eb3aa52ec2f0aba865742abeadf817bffc8d8","ssdeep":"","tlshash":"0dc09b8c9f00185575327cdd7b261384fcd542dbb836dd555297c04265cd36bf04157c","size":145,"data":"","first_seen":"2025-12-18T23:27:07.113909Z","last_seen":"2026-08-05T18:54:41.285766Z","times_seen":307,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"robloxiconmakertool.pages.dev/","fqdn":"robloxiconmakertool.pages.dev","domain":"robloxiconmakertool.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"349edacf65d0ff272bf6fd11233c1ead","sha1":"34b1fdbc95156d9d6b499a739a7ce1f8b57926b4","sha256":"82eb474cb30703539541a5d27d13890cc5d5af5633f642fb4d24666b4ff98848","sha512":"c474a12003f50e2206febb6e7d8fd2ca37e5dfee3b949c9fdbf5288207c1932bcfb5b78ed46706ea8675c34ed493dca4c05e3886a5685a6826f82307630581a3","ssdeep":"","tlshash":"2ed0c23a1d110b7104c619ea38d8a6987a3d384577293450e47ed900a0a4a898063ff7","size":276,"data":"","first_seen":"2023-03-09T05:07:28Z","last_seen":"2026-08-05T19:49:52.775501Z","times_seen":1636,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"276ec7aa57f00050d9b836a216363a31","sha1":"3abb6395a18d74b3f9d64ad85910a7064b02a70d","sha256":"6fa0e6cd61efad2dffd54e58ff312410a0990b3df7e091b4522393b15212ac43","sha512":"9d3d93c30d9c672ff3b95330f7d1dfd314fd3761d721752c45e9b7ba9cbfa570f5793aeb266c41f5b96c23e207cdc2b3473866d1924998f2ab286d3b2b2536f3","ssdeep":"","tlshash":"8331f83a312813848dfeccb3128b37e0cd669e96c5d48180522d5f16263abce01fdd4c","size":1663,"data":"","first_seen":"2026-04-17T03:58:43.376648Z","last_seen":"2026-04-17T03:58:43.376648Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"realizationnewestfangs.com/1b/50/e5/1b50e57a5911fd0a5b46962ab48ca22b.js","fqdn":"realizationnewestfangs.com","domain":"realizationnewestfangs.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2f7f534aa475f2ab416f5768f5eb1abf","sha1":"0e264d3826ec4cea33eb1d05bc113200a9ca55b1","sha256":"18821fa5e86c1240947fc976e78c43d849789cda4360578383adcfbd873d133a","sha512":"c24f6cff97cb6e0cf363714e9073f5f0533cfd228d16665aa6be8fc2527f88f5f3fa156e6dff75bcd4f581a1a3e8f7e0e7242ce4eb3d98d5af950a497b98ee7d","ssdeep":"96:JPczm1siDwcWu0HAGMUJhSENesmRmTj8pdkZ:Bc0DwBLAGtvArmjZ","tlshash":"c2b1b79c3f40b0a017a2a0776f6f2429f1396c10ab6be894d527a1dc3f29d29c2b2755","size":5119,"data":"","first_seen":"2026-03-12T08:34:48.0486Z","last_seen":"2026-04-30T07:10:40.662541Z","times_seen":2445,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mtevor.com/hg/pages-dev.js","fqdn":"mtevor.com","domain":"mtevor.com","tld":"com"},"ip":{"addr":"104.21.21.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"63f71502fe125358818a0825aae4ee16","sha1":"98934593ae75876db5a51fbb4a0d6f990576a2c9","sha256":"5dedd670c8604a3b077f14aac976a0b91441afe370ecc449c9e3df2cf077027b","sha512":"d426126273d42b38f24bd9b8d1780346cc1b6cee83468b887e0eaeecaff19e4a89a0636620ab41efc977e6c2b559e88e55b670f3dfd5b7c7205f848a55e2ebdc","ssdeep":"192:c4Mpsto0LV8YteZbDVj/poiPqpyj4ZYzwIxpsQkhHC:/++j8YteZfJ/ptPqcj46zNxpsQ8C","tlshash":"0ee1d6a9bc8f89390bf2f758d6358519fd3cc0221602505af0c8525b8a69f1e471ffd8","size":7180,"data":"","first_seen":"2026-03-10T23:35:48.093011Z","last_seen":"2026-08-05T18:54:41.273315Z","times_seen":134,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","size":85379,"data":"","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-08-08T16:43:59.770378Z","times_seen":26069,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"immigrationacre.com/6dd5e3d7ac37d33b5abc87810f6ac7f3/invoke.js","fqdn":"immigrationacre.com","domain":"immigrationacre.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"14dafb8121c076ea292ce7f92e9fefd0","sha1":"93366e279ad49fe3f8aff2847ac2a704f4458b32","sha256":"730bbcd80e98b992cff3ae980b22c23f223b0b63b55e1071c459f1cc0da80af0","sha512":"2d258103ab284febdd012bd23aa31f78e913f5cd6354b324122d0c4fe123ee9332c414be4a77de5b30d1776339df2eee370698a034617d9b97cb7888e0da14c1","ssdeep":"768:xIL7jP3R5MaFvQ00hE9ZnANn7aw++nxKDpOI6sxt4F2CNFQb+NLIFZR:xcMaFvQ5OsKpN6L2hbEAv","tlshash":"3c33d88c7fe1f0e416567c73323f60abf11a1c12958cd48cd906e4ae6ae8795e937b18","size":51318,"data":"","first_seen":"2026-04-13T09:59:29.651716Z","last_seen":"2026-04-17T10:33:25.94723Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","size":85379,"data":"","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-08-08T16:43:59.770378Z","times_seen":26069,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"5bb0628f0c3539ecb9b4ed0a2f661d96","sha1":"f169ecfa38b83c93effb42a075eb1e968d9df072","sha256":"fe34d461f8adb2b1f9b0537cffc57ce6d38ef7bcd93d1ae8d068dff577dc20d0","sha512":"ff70b4f76a35925bb8a8c416b2fb59854afc765393c4a5bb7a54bfe08922ca81bd46d1eca07de67efd353dcbdd9d2a5eb7956b0963b58cd5738af891cfcd4ebf","ssdeep":"96:LPozZ1BC1Rr5yGwbaWZk/tNspKaO5kb+r8Mb2H1jDSV3VCfMEDaH:LQzZ7Kry1kFN4KzkbI8A2VvSV3VCkCaH","tlshash":"21913bb7ccb091b41969b5ba793ae5ca7924d10e3d11dd42fc8ce6849f306b10eb4cd8","size":4306,"data":"","first_seen":"2026-04-17T03:58:43.381327Z","last_seen":"2026-04-17T03:58:43.381327Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"f22b2437e36e8c088e0c4733edac515e","sha1":"f906e01cc01a1e52ae9b725fa5a333e2e5d6abfb","sha256":"b5f706f7eb11fa5db8271e111faced054886caaa93c9d5fd5afd445f610f326f","sha512":"dc7efc731c36eaf44ef5ec4bcdd6b839799a20afad413deadb3b66e014f2f5aebefe064d9720337dcdbba91a248d681acbce7e0be16e95a4c788e1a8effe0fab","ssdeep":"","tlshash":"f331da76d52751724b7dd977e83dfbcdbd6cea897c111683d4a40ac42c308970a1ac98","size":1672,"data":"","first_seen":"2026-04-17T03:58:43.382234Z","last_seen":"2026-04-17T03:58:43.382234Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"robloxiconmakertool.pages.dev/","fqdn":"robloxiconmakertool.pages.dev","domain":"robloxiconmakertool.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"558c3779ce5aac4481c86687cd8f15c3","sha1":"474fa56198ee722ebad4041dce2dcfc716fd923d","sha256":"7b2515a2c400be25e6daa78e4c6f35f43d67d244acb76818f1599f815b1995a8","sha512":"280f5da312b232e8638235a1b6094abc4abf38d94b8c327c668a848d830d0fe94d2b2830fb53be53076a724286b3c5b3f290f0e240267a71a57bddf00c8cd6e2","ssdeep":"","tlshash":"e1019c3d326407bb22ee0e3b23779e5476732844b40210b05e2d9da86410df112afabe","size":797,"data":"","first_seen":"2023-10-28T10:41:14Z","last_seen":"2026-08-05T18:54:41.293863Z","times_seen":418,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"0b79731059f927c0018410e64e6fa918","sha1":"148afed48be7fc3e49ac2faa7c230e49a3e2cca5","sha256":"dce6be887242e055d11f4a4069ff4acdb1dd0896a8ea29417652dbc49639bd50","sha512":"1b98ece9be25b6331421929c65338a54a2c6e5f5e1ad18748bf981459db0886f00908d008ee1a27b381124ec38d1ca78528079151da213ce8b48fcf52f865f79","ssdeep":"96:V9LPBDyozaBjL9hLghzbAxitqM0gv3k/6DzSSWfT0CCyZn1jDUCfMEDaH:V9zBDvzaCoxIv3kuvZJyXvUCkCaH","tlshash":"52a12c347d9815b42cb6e4bd207bb208ea52d46bcc00d501b98ee6171f26bd82d9cde8","size":4790,"data":"","first_seen":"2026-04-17T03:58:43.383636Z","last_seen":"2026-04-17T03:58:43.383636Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"0e0fa598b1f04a6a8e7eef1fcb67e43c","sha1":"d97e116b1d9824dc6039890e7a1d6c7aac6cb7ba","sha256":"c9cb4022b44895d28c4d479813b1f074c9cfba577e98c6ee244664a6f296bc55","sha512":"0833c5afad620a3bd1295a44ba37bde31eb9c87f7228499fe6acbd88c86d44d147b0280a149eef25e65a163d4a3d96b7699446ac1ccc11cfaa87a751511d5eda","ssdeep":"","tlshash":"9021c430801a38a62ef5b05c04baf03aeb26a832ed1951467c97b1132c12a682e198f1","size":1393,"data":"","first_seen":"2026-04-17T03:58:43.384545Z","last_seen":"2026-04-17T03:58:43.384545Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"9f567505e34615fa1d71c43aee42517f","sha1":"2476d933b9f6c87a340ceed789b17c3f45d46617","sha256":"e0d1a05f1b118b13c14794502b678a377d6cb75f8b56dc803fc7ae35c9d094b6","sha512":"b3a5fa7b93904af8b491b6cfe345bdc89364df1de8a7b454ed358add74c71973fba112c1b5c56425be319130bf45fa1a2a58820884b12a961f3de6bc650a99d4","ssdeep":"","tlshash":"bbf04914e32513f4d27ba764af6f63461622060dc188821e20ec37e73cb361a42d6c65","size":612,"data":"","first_seen":"2026-03-07T00:25:55.223951Z","last_seen":"2026-07-12T03:17:50.12664Z","times_seen":49,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"b9c1dd96c07cd942982143251ab1306c","sha1":"99f862b805b3d43f2fac10c1e6200bfcc588e4d7","sha256":"68ab782ea098e544a9621f6875a75bb9c617882ab148a31d572ded670c31ab2b","sha512":"8e2432bf706f552464fbbad6f08dec2721d025617e0056f706d50de35e57a07191f7bf87357456eadcf4f7ba070160e122152b893c2c9416609dadad3cdd2369","ssdeep":"","tlshash":"6e21e9ab84b4f6ec0a10fad01f86d4876b52456c6e63fd204c1560afe5401731be06f4","size":1402,"data":"","first_seen":"2026-04-17T03:58:43.385934Z","last_seen":"2026-04-17T03:58:43.385934Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/d0/89/ea/d089ea049f0f7b1eacfa2b5bb99d3bdc.js","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a7c9cbd6b14d295471f653568d405d52","sha1":"bbfc11fce3a946dadb0ad9f8439e3317231788ba","sha256":"99347dca25f309c3c55cfc2a6e39782a42739a41d9eac854006ffaa9777a317f","sha512":"80ee2b609a755c30fbe1ae0404ad38456cbcce85d1901698c65de423dc8f9e50f5ec89cfb391c83626b0bfe55159e88dddc372d5589ed1576010e6cf4bd9b0af","ssdeep":"1536:gS77g4wsY51M18N222qysMHBPMDAVpFoRJv932rO3tus/1z:Nusu1MQBsMj92rO3Hh","tlshash":"e4a3c48c7fe2b05b522a7077352fa52bf02d4c2c248cf468f1569de42a7c719e63ae51","size":99415,"data":"","first_seen":"2026-04-17T03:58:43.324412Z","last_seen":"2026-04-17T03:58:43.324412Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"robloxiconmakertool.pages.dev/","fqdn":"robloxiconmakertool.pages.dev","domain":"robloxiconmakertool.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"a73d26dd421e931fcd8e269f07769d64","sha1":"1a82dcc6914fcd0bde9ad067afe327f864f417ef","sha256":"dbec47c6cca1b7f4d56e8ceb1d4cfa69d78067c7480a8c04bd9b96afe74e0af9","sha512":"f02e979135efca3b320a922788bfa4647013506e61a50d0e000b576eb984bca5f399213ee9ea56ba4a33825ab8c3aaf4c212ab233d340107df27759b16a5347e","ssdeep":"","tlshash":"107000080a0ae0a8080a0a023822c00c02800082000ae0a200000a0020000088820220","size":18,"data":"","first_seen":"2025-01-05T08:04:41.550371Z","last_seen":"2026-08-05T18:54:41.287425Z","times_seen":387,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"immigrationacre.com/52f212bca95373aed7ead32398143db7/invoke.js","fqdn":"immigrationacre.com","domain":"immigrationacre.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5fc30fad9a0e55f2f3a985977868891a","sha1":"802e6ee61fd4527afeeb264102d17a556f449fcc","sha256":"dc776a23fedaab09d6200a1466b24d963dfcd17560a03658530d06e0b37b40fd","sha512":"c13a3921ab8a3c37327c3e09a196a907c7be24cfc815b798e7ba421b19233b4b703d15efcf8aa7b0ca84cd9d78e1bf6b3036ed0422f8a91214d66cddb2b6843c","ssdeep":"768:xILsjP3R5MaFvQ00ME9ZnANn7aw++nxKDpOI6sxt4U2CNFQb+qUIghR:x/MaFvQOOsKpN6+2hbRw3","tlshash":"cb33c88c7fe1f0d416567c73323fa0abf11a1c12958cd48cd906e4ae6ae8795e937b18","size":51275,"data":"","first_seen":"2026-04-17T03:55:43.132018Z","last_seen":"2026-04-17T10:33:25.998832Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"protrafficinspector.com/stats","fqdn":"protrafficinspector.com","domain":"protrafficinspector.com","tld":"com"},"ip":{"addr":"63.182.85.33","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://robloxiconmakertool.pages.dev/","date":"2026-04-17T03:58:18.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"statistics.it.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 14 Apr 2026 00:00:00 GMT","end":"Wed, 28 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:66:77:D7:9E:99:80:D4:C4:22:4B:79:2F:16:2B:49:2C:08:07:99","sha256":"54:26:39:E0:45:11:B3:20:EE:6C:3E:B3:C0:57:5D:F2:28:8C:E0:E1:C4:F0:BD:56:E7:8C:91:6B:40:CC:0E:0D"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: protrafficinspector.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://robloxiconmakertool.pages.dev/\r\nOrigin: https://robloxiconmakertool.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 03:58:18 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\nserver: fasthttp\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\naccess-control-allow-origin: https://robloxiconmakertool.pages.dev\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nset-cookie: uid_id2=d6cec6d5-a598-4673-a851-38d30197724e:1:1; expires=Mon, 14 Apr 2036 03:58:18 GMT; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"a40357387d93ca91871d5293f8182c7a","sha1":"e6dd54dafb7c07944dde75bd3f5fe9a7ee1baf0a","sha256":"e0e3ea1765e2492e89a8ae75710acc5a5acb89b1a60fba3d22c809baaa0f0083","sha512":"9053fc76963b4f6bf14bd25105cc05e3b33e0df057cacee829f8f3c423ed53a75886166c9d6311766c4df6a2fc20e6f3f81a8a5ee82ccc393c401cdb6e6ca83b","ssdeep":"","tlshash":"069004c1077053c4fdd74375430433331141c54340315715d4054511140041c4534455","first_seen":"2026-04-17T03:58:43.302803Z","last_seen":"2026-04-17T03:58:43.302803Z","times_seen":1,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":97,"dns":3,"connect":21,"send":0,"wait":22,"receive":0,"ssl":70},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/watch.1108382949506.js?key=6dd5e3d7ac37d33b5abc87810f6ac7f3\u0026kw=%5B%22roblox%22%2C%22icon%22%2C%22maker%22%2C%22tool%22%5D\u0026refer=https%3A%2F%2Frobloxiconmakertool.pages.dev%2F\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=5746ce6d-0dda-41b2-a1aa-d90c0f8022e5%3A2%3A1","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://robloxiconmakertool.pages.dev/","date":"2026-04-17T03:58:19.593Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 22:53:11 GMT","end":"Sun, 24 May 2026 22:53:10 GMT"},"fingerprint":{"sha1":"ED:51:C6:32:50:BE:DC:21:A3:AD:D6:A1:DB:98:F0:08:AD:BF:E7:A2","sha256":"56:84:BB:23:CE:A6:AD:BA:2E:8A:D0:F9:92:4F:17:BF:64:9A:7D:1C:AC:77:10:4A:32:94:E4:15:91:57:B1:A8"}}},"request":{"raw":"GET /watch.1108382949506.js?key=6dd5e3d7ac37d33b5abc87810f6ac7f3\u0026kw=%5B%22roblox%22%2C%22icon%22%2C%22maker%22%2C%22tool%22%5D\u0026refer=https%3A%2F%2Frobloxiconmakertool.pages.dev%2F\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=5746ce6d-0dda-41b2-a1aa-d90c0f8022e5%3A2%3A1 HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://robloxiconmakertool.pages.dev/\r\nOrigin: https://robloxiconmakertool.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 307 Temporary Redirect\r\nServer: nginx/1.21.6\r\nDate: Fri, 17 Apr 2026 03:58:19 GMT\r\nContent-Type: text/html\r\nContent-Length: 0\r\nConnection: keep-alive\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\naccess-control-allow-origin: https://robloxiconmakertool.pages.dev\r\naccess-control-allow-credentials: true\r\nlocation: https://skinnycrawlinglax.com/watch.1108382949506.js?key=6dd5e3d7ac37d33b5abc87810f6ac7f3\u0026kw=%5B%22roblox%22%2C%22icon%22%2C%22maker%22%2C%22tool%22%5D\u0026refer=https%3A%2F%2Frobloxiconmakertool.pages.dev%2F\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=5746ce6d-0dda-41b2-a1aa-d90c0f8022e5%3A2%3A1\u0026shu=7dd2f772b817add1001299bfee8c7e6e12c2149cb54e3bae16f4a0008989e38d9f897c9a7cbe046e473f7c80761a84d19933a8b32c894b20be7175e8ed9d1c39fa7b2e7a5fe2037df0b07c2bd5f3ff5c033d89f0c0f5389a3b5e44\u0026pst=1776398359\u0026rmtc=t\u0026shv=2\u0026sht=x2O_jFWLBNZu-BtGDMcYU4sjWuiJ0AaDtWCbWHaOL0A\u0026fstu=019d9996-f325-72ad-81ac-cccd21ef84bd\u0026st1=a21b2a50f896a08e60688773e6abe044\u0026ps1=1776398299\r\nset-cookie: uid_id2=5746ce6d-0dda-41b2-a1aa-d90c0f8022e5:2:1; expires=Fri, 24 Apr 2026 03:58:19 GMT; path=/; secure; SameSite=None\nain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.oPyzIlq6N-BXWz8IsCKcJ-nThKFfcyzTnSVAnUD88tM; expires=Fri, 17 Apr 2026 03:59:19 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 2\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 782a3ec95e4195600701dc2e1e7a05c4\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":4823,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T16:42:47.069256Z","times_seen":17782290,"resource_available":true,"data":null}},"time_used":695,"timings":{"blocked":298,"dns":1,"connect":99,"send":0,"wait":99,"receive":0,"ssl":195},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sourshaped.com/impr.gif?sid=H4sIAAAAAAAC_1RSz4scRRit3iwe9CC64k3pQw4GnNnqnp6ebnML_jhodsVEchCE6qrqzef2dHW6umcmc9oYycHTehAEEXrf7GYvwR__gcwKHgQhfRshC-LJowg5y-wOrKnD96NeUbzvve_BQX3KuqjF4sPrZkpZJjb7Xe6-cYtyZcbW3brperzLr7q3KA-Dq-5kGcrRW14v6PIr7nta7ppNn3uce9xz36VSp2ayeYaCikex1415N_C7Xj_ApHy2t7UDKxyo0Sl7GaTaF_9KPwHJOfLhj29ru1uZ4s13hnUmKlNipI4_zndzM84xvCjT0kGaH69ew9iWsW_WYPLj1QQwo8PlBEioZWuvPkGSH69oIhkdnTNNMugciXoB49EcOpuDxBzS3AepxwyQClvbyIcPt0w5FnfPUbFEW7b-9F_QuGXrT15BPvz-WkYT94bJ6opMbjFJG9BkDtqZo6hPUE3XQOMTyOpzkPqdbT79APnwcNtmBqQWl_uDIJQ6VB2ulOgEXuJ3hCdER8Vc8jTivq_7ZxJROoewa6itg5oc1KmDunAwVAs34FEgPdEL01jJAQ9EECid8DjyORexHKCW90BqH7LcQ1HuYZf2YW83sMqBrRhGqjlSmfVt81Bltk68VfZXudfMTLVzII5MtaNzBlHuo1TNIRV37H3I6tJsmlo1M8sgkqqZiUQ1M1IVQ3lncZl7sYrjOOxoJVRnEMVRR2jtd2SURmHf96IkiQ-KU_bSUmDn6-9-xa5euNLnAy2jQPpBPxSpzz0p-2FPCiV7oQxCWGpAdg3COphSy95Pr6Cglr3-4G8k4gQ2O4EkB6J-DWLcQNxuMM0fpZSrEUndlWYIZRoU1Tqqu85Bdso2Zh_dvPbzmc-fbuTQ8je2OpBlg6Js8Bn9wrCT3ftpu6hoSFOxNP5GJSr9HAS17Pl_voSklm08vnS2g_3r30IWe7DFxV_WMCSFg4wYMn1xL5IG9n99clEf2C-wUzpIMmeWZKVzmGRl9tU5TUsLN-1pX3IeDUKvF6Xa6wVKpv0oiFUoeK-nUdmW_vzhj_8CAAD__zZfhz8BBAAA","fqdn":"sourshaped.com","domain":"sourshaped.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://robloxiconmakertool.pages.dev/","date":"2026-04-17T03:58:20.289Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sourshaped.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 00:01:03 GMT","end":"Thu, 28 May 2026 00:01:02 GMT"},"fingerprint":{"sha1":"F1:AF:5D:36:35:F4:F3:93:55:9A:8D:70:8F:C7:F5:6B:E2:26:FB:8E","sha256":"D3:58:1D:7D:AD:70:61:0C:FF:96:A1:79:6D:1D:A0:CF:58:59:D3:71:56:63:92:64:9D:FF:B5:46:E7:65:17:11"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1RSz4scRRit3iwe9CC64k3pQw4GnNnqnp6ebnML_jhodsVEchCE6qrqzef2dHW6umcmc9oYycHTehAEEXrf7GYvwR__gcwKHgQhfRshC-LJowg5y-wOrKnD96NeUbzvve_BQX3KuqjF4sPrZkpZJjb7Xe6-cYtyZcbW3brperzLr7q3KA-Dq-5kGcrRW14v6PIr7nta7ppNn3uce9xz36VSp2ayeYaCikex1415N_C7Xj_ApHy2t7UDKxyo0Sl7GaTaF_9KPwHJOfLhj29ru1uZ4s13hnUmKlNipI4_zndzM84xvCjT0kGaH69ew9iWsW_WYPLj1QQwo8PlBEioZWuvPkGSH69oIhkdnTNNMugciXoB49EcOpuDxBzS3AepxwyQClvbyIcPt0w5FnfPUbFEW7b-9F_QuGXrT15BPvz-WkYT94bJ6opMbjFJG9BkDtqZo6hPUE3XQOMTyOpzkPqdbT79APnwcNtmBqQWl_uDIJQ6VB2ulOgEXuJ3hCdER8Vc8jTivq_7ZxJROoewa6itg5oc1KmDunAwVAs34FEgPdEL01jJAQ9EECid8DjyORexHKCW90BqH7LcQ1HuYZf2YW83sMqBrRhGqjlSmfVt81Bltk68VfZXudfMTLVzII5MtaNzBlHuo1TNIRV37H3I6tJsmlo1M8sgkqqZiUQ1M1IVQ3lncZl7sYrjOOxoJVRnEMVRR2jtd2SURmHf96IkiQ-KU_bSUmDn6-9-xa5euNLnAy2jQPpBPxSpzz0p-2FPCiV7oQxCWGpAdg3COphSy95Pr6Cglr3-4G8k4gQ2O4EkB6J-DWLcQNxuMM0fpZSrEUndlWYIZRoU1Tqqu85Bdso2Zh_dvPbzmc-fbuTQ8je2OpBlg6Js8Bn9wrCT3ftpu6hoSFOxNP5GJSr9HAS17Pl_voSklm08vnS2g_3r30IWe7DFxV_WMCSFg4wYMn1xL5IG9n99clEf2C-wUzpIMmeWZKVzmGRl9tU5TUsLN-1pX3IeDUKvF6Xa6wVKpv0oiFUoeK-nUdmW_vzhj_8CAAD__zZfhz8BBAAA HTTP/1.1\r\nHost: sourshaped.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://robloxiconmakertool.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=5746ce6d-0dda-41b2-a1aa-d90c0f8022e5:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl26582471=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Fri, 17 Apr 2026 03:58:20 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 5\r\nHost: sourshaped.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 571c7afefb5f9d20079fb39b4204825c\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T16:42:47.069256Z","times_seen":17782290,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.nightdestruct.com/sb/notifications/gambling/default/android-btn/7/img/confetti.gif","fqdn":"cdn.nightdestruct.com","domain":"nightdestruct.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://robloxiconmakertool.pages.dev/","date":"2026-04-17T03:58:21.200Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nightdestruct.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 16:21:26 GMT","end":"Sun, 28 Jun 2026 16:21:25 GMT"},"fingerprint":{"sha1":"77:BA:39:E3:87:1C:89:74:C5:36:C2:0F:E9:4C:0E:35:C4:92:A6:BA","sha256":"5F:17:E6:F7:42:E9:5F:B9:9E:03:47:36:9F:79:03:3B:E2:C2:66:ED:E9:3D:14:AB:29:B0:52:4A:62:57:C4:91"}}},"request":{"raw":"GET /sb/notifications/gambling/default/android-btn/7/img/confetti.gif HTTP/1.1\r\nHost: cdn.nightdestruct.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 03:58:21 GMT\r\ncontent-type: image/gif\r\ncontent-length: 206291\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:25:07 GMT\r\npriority: u=4,i=?0\r\netag: \"65aa8643-325d3\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\naccept-ranges: bytes\r\nage: 1498189\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PMr63vZlg2BEYluxYbMyvdYNbePfnojWhFiXF23rJ07cAdeoijEBQB6At9cC6pIwJr4MOxCBLhCg6fD536h%2BV4BGX3s0xSsiUnWhu%2FwJ%2BgnrhoPpkVbCstQtfZWnw8dvcOGU9wGKEmk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ed882c679a8c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":206291,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 480 x 360","md5":"0b33face774f2203446507ce5f075538","sha1":"1dd3522529bce7739df0687f47f5bc84356698a0","sha256":"ac345899461d5634d25c47281b10e3c1886abb33019e2ce8140573a79e9f52f2","sha512":"58aa96c101e4a4cd0b2df5065639f0795b4ebb970f3a1e6c33a3a4566c3e8ae22038457f7eee59d70baaa03c63c369e9c8c88fc4dd7206c26fc6bfd602424f9d","ssdeep":"3072:uX7nWRsxeentKfdlIIn6vXDwyH005Z5JVaCFfXiceSPVUAV9FY7u:W7nWyee4fLII6vDFU8bfaivimlFYu","tlshash":"6c14e167d568498bca0931f02006167b6e79ecf57c78f87fb581b9825ebb42e35e1c02","first_seen":"2024-05-02T15:55:45Z","last_seen":"2026-08-08T16:51:54.153481Z","times_seen":2782,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/cti/14/ce/88/14ce888b9b5df81a864935c1e751dad9/1756656596.jpg","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://robloxiconmakertool.pages.dev/","date":"2026-04-17T03:58:22.862Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 02:33:25 GMT","end":"Fri, 05 Jun 2026 02:33:24 GMT"},"fingerprint":{"sha1":"4A:66:11:51:1F:1F:F3:84:B6:E4:4F:81:C1:03:83:9F:01:17:7E:82","sha256":"DA:55:E3:02:D5:3C:4E:3A:51:ED:21:0D:F4:32:52:C2:C5:31:87:50:DC:AB:13:D9:93:4A:15:0C:D9:8C:D6:4F"}}},"request":{"raw":"GET /cti/14/ce/88/14ce888b9b5df81a864935c1e751dad9/1756656596.jpg HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 03:58:22 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 29447\r\nserver: nginx/1.21.6\r\nlast-modified: Sun, 31 Aug 2025 16:09:56 GMT\r\netag: \"68b473d4-7307\"\r\nexpires: Sun, 19 Apr 2026 03:58:22 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29447,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 26.3 (Macintosh), datetime=2025:08:30 12:13:29], progressive, precision 8, 320x50, components 3","md5":"16f9bb2f2dc6b2fccd920e0e59993527","sha1":"6565d8aa2998ceb6fcc6dad16420b990554fca91","sha256":"609466fc3e6b5b73a55762addd814bc6bd35e164cd17b81b7546ef03b9473503","sha512":"657fa90ae9cce58a73f4c8ec1d647dd0563588796b9827ed4f4ffe51d3c9f807be248eb2f7a0eafaed2d46e2411f0f1d99a25e6ed1668269146e5c217df41b8c","ssdeep":"384:3wEQCL/Wii8wEQCL/3noDZWg9vYNg7giITMYPpQGY+iElBgUHd4gRPvm:32riJ2yyZhYyEi0pQGIAFHzPu","tlshash":"1cd2ae24a791cc23f8f5963860e1dbe6e311ee98a3a32b827cac65057b753d05f4d14b","first_seen":"2025-09-02T21:02:02.586232Z","last_seen":"2026-05-22T12:04:11.65285Z","times_seen":305,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sourshaped.com/pixel/purst?dl=0\u0026th=0\u0026sc=0\u0026rs=1596\u0026rd=1596\u0026fd=514\u0026bv=26.3.5226\u0026tmpl=70","fqdn":"sourshaped.com","domain":"sourshaped.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://robloxiconmakertool.pages.dev/","date":"2026-04-17T03:58:18.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sourshaped.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 00:01:03 GMT","end":"Thu, 28 May 2026 00:01:02 GMT"},"fingerprint":{"sha1":"F1:AF:5D:36:35:F4:F3:93:55:9A:8D:70:8F:C7:F5:6B:E2:26:FB:8E","sha256":"D3:58:1D:7D:AD:70:61:0C:FF:96:A1:79:6D:1D:A0:CF:58:59:D3:71:56:63:92:64:9D:FF:B5:46:E7:65:17:11"}}},"request":{"raw":"GET /pixel/purst?dl=0\u0026th=0\u0026sc=0\u0026rs=1596\u0026rd=1596\u0026fd=514\u0026bv=26.3.5226\u0026tmpl=70 HTTP/1.1\r\nHost: sourshaped.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://robloxiconmakertool.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Fri, 17 Apr 2026 03:58:18 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: Device-Stock-UA, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-PlatformUser-Agent, User-Agent, X-Device-User-Agent, X-OperaMini-Phone-UA, X-UCBrowser-Device-UA\r\nHost: sourshaped.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T16:42:47.069256Z","times_seen":17782290,"resource_available":true,"data":null}},"time_used":693,"timings":{"blocked":294,"dns":1,"connect":94,"send":0,"wait":105,"receive":0,"ssl":194},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.nightdestruct.com/sb/interstitial/other/adzilla/flip_icon_fullpage/1/js/script.js","fqdn":"cdn.nightdestruct.com","domain":"nightdestruct.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://robloxiconmakertool.pages.dev/","date":"2026-04-17T03:58:19.279Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nightdestruct.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 16:21:26 GMT","end":"Sun, 28 Jun 2026 16:21:25 GMT"},"fingerprint":{"sha1":"77:BA:39:E3:87:1C:89:74:C5:36:C2:0F:E9:4C:0E:35:C4:92:A6:BA","sha256":"5F:17:E6:F7:42:E9:5F:B9:9E:03:47:36:9F:79:03:3B:E2:C2:66:ED:E9:3D:14:AB:29:B0:52:4A:62:57:C4:91"}}},"request":{"raw":"GET /sb/interstitial/other/adzilla/flip_icon_fullpage/1/js/script.js HTTP/1.1\r\nHost: cdn.nightdestruct.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://robloxiconmakertool.pages.dev/\r\nOrigin: https://robloxiconmakertool.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 03:58:19 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Sep 2025 11:19:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=39OIjTmMOSXsM5jzkI1a69bi04IV%2BXFJsKR9uXi%2BmVonH70n3ldiO%2FWcCVdUrcOpc8HSuixPPRk9nXw6tW0VeSPVmBN4wPZp7vzOlQZIneqVh69d3k12F%2F%2BenQxeeA2sl3wpXPiptkM%3D\"}]}\r\ncf-cache-status: MISS\r\netag: W/\"68c00d54-18d\"\r\ncontent-encoding: br\r\ncf-ray: 9ed882baafa0569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":397,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"999af189e50c58f1a44d672e4b3d5a3f","sha1":"a69c7a4d68885a14d01d33c26d136b95b42313d6","sha256":"28ec866098b037343646399a597ae93e16b11b66f90426ffb5cf743a3c41e38f","sha512":"c529c76b23058a6d81c9ab4a61460669f1a8175b35428a5be422eb933ba4d34820cf3c9eafdad1cd132d699bac6966414c0f27d561393b520eaa55cd679521ab","ssdeep":"","tlshash":"ede02b3861685234c7b7d1a2628f679f2630425fd00a425e702c174f0ee1fa612c1dab","first_seen":"2023-05-07T17:52:21Z","last_seen":"2026-07-16T17:43:14.80255Z","times_seen":575,"resource_available":false,"data":null}},"time_used":565,"timings":{"blocked":25,"dns":8,"connect":3,"send":0,"wait":510,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"realizationnewestfangs.com/impr.gif?sid=H4sIAAAAAAAC_1RTO2wcxR_e9d_6F1AgCKJEV6QgiDvPe3dIF_EogARIUApEMU9n8N7uZmf3zrnKISgFVSiQoEBa_86Om4hHQ4mQTYeElKu4IpYQFSVCSo3OsWSY4veYb2b0faPvd3e3O05G0Knlu-9Us1AUaoOP0OCl66G01TQOLl8bYDRCFwfXQynYxcH2KjSTVzFlI3Rh8KYzW9UGQRghjPDgjdA4X21vnKAQ6gcSjyQaMTLCnMF2898-dilElYKdHCfPQbCLZ_7wH0Iwh1COv3vNxa22ql95fdwVqq0amNiDD8qtspqWMD4rfZOCLw9OT0MVF0ny5RpU5cGpAqgmeysFoMMiWXvhEejy4JQm6Mn-E6a6AFeCtk_DdHIIrjiCoA7BVHcg2IcJgLFw-QqU4_uXq2aqbj1B1QpdJOuP_4YwXSTrj56HcvzNpSJsD65WRdeGqoyw7XsI24cQNg-h7o6gna1BmB6BaT-BYH9NNh6_DeV470osKgh2eZ5nTBgn7BBZq4YMazJUWKmhlcggnyNCHD_5ouAPQcU16GIKXUih8yl0dQpjuxwwlDODFRVeWpMhphizTiOZE4SUNBl05jYEew9MswN1swNb4fOHfAbxxvKHzKFMGJ5x7rOMcCYY904yi61TmDObUYZIrj2VjlBDc8adoVZ4KjOUIUuoo5lnVHIpNZIcIcWpIQhpljNGmDfc544yzBXXFAtHjMC5lIZ5ZjLGhCUuR9QiQYTJBObMa4vl6kJmJRe5Zk4I4aT2ThNkRW4pxQ6iXYfYLpL0vR2Y2H7fFpHE_r4tYqfxaSanmfbzqt3cVftVu-nKBFRzDxrb74X6ZrwDpv3ffOajnVeroHTbz5W2_TzYNoHm5vI8wtJKKcXQO0qGmcR0qEWeDznyAiFBheFktz5Onl3ZI_3i6z3YcssBJ55goo2SnGZUOZs5ZSmhMseMWp1BDD2EuAYqpjALi-QtfwHqsEhevPsnaHUEsTgCE1JQ3QDUdE4JAnUDOIJZ-cCH0k6CcSNTjcFWPdTtOrS30t3iODk3f__apZ9OrPrRb7fBmV-S0wWm6aFuevg4_JzAZnH7-yt1G8Zhplbevdqq1v0fVFgkT_31GZiwSM79-NXJGPGXd8HUOxDrs7dilYCuEyhCAoU721e6h_ivXp_Vu_FT2GxS0EU610WT7OmiKe5BDMuBp44YhPJMYJp7hymzxvOcSSsUotRBGxfh92-P_wkAAP__BYA5ir8EAAA=","fqdn":"realizationnewestfangs.com","domain":"realizationnewestfangs.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://robloxiconmakertool.pages.dev/","date":"2026-04-17T03:58:22.864Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"realizationnewestfangs.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 23:39:43 GMT","end":"Wed, 27 May 2026 23:39:42 GMT"},"fingerprint":{"sha1":"2F:D0:7E:69:4A:D0:06:61:89:AF:78:09:0A:5A:F1:7B:F9:4A:B7:96","sha256":"24:55:49:F2:2C:E7:D7:3D:E6:6E:54:6C:64:30:D7:3C:F6:39:2F:A0:A7:A2:AA:25:93:8D:6B:C2:15:40:66:C2"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1RTO2wcxR_e9d_6F1AgCKJEV6QgiDvPe3dIF_EogARIUApEMU9n8N7uZmf3zrnKISgFVSiQoEBa_86Om4hHQ4mQTYeElKu4IpYQFSVCSo3OsWSY4veYb2b0faPvd3e3O05G0Knlu-9Us1AUaoOP0OCl66G01TQOLl8bYDRCFwfXQynYxcH2KjSTVzFlI3Rh8KYzW9UGQRghjPDgjdA4X21vnKAQ6gcSjyQaMTLCnMF2898-dilElYKdHCfPQbCLZ_7wH0Iwh1COv3vNxa22ql95fdwVqq0amNiDD8qtspqWMD4rfZOCLw9OT0MVF0ny5RpU5cGpAqgmeysFoMMiWXvhEejy4JQm6Mn-E6a6AFeCtk_DdHIIrjiCoA7BVHcg2IcJgLFw-QqU4_uXq2aqbj1B1QpdJOuP_4YwXSTrj56HcvzNpSJsD65WRdeGqoyw7XsI24cQNg-h7o6gna1BmB6BaT-BYH9NNh6_DeV470osKgh2eZ5nTBgn7BBZq4YMazJUWKmhlcggnyNCHD_5ouAPQcU16GIKXUih8yl0dQpjuxwwlDODFRVeWpMhphizTiOZE4SUNBl05jYEew9MswN1swNb4fOHfAbxxvKHzKFMGJ5x7rOMcCYY904yi61TmDObUYZIrj2VjlBDc8adoVZ4KjOUIUuoo5lnVHIpNZIcIcWpIQhpljNGmDfc544yzBXXFAtHjMC5lIZ5ZjLGhCUuR9QiQYTJBObMa4vl6kJmJRe5Zk4I4aT2ThNkRW4pxQ6iXYfYLpL0vR2Y2H7fFpHE_r4tYqfxaSanmfbzqt3cVftVu-nKBFRzDxrb74X6ZrwDpv3ffOajnVeroHTbz5W2_TzYNoHm5vI8wtJKKcXQO0qGmcR0qEWeDznyAiFBheFktz5Onl3ZI_3i6z3YcssBJ55goo2SnGZUOZs5ZSmhMseMWp1BDD2EuAYqpjALi-QtfwHqsEhevPsnaHUEsTgCE1JQ3QDUdE4JAnUDOIJZ-cCH0k6CcSNTjcFWPdTtOrS30t3iODk3f__apZ9OrPrRb7fBmV-S0wWm6aFuevg4_JzAZnH7-yt1G8Zhplbevdqq1v0fVFgkT_31GZiwSM79-NXJGPGXd8HUOxDrs7dilYCuEyhCAoU721e6h_ivXp_Vu_FT2GxS0EU610WT7OmiKe5BDMuBp44YhPJMYJp7hymzxvOcSSsUotRBGxfh92-P_wkAAP__BYA5ir8EAAA= HTTP/1.1\r\nHost: realizationnewestfangs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=5746ce6d-0dda-41b2-a1aa-d90c0f8022e5:2:1; ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.EWddl_KytH9TX6C8B9Sl0GKSnm7Atveqtkq50ymnSFg; pdhtkv=true; uncs=1; pdhtkv32=true; uncs32=1; u_pl26582436=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Fri, 17 Apr 2026 03:58:22 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 5\r\nHost: realizationnewestfangs.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 77f2875654e0f9f63e2406a0547a4e0f\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T16:42:47.069256Z","times_seen":17782290,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sourshaped.com/ren.gif?sid=H4sIAAAAAAAC_1RSzYscRRyt3iwe9CC64k3pQw4GnNnqnu7ebnMLfhw0u2IiOQhCffWknJ6uTlf3zGROGyM5eFoPgiBCz5vd7CX48R_IrOBBENK3EbIgnjyKkLPM7sCaOvw-6hXF-733ezCrT0kXNVt-eN1MdZax7bBL3Tdu6VyasXV3b7oe7dKr7i2dR8FVd7IK5egtrxd06RX3PSUGZtunHqUe9dx3dalSM9k-Q6GLR4nXTWg38LteGGBSPtvb2oFlDuTolLwMLdsX_0o_gRYL5MMf31Z2UJnizXeGdcYqU2Ikjz_OB7kZ5xhelGnpIM2P169hbEvINxsw-fF6ApjR4WoCcN2SjVefgOfHa5rgo6NzpjyDysHlCxiPFlDZApotIMx9aPmYAEJidw_58OGuKcfs7jnKVmhLNp_-Cz1uyeaTV5APv7-W6Yl7w2R1pU1uMUkb6MkCur9AUZ-gmm5Aj08gqs-h5e9k--kHyIeHezYz0HJ5OdwJIqEi2aFSsk7gcb_DPMY6MqGCpjH1fRWeSaTTBZjdQG0d1NpBnTqoCwdDuXQDGgfCY70oTaTYoQELAqk4TWKfUpaIHdTiHrQ8gCj3UZT7GOgD2NsNrHRgK4KRbI5kZn3bPJSZrbm3zv4695q5qfozdmSqvsoJWHmAUjaHurhj70NUl-bT1Mq5WQXGq2bOuGzmWlYE5Z3lZeolMkmSqKMkk52dOIk7TCm_I-I0jkLfizlPZsUpeWklsPP1d79ioJau8OmOEnEg_CCMWOpTT4gw6gkmRS8SQQSrG2i7AWYdTHVL3k-voNAtef3B3-DsBDY7gdAOWP0a2LgBu91gmj9KdS5HWqiuMENI06CoNlHddWbZKdmaf3Tz2s9nPn-6lUOJ38j6QJQNirLBZ_oXgn5276e9otJDPWUr429UrFLPgemWPP_PlxC6JVuPL53tYHj9W4hiH7a4-MsaAl44yDRBpi7uGW9g_9fzi3pmv0C_dMAzZ86z0jnkWZl9dU7T6qUb-rwXxXGk0kimPdnzezIJqUoClkRBEoSobKv__OGP_wIAAP__yjcX4QEEAAA=","fqdn":"sourshaped.com","domain":"sourshaped.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://robloxiconmakertool.pages.dev/","date":"2026-04-17T03:58:18.607Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sourshaped.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 00:01:03 GMT","end":"Thu, 28 May 2026 00:01:02 GMT"},"fingerprint":{"sha1":"F1:AF:5D:36:35:F4:F3:93:55:9A:8D:70:8F:C7:F5:6B:E2:26:FB:8E","sha256":"D3:58:1D:7D:AD:70:61:0C:FF:96:A1:79:6D:1D:A0:CF:58:59:D3:71:56:63:92:64:9D:FF:B5:46:E7:65:17:11"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_1RSzYscRRyt3iwe9CC64k3pQw4GnNnqnu7ebnMLfhw0u2IiOQhCffWknJ6uTlf3zGROGyM5eFoPgiBCz5vd7CX48R_IrOBBENK3EbIgnjyKkLPM7sCaOvw-6hXF-733ezCrT0kXNVt-eN1MdZax7bBL3Tdu6VyasXV3b7oe7dKr7i2dR8FVd7IK5egtrxd06RX3PSUGZtunHqUe9dx3dalSM9k-Q6GLR4nXTWg38LteGGBSPtvb2oFlDuTolLwMLdsX_0o_gRYL5MMf31Z2UJnizXeGdcYqU2Ikjz_OB7kZ5xhelGnpIM2P169hbEvINxsw-fF6ApjR4WoCcN2SjVefgOfHa5rgo6NzpjyDysHlCxiPFlDZApotIMx9aPmYAEJidw_58OGuKcfs7jnKVmhLNp_-Cz1uyeaTV5APv7-W6Yl7w2R1pU1uMUkb6MkCur9AUZ-gmm5Aj08gqs-h5e9k--kHyIeHezYz0HJ5OdwJIqEi2aFSsk7gcb_DPMY6MqGCpjH1fRWeSaTTBZjdQG0d1NpBnTqoCwdDuXQDGgfCY70oTaTYoQELAqk4TWKfUpaIHdTiHrQ8gCj3UZT7GOgD2NsNrHRgK4KRbI5kZn3bPJSZrbm3zv4695q5qfozdmSqvsoJWHmAUjaHurhj70NUl-bT1Mq5WQXGq2bOuGzmWlYE5Z3lZeolMkmSqKMkk52dOIk7TCm_I-I0jkLfizlPZsUpeWklsPP1d79ioJau8OmOEnEg_CCMWOpTT4gw6gkmRS8SQQSrG2i7AWYdTHVL3k-voNAtef3B3-DsBDY7gdAOWP0a2LgBu91gmj9KdS5HWqiuMENI06CoNlHddWbZKdmaf3Tz2s9nPn-6lUOJ38j6QJQNirLBZ_oXgn5276e9otJDPWUr429UrFLPgemWPP_PlxC6JVuPL53tYHj9W4hiH7a4-MsaAl44yDRBpi7uGW9g_9fzi3pmv0C_dMAzZ86z0jnkWZl9dU7T6qUb-rwXxXGk0kimPdnzezIJqUoClkRBEoSobKv__OGP_wIAAP__yjcX4QEEAAA= HTTP/1.1\r\nHost: sourshaped.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://robloxiconmakertool.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=5746ce6d-0dda-41b2-a1aa-d90c0f8022e5:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl26582471=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Fri, 17 Apr 2026 03:58:18 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 3\r\nHost: sourshaped.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: c70b078faf8846574b53b8e61eb91107\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T16:42:47.069256Z","times_seen":17782290,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://robloxiconmakertool.pages.dev/","date":"2026-04-17T03:58:20.103Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"preferencenail.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 01:24:35 GMT","end":"Thu, 28 May 2026 01:24:34 GMT"},"fingerprint":{"sha1":"66:45:2B:BB:A2:6D:D3:A2:B6:16:36:65:94:BA:4A:C6:5E:05:66:09","sha256":"A4:2E:A7:56:DB:44:FF:55:9A:FA:4D:EC:2A:78:CB:C5:02:CD:CF:B2:FB:A7:A7:75:77:EC:01:DB:19:71:C0:77"}}},"request":{"raw":"GET /sfp.js HTTP/1.1\r\nHost: preferencenail.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://robloxiconmakertool.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Fri, 17 Apr 2026 03:58:20 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nContent-Length: 32181\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nVary: Accept-Encoding\r\nHost: preferencenail.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 9b9615ea2027357eebaeaeff9991e03f\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":85379,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-08-08T16:43:59.770378Z","times_seen":26069,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sourshaped.com/pixel/sbs?c=1","fqdn":"sourshaped.com","domain":"sourshaped.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://robloxiconmakertool.pages.dev/","date":"2026-04-17T03:58:20.291Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sourshaped.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 00:01:03 GMT","end":"Thu, 28 May 2026 00:01:02 GMT"},"fingerprint":{"sha1":"F1:AF:5D:36:35:F4:F3:93:55:9A:8D:70:8F:C7:F5:6B:E2:26:FB:8E","sha256":"D3:58:1D:7D:AD:70:61:0C:FF:96:A1:79:6D:1D:A0:CF:58:59:D3:71:56:63:92:64:9D:FF:B5:46:E7:65:17:11"}}},"request":{"raw":"GET /pixel/sbs?c=1 HTTP/1.1\r\nHost: sourshaped.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://robloxiconmakertool.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=5746ce6d-0dda-41b2-a1aa-d90c0f8022e5:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl26582471=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Fri, 17 Apr 2026 03:58:20 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: Device-Stock-UA, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-PlatformUser-Agent, User-Agent, X-Device-User-Agent, X-OperaMini-Phone-UA, X-UCBrowser-Device-UA\r\nHost: sourshaped.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T16:42:47.069256Z","times_seen":17782290,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"immigrationacre.com/c6/4a/a1/c64aa11db612c16c65959b87a44dac81.js","fqdn":"immigrationacre.com","domain":"immigrationacre.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://robloxiconmakertool.pages.dev/","date":"2026-04-17T03:58:17.470Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"immigrationacre.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 22:44:59 GMT","end":"Sat, 20 Jun 2026 22:44:58 GMT"},"fingerprint":{"sha1":"C5:C0:F1:09:DF:66:79:21:CE:6B:25:C3:DC:5A:3B:4E:6C:24:00:FD","sha256":"14:5E:A4:DE:46:F2:FF:8F:7D:14:D8:7C:E6:33:BC:41:57:AD:BF:24:AC:C4:3C:0F:A7:EE:34:BE:D3:48:56:5B"}}},"request":{"raw":"GET /c6/4a/a1/c64aa11db612c16c65959b87a44dac81.js HTTP/1.1\r\nHost: immigrationacre.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://robloxiconmakertool.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Fri, 17 Apr 2026 03:58:17 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 34097\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 3\r\nHost: immigrationacre.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: d5642507cfb6bd8e0120fb0d84fdccd2\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":93646,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"4702845c26fbb7b79ad44de45cd21e6d","sha1":"9ff79182434b2bee96625c5aa9e97a3afe946d8d","sha256":"5d47988cabc34fb9fb57afa4657c8025d8178e643bdb5f8534ab4c4eb5b50fa7","sha512":"ffcd7e024a35f52e729fcf076ac3edcea1348a8dc1b351044fd65f36b8410c29da6b52e3a90b761a3ee5adc2f3ea13087249b16c1209ca3048a6c297b0643022","ssdeep":"1536:7d1PqZWem5Kvg/+UriOXwaHe4J+LXFk8Xmj8sV:Gpv4WUR+1DFw9V","tlshash":"5c93e78c3fc1f0a513a5203b222f714ef0994d85546ce468f783f56a2f7ca4ae536b98","first_seen":"2026-03-31T19:28:00.711486Z","last_seen":"2026-04-17T03:58:43.310343Z","times_seen":4,"resource_available":true,"data":null}},"time_used":821,"timings":{"blocked":313,"dns":0,"connect":94,"send":0,"wait":99,"receive":95,"ssl":217},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"immigrationacre.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"immigrationacre.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tse1.mm.bing.net/th?q=roblox%20icon%20maker%20tool\u0026w=720\u0026h=405\u0026c=5\u0026rs=1\u0026p=0","fqdn":"tse1.mm.bing.net","domain":"bing.net","tld":"net"},"ip":{"addr":"150.171.27.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://robloxiconmakertool.pages.dev/","date":"2026-04-17T03:58:16.838Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mm.bing.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft TLS G2 RSA CA OCSP 02","organization":"Microsoft Corporation"},"validity":{"start":"Thu, 16 Apr 2026 05:53:02 GMT","end":"Tue, 13 Oct 2026 05:53:02 GMT"},"fingerprint":{"sha1":"24:F3:B1:CE:29:AF:66:D1:5D:3B:14:70:5D:E2:07:95:7C:41:70:E7","sha256":"F8:C7:F0:64:A9:0F:66:DB:B5:45:C8:CA:A8:72:A1:0A:8A:68:92:9D:6F:46:02:47:A2:2D:24:45:61:F5:C8:2E"}}},"request":{"raw":"GET /th?q=roblox%20icon%20maker%20tool\u0026w=720\u0026h=405\u0026c=5\u0026rs=1\u0026p=0 HTTP/1.1\r\nHost: tse1.mm.bing.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://robloxiconmakertool.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=5184000\r\ncontent-length: 47855\r\ncontent-type: image/jpeg\r\nx-cache: TCP_MISS\r\nhttpcacheability: 4\r\nx-resolved-thumbnail-id: OIP.LavN48Xs-EA73GPmGGWBaQHaEK\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ntiming-allow-origin: *\r\nreport-to: {\"group\":\"network-errors\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://aefd.nelreports.net/api/report?cat=bingth\u0026ndcParam=nadatio\"}]}\r\nnel: {\"report_to\":\"network-errors\",\"max_age\":604800,\"success_fraction\":0.001,\"failure_fraction\":1.0}\r\nx-powered-by: ASP.NET\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nx-msedge-ref: Ref A: 90208361C824409C8B4EB5FF8E69822E Ref B: OSL231050213060 Ref C: 2026-04-17T03:58:16Z\r\ndate: Fri, 17 Apr 2026 03:58:16 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":47855,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 720x405, components 3","md5":"09b06720785beee371485b501485f950","sha1":"3a94a07c49261bfa19c404985a87b7d985caccec","sha256":"2ea42f6de0fb4def2f8c79f872d050e1921f0b564911a0e1aa9b9d4a7b27a87e","sha512":"cdd8c0e282bdfa0ef693bee2db827d6d2588fe960860d6de802e40ae07c8d15a5db4b7c34919f96145cc55c3707a2b3c3869a33b6fc9679a0c3687cce890e871","ssdeep":"768:hXnF33+ooBED3zGdwMU10gv9V6BOKFR9dKi5DmP23Q1rFhJ7VqURQNR:hRboBsDKUKgv9cFRB56PMQLJpqiQf","tlshash":"b723f21cb9eb73834d2447e2c9408292833d46e1276e0dc95d34ebfab7966d3d786328","first_seen":"2026-04-17T03:58:43.310937Z","last_seen":"2026-04-17T03:58:43.310937Z","times_seen":1,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":42,"dns":32,"connect":2,"send":0,"wait":41,"receive":3,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"robloxiconmakertool.pages.dev/favicon-96x96.png","fqdn":"robloxiconmakertool.pages.dev","domain":"robloxiconmakertool.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://robloxiconmakertool.pages.dev/","date":"2026-04-17T03:58:17.090Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"robloxiconmakertool.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Apr 2026 15:12:00 GMT","end":"Tue, 14 Jul 2026 16:09:18 GMT"},"fingerprint":{"sha1":"38:3E:41:F2:CF:B9:6D:67:1E:17:C6:35:90:A7:00:A3:8A:2D:16:38","sha256":"1F:40:2D:0A:09:BF:F6:61:B1:16:F7:3C:F3:76:1F:FD:78:FB:16:2B:E9:E7:62:A0:58:26:52:CA:89:21:88:42"}}},"request":{"raw":"GET /favicon-96x96.png HTTP/1.1\r\nHost: robloxiconmakertool.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://robloxiconmakertool.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 03:58:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 3415\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"207249c5b01c104202965011f95037dc\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WNXn%2F7mWdvjKLfEl%2FkB%2FSXHYZJ2TIEz74XwcQmVHyjXGWJOVv53DRN%2FRIV6pzI2wElZoD3ql62mninVtQaWKIeryMEGZ6JN0MH7cDhzSiBq8WhEnxANbgfnaMaO22snXzGgcvd%2BnvTvMxe2IemwQiQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\ncf-ray: 9ed882accc6e0b65-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3415,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"18432ea15c0c7b7ef50ee1b42b9b29e3","sha1":"2b656e7a76d7a8d11ff020bd8bac15c6780c39ec","sha256":"27a2d2727b2c93679c945f8107ce5bd270d8dfc426c7abca1e975e46ac0d78e9","sha512":"0d9dfdd5af753545acac4819105170d4358fa8a619ee99f9754eaec45b48cbc8875409744d35d10676843b635bf1b065c0129e1ffdac68d921a39bd7e4632f87","ssdeep":"","tlshash":"0d615be0818b9c3abc969201820ac603fb35a0ce0e5a1a7e54f717c87f133bbb52c157","first_seen":"2025-10-29T04:02:15.906591Z","last_seen":"2026-08-05T18:54:41.246003Z","times_seen":406,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adxpy.pages.dev/magic.js","fqdn":"adxpy.pages.dev","domain":"adxpy.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://robloxiconmakertool.pages.dev/","date":"2026-04-17T03:58:17.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adxpy.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 00:44:54 GMT","end":"Sat, 04 Jul 2026 01:43:34 GMT"},"fingerprint":{"sha1":"B9:0E:27:18:36:32:2C:B8:F2:E5:2F:50:96:88:4F:CF:54:4C:10:3C","sha256":"ED:9F:40:13:F5:DC:3F:FE:75:A2:AF:61:F4:2D:D7:17:14:E2:C8:D4:C5:19:DB:9E:88:D1:73:59:BF:13:F7:D1"}}},"request":{"raw":"GET /magic.js HTTP/1.1\r\nHost: adxpy.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://robloxiconmakertool.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 03:58:17 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IOS6GOK6r6c09lz4HILRHVjuow3iOffhIsoB41L5POIcJRp1Ouur3HlTi%2F64%2FWDYWnhoQQzUUprYmI3sWZUDTDcBnr5hXtl9WVdgu6jvuyPxT%2BjifOBsf3uC0yW%2F2ezXMas%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"c49d59185af245830cb91e4818c56238\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ed882aeef895ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":671,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"9bcbb02a6bf94ae8762ddcda5d1c80d3","sha1":"fade830681bb5b7b138db5482e7a495c1c9b296a","sha256":"b26277e44f2fe29283a55a632166f8a45dd1407a0970c13e08287406f94a0772","sha512":"54914b0f4d7625f4e40e13b11bb2bfd47c87dc6a14714c427c48c75e955980826d6605abbac7b3ca6c043356f1b91618b6f16abaf6be339be38d8ffa825e71e5","ssdeep":"","tlshash":"c101fe6e229200a84d7a509803a3fa0cfda832577160c0e1bacedb602f35f20419e4d8","first_seen":"2025-12-08T23:25:47.209165Z","last_seen":"2026-08-05T18:54:41.256186Z","times_seen":391,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sourshaped.com/sbar.json?key=af25da8381e0bd0494ba4018c76898a2\u0026uuid=5746ce6d-0dda-41b2-a1aa-d90c0f8022e5%3A2%3A1","fqdn":"sourshaped.com","domain":"sourshaped.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://robloxiconmakertool.pages.dev/","date":"2026-04-17T03:58:20.604Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sourshaped.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 00:01:03 GMT","end":"Thu, 28 May 2026 00:01:02 GMT"},"fingerprint":{"sha1":"F1:AF:5D:36:35:F4:F3:93:55:9A:8D:70:8F:C7:F5:6B:E2:26:FB:8E","sha256":"D3:58:1D:7D:AD:70:61:0C:FF:96:A1:79:6D:1D:A0:CF:58:59:D3:71:56:63:92:64:9D:FF:B5:46:E7:65:17:11"}}},"request":{"raw":"GET /sbar.json?key=af25da8381e0bd0494ba4018c76898a2\u0026uuid=5746ce6d-0dda-41b2-a1aa-d90c0f8022e5%3A2%3A1 HTTP/1.1\r\nHost: sourshaped.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://robloxiconmakertool.pages.dev/\r\nOrigin: https://robloxiconmakertool.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=5746ce6d-0dda-41b2-a1aa-d90c0f8022e5:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl26582471=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Fri, 17 Apr 2026 03:58:20 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 3235\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\naccess-control-allow-origin: https://robloxiconmakertool.pages.dev\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\nset-cookie: uid_id2=5746ce6d-0dda-41b2-a1aa-d90c0f8022e5:2:1; expires=Fri, 24 Apr 2026 03:58:20 GMT; path=/; secure; SameSite=None\nuncs=2; expires=Sat, 18 Apr 2026 03:58:20 GMT; path=/; secure; SameSite=None\nuncs29=2; expires=Sat, 18 Apr 2026 03:58:20 GMT; path=/; secure; SameSite=None\nu_pl28216845=1; expires=Sat, 18 Apr 2026 03:58:20 GMT; path=/; secure; SameSite=None\nslecaf25da8381e0bd0494ba4018c76898a2=[6588127]; expires=Fri, 17 Apr 2026 03:58:25 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 213\r\nHost: sourshaped.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 0aa105b4a754bee589443bb32f8b0cb0\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5360,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"JSON text data","md5":"394217329df4ab4a70a2605ab3c5aafb","sha1":"16bcef7da4b94c15d15222dd8aa79cd1c1c17024","sha256":"0dbeb46dca24385c805ee37f43741b744fd78fa8dd6bb1734949f746203f8458","sha512":"38dd6544ea72430cb206ddb7e0fda4f673d453f830d2ca6fa8148ffc41274ba808b1c61a185a42cca9da3f61387b01daa00d130540dc366a5133d3567a7ec796","ssdeep":"96:9hJSn8amb1VcVcMcgNCcn8amb1VcVcMcgNCKgelReRXjiA1hlItoURk3plPty7iw:9hcVmhV8zTtVmhV8zTYe7+XjJhlZcWPg","tlshash":"05b13b6f5ac110c524ceccfa5e6b5af96cb29f0ac7426c94d52ca82f1b391146bee310","first_seen":"2026-04-17T03:58:43.313351Z","last_seen":"2026-04-17T03:58:43.313351Z","times_seen":1,"resource_available":false,"data":null}},"time_used":310,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":309,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"links.mtevor.com/api.php","fqdn":"links.mtevor.com","domain":"mtevor.com","tld":"com"},"ip":{"addr":"104.21.21.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://robloxiconmakertool.pages.dev/","date":"2026-04-17T03:58:16.990Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mtevor.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 16:10:55 GMT","end":"Thu, 25 Jun 2026 17:08:44 GMT"},"fingerprint":{"sha1":"1D:90:33:9C:3D:4D:50:02:77:2C:32:67:1E:87:33:CC:BD:89:04:6D","sha256":"72:55:21:53:6A:A2:E9:F9:08:9D:13:A1:4F:FC:E2:CD:E9:5C:53:05:B8:B0:36:72:24:AB:FD:DA:7A:F9:7C:C4"}}},"request":{"raw":"GET /api.php HTTP/1.1\r\nHost: links.mtevor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://robloxiconmakertool.pages.dev/\r\nOrigin: https://robloxiconmakertool.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 03:58:17 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=crjZFkUbxQkVDRm2RgxkX2j6urMvM3RYd8vDZ%2F%2Fln9Svldwx13J6AS9G1OtsHIL2SegMjA8R5ZrH0YBuwbuy3tHEJXwpHyr6NmdLlr9w2eJ7uwL0ZzHenUiH5sNTyQt8ilJh\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9ed882ac7c8c56af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":176,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"19954293db244180930bb3a162e54bc1","sha1":"8d7e45594cf07167577ced746ab7257f9f42e789","sha256":"0d5f02f8adc53e3681e3e0b86c3ec0e40d103529c15107c4fbdafcb84b66e12e","sha512":"6f5a2257737d14ec706be46a0c870f65b5c6544e44e29abdecc2eaef40b330ec74ecdbb91cdb2dae3e5aca12d01bf66dc93277a7ea1932462d8aa697309b8199","ssdeep":"","tlshash":"28c0c0fddbc85066330400c42466bc31bd2fa0053223d003b38ce071214a1d5881d4bb","first_seen":"2026-04-17T03:58:43.314229Z","last_seen":"2026-04-17T03:58:43.314229Z","times_seen":1,"resource_available":false,"data":null}},"time_used":342,"timings":{"blocked":43,"dns":21,"connect":1,"send":0,"wait":254,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adxpy.pages.dev/arrow-up.gif","fqdn":"adxpy.pages.dev","domain":"adxpy.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://robloxiconmakertool.pages.dev/","date":"2026-04-17T03:58:17.429Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adxpy.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 00:44:54 GMT","end":"Sat, 04 Jul 2026 01:43:34 GMT"},"fingerprint":{"sha1":"B9:0E:27:18:36:32:2C:B8:F2:E5:2F:50:96:88:4F:CF:54:4C:10:3C","sha256":"ED:9F:40:13:F5:DC:3F:FE:75:A2:AF:61:F4:2D:D7:17:14:E2:C8:D4:C5:19:DB:9E:88:D1:73:59:BF:13:F7:D1"}}},"request":{"raw":"GET /arrow-up.gif HTTP/1.1\r\nHost: adxpy.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://robloxiconmakertool.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 03:58:17 GMT\r\ncontent-type: image/gif\r\ncontent-length: 4491\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"abc38753b71c3201854a4e8b3ffdce52\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BPiyBU8daiONDzgJ%2FtToAVhPXmCg4UicKjjKApMjMQsg6cJiCcDGGZqzY%2FGNxAfYV1OHaBoI%2FmyK2Gu%2B6ucVB8MlfrIUHcnMTIuLHpSTw%2Bcz7OXGvf%2FLvRGZU%2BAhXg%2Fh64Y%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9ed882aeef865ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4491,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 28 x 150","md5":"8b78a541eaa521c8bd946b84a46feb92","sha1":"31a6411c7051332a4aff0d338cf721f513bd1f8b","sha256":"8794063dced5ec3d5035d4fd6e7cce885671224284469fe85e7b392a0fabf0a8","sha512":"ca4f07b46c061bcc141b763e32da638e835f207106f8d5ea90dfab473487114081fbd3e12768cfe3d374c0eecba53e2a085fd0af4cb068f4efed559fbd9fa26d","ssdeep":"96:kRXW9wwXp9lM6jb7xLD3hFG2G/3dtGSQp60NfzpAMK:kVW9Jp9JjbBDRFG2G/3mjrpAMK","tlshash":"c791e7121a798d4cf0335934c9a8ac5f332a5da2811183db29d4329ee93c4bd596e67c","first_seen":"2025-05-30T17:14:42.053302Z","last_seen":"2026-08-05T18:54:41.239788Z","times_seen":498,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://robloxiconmakertool.pages.dev/","date":"2026-04-17T03:58:20.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://robloxiconmakertool.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 14 Apr 2026 02:23:48 GMT\r\nexpires: Wed, 14 Apr 2027 02:23:48 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 264872\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-08-08T16:41:23.433685Z","times_seen":257265,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":51,"dns":0,"connect":7,"send":0,"wait":8,"receive":10,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.nightdestruct.com/sb/notifications/gambling/default/android-btn/7/js/script.js","fqdn":"cdn.nightdestruct.com","domain":"nightdestruct.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://robloxiconmakertool.pages.dev/","date":"2026-04-17T03:58:21.103Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nightdestruct.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 16:21:26 GMT","end":"Sun, 28 Jun 2026 16:21:25 GMT"},"fingerprint":{"sha1":"77:BA:39:E3:87:1C:89:74:C5:36:C2:0F:E9:4C:0E:35:C4:92:A6:BA","sha256":"5F:17:E6:F7:42:E9:5F:B9:9E:03:47:36:9F:79:03:3B:E2:C2:66:ED:E9:3D:14:AB:29:B0:52:4A:62:57:C4:91"}}},"request":{"raw":"GET /sb/notifications/gambling/default/android-btn/7/js/script.js HTTP/1.1\r\nHost: cdn.nightdestruct.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://robloxiconmakertool.pages.dev/\r\nOrigin: https://robloxiconmakertool.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 03:58:21 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 02 Dec 2024 12:14:39 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pvV2zEcV3HR49ml%2FuzbQQAJT%2FE3JvwCld1KzC21L8TItfWeLFW4JuztamEwDqHOk0tIAgkxm5ktJElCWmQ56I6ujx8rWYGJa5%2BWk6SL%2FkNnCx3mHh5kh6VSdi4wGXyOeSz8PMCapxu0%3D\"}]}\r\ncf-cache-status: MISS\r\netag: W/\"674da4af-24f5\"\r\ncontent-encoding: br\r\ncf-ray: 9ed882c5ec49569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9461,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text","md5":"5152ba2bfdb2eb1eba444c43a0c10f03","sha1":"6f04da52e514dab10a779d9678c632a8c1afb587","sha256":"7fbe92f6e61a4685bc1001ec52f85f39ce69a0c5c453b5f064c3695be8a879a3","sha512":"ae6a56397a8fdfd53715085e00c4c1c7b8ce6262d51bced41e1d2d7584e9661b5450a4fb1e5b12f79e4262c326fb2bd209995c60ce09f2fb0600de3bba59a5d1","ssdeep":"192:SnocrcYmBa5xUfThW6m3whUReZYAe/9+ox9VurIjrz/iWEJUewdZIToS:SnCy6meueZYAe/9bxQIjrTiWEJUd/4","tlshash":"9412c64849ba9852c242402c00ff2522f72449939db9bef53f9e81415f9d82f79be67f","first_seen":"2026-03-17T02:05:18.644682Z","last_seen":"2026-04-17T10:06:14.663928Z","times_seen":18,"resource_available":false,"data":null}},"time_used":513,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":512,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"robloxiconmakertool.pages.dev/favicon.svg","fqdn":"robloxiconmakertool.pages.dev","domain":"robloxiconmakertool.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://robloxiconmakertool.pages.dev/","date":"2026-04-17T03:58:17.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"robloxiconmakertool.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Apr 2026 15:12:00 GMT","end":"Tue, 14 Jul 2026 16:09:18 GMT"},"fingerprint":{"sha1":"38:3E:41:F2:CF:B9:6D:67:1E:17:C6:35:90:A7:00:A3:8A:2D:16:38","sha256":"1F:40:2D:0A:09:BF:F6:61:B1:16:F7:3C:F3:76:1F:FD:78:FB:16:2B:E9:E7:62:A0:58:26:52:CA:89:21:88:42"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: robloxiconmakertool.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://robloxiconmakertool.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 03:58:17 GMT\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=6,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PDr43KQTTbmcffzwQ%2Frcky%2F5Z5AZVBRMJvyhGA%2FOkpb2q5KdUNQXZytnlM%2FTP5x1eLy%2BAV77wbxmYBmRnCE3RSrNZMONlpPUvdEIpbKUe1a1YLriSpx%2BMhF9F9i6prRZ839myVgO5%2FW0NgAfFFZreQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"c32bf1839a02c28417636e2fbfe32b83\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ed882accc700b65-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1039,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3e5eb335b0265fa668f3b7a8bb83dd62","sha1":"3a7497bfe01d5f0dd7f93b25400ff8dd4410b033","sha256":"4183fc50d0ecbe4f28d32f897b93b712a6e90df092b0b5d921b51ce9da6931ee","sha512":"b3fb01f8dce34190449c733e25a5818ce09b3957fbe5088be6877f89d0f32ed35e793a245ae2d736cd17031d8183183d0e4188b2d93f7faaa286b5b88f8179e6","ssdeep":"","tlshash":"bf11ef5fc341983af23ed341eab4da49863568cb91f523d8fed06d29b43a5d61409788","first_seen":"2025-05-31T11:23:43.744066Z","last_seen":"2026-08-05T18:54:41.273958Z","times_seen":494,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.nightdestruct.com/sb/interstitial/other/adzilla/flip_icon_fullpage/1/img/icon.jpg","fqdn":"cdn.nightdestruct.com","domain":"nightdestruct.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://robloxiconmakertool.pages.dev/","date":"2026-04-17T03:58:19.378Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nightdestruct.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 16:21:26 GMT","end":"Sun, 28 Jun 2026 16:21:25 GMT"},"fingerprint":{"sha1":"77:BA:39:E3:87:1C:89:74:C5:36:C2:0F:E9:4C:0E:35:C4:92:A6:BA","sha256":"5F:17:E6:F7:42:E9:5F:B9:9E:03:47:36:9F:79:03:3B:E2:C2:66:ED:E9:3D:14:AB:29:B0:52:4A:62:57:C4:91"}}},"request":{"raw":"GET /sb/interstitial/other/adzilla/flip_icon_fullpage/1/img/icon.jpg HTTP/1.1\r\nHost: cdn.nightdestruct.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 03:58:19 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 78672\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Sep 2025 11:19:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68c00d57-13350\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\naccept-ranges: bytes\r\nage: 1503054\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WLCG2K6ho7c97D%2FpqDTQeBc3Gb2%2FmUpLZFDAV5np8Bjr7nBDv9rBG%2FVFNuld7Qh4x2WPwMRRr32DAV6cQCcuvpUbTU0YJAtTBJMSjJcPGmXvjw0UGCUxJJnTlUrRXqnwzAylUEStBC8%3D\"}]}\r\ncf-ray: 9ed882bb1fe4569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78672,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 26.3 (Macintosh), datetime=2025:08:29 16:40:19], progressive, precision 8, 300x250, components 3","md5":"066e20100222b78fe9405d18539da6e4","sha1":"aa5e3d971a8d26f99b7fdc0ddacc61c062cd1776","sha256":"0af13aebc4a03fef7e5e9050db1d797bb81bf9f64227866392cb7b97ec045085","sha512":"5c6c20ab83609a25576880ddf9b35f93481a165e6ddd174dd086022bd660d9b1936b8edb37c46d7f0cdbbcd77cbf9753bb7d8b8757692266d45c64dceebb02b0","ssdeep":"1536:BHEqIkq/HEqIkq7lE6c/Fs27oxQhHXNFv3fEH3j0sF6:Bk1kq/k1kqp74HhHv38H3/6","tlshash":"e773f158bb45ee23f8d35b730873e7875a13ae24a3971e90708c7520f7f5b54080e616","first_seen":"2025-09-02T19:16:52.557605Z","last_seen":"2026-05-18T20:03:54.4044Z","times_seen":1185,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.nightdestruct.com/sb/notifications/gambling/default/android-btn/7/css/style.css","fqdn":"cdn.nightdestruct.com","domain":"nightdestruct.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://robloxiconmakertool.pages.dev/","date":"2026-04-17T03:58:21.098Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nightdestruct.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 16:21:26 GMT","end":"Sun, 28 Jun 2026 16:21:25 GMT"},"fingerprint":{"sha1":"77:BA:39:E3:87:1C:89:74:C5:36:C2:0F:E9:4C:0E:35:C4:92:A6:BA","sha256":"5F:17:E6:F7:42:E9:5F:B9:9E:03:47:36:9F:79:03:3B:E2:C2:66:ED:E9:3D:14:AB:29:B0:52:4A:62:57:C4:91"}}},"request":{"raw":"GET /sb/notifications/gambling/default/android-btn/7/css/style.css HTTP/1.1\r\nHost: cdn.nightdestruct.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://robloxiconmakertool.pages.dev/\r\nOrigin: https://robloxiconmakertool.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 03:58:21 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:25:07 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"65aa8643-ca8\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wJcpBy%2BlWuni66%2Bb%2FcBdw8PG9bEIro1%2FfK3qn1oy4cSAQSBzWVvOCDxbL3uz9F75l1sfmuG5HzMRcZHgj%2F%2BPTw4EUH8g9XbLPNzfd6oYek8JZBcSaRpSlHYGciEKi9XlPFeH9QwESMA%3D\"}]}\r\ncf-ray: 9ed882c5dc44569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3240,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"553fa19ec4bf19cd28f85891afbdbdf2","sha1":"b1f0862515cf53acb1639482e3348e036f854284","sha256":"1ce42be8604b8f2cc6af3cb1dfa07f4510d0468da952b99f427c92c8430b74ed","sha512":"72bf837153d135aeb949deba92d3a753c28a062b41941e8777c5f5022bb15b3c710fa8cf0f78ffd7a7d389e1f9e0847564b7bfa186c65b157dacf5008e173f43","ssdeep":"","tlshash":"2a61ee956b791608b11ed5b77d023f576b2941039f0fdc74afd1240c9ec52aa82a378f","first_seen":"2026-03-17T02:05:18.638566Z","last_seen":"2026-04-17T10:06:14.676557Z","times_seen":18,"resource_available":false,"data":null}},"time_used":552,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":552,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/af/25/da/af25da8381e0bd0494ba4018c76898a2.js","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://robloxiconmakertool.pages.dev/","date":"2026-04-17T03:58:19.597Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 22:53:11 GMT","end":"Sun, 24 May 2026 22:53:10 GMT"},"fingerprint":{"sha1":"ED:51:C6:32:50:BE:DC:21:A3:AD:D6:A1:DB:98:F0:08:AD:BF:E7:A2","sha256":"56:84:BB:23:CE:A6:AD:BA:2E:8A:D0:F9:92:4F:17:BF:64:9A:7D:1C:AC:77:10:4A:32:94:E4:15:91:57:B1:A8"}}},"request":{"raw":"GET /af/25/da/af25da8381e0bd0494ba4018c76898a2.js HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://robloxiconmakertool.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Fri, 17 Apr 2026 03:58:19 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 34675\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 3\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 7b7521d0427f9bb4b1d5913c3e4f5bae\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":91785,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"70416caa464712cf44264d24374e6a8c","sha1":"12df5c21f53ca7dec3341a64ca8334adb65f4329","sha256":"fb8fa81f02b8db1ff90ef7632367cc4365565d88e27fd90d56a2cc85a9b93436","sha512":"dff54e02ce71541db8205870e0abb8bcbcc8e872977d1e4befcb88a17379655cd5b5a858b07f8775e84e88df7abbc13c77c3da34ea44ef33633e325391528d1f","ssdeep":"1536:1sgv0NC4Y5Tll1apjTHlxn0WuXvon8USxNKo4hRl+GdM9LHEf7G:agvA25lIpZxn0WuXvon8pCTM67G","tlshash":"3c93e8887fb272ed439a307b362fb006f22a9d512498f4f4d586b4e52e7876da437704","first_seen":"2026-04-17T03:58:43.323552Z","last_seen":"2026-04-17T03:58:43.323552Z","times_seen":1,"resource_available":true,"data":null}},"time_used":779,"timings":{"blocked":290,"dns":0,"connect":95,"send":0,"wait":101,"receive":96,"ssl":193},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/d0/89/ea/d089ea049f0f7b1eacfa2b5bb99d3bdc.js","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://robloxiconmakertool.pages.dev/","date":"2026-04-17T03:58:19.595Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 22:53:11 GMT","end":"Sun, 24 May 2026 22:53:10 GMT"},"fingerprint":{"sha1":"ED:51:C6:32:50:BE:DC:21:A3:AD:D6:A1:DB:98:F0:08:AD:BF:E7:A2","sha256":"56:84:BB:23:CE:A6:AD:BA:2E:8A:D0:F9:92:4F:17:BF:64:9A:7D:1C:AC:77:10:4A:32:94:E4:15:91:57:B1:A8"}}},"request":{"raw":"GET /d0/89/ea/d089ea049f0f7b1eacfa2b5bb99d3bdc.js HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://robloxiconmakertool.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Fri, 17 Apr 2026 03:58:19 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 36057\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 3\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: d2f4561434447c0fb5704d3ba2e1b57d\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":99415,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"a7c9cbd6b14d295471f653568d405d52","sha1":"bbfc11fce3a946dadb0ad9f8439e3317231788ba","sha256":"99347dca25f309c3c55cfc2a6e39782a42739a41d9eac854006ffaa9777a317f","sha512":"80ee2b609a755c30fbe1ae0404ad38456cbcce85d1901698c65de423dc8f9e50f5ec89cfb391c83626b0bfe55159e88dddc372d5589ed1576010e6cf4bd9b0af","ssdeep":"1536:gS77g4wsY51M18N222qysMHBPMDAVpFoRJv932rO3tus/1z:Nusu1MQBsMj92rO3Hh","tlshash":"e4a3c48c7fe2b05b522a7077352fa52bf02d4c2c248cf468f1569de42a7c719e63ae51","first_seen":"2026-04-17T03:58:43.324412Z","last_seen":"2026-04-17T03:58:43.324412Z","times_seen":1,"resource_available":true,"data":null}},"time_used":799,"timings":{"blocked":299,"dns":0,"connect":97,"send":0,"wait":100,"receive":102,"ssl":194},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"realizationnewestfangs.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.nightdestruct.com%2Fsb%2Fnotifications%2Fgambling%2Fdefault%2Fandroid-btn%2F7%2Fcss%2Fstyle.css\u0026l=3240\u0026fd=567","fqdn":"realizationnewestfangs.com","domain":"realizationnewestfangs.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://robloxiconmakertool.pages.dev/","date":"2026-04-17T03:58:21.654Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"realizationnewestfangs.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 23:39:43 GMT","end":"Wed, 27 May 2026 23:39:42 GMT"},"fingerprint":{"sha1":"2F:D0:7E:69:4A:D0:06:61:89:AF:78:09:0A:5A:F1:7B:F9:4A:B7:96","sha256":"24:55:49:F2:2C:E7:D7:3D:E6:6E:54:6C:64:30:D7:3C:F6:39:2F:A0:A7:A2:AA:25:93:8D:6B:C2:15:40:66:C2"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.nightdestruct.com%2Fsb%2Fnotifications%2Fgambling%2Fdefault%2Fandroid-btn%2F7%2Fcss%2Fstyle.css\u0026l=3240\u0026fd=567 HTTP/1.1\r\nHost: realizationnewestfangs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://robloxiconmakertool.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Fri, 17 Apr 2026 03:58:21 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: Device-Stock-UA, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-PlatformUser-Agent, User-Agent, X-Device-User-Agent, X-OperaMini-Phone-UA, X-UCBrowser-Device-UA\r\nHost: realizationnewestfangs.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T16:42:47.069256Z","times_seen":17782290,"resource_available":true,"data":null}},"time_used":561,"timings":{"blocked":266,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":197},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/cti/7d/b9/cc/7db9ccacd96a1433001a2ae7cd594c0f/1716370283.jpg","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://robloxiconmakertool.pages.dev/","date":"2026-04-17T03:58:20.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 02:33:25 GMT","end":"Fri, 05 Jun 2026 02:33:24 GMT"},"fingerprint":{"sha1":"4A:66:11:51:1F:1F:F3:84:B6:E4:4F:81:C1:03:83:9F:01:17:7E:82","sha256":"DA:55:E3:02:D5:3C:4E:3A:51:ED:21:0D:F4:32:52:C2:C5:31:87:50:DC:AB:13:D9:93:4A:15:0C:D9:8C:D6:4F"}}},"request":{"raw":"GET /cti/7d/b9/cc/7db9ccacd96a1433001a2ae7cd594c0f/1716370283.jpg HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 03:58:20 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 91391\r\nserver: nginx/1.21.6\r\nlast-modified: Wed, 22 May 2024 09:31:34 GMT\r\netag: \"664dbb76-164ff\"\r\nexpires: Sun, 19 Apr 2026 03:58:20 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":91391,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 300x250, components 3","md5":"c7dd9f77103233f83950545ef5875633","sha1":"0b32c30a243b18bfe2b8d05cde9f17a3535c7034","sha256":"eb0f2225b581caaa8dc9440b6af5caf7fb1560beae36947062e5d391089a6cd1","sha512":"fbe20ec7bb54863d6623b6cfebeefaefa8ce444805ac065d4fde57656a86685b31b1bc421f87f708e3d535e60e073e87da24353eb5ea45c367e874e181e4c17f","ssdeep":"1536:zLr/rJJqAWksnoKeS/ewdpugbyAelZh29x9QuLYHXcnF4MCUPgMZ4S:D9Mofk5bBbQ3h0QnU7","tlshash":"7393029393dbba5912c9c054f28c834e49758a5f2cc7ef0b0d55bbbd42f999c6295c30","first_seen":"2024-05-24T15:28:24Z","last_seen":"2026-05-19T04:59:42.648973Z","times_seen":192,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":64,"dns":21,"connect":19,"send":0,"wait":20,"receive":52,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"realizationnewestfangs.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.nightdestruct.com%2Fsb%2Fnotifications%2Fgambling%2Fdefault%2Fandroid-btn%2F7%2Fcss%2Fanimate.css\u0026l=78693\u0026fd=459","fqdn":"realizationnewestfangs.com","domain":"realizationnewestfangs.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://robloxiconmakertool.pages.dev/","date":"2026-04-17T03:58:21.547Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"realizationnewestfangs.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 23:39:43 GMT","end":"Wed, 27 May 2026 23:39:42 GMT"},"fingerprint":{"sha1":"2F:D0:7E:69:4A:D0:06:61:89:AF:78:09:0A:5A:F1:7B:F9:4A:B7:96","sha256":"24:55:49:F2:2C:E7:D7:3D:E6:6E:54:6C:64:30:D7:3C:F6:39:2F:A0:A7:A2:AA:25:93:8D:6B:C2:15:40:66:C2"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.nightdestruct.com%2Fsb%2Fnotifications%2Fgambling%2Fdefault%2Fandroid-btn%2F7%2Fcss%2Fanimate.css\u0026l=78693\u0026fd=459 HTTP/1.1\r\nHost: realizationnewestfangs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://robloxiconmakertool.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Fri, 17 Apr 2026 03:58:21 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: Device-Stock-UA, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-PlatformUser-Agent, User-Agent, X-Device-User-Agent, X-OperaMini-Phone-UA, X-UCBrowser-Device-UA\r\nHost: realizationnewestfangs.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T16:42:47.069256Z","times_seen":17782290,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"realizationnewestfangs.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.nightdestruct.com%2Fsb%2Fnotifications%2Fgambling%2Fdefault%2Fandroid-btn%2F7%2Fjs%2Fscript.js\u0026l=7992\u0026fd=527","fqdn":"realizationnewestfangs.com","domain":"realizationnewestfangs.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://robloxiconmakertool.pages.dev/","date":"2026-04-17T03:58:21.621Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"realizationnewestfangs.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 23:39:43 GMT","end":"Wed, 27 May 2026 23:39:42 GMT"},"fingerprint":{"sha1":"2F:D0:7E:69:4A:D0:06:61:89:AF:78:09:0A:5A:F1:7B:F9:4A:B7:96","sha256":"24:55:49:F2:2C:E7:D7:3D:E6:6E:54:6C:64:30:D7:3C:F6:39:2F:A0:A7:A2:AA:25:93:8D:6B:C2:15:40:66:C2"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.nightdestruct.com%2Fsb%2Fnotifications%2Fgambling%2Fdefault%2Fandroid-btn%2F7%2Fjs%2Fscript.js\u0026l=7992\u0026fd=527 HTTP/1.1\r\nHost: realizationnewestfangs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://robloxiconmakertool.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Fri, 17 Apr 2026 03:58:21 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: Device-Stock-UA, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-PlatformUser-Agent, User-Agent, X-Device-User-Agent, X-OperaMini-Phone-UA, X-UCBrowser-Device-UA\r\nHost: realizationnewestfangs.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T16:42:47.069256Z","times_seen":17782290,"resource_available":true,"data":null}},"time_used":125,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":98,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"realizationnewestfangs.com/1b/50/e5/1b50e57a5911fd0a5b46962ab48ca22b.js","fqdn":"realizationnewestfangs.com","domain":"realizationnewestfangs.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://robloxiconmakertool.pages.dev/","date":"2026-04-17T03:58:22.594Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"realizationnewestfangs.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 23:39:43 GMT","end":"Wed, 27 May 2026 23:39:42 GMT"},"fingerprint":{"sha1":"2F:D0:7E:69:4A:D0:06:61:89:AF:78:09:0A:5A:F1:7B:F9:4A:B7:96","sha256":"24:55:49:F2:2C:E7:D7:3D:E6:6E:54:6C:64:30:D7:3C:F6:39:2F:A0:A7:A2:AA:25:93:8D:6B:C2:15:40:66:C2"}}},"request":{"raw":"GET /1b/50/e5/1b50e57a5911fd0a5b46962ab48ca22b.js HTTP/1.1\r\nHost: realizationnewestfangs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://robloxiconmakertool.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Fri, 17 Apr 2026 03:58:22 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 2572\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 1\r\nHost: realizationnewestfangs.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 5992d3b731352c6ab61a4e872a3741bd\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":5119,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5119), with no line terminators","md5":"2f7f534aa475f2ab416f5768f5eb1abf","sha1":"0e264d3826ec4cea33eb1d05bc113200a9ca55b1","sha256":"18821fa5e86c1240947fc976e78c43d849789cda4360578383adcfbd873d133a","sha512":"c24f6cff97cb6e0cf363714e9073f5f0533cfd228d16665aa6be8fc2527f88f5f3fa156e6dff75bcd4f581a1a3e8f7e0e7242ce4eb3d98d5af950a497b98ee7d","ssdeep":"96:JPczm1siDwcWu0HAGMUJhSENesmRmTj8pdkZ:Bc0DwBLAGtvArmjZ","tlshash":"c2b1b79c3f40b0a017a2a0776f6f2429f1396c10ab6be894d527a1dc3f29d29c2b2755","first_seen":"2026-03-12T08:34:48.0486Z","last_seen":"2026-04-30T07:10:40.662541Z","times_seen":2445,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"realizationnewestfangs.com/watch.1296020506974.js?key=52f212bca95373aed7ead32398143db7\u0026kw=%5B%221%22%2C%22new%22%2C%22message%22%5D\u0026refer=https%3A%2F%2Frobloxiconmakertool.pages.dev%2F\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=5746ce6d-0dda-41b2-a1aa-d90c0f8022e5%3A2%3A1","fqdn":"realizationnewestfangs.com","domain":"realizationnewestfangs.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://robloxiconmakertool.pages.dev/","date":"2026-04-17T03:58:22.597Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"realizationnewestfangs.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 23:39:43 GMT","end":"Wed, 27 May 2026 23:39:42 GMT"},"fingerprint":{"sha1":"2F:D0:7E:69:4A:D0:06:61:89:AF:78:09:0A:5A:F1:7B:F9:4A:B7:96","sha256":"24:55:49:F2:2C:E7:D7:3D:E6:6E:54:6C:64:30:D7:3C:F6:39:2F:A0:A7:A2:AA:25:93:8D:6B:C2:15:40:66:C2"}}},"request":{"raw":"GET /watch.1296020506974.js?key=52f212bca95373aed7ead32398143db7\u0026kw=%5B%221%22%2C%22new%22%2C%22message%22%5D\u0026refer=https%3A%2F%2Frobloxiconmakertool.pages.dev%2F\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=5746ce6d-0dda-41b2-a1aa-d90c0f8022e5%3A2%3A1 HTTP/1.1\r\nHost: realizationnewestfangs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://robloxiconmakertool.pages.dev/\r\nOrigin: https://robloxiconmakertool.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 307 Temporary Redirect\r\nServer: nginx/1.21.6\r\nDate: Fri, 17 Apr 2026 03:58:22 GMT\r\nContent-Type: text/html\r\nContent-Length: 0\r\nConnection: keep-alive\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\naccess-control-allow-origin: https://robloxiconmakertool.pages.dev\r\naccess-control-allow-credentials: true\r\nlocation: https://realizationnewestfangs.com/watch.1296020506974.js?key=52f212bca95373aed7ead32398143db7\u0026kw=%5B%221%22%2C%22new%22%2C%22message%22%5D\u0026refer=https%3A%2F%2Frobloxiconmakertool.pages.dev%2F\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=5746ce6d-0dda-41b2-a1aa-d90c0f8022e5%3A2%3A1\u0026shu=7e076c5755f77254645fe94d1dea154d734028bf39e23c3845ec3d6f397070d23e37f439599b09500a53c200b484424fc5f8e3415a5b316e2c61899c4f4c7446d2e803d0626c76154fbd1934157d9568b4e666e9bfeb20d68d331e\u0026pst=1776398362\u0026rmtc=t\u0026shv=2\u0026sht=HhaCvYjleSdwi4TINROJtYvmfR0aqIHRqcKEANWmpwg\u0026fstu=019d9996-fdb7-7907-9f3f-24ea2c029dd0\u0026st1=b43b22fb07cb981c6f52a076a139deee\u0026ps1=1776398302\r\nset-cookie: uid_id2=5746ce6d-0dda-41b2-a1aa-d90c0f8022e5:2:1; expires=Fri, 24 Apr 2026 03:58:22 GMT; path=/; secure; SameSite=None\nain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJwIjp7ImlkIjoyNjU4MjQzNiwiayI6IjUyZjIxMmJjYTk1MzczYWVkN2VhZDMyMzk4MTQzZGI3Iiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjo0OTQxMzUzLCJwaWQiOjIwMDA2MTcsImFuIjp0cnVlLCJsYW4iOnRydWUsImNpZCI6MSwiYWlkIjozMiwicHQiOjQsInBrIjoienZlNHhhcmlwciIsInQiOjF9LCJ1Ijp7InUiOjEsImF1IjoxLCJkIjp7ImlkIjoyNjY1NjExMTUsImlkcyI6IiIsImljIjpmYWxzZSwibiI6IkRlc2t0b3AsRW11bGF0b3IiLCJ2IjoiVW5rbm93biIsIm0iOiJVbmtub3duIiwiZiI6MSwiZm4iOiJEZXNrdG9wIiwib2lkIjozODkxNCwib24iOiJXaW5kb3dzIiwib3YiOiIxMC4wIiwiYmlkIjoxMzY5MjUsImJuIjoiRmlyZWZveCIsImJ2IjoiMTM0LjAiLCJ3diI6ZmFsc2UsImUiOnRydWUsImFiIjpmYWxzZX0sImMiOnsiaWQiOjE2MiwiYyI6Ik5PIiwibiI6Ik5vcndheSJ9LCJjdCI6eyJpZCI6MzE0MzI0NCwibiI6Ik9zbG8ifSwicmciOnsiaWQiOjE4NDQsIm4iOiJPc2xvIENvdW50eSJ9LCJhIjpmYWxzZSwiY3IiOnsibiI6IkJsaXggU29sdXRpb25zIn0sInhmIjoiIiwiaXhmIjpmYWxzZSwiaWd4ZiI6ZmFsc2UsIml3ZiI6dHJ1ZSwidXAiOnRydWUsInIiOiJodHRwczovL3JvYmxveGljb25tYWtlcnRvb2wucGFnZXMuZGV2LyIsInR6IjoyLCJpZHVjIjowLCJhciI6W119fQ.EWddl_KytH9TX6C8B9Sl0GKSnm7Atveqtkq50ymnSFg; expires=Fri, 17 Apr 2026 03:59:22 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 1\r\nHost: realizationnewestfangs.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: c9ded566954ed287b8b19d7ddf5c1a05\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4338,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T16:42:47.069256Z","times_seen":17782290,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"adxpy.pages.dev/adx-mainstream.json","fqdn":"adxpy.pages.dev","domain":"adxpy.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://robloxiconmakertool.pages.dev/","date":"2026-04-17T03:58:17.327Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adxpy.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 00:44:54 GMT","end":"Sat, 04 Jul 2026 01:43:34 GMT"},"fingerprint":{"sha1":"B9:0E:27:18:36:32:2C:B8:F2:E5:2F:50:96:88:4F:CF:54:4C:10:3C","sha256":"ED:9F:40:13:F5:DC:3F:FE:75:A2:AF:61:F4:2D:D7:17:14:E2:C8:D4:C5:19:DB:9E:88:D1:73:59:BF:13:F7:D1"}}},"request":{"raw":"GET /adx-mainstream.json HTTP/1.1\r\nHost: adxpy.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://robloxiconmakertool.pages.dev/\r\nOrigin: https://robloxiconmakertool.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 03:58:17 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I2OtyxNh9AfOxEIE%2BrOu5YeD8hXdII5rd7q8GprD2Ycmq5REmfqPCLAsgNLINJ%2FBQE5%2Bp2QARljffeHORdewqC26PzE74E47EwHKyJf%2BK%2BjZOgN2mCBD7569EHxRx%2F%2Bh3%2FE%3D\"}]}\r\netag: W/\"7b49849f40013f93e7f062a5ea9f812c\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ed882ae9a76120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1453,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"6ffbb69834723feb9c7113271b1c2ea2","sha1":"8bfa604b64d94fad6bbeaf5c580175e4001d4dc5","sha256":"46498f749be8fd2b102eb3563d490c7890b94ed1d0b5b133e2cc3c444ed048c2","sha512":"7b15f328c00533c83fa7c65fff45e5fff27b012955d49affd579a7c7eb14a66839822b50b7947d609d53e08419128bef2773fcb5bc6f95b77731662acf7cb001","ssdeep":"","tlshash":"f9319e999f1cf29410b24ad23c33e0bef598be063908dc9551dc9c6ac2a43e04d57666","first_seen":"2026-01-30T08:57:52.033645Z","last_seen":"2026-08-05T18:54:41.283035Z","times_seen":294,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":51,"dns":29,"connect":2,"send":0,"wait":14,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"realizationnewestfangs.com/watch.1296020506974.js?key=52f212bca95373aed7ead32398143db7\u0026kw=%5B%221%22%2C%22new%22%2C%22message%22%5D\u0026refer=https%3A%2F%2Frobloxiconmakertool.pages.dev%2F\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=5746ce6d-0dda-41b2-a1aa-d90c0f8022e5%3A2%3A1\u0026shu=7e076c5755f77254645fe94d1dea154d734028bf39e23c3845ec3d6f397070d23e37f439599b09500a53c200b484424fc5f8e3415a5b316e2c61899c4f4c7446d2e803d0626c76154fbd1934157d9568b4e666e9bfeb20d68d331e\u0026pst=1776398362\u0026rmtc=t\u0026shv=2\u0026sht=HhaCvYjleSdwi4TINROJtYvmfR0aqIHRqcKEANWmpwg\u0026fstu=019d9996-fdb7-7907-9f3f-24ea2c029dd0\u0026st1=b43b22fb07cb981c6f52a076a139deee\u0026ps1=1776398302","fqdn":"realizationnewestfangs.com","domain":"realizationnewestfangs.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://robloxiconmakertool.pages.dev/","date":"2026-04-17T03:58:22.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"realizationnewestfangs.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 23:39:43 GMT","end":"Wed, 27 May 2026 23:39:42 GMT"},"fingerprint":{"sha1":"2F:D0:7E:69:4A:D0:06:61:89:AF:78:09:0A:5A:F1:7B:F9:4A:B7:96","sha256":"24:55:49:F2:2C:E7:D7:3D:E6:6E:54:6C:64:30:D7:3C:F6:39:2F:A0:A7:A2:AA:25:93:8D:6B:C2:15:40:66:C2"}}},"request":{"raw":"GET /watch.1296020506974.js?key=52f212bca95373aed7ead32398143db7\u0026kw=%5B%221%22%2C%22new%22%2C%22message%22%5D\u0026refer=https%3A%2F%2Frobloxiconmakertool.pages.dev%2F\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=5746ce6d-0dda-41b2-a1aa-d90c0f8022e5%3A2%3A1\u0026shu=7e076c5755f77254645fe94d1dea154d734028bf39e23c3845ec3d6f397070d23e37f439599b09500a53c200b484424fc5f8e3415a5b316e2c61899c4f4c7446d2e803d0626c76154fbd1934157d9568b4e666e9bfeb20d68d331e\u0026pst=1776398362\u0026rmtc=t\u0026shv=2\u0026sht=HhaCvYjleSdwi4TINROJtYvmfR0aqIHRqcKEANWmpwg\u0026fstu=019d9996-fdb7-7907-9f3f-24ea2c029dd0\u0026st1=b43b22fb07cb981c6f52a076a139deee\u0026ps1=1776398302 HTTP/1.1\r\nHost: realizationnewestfangs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://robloxiconmakertool.pages.dev\r\nReferer: https://robloxiconmakertool.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=5746ce6d-0dda-41b2-a1aa-d90c0f8022e5:2:1; ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.EWddl_KytH9TX6C8B9Sl0GKSnm7Atveqtkq50ymnSFg\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Fri, 17 Apr 2026 03:58:22 GMT\r\nContent-Type: text/html\r\nContent-Length: 3059\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\naccess-control-allow-origin: https://robloxiconmakertool.pages.dev\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\nset-cookie: uid_id2=5746ce6d-0dda-41b2-a1aa-d90c0f8022e5:2:1; expires=Fri, 24 Apr 2026 03:58:22 GMT; path=/; secure; SameSite=None\npdhtkv=true; expires=Sat, 18 Apr 2026 03:58:22 GMT; path=/; secure; SameSite=None\nuncs=1; expires=Sat, 18 Apr 2026 03:58:22 GMT; path=/; secure; SameSite=None\npdhtkv32=true; expires=Sat, 18 Apr 2026 03:58:22 GMT; path=/; secure; SameSite=None\nuncs32=1; expires=Sat, 18 Apr 2026 03:58:22 GMT; path=/; secure; SameSite=None\nu_pl26582436=1; expires=Sat, 18 Apr 2026 03:58:22 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 9\r\nHost: realizationnewestfangs.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: d6e6e88bd4a63033438025fdd108f005\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4338,"size_decoded":0,"mime_type":"text/html","magic":"JavaScript source, ASCII text, with very long lines (3462)","md5":"d6e9466503cec883ce2adb7d650adb4a","sha1":"7b4ba1679f83abdffed9074afc85bf714ce64235","sha256":"3a57051b2c6e30f316afa2587852aabb640db9a6c5f963dc5e1611f455ed1e71","sha512":"518e0b26e73d197535e8f91f7a2a049dac733309725c9621260ba7e848e68352e025c447c5c56e21d418ce085064f3712361af8e52dbf143b529adeb1b2682de","ssdeep":"96:QPozZ1BC1Rr5yGwbaWZk/tNspKaO5kb+r8Mb2H1ZDSV3VCfMEDaH:QQzZ7Kry1kFN4KzkbI8A2VVSV3VCkCaH","tlshash":"d4912ab7cda091b41929b4ba793ae58a7924d10e3d11dd42fc4ca6949f306720eb4cd8","first_seen":"2026-04-17T03:58:43.326914Z","last_seen":"2026-04-17T03:58:43.326914Z","times_seen":1,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":116,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"protrafficinspector.com/stats","fqdn":"protrafficinspector.com","domain":"protrafficinspector.com","tld":"com"},"ip":{"addr":"63.182.85.33","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://robloxiconmakertool.pages.dev/","date":"2026-04-17T03:58:17.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"statistics.it.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 14 Apr 2026 00:00:00 GMT","end":"Wed, 28 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:66:77:D7:9E:99:80:D4:C4:22:4B:79:2F:16:2B:49:2C:08:07:99","sha256":"54:26:39:E0:45:11:B3:20:EE:6C:3E:B3:C0:57:5D:F2:28:8C:E0:E1:C4:F0:BD:56:E7:8C:91:6B:40:CC:0E:0D"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: protrafficinspector.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://robloxiconmakertool.pages.dev/\r\nOrigin: https://robloxiconmakertool.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 03:58:18 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\nserver: fasthttp\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\naccess-control-allow-origin: https://robloxiconmakertool.pages.dev\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nset-cookie: uid_id2=5746ce6d-0dda-41b2-a1aa-d90c0f8022e5:2:1; expires=Mon, 14 Apr 2036 03:58:18 GMT; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"4e1f8dc4f14d71adaec58ab738925d61","sha1":"f8b79057ebac9588dd69d172e34484e88107add0","sha256":"0e1253ba09aea5b287bdfaa20816580daabf37255cdbe95621d30a04d53e6b73","sha512":"06c3c531156fb187eeead35bd0e76f6f959c1c6663185a150dc6b35e50cd1c01cb2c64c5140cf929dca2ad8b0f84e429f3c47c98aa5b862d3796a6f2bfbef6a0","ssdeep":"","tlshash":"9390040550141d11c35715cf41cccdcc3701013550544d403577cc05d131d43c150010","first_seen":"2026-04-17T03:58:43.327679Z","last_seen":"2026-04-17T03:58:43.327679Z","times_seen":1,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":115,"dns":19,"connect":21,"send":0,"wait":22,"receive":0,"ssl":67},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sourshaped.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.nightdestruct.com%2Fsb%2Finterstitial%2Fother%2Fadzilla%2Fflip_icon_fullpage%2F1%2Fjs%2Fscript.js\u0026l=397\u0026fd=547","fqdn":"sourshaped.com","domain":"sourshaped.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://robloxiconmakertool.pages.dev/","date":"2026-04-17T03:58:19.820Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sourshaped.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 00:01:03 GMT","end":"Thu, 28 May 2026 00:01:02 GMT"},"fingerprint":{"sha1":"F1:AF:5D:36:35:F4:F3:93:55:9A:8D:70:8F:C7:F5:6B:E2:26:FB:8E","sha256":"D3:58:1D:7D:AD:70:61:0C:FF:96:A1:79:6D:1D:A0:CF:58:59:D3:71:56:63:92:64:9D:FF:B5:46:E7:65:17:11"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.nightdestruct.com%2Fsb%2Finterstitial%2Fother%2Fadzilla%2Fflip_icon_fullpage%2F1%2Fjs%2Fscript.js\u0026l=397\u0026fd=547 HTTP/1.1\r\nHost: sourshaped.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://robloxiconmakertool.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=5746ce6d-0dda-41b2-a1aa-d90c0f8022e5:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl26582471=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Fri, 17 Apr 2026 03:58:20 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: Device-Stock-UA, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-PlatformUser-Agent, User-Agent, X-Device-User-Agent, X-OperaMini-Phone-UA, X-UCBrowser-Device-UA\r\nHost: sourshaped.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T16:42:47.069256Z","times_seen":17782290,"resource_available":true,"data":null}},"time_used":552,"timings":{"blocked":262,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":192},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sourshaped.com/impr.gif?sid=H4sIAAAAAAAC_1RSvW8jxRue9aX6_XRCfHYgF1dwEnZm1mt7lyuQTnwUQAJc0BUIofnYTQavd_Z2dm3HVY6DlCh0QLV-7CQIRQf8BSCHLhIS21nighAVHRLS1ciJpYi3eD-eZ6R53plnf1KckyYKvnjnbTPWcczX201af_GuTpQZ2vrGVp3RJr1Vv6uTjnerPlqmbPAya3lNerP-Rih7Zt2ljFJGWf11nYWRGa1fsNDpScCaAW16bpO1PYyy_862qMHyGtTgnDwFraon_ow-gJZzJP3vXw1tLzfpS6_1i5jnJsNAHb-f9BIzTNC_aqPMQZQcr07D2IqQL2swyfFqA5jBbLkBhK5I7blHEMnxSibE4PBSqYgRJhDq_xgO5gjjOTSfQ5oH0OpXAkiFjU0k_aMNkw357iXLl2xF1h7_Az2syNqjZ5D0H96O9ah-x8RFrk1iMYpK6NEcenuOtDhFPq5BD08h80-g1S9k_fFbSPqzTRsbaLW40e56HRl2VIMqxRseE26DM84bKqCSRj513bB98UQ6moPbGgrroNAOishBkTroq0Xdo74nGW91okDJLvW456lQ0MB3KeWB7KKQ96HVAWT22VGqdvLeYJZnRTgrEmkn7JtLyA0uwKMl6AYTdlJ8lMZup-27XpdNGNJsDz19ALtTwqprsHlFnHf3MFDloYqta8sjFdtCsFV1V7VVTk2-PeGHJt8OEwKeHSBT5Uyn9-wDyPzadBxZNTXLxEVeTrlQ5VSrnCC7t7hBWaCCIOg0onaoGl3W7jQElawRRZ5oy0Cxloom6Tl5cvk7zsPPr6MXLuo8ctuK-y2fhVQo6gWe4B5lvux2_MDnLqwuoW0N3DoY64q8Gd1Eqivywv5fEPwUNj6F1A548Tz4sATfKTFOTiKdqIGWYVOaPpQpkeZryHedSXxOnp6-t3X7pwuTqP3fEcozsgrIrESalfhY_0ywHd__YTPNdV-P-dI1d3Kehw64rsj_dq9D6oo8--3WhYED8SFkugebnr2y-GoZX8MaApE6iDVBHF7dwUUJG579-PdqFlf9xH6K7cyBiJ2piDNnJuIs_uJSptWLetQKXUmp3-2wlh-FrOUpGbV9L1AdTlutELmt9B_f_fZvAAAA__-zvNlCPgQAAA==","fqdn":"sourshaped.com","domain":"sourshaped.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://robloxiconmakertool.pages.dev/","date":"2026-04-17T03:58:22.093Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sourshaped.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 00:01:03 GMT","end":"Thu, 28 May 2026 00:01:02 GMT"},"fingerprint":{"sha1":"F1:AF:5D:36:35:F4:F3:93:55:9A:8D:70:8F:C7:F5:6B:E2:26:FB:8E","sha256":"D3:58:1D:7D:AD:70:61:0C:FF:96:A1:79:6D:1D:A0:CF:58:59:D3:71:56:63:92:64:9D:FF:B5:46:E7:65:17:11"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1RSvW8jxRue9aX6_XRCfHYgF1dwEnZm1mt7lyuQTnwUQAJc0BUIofnYTQavd_Z2dm3HVY6DlCh0QLV-7CQIRQf8BSCHLhIS21nighAVHRLS1ciJpYi3eD-eZ6R53plnf1KckyYKvnjnbTPWcczX201af_GuTpQZ2vrGVp3RJr1Vv6uTjnerPlqmbPAya3lNerP-Rih7Zt2ljFJGWf11nYWRGa1fsNDpScCaAW16bpO1PYyy_862qMHyGtTgnDwFraon_ow-gJZzJP3vXw1tLzfpS6_1i5jnJsNAHb-f9BIzTNC_aqPMQZQcr07D2IqQL2swyfFqA5jBbLkBhK5I7blHEMnxSibE4PBSqYgRJhDq_xgO5gjjOTSfQ5oH0OpXAkiFjU0k_aMNkw357iXLl2xF1h7_Az2syNqjZ5D0H96O9ah-x8RFrk1iMYpK6NEcenuOtDhFPq5BD08h80-g1S9k_fFbSPqzTRsbaLW40e56HRl2VIMqxRseE26DM84bKqCSRj513bB98UQ6moPbGgrroNAOishBkTroq0Xdo74nGW91okDJLvW456lQ0MB3KeWB7KKQ96HVAWT22VGqdvLeYJZnRTgrEmkn7JtLyA0uwKMl6AYTdlJ8lMZup-27XpdNGNJsDz19ALtTwqprsHlFnHf3MFDloYqta8sjFdtCsFV1V7VVTk2-PeGHJt8OEwKeHSBT5Uyn9-wDyPzadBxZNTXLxEVeTrlQ5VSrnCC7t7hBWaCCIOg0onaoGl3W7jQElawRRZ5oy0Cxloom6Tl5cvk7zsPPr6MXLuo8ctuK-y2fhVQo6gWe4B5lvux2_MDnLqwuoW0N3DoY64q8Gd1Eqivywv5fEPwUNj6F1A548Tz4sATfKTFOTiKdqIGWYVOaPpQpkeZryHedSXxOnp6-t3X7pwuTqP3fEcozsgrIrESalfhY_0ywHd__YTPNdV-P-dI1d3Kehw64rsj_dq9D6oo8--3WhYED8SFkugebnr2y-GoZX8MaApE6iDVBHF7dwUUJG579-PdqFlf9xH6K7cyBiJ2piDNnJuIs_uJSptWLetQKXUmp3-2wlh-FrOUpGbV9L1AdTlutELmt9B_f_fZvAAAA__-zvNlCPgQAAA== HTTP/1.1\r\nHost: sourshaped.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://robloxiconmakertool.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=5746ce6d-0dda-41b2-a1aa-d90c0f8022e5:2:1; pdhtkv=true; uncs=2; pdhtkv29=true; uncs29=2; u_pl26582471=1; u_pl28216845=1; slecaf25da8381e0bd0494ba4018c76898a2=[6588127]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Fri, 17 Apr 2026 03:58:22 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: close\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nset-cookie: iprc_a+e2eb64d1aa76fadf119231af611f56eb=686349; expires=Sat, 18 Apr 2026 03:58:22 GMT; path=/; secure; SameSite=None\niprc_a:686349=10; expires=Sat, 18 Apr 2026 03:58:22 GMT; path=/; secure; SameSite=None\niprc_l+dad79f406afbed73e1976c3c7a71db31=6588127; expires=Sat, 18 Apr 2026 03:58:22 GMT; path=/; secure; SameSite=None\niprc_l:6588127=1; expires=Sat, 18 Apr 2026 03:58:22 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 2\r\nHost: sourshaped.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 87e6ca255a72e0bf46f965ea41f493aa\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T16:42:47.069256Z","times_seen":17782290,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sourshaped.com/pixel/sbs?c=1","fqdn":"sourshaped.com","domain":"sourshaped.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://robloxiconmakertool.pages.dev/","date":"2026-04-17T03:58:22.094Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sourshaped.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 00:01:03 GMT","end":"Thu, 28 May 2026 00:01:02 GMT"},"fingerprint":{"sha1":"F1:AF:5D:36:35:F4:F3:93:55:9A:8D:70:8F:C7:F5:6B:E2:26:FB:8E","sha256":"D3:58:1D:7D:AD:70:61:0C:FF:96:A1:79:6D:1D:A0:CF:58:59:D3:71:56:63:92:64:9D:FF:B5:46:E7:65:17:11"}}},"request":{"raw":"GET /pixel/sbs?c=1 HTTP/1.1\r\nHost: sourshaped.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://robloxiconmakertool.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=5746ce6d-0dda-41b2-a1aa-d90c0f8022e5:2:1; pdhtkv=true; uncs=2; pdhtkv29=true; uncs29=2; u_pl26582471=1; u_pl28216845=1; slecaf25da8381e0bd0494ba4018c76898a2=[6588127]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Fri, 17 Apr 2026 03:58:22 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: Device-Stock-UA, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-PlatformUser-Agent, User-Agent, X-Device-User-Agent, X-OperaMini-Phone-UA, X-UCBrowser-Device-UA\r\nHost: sourshaped.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T16:42:47.069256Z","times_seen":17782290,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://robloxiconmakertool.pages.dev/","date":"2026-04-17T03:58:22.104Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://robloxiconmakertool.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 14 Apr 2026 02:23:48 GMT\r\nexpires: Wed, 14 Apr 2027 02:23:48 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 264874\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-08-08T16:41:23.433685Z","times_seen":257265,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.nightdestruct.com/sb/notifications/gambling/default/android-btn/7/img/close.svg","fqdn":"cdn.nightdestruct.com","domain":"nightdestruct.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://robloxiconmakertool.pages.dev/","date":"2026-04-17T03:58:21.198Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nightdestruct.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 16:21:26 GMT","end":"Sun, 28 Jun 2026 16:21:25 GMT"},"fingerprint":{"sha1":"77:BA:39:E3:87:1C:89:74:C5:36:C2:0F:E9:4C:0E:35:C4:92:A6:BA","sha256":"5F:17:E6:F7:42:E9:5F:B9:9E:03:47:36:9F:79:03:3B:E2:C2:66:ED:E9:3D:14:AB:29:B0:52:4A:62:57:C4:91"}}},"request":{"raw":"GET /sb/notifications/gambling/default/android-btn/7/img/close.svg HTTP/1.1\r\nHost: cdn.nightdestruct.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 03:58:21 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:25:07 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nage: 1498189\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mNAZ4HUGQQOgMGaf83%2BUk%2By83Ltc1Cnljb82CExj1CZ4GwO%2F%2Fj1axBLVTWBTRVAhvw4EJm6aw9B18vhDBuMCqeCWRAXSGfre%2ByFh1BWmkIfrVwb04dBkBA3BU7xvReqyGRkxTX7Vxa8%3D\"}]}\r\netag: W/\"65aa8643-4ff\"\r\ncontent-encoding: br\r\ncf-ray: 9ed882c679a4c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1279,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b3011bde2653e373d1150594a8bbd06d","sha1":"e47948cdb4d6ecf6257106805e690e3bf0211317","sha256":"6499ec40e3f2ac55bf1b5c9a2dbbc212adb74114645bccac0373074f98ef8a01","sha512":"068957d81c2ca296e44c3bbfb20bc6572d79b4e4e848cb98c84bb119cb7350633a9c32d250999216e75ce05c99bac9050aa4fc1c77a359cd40f5d8d6ab25dd25","ssdeep":"","tlshash":"ee21dbcc858f223ef324ff618973166067a423f6bb19c5bcb199a8157e1cb910c48e14","first_seen":"2024-05-03T00:07:48Z","last_seen":"2026-08-08T16:51:54.175233Z","times_seen":2357,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://robloxiconmakertool.pages.dev/","date":"2026-04-17T03:58:22.102Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://robloxiconmakertool.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 14 Apr 2026 02:23:48 GMT\r\nexpires: Wed, 14 Apr 2027 02:23:48 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 264874\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-08-08T16:41:23.433685Z","times_seen":257265,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":8,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sourshaped.com/sbar.json?key=c207ec84c2456af201cc563cadc36c46\u0026uuid=5746ce6d-0dda-41b2-a1aa-d90c0f8022e5%3A2%3A1","fqdn":"sourshaped.com","domain":"sourshaped.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://robloxiconmakertool.pages.dev/","date":"2026-04-17T03:58:18.490Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sourshaped.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 00:01:03 GMT","end":"Thu, 28 May 2026 00:01:02 GMT"},"fingerprint":{"sha1":"F1:AF:5D:36:35:F4:F3:93:55:9A:8D:70:8F:C7:F5:6B:E2:26:FB:8E","sha256":"D3:58:1D:7D:AD:70:61:0C:FF:96:A1:79:6D:1D:A0:CF:58:59:D3:71:56:63:92:64:9D:FF:B5:46:E7:65:17:11"}}},"request":{"raw":"GET /sbar.json?key=c207ec84c2456af201cc563cadc36c46\u0026uuid=5746ce6d-0dda-41b2-a1aa-d90c0f8022e5%3A2%3A1 HTTP/1.1\r\nHost: sourshaped.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://robloxiconmakertool.pages.dev/\r\nOrigin: https://robloxiconmakertool.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Fri, 17 Apr 2026 03:58:18 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 2986\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\naccess-control-allow-origin: https://robloxiconmakertool.pages.dev\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\nset-cookie: uid_id2=5746ce6d-0dda-41b2-a1aa-d90c0f8022e5:2:1; expires=Fri, 24 Apr 2026 03:58:18 GMT; path=/; secure; SameSite=None\npdhtkv=true; expires=Sat, 18 Apr 2026 03:58:18 GMT; path=/; secure; SameSite=None\nuncs=1; expires=Sat, 18 Apr 2026 03:58:18 GMT; path=/; secure; SameSite=None\npdhtkv29=true; expires=Sat, 18 Apr 2026 03:58:18 GMT; path=/; secure; SameSite=None\nuncs29=1; expires=Sat, 18 Apr 2026 03:58:18 GMT; path=/; secure; SameSite=None\nu_pl26582471=1; expires=Sat, 18 Apr 2026 03:58:18 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 10\r\nHost: sourshaped.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 62cedd2987e582e47be24651075fe984\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4997,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"JSON text data","md5":"4d7dae88c614e5a5f49afe0593121f8d","sha1":"412f3da9bfb707140a4362575a4131206ecc64f6","sha256":"9c077f1ad7fdabb615252badd66b344cae4e5d8778a2a214af77c59612334668","sha512":"b5fde0ad9908abbbf806f1c95534e685f8280180bb62470c2de93ff1f712aeb33455df0d374603af42f0724f73cca1f735d0da7f2ff622fb9cb2f62e0d8a4448","ssdeep":"96:9g6qVoKuRaZPyHdL3vx2owLX56iKBIRuqVoKuRabh:9IaRnL3s956iKS3aRU","tlshash":"88a15c66ba2642d1d5f6d8af371c1ef60c3a8d0b05b21ab5f93bf35f0622164d03d625","first_seen":"2026-04-17T03:58:43.333239Z","last_seen":"2026-04-17T03:58:43.333239Z","times_seen":1,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"robloxiconmakertool.pages.dev/","fqdn":"robloxiconmakertool.pages.dev","domain":"robloxiconmakertool.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-17T03:58:16.396Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"robloxiconmakertool.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Apr 2026 15:12:00 GMT","end":"Tue, 14 Jul 2026 16:09:18 GMT"},"fingerprint":{"sha1":"38:3E:41:F2:CF:B9:6D:67:1E:17:C6:35:90:A7:00:A3:8A:2D:16:38","sha256":"1F:40:2D:0A:09:BF:F6:61:B1:16:F7:3C:F3:76:1F:FD:78:FB:16:2B:E9:E7:62:A0:58:26:52:CA:89:21:88:42"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: robloxiconmakertool.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 03:58:16 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uzYiim95QK3bIXc5Fg5PLil0rwbhywPnfZ%2FXtGHTZx6dWRtaBaePT2QYPWxSYxmrjcB1bGIszw9Dex8hWEYLaoUa9De7Ye56AII3mrSg%2Fm2Ln4kZRrPRFx%2F8nZ09TclJcu0bFaDiXDul3jxY%2Fs%2BVqA%3D%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ed882a90f9d56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34247,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (17947)","md5":"fee36122d3014bd26af3f291a732be9e","sha1":"c17c59ed3d0c13168d01a6de0b944a6529dc3a0a","sha256":"cbaa19aed03c558bd5791959df8b592f4314f1c1359ab93e933354279988483c","sha512":"5303860070b8717aa1e15923396bdaec51823b91e7c926d2a7bf88738acdab55ee0d185fcce43d8bbc7978aa25a251a7a3e2116956aa314e54383e4d9cac5451","ssdeep":"768:ypeOFItmjSJzAyzLefMJVvEv9LexEzR4lmKSR1N7zdz3Ju/QfWkI:/zAyzIivEv9YQJfp2Qa","tlshash":"85f23abfe3604375174103b9e75af7adeb27402a9a6280a4e54eb12c156f97240378ef","first_seen":"2026-04-17T03:58:43.335161Z","last_seen":"2026-04-17T03:58:43.335161Z","times_seen":1,"resource_available":false,"data":null}},"time_used":362,"timings":{"blocked":90,"dns":43,"connect":1,"send":0,"wait":179,"receive":0,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mtevor.com/hg/pages-dev.js","fqdn":"mtevor.com","domain":"mtevor.com","tld":"com"},"ip":{"addr":"104.21.21.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://robloxiconmakertool.pages.dev/","date":"2026-04-17T03:58:16.836Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mtevor.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 16:10:55 GMT","end":"Thu, 25 Jun 2026 17:08:44 GMT"},"fingerprint":{"sha1":"1D:90:33:9C:3D:4D:50:02:77:2C:32:67:1E:87:33:CC:BD:89:04:6D","sha256":"72:55:21:53:6A:A2:E9:F9:08:9D:13:A1:4F:FC:E2:CD:E9:5C:53:05:B8:B0:36:72:24:AB:FD:DA:7A:F9:7C:C4"}}},"request":{"raw":"GET /hg/pages-dev.js HTTP/1.1\r\nHost: mtevor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://robloxiconmakertool.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 03:58:16 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 14 Apr 2026 16:54:25 GMT\r\nage: 212631\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8KBcIutCKCbpXbbwY9S8cKfV5fT%2BOmqzu3wU04EDTO4E5368iq9E8Hbg%2FD7aSz2vnMyQrbgLnmcwXzcniLU2eecypRhvx7ktPWkULNbLwe4Ywpmici%2FpivNubXg0\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9ed882ab7e3f56a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7180,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"63f71502fe125358818a0825aae4ee16","sha1":"98934593ae75876db5a51fbb4a0d6f990576a2c9","sha256":"5dedd670c8604a3b077f14aac976a0b91441afe370ecc449c9e3df2cf077027b","sha512":"d426126273d42b38f24bd9b8d1780346cc1b6cee83468b887e0eaeecaff19e4a89a0636620ab41efc977e6c2b559e88e55b670f3dfd5b7c7205f848a55e2ebdc","ssdeep":"192:c4Mpsto0LV8YteZbDVj/poiPqpyj4ZYzwIxpsQkhHC:/++j8YteZfJ/ptPqcj46zNxpsQ8C","tlshash":"0ee1d6a9bc8f89390bf2f758d6358519fd3cc0221602505af0c8525b8a69f1e471ffd8","first_seen":"2026-03-10T23:35:48.093011Z","last_seen":"2026-08-05T18:54:41.273315Z","times_seen":134,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":35,"dns":21,"connect":1,"send":0,"wait":10,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adxpy.pages.dev/ads.js","fqdn":"adxpy.pages.dev","domain":"adxpy.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://robloxiconmakertool.pages.dev/","date":"2026-04-17T03:58:17.449Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adxpy.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 00:44:54 GMT","end":"Sat, 04 Jul 2026 01:43:34 GMT"},"fingerprint":{"sha1":"B9:0E:27:18:36:32:2C:B8:F2:E5:2F:50:96:88:4F:CF:54:4C:10:3C","sha256":"ED:9F:40:13:F5:DC:3F:FE:75:A2:AF:61:F4:2D:D7:17:14:E2:C8:D4:C5:19:DB:9E:88:D1:73:59:BF:13:F7:D1"}}},"request":{"raw":"GET /ads.js HTTP/1.1\r\nHost: adxpy.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://robloxiconmakertool.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 03:58:17 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2lRBNKaVFKRS2OA2rhXMJGp6FqjhsmsCjfv8EKWx07VnvdDPv93UTse3TnHSEhe2uoM2BES9%2FWAMr%2B%2F1GD7iI98GVZ9ryp8DnuKGDdK3BhN%2FRf%2B7hA%2FSPJvTnP20BYElwG8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"1bc4a8b41519c6fae69917cf3ea9f576\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ed882af0fa55ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4034,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"28a8ee5b231d6993efeaeb288506fba6","sha1":"185e282511210752916a8d4fcc28642f02e4dc5e","sha256":"81496c62f33c7090e09cd8ea1d016980fc4432fb6ca00450ccea59b926daa7e1","sha512":"b1cf24abc589692314ada61a5a266b280ce2ad1297f5be58b94ececb90e2d718021795ca3998cb142e5937cff260d4aaeaffe5759bb8e67dff20e76bec939658","ssdeep":"","tlshash":"cb81011920a100651eb7236a7be3625dfba43053b81281a4bdccdb185fb9d1091f7fed","first_seen":"2025-10-25T03:17:17.993778Z","last_seen":"2026-08-05T18:54:41.26013Z","times_seen":411,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://robloxiconmakertool.pages.dev/","date":"2026-04-17T03:58:18.012Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"preferencenail.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 01:24:35 GMT","end":"Thu, 28 May 2026 01:24:34 GMT"},"fingerprint":{"sha1":"66:45:2B:BB:A2:6D:D3:A2:B6:16:36:65:94:BA:4A:C6:5E:05:66:09","sha256":"A4:2E:A7:56:DB:44:FF:55:9A:FA:4D:EC:2A:78:CB:C5:02:CD:CF:B2:FB:A7:A7:75:77:EC:01:DB:19:71:C0:77"}}},"request":{"raw":"GET /sfp.js HTTP/1.1\r\nHost: preferencenail.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://robloxiconmakertool.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Fri, 17 Apr 2026 03:58:18 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nContent-Length: 32181\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nVary: Accept-Encoding\r\nHost: preferencenail.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: d5187877773dd31e34e1cd444d0ef3b2\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":85379,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-08-08T16:43:59.770378Z","times_seen":26069,"resource_available":true,"data":null}},"time_used":162,"timings":{"blocked":60,"dns":1,"connect":17,"send":0,"wait":23,"receive":18,"ssl":40},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/watch.1108382949506.js?key=6dd5e3d7ac37d33b5abc87810f6ac7f3\u0026kw=%5B%22roblox%22%2C%22icon%22%2C%22maker%22%2C%22tool%22%5D\u0026refer=https%3A%2F%2Frobloxiconmakertool.pages.dev%2F\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=5746ce6d-0dda-41b2-a1aa-d90c0f8022e5%3A2%3A1\u0026shu=7dd2f772b817add1001299bfee8c7e6e12c2149cb54e3bae16f4a0008989e38d9f897c9a7cbe046e473f7c80761a84d19933a8b32c894b20be7175e8ed9d1c39fa7b2e7a5fe2037df0b07c2bd5f3ff5c033d89f0c0f5389a3b5e44\u0026pst=1776398359\u0026rmtc=t\u0026shv=2\u0026sht=x2O_jFWLBNZu-BtGDMcYU4sjWuiJ0AaDtWCbWHaOL0A\u0026fstu=019d9996-f325-72ad-81ac-cccd21ef84bd\u0026st1=a21b2a50f896a08e60688773e6abe044\u0026ps1=1776398299","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://robloxiconmakertool.pages.dev/","date":"2026-04-17T03:58:20.023Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 22:53:11 GMT","end":"Sun, 24 May 2026 22:53:10 GMT"},"fingerprint":{"sha1":"ED:51:C6:32:50:BE:DC:21:A3:AD:D6:A1:DB:98:F0:08:AD:BF:E7:A2","sha256":"56:84:BB:23:CE:A6:AD:BA:2E:8A:D0:F9:92:4F:17:BF:64:9A:7D:1C:AC:77:10:4A:32:94:E4:15:91:57:B1:A8"}}},"request":{"raw":"GET /watch.1108382949506.js?key=6dd5e3d7ac37d33b5abc87810f6ac7f3\u0026kw=%5B%22roblox%22%2C%22icon%22%2C%22maker%22%2C%22tool%22%5D\u0026refer=https%3A%2F%2Frobloxiconmakertool.pages.dev%2F\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=5746ce6d-0dda-41b2-a1aa-d90c0f8022e5%3A2%3A1\u0026shu=7dd2f772b817add1001299bfee8c7e6e12c2149cb54e3bae16f4a0008989e38d9f897c9a7cbe046e473f7c80761a84d19933a8b32c894b20be7175e8ed9d1c39fa7b2e7a5fe2037df0b07c2bd5f3ff5c033d89f0c0f5389a3b5e44\u0026pst=1776398359\u0026rmtc=t\u0026shv=2\u0026sht=x2O_jFWLBNZu-BtGDMcYU4sjWuiJ0AaDtWCbWHaOL0A\u0026fstu=019d9996-f325-72ad-81ac-cccd21ef84bd\u0026st1=a21b2a50f896a08e60688773e6abe044\u0026ps1=1776398299 HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://robloxiconmakertool.pages.dev\r\nReferer: https://robloxiconmakertool.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=5746ce6d-0dda-41b2-a1aa-d90c0f8022e5:2:1; ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.oPyzIlq6N-BXWz8IsCKcJ-nThKFfcyzTnSVAnUD88tM\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Fri, 17 Apr 2026 03:58:20 GMT\r\nContent-Type: text/html\r\nContent-Length: 3443\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\naccess-control-allow-origin: https://robloxiconmakertool.pages.dev\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\nset-cookie: uid_id2=5746ce6d-0dda-41b2-a1aa-d90c0f8022e5:2:1; expires=Fri, 24 Apr 2026 03:58:20 GMT; path=/; secure; SameSite=None\npdhtkv=true; expires=Sat, 18 Apr 2026 03:58:20 GMT; path=/; secure; SameSite=None\nuncs=1; expires=Sat, 18 Apr 2026 03:58:20 GMT; path=/; secure; SameSite=None\npdhtkv5=true; expires=Sat, 18 Apr 2026 03:58:20 GMT; path=/; secure; SameSite=None\nuncs5=1; expires=Sat, 18 Apr 2026 03:58:20 GMT; path=/; secure; SameSite=None\nu_pl26582443=1; expires=Sat, 18 Apr 2026 03:58:20 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 9\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: c44263349d0d589cd97bc996e160e5bf\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4823,"size_decoded":0,"mime_type":"text/html","magic":"JavaScript source, ASCII text, with very long lines (3947)","md5":"906d1288dfab3e480c7d950c74790128","sha1":"5626e092a22cef2c43b6afb9509d027fa361f17d","sha256":"f2c640bb386e1d6411df61c48817d32f5cce41e782c868df9a40107a500d2931","sha512":"45e273b290d561c442ea9fb56d9314e9c0f658c5aaa72ae61ee558b7067949a8ce5daff1ae6fe3fb8aa26a0a82a6addbb9f0f0f9e36693dda5a78c96162b0d56","ssdeep":"96:y9LPBDyozaBjL9hLghzbAxitqM0gv3k/6DzSSWfT0CCyZn1ZDUCfMEDaH:y9zBDvzaCoxIv3kuvZJyXVUCkCaH","tlshash":"d4a13c347d9811b42cb6e4bd207bb108ea52d06bcd00d501b98ee6171f26bd82dacdec","first_seen":"2026-04-17T03:58:43.340639Z","last_seen":"2026-04-17T03:58:43.340639Z","times_seen":1,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"realizationnewestfangs.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.show-creative1.com%2Fsb%2Fnotifications%2Fgambling%2Fdefault%2Fandroid-btn%2F7%2Findex.html\u0026l=1434\u0026fd=157","fqdn":"realizationnewestfangs.com","domain":"realizationnewestfangs.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://robloxiconmakertool.pages.dev/","date":"2026-04-17T03:58:21.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"realizationnewestfangs.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 23:39:43 GMT","end":"Wed, 27 May 2026 23:39:42 GMT"},"fingerprint":{"sha1":"2F:D0:7E:69:4A:D0:06:61:89:AF:78:09:0A:5A:F1:7B:F9:4A:B7:96","sha256":"24:55:49:F2:2C:E7:D7:3D:E6:6E:54:6C:64:30:D7:3C:F6:39:2F:A0:A7:A2:AA:25:93:8D:6B:C2:15:40:66:C2"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.show-creative1.com%2Fsb%2Fnotifications%2Fgambling%2Fdefault%2Fandroid-btn%2F7%2Findex.html\u0026l=1434\u0026fd=157 HTTP/1.1\r\nHost: realizationnewestfangs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://robloxiconmakertool.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Fri, 17 Apr 2026 03:58:21 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: Device-Stock-UA, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-PlatformUser-Agent, User-Agent, X-Device-User-Agent, X-OperaMini-Phone-UA, X-UCBrowser-Device-UA\r\nHost: realizationnewestfangs.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T16:42:47.069256Z","times_seen":17782290,"resource_available":true,"data":null}},"time_used":686,"timings":{"blocked":291,"dns":1,"connect":95,"send":0,"wait":104,"receive":0,"ssl":192},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sourshaped.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.nightdestruct.com%2Fsb%2Finterstitial%2Fother%2Fadzilla%2Fflip_icon_fullpage%2F1%2Fcss%2Fanimate.css\u0026l=78693\u0026fd=504","fqdn":"sourshaped.com","domain":"sourshaped.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://robloxiconmakertool.pages.dev/","date":"2026-04-17T03:58:19.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sourshaped.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 00:01:03 GMT","end":"Thu, 28 May 2026 00:01:02 GMT"},"fingerprint":{"sha1":"F1:AF:5D:36:35:F4:F3:93:55:9A:8D:70:8F:C7:F5:6B:E2:26:FB:8E","sha256":"D3:58:1D:7D:AD:70:61:0C:FF:96:A1:79:6D:1D:A0:CF:58:59:D3:71:56:63:92:64:9D:FF:B5:46:E7:65:17:11"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.nightdestruct.com%2Fsb%2Finterstitial%2Fother%2Fadzilla%2Fflip_icon_fullpage%2F1%2Fcss%2Fanimate.css\u0026l=78693\u0026fd=504 HTTP/1.1\r\nHost: sourshaped.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://robloxiconmakertool.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=5746ce6d-0dda-41b2-a1aa-d90c0f8022e5:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl26582471=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Fri, 17 Apr 2026 03:58:19 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: Device-Stock-UA, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-PlatformUser-Agent, User-Agent, X-Device-User-Agent, X-OperaMini-Phone-UA, X-UCBrowser-Device-UA\r\nHost: sourshaped.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T16:42:47.069256Z","times_seen":17782290,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sourshaped.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.nightdestruct.com%2Fsb%2Finterstitial%2Fother%2Fadzilla%2Fflip_icon_fullpage%2F1%2Fcss%2Fstyle.css\u0026l=4701\u0026fd=529","fqdn":"sourshaped.com","domain":"sourshaped.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://robloxiconmakertool.pages.dev/","date":"2026-04-17T03:58:19.789Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sourshaped.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 00:01:03 GMT","end":"Thu, 28 May 2026 00:01:02 GMT"},"fingerprint":{"sha1":"F1:AF:5D:36:35:F4:F3:93:55:9A:8D:70:8F:C7:F5:6B:E2:26:FB:8E","sha256":"D3:58:1D:7D:AD:70:61:0C:FF:96:A1:79:6D:1D:A0:CF:58:59:D3:71:56:63:92:64:9D:FF:B5:46:E7:65:17:11"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.nightdestruct.com%2Fsb%2Finterstitial%2Fother%2Fadzilla%2Fflip_icon_fullpage%2F1%2Fcss%2Fstyle.css\u0026l=4701\u0026fd=529 HTTP/1.1\r\nHost: sourshaped.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://robloxiconmakertool.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=5746ce6d-0dda-41b2-a1aa-d90c0f8022e5:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl26582471=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Fri, 17 Apr 2026 03:58:19 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: Device-Stock-UA, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-PlatformUser-Agent, User-Agent, X-Device-User-Agent, X-OperaMini-Phone-UA, X-UCBrowser-Device-UA\r\nHost: sourshaped.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T16:42:47.069256Z","times_seen":17782290,"resource_available":true,"data":null}},"time_used":169,"timings":{"blocked":73,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.nightdestruct.com/sb/notifications/gambling/default/android-btn/7/img/message.png","fqdn":"cdn.nightdestruct.com","domain":"nightdestruct.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://robloxiconmakertool.pages.dev/","date":"2026-04-17T03:58:21.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nightdestruct.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 16:21:26 GMT","end":"Sun, 28 Jun 2026 16:21:25 GMT"},"fingerprint":{"sha1":"77:BA:39:E3:87:1C:89:74:C5:36:C2:0F:E9:4C:0E:35:C4:92:A6:BA","sha256":"5F:17:E6:F7:42:E9:5F:B9:9E:03:47:36:9F:79:03:3B:E2:C2:66:ED:E9:3D:14:AB:29:B0:52:4A:62:57:C4:91"}}},"request":{"raw":"GET /sb/notifications/gambling/default/android-btn/7/img/message.png HTTP/1.1\r\nHost: cdn.nightdestruct.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 03:58:21 GMT\r\ncontent-type: image/png\r\ncontent-length: 33866\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:25:07 GMT\r\npriority: u=4,i=?0\r\netag: \"65aa8643-844a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\naccept-ranges: bytes\r\nage: 1498189\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S7HzRyx8nYYfvVcMwCA6csjXdC00Hvv%2FPZgeebUX0oEq3q6a1RR4XzupoxI8FAnTghqukWhEmr5Hz8yupp7Ns7HlloZccVlqmLm%2BsRBL0JTwA4jpPBImIy9sTM8lJWx7fZ7%2BvTZh5xI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ed882c689abc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33866,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 546 x 546, 8-bit/color RGBA, non-interlaced","md5":"c26a08f1f6940699f9db05b78d14a116","sha1":"9abcb0c3465b7c39df568132dc9c5b9ddf81f607","sha256":"555951aad9decafd0d145fcaba272e29cde76d901a4deb545d522fce318ca8e8","sha512":"1cbc6e5e6393305d8f71ce5602a210af0998d7b4f9edade322f7b304ba4a67312687d76e3d24887bf85a9e95afaa30dbcd5cbd342519935ce1dcbca89062426a","ssdeep":"768:ldt26em8CpRZ6O+O+gMdjt/ZJBNKMALvjdNb+8sr7:ldYQHUxOqz/XaNL3aD","tlshash":"06e2e16f0c6c1f0b7820261b7cb561173e3a7a21db50fc549cdd19269ca9cfd1e165a2","first_seen":"2025-11-22T17:41:44.057373Z","last_seen":"2026-08-08T13:41:18.892573Z","times_seen":1138,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"immigrationacre.com/52f212bca95373aed7ead32398143db7/invoke.js","fqdn":"immigrationacre.com","domain":"immigrationacre.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://robloxiconmakertool.pages.dev/","date":"2026-04-17T03:58:22.466Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"immigrationacre.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 22:44:59 GMT","end":"Sat, 20 Jun 2026 22:44:58 GMT"},"fingerprint":{"sha1":"C5:C0:F1:09:DF:66:79:21:CE:6B:25:C3:DC:5A:3B:4E:6C:24:00:FD","sha256":"14:5E:A4:DE:46:F2:FF:8F:7D:14:D8:7C:E6:33:BC:41:57:AD:BF:24:AC:C4:3C:0F:A7:EE:34:BE:D3:48:56:5B"}}},"request":{"raw":"GET /52f212bca95373aed7ead32398143db7/invoke.js HTTP/1.1\r\nHost: immigrationacre.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://robloxiconmakertool.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Fri, 17 Apr 2026 03:58:22 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 20372\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 2\r\nHost: immigrationacre.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 9f936425cd2daeca6a426a08fdda0494\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":51275,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (51275), with no line terminators","md5":"5fc30fad9a0e55f2f3a985977868891a","sha1":"802e6ee61fd4527afeeb264102d17a556f449fcc","sha256":"dc776a23fedaab09d6200a1466b24d963dfcd17560a03658530d06e0b37b40fd","sha512":"c13a3921ab8a3c37327c3e09a196a907c7be24cfc815b798e7ba421b19233b4b703d15efcf8aa7b0ca84cd9d78e1bf6b3036ed0422f8a91214d66cddb2b6843c","ssdeep":"768:xILsjP3R5MaFvQ00ME9ZnANn7aw++nxKDpOI6sxt4U2CNFQb+qUIghR:x/MaFvQOOsKpN6+2hbRw3","tlshash":"cb33c88c7fe1f0d416567c73323fa0abf11a1c12958cd48cd906e4ae6ae8795e937b18","first_seen":"2026-04-17T03:55:43.132018Z","last_seen":"2026-04-17T10:33:25.998832Z","times_seen":3,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":99,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"immigrationacre.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"immigrationacre.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:300,400,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://robloxiconmakertool.pages.dev/","date":"2026-04-17T03:58:21.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:54 GMT","end":"Mon, 22 Jun 2026 08:36:53 GMT"},"fingerprint":{"sha1":"89:9D:A0:A4:A4:3B:62:A3:D0:B3:63:4B:5B:C3:1D:9B:09:43:3C:91","sha256":"DB:10:40:08:19:EF:D7:9C:5F:11:BC:78:DC:9F:81:F3:9E:A7:30:2F:1F:06:C8:C4:A4:DD:BC:C3:27:6F:2A:AA"}}},"request":{"raw":"GET /css?family=Roboto:300,400,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 17 Apr 2026 03:58:21 GMT\r\ndate: Fri, 17 Apr 2026 03:58:21 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16755,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"1936a90eef3ebd4c6b40eb59d72e164d","sha1":"4c698f8dc97e2e6186d46215e209aca1b1194a5d","sha256":"412d98c2f4410a048131a7d9362fb38456ce2ff67cd4731ea411708a7996a021","sha512":"07ad2431175e5566ae435738d94d4da3e96e4856a1fe1d5917c52474cab28808cd940fec0e8f75eb2f3d573e6fe8497fc12636ef4738d1b67e9144725192b580","ssdeep":"384:p9f59g9P9r9yU9/qY4+949Y9p9fM919W969yh9/qY4X9N9t949fd9k9D939yQ9/O:pDS99YURRuWDyjooYhREHPWP2ZZYQRVs","tlshash":"48721091041704009b834ce223cebf35fe1f52117142d0b5abfd9b6b9ddbca6526939d","first_seen":"2026-02-19T22:28:01.752187Z","last_seen":"2026-08-08T16:51:54.174685Z","times_seen":10439,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"immigrationacre.com/c2/07/ec/c207ec84c2456af201cc563cadc36c46.js","fqdn":"immigrationacre.com","domain":"immigrationacre.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://robloxiconmakertool.pages.dev/","date":"2026-04-17T03:58:17.473Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"immigrationacre.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 22:44:59 GMT","end":"Sat, 20 Jun 2026 22:44:58 GMT"},"fingerprint":{"sha1":"C5:C0:F1:09:DF:66:79:21:CE:6B:25:C3:DC:5A:3B:4E:6C:24:00:FD","sha256":"14:5E:A4:DE:46:F2:FF:8F:7D:14:D8:7C:E6:33:BC:41:57:AD:BF:24:AC:C4:3C:0F:A7:EE:34:BE:D3:48:56:5B"}}},"request":{"raw":"GET /c2/07/ec/c207ec84c2456af201cc563cadc36c46.js HTTP/1.1\r\nHost: immigrationacre.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://robloxiconmakertool.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Fri, 17 Apr 2026 03:58:17 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 34690\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 7\r\nHost: immigrationacre.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 30bb4f54349a620559f4cbd330bdd55c\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":91759,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"390f61f750f14734f4fcf15f732aa585","sha1":"951ff8ad04ef75f5dd33d1ffbb821803c0daaa25","sha256":"19d4b88b1c36010470ba8aac961da084ab9db784c397bab5464f42054380bcb2","sha512":"8139f338b3e929ae562c6c373704df99e679db6d3c97b2f287a1dfef0e96dba89e05848ce003e9ea61a15df6027b455b358e8cd89db4e701aeab63ff7a7c7eff","ssdeep":"1536:1sgv0NC4Y5Tll1apjTHlxn0WuXvon8USxNKo4hRl+GdLALCEf7x:agvA25lIpZxn0WuXvon8pCTLw7x","tlshash":"e493e8887fb272ed439a307b362fb006f22a9d512498f4f4d586b4e52e7876da437704","first_seen":"2026-03-31T19:28:00.680699Z","last_seen":"2026-04-17T04:00:19.732644Z","times_seen":7,"resource_available":true,"data":null}},"time_used":790,"timings":{"blocked":294,"dns":1,"connect":95,"send":0,"wait":105,"receive":96,"ssl":195},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"immigrationacre.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"immigrationacre.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"robloxiconmakertool.pages.dev/assets/css/stylesheet.a482bf00fa5c046040ef7973ad5fdf5657890cacb596c93f1382f664ca542074.css","fqdn":"robloxiconmakertool.pages.dev","domain":"robloxiconmakertool.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://robloxiconmakertool.pages.dev/","date":"2026-04-17T03:58:16.839Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"robloxiconmakertool.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Apr 2026 15:12:00 GMT","end":"Tue, 14 Jul 2026 16:09:18 GMT"},"fingerprint":{"sha1":"38:3E:41:F2:CF:B9:6D:67:1E:17:C6:35:90:A7:00:A3:8A:2D:16:38","sha256":"1F:40:2D:0A:09:BF:F6:61:B1:16:F7:3C:F3:76:1F:FD:78:FB:16:2B:E9:E7:62:A0:58:26:52:CA:89:21:88:42"}}},"request":{"raw":"GET /assets/css/stylesheet.a482bf00fa5c046040ef7973ad5fdf5657890cacb596c93f1382f664ca542074.css HTTP/1.1\r\nHost: robloxiconmakertool.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://robloxiconmakertool.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 03:58:16 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FO%2BVhncblzkuuSz299T9ciF7TitV4STDBG6P8uQR%2FDF7hmQZsWcfQ7gUSjgZspgMQnwaQ3qkCtnoSQgpKU%2FCW78j60UGTwoTRLt4S1Sr%2BEk9oGHYkshuY8w5HsoJ4kgOOFd2lhygj1QoxLvU6Ai7UQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"53e05fd175c1632d3f6826cdf1c8006d\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ed882ab3c1c0b65-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17668,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (17469), with CRLF line terminators","md5":"189fdafdfba1b07922505146944ac218","sha1":"e593713c0ec16032efdad79024e07b769cf999d7","sha256":"a482bf00fa5c046040ef7973ad5fdf5657890cacb596c93f1382f664ca542074","sha512":"78e5dfa85fe07a10600f8e1f0060db0b5aff6482bcd25850bdae13ff5579b248d15119e5fa200b836f5f0abc2fe0b9cb5bff43ee26bca7e40a9d96494bdf6a82","ssdeep":"192:pgLxsLb4X3I1fG2pmOTq7zSeyf5rTZFsGR57Vpvj82p7Y97F+QNBARfWiVWo6yyT:KyLb4eEbzSDBP9R5lKmRD723FRdZ","tlshash":"7e82757e9220263cfb33cc026689755d3614f963da5247f9fa99a3a885c2ff71171a0c","first_seen":"2025-10-29T04:02:15.901982Z","last_seen":"2026-08-05T18:54:41.266536Z","times_seen":407,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.show-creative1.com/sb/interstitial/other/adzilla/flip_icon_fullpage/1/index.html","fqdn":"cdn.show-creative1.com","domain":"show-creative1.com","tld":"com"},"ip":{"addr":"172.67.208.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://robloxiconmakertool.pages.dev/","date":"2026-04-17T03:58:18.609Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"show-creative1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Apr 2026 01:42:43 GMT","end":"Thu, 02 Jul 2026 02:41:28 GMT"},"fingerprint":{"sha1":"E5:DE:57:6E:2B:86:96:31:27:7E:74:48:4B:76:32:AA:86:9A:48:06","sha256":"9A:F1:DF:30:DB:8E:88:16:44:D7:78:1A:9B:36:AB:CD:11:72:FF:FC:89:21:83:88:2D:A7:D7:CF:92:F1:49:CB"}}},"request":{"raw":"GET /sb/interstitial/other/adzilla/flip_icon_fullpage/1/index.html HTTP/1.1\r\nHost: cdn.show-creative1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://robloxiconmakertool.pages.dev/\r\nOrigin: https://robloxiconmakertool.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 03:58:19 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Sep 2025 11:19:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jSwIPEqPLFXyJCLAha%2FBUlVqow4EW0avPPxA61CeHq%2Fxy9Fq2BLYYaeQLcD%2BS2xF%2BmbeFyMZZJrzoBvpWGOhXjvGcUDVskYzFHgDL3Ca%2BLEwduyqnxW7YAN4eXRL4PG9qPv3wwM4yNAW\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9ed882b69dad5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1429,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a2a26c957661ec2d5873ab45d95a8851","sha1":"58a5fac69474a4acc8ebb5ded4ee2eb7b7ae54d2","sha256":"fccbf95426814fcc96e71f2bb185dcd9b89788d50c54c1f408d8003ef47f4324","sha512":"7b18f0690a29924da580a91d7fbb3aef55c7b49e990aee58e95c2c5d143a1fe4655a0438eff419f2ea1cd91c00e3416c6eacbe8abc0fa0ab32ebec1f4ad6d262","ssdeep":"","tlshash":"142199526de8d9622092a592be302f379cd1e8474c4a541072bd06508f97aa9c91724b","first_seen":"2025-10-01T05:21:04.633465Z","last_seen":"2026-05-09T19:28:08.673786Z","times_seen":144,"resource_available":false,"data":null}},"time_used":673,"timings":{"blocked":49,"dns":34,"connect":1,"send":0,"wait":575,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"cdn.show-creative1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"cdn.show-creative1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.nightdestruct.com/sb/interstitial/other/adzilla/flip_icon_fullpage/1/css/style.css","fqdn":"cdn.nightdestruct.com","domain":"nightdestruct.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://robloxiconmakertool.pages.dev/","date":"2026-04-17T03:58:19.263Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nightdestruct.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 16:21:26 GMT","end":"Sun, 28 Jun 2026 16:21:25 GMT"},"fingerprint":{"sha1":"77:BA:39:E3:87:1C:89:74:C5:36:C2:0F:E9:4C:0E:35:C4:92:A6:BA","sha256":"5F:17:E6:F7:42:E9:5F:B9:9E:03:47:36:9F:79:03:3B:E2:C2:66:ED:E9:3D:14:AB:29:B0:52:4A:62:57:C4:91"}}},"request":{"raw":"GET /sb/interstitial/other/adzilla/flip_icon_fullpage/1/css/style.css HTTP/1.1\r\nHost: cdn.nightdestruct.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://robloxiconmakertool.pages.dev/\r\nOrigin: https://robloxiconmakertool.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 03:58:19 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Sep 2025 11:19:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"68c00d50-125d\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5Hra1%2BlW2xGIF%2BaQRl4dQFMRNvFhvMUsk4pLqi6iBqIw00ZT5lWKUMVxrtDyy2qB%2BM%2BvX9VXIoGk1dUgRdsI1oM9y0joRhEUeT4NFij1IIvDBEWB36wBV1zIoVt1SWYTW4oNcCRrKGQ%3D\"}]}\r\ncf-ray: 9ed882baafa2569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4701,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"d71ea95ff1c111d11a4ca2728f066cdc","sha1":"c05803274b14419bc51f540dcb012ba2222ed5a2","sha256":"f776b149cb614a7084d097398af9f8af0e85e638bd3f2265bff72f71b5af3590","sha512":"5abd7597409d80481282d6524467208961cef85ab501a3b25362eddafca33545b7ae73c649b5cc9bfcbcbddef94ddf8a07f06647537b9385bf87238954db0ca8","ssdeep":"96:iTMXkGx0DsOX7Uj6nUHYrH6B1GqddvXVSWnO9vAs3xt4fA4n:IMXDbj64Yc15dJFRO9vAs3LuA4n","tlshash":"a2a120967a630845b517e4aa3f332746631844079a0bd9797fc4738c8fc61dd85e3b8e","first_seen":"2025-09-13T17:52:06.425999Z","last_seen":"2026-05-09T19:28:08.71599Z","times_seen":235,"resource_available":false,"data":null}},"time_used":564,"timings":{"blocked":42,"dns":20,"connect":3,"send":0,"wait":479,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"immigrationacre.com/6dd5e3d7ac37d33b5abc87810f6ac7f3/invoke.js","fqdn":"immigrationacre.com","domain":"immigrationacre.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://robloxiconmakertool.pages.dev/","date":"2026-04-17T03:58:19.466Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"immigrationacre.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 22:44:59 GMT","end":"Sat, 20 Jun 2026 22:44:58 GMT"},"fingerprint":{"sha1":"C5:C0:F1:09:DF:66:79:21:CE:6B:25:C3:DC:5A:3B:4E:6C:24:00:FD","sha256":"14:5E:A4:DE:46:F2:FF:8F:7D:14:D8:7C:E6:33:BC:41:57:AD:BF:24:AC:C4:3C:0F:A7:EE:34:BE:D3:48:56:5B"}}},"request":{"raw":"GET /6dd5e3d7ac37d33b5abc87810f6ac7f3/invoke.js HTTP/1.1\r\nHost: immigrationacre.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://robloxiconmakertool.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Fri, 17 Apr 2026 03:58:19 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 20447\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 5\r\nHost: immigrationacre.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 92d9b1e99caf648c6eeb0abff297305a\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":51318,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (51318), with no line terminators","md5":"14dafb8121c076ea292ce7f92e9fefd0","sha1":"93366e279ad49fe3f8aff2847ac2a704f4458b32","sha256":"730bbcd80e98b992cff3ae980b22c23f223b0b63b55e1071c459f1cc0da80af0","sha512":"2d258103ab284febdd012bd23aa31f78e913f5cd6354b324122d0c4fe123ee9332c414be4a77de5b30d1776339df2eee370698a034617d9b97cb7888e0da14c1","ssdeep":"768:xIL7jP3R5MaFvQ00hE9ZnANn7aw++nxKDpOI6sxt4F2CNFQb+NLIFZR:xcMaFvQ5OsKpN6L2hbEAv","tlshash":"3c33d88c7fe1f0e416567c73323f60abf11a1c12958cd48cd906e4ae6ae8795e937b18","first_seen":"2026-04-13T09:59:29.651716Z","last_seen":"2026-04-17T10:33:25.94723Z","times_seen":5,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":102,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"immigrationacre.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"immigrationacre.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sourshaped.com/ren.gif?sid=H4sIAAAAAAAC_1RSy2_j1Be-znT1-2mEeO5AWcyCkUh67diOzSyQRjwWQAtM0SwQQvdht5c4vh5fO0mz6jDQJSo7YOV8SVuEqgH-AlDKrhIS3kViihArdkhIs0ZpI1WcxXl9R7rfuefbn5TnpI2SLd55W49VkrB1r02bL95VqdRD09zYatq0TW8176rUd281R0uXD162O26b3my-EYmeXneoTalN7ebrKo9iPVq_QKGyk9Buh7TtOm3bczHK_1ubsgHDGpCDc_IUlKyf-DP-AErMkfa_fzUyvUJnL73WLxNW6BwDefx-2kv1MEX_Ko1zC3F6vJqGNjUhXzag0-PVBtCD2XIDcFWTxnOPwNPjFU3wweElU54gSsHl_zEczBElcyg2h9APoOSvBBASG5tI-0cbOh-y3UuULdGarD3-B2pYk7VHzyDtP7ydqFHzjk7KQunUYBRXUKM51PYcWXmKYtyAGp5CFJ9AyV_I-uO3kPZnmybRUHJxw-u6voh82aJSspZrc6fFbMZaMqSCxgF1nMi7-CIVz8FMA6WxUCoLZWyhzCz05aLp0sAVNuv4cShFl7rMdWXEaRg4lLJQdFGK-1DyACL_7KhMhXHCiX1SfpQlju8Fjtu1J_ZRJneK3mBW5GU0W85M7G8uW0540USW76GnDmB2Khh5DaaoifXuHgayOpSJcUx1JBNTcnsVnVXsVFNdbE_YoS62o5SA5QfIZTVT2T3zAKK4Nh3HRk710jFeVFPGZTVVsiDI7y1uUDuUYRj6rdiLZKtre36LU2G34tjlngil3ZHxJDsnTy6vYz38_Dp60aLJYseTLOgEdkS5pG7ocuZSOxBdPwgD5sCoCso0wIyFsarJm_FNZKomL-z_Bc5OYZJTCGWBlc-DDSuwnQrj9CRWqRwoEbWF7kPqClmxhmLXmiTn5Onpe1u3f7oQidz_HZE4IyuDyCtkeYWP1c8E28n9HzazQvXVmC1Vc6dgRWSBqZr8b_c6hKrJs99uXQg45B9CZHsw2dkri6-W9jWMJuCZhUQRJNHVG4xXMNHZj3-van6VT8yn2M4t8MSa8iS3ZjzJky8uaRq1aHoO7_hB4EexL-OO7DgdGXo0Cl0W-m7oeihMrf747rd_AwAA___00RcwPgQAAA==","fqdn":"sourshaped.com","domain":"sourshaped.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://robloxiconmakertool.pages.dev/","date":"2026-04-17T03:58:20.922Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sourshaped.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 00:01:03 GMT","end":"Thu, 28 May 2026 00:01:02 GMT"},"fingerprint":{"sha1":"F1:AF:5D:36:35:F4:F3:93:55:9A:8D:70:8F:C7:F5:6B:E2:26:FB:8E","sha256":"D3:58:1D:7D:AD:70:61:0C:FF:96:A1:79:6D:1D:A0:CF:58:59:D3:71:56:63:92:64:9D:FF:B5:46:E7:65:17:11"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_1RSy2_j1Be-znT1-2mEeO5AWcyCkUh67diOzSyQRjwWQAtM0SwQQvdht5c4vh5fO0mz6jDQJSo7YOV8SVuEqgH-AlDKrhIS3kViihArdkhIs0ZpI1WcxXl9R7rfuefbn5TnpI2SLd55W49VkrB1r02bL95VqdRD09zYatq0TW8176rUd281R0uXD162O26b3my-EYmeXneoTalN7ebrKo9iPVq_QKGyk9Buh7TtOm3bczHK_1ubsgHDGpCDc_IUlKyf-DP-AErMkfa_fzUyvUJnL73WLxNW6BwDefx-2kv1MEX_Ko1zC3F6vJqGNjUhXzag0-PVBtCD2XIDcFWTxnOPwNPjFU3wweElU54gSsHl_zEczBElcyg2h9APoOSvBBASG5tI-0cbOh-y3UuULdGarD3-B2pYk7VHzyDtP7ydqFHzjk7KQunUYBRXUKM51PYcWXmKYtyAGp5CFJ9AyV_I-uO3kPZnmybRUHJxw-u6voh82aJSspZrc6fFbMZaMqSCxgF1nMi7-CIVz8FMA6WxUCoLZWyhzCz05aLp0sAVNuv4cShFl7rMdWXEaRg4lLJQdFGK-1DyACL_7KhMhXHCiX1SfpQlju8Fjtu1J_ZRJneK3mBW5GU0W85M7G8uW0540USW76GnDmB2Khh5DaaoifXuHgayOpSJcUx1JBNTcnsVnVXsVFNdbE_YoS62o5SA5QfIZTVT2T3zAKK4Nh3HRk710jFeVFPGZTVVsiDI7y1uUDuUYRj6rdiLZKtre36LU2G34tjlngil3ZHxJDsnTy6vYz38_Dp60aLJYseTLOgEdkS5pG7ocuZSOxBdPwgD5sCoCso0wIyFsarJm_FNZKomL-z_Bc5OYZJTCGWBlc-DDSuwnQrj9CRWqRwoEbWF7kPqClmxhmLXmiTn5Onpe1u3f7oQidz_HZE4IyuDyCtkeYWP1c8E28n9HzazQvXVmC1Vc6dgRWSBqZr8b_c6hKrJs99uXQg45B9CZHsw2dkri6-W9jWMJuCZhUQRJNHVG4xXMNHZj3-van6VT8yn2M4t8MSa8iS3ZjzJky8uaRq1aHoO7_hB4EexL-OO7DgdGXo0Cl0W-m7oeihMrf747rd_AwAA___00RcwPgQAAA== HTTP/1.1\r\nHost: sourshaped.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://robloxiconmakertool.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=5746ce6d-0dda-41b2-a1aa-d90c0f8022e5:2:1; pdhtkv=true; uncs=2; pdhtkv29=true; uncs29=2; u_pl26582471=1; u_pl28216845=1; slecaf25da8381e0bd0494ba4018c76898a2=[6588127]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Fri, 17 Apr 2026 03:58:20 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 2\r\nHost: sourshaped.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 854c14cef317ae6f996afda2584341a4\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T16:42:47.069256Z","times_seen":17782290,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.nightdestruct.com/sb/notifications/gambling/default/android-btn/7/css/animate.css","fqdn":"cdn.nightdestruct.com","domain":"nightdestruct.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://robloxiconmakertool.pages.dev/","date":"2026-04-17T03:58:21.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nightdestruct.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 16:21:26 GMT","end":"Sun, 28 Jun 2026 16:21:25 GMT"},"fingerprint":{"sha1":"77:BA:39:E3:87:1C:89:74:C5:36:C2:0F:E9:4C:0E:35:C4:92:A6:BA","sha256":"5F:17:E6:F7:42:E9:5F:B9:9E:03:47:36:9F:79:03:3B:E2:C2:66:ED:E9:3D:14:AB:29:B0:52:4A:62:57:C4:91"}}},"request":{"raw":"GET /sb/notifications/gambling/default/android-btn/7/css/animate.css HTTP/1.1\r\nHost: cdn.nightdestruct.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://robloxiconmakertool.pages.dev/\r\nOrigin: https://robloxiconmakertool.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 03:58:21 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:25:07 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"65aa8643-13365\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qo%2Fnq8lyOxVXWtmUTY7BZE6HdxKzg%2FKYcqLWAuCQE1GV2kvm6h9wpRXS0KCF3EJNRMX0zG3oTqgRAaCbpibDOaDACoNZX51IliOxR%2FtQfn%2BErLbuLkJBcYfwGcHBKbPJYI9p4euloSQ%3D\"}]}\r\ncf-ray: 9ed882c5dc43569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78693,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"49a38187f94418e173e4bcc50c96dc4b","sha1":"b64e899d0c6bbb13e6f63e191b77b3eb5e5a6293","sha256":"92db03d6a48c8756e15b1b2ffb9d1ea5aae5e2d9a706b630f93f73e3debbb3b0","sha512":"eb5652647a8a1546e89e86f78b689391363cd3f925adebeeaa185bb02dd54eacba602da9c6a8897834d864e7670f44c2e4f31ca22b94faba72e946d9a645932d","ssdeep":"384:+vuAuF81dghu3uFlZlX/m/Gu7uNUtrL4VrbZJgBhLYNKwZiMUL6Vpaj7F:+vuAu21dghu3uhu7uNKwZiMUL6Vpaj7F","tlshash":"19731bad399115845263861d83df9e68273ce5731826acef73c2488bcf8bf9867c9147","first_seen":"2024-05-02T15:55:45Z","last_seen":"2026-04-17T10:06:14.675972Z","times_seen":400,"resource_available":false,"data":null}},"time_used":444,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":444,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://robloxiconmakertool.pages.dev/","date":"2026-04-17T03:58:17.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"preferencenail.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 01:24:35 GMT","end":"Thu, 28 May 2026 01:24:34 GMT"},"fingerprint":{"sha1":"66:45:2B:BB:A2:6D:D3:A2:B6:16:36:65:94:BA:4A:C6:5E:05:66:09","sha256":"A4:2E:A7:56:DB:44:FF:55:9A:FA:4D:EC:2A:78:CB:C5:02:CD:CF:B2:FB:A7:A7:75:77:EC:01:DB:19:71:C0:77"}}},"request":{"raw":"GET /sfp.js HTTP/1.1\r\nHost: preferencenail.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://robloxiconmakertool.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Fri, 17 Apr 2026 03:58:18 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nContent-Length: 32181\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nVary: Accept-Encoding\r\nHost: preferencenail.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 0c113079f2206490e1a0df1bb4678064\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":85379,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-08-08T16:43:59.770378Z","times_seen":26069,"resource_available":true,"data":null}},"time_used":162,"timings":{"blocked":57,"dns":1,"connect":17,"send":0,"wait":22,"receive":19,"ssl":41},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sourshaped.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.show-creative1.com%2Fsb%2Finterstitial%2Fother%2Fadzilla%2Fflip_icon_fullpage%2F1%2Findex.html\u0026l=1429\u0026fd=632","fqdn":"sourshaped.com","domain":"sourshaped.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://robloxiconmakertool.pages.dev/","date":"2026-04-17T03:58:19.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sourshaped.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 00:01:03 GMT","end":"Thu, 28 May 2026 00:01:02 GMT"},"fingerprint":{"sha1":"F1:AF:5D:36:35:F4:F3:93:55:9A:8D:70:8F:C7:F5:6B:E2:26:FB:8E","sha256":"D3:58:1D:7D:AD:70:61:0C:FF:96:A1:79:6D:1D:A0:CF:58:59:D3:71:56:63:92:64:9D:FF:B5:46:E7:65:17:11"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.show-creative1.com%2Fsb%2Finterstitial%2Fother%2Fadzilla%2Fflip_icon_fullpage%2F1%2Findex.html\u0026l=1429\u0026fd=632 HTTP/1.1\r\nHost: sourshaped.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://robloxiconmakertool.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=5746ce6d-0dda-41b2-a1aa-d90c0f8022e5:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl26582471=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Fri, 17 Apr 2026 03:58:19 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: Device-Stock-UA, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-PlatformUser-Agent, User-Agent, X-Device-User-Agent, X-OperaMini-Phone-UA, X-UCBrowser-Device-UA\r\nHost: sourshaped.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T16:42:47.069256Z","times_seen":17782290,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.nightdestruct.com/sb/interstitial/other/adzilla/flip_icon_fullpage/1/img/close.svg","fqdn":"cdn.nightdestruct.com","domain":"nightdestruct.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://robloxiconmakertool.pages.dev/","date":"2026-04-17T03:58:19.377Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nightdestruct.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 16:21:26 GMT","end":"Sun, 28 Jun 2026 16:21:25 GMT"},"fingerprint":{"sha1":"77:BA:39:E3:87:1C:89:74:C5:36:C2:0F:E9:4C:0E:35:C4:92:A6:BA","sha256":"5F:17:E6:F7:42:E9:5F:B9:9E:03:47:36:9F:79:03:3B:E2:C2:66:ED:E9:3D:14:AB:29:B0:52:4A:62:57:C4:91"}}},"request":{"raw":"GET /sb/interstitial/other/adzilla/flip_icon_fullpage/1/img/close.svg HTTP/1.1\r\nHost: cdn.nightdestruct.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 03:58:19 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Sep 2025 11:19:52 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=foBe%2FQo7Lbl5xM2dNd5%2BkQHu4g1SMHbNb%2BUOCPy3nUECk9YgH3YHx2nfG%2BG5XTDL7TLoillxuW5qWgyCGVNiFzxrwWJm0CdRjWCCrtkc%2F3V5QbYZItSpy3YEQx6Dy4AS62qzGh0oBx0%3D\"}]}\r\nage: 1503053\r\ncf-cache-status: HIT\r\netag: W/\"68c00d58-4ff\"\r\ncontent-encoding: br\r\ncf-ray: 9ed882bb1fe3569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1279,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"369850b9873659adf0951d845f57dba1","sha1":"a64257186daa33b6b318943a457b6cf8d80b26b6","sha256":"9630c142a8c074cc1809ebf4109538cf29cc0baeb6c27726191f1cf5376e2e21","sha512":"6441b40e85c86e21362c7061a6b9610f52a5c801b274b246711546ad45c68c3e7f2f242f1621b90967eaeebf52709545d06283c2015d6b9ad7f6f7d37fb14a88","ssdeep":"","tlshash":"6821d8dc958f223ef324ff6189b316606ba423f6bb18c5bcb199a8157e1cb910c48e14","first_seen":"2023-04-07T22:39:47Z","last_seen":"2026-08-08T16:37:17.254206Z","times_seen":10290,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.nightdestruct.com/sb/interstitial/other/adzilla/flip_icon_fullpage/1/css/animate.css","fqdn":"cdn.nightdestruct.com","domain":"nightdestruct.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://robloxiconmakertool.pages.dev/","date":"2026-04-17T03:58:19.262Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nightdestruct.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 16:21:26 GMT","end":"Sun, 28 Jun 2026 16:21:25 GMT"},"fingerprint":{"sha1":"77:BA:39:E3:87:1C:89:74:C5:36:C2:0F:E9:4C:0E:35:C4:92:A6:BA","sha256":"5F:17:E6:F7:42:E9:5F:B9:9E:03:47:36:9F:79:03:3B:E2:C2:66:ED:E9:3D:14:AB:29:B0:52:4A:62:57:C4:91"}}},"request":{"raw":"GET /sb/interstitial/other/adzilla/flip_icon_fullpage/1/css/animate.css HTTP/1.1\r\nHost: cdn.nightdestruct.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://robloxiconmakertool.pages.dev/\r\nOrigin: https://robloxiconmakertool.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 03:58:19 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Sep 2025 11:19:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"68c00d50-13365\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wjNYJcCWhWlvH9NaQMNbwZtLpoOouU%2FgEyZtISDrubmWSiU0IuD0ntUFptejDxmithO6wYOBWVUs3OTAiYBBHpz81wUpJC%2Fwq%2F%2BzaQO%2BLrwmi5v23KP47K5GWzTKffMcXpvsfbjaZjE%3D\"}]}\r\ncf-ray: 9ed882baaf9b569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78693,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"5982c5377696d20476871062646b253f","sha1":"8bf2c93fa9ccc908f7df0fb7abb911bbac3e4242","sha256":"4e23a6449e6ef4614f0107cecf5c9eda75d2041c7c71f4a55d45f2a7e75450f4","sha512":"92592dac2a817293e8ec1d94bf99df639626a90d524420b01a12210398927c0650cc26fa8e730300096b29961563aa02efb707478c6d51ac8616bb1bde5a0cb2","ssdeep":"384:jvuAuF81dghu3uFlZlX/m/Gu7uNUtrL4VrbZJgBhLYNKwZiMUL6Vpaj7F:jvuAu21dghu3uhu7uNKwZiMUL6Vpaj7F","tlshash":"1d731bad399115845263861d83df9e68273ce5731826acef73c2488bcf8bf9867c9147","first_seen":"2024-02-12T20:28:38Z","last_seen":"2026-08-08T16:33:01.584749Z","times_seen":9845,"resource_available":false,"data":null}},"time_used":538,"timings":{"blocked":40,"dns":21,"connect":1,"send":0,"wait":457,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:300,400,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://robloxiconmakertool.pages.dev/","date":"2026-04-17T03:58:19.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:54 GMT","end":"Mon, 22 Jun 2026 08:36:53 GMT"},"fingerprint":{"sha1":"89:9D:A0:A4:A4:3B:62:A3:D0:B3:63:4B:5B:C3:1D:9B:09:43:3C:91","sha256":"DB:10:40:08:19:EF:D7:9C:5F:11:BC:78:DC:9F:81:F3:9E:A7:30:2F:1F:06:C8:C4:A4:DD:BC:C3:27:6F:2A:AA"}}},"request":{"raw":"GET /css?family=Roboto:300,400,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 17 Apr 2026 03:58:19 GMT\r\ndate: Fri, 17 Apr 2026 03:58:19 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16755,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"1936a90eef3ebd4c6b40eb59d72e164d","sha1":"4c698f8dc97e2e6186d46215e209aca1b1194a5d","sha256":"412d98c2f4410a048131a7d9362fb38456ce2ff67cd4731ea411708a7996a021","sha512":"07ad2431175e5566ae435738d94d4da3e96e4856a1fe1d5917c52474cab28808cd940fec0e8f75eb2f3d573e6fe8497fc12636ef4738d1b67e9144725192b580","ssdeep":"384:p9f59g9P9r9yU9/qY4+949Y9p9fM919W969yh9/qY4X9N9t949fd9k9D939yQ9/O:pDS99YURRuWDyjooYhREHPWP2ZZYQRVs","tlshash":"48721091041704009b834ce223cebf35fe1f52117142d0b5abfd9b6b9ddbca6526939d","first_seen":"2026-02-19T22:28:01.752187Z","last_seen":"2026-08-08T16:51:54.174685Z","times_seen":10439,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":107,"dns":0,"connect":28,"send":0,"wait":48,"receive":0,"ssl":77},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.show-creative1.com/sb/notifications/gambling/default/android-btn/7/index.html","fqdn":"cdn.show-creative1.com","domain":"show-creative1.com","tld":"com"},"ip":{"addr":"172.67.208.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://robloxiconmakertool.pages.dev/","date":"2026-04-17T03:58:20.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"show-creative1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Apr 2026 01:42:43 GMT","end":"Thu, 02 Jul 2026 02:41:28 GMT"},"fingerprint":{"sha1":"E5:DE:57:6E:2B:86:96:31:27:7E:74:48:4B:76:32:AA:86:9A:48:06","sha256":"9A:F1:DF:30:DB:8E:88:16:44:D7:78:1A:9B:36:AB:CD:11:72:FF:FC:89:21:83:88:2D:A7:D7:CF:92:F1:49:CB"}}},"request":{"raw":"GET /sb/notifications/gambling/default/android-btn/7/index.html HTTP/1.1\r\nHost: cdn.show-creative1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://robloxiconmakertool.pages.dev/\r\nOrigin: https://robloxiconmakertool.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 03:58:21 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:25:07 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5riNaOnZKNcmqCdsG2zmn7lj2RDb%2Bt7isvGhANHJ83bmc4M0aWpxGhbW0WtWpNKouy4vvgWlH61qkRPUuxE5zUwEFrOCjBLXj3Jmwp%2BbZmwbAGS0htF8zmuyr90wGZv%2FAOuJpbxi52z5\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9ed882c4cc0a5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1434,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"08db0f0d6a8bd174ed0affe34620365a","sha1":"14d79a1dcdebef03d4d1d1cfa3ec63d04776cc0f","sha256":"36c322c3c05693c82187ef16ea857827e117706e5c96c78e177336d1117cb983","sha512":"9428379c397081a2b2b308806965412a667a70b5bd308d2a0f11e9b13c5fdb852e3701353b96eb320e2e1bc6db710d4b81ad81f622e48eb989652150a7e99da3","ssdeep":"","tlshash":"19219c9629ec853310cf4191ba717f96ac93e64b882a78107bfd8858cba4d89cb53507","first_seen":"2026-03-17T02:05:18.64636Z","last_seen":"2026-04-17T11:03:56.019429Z","times_seen":20,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"cdn.show-creative1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"cdn.show-creative1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/impr.gif?sid=H4sIAAAAAAAC_1RTO4wctR_2XPL_NxQRBCjRFimIlN2zxzNjm3QRhALyEAlKQeXnxdzszGQ8s7vZKg-U-iiQaJDmfnuXK4h4NNRojwokpCzVSslJiIqGBik12stKBy5-D3-W9fs-f3602x6hAbRyef1KOfV5LjfTAe69fcsXphyH3tWbPYIH-GLvli-y5GJvsgr16B1CkwE-33vf6u1yM8YEY4JJ77KvrSsnm8co-OqJIAOBB0k8IGkCk_q_fWgjCDICMzpCr4E3izN_uE_A6zkUw-_etWG7KasL7w3bXDZlDSNz8HGxXZTjAoYnpasjcMXB-jSUYYHQlxtQFgdrBlCO9lYMQPkF2njzOajiYD0mqNH-y0lVDrYAZV6B8WgONj8EL-egy4fgzVMEoA1cvQbF8PHVsh7Luy9RuUIX6PSLv8GPF-j089ehGH5zKfeT3o0ybxtfFgEmrgM_mYPfmkPVHkIz3QA_PgTdPABvfkWbLz6EYrh3LeQleLM8l7Ik0zYzfWyM7CdExX1JpOwbgTV2HMexTY8l8m4OMmxAGyJofQSti6CtIhiaZS_BPNFE0swJoxlOZJIYq7DgMcZSaAatvg_e7ICu70FV34Nt__kCRW9cgXB7-QMzJnaMxYoTJo1ZPW0shHLWcs1sZkmsY5IIrdLEUiUtyVwiMcZccGEpN8JxwbSQTCuLk8wmjDqmOWYZkTwxRAhKJVc01lwkKsbKMsJSy60RhmgqnGQqtkymzsaYMuOwwkzHyqSOOpdqTKnhwq30SCkXkqrUJgkEE0FoEIxMt2_yEIfusclDq8g6x-tMu1nZbO3K_bLZsgUCWe9Abbo9X90JD0E3p2ZTF8ysXAWpmm4mlelm3jQI6jvLc5gII4TI-o5K3mfE4r7KsOhLyrHBLk7ijO9WR-jVlTmiL776GrbtspcZk1pqmNSUGUpVKpXmjBPsMqmZoxB8Bz5sgAwRTP0CfeDOQ-UX6K1Hf4KShxDyQ9D-FMj2fyDHM4oxyNuzOMUwLZ44X5iR13agyyGYsoOqOQ3N3Wg3P0JnZx_dvPTjsVOvXz4LVv-C1gt03UFVd_Cp_wnBVn7_-2tV44d-KlfWvdHIxv4fpH9qfwbtF-jMX8-O_9CF3x6Aru5BqE5uCiUCVSHIPYLcnuxL1UH4V69O6t3wGWzVEag8mqm8Rnsqr_MdCH7Zc9TGGmPOMkK5s4QmRruUJ8JkElNqoQkL__u3z_4JAAD__7_Z38-8BAAA","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://robloxiconmakertool.pages.dev/","date":"2026-04-17T03:58:20.159Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 22:53:11 GMT","end":"Sun, 24 May 2026 22:53:10 GMT"},"fingerprint":{"sha1":"ED:51:C6:32:50:BE:DC:21:A3:AD:D6:A1:DB:98:F0:08:AD:BF:E7:A2","sha256":"56:84:BB:23:CE:A6:AD:BA:2E:8A:D0:F9:92:4F:17:BF:64:9A:7D:1C:AC:77:10:4A:32:94:E4:15:91:57:B1:A8"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1RTO4wctR_2XPL_NxQRBCjRFimIlN2zxzNjm3QRhALyEAlKQeXnxdzszGQ8s7vZKg-U-iiQaJDmfnuXK4h4NNRojwokpCzVSslJiIqGBik12stKBy5-D3-W9fs-f3602x6hAbRyef1KOfV5LjfTAe69fcsXphyH3tWbPYIH-GLvli-y5GJvsgr16B1CkwE-33vf6u1yM8YEY4JJ77KvrSsnm8co-OqJIAOBB0k8IGkCk_q_fWgjCDICMzpCr4E3izN_uE_A6zkUw-_etWG7KasL7w3bXDZlDSNz8HGxXZTjAoYnpasjcMXB-jSUYYHQlxtQFgdrBlCO9lYMQPkF2njzOajiYD0mqNH-y0lVDrYAZV6B8WgONj8EL-egy4fgzVMEoA1cvQbF8PHVsh7Luy9RuUIX6PSLv8GPF-j089ehGH5zKfeT3o0ybxtfFgEmrgM_mYPfmkPVHkIz3QA_PgTdPABvfkWbLz6EYrh3LeQleLM8l7Ik0zYzfWyM7CdExX1JpOwbgTV2HMexTY8l8m4OMmxAGyJofQSti6CtIhiaZS_BPNFE0swJoxlOZJIYq7DgMcZSaAatvg_e7ICu70FV34Nt__kCRW9cgXB7-QMzJnaMxYoTJo1ZPW0shHLWcs1sZkmsY5IIrdLEUiUtyVwiMcZccGEpN8JxwbSQTCuLk8wmjDqmOWYZkTwxRAhKJVc01lwkKsbKMsJSy60RhmgqnGQqtkymzsaYMuOwwkzHyqSOOpdqTKnhwq30SCkXkqrUJgkEE0FoEIxMt2_yEIfusclDq8g6x-tMu1nZbO3K_bLZsgUCWe9Abbo9X90JD0E3p2ZTF8ysXAWpmm4mlelm3jQI6jvLc5gII4TI-o5K3mfE4r7KsOhLyrHBLk7ijO9WR-jVlTmiL776GrbtspcZk1pqmNSUGUpVKpXmjBPsMqmZoxB8Bz5sgAwRTP0CfeDOQ-UX6K1Hf4KShxDyQ9D-FMj2fyDHM4oxyNuzOMUwLZ44X5iR13agyyGYsoOqOQ3N3Wg3P0JnZx_dvPTjsVOvXz4LVv-C1gt03UFVd_Cp_wnBVn7_-2tV44d-KlfWvdHIxv4fpH9qfwbtF-jMX8-O_9CF3x6Aru5BqE5uCiUCVSHIPYLcnuxL1UH4V69O6t3wGWzVEag8mqm8Rnsqr_MdCH7Zc9TGGmPOMkK5s4QmRruUJ8JkElNqoQkL__u3z_4JAAD__7_Z38-8BAAA HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=5746ce6d-0dda-41b2-a1aa-d90c0f8022e5:2:1; ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.oPyzIlq6N-BXWz8IsCKcJ-nThKFfcyzTnSVAnUD88tM; pdhtkv=true; uncs=1; pdhtkv5=true; uncs5=1; u_pl26582443=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Fri, 17 Apr 2026 03:58:20 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 3\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 642c094b860abf5b57ae2f59e19f531b\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T16:42:47.069256Z","times_seen":17782290,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://robloxiconmakertool.pages.dev/","date":"2026-04-17T03:58:20.305Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://robloxiconmakertool.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 14 Apr 2026 02:23:48 GMT\r\nexpires: Wed, 14 Apr 2027 02:23:48 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 264872\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-08-08T16:41:23.433685Z","times_seen":257265,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":57,"dns":0,"connect":20,"send":0,"wait":11,"receive":5,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}