{"report_id":"d44fb450-8574-48d2-8aee-0f4a8d61aa19","version":6,"status":"done","tags":[],"date":"2025-07-19T05:20:36Z","url":{"schema":"https","addr":"forbidden.my/product.php?name=Bitcoin+Drainer+Script+2025","fqdn":"forbidden.my","domain":"forbidden.my","tld":"my"},"ip":{"addr":"104.21.20.194","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"forbidden.my/product.php?name=Bitcoin+Drainer+Script+2025","fqdn":"forbidden.my","domain":"forbidden.my","tld":"my"},"title":"FORBIDDEN - Premium Stealer \u0026 Drainer"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-08-23T05:20:36Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":8877,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-07-16T15:13:54.244508Z","alert_count":0,"request_count":1,"received_data":5478,"sent_data":473,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":235,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2025-07-16T15:19:45.607582Z","alert_count":0,"request_count":3,"received_data":378778,"sent_data":1563,"comment":"","tags":null,"fingerprints":null},{"fqdn":"forbidden.my","ip":{"addr":"172.67.194.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-07-19T05:20:37.192609Z","last_seen":"2025-07-19T05:20:37.192609Z","alert_count":0,"request_count":13,"received_data":330388,"sent_data":6954,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-07-16T15:09:49.565957Z","alert_count":0,"request_count":3,"received_data":26134,"sent_data":1604,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":null},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"forbidden.my/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"forbidden.my","domain":"forbidden.my","tld":"my"},"ip":{"addr":"172.67.194.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-08T22:40:45.362101Z","times_seen":416694,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.0/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://forbidden.my/product.php?name=Bitcoin+Drainer+Script+2025","date":"2025-07-19T05:20:15.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 May 2025 14:38:44 GMT","end":"Wed, 20 Aug 2025 15:38:38 GMT"},"fingerprint":{"sha1":"4B:06:E9:E2:47:47:F5:3C:33:58:F8:2A:95:70:22:5E:23:19:03:77","sha256":"92:B0:F4:51:5C:E9:3A:03:19:F4:50:36:49:FA:A1:01:1D:F0:A1:91:F7:A3:53:E6:19:AA:C4:FA:3D:C4:31:6E"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.5.0/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://forbidden.my/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 19 Jul 2025 05:20:15 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 18859\r\ncf-ray: 9617c4bec8e7569c-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"656632a7-49ab\"\r\nlast-modified: Tue, 28 Nov 2023 18:34:15 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 12554\r\nexpires: Thu, 09 Jul 2026 05:20:15 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=HP2xrWyJKCyrFm5k8rokeNXJaIZpjIVMTH7tj6wvnXoJIfkophOroyQ3rWwb2gN7HnFB3rnNAEAvHj8%2B0DOWy3D4WL8QCVP1LxXGxcK7JC5s6q0GeVMrZDb5WmJcDRUAmRSt1m5I\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":102526,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (52276)","md5":"c43cd173eeeba2f72aa6b431d06b8c07","sha1":"427a692f7f39eabb3d5b8510aee2743025daf813","sha256":"c880eb3d25c765d399840aa204fec22b3230310991089f14781f09a35ed80b8a","sha512":"02f6f6422b83104bc1e1b64961d7edda63635528417ed2dd3c6f0527457b8ab4cb43c528d2a70fc61e0f96aec6e6d1a6d2b53ed523e1568b6d78ba41111c1393","ssdeep":"1536:vwMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPG9ZpgmLCq:P709gMGFiyPG9ZimLCq","tlshash":"4fa3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2024-01-04T18:36:36Z","last_seen":"2026-08-08T22:20:43.633495Z","times_seen":14468,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":3,"dns":1,"connect":1,"send":0,"wait":22,"receive":1,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"forbidden.my/assets/icons/crypto/ltc.svg","fqdn":"forbidden.my","domain":"forbidden.my","tld":"my"},"ip":{"addr":"172.67.194.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://forbidden.my/product.php?name=Bitcoin+Drainer+Script+2025","date":"2025-07-19T05:20:15.184Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"forbidden.my","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Jun 2025 08:57:01 GMT","end":"Tue, 02 Sep 2025 09:54:42 GMT"},"fingerprint":{"sha1":"C2:BE:8D:7B:32:EB:8C:AA:C7:3D:F4:8F:F9:CB:BF:9C:5A:5B:95:C4","sha256":"93:AC:48:8E:FB:97:0E:EF:94:1B:B5:5A:E7:A3:B1:49:BA:02:4B:CC:DC:CE:55:09:C2:BC:9A:0B:0A:24:5A:1F"}}},"request":{"raw":"GET /assets/icons/crypto/ltc.svg HTTP/1.1\r\nHost: forbidden.my\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://forbidden.my/product.php?name=Bitcoin+Drainer+Script+2025\r\nCookie: PHPSESSID=m1qntq89mc8t8mq98hbs9gkb72\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 19 Jul 2025 05:20:15 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 11 Jul 2025 22:07:47 GMT\r\nvary: accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EX%2F48PTdM1EV9qcEg6pjCZ5mYrVStReWDiAIh18Sm3gckC9In8FpfinxHdF7oKwEjR%2FFPd%2FQaxJcWgeHDoZWLIavWDfssSPnDMM%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"68718b33-14b\"\r\ncontent-encoding: br\r\ncf-ray: 9617c4be88ed568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":331,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cdae08509e949c7b6216a744b14f0087","sha1":"fa98336203093e0b00048946f9dfd7d8be578971","sha256":"21b1ffe201826ba5d027f814baab9103938898c0be374d3cc948bd119b55ce66","sha512":"91fb66a90e8b08b16a88d091b8aa02f8ddcbf180b5fcd5a2e84a425a3d42437efd698260e142556e7606052062fb82d00492daf8147c75c33897a3778c786da7","ssdeep":"","tlshash":"5ce07db7a5a8f84c188e4178ee2b7191202f20cc0d6e0decf5e42c15f1475dbf4459d8","first_seen":"2023-05-09T05:08:14Z","last_seen":"2026-07-27T14:50:57.576274Z","times_seen":4077,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.0/webfonts/fa-brands-400.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://forbidden.my/product.php?name=Bitcoin+Drainer+Script+2025","date":"2025-07-19T05:20:15.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 May 2025 14:38:44 GMT","end":"Wed, 20 Aug 2025 15:38:38 GMT"},"fingerprint":{"sha1":"4B:06:E9:E2:47:47:F5:3C:33:58:F8:2A:95:70:22:5E:23:19:03:77","sha256":"92:B0:F4:51:5C:E9:3A:03:19:F4:50:36:49:FA:A1:01:1D:F0:A1:91:F7:A3:53:E6:19:AA:C4:FA:3D:C4:31:6E"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.5.0/webfonts/fa-brands-400.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://forbidden.my\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 19 Jul 2025 05:20:15 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 116672\r\ncf-ray: 9617c4c06c5356a5-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"656632a7-1c7c0\"\r\nlast-modified: Tue, 28 Nov 2023 18:34:15 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1123\r\nexpires: Thu, 09 Jul 2026 05:20:15 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Z7WnaBqtihBoHGJtCipHvhwaNqogpxGvbKxgPLnj4%2F2ECqY8wQBGMzK6Qn7kbdxM7NXBF64r9LbIRIVRberx%2F3hxQNejhp41rXdU4XNJaioEY2C1dyXd4TBFRaqEmd4OFd0Ttgic\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":116672,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 116672, version 773.256","md5":"0474ccd4d3ec29857f1e7f8b9c56df8b","sha1":"3e8f0f46b2949dcc309f65fff1372b9a05e8f480","sha256":"b66b3da5ff7b2db79b6cb5a22c3e762e2bf16958a11987e69eeb1980bbbcdfb0","sha512":"2ab61a54ee830519d0aacba1e12f1ad920aedddea8e682cebe51bec78ecd7bbc403343f8e00b45afe804a954a52eb5dcc70983bb01239c36422f8e6f18e0bb5e","ssdeep":"3072:y+cQdfEX4HdgCsxZhk8minCk+uU254aiRt3kLVzLm/j+G01Z:KQdfjIiib+uUe1EK66G4","tlshash":"0fb313cfd4276bdf0a65cf3fc2034e4f3b586c1254b9bcc540b3617826a6862274aa5c","first_seen":"2024-01-04T18:36:36Z","last_seen":"2026-08-08T10:42:39.092181Z","times_seen":5015,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"forbidden.my/product.php?name=Bitcoin+Drainer+Script+2025","fqdn":"forbidden.my","domain":"forbidden.my","tld":"my"},"ip":{"addr":"172.67.194.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-07-19T05:20:14.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"forbidden.my","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Jun 2025 08:57:01 GMT","end":"Tue, 02 Sep 2025 09:54:42 GMT"},"fingerprint":{"sha1":"C2:BE:8D:7B:32:EB:8C:AA:C7:3D:F4:8F:F9:CB:BF:9C:5A:5B:95:C4","sha256":"93:AC:48:8E:FB:97:0E:EF:94:1B:B5:5A:E7:A3:B1:49:BA:02:4B:CC:DC:CE:55:09:C2:BC:9A:0B:0A:24:5A:1F"}}},"request":{"raw":"GET /product.php?name=Bitcoin+Drainer+Script+2025 HTTP/1.1\r\nHost: forbidden.my\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 19 Jul 2025 05:20:14 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AnQFgoULkw7kWBQi7FjPBdjWpDDSI5GDXuAKRTNowbcARKbaTOLvZUv3xDoaBVcvaFe5z%2FDVuC8l3tSG1smjoh5IQ%2BFN8%2FJIF6s%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nset-cookie: PHPSESSID=m1qntq89mc8t8mq98hbs9gkb72; Path=/\r\ncf-ray: 9617c4ba5ea6568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14422,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 (with BOM) text, with CRLF, LF line terminators","md5":"23a68a5a7ae3125e6c34ecb85ab6f4f3","sha1":"74e11b8cfd324aa9d04986305516990f8549bbe8","sha256":"0ab9df9777acc90f70180c7b26b233f9522be8b5eb6bb1ac2de554cd83028c9d","sha512":"6c01e726cf640677802433364b9f317d896328cbc07455909884e59cc4bb77048b78a84701c053885444e3ed167137ed86dc46149b982cd339f39393b841eb48","ssdeep":"192:sENlr1gVnzD/J0b9RKpHSkiTASWWzQl99Zx4CcZJr714u8IA+n2B7t:nPTbCBieqJr+gA22Nt","tlshash":"d052ea18d6c419872233c5943fb2c786fb554047da060bb93bed629b6ff69588873b8c","first_seen":"2025-07-19T05:20:42.044256Z","last_seen":"2025-07-19T05:20:42.044256Z","times_seen":1,"resource_available":false,"data":null}},"time_used":307,"timings":{"blocked":46,"dns":17,"connect":1,"send":0,"wait":214,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"forbidden.my/assets/icons/crypto/eth.svg","fqdn":"forbidden.my","domain":"forbidden.my","tld":"my"},"ip":{"addr":"172.67.194.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://forbidden.my/product.php?name=Bitcoin+Drainer+Script+2025","date":"2025-07-19T05:20:15.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"forbidden.my","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Jun 2025 08:57:01 GMT","end":"Tue, 02 Sep 2025 09:54:42 GMT"},"fingerprint":{"sha1":"C2:BE:8D:7B:32:EB:8C:AA:C7:3D:F4:8F:F9:CB:BF:9C:5A:5B:95:C4","sha256":"93:AC:48:8E:FB:97:0E:EF:94:1B:B5:5A:E7:A3:B1:49:BA:02:4B:CC:DC:CE:55:09:C2:BC:9A:0B:0A:24:5A:1F"}}},"request":{"raw":"GET /assets/icons/crypto/eth.svg HTTP/1.1\r\nHost: forbidden.my\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://forbidden.my/product.php?name=Bitcoin+Drainer+Script+2025\r\nCookie: PHPSESSID=m1qntq89mc8t8mq98hbs9gkb72\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 19 Jul 2025 05:20:15 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 11 Jul 2025 22:07:38 GMT\r\netag: W/\"68718b2a-20d\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=glAYIP5zzWrXnrTBgGLANsp3uHmlxmH7T3fXO1kz%2B91facYSu6Nv2Vsrd5RXC8a8e54J%2Fztf1BO34c5Y9MsKuYvloQEWqYwTYYU%3D\"}]}\r\ncf-ray: 9617c4be88ea568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":525,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ed79179a3b6bc2c2ee4c54d8ade79b01","sha1":"14b7148647a28eb4f861f8da283a89f0acf1dec8","sha256":"1f94df8533f61806f7b17eaf9cd28678cdba66e1d82a9ca8f9fb38d35a907e9c","sha512":"590a8fde3f1bcac91ccd4dc2cc02f7ba602cc4b15f137c1f3758bcc5072c545167f7dae4c16837bde366561fd08ffdbfe5a087dee8f7e75feaec9ecc77a2fc8b","ssdeep":"","tlshash":"a5f08be95d287450682b1ffce67c98d3306771f40a3d0cf9b1800512e94995b9cd2b40","first_seen":"2023-05-10T14:51:47Z","last_seen":"2026-08-06T12:11:39.883425Z","times_seen":4315,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.0/webfonts/fa-solid-900.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://forbidden.my/product.php?name=Bitcoin+Drainer+Script+2025","date":"2025-07-19T05:20:15.385Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 May 2025 14:38:44 GMT","end":"Wed, 20 Aug 2025 15:38:38 GMT"},"fingerprint":{"sha1":"4B:06:E9:E2:47:47:F5:3C:33:58:F8:2A:95:70:22:5E:23:19:03:77","sha256":"92:B0:F4:51:5C:E9:3A:03:19:F4:50:36:49:FA:A1:01:1D:F0:A1:91:F7:A3:53:E6:19:AA:C4:FA:3D:C4:31:6E"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.5.0/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://forbidden.my\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 19 Jul 2025 05:20:15 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 156532\r\ncf-ray: 9617c4c06c5456a5-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"656632a7-26374\"\r\nlast-modified: Tue, 28 Nov 2023 18:34:15 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 8251\r\nexpires: Thu, 09 Jul 2026 05:20:15 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=CuVVbLgyd0BQ84%2BE7wtUHczP%2BRb%2Fhaz5eu8FuSId177WzjvkS%2BaLg8Q2UquQD5xH6%2BuafdrnwpF0rwTG2aFrjJQFbLsp2%2FZNkHC97o9qE5V5y7O1Oljrh9jfMv9lqX%2F9AHlchDmp\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":156532,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 156532, version 773.256","md5":"d465bccb9edf0873f021f66d4b09d89c","sha1":"214f3c71de28c682602aecd39e9ad2bba15f1b0c","sha256":"f4c5a5b297e623bc159679563a4d1eb16e409ca3b57698fbc00fd2c907dadae0","sha512":"35d7523f48386e89b1cad6a47df65d64415ab9c45e6425bb4ab25ac9510f6d2e9de3d7cad79c2491660e885d7a38d3ffa9e93eb50ae045fbd072deaf114e10b8","ssdeep":"1536:HrPC5zUBeCGcReONEpKZZbwEPvdThY0E2eXOtr9pVhw+J3E6gbzlPAzJ+Zn+PMY6:TC5oNnZbwC9Wie+B9pVSeE6dMZnaBi","tlshash":"00e313b58f11a1c781b12217db1a54f8da785eec5e3f968cc5a07786214dd4f93dcca0","first_seen":"2024-01-04T18:36:36Z","last_seen":"2026-08-08T19:01:47.275372Z","times_seen":10244,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":37,"dns":0,"connect":0,"send":0,"wait":25,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v23/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://forbidden.my/product.php?name=Bitcoin+Drainer+Script+2025","date":"2025-07-19T05:20:15.561Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Jun 2025 08:41:27 GMT","end":"Mon, 15 Sep 2025 08:41:26 GMT"},"fingerprint":{"sha1":"9A:5E:6D:44:D8:FB:03:E5:9A:13:6D:FF:53:DA:1C:8C:EA:3A:A7:AA","sha256":"C3:51:20:DB:42:A3:71:7A:7B:DE:45:2B:1D:8A:57:E1:26:22:CD:26:F6:CF:18:86:7F:48:52:DD:B1:F3:03:8C"}}},"request":{"raw":"GET /s/poppins/v23/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://forbidden.my\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7748\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 16 Jul 2025 20:17:34 GMT\r\nexpires: Thu, 16 Jul 2026 20:17:34 GMT\r\ncache-control: public, max-age=31536000\r\nage: 205361\r\nlast-modified: Wed, 23 Apr 2025 16:07:32 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7748,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7748, version 1.0","md5":"a09f2fccfee35b7247b08a1a266f0328","sha1":"0da2d17e738f46d2a09e6fb7969da451719a9820","sha256":"cd36de204aca2d5fa263a731f7c20009b5e3d754ba1f1e03c33e93a48f3e7446","sha512":"5e3f9a298003b84250ec6801e08ad2a4ff8845d4c3e13ea61bec37da24d26ede13b436257882124cc0c27e9a323ba92e7d23c6ad3f48a7b75535f5ed98813a0e","ssdeep":"96:0g6vAF/FXh6MmoI56TEwosGU/DbVF/QBT1gaHEYT6u/w3hXLbJPAS772+6haAftj:zp6x6TYpoDYBJg8TRkbJPAS/2+CzQa7","tlshash":"f3f19de65d1e5e8980f0102f6f6efce767950d88141dadf9a9e72f884c6ba1b04c90cd","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-08-08T22:35:43.11173Z","times_seen":274159,"resource_available":true,"data":null}},"time_used":328,"timings":{"blocked":155,"dns":1,"connect":10,"send":0,"wait":8,"receive":1,"ssl":145},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"forbidden.my/assets/icons/crypto/sol.svg","fqdn":"forbidden.my","domain":"forbidden.my","tld":"my"},"ip":{"addr":"172.67.194.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://forbidden.my/product.php?name=Bitcoin+Drainer+Script+2025","date":"2025-07-19T05:20:15.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"forbidden.my","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Jun 2025 08:57:01 GMT","end":"Tue, 02 Sep 2025 09:54:42 GMT"},"fingerprint":{"sha1":"C2:BE:8D:7B:32:EB:8C:AA:C7:3D:F4:8F:F9:CB:BF:9C:5A:5B:95:C4","sha256":"93:AC:48:8E:FB:97:0E:EF:94:1B:B5:5A:E7:A3:B1:49:BA:02:4B:CC:DC:CE:55:09:C2:BC:9A:0B:0A:24:5A:1F"}}},"request":{"raw":"GET /assets/icons/crypto/sol.svg HTTP/1.1\r\nHost: forbidden.my\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://forbidden.my/product.php?name=Bitcoin+Drainer+Script+2025\r\nCookie: PHPSESSID=m1qntq89mc8t8mq98hbs9gkb72\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 19 Jul 2025 05:20:15 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 11 Jul 2025 22:08:01 GMT\r\netag: W/\"68718b41-24d\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ONqOQr%2FTM9sjsongyFuP5AdKqp12yPn8TliZwSvIedbAnBS%2BwTjmJG84fmi%2B1iJ493fvjs9o1wtMCZYFzyUeVXw20VzAYcs89Gc%3D\"}]}\r\ncf-ray: 9617c4be98f8568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":589,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8f48b6e8a88f7b0aa4b6598aa7715465","sha1":"93e573e9f1376bf17af2ac11f136c597a5eed82f","sha256":"94e47e7c108a338cc4a79b82673d66cfbadfcf4c934ccb9c2ca8f13e8ea7dbb2","sha512":"0a7981504e74f5fef2b3526fb5be81692c5362e01b17fb49c068a2f2c3744c9cab65562a71d6feb837ac360fe290310e43ae3a83a79ab0e1056f4ec0d6653a89","ssdeep":"","tlshash":"91f046e2a15cf5cee04cdd1a24cfb11238a13047f07be4d0bb892684f88b0c7ba04e64","first_seen":"2024-11-08T20:22:57.120472Z","last_seen":"2026-08-04T02:43:09.043962Z","times_seen":4663,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"forbidden.my/assets/icons/crypto/btc.svg","fqdn":"forbidden.my","domain":"forbidden.my","tld":"my"},"ip":{"addr":"172.67.194.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://forbidden.my/product.php?name=Bitcoin+Drainer+Script+2025","date":"2025-07-19T05:20:15.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"forbidden.my","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Jun 2025 08:57:01 GMT","end":"Tue, 02 Sep 2025 09:54:42 GMT"},"fingerprint":{"sha1":"C2:BE:8D:7B:32:EB:8C:AA:C7:3D:F4:8F:F9:CB:BF:9C:5A:5B:95:C4","sha256":"93:AC:48:8E:FB:97:0E:EF:94:1B:B5:5A:E7:A3:B1:49:BA:02:4B:CC:DC:CE:55:09:C2:BC:9A:0B:0A:24:5A:1F"}}},"request":{"raw":"GET /assets/icons/crypto/btc.svg HTTP/1.1\r\nHost: forbidden.my\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://forbidden.my/product.php?name=Bitcoin+Drainer+Script+2025\r\nCookie: PHPSESSID=m1qntq89mc8t8mq98hbs9gkb72\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 19 Jul 2025 05:20:15 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 11 Jul 2025 22:07:29 GMT\r\netag: W/\"68718b21-3b9\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0wMTcJl6IaSfTRneAV%2FQPGZsNT50HuDrVWZvXc0j9%2FB7Ps3%2Bd%2Fw%2BgqQA%2Fm71w2g%2Fe9Emwm78rRaE4zHbz3CsGYYv8rD5xFnv8gA%3D\"}]}\r\ncf-ray: 9617c4be88e9568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":953,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"edae64fcb50f425e582a9a1429784b70","sha1":"cdcd71434b3e179f57627bda3625ae61240715c3","sha256":"5a8131ecdf855b12cb56080aeeeefea266976529c45b2d58c284a13b7519f4ca","sha512":"8313b5900bbb90d04597b74d7bed7cd1c4cf9c52718a939eb996e531e37b74dc55ba787171eec6cbecbc524bae28cce5376065324dab6b5f8c1ce250ecc5c964","ssdeep":"","tlshash":"511154de16749548699f8d2cff2bbc463012f1bcd52e9ce49aff6d4470c2ae13140914","first_seen":"2023-07-08T18:24:36Z","last_seen":"2026-08-06T12:11:39.913957Z","times_seen":4336,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":186,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"forbidden.my/assets/icons/crypto/usdt.svg","fqdn":"forbidden.my","domain":"forbidden.my","tld":"my"},"ip":{"addr":"172.67.194.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://forbidden.my/product.php?name=Bitcoin+Drainer+Script+2025","date":"2025-07-19T05:20:15.181Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"forbidden.my","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Jun 2025 08:57:01 GMT","end":"Tue, 02 Sep 2025 09:54:42 GMT"},"fingerprint":{"sha1":"C2:BE:8D:7B:32:EB:8C:AA:C7:3D:F4:8F:F9:CB:BF:9C:5A:5B:95:C4","sha256":"93:AC:48:8E:FB:97:0E:EF:94:1B:B5:5A:E7:A3:B1:49:BA:02:4B:CC:DC:CE:55:09:C2:BC:9A:0B:0A:24:5A:1F"}}},"request":{"raw":"GET /assets/icons/crypto/usdt.svg HTTP/1.1\r\nHost: forbidden.my\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://forbidden.my/product.php?name=Bitcoin+Drainer+Script+2025\r\nCookie: PHPSESSID=m1qntq89mc8t8mq98hbs9gkb72\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 19 Jul 2025 05:20:15 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 11 Jul 2025 22:08:06 GMT\r\netag: W/\"68718b46-288\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FalEUXadpJTKQXv2skEqmd8vRdUxYzzFTNav4syEG2lAWtadlwljwvkGlx%2Fu2m2nFQW7Q7i%2Bu8dKDsTVedELtyWTSY336daWkyE%3D\"}]}\r\ncf-ray: 9617c4be88eb568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":648,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f07b8f90c0eff1b76b402a2d34f0cdbe","sha1":"62c5226fbfa6a8f3c68c0e4f23f9c4bfeb05c299","sha256":"cddba428a029844888b59bae59c6400ee684b0d51dfc490a4374eef6bb63ea16","sha512":"63f9bb75b191310dc2d3e5840ddf0da27d72b2b1ad6000ca8bf1a3fd0c2562b14b25537d567de37f87ed2c64df288b363b5cfaa11e3f0fa53a17a9667ac40235","ssdeep":"","tlshash":"d4f073da6630d5c04862ca7eef7f1f89296b20e7615d0686f07a6e0ef4430d5705559c","first_seen":"2023-09-24T21:42:29Z","last_seen":"2026-08-06T12:11:39.929323Z","times_seen":4219,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"forbidden.my/uploads/1752356691_Bitcoin%20Drainer%20Script%20.webp","fqdn":"forbidden.my","domain":"forbidden.my","tld":"my"},"ip":{"addr":"172.67.194.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://forbidden.my/product.php?name=Bitcoin+Drainer+Script+2025","date":"2025-07-19T05:20:15.226Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"forbidden.my","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Jun 2025 08:57:01 GMT","end":"Tue, 02 Sep 2025 09:54:42 GMT"},"fingerprint":{"sha1":"C2:BE:8D:7B:32:EB:8C:AA:C7:3D:F4:8F:F9:CB:BF:9C:5A:5B:95:C4","sha256":"93:AC:48:8E:FB:97:0E:EF:94:1B:B5:5A:E7:A3:B1:49:BA:02:4B:CC:DC:CE:55:09:C2:BC:9A:0B:0A:24:5A:1F"}}},"request":{"raw":"GET /uploads/1752356691_Bitcoin%20Drainer%20Script%20.webp HTTP/1.1\r\nHost: forbidden.my\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://forbidden.my/product.php?name=Bitcoin+Drainer+Script+2025\r\nCookie: PHPSESSID=m1qntq89mc8t8mq98hbs9gkb72\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 19 Jul 2025 05:20:15 GMT\r\ncontent-type: image/webp\r\ncontent-length: 79428\r\nserver: cloudflare\r\nlast-modified: Sat, 12 Jul 2025 21:44:51 GMT\r\netag: \"6872d753-13644\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MXF8%2B0G%2BucbTvA%2BxFKQph4T2eILqL8uiHVLba0TPZ6ANPwOsswqaN%2FW75WZQtgNDh%2FfCryRNMeM%2B0qs2fMX42YuJqc%2FgmKxt2ik%3D\"}]}\r\ncf-ray: 9617c4beb90d568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":79428,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1024x1024, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c581c2d3cdb54c7c8b7874e3cbd7c052","sha1":"028fef9be38bc9c02b32ebaa937ed7085644debf","sha256":"166cf93841d8e5b64333a2a1be8e55b67a92d79ed2eee8044bd91cc7f35c388b","sha512":"62f4f2f4a533cbbca349049a043d211b5b94bbca5c97a8a27cb10cc6214461522ea727e3406a3ab26c00c7cceef383245db334ce7eb1103a8b080c311c181dc7","ssdeep":"1536:WUUztfTO+lfPTzpZaTugIX1LsRClOu8z0gLfQGBTyGnvM+Zc4eoIZPOHaIvzTr:WUCtfTO+FTzLadFu8gQfTykE+ZcxT1Oj","tlshash":"b57302cbd287e3f1724c1dc7ceea656877b46a653268f0e158f4852a65793446c3e403","first_seen":"2025-07-19T05:20:42.051781Z","last_seen":"2025-07-19T05:20:42.051781Z","times_seen":1,"resource_available":false,"data":null}},"time_used":333,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":149,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"forbidden.my/assets/icons/crypto/xmr.svg","fqdn":"forbidden.my","domain":"forbidden.my","tld":"my"},"ip":{"addr":"172.67.194.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://forbidden.my/product.php?name=Bitcoin+Drainer+Script+2025","date":"2025-07-19T05:20:15.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"forbidden.my","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Jun 2025 08:57:01 GMT","end":"Tue, 02 Sep 2025 09:54:42 GMT"},"fingerprint":{"sha1":"C2:BE:8D:7B:32:EB:8C:AA:C7:3D:F4:8F:F9:CB:BF:9C:5A:5B:95:C4","sha256":"93:AC:48:8E:FB:97:0E:EF:94:1B:B5:5A:E7:A3:B1:49:BA:02:4B:CC:DC:CE:55:09:C2:BC:9A:0B:0A:24:5A:1F"}}},"request":{"raw":"GET /assets/icons/crypto/xmr.svg HTTP/1.1\r\nHost: forbidden.my\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://forbidden.my/product.php?name=Bitcoin+Drainer+Script+2025\r\nCookie: PHPSESSID=m1qntq89mc8t8mq98hbs9gkb72\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 19 Jul 2025 05:20:15 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 11 Jul 2025 22:08:10 GMT\r\netag: W/\"68718b4a-207\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MHsE92LrLXz7URUuf6osQrC%2Fswo3HsJ3uASvaBj6ocidm58TT9rQpXiVAClo0D73YISuaboo%2FXD%2FYvn94B0Ng3ZeKIW%2FjkpAjT0%3D\"}]}\r\ncf-ray: 9617c4bea905568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":519,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"26a14f1c0b5bfac8c7bad92258c341ec","sha1":"09d8d31dcca54486e7580c6295ef046be87bb387","sha256":"0ba4288b46abfe05366f1aa1c76c6b8a265af5c621dcee34eba2d2b9beeeff87","sha512":"51a1bb3eca11e9e8a63632b9c89955d347c72d65f9f6fa9652df9d59f816e681ac6eb30e1ecb6a38a88a858a36aa0f7c536fc73fdd7f12780b3c511f5f4ad85d","ssdeep":"","tlshash":"4cf050a0b478ad88149f8f7cb87d30d32b5f74ae35594a5cb2646f78b0971526600e40","first_seen":"2025-07-19T05:20:42.052921Z","last_seen":"2026-08-05T13:58:21.092023Z","times_seen":3955,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"forbidden.my/favicon.png","fqdn":"forbidden.my","domain":"forbidden.my","tld":"my"},"ip":{"addr":"172.67.194.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://forbidden.my/product.php?name=Bitcoin+Drainer+Script+2025","date":"2025-07-19T05:20:15.542Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"forbidden.my","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Jun 2025 08:57:01 GMT","end":"Tue, 02 Sep 2025 09:54:42 GMT"},"fingerprint":{"sha1":"C2:BE:8D:7B:32:EB:8C:AA:C7:3D:F4:8F:F9:CB:BF:9C:5A:5B:95:C4","sha256":"93:AC:48:8E:FB:97:0E:EF:94:1B:B5:5A:E7:A3:B1:49:BA:02:4B:CC:DC:CE:55:09:C2:BC:9A:0B:0A:24:5A:1F"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: forbidden.my\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://forbidden.my/product.php?name=Bitcoin+Drainer+Script+2025\r\nCookie: PHPSESSID=m1qntq89mc8t8mq98hbs9gkb72\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 19 Jul 2025 05:20:15 GMT\r\ncontent-type: image/png\r\ncontent-length: 37712\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=bNAeD06KLzBcIigFgKzKxUp0b%2BtSe9NFpdvvOQ8FN31zdD3w8S%2F88y%2BcQdE0Hv8JPJmJzeuwe3mVW6KkU3%2FXFQnvZRCxOYmaVarOI5qZoUVAQGdpaEvZ8wsuwzs6584%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Fri, 11 Jul 2025 22:06:09 GMT\r\netag: \"68718ad1-9350\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: 9617c4c11e4d56ab-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=4916\u0026min_rtt=523\u0026rtt_var=4319\u0026sent=157\u0026recv=195\u0026lost=0\u0026retrans=0\u0026sent_bytes=12987\u0026recv_bytes=10989\u0026delivery_rate=289050\u0026ss_exit_cwnd=14910\u0026ss_exit_reason=2\u0026cwnd=14000\u0026unsent_bytes=0\u0026cid=2d498ca353bccd21\u0026ts=977\u0026inflight_dur=48\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37712,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 162 x 144, 8-bit/color RGBA, non-interlaced","md5":"b68be34c5b60a47d25bc57ef5a487dbd","sha1":"6b707ec7708462aa05195b38b34d23b6219e2de3","sha256":"6c7818e04838fcab3bd27d5a2eba900af75375e396bfa8dd5592c1b4b6c463e7","sha512":"3f80730733bc8a6d83e26d0637c4a3dbd7c5263e786482e15feef920829e9e17b54842389b2bb9d4de4b976a272dd5a9677572914ae3a41dc67bf85089b29e4e","ssdeep":"768:P1LSEFXuZHUE2tt/z/+b2uJx6caee+GheC4Gznx4sdNEUU:NL/FXQUEatL+9Jx6caP+InWsnEt","tlshash":"5c03f1bdcc1d6a09eb1e1bf6e49c573e0f0c9b10540c6374b9ea6e425d49ec7a8a41c9","first_seen":"2025-07-19T05:20:42.054003Z","last_seen":"2025-07-19T05:20:42.054003Z","times_seen":1,"resource_available":false,"data":null}},"time_used":284,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":200,"receive":84,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v23/pxiEyp8kv8JHgFVrJJfecg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://forbidden.my/product.php?name=Bitcoin+Drainer+Script+2025","date":"2025-07-19T05:20:15.555Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Jun 2025 08:41:27 GMT","end":"Mon, 15 Sep 2025 08:41:26 GMT"},"fingerprint":{"sha1":"9A:5E:6D:44:D8:FB:03:E5:9A:13:6D:FF:53:DA:1C:8C:EA:3A:A7:AA","sha256":"C3:51:20:DB:42:A3:71:7A:7B:DE:45:2B:1D:8A:57:E1:26:22:CD:26:F6:CF:18:86:7F:48:52:DD:B1:F3:03:8C"}}},"request":{"raw":"GET /s/poppins/v23/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://forbidden.my\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7884\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 17 Jul 2025 10:06:17 GMT\r\nexpires: Fri, 17 Jul 2026 10:06:17 GMT\r\ncache-control: public, max-age=31536000\r\nage: 155638\r\nlast-modified: Wed, 23 Apr 2025 16:05:59 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7884,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7884, version 1.0","md5":"9212f6f9860f9fc6c69b02fedf6db8c3","sha1":"ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b","sha256":"7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f","sha512":"67317495f4b53e20a9f31c034e456e6c37f387dffb2c092caa5159bc441cfcadd02749ffe5bbed1d580d5300a59e48a767ef2c6d9978b474f84c1a2cd095c126","ssdeep":"192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI","tlshash":"c3f1ae4eb3f2cd1be40982e53a0fc90b1c578272681fd772d067a22517893bc8db2c81","first_seen":"2023-04-05T15:35:34Z","last_seen":"2026-08-08T22:42:05.981566Z","times_seen":389314,"resource_available":false,"data":null}},"time_used":448,"timings":{"blocked":214,"dns":1,"connect":7,"send":0,"wait":13,"receive":1,"ssl":208},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"forbidden.my/css/style.css","fqdn":"forbidden.my","domain":"forbidden.my","tld":"my"},"ip":{"addr":"172.67.194.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://forbidden.my/product.php?name=Bitcoin+Drainer+Script+2025","date":"2025-07-19T05:20:15.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"forbidden.my","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Jun 2025 08:57:01 GMT","end":"Tue, 02 Sep 2025 09:54:42 GMT"},"fingerprint":{"sha1":"C2:BE:8D:7B:32:EB:8C:AA:C7:3D:F4:8F:F9:CB:BF:9C:5A:5B:95:C4","sha256":"93:AC:48:8E:FB:97:0E:EF:94:1B:B5:5A:E7:A3:B1:49:BA:02:4B:CC:DC:CE:55:09:C2:BC:9A:0B:0A:24:5A:1F"}}},"request":{"raw":"GET /css/style.css HTTP/1.1\r\nHost: forbidden.my\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://forbidden.my/product.php?name=Bitcoin+Drainer+Script+2025\r\nCookie: PHPSESSID=m1qntq89mc8t8mq98hbs9gkb72\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 19 Jul 2025 05:20:15 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Fri, 11 Jul 2025 22:40:51 GMT\r\netag: W/\"687192f3-746\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gTDIFXb8HD1xA0f8Alj5BQpVssEfveABCxmJTWuMpG6%2BFxe3O6Z%2B2oRwQpbAnrQ8kmphhBNmXYzZxr%2FnrYpwiT7Nv2o8M0Jy%2BSA%3D\"}]}\r\ncf-ray: 9617c4be78e3568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1862,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"c38e00da397373f8873225e4ba05e98b","sha1":"4f78ac62224762f9371b1b4cbf5b8180ff17b5a2","sha256":"ba8bb814e6a2fbd2a2df0510d9222bad7d86c14a298d59061ab339d8d9b40a95","sha512":"2d7fbdab0bdb619b81b909575b296558172afd6b9879ccd2b3acab55a720d637373236e28f6c0c8c89201273fb0c6e11757f84e8c2c79e757090f28b26f2712d","ssdeep":"","tlshash":"6c31c0c2d7b30542b41bd1a84fb6cb91736c90838449dbbd3f9562988f0d2d896b2f8d","first_seen":"2025-07-19T05:20:42.055683Z","last_seen":"2025-07-19T05:20:42.055683Z","times_seen":1,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"forbidden.my/logo.png","fqdn":"forbidden.my","domain":"forbidden.my","tld":"my"},"ip":{"addr":"172.67.194.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://forbidden.my/product.php?name=Bitcoin+Drainer+Script+2025","date":"2025-07-19T05:20:15.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"forbidden.my","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Jun 2025 08:57:01 GMT","end":"Tue, 02 Sep 2025 09:54:42 GMT"},"fingerprint":{"sha1":"C2:BE:8D:7B:32:EB:8C:AA:C7:3D:F4:8F:F9:CB:BF:9C:5A:5B:95:C4","sha256":"93:AC:48:8E:FB:97:0E:EF:94:1B:B5:5A:E7:A3:B1:49:BA:02:4B:CC:DC:CE:55:09:C2:BC:9A:0B:0A:24:5A:1F"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: forbidden.my\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://forbidden.my/product.php?name=Bitcoin+Drainer+Script+2025\r\nCookie: PHPSESSID=m1qntq89mc8t8mq98hbs9gkb72\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 19 Jul 2025 05:20:15 GMT\r\ncontent-type: image/png\r\ncontent-length: 182472\r\nserver: cloudflare\r\nlast-modified: Fri, 11 Jul 2025 22:30:35 GMT\r\netag: \"6871908b-2c8c8\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3iFCKX2d78ZSD3TwZ%2FJBnCx0A9Tc0xXa7EO%2FigIdmYoLRvkOCt62BkRus6CqKR7ZrTTHCg%2FUQzIjTLA2TlIcvvWfRDKvL1wWlZA%3D\"}]}\r\ncf-ray: 9617c4be88e8568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":182472,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 916 x 140, 8-bit/color RGBA, non-interlaced","md5":"2162937dffa1bf9545bc197481517a73","sha1":"d940e75df09324ed724bac1ebf2efd548c97f9dd","sha256":"63e7aed9566eb614fa8be1ed15446ec2fffccaefcf530ee3bc2c24cb84e78f0f","sha512":"62d8407043ff6d4a527a0ee62f329b6715048e084a2c60aaecf0b8691b655ce00f1027f6594b5a860b1f6a60d86aa8084c5a25baadf805d1b8ba57d59d4f87ff","ssdeep":"3072:zIeUNcEfY+ZGgGUJqXWydOH0qAMcJYarTrAfYALhaShTln3tirtXStY:zIekYgGWsMBA5eOrADLhaShi4W","tlshash":"630423815f0ccc7f57f1c08ad2daab08d7aed5215ea240ba642c70c3964b7dcaeda751","first_seen":"2025-07-19T05:20:42.056842Z","last_seen":"2025-07-19T05:20:42.056842Z","times_seen":1,"resource_available":false,"data":null}},"time_used":403,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":188,"receive":215,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"forbidden.my/assets/icons/crypto/trx.svg","fqdn":"forbidden.my","domain":"forbidden.my","tld":"my"},"ip":{"addr":"172.67.194.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://forbidden.my/product.php?name=Bitcoin+Drainer+Script+2025","date":"2025-07-19T05:20:15.195Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"forbidden.my","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Jun 2025 08:57:01 GMT","end":"Tue, 02 Sep 2025 09:54:42 GMT"},"fingerprint":{"sha1":"C2:BE:8D:7B:32:EB:8C:AA:C7:3D:F4:8F:F9:CB:BF:9C:5A:5B:95:C4","sha256":"93:AC:48:8E:FB:97:0E:EF:94:1B:B5:5A:E7:A3:B1:49:BA:02:4B:CC:DC:CE:55:09:C2:BC:9A:0B:0A:24:5A:1F"}}},"request":{"raw":"GET /assets/icons/crypto/trx.svg HTTP/1.1\r\nHost: forbidden.my\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://forbidden.my/product.php?name=Bitcoin+Drainer+Script+2025\r\nCookie: PHPSESSID=m1qntq89mc8t8mq98hbs9gkb72\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 19 Jul 2025 05:20:15 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 11 Jul 2025 22:08:05 GMT\r\nvary: accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FIiJBXUxMEihu%2FtB%2FFWrweVFxmN9UFbgAQa3hemkBDxrz3igWiCn0Y5Ie%2B0WmEqU%2Fm9LcCZ6KDxTscketiKC6yomO5g8AYvf0PQ%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"68718b45-1ad\"\r\ncontent-encoding: br\r\ncf-ray: 9617c4be98fb568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":429,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6e61dfd0a444ac582c5abf4c384c4b5b","sha1":"f887034ce8eaf887b3c531c6ce50e1317009885b","sha256":"5b6b648320b6e99b8e60d447271f753dc9989183e3a07f0300ee44d0743130f0","sha512":"b64e3404dd34b9ece56f39bbb1cb3d706bfbe5637e79cc3a13b5d88880c97a53f10af2a23f3f864615fe5ca1bd8623a0942e6a827d99804d11673a93b7ffe376","ssdeep":"","tlshash":"06e08a90ac742706c9cece0808187470304da09ddd0c6dfc71e02704e1511c71805bfc","first_seen":"2023-05-09T05:08:14Z","last_seen":"2026-08-05T18:32:45.977646Z","times_seen":4227,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"forbidden.my/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"forbidden.my","domain":"forbidden.my","tld":"my"},"ip":{"addr":"172.67.194.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://forbidden.my/product.php?name=Bitcoin+Drainer+Script+2025","date":"2025-07-19T05:20:15.223Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"forbidden.my","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Jun 2025 08:57:01 GMT","end":"Tue, 02 Sep 2025 09:54:42 GMT"},"fingerprint":{"sha1":"C2:BE:8D:7B:32:EB:8C:AA:C7:3D:F4:8F:F9:CB:BF:9C:5A:5B:95:C4","sha256":"93:AC:48:8E:FB:97:0E:EF:94:1B:B5:5A:E7:A3:B1:49:BA:02:4B:CC:DC:CE:55:09:C2:BC:9A:0B:0A:24:5A:1F"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: forbidden.my\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://forbidden.my/product.php?name=Bitcoin+Drainer+Script+2025\r\nCookie: PHPSESSID=m1qntq89mc8t8mq98hbs9gkb72\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 19 Jul 2025 05:20:15 GMT\r\ncontent-type: application/javascript\r\nexpires: Sat, 19 Jul 2025 06:08:15 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z8QCLXi3FP9nM0oB9h6oyJcq7d3%2Fp7kL%2FAWP3KDMMQH4BIDhiRGLe3mnVwHYKT%2B4nMSjuz7cBByARFb4BmBJ4o5lrbyEm%2FfRPXQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9617c4beb90b568d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-08T22:40:45.362101Z","times_seen":416694,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v23/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://forbidden.my/product.php?name=Bitcoin+Drainer+Script+2025","date":"2025-07-19T05:20:15.570Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Jun 2025 08:41:27 GMT","end":"Mon, 15 Sep 2025 08:41:26 GMT"},"fingerprint":{"sha1":"9A:5E:6D:44:D8:FB:03:E5:9A:13:6D:FF:53:DA:1C:8C:EA:3A:A7:AA","sha256":"C3:51:20:DB:42:A3:71:7A:7B:DE:45:2B:1D:8A:57:E1:26:22:CD:26:F6:CF:18:86:7F:48:52:DD:B1:F3:03:8C"}}},"request":{"raw":"GET /s/poppins/v23/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://forbidden.my\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 8000\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 17 Jul 2025 10:12:42 GMT\r\nexpires: Fri, 17 Jul 2026 10:12:42 GMT\r\ncache-control: public, max-age=31536000\r\nage: 155253\r\nlast-modified: Wed, 23 Apr 2025 16:07:17 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8000,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 8000, version 1.0","md5":"72993dddf88a63e8f226656f7de88e57","sha1":"179f97ec0275f09603a8db94d4380eb584d81cd5","sha256":"f4e80d9dfd374d02989b87a27b5ed4cb78fbb177c27f1478e9a8b0afb7513149","sha512":"7c20165f9d22a86341e841fd58526209017dcde2afe2d0d2a89fe853d95dc69f658d25cf798c71f452dab09843fc808c1ae87a60b1284134163abf5a1d93e50a","ssdeep":"192:GDonmfrEdXT8WrxzRXwyQo3zGEOM7Y2hOMgWnsfYSjv4ENFGwrlKJ:8onPxTzjgyQSzLPXOTIYHJAJ","tlshash":"08f1b0ffa92456c4df692475a5044f27623652b4dd35cb2f496f3e12d2d74224bcc4c1","first_seen":"2023-04-05T18:53:14Z","last_seen":"2026-08-08T22:35:43.119334Z","times_seen":289948,"resource_available":false,"data":null}},"time_used":394,"timings":{"blocked":195,"dns":13,"connect":21,"send":0,"wait":11,"receive":1,"ssl":146},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Poppins:wght@300;400;500;600\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://forbidden.my/product.php?name=Bitcoin+Drainer+Script+2025","date":"2025-07-19T05:20:15.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Jun 2025 08:41:28 GMT","end":"Mon, 15 Sep 2025 08:41:27 GMT"},"fingerprint":{"sha1":"DC:40:BF:B1:59:C9:CC:B5:4A:38:2D:D0:16:8D:06:A5:1D:B4:08:8B","sha256":"6A:4A:14:17:EA:BE:21:42:B0:C2:EF:35:F4:04:40:86:BD:19:EC:62:AA:D1:E7:38:C3:DB:96:05:A7:25:F5:AB"}}},"request":{"raw":"GET /css2?family=Poppins:wght@300;400;500;600\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://forbidden.my/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 19 Jul 2025 05:20:15 GMT\r\ndate: Sat, 19 Jul 2025 05:20:15 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4792,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"7de1ccae7599ff597ec7b6c3ddf34c59","sha1":"d15726a0e09ea74b39489ada737a5a3387963348","sha256":"98c124b6b149c8338903dae79750c71e7e7f95a9adda9454ae68eaf0522fc45c","sha512":"8c91ab5ee8eecae770f6fee4f35ad42187d928a23f736dfdbd82fe15234fe6561415d0a33839ccff6b5dbd44c35f14891a37cfc2e552723476c5f0b09d8b21ee","ssdeep":"96:SO1aaO1aiJc+ukO1alN3OEaOOEarJc+ukOEalN3OXaaOXaiJc+ukOXalN3OxMa9Z:4wqdApvQn+q3K4lab","tlshash":"cca19ed1087be5049b831cc123cf7d36ee1ea255b450e5786bfd0c98adabc694362b2d","first_seen":"2025-04-24T03:53:11.676647Z","last_seen":"2025-09-16T21:25:20.925541Z","times_seen":416,"resource_available":false,"data":null}},"time_used":505,"timings":{"blocked":212,"dns":1,"connect":22,"send":0,"wait":37,"receive":0,"ssl":227},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}