{"report_id":"dfb6e788-4172-48ab-baab-3836a0175f60","version":6,"status":"done","tags":[],"date":"2026-05-07T11:35:26Z","url":{"schema":"http","addr":"goblin-allocation.xyz","fqdn":"goblin-allocation.xyz","domain":"goblin-allocation.xyz","tld":"xyz"},"ip":{"addr":"104.21.93.66","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"goblin-allocation.xyz/","fqdn":"goblin-allocation.xyz","domain":"goblin-allocation.xyz","tld":"xyz"},"title":"$Goblin Airdrop","dom":{"size":6686,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"d5c9bd32b549745e06c2a1148a2805de","sha1":"0705ff27c829f134207ced2719d81c2e6d25fd9a","sha256":"e789e6813e474b9a09b0922bab3bf5d89d3ec3e803f17ad704aa29619cfa90d8","sha512":"48aba772fc6af00e6358db9bca4402d6cd7a71838d26aa65e238b58dc58add5f0225bcb2676c33a5b1e5230e70ef9a8b5079c6640f4269a4b8b269b6158ed8fc","ssdeep":"192:YNlHr2spFgYglR52acBiiJctNcvHicH74ZFBtjOGj:ilr2WFW9Vn5tQW","tlshash":"dad1fe1a59930066b843a1742feb165c7634e007cd1bdea93fdcb2948fc6be49993b48","dom_hash":"domhash03af277a4b8cbb1a4aa0b6dbd6109d76","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"goblin-allocation.xyz","fqdn":"goblin-allocation.xyz","domain":"goblin-allocation.xyz","tld":"xyz"},"ip":{"addr":"104.21.93.66","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-11T11:35:26Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"goblin-allocation.xyz","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":5,"received_data":652960,"sent_data":2430,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"goblin-allocation.xyz/","fqdn":"goblin-allocation.xyz","domain":"goblin-allocation.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0d52360cdf6cab9a1b5eb8a5be92c9a1","sha1":"00a960b56e23857b2663ea3edb56a177a093ed79","sha256":"615b25a0a776843f2cea4764b52d97e1fa801e5edabe90f79ec995e61dc7ada2","sha512":"10f3b6b8e80f69417ca9e7230772ded78466b02e652b0659cdd02c2b529664ef446b4c2c53cd510ce454a11faae030c378359e35884ee55e4cdf6fbce74e174b","ssdeep":"","tlshash":"83c0c010c430cea00c0c009b6078d7c830309e9d0401b0abc2bfca8982fce818f44800","size":186,"data":"","first_seen":"2026-05-04T09:13:46.529349Z","last_seen":"2026-05-07T11:44:55.111746Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goblin-allocation.xyz/secureproxy?s=%2Fipfs%2FTQ8f40C-LVbDRV2g6zc9hg5d34d809d1f49e11ea2c9d3a5a809dbd%3Ft%3D1778153705423","fqdn":"goblin-allocation.xyz","domain":"goblin-allocation.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"262076947ccefed16fede984bbf2a366","sha1":"0c7c39446ca709c1945cee600dc42a84e5e9084e","sha256":"5b43fb101e4c8afb87ec334525341224c2761dd21343de9283f5aeb12755091e","sha512":"b3558c6f5d5a54b5407564fa700f2e4891ab950f5611f46b16e968b3bcb2df19cb132da792b676c860b1c86f1c8a25d92d176beb79376218dec872129734dded","ssdeep":"6144:Ih5gDZ8qAOsstbFZFSXwRTMsS8chPcsdJs3wFYYH/3h8qcPOQA12Lcv0q:osKqAnXwRTMP8chPc730WW","tlshash":"e8d4eac2ab08157340ca2eb5047b42afdf882d4d078ba85077f9afd9d74578231eee59","size":622854,"data":"","first_seen":"2026-05-07T11:35:31.642901Z","last_seen":"2026-05-07T11:35:31.642901Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"goblin-allocation.xyz/image.jpg","fqdn":"goblin-allocation.xyz","domain":"goblin-allocation.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goblin-allocation.xyz/","date":"2026-05-07T11:35:05.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goblin-allocation.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 12:15:57 GMT","end":"Sat, 01 Aug 2026 12:15:56 GMT"},"fingerprint":{"sha1":"0D:CA:11:2C:1B:00:47:02:24:DA:C1:86:76:7C:5E:70:78:F5:C4:3B","sha256":"FB:85:CE:5D:FC:D5:14:4E:48:EA:EB:A6:21:B3:8F:41:15:2D:33:E1:31:40:94:B1:F7:8A:3E:16:BE:B0:27:55"}}},"request":{"raw":"GET /image.jpg HTTP/1.1\r\nHost: goblin-allocation.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goblin-allocation.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 May 2026 11:35:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 8785\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 03 May 2026 12:52:17 GMT\r\netag: \"69f74501-2251\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uQvz%2FqM%2FdQEp%2BbwVDBXWS18Z7cN%2BfTxCFY7cT8L7xlAOocHJ8Hr%2FUH%2FPaw%2BrOvvEUzi8lYFtSnQmiVZ%2FhqqodAb4AIxo%2FpkbxrNzJMOaiBE5MQcXYB9YwvWscd217vAlj%2Fp3OTJ14xo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f7feb54eba50b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8785,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 360x360, components 3","md5":"22a4587b501574b97769bc1b84106cc1","sha1":"111ac8b15e941a96ebd195cbcf2b4790dd8ef3e1","sha256":"6bdfe087eb7dd3ea53ff741301df6dfaab4606268837938b4830fbe6fc81a2ff","sha512":"275ef9f36d24125fadcf8a82cf1c227c8a4a25c17337f2a3f75aa126a46e91728d812a8f0dc60b5e5677365bf09cc5fd8796f897f088b5e6742a4f3bef040024","ssdeep":"192:s7r8SI9D4PSnTwGjYqcz1y9wRu9LRPpApak/pUqxb29wWPbS:s7gP9nncGjYpmwRiRxAppTFW+","tlshash":"dc029fabdf0ad585ff2e1bf719484316bbba9c06020692dd01c047082bbd4e40c755f3","first_seen":"2026-05-04T09:13:46.521436Z","last_seen":"2026-05-07T11:44:55.109534Z","times_seen":4,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goblin-allocation.xyz/secureproxy?s=%2Fjmpd%2F","fqdn":"goblin-allocation.xyz","domain":"goblin-allocation.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://goblin-allocation.xyz/","date":"2026-05-07T11:35:07.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goblin-allocation.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 12:15:57 GMT","end":"Sat, 01 Aug 2026 12:15:56 GMT"},"fingerprint":{"sha1":"0D:CA:11:2C:1B:00:47:02:24:DA:C1:86:76:7C:5E:70:78:F5:C4:3B","sha256":"FB:85:CE:5D:FC:D5:14:4E:48:EA:EB:A6:21:B3:8F:41:15:2D:33:E1:31:40:94:B1:F7:8A:3E:16:BE:B0:27:55"}}},"request":{"raw":"POST /secureproxy?s=%2Fjmpd%2F HTTP/1.1\r\nHost: goblin-allocation.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://goblin-allocation.xyz/\r\ncontent-type: application/json\r\nContent-Length: 1434\r\nOrigin: https://goblin-allocation.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1434,"data":"{\"route\":\"n9POyFeFG1tUtiSU-z9JOx3n\",\"payload\":\"0hqM-6_N52QBFQMsAykADwC_ArUCFwDsAi0AAAECOwMAAO8nhn2XtsKCAWE04j0IhBzOxAbHI2wCAADfOTeu5qP9SduPBErglbH96VbZ8xTX5_TAukdyzWiyxBuS48sgTxqAyGH_3vxqRLWBkORmaFmBc4w4FtHrXKL4ZrZK4d1RO0oZzQBLuioIZBO0Q_jMaDZk8c-tKl0QOabeNIGr-ZRjji0-f3rD4n9CSUeq0QrDVt2nOeS_l4DZJCVAAsvZnf-lVjkw3oK9g_NQlMU_HfBbutd2PfIAq-2hL_V5OzJA9Nlsle-veBBe2koMcEs1ggVoW3g0XMXXWnEE9WmcNmmncECIt5V03ORtFS7XUguLRkVDsbR0b837RAsKtZvnpeXTEZo_WasXGfH1x8Kf_wqZW-OdeYMnUV_SDDNNYKqGqotF9eIoE5iSBq3egVHyqiTiV1_e0PZDlpmakWF-Zu1Kwc1kNKrvvjWjfyBibG9kq9x6i_UPYDKNgzRZ3jmi5ziorQWsvZ-hmsKYGf7VJdICf972Ah7rPGvMieTitikl5MS1vTol-_Zus5zFuTs6Egk-F5F30gXv73zUTQdotTFz09PJCzNBUYQ-HDdrDGLj5hOUW7ptdKjpw-g1bgRhinKMcFO6K7HpuX10Y0Z1PjpR9il-uIOHeYcUn4u_DBRYtV3KbxlSfkSKsBeOHW6Bz2YFA_2rx2leaVkxD-PzxmjjDXutdwxt-wpwLgzj_Eq_Tf7uWLx_aYj5fcVb3nOezjWU_1guXetENJHDjbVgh-tZZD0uyongxO2sYOgbsElBmFfHm5vlLujiI-rmRyIHwtZXMhJed8GGMLWnvbVOztjbVxahtoxktdl6E2eP6hO9wCgeJgPdQB1UIr9RrCRucYkRd6An9mbHmUyrb_SYssdjawrS1mP19cX-AagoKZE8aJfMukhBzdRTArbmQNLVLD4oYXE8rw-Ag5WF3HefjbvgvFENHfiZ9R2DIzyddMfOjvCYb5NEEAZEq7mANBHtkBmedHdI56ETeP7uNBHXt7yrqhu99PoBC_RnJVPs-rl1SI8JcsFl5CFVwqKMZOFs-yIat3OjgSZKbtfWSxhB2HkBjFC9v61VteqBVFtUXs_Dyl37rm3KYG62G7gCJ-uMbpQl8FApsJg_6JrllA6Z-SqOl75frxPiP8j9SiHUMJxPSsea7W6LD5X-_opBEA\",\"challenge\":\"eyJpZCI6IlpkT2pQbTl5SnpKbFFKS3FNdVlaY0EiLCJub25jZSI6MTk0LCJoYXNoIjoiMDA1NjkyNWYzYTA2MDc1MmRmNTgyODk2YWIyZmY3YzcyMDdkYjIyOTNmYTI5MDIxZGJmOTBhZDc4YTEzZGY2MiJ9\"}"}},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Thu, 07 May 2026 11:35:08 GMT\r\nserver: cloudflare\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\ncache-control: no-cache\r\netag: W/\"a-bAsFyilMr4Ra1hIU5PyoyFRunpI\"\r\nx-ratelimit-limit: 20\r\nx-ratelimit-remaining: 19\r\nx-ratelimit-reset: 1778153767426\r\ncdn-proxyver: 1.52\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 204\r\ncdn-cachedat: 05/07/2026 11:35:08\r\ncdn-edgestorageid: 1056\r\ncdn-requestid: 3fc75676f864482b2b6d1480a640dd90\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dORgiYtsV4%2BZVmUJzinFZ7k%2Bsy59ZKAKYdjWAG53SIeKqZV6VB7CWJ%2FobTIdnXqlR3WjBVgNRj0nTfkNo326AOu2AXM%2Bd4qsn%2F%2BA2F6iPbCZKdWNr2G26%2F6qC80OrHlx%2Bp8bHcjbOXg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f7feb5e3a840b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T06:38:20.380117Z","times_seen":14879820,"resource_available":true,"data":null}},"time_used":800,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":800,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goblin-allocation.xyz/","fqdn":"goblin-allocation.xyz","domain":"goblin-allocation.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-07T11:35:04.947Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goblin-allocation.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 12:15:57 GMT","end":"Sat, 01 Aug 2026 12:15:56 GMT"},"fingerprint":{"sha1":"0D:CA:11:2C:1B:00:47:02:24:DA:C1:86:76:7C:5E:70:78:F5:C4:3B","sha256":"FB:85:CE:5D:FC:D5:14:4E:48:EA:EB:A6:21:B3:8F:41:15:2D:33:E1:31:40:94:B1:F7:8A:3E:16:BE:B0:27:55"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: goblin-allocation.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 May 2026 11:35:05 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 03 May 2026 12:52:17 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N6u1ShDyTXiW3HVoP12OtTjjhkq5Ndz4iCb6UY9cftdnUkXBcUxVw45y8sz3iMU8Xkm3EfqiHkW%2FXBZPaJLYPMmdwangs1qLAyhsGtCQCqcWa%2FXDwSHK2eMsHOR%2F%2F3lhQtunTAn0CJM%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9f7feb504867b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6733,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"fab010c0c60802131bc1bb8ca83da712","sha1":"ccbbddf31792fc584d05e214e5c27a073284a64f","sha256":"e76e0bd2b7793461c7502a783884a89121c8513bc4fea735384b83277b64d986","sha512":"f7024e6b202b90474d1eeef9fa125817a3887c8af332b608f52c80d1d1b145a81a03b9d78d93a98a02c70c2ca7b81c56ecc1b108d5923b33b5124ad644e61444","ssdeep":"48:tt+Xds1ALg4g6N1P+gaIjb9HR9lKaO8Q1oPlb3GRq+dql+ejkzpUz0VocFfCLG3u:WNgd6nnblw8YoR2RUlDjt0VocvStATO","tlshash":"86d10f16544214276833a3b4afe7421cfb66a017c60353aa3fdcb3964ff2ba08593f48","first_seen":"2026-05-04T09:13:46.52455Z","last_seen":"2026-05-07T11:44:55.108909Z","times_seen":4,"resource_available":true,"data":null}},"time_used":373,"timings":{"blocked":63,"dns":46,"connect":1,"send":0,"wait":247,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goblin-allocation.xyz/image.jpg","fqdn":"goblin-allocation.xyz","domain":"goblin-allocation.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goblin-allocation.xyz/","date":"2026-05-07T11:35:05.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goblin-allocation.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 12:15:57 GMT","end":"Sat, 01 Aug 2026 12:15:56 GMT"},"fingerprint":{"sha1":"0D:CA:11:2C:1B:00:47:02:24:DA:C1:86:76:7C:5E:70:78:F5:C4:3B","sha256":"FB:85:CE:5D:FC:D5:14:4E:48:EA:EB:A6:21:B3:8F:41:15:2D:33:E1:31:40:94:B1:F7:8A:3E:16:BE:B0:27:55"}}},"request":{"raw":"GET /image.jpg HTTP/1.1\r\nHost: goblin-allocation.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goblin-allocation.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 May 2026 11:35:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 8785\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 03 May 2026 12:52:17 GMT\r\netag: \"69f74501-2251\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o%2BjT6n5ST1ftJi7tA8xZPXdYVL4K2OJmY9OPxUWaUhh%2BuGEPxM3rDuynRyCpUd1E7xNay7sznNDwEQge6ABF%2FmHMKCsQUVe9z3qF6eP25xt5XHmDbrWoT3raPfi536De3p%2FQuihoxx0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f7feb52fa0f0b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8785,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 360x360, components 3","md5":"22a4587b501574b97769bc1b84106cc1","sha1":"111ac8b15e941a96ebd195cbcf2b4790dd8ef3e1","sha256":"6bdfe087eb7dd3ea53ff741301df6dfaab4606268837938b4830fbe6fc81a2ff","sha512":"275ef9f36d24125fadcf8a82cf1c227c8a4a25c17337f2a3f75aa126a46e91728d812a8f0dc60b5e5677365bf09cc5fd8796f897f088b5e6742a4f3bef040024","ssdeep":"192:s7r8SI9D4PSnTwGjYqcz1y9wRu9LRPpApak/pUqxb29wWPbS:s7gP9nncGjYpmwRiRxAppTFW+","tlshash":"dc029fabdf0ad585ff2e1bf719484316bbba9c06020692dd01c047082bbd4e40c755f3","first_seen":"2026-05-04T09:13:46.521436Z","last_seen":"2026-05-07T11:44:55.109534Z","times_seen":4,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":208,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goblin-allocation.xyz/secureproxy?s=%2Fipfs%2FTQ8f40C-LVbDRV2g6zc9hg5d34d809d1f49e11ea2c9d3a5a809dbd%3Ft%3D1778153705423","fqdn":"goblin-allocation.xyz","domain":"goblin-allocation.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://goblin-allocation.xyz/","date":"2026-05-07T11:35:05.437Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goblin-allocation.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 12:15:57 GMT","end":"Sat, 01 Aug 2026 12:15:56 GMT"},"fingerprint":{"sha1":"0D:CA:11:2C:1B:00:47:02:24:DA:C1:86:76:7C:5E:70:78:F5:C4:3B","sha256":"FB:85:CE:5D:FC:D5:14:4E:48:EA:EB:A6:21:B3:8F:41:15:2D:33:E1:31:40:94:B1:F7:8A:3E:16:BE:B0:27:55"}}},"request":{"raw":"GET /secureproxy?s=%2Fipfs%2FTQ8f40C-LVbDRV2g6zc9hg5d34d809d1f49e11ea2c9d3a5a809dbd%3Ft%3D1778153705423 HTTP/1.1\r\nHost: goblin-allocation.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goblin-allocation.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 May 2026 11:35:06 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nserver: cloudflare\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\ncache-control: max-age=2592000\r\netag: W/\"98106-DHw5RGynCcGUXO5gDcQqhOXpCE4\"\r\nexpires: 0\r\npragma: no-cache\r\ncontent-disposition: attachment; filename=PD0ibPHljQ616MdWlNb_7A.js\r\ncdn-proxyver: 1.52\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 05/07/2026 11:35:06\r\ncdn-edgestorageid: 1056\r\ncdn-requestid: 45cd441ddd9ccc7b7fd0316f56d6d999\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gUhDy3rjxQptdJOxazBzx4hmvOKo09jI6EYdncXLjUB4Kapp6tPofmCB9cgcFEbTuYx6WI0XbtVBiaunLGhzYbrxbeG%2BYf%2F7lvmSREYVfeSpUZYIfRajs1tJfWLB%2BsOjPYcn55hurgU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f7feb52fa150b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":622854,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"262076947ccefed16fede984bbf2a366","sha1":"0c7c39446ca709c1945cee600dc42a84e5e9084e","sha256":"5b43fb101e4c8afb87ec334525341224c2761dd21343de9283f5aeb12755091e","sha512":"b3558c6f5d5a54b5407564fa700f2e4891ab950f5611f46b16e968b3bcb2df19cb132da792b676c860b1c86f1c8a25d92d176beb79376218dec872129734dded","ssdeep":"6144:Ih5gDZ8qAOsstbFZFSXwRTMsS8chPcsdJs3wFYYH/3h8qcPOQA12Lcv0q:osKqAnXwRTMP8chPc730WW","tlshash":"e8d4eac2ab08157340ca2eb5047b42afdf882d4d078ba85077f9afd9d74578231eee59","first_seen":"2026-05-07T11:35:31.642901Z","last_seen":"2026-05-07T11:35:31.642901Z","times_seen":1,"resource_available":true,"data":null}},"time_used":974,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":820,"receive":154,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}