{"report_id":"e319df0b-4490-4426-a26d-05feabb995f8","version":6,"status":"done","tags":[],"date":"2025-08-15T05:24:51Z","url":{"schema":"http","addr":"switchroms.io/","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"104.21.8.22","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"switchroms.io/","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"title":"(1) New Message!"},"submit":{"url":{"schema":"http","addr":"switchroms.io/","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"104.21.8.22","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-09-19T05:24:51Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":9,"urlquery":0,"analyzer":2}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-15T05:24:30Z","timestamp":1755235470,"ip_dst":{"addr":"185.200.118.90","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"United Kingdom","country_code":"GB"},"ip_src":{"addr":"172.18.0.20","port":39450,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-08-15T05:24:30.833642+0000\",\"flow_id\":1852117749774442,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":39450,\"dest_ip\":\"185.200.118.90\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-08-15T05:24:30.833642+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-15T05:24:30Z","timestamp":1755235470,"ip_dst":{"addr":"38.132.109.186","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.20","port":39450,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-08-15T05:24:30.853674+0000\",\"flow_id\":1239973240899242,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":39450,\"dest_ip\":\"38.132.109.186\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-08-15T05:24:30.853674+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-15T05:24:30Z","timestamp":1755235470,"ip_dst":{"addr":"185.200.116.90","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"172.18.0.20","port":39450,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-08-15T05:24:30.873723+0000\",\"flow_id\":1057372706329851,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":39450,\"dest_ip\":\"185.200.116.90\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-08-15T05:24:30.873723+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-15T05:24:30Z","timestamp":1755235470,"ip_dst":{"addr":"185.200.118.90","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"United Kingdom","country_code":"GB"},"ip_src":{"addr":"172.18.0.20","port":39450,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-08-15T05:24:30.933890+0000\",\"flow_id\":1852117749774442,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":39450,\"dest_ip\":\"185.200.118.90\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":2,\"pkts_toclient\":0,\"bytes_toserver\":124,\"bytes_toclient\":0,\"start\":\"2025-08-15T05:24:30.833642+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-15T05:24:30Z","timestamp":1755235470,"ip_dst":{"addr":"38.132.109.186","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.20","port":39450,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-08-15T05:24:30.953899+0000\",\"flow_id\":1239973240899242,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":39450,\"dest_ip\":\"38.132.109.186\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":2,\"pkts_toclient\":0,\"bytes_toserver\":124,\"bytes_toclient\":0,\"start\":\"2025-08-15T05:24:30.853674+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-15T05:24:30Z","timestamp":1755235470,"ip_dst":{"addr":"185.200.116.90","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"172.18.0.20","port":39450,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-08-15T05:24:30.974626+0000\",\"flow_id\":1057372706329851,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":39450,\"dest_ip\":\"185.200.116.90\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":2,\"pkts_toclient\":0,\"bytes_toserver\":124,\"bytes_toclient\":0,\"start\":\"2025-08-15T05:24:30.873723+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-15T05:24:31Z","timestamp":1755235471,"ip_dst":{"addr":"185.200.118.90","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"United Kingdom","country_code":"GB"},"ip_src":{"addr":"172.18.0.20","port":39450,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-08-15T05:24:31.134209+0000\",\"flow_id\":1852117749774442,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":39450,\"dest_ip\":\"185.200.118.90\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":3,\"pkts_toclient\":0,\"bytes_toserver\":186,\"bytes_toclient\":0,\"start\":\"2025-08-15T05:24:30.833642+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-15T05:24:31Z","timestamp":1755235471,"ip_dst":{"addr":"38.132.109.186","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.20","port":39450,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-08-15T05:24:31.154114+0000\",\"flow_id\":1239973240899242,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":39450,\"dest_ip\":\"38.132.109.186\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":3,\"pkts_toclient\":0,\"bytes_toserver\":186,\"bytes_toclient\":0,\"start\":\"2025-08-15T05:24:30.853674+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-15T05:24:31Z","timestamp":1755235471,"ip_dst":{"addr":"185.200.116.90","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"172.18.0.20","port":39450,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-08-15T05:24:31.174894+0000\",\"flow_id\":1057372706329851,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":39450,\"dest_ip\":\"185.200.116.90\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":3,\"pkts_toclient\":0,\"bytes_toserver\":186,\"bytes_toclient\":0,\"start\":\"2025-08-15T05:24:30.873723+0000\"}}"}],"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-15","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-15","alert":"Sinkholed","trigger":"compiledonatevanity.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.premiumvertising.com","ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"domain_registered":"2020-04-18","domain_rank":874532,"first_seen":"2020-04-18T19:54:24Z","last_seen":"2025-08-10T08:26:29.07144Z","alert_count":0,"request_count":1,"received_data":42499,"sent_data":469,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"htiivw4vkrqr.n4.adsco.re","ip":{"addr":"38.132.109.126","port":443,"asn":9009,"as":"M247 Europe SRL","country":"United States","country_code":"US"},"domain_registered":"2017-02-14","domain_rank":0,"first_seen":"2025-08-15T05:24:53.104021Z","last_seen":"2025-08-15T05:24:53.104021Z","alert_count":0,"request_count":1,"received_data":463,"sent_data":458,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-08-13T15:12:46.750635Z","alert_count":0,"request_count":1,"received_data":405440,"sent_data":434,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ajax.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":3691,"first_seen":"2012-05-22T10:38:03Z","last_seen":"2025-08-13T15:43:42.429518Z","alert_count":0,"request_count":1,"received_data":90462,"sent_data":442,"comment":"","tags":null,"fingerprints":null},{"fqdn":"adsco.re","ip":{"addr":"162.252.214.5","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"domain_registered":"2017-02-14","domain_rank":3069,"first_seen":"2017-04-03T03:11:30Z","last_seen":"2025-08-08T07:34:27.218554Z","alert_count":0,"request_count":1,"received_data":1789,"sent_data":446,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-08-13T15:14:14.224423Z","alert_count":0,"request_count":1,"received_data":17441,"sent_data":430,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.storageimagedisplay.com","ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2024-09-13","domain_rank":170153,"first_seen":"2024-09-13T12:56:32Z","last_seen":"2025-08-08T06:02:20.055218Z","alert_count":0,"request_count":2,"received_data":159604,"sent_data":964,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"4.adsco.re","ip":{"addr":"162.252.214.5","port":2087,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"domain_registered":"2017-02-14","domain_rank":95532,"first_seen":"2021-01-04T16:47:52Z","last_seen":"2025-08-08T16:22:36.451304Z","alert_count":0,"request_count":2,"received_data":862,"sent_data":853,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-08-13T15:10:36.82984Z","alert_count":0,"request_count":1,"received_data":40963,"sent_data":548,"comment":"","tags":null,"fingerprints":null},{"fqdn":"c.adsco.re","ip":{"addr":"104.17.166.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-02-14","domain_rank":100769,"first_seen":"2017-11-29T18:42:15Z","last_seen":"2025-08-08T07:34:27.696345Z","alert_count":0,"request_count":1,"received_data":79661,"sent_data":510,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"creative-sb1.com","ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-07-01","domain_rank":22211,"first_seen":"2025-08-08T09:32:32.509707Z","last_seen":"2025-08-08T09:32:32.509708Z","alert_count":0,"request_count":5,"received_data":217055,"sent_data":2321,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"skinnycrawlinglax.com","ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2024-09-01","domain_rank":38609,"first_seen":"2025-07-09T22:28:05.771371Z","last_seen":"2025-08-13T23:56:15.218302Z","alert_count":8,"request_count":8,"received_data":12317,"sent_data":7823,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"htiivw4vkrqr.l4.adsco.re","ip":{"addr":"185.200.118.62","port":443,"asn":9009,"as":"M247 Europe SRL","country":"United Kingdom","country_code":"GB"},"domain_registered":"2017-02-14","domain_rank":0,"first_seen":"2025-08-15T05:24:53.117604Z","last_seen":"2025-08-15T05:24:53.117604Z","alert_count":0,"request_count":1,"received_data":463,"sent_data":458,"comment":"","tags":null,"fingerprints":null},{"fqdn":"premiumvertising.com","ip":{"addr":"162.252.214.11","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"domain_registered":"2020-04-18","domain_rank":64798,"first_seen":"2020-04-19T20:30:46Z","last_seen":"2025-08-10T14:57:41.874057Z","alert_count":0,"request_count":1,"received_data":258,"sent_data":1748,"comment":"","tags":null,"fingerprints":null},{"fqdn":"preferencenail.com","ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-07-01","domain_rank":20606,"first_seen":"2025-07-08T12:55:47.271261Z","last_seen":"2025-08-12T21:41:35.260887Z","alert_count":0,"request_count":1,"received_data":85963,"sent_data":411,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"6.adsco.re","ip":{"addr":"104.17.167.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-02-14","domain_rank":91627,"first_seen":"2018-01-15T04:15:29Z","last_seen":"2025-08-08T07:34:27.280765Z","alert_count":0,"request_count":2,"received_data":995,"sent_data":853,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"compiledonatevanity.com","ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2023-06-18","domain_rank":813747,"first_seen":"2023-06-18T10:22:46Z","last_seen":"2025-08-08T22:49:50.555892Z","alert_count":1,"request_count":1,"received_data":73441,"sent_data":454,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"professionaltrafficmonitor.com","ip":{"addr":"18.159.236.121","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2025-01-23","domain_rank":16376,"first_seen":"2025-01-25T08:56:07.448138Z","last_seen":"2025-08-08T14:17:29.980479Z","alert_count":0,"request_count":2,"received_data":720,"sent_data":956,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.show-sb.com","ip":{"addr":"104.21.95.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-08-20","domain_rank":187612,"first_seen":"2024-08-31T03:46:04Z","last_seen":"2025-08-09T06:08:59.436853Z","alert_count":0,"request_count":1,"received_data":2096,"sent_data":492,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"static.cloudflareinsights.com","ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-08-30","domain_rank":4073,"first_seen":"2019-09-24T14:34:56Z","last_seen":"2025-08-13T15:50:47.0359Z","alert_count":0,"request_count":1,"received_data":20344,"sent_data":504,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"switchroms.io","ip":{"addr":"172.67.138.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-06-30","domain_rank":900326,"first_seen":"2025-05-28T10:03:17.369808Z","last_seen":"2025-08-02T19:44:59.436288Z","alert_count":0,"request_count":45,"received_data":3420641,"sent_data":22128,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Google AdSense","description":"Google AdSense is a program run by Google through which website publishers serve advertisements that are targeted to the site content and audience.","website":"https://www.google.com/adsense/start/","common_platform_enumeration":"","icon":"Google AdSense.svg","categories":["Advertising"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"jQuery:3.5.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"ShareThis","description":"ShareThis provides free engagement and growth tools (e.g., share buttons, follow buttons, and reaction buttons) for site owners.","website":"https://sharethis.com","common_platform_enumeration":"","icon":"ShareThis.png","categories":["Widgets"]},{"name":"WordPress:6.8.2","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"htiivw4vkrqr.s4.adsco.re","ip":{"addr":"185.200.116.60","port":443,"asn":9009,"as":"M247 Europe SRL","country":"Singapore","country_code":"SG"},"domain_registered":"2017-02-14","domain_rank":0,"first_seen":"2025-08-15T05:24:53.0992Z","last_seen":"2025-08-15T05:24:53.0992Z","alert_count":0,"request_count":1,"received_data":463,"sent_data":458,"comment":"","tags":null,"fingerprints":null},{"fqdn":"flushpersist.com","ip":{"addr":"192.243.59.13","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"domain_registered":"2025-07-01","domain_rank":23810,"first_seen":"2025-07-08T10:43:12.76905Z","last_seen":"2025-08-12T21:41:35.299966Z","alert_count":0,"request_count":1,"received_data":496,"sent_data":764,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.19.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-15T05:24:30Z","timestamp":1755235470,"ip_dst":{"addr":"185.200.118.90","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"United Kingdom","country_code":"GB"},"ip_src":{"addr":"172.18.0.20","port":39450,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-08-15T05:24:30.833642+0000\",\"flow_id\":1852117749774442,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":39450,\"dest_ip\":\"185.200.118.90\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-08-15T05:24:30.833642+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-15T05:24:30Z","timestamp":1755235470,"ip_dst":{"addr":"38.132.109.186","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.20","port":39450,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-08-15T05:24:30.853674+0000\",\"flow_id\":1239973240899242,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":39450,\"dest_ip\":\"38.132.109.186\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-08-15T05:24:30.853674+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-15T05:24:30Z","timestamp":1755235470,"ip_dst":{"addr":"185.200.116.90","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"172.18.0.20","port":39450,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-08-15T05:24:30.873723+0000\",\"flow_id\":1057372706329851,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":39450,\"dest_ip\":\"185.200.116.90\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-08-15T05:24:30.873723+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-15T05:24:30Z","timestamp":1755235470,"ip_dst":{"addr":"185.200.118.90","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"United Kingdom","country_code":"GB"},"ip_src":{"addr":"172.18.0.20","port":39450,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-08-15T05:24:30.933890+0000\",\"flow_id\":1852117749774442,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":39450,\"dest_ip\":\"185.200.118.90\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":2,\"pkts_toclient\":0,\"bytes_toserver\":124,\"bytes_toclient\":0,\"start\":\"2025-08-15T05:24:30.833642+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-15T05:24:30Z","timestamp":1755235470,"ip_dst":{"addr":"38.132.109.186","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.20","port":39450,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-08-15T05:24:30.953899+0000\",\"flow_id\":1239973240899242,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":39450,\"dest_ip\":\"38.132.109.186\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":2,\"pkts_toclient\":0,\"bytes_toserver\":124,\"bytes_toclient\":0,\"start\":\"2025-08-15T05:24:30.853674+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-15T05:24:30Z","timestamp":1755235470,"ip_dst":{"addr":"185.200.116.90","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"172.18.0.20","port":39450,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-08-15T05:24:30.974626+0000\",\"flow_id\":1057372706329851,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":39450,\"dest_ip\":\"185.200.116.90\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":2,\"pkts_toclient\":0,\"bytes_toserver\":124,\"bytes_toclient\":0,\"start\":\"2025-08-15T05:24:30.873723+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-15T05:24:31Z","timestamp":1755235471,"ip_dst":{"addr":"185.200.118.90","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"United Kingdom","country_code":"GB"},"ip_src":{"addr":"172.18.0.20","port":39450,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-08-15T05:24:31.134209+0000\",\"flow_id\":1852117749774442,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":39450,\"dest_ip\":\"185.200.118.90\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":3,\"pkts_toclient\":0,\"bytes_toserver\":186,\"bytes_toclient\":0,\"start\":\"2025-08-15T05:24:30.833642+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-15T05:24:31Z","timestamp":1755235471,"ip_dst":{"addr":"38.132.109.186","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.20","port":39450,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-08-15T05:24:31.154114+0000\",\"flow_id\":1239973240899242,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":39450,\"dest_ip\":\"38.132.109.186\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":3,\"pkts_toclient\":0,\"bytes_toserver\":186,\"bytes_toclient\":0,\"start\":\"2025-08-15T05:24:30.853674+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-15T05:24:31Z","timestamp":1755235471,"ip_dst":{"addr":"185.200.116.90","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"172.18.0.20","port":39450,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-08-15T05:24:31.174894+0000\",\"flow_id\":1057372706329851,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":39450,\"dest_ip\":\"185.200.116.90\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":3,\"pkts_toclient\":0,\"bytes_toserver\":186,\"bytes_toclient\":0,\"start\":\"2025-08-15T05:24:30.873723+0000\"}}"}]}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"switchroms.io/","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"172.67.138.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"eeeaa4fd6c2a688a6625905375e1250f","sha1":"db7a8b0238b5513585215d04c40482659893fb8d","sha256":"286674c8e0d2a6992c77f4bf67baf832898e463dbc7151121486e0e9269a03d1","sha512":"d9acce2147b787afc6f989255758530425acf23b81ad598e29f5b9cd6a84ae3b53ef7bc5d9cda675a53c99472e01db0cbc26ad01a92a0a9438aa5718da8dc2a5","ssdeep":"","tlshash":"09c08cc82b1e4cb081bb27000f3fb104b04932409c922c220c01230d6121c5b9714830","size":159,"data":"","first_seen":"2025-05-28T10:03:28.203396Z","last_seen":"2025-10-14T21:42:56.786514Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"172.67.138.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1b8dcf7a9a59f387aa5436eba04cf4e0","sha1":"614f3fb61c3cea651b695d50bea0af84d1f55034","sha256":"ca427a26f9de4ab5fc604f3a200b335a7e3fbf18c0ee75e80a8af61fb9e7ddca","sha512":"39bfb5878f8db6917053106ef3d9f53869759b8a3c09fd526aba1c023456fb20330a3a6cc9a1652ef40cd12de15f38ecb30c0210580eaaccb989e4ebf23713f7","ssdeep":"","tlshash":"1b61bade3775348b32b604d16a3f0e07fb7258361688d034cab6a7541cb1467d37ad5a","size":3384,"data":"","first_seen":"2025-07-15T23:49:10.573888Z","last_seen":"2025-09-15T23:15:45.376608Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"172.67.138.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7c90c024eb904b8b32b433501f60dd08","sha1":"01b3481bb5d71f8e83f12f1c0b3af3226c381937","sha256":"35efffc846388277769ba2c0303b5befb3017cce016c6377dd8090166532b9d3","sha512":"42a612e4e3d3b4203c6b5f9536b43239ac46623c46fff7867af0a4682c0726af2dbefbd4a2588bb797be5bf4a87ab8f816fa2c067fd2e2aa012614ffc95e7bea","ssdeep":"","tlshash":"80b0929576041f4aa2a41fd02420aa62a175627699b069016686d4808219e5a8d8c926","size":109,"data":"","first_seen":"2025-08-15T05:24:58.056828Z","last_seen":"2025-08-15T05:24:58.056828Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.adsco.re/","fqdn":"c.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"0baa53ba8a5ba5ee6833a629c3000d4e","sha1":"d5de057adc1eaa7888ca975199cf0a116b923aa0","sha256":"0679a036a8577f9592e070f780d06c6bb427a8f15f58008bdeaae2277ce607b4","sha512":"a7e5a993e1e12e7d73d98ab3834fb488a1e3ce361108f3f4583cde7e4454e97768303649ae9fa22bce7cce65aed74d081b69317f169c18dc49e8093ac4d3a60b","ssdeep":"768:dsmoTk+UwrAjMo3m4MSHRJtlgfWivYb7QL19/lw3mcIwT2vB03c9MZjyQoTHKePc:pok3m4bHRDuWWL19/lw3mcKJpAGPKmjo","tlshash":"81734ba97162702a43b238e9967f5311f1ba06902c4690d0d37dc8643c74edf927bb9e","size":78356,"data":"","first_seen":"2025-06-14T18:46:22.558225Z","last_seen":"2025-08-28T19:40:38.269373Z","times_seen":3673,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"172.67.138.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"41310478a380eaf7e07dbad9b4f81a97","sha1":"1714b6ef86e90b5b23e2aaa1e7728ed9c59f4d34","sha256":"848e5342d9196c0f64861ab926a3c5aecce9294750febbd22e5d8df859bdb144","sha512":"7b93f330547524ce01b8f888a8d56c19cd4432fbee43db16aab33fc1aecd77243762c5e7dd5ce767e38c0fdf9d58bc629caf106d77689c1ef90ebeb09406580e","ssdeep":"","tlshash":"d37000000000000b203c00020a023a003003003000880800820808302ae800b802c0a0","size":23,"data":"","first_seen":"2024-02-12T20:00:21Z","last_seen":"2026-03-06T11:55:01.500018Z","times_seen":19951,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"172.67.138.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"85478337a58cda8b9d1e6fbe8d762666","sha1":"4d7bc95caee2af778c776d526640a5143666e610","sha256":"441ea60a39058f4c59092dbcbe969b412930f4f62639454ad3dc10f40b9eb8ec","sha512":"9675b8dce71ec3bc0630b3bb73d66115200514279cde413c9eda6d8ff3a5321e391298be12f81906c1e1d9a893ef84f3029eb66d662d43788b81cce9612421b6","ssdeep":"","tlshash":"6eb0129479445f1aa1902fd634207e77b87036329834ac01778be1c4c11dd1c8c8c223","size":110,"data":"","first_seen":"2025-08-15T05:24:58.059537Z","last_seen":"2025-08-15T05:24:58.059537Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"172.67.138.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"13d976abc9bbe1bd38a2bd0a441121b7","sha1":"e75599d7a60b3726cc9cd3280e62b13205a12885","sha256":"def3ceb442d728aa05b2d5b1849416aac550f88ed1bd2625eeb12391e46b98f1","sha512":"bfbd949e611a39f1e5f62d5c375eebe34675a2838af08b27b3e97cc35b5c49204d391536871c00023fa1450a4c9fa27a25b4ca2d17849ea1163d40f4cb80a1c7","ssdeep":"","tlshash":"46b01235232e08e402c3038146500584343c23310403d89de80c752407cd831497b131","size":89,"data":"","first_seen":"2025-06-14T08:56:20.611635Z","last_seen":"2025-11-09T18:43:58.553973Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"172.67.138.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0ac7fe824fc01da2eae66c69cde47673","sha1":"12c7d2596939ad5d05162d227907c9bf707559b0","sha256":"c259f617c5131add5a2a6c588f31e278b6c9443eddfa2399888a0d786712f20c","sha512":"ac205048c8287ebdd4ed9d241173dbca2ec4ceca2963d3706bd6b3d824f31fe3f073295f4003bd848d56dc1aa3733bfea5e620e1ce168519bbc03e8ea6d0ebd0","ssdeep":"","tlshash":"899000020c0af08e0038a0ae3a0e3b002a022ba080028203bcca0238b8a8003a828080","size":49,"data":"","first_seen":"2024-05-15T22:21:34Z","last_seen":"2025-11-06T10:54:25.309926Z","times_seen":13689,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"172.67.138.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7c11ea5691335bb89c3a642ebdd2d916","sha1":"00287e6dcafa0eb61b95d0ed7cd2e7980cecc569","sha256":"034fbc9de61717f7169f7d8f4356b39b0185c1491be4cc455b7853c0af254353","sha512":"3b97bb3c9442bf244f81f1ea5529e8927f13ed17c0d3a6c506c04e4038aa12d64d2aa3e8ab2cd65237bb95047237e523fbcfd6b21061cd308fee874caa47681c","ssdeep":"","tlshash":"f8e07db6145980a7debb6258b44c8034f37cf276e387c55d9ddcc3d845be246524c428","size":335,"data":"","first_seen":"2025-07-02T17:59:11.464331Z","last_seen":"2025-09-15T23:15:45.380434Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"172.67.138.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"72742fd99106563a9f8b60ae65b239ef","sha1":"63b02fb346abe25f8f43aaeaff473e94ae7b1cd0","sha256":"c7126f63127f4d33e3d58e75142239802e398bad894ba503e3d2343548ae1108","sha512":"ff61b5626f24c5111fe10471a8e13af6cc2157c4854c2a8302e283f77bf02c201cbb9bbbf1525102d49369dbc44e0b616c52255a543af907160f8f2741b9d60f","ssdeep":"","tlshash":"e711962d3408b92d31b62cf450bfe905f46b01dd6e80a9d8e9ff98a00725c872613bdd","size":875,"data":"","first_seen":"2025-05-28T10:03:28.208172Z","last_seen":"2025-10-14T21:42:56.82141Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"172.67.138.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7d936f0d3e0535e2fa01aa05c9d1508f","sha1":"d20537b105615348981de83acaa439e771f719de","sha256":"ec4b3c7a9f6ffc2691c526ef4e11982138f47505bf1245a72284d5f2ea3a5139","sha512":"b652ddcaf495c6cbd1b4c6ad40996249f94b67922be2c86f6b265b31c364b60fec7647074f81ad90fc8e21efb5349a74dbd0f827d40b45fb5599b9c432ce45fb","ssdeep":"","tlshash":"3a9002114c06c08a0178608e3a1e3b0076012f5180020102bcc60138b454003a4060a0","size":49,"data":"","first_seen":"2024-05-15T22:21:34Z","last_seen":"2025-11-06T10:54:25.288429Z","times_seen":13737,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"172.67.138.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e73a77c9ab98d7464e194bf0ab3775a1","sha1":"8d161c514bc0dab827398cd35bd793d8a47b55a4","sha256":"02414734eac2b0fd1f62b39c4599782e0b5f9ad022943ab56f295ccb950c057e","sha512":"6404cb8f19b7a3017b211b9e4ec5733708e328d16fed3a5d9911f01b14ccbcab9dbab0532ea11079a8d6f33a9a0f9ac87e259c7590273d0e0f9210b645316266","ssdeep":"","tlshash":"15a00233f2c58c7e4031b08421793658f547013cc2905420be510830957704ba5040c4","size":65,"data":"","first_seen":"2023-03-08T02:59:51Z","last_seen":"2026-05-12T09:27:36.185398Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"172.67.138.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2a2781f9bb6302c2f96df0d1e96ef524","sha1":"796bb90146495848c0c479533c367edadb94f1a9","sha256":"1b60af0ce49d65e8b1006457c16883d60e53a0054bb157c57c3b03a82ee9964d","sha512":"7c1a1cfea1989a16c9dadbf97f8a1366ca416aea7ba2ef4f96c263e3cf02dc17f7bbb0fb3b61d4336c222fede676f3d177cbd48e76efc46230c1b61e92042f6a","ssdeep":"","tlshash":"cf900273f0c18c7e4031b14421793508b943011d8290502076450870973708ba5044c4","size":57,"data":"","first_seen":"2023-03-07T01:06:59Z","last_seen":"2026-05-13T13:09:16.935628Z","times_seen":30877,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"172.67.138.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"93128c282499b9ac18b63d0170ef3d44","sha1":"20a9c22e9546d49fc54c41ecbfa82880934f45f3","sha256":"f58ab76f9bc7003d1eaa68b8ca01bc723da2137cac1536511da193bd3062f86c","sha512":"7275c7fe7ca0a85191389c0c276f16c73ea59858c6af7268cc1c4a306755a35956ac72c4c8a7ba702c386eaa76ef38e871d50f0b18304dfd9ef1c75430a53f85","ssdeep":"","tlshash":"0d9000020c0ac08a003a208f3a0e3b002a02aba080020202bcea0238b8a8003aa08080","size":49,"data":"","first_seen":"2024-05-15T22:21:34Z","last_seen":"2025-11-06T10:54:25.290898Z","times_seen":13778,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"172.67.138.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-05-13T15:33:44.633997Z","times_seen":820193,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"172.67.138.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"aaf72876f0d5e8a677a383fd45bf938b","sha1":"d8b2ca3c238c933223f4a6313c5c0561f99e0c1c","sha256":"15eb7e222abfc64660d0f94c04053839498df20ea9ac9a13a201701a56ce3bf6","sha512":"c6bec20224539a5319a753a794c7521e7063e76b3d41bac8d7f0159880eaf3ed07c3fc1b0eb4ec285f1970f270f4b0ab68890d5a0ed01e3b1542102ad707f6d7","ssdeep":"","tlshash":"207000080820000820200802220322283822323022cc0002220a083022ea00b80282e2","size":24,"data":"","first_seen":"2023-03-07T01:03:03Z","last_seen":"2026-03-06T11:55:01.498128Z","times_seen":23956,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"172.67.138.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e969e6981adb7ab1cb174994a5c8c627","sha1":"5f534a259a6f3754d1d392028fd4cbb344fb6563","sha256":"5cb18f9c0eebf644c0bc27e5224177984121b4c4a3f8189861a6d797a15a2e7a","sha512":"10bbe815bb6e4ade10d00a42a82dd10b668e95e275161cb0a637b2ea95785f8f7fc72b31bb48ac9c1dfad03d811912c0683941a3c09357525f164915d5b033cf","ssdeep":"","tlshash":"a380000a88a8a0222a30a0228c020200202e822080ee208083f2032020c283c022b802","size":30,"data":"","first_seen":"2024-02-12T20:00:22Z","last_seen":"2026-03-06T11:55:01.514986Z","times_seen":20053,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"172.67.138.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-05-13T15:33:51.604764Z","times_seen":758568,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"compiledonatevanity.com/0e/53/6f/0e536fb8895c74d7dcf7b58fe63dae08.js","fqdn":"compiledonatevanity.com","domain":"compiledonatevanity.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d321562fbef61a7f0ecece1ae88e1491","sha1":"45cfca77a66af6049ee92adc1738d695f1b3775a","sha256":"4227d441bed20e9fee837a6bed21ff3c43e9a39b92197c54447443292934b047","sha512":"6d8c1e2ba25ea92d9ecddc94ab2cbd1bfe06d29334cf3c678c0cc17e720c65f863612c8a20ef340a88b87d87bff075d2147cd47b17b0bc5063f5e74efdabdc4f","ssdeep":"768:Y2bnYMmzoFqw648+QhS8u+Jcj/XcdNjNQmOdY08kUbTehzbcepw6f:Y2bnOv4x5O+jvc6dY0U3fE","tlshash":"4d63c7483f51b27802e6b8fa712fa61af0265c1195d8e0d8f503f4deae66719f036f25","size":72592,"data":"","first_seen":"2025-08-15T05:24:58.032909Z","last_seen":"2025-08-15T05:24:58.032909Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"172.67.138.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6dc0afc5aee21e3a2c7ba20fcbbc5502","sha1":"b0b548e52b180b7ac2fbac80962700dcd226b31f","sha256":"97e8f3fb205c8b155c8c6370121edddfad4baf9da50783c9b7efc9ed120bf41b","sha512":"e37b0c0f47dd7f5641a98b80cd68fa04f9b932dedd7d691399e0d04a47e75abc50fe62dee85ca735f2dc3c534869f8f8c1478afc9fcde9b91719665003f21a7b","ssdeep":"","tlshash":"819000022c2ac08a0038208e3b0e3b082a022fa080020202bcca0238f8a8803a808080","size":49,"data":"","first_seen":"2024-05-15T22:21:34Z","last_seen":"2025-11-06T10:54:25.308032Z","times_seen":13933,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"172.67.138.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"79e362235e366729632e60d6d35f8904","sha1":"69df1a1691b05442e11e2bc5825fc6297b977a92","sha256":"da82a56eb8524f5d12a2afcf2c5d0cb6184f26995167212a0ccb3bc2ba0def36","sha512":"94ca14ccb12238f547249a07134689257dd97639be34d7f466f52741df7176be982d88c5d294dd42a534a32d908533b5eaae33a13cb47ce0cf065d3098d9383d","ssdeep":"","tlshash":"fe60000000000c30000303000c30c3cc3c3f000030033030030c00000c00c003300c00","size":15,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-05-07T00:17:53.104166Z","times_seen":23612,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"172.67.138.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9aa3dc35f8ba994aa0f04a42c4da5062","sha1":"a65df79b7b70e8b8d22a2db929f6598428a827e0","sha256":"89e4c05e12e12f5bdf85a4fb89bad572dd85256091add09fdb9c6e42e703e2bb","sha512":"72ec1d5aaa34463f798b2d2c5976a6221f70e51ea2afff582319f4c8b7e31f4a67ef2a2d39427b4d1cc89ca66c4d4374db662c1137380ce0aad2acfcdbed4d6c","ssdeep":"","tlshash":"ec7000080000a0308808a002882ca3803c20a820b022a008080823080000a020008e0e","size":24,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-05-01T02:02:25.041668Z","times_seen":23255,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"172.67.138.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2a2781f9bb6302c2f96df0d1e96ef524","sha1":"796bb90146495848c0c479533c367edadb94f1a9","sha256":"1b60af0ce49d65e8b1006457c16883d60e53a0054bb157c57c3b03a82ee9964d","sha512":"7c1a1cfea1989a16c9dadbf97f8a1366ca416aea7ba2ef4f96c263e3cf02dc17f7bbb0fb3b61d4336c222fede676f3d177cbd48e76efc46230c1b61e92042f6a","ssdeep":"","tlshash":"cf900273f0c18c7e4031b14421793508b943011d8290502076450870973708ba5044c4","size":57,"data":"","first_seen":"2023-03-07T01:06:59Z","last_seen":"2026-05-13T13:09:16.935628Z","times_seen":30877,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"172.67.138.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2a2781f9bb6302c2f96df0d1e96ef524","sha1":"796bb90146495848c0c479533c367edadb94f1a9","sha256":"1b60af0ce49d65e8b1006457c16883d60e53a0054bb157c57c3b03a82ee9964d","sha512":"7c1a1cfea1989a16c9dadbf97f8a1366ca416aea7ba2ef4f96c263e3cf02dc17f7bbb0fb3b61d4336c222fede676f3d177cbd48e76efc46230c1b61e92042f6a","ssdeep":"","tlshash":"cf900273f0c18c7e4031b14421793508b943011d8290502076450870973708ba5044c4","size":57,"data":"","first_seen":"2023-03-07T01:06:59Z","last_seen":"2026-05-13T13:09:16.935628Z","times_seen":30877,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"172.67.138.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2a2781f9bb6302c2f96df0d1e96ef524","sha1":"796bb90146495848c0c479533c367edadb94f1a9","sha256":"1b60af0ce49d65e8b1006457c16883d60e53a0054bb157c57c3b03a82ee9964d","sha512":"7c1a1cfea1989a16c9dadbf97f8a1366ca416aea7ba2ef4f96c263e3cf02dc17f7bbb0fb3b61d4336c222fede676f3d177cbd48e76efc46230c1b61e92042f6a","ssdeep":"","tlshash":"cf900273f0c18c7e4031b14421793508b943011d8290502076450870973708ba5044c4","size":57,"data":"","first_seen":"2023-03-07T01:06:59Z","last_seen":"2026-05-13T13:09:16.935628Z","times_seen":30877,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"172.67.138.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2a2781f9bb6302c2f96df0d1e96ef524","sha1":"796bb90146495848c0c479533c367edadb94f1a9","sha256":"1b60af0ce49d65e8b1006457c16883d60e53a0054bb157c57c3b03a82ee9964d","sha512":"7c1a1cfea1989a16c9dadbf97f8a1366ca416aea7ba2ef4f96c263e3cf02dc17f7bbb0fb3b61d4336c222fede676f3d177cbd48e76efc46230c1b61e92042f6a","ssdeep":"","tlshash":"cf900273f0c18c7e4031b14421793508b943011d8290502076450870973708ba5044c4","size":57,"data":"","first_seen":"2023-03-07T01:06:59Z","last_seen":"2026-05-13T13:09:16.935628Z","times_seen":30877,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"172.67.138.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"2af183bd2b7db8b1b1e6197ded021a62","sha1":"09d0d354bd39907efd1d118cf3a22f9b254885f4","sha256":"526c9d85cebcd21526a3b7ffdb87a9c2b6229e00b0bf210634abf6c84e0ad143","sha512":"60c35a544f5dc0b1cd8308fd0fd5f6bcf6346949bb32aeea2d50949eaa1e50e2a163d749e2161d6bd101e59d81e9b7273932066bc7976da7f5e6f52dd8c79ac7","ssdeep":"","tlshash":"e570002a02e22288082020aa22800200000a8822800200a2028a32808002020030000c","size":22,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-03-05T06:09:00.943062Z","times_seen":13604,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"172.67.138.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2a2781f9bb6302c2f96df0d1e96ef524","sha1":"796bb90146495848c0c479533c367edadb94f1a9","sha256":"1b60af0ce49d65e8b1006457c16883d60e53a0054bb157c57c3b03a82ee9964d","sha512":"7c1a1cfea1989a16c9dadbf97f8a1366ca416aea7ba2ef4f96c263e3cf02dc17f7bbb0fb3b61d4336c222fede676f3d177cbd48e76efc46230c1b61e92042f6a","ssdeep":"","tlshash":"cf900273f0c18c7e4031b14421793508b943011d8290502076450870973708ba5044c4","size":57,"data":"","first_seen":"2023-03-07T01:06:59Z","last_seen":"2026-05-13T13:09:16.935628Z","times_seen":30877,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"172.67.138.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"7a837a4ba8ea13b8193945adf0261e19","sha1":"61428cd720ebc0f01c4c017204c313193c22c101","sha256":"28d9693460ce57dd4e01742e50a1baa10cbed3fa6c20c2a69f02424f80fb9a2e","sha512":"abe0e46d98027527a7d2567c4feaece7ad3c1ec94eed8fea59b9eec596cdd4fa39e7776e9dbc4dd6fe777d9b09300d45ba2a49fc9479e0acbdea92ebf5ef940f","ssdeep":"","tlshash":"516000000003c03300300300030f33000030003000030000000c00303003c03c0030c3","size":14,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-05-07T00:17:53.132399Z","times_seen":23261,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.adsco.re/#0.10518400987203047","fqdn":"c.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"104.17.166.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"77c8287be10ff4b66a8490ca4d999917","sha1":"7fccb364c5e22958503bcd8b92cdb648d5c4c96e","sha256":"c2d43195d015b5856873b3b0c6e717ee21599ca3f03f820b7c325f27b9b6a31d","sha512":"2007ec2f0297a0479f4507af110911f7022310f757533ba1bbd40228d9b26908758bc09afa59f09471cdc254e49b84baa61f80514a010195d288f8049dface07","ssdeep":"","tlshash":"e3f050ddb475e1e955d22580bd2fbf407876526e240361e0d20cbcc1041868e871dbca","size":486,"data":"","first_seen":"2023-03-07T01:03:03Z","last_seen":"2026-01-09T03:52:32.475699Z","times_seen":6630,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/ssp/interstitial/background_image/1/js/jquery-3.2.1.min.js","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e59a2e92b4756cc61e2e4f3082ee1360","sha1":"c96d002f642bd85adf1e5326bcc0679f9c3ee001","sha256":"42173a3ca70c715370ce99071f892ad61d3fee33dbf15426fa7eee549a4afca2","sha512":"94ab9f4e87fa268a76679ac3484952b84332bb01efb3bda37ec883310eea2536c7b5b50370553571d57beed05179749ba0bef6d53306896f2018ebd037c682a7","ssdeep":"1536:hLkR/QpfICJ5vJBQT6bTGw9S5HY6wm482+a02Yo+eKcGbp7E0bJy+jhklK4dy8Nj:hLkRNV48Ba02YowbCuyMSxtZxc9MuCx","tlshash":"8ac3518976e621319207f07a8d6fcc09b275544f1a8ded057d4c82a5af1883c97bafec","size":129575,"data":"","first_seen":"2023-03-08T15:21:31Z","last_seen":"2026-05-12T07:53:53.234019Z","times_seen":2135,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"premiumvertising.com/xgimmrpgakmfapc?XPCsyzYO=BQOCAAAAAAAACZUAAve-3eGWFAo-DMzQEGgn-_v_zU3SQnO3oEMGBmYtq3cNALBJWND_GDndE24rydzN7ihlekyQ9LAoUZ33orFhvyNJ-nRrZ_eggDdyHegJvqgKei4hn20bgD6IbjoiF5LWkJ2MVGj97aDFpNVrZo8MHWRRVgCh0fnmzbdAZBDEBDQ3-4RlIBoxGhI4KB9lKlQuNzucIbKQ7lWR6t4GK06xWHejJYO2id4PdodydEAn9FAMlpPM4CnRhK4pnXOIaooZhp9R3fqA6J5rmnuUuHJVaWItr_tfYwaj5S7d4z3irvBbppj5qv3uSGIuI3bY5nHApZwcwOPIufWJ-Tfj_DqNli782knCwlznxM6f0bwnwnPWte9Uyhq4D2XvOZadoaCf3GfiD3U4sx-5kYdvzuBnMrS9uoxQ8OHlw5Td9gLV2Ukf9t-3OIu3ql3atgZxkObTjimlpOCCvDU3lx1LjEFfDO0yYaV1OGo2AWWHJvRCkcWtXF6Pi2oEcrM9dJwM9AEM09mN6xVTw--A7i8Q68-yb9ZpQtToeLG-K2f78dL_wn8jabc05KyrJBtRhOT1SsdhtwE4c_CXu-0gRJpa0vGvLuz0tFZdllaUUYNp-ikg0prcgdjLr_b-KhhnLfEze5MMWBtESi2mrKO7cM4YkpbKustzyWF2ybiv-DaqUFaPOd7JxyyqUeK11bVatvwcZO6iwqQs3izDzSoiPmV_6Xl_-LPPGT8D8HMM6Anhj11JWH_DgArsHG3SWG4QEakSLaRCNEqd5Ap0iIi-80Cfznv0AtwNtrNF7ckvzWzBF0-HQH15JRYIAnPExf4mMl_kwpd8BxhKqtLI8G3TZhVO4YMIqrx6RusN-aeam4J4GnXLVerbzHPmXk4bU0io6Imu02TFr1ogy3G8b1ZVc9LXiJ6Nnilf0ory7S3AZ0MPBP8FyMAQq4Hp7NuPSJGcjS9mxgXe1I-2J2v8suKFoVh3lry-Fxu84SqhthK1ko9PGPWvs40YEFJkzyas4vW0jLhzhpwztQPtNa7hvzAVaiGMGzx0oQMdIvB1xDuap6tGXscyOXKRBoFVjtu0qQood1KgbQV7Nr3IH_v88Ynm2ow-XNYonn8nwiFMO20nT7yoG4Rs21aldEpGlVIzAIwjc8KqfGid4VQ0hhlqL9PnagkRXXRkhCG0T1CN6jXZHkCyU-53Y1Gz\u0026MeqFExun=4\u0026pjrROneW=5199727\u0026eUQxCjcy=\u0026DnZEhoTf=0,0\u0026hZLYCjNc=\u0026wSxiyEDq=\u0026mWjIxaEF=1280,1024,1,1280,1024,0","fqdn":"premiumvertising.com","domain":"premiumvertising.com","tld":"com"},"ip":{"addr":"162.252.214.11","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d5f0a25e4d3522d56d48ce7bc3e518fb","sha1":"86794caff58f7fee6e684c2ba7195f970a8d6f4c","sha256":"9d781128a8ece413b003d5612b8398bf9340ef7f5b751d12bd125ba523d3ceb5","sha512":"a3a81801f516a4eb11f00d6f56dab0ed4b8a79219e6b4f5436993479f09dae08f14cffbab3327ff66fb39201d8eba1153ae7114f7705a01cc6f0edf840ef1616","ssdeep":"","tlshash":"789002801814116115d1500b8d5159d01259b1a4540801324446ca502dc7883a415774","size":44,"data":"","first_seen":"2023-03-07T01:17:45Z","last_seen":"2026-05-13T12:02:09.9987Z","times_seen":23926,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"55f0bb61c532bf5e2c1d05eefb2b95d8","sha1":"866c177be23a50fd0c1d09e58ea69028501b6d47","sha256":"334c3c800bcacefa9f4fecfc696cfefefcf63e61dd9c21566f5123f08ee72888","sha512":"9de7c966390a19203bc25e5ccbf6819f287263139854cdf6dbd06b540a72284250df9d52484bc7541495b260ee5c0128dedb57c033dfc9129e6a03b9a7c32502","ssdeep":"","tlshash":"d2014e27101b477ec36ff451ab4662cfabac01dd9516434ef038265b3eb0a2a37d25b6","size":817,"data":"","first_seen":"2025-08-08T22:49:55.23506Z","last_seen":"2025-09-06T15:40:28.49218Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"172.67.138.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"11f931d7c00e281ce733fcd5de9d12be","sha1":"ffe2b886a8ec4a00c0f5059bf8efda65011ed581","sha256":"23855ebdf4d2b49dabc8ddbb38f5d520b1970d56e4d9763b480f0994084edc9c","sha512":"c536220ebc42aafe49f0dadba1a8f8d55f5b48beae77fb66d88b2598023c74e7568d068b968140c7928b826e23c5c4d45bbf219130de631b4c0ec72c7ded8505","ssdeep":"96:iwPJXTzvhtRcCwBZB2waALtlavMh4jvnV60IHC803dexHZMBGIqkj8SNeR:0pxVhlavvjvV60IxiGMjGR","tlshash":"76a1ba2421be375c86d3047215bfc446e6e53e95392bec87c0835ca036b3a573e679ab","size":5053,"data":"","first_seen":"2025-07-02T17:59:11.469024Z","last_seen":"2025-09-15T23:15:45.384733Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"172.67.138.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d720eef71edef78b948a643d5712ec07","sha1":"ea5eb334bd6ddb0f04abafb700dc2ecb30070c76","sha256":"2daa1a91b2430e9867296c9cb26d1483785954a9bdd66f79b2c754bab7092cae","sha512":"63368ff1fef849df7f849af23bc2f24698893bd3d58300282427a76665b2d5c94f097d409f93173ad9c36944b4fffc2e37fa03a91f81e4e04f3737f9b73d2d6f","ssdeep":"","tlshash":"5f6000c00000c00c0000ccc3c00300c030000030c0cc3c0003003c3300cf00ccc00033","size":15,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-03-06T11:55:01.51255Z","times_seen":24260,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/wp-content/plugins/ads-invalid-click-protection/assets/js/script.js","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"172.67.138.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cf993f1eb33414d944c0ef64b88793f7","sha1":"730920330837195909462c0c6d1e90a043682f94","sha256":"e1f54d706d5fdd894d42fe93b32eaaf506f686a1f9630e5acf87562da3c62668","sha512":"7e51292494153b09f412fc91f4b2cc4b64f21db0f9dc1938b43bad6e33c0c99bbf4431a007628fb5bcbcde919e9ed6a64182cca2db61a5bf71e8dcebe82f2036","ssdeep":"","tlshash":"cb41cf89b18d102d63d2239076bf4b497c38aa30264092bdd2ddd9d47e38d366a53cb7","size":2060,"data":"","first_seen":"2023-03-09T23:32:46Z","last_seen":"2026-04-16T22:24:47.01538Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/wp-content/plugins/gioi-han-ads/js/check_min.js?ver=6.8.2","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"172.67.138.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ab8a3638e8f419c7fda2bdd605f2a59e","sha1":"8354da44e01c9ed2b00dd6c0c108fc1ccefa92fa","sha256":"deaf971a839013e15b3917c3256b6e19f036bc569b72312da9526adcecf5d5e0","sha512":"322e5fa3ec94061ce9c16f284bbaaf922d48cbe039db0851695b5c9f4fb636586c3c7940e134818eeefd7c89fe3538b37dff1f46a2bec515095ff111cfd35f05","ssdeep":"384:KMfx9H8MkxxsskxVfGYdQaM/IUbZtS0SjGd6SxOD9uf4c7+:KMfx9H8Mkxxfkx1GYMFS0SSsSO9TS+","tlshash":"c152e77830a2117b80fb717578afa24e737399367143e4d1d0e8f168267dd266a22f1e","size":13588,"data":"","first_seen":"2023-03-07T12:04:15Z","last_seen":"2026-04-30T20:57:55.629556Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"172.67.138.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2a2781f9bb6302c2f96df0d1e96ef524","sha1":"796bb90146495848c0c479533c367edadb94f1a9","sha256":"1b60af0ce49d65e8b1006457c16883d60e53a0054bb157c57c3b03a82ee9964d","sha512":"7c1a1cfea1989a16c9dadbf97f8a1366ca416aea7ba2ef4f96c263e3cf02dc17f7bbb0fb3b61d4336c222fede676f3d177cbd48e76efc46230c1b61e92042f6a","ssdeep":"","tlshash":"cf900273f0c18c7e4031b14421793508b943011d8290502076450870973708ba5044c4","size":57,"data":"","first_seen":"2023-03-07T01:06:59Z","last_seen":"2026-05-13T13:09:16.935628Z","times_seen":30877,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"172.67.138.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2a2781f9bb6302c2f96df0d1e96ef524","sha1":"796bb90146495848c0c479533c367edadb94f1a9","sha256":"1b60af0ce49d65e8b1006457c16883d60e53a0054bb157c57c3b03a82ee9964d","sha512":"7c1a1cfea1989a16c9dadbf97f8a1366ca416aea7ba2ef4f96c263e3cf02dc17f7bbb0fb3b61d4336c222fede676f3d177cbd48e76efc46230c1b61e92042f6a","ssdeep":"","tlshash":"cf900273f0c18c7e4031b14421793508b943011d8290502076450870973708ba5044c4","size":57,"data":"","first_seen":"2023-03-07T01:06:59Z","last_seen":"2026-05-13T13:09:16.935628Z","times_seen":30877,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"172.67.138.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"265fbd04531d9cf5fd767b4e3149a5d1","sha1":"9df7368252b2b411d8472e2a6cc46fd5557ac415","sha256":"1b5a1da3648fc66667a67e766f23683675655e69a2f5186d65e750c7af80fa01","sha512":"c66a183c6e2dcabfedf54ccf42ca70a8cb2f9fde6fdfabfcb8ce20dc684821ce10b7892a940f459cc41c7462c97300aa740eecc1a38638845d159c684c9b036a","ssdeep":"","tlshash":"cb9000020c0ac08a003a208e3a0e3b022a2a2ba080020202bcca023ab8a8003aa28080","size":49,"data":"","first_seen":"2024-05-15T22:21:34Z","last_seen":"2025-11-06T10:54:25.308656Z","times_seen":13860,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"172.67.138.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"3fb8e8dbd2d033cb0ceb6ed631a8950f","sha1":"e4c9d4bd6dbf35e16f83d201abfb798a882ff4c5","sha256":"ccc3e35759be6cea4dfa36189baf0c06b9cee69219ebfb6cf62da67eb2d08097","sha512":"ecd40ce354446cc223df75a29fec7d213bc650201c50f493a8cfc6add9aeb40108c0606595ceebdbc73ba2e506a502b40b072710d515015f0f04e0e422a30f54","ssdeep":"","tlshash":"c811cca70b4a84df4ae525c71d3f66820cf4ab634e89e0e40791f843d9e5be191eaf14","size":916,"data":"","first_seen":"2025-07-02T17:59:11.465011Z","last_seen":"2025-09-15T23:15:45.385937Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"172.67.138.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"fb440b8133f21c3e5d3e39624e7bda94","sha1":"1b46d8568f9bd8a2be944d6a61924a21ec0b6e4f","sha256":"a5e2bc908c3bd3196d273564d073484f9905d13817490eca5aa249e701139cdc","sha512":"f874692932aab2be754d763a3998c5cd3c654a5bcd78c5d839fe0ba506f9a9e563d3cecba0ca71a6b0db35ff94943f6fa8bb0292f10c1aeb7df2704ea6d85fbf","ssdeep":"","tlshash":"047000000000000820200802220322083822223002cc0002220a083022ea00b80282a0","size":20,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-05-07T00:17:53.1035Z","times_seen":24312,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"172.67.138.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2a2781f9bb6302c2f96df0d1e96ef524","sha1":"796bb90146495848c0c479533c367edadb94f1a9","sha256":"1b60af0ce49d65e8b1006457c16883d60e53a0054bb157c57c3b03a82ee9964d","sha512":"7c1a1cfea1989a16c9dadbf97f8a1366ca416aea7ba2ef4f96c263e3cf02dc17f7bbb0fb3b61d4336c222fede676f3d177cbd48e76efc46230c1b61e92042f6a","ssdeep":"","tlshash":"cf900273f0c18c7e4031b14421793508b943011d8290502076450870973708ba5044c4","size":57,"data":"","first_seen":"2023-03-07T01:06:59Z","last_seen":"2026-05-13T13:09:16.935628Z","times_seen":30877,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"172.67.138.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ab3b4884408bb0261d6b56a7d288fe80","sha1":"b0f370141ada9b591302b575434c255db51ae151","sha256":"e5a13721b456c9e090f80944728fc91767f5ae01b01f59160e73ff2c7cacc587","sha512":"e57cb5cdac6519a8a24e85d5d91f2c6492e282308a94d369619e9455cef8f22a2a6abd62023647fbfa0228b6d3e12da22c280d691cd351608aada9c284ca3a66","ssdeep":"","tlshash":"6c80008ea0803232a2fa02038a822200a2af38ea88008820000a0200288030f232ac8a","size":26,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-05-01T02:02:24.975662Z","times_seen":23030,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"172.67.138.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2a2781f9bb6302c2f96df0d1e96ef524","sha1":"796bb90146495848c0c479533c367edadb94f1a9","sha256":"1b60af0ce49d65e8b1006457c16883d60e53a0054bb157c57c3b03a82ee9964d","sha512":"7c1a1cfea1989a16c9dadbf97f8a1366ca416aea7ba2ef4f96c263e3cf02dc17f7bbb0fb3b61d4336c222fede676f3d177cbd48e76efc46230c1b61e92042f6a","ssdeep":"","tlshash":"cf900273f0c18c7e4031b14421793508b943011d8290502076450870973708ba5044c4","size":57,"data":"","first_seen":"2023-03-07T01:06:59Z","last_seen":"2026-05-13T13:09:16.935628Z","times_seen":30877,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"172.67.138.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2a2781f9bb6302c2f96df0d1e96ef524","sha1":"796bb90146495848c0c479533c367edadb94f1a9","sha256":"1b60af0ce49d65e8b1006457c16883d60e53a0054bb157c57c3b03a82ee9964d","sha512":"7c1a1cfea1989a16c9dadbf97f8a1366ca416aea7ba2ef4f96c263e3cf02dc17f7bbb0fb3b61d4336c222fede676f3d177cbd48e76efc46230c1b61e92042f6a","ssdeep":"","tlshash":"cf900273f0c18c7e4031b14421793508b943011d8290502076450870973708ba5044c4","size":57,"data":"","first_seen":"2023-03-07T01:06:59Z","last_seen":"2026-05-13T13:09:16.935628Z","times_seen":30877,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/wp-content/plugins/gioi-han-ads/js/updateclicks.js?ver=6.8.2","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"172.67.138.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"43c8dd10c6bae4efd3bbb0f2041f7ce5","sha1":"5ec6a73f768a272643734b791d6d86407d53d9c4","sha256":"94034a75027b217a0f3fdfb41f799a60ae88425a7b0e69bf5d9c4c8ce73ff1b7","sha512":"62aa9254aa753ae185392951c9b5edf302ab27802eb69735b3b0299aefa2c51c6f753575d229d10381307962c8390ed1423104f851d89bb79ccb168e08fea91e","ssdeep":"","tlshash":"a09002089742a55b27a0145edd4584e9495aaa1307951174d27449426107118d27c144","size":52,"data":"","first_seen":"2023-03-07T12:04:15Z","last_seen":"2026-04-30T20:57:55.69528Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"172.67.138.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2a2781f9bb6302c2f96df0d1e96ef524","sha1":"796bb90146495848c0c479533c367edadb94f1a9","sha256":"1b60af0ce49d65e8b1006457c16883d60e53a0054bb157c57c3b03a82ee9964d","sha512":"7c1a1cfea1989a16c9dadbf97f8a1366ca416aea7ba2ef4f96c263e3cf02dc17f7bbb0fb3b61d4336c222fede676f3d177cbd48e76efc46230c1b61e92042f6a","ssdeep":"","tlshash":"cf900273f0c18c7e4031b14421793508b943011d8290502076450870973708ba5044c4","size":57,"data":"","first_seen":"2023-03-07T01:06:59Z","last_seen":"2026-05-13T13:09:16.935628Z","times_seen":30877,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"172.67.138.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2a2781f9bb6302c2f96df0d1e96ef524","sha1":"796bb90146495848c0c479533c367edadb94f1a9","sha256":"1b60af0ce49d65e8b1006457c16883d60e53a0054bb157c57c3b03a82ee9964d","sha512":"7c1a1cfea1989a16c9dadbf97f8a1366ca416aea7ba2ef4f96c263e3cf02dc17f7bbb0fb3b61d4336c222fede676f3d177cbd48e76efc46230c1b61e92042f6a","ssdeep":"","tlshash":"cf900273f0c18c7e4031b14421793508b943011d8290502076450870973708ba5044c4","size":57,"data":"","first_seen":"2023-03-07T01:06:59Z","last_seen":"2026-05-13T13:09:16.935628Z","times_seen":30877,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"172.67.138.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2a2781f9bb6302c2f96df0d1e96ef524","sha1":"796bb90146495848c0c479533c367edadb94f1a9","sha256":"1b60af0ce49d65e8b1006457c16883d60e53a0054bb157c57c3b03a82ee9964d","sha512":"7c1a1cfea1989a16c9dadbf97f8a1366ca416aea7ba2ef4f96c263e3cf02dc17f7bbb0fb3b61d4336c222fede676f3d177cbd48e76efc46230c1b61e92042f6a","ssdeep":"","tlshash":"cf900273f0c18c7e4031b14421793508b943011d8290502076450870973708ba5044c4","size":57,"data":"","first_seen":"2023-03-07T01:06:59Z","last_seen":"2026-05-13T13:09:16.935628Z","times_seen":30877,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"172.67.138.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2a2781f9bb6302c2f96df0d1e96ef524","sha1":"796bb90146495848c0c479533c367edadb94f1a9","sha256":"1b60af0ce49d65e8b1006457c16883d60e53a0054bb157c57c3b03a82ee9964d","sha512":"7c1a1cfea1989a16c9dadbf97f8a1366ca416aea7ba2ef4f96c263e3cf02dc17f7bbb0fb3b61d4336c222fede676f3d177cbd48e76efc46230c1b61e92042f6a","ssdeep":"","tlshash":"cf900273f0c18c7e4031b14421793508b943011d8290502076450870973708ba5044c4","size":57,"data":"","first_seen":"2023-03-07T01:06:59Z","last_seen":"2026-05-13T13:09:16.935628Z","times_seen":30877,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"172.67.138.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2a2781f9bb6302c2f96df0d1e96ef524","sha1":"796bb90146495848c0c479533c367edadb94f1a9","sha256":"1b60af0ce49d65e8b1006457c16883d60e53a0054bb157c57c3b03a82ee9964d","sha512":"7c1a1cfea1989a16c9dadbf97f8a1366ca416aea7ba2ef4f96c263e3cf02dc17f7bbb0fb3b61d4336c222fede676f3d177cbd48e76efc46230c1b61e92042f6a","ssdeep":"","tlshash":"cf900273f0c18c7e4031b14421793508b943011d8290502076450870973708ba5044c4","size":57,"data":"","first_seen":"2023-03-07T01:06:59Z","last_seen":"2026-05-13T13:09:16.935628Z","times_seen":30877,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"172.67.138.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d9f9b0f82813d813afe0d450e9fab4d6","sha1":"cb6ce93dd97adc3649f697ff49681f5aaf8b1671","sha256":"d204422e9d49293ab422bfabae9607635876cb30f77215f133603bac691f6f4b","sha512":"849997b396eb218b8bbc788eeb34ec3eb9ab4c809a07ac707a57a5e13baabb69d2c52795403d032f007276109c7f4476daa8255550fa236873e1eb9ba6dba3ba","ssdeep":"","tlshash":"706000c20008802002c200028820a2802832008a20022000c00800000000a0c0222808","size":17,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-05-01T02:02:24.983731Z","times_seen":23638,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/wp-content/plugins/gioi-han-ads/js/checkclicks.js?ver=6.8.2","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"172.67.138.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"973a020ce262cc5bf9af40d40bbb0b36","sha1":"e14dc4c73ba1c3c694ccd6aba9ca25190d970074","sha256":"0df963c9efbf64868ab3312f0ba278b13bf97b69c9b9eae2f9399b922ad07525","sha512":"a93941948a8410ef88d57ae2f777a5a8c84aed2fc5a14f6b1f769dff29a13455b198fc63bd45953eacf648631729704c228a7be15c33aa6048af295e909eddcf","ssdeep":"","tlshash":"c19002058682e54b2b911459dd0484f9454a961306540108c2704d407107058d378004","size":49,"data":"","first_seen":"2023-03-07T12:04:15Z","last_seen":"2026-04-30T20:57:55.694365Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"172.67.138.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2a2781f9bb6302c2f96df0d1e96ef524","sha1":"796bb90146495848c0c479533c367edadb94f1a9","sha256":"1b60af0ce49d65e8b1006457c16883d60e53a0054bb157c57c3b03a82ee9964d","sha512":"7c1a1cfea1989a16c9dadbf97f8a1366ca416aea7ba2ef4f96c263e3cf02dc17f7bbb0fb3b61d4336c222fede676f3d177cbd48e76efc46230c1b61e92042f6a","ssdeep":"","tlshash":"cf900273f0c18c7e4031b14421793508b943011d8290502076450870973708ba5044c4","size":57,"data":"","first_seen":"2023-03-07T01:06:59Z","last_seen":"2026-05-13T13:09:16.935628Z","times_seen":30877,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"switchroms.io/wp-content/uploads/2024/03/Nintendo_Switch_logo.png","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"172.67.138.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switchroms.io/","date":"2025-08-15T05:24:29.936Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switchroms.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Jul 2025 02:18:55 GMT","end":"Wed, 08 Oct 2025 03:16:37 GMT"},"fingerprint":{"sha1":"9E:06:45:DB:7D:57:B4:C8:F6:AB:A6:53:8B:13:60:8F:FE:E8:08:C8","sha256":"93:C8:B1:DF:8F:F6:9F:7A:C0:58:BA:2C:97:3F:85:8E:05:96:03:F3:81:DB:A9:4A:BE:77:39:85:FE:D7:0F:13"}}},"request":{"raw":"GET /wp-content/uploads/2024/03/Nintendo_Switch_logo.png HTTP/1.1\r\nHost: switchroms.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://switchroms.io/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_5488P24RVQ=GS2.1.s1755235469$o1$g0$t1755235469$j60$l0$h0; _ga=GA1.1.1220748367.1755235470\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 15 Aug 2025 05:24:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 4178\r\nlast-modified: Mon, 18 Mar 2024 08:03:01 GMT\r\netag: \"65f7f535-1052\"\r\nserver: cloudflare\r\nx-content-type-options: \"nosniff\" always\r\nx-xss-protection: \"1; mode=block\" always\r\nstrict-transport-security: \"max-age=31536000; includeSubDomains; preload\" always\r\nreferrer-policy: no-referrer-when-downgrade\r\nexpires: Wed, 12 Aug 2026 01:21:42 GMT\r\ncache-control: public, max-age=31536000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\naccept-ranges: bytes\r\nage: 273767\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XjmnUYw%2F6ZC25Ib1K6P3u28Zxa4OacUn66qIX1RYOiMlJYNEEzgRwSlb8CisUJiMIBueohYB6lPEVaRivFSsKnbcOG0CKsKi9%2FKx\"}]}\r\nvary: accept-encoding\r\ncf-ray: 96f644171e68b4f7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4178,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 240, 8-bit colormap, non-interlaced","md5":"31af029cbfcfe873150af21ee4f1420e","sha1":"a7008c3599f28617dc3ca9e1736349a330abb4c9","sha256":"e2d45db6614cd6523b8eadc629340a4110eb0025971ba53c294b84e435028888","sha512":"24ef2d30942ba4ca3f7693fff21c9354710e56bd1f426801da38f539162ac45f2cd1d40d7bed4e2cdf7fa770a6bd0a75a28422e6f8c62cc5df44de78987e22f8","ssdeep":"96:oNGhPc3gsCo8qq6dV2A8uGXLTRVzIPJFjsx2yP3zvvVM:nF/+5dV18uGvfIPJFjalM","tlshash":"16817fc641527484c677018dcf6382d6eff0e30d7914574954da989b2b063e96accf82","first_seen":"2024-08-22T17:21:44.341781Z","last_seen":"2026-01-26T03:36:30.110757Z","times_seen":28,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/ssp/interstitial/background_image/1/js/jquery-3.2.1.min.js","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://switchroms.io/","date":"2025-08-15T05:24:31.964Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Jul 2025 14:01:22 GMT","end":"Mon, 29 Sep 2025 14:59:36 GMT"},"fingerprint":{"sha1":"CD:76:E0:2A:28:09:08:24:2D:4C:A1:14:B2:AE:6C:39:A4:CC:2F:6B","sha256":"8B:98:84:C0:8D:47:7C:1B:A7:26:4B:E4:9E:6E:FD:8E:E1:6D:6E:41:1D:E7:91:B7:70:A3:C1:D0:C0:85:6B:31"}}},"request":{"raw":"GET /sb/ssp/interstitial/background_image/1/js/jquery-3.2.1.min.js HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 05:24:31 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 09 Oct 2023 10:29:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5z4fJ6i60Gbte3B1gq6dZTJwQbKSD3o738Lpxd0mbBN2OUq%2FiI0CDU359NV%2BPQ3nUx4uXcC1XUyGZS69nj2e0aDFajnaXz9hQdxqWtqZ\"}]}\r\nage: 591863\r\ncf-cache-status: HIT\r\netag: W/\"6523d623-1fa27\"\r\ncontent-encoding: br\r\ncf-ray: 96f64423bdc77129-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":129575,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (745)","md5":"e59a2e92b4756cc61e2e4f3082ee1360","sha1":"c96d002f642bd85adf1e5326bcc0679f9c3ee001","sha256":"42173a3ca70c715370ce99071f892ad61d3fee33dbf15426fa7eee549a4afca2","sha512":"94ab9f4e87fa268a76679ac3484952b84332bb01efb3bda37ec883310eea2536c7b5b50370553571d57beed05179749ba0bef6d53306896f2018ebd037c682a7","ssdeep":"1536:hLkR/QpfICJ5vJBQT6bTGw9S5HY6wm482+a02Yo+eKcGbp7E0bJy+jhklK4dy8Nj:hLkRNV48Ba02YowbCuyMSxtZxc9MuCx","tlshash":"8ac3518976e621319207f07a8d6fcc09b275544f1a8ded057d4c82a5af1883c97bafec","first_seen":"2023-03-08T15:21:31Z","last_seen":"2026-05-12T07:53:53.234019Z","times_seen":2135,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/wp-content/themes/switch/style.css?ver=1.0.3","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"172.67.138.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://switchroms.io/","date":"2025-08-15T05:24:28.917Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switchroms.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Jul 2025 02:18:55 GMT","end":"Wed, 08 Oct 2025 03:16:37 GMT"},"fingerprint":{"sha1":"9E:06:45:DB:7D:57:B4:C8:F6:AB:A6:53:8B:13:60:8F:FE:E8:08:C8","sha256":"93:C8:B1:DF:8F:F6:9F:7A:C0:58:BA:2C:97:3F:85:8E:05:96:03:F3:81:DB:A9:4A:BE:77:39:85:FE:D7:0F:13"}}},"request":{"raw":"GET /wp-content/themes/switch/style.css?ver=1.0.3 HTTP/1.1\r\nHost: switchroms.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://switchroms.io/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 05:24:28 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 23 Mar 2025 06:50:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67dfaf28-cc23\"\r\nserver: cloudflare\r\nx-content-type-options: \"nosniff\" always\r\nx-xss-protection: \"1; mode=block\" always\r\nstrict-transport-security: \"max-age=31536000; includeSubDomains; preload\" always\r\nreferrer-policy: no-referrer-when-downgrade\r\nexpires: Wed, 08 Jul 2026 13:35:51 GMT\r\ncache-control: public, max-age=31536000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\ncontent-encoding: gzip\r\nage: 3253717\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T4YHY6zK7ILKQV%2F7IfZGfOD1ysY3c8fZCYg5vepQGPs0tCknH4p2ZpUWVrr0RSmBdKWDC5VgQFx%2BCefO4ZYM0d9%2B0i%2B%2BVR77%2F%2BUp\"}]}\r\ncf-ray: 96f644107ee556c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":52259,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, ASCII text","md5":"032974f80c5339127e2c2a88764ed4d9","sha1":"d85061be9458822438adfbd88e934d8a9e1cc3b3","sha256":"37b1ca4e6992a3e7253d5f4e60549ca8e5d6594da6e3d01ca0e13c19e29c4393","sha512":"d81b0e8e205496fc54f00a95afea49420ab594420ba0b2d0cde59cd405b21642f9a92905d7868ab25fc9a3f6aa383fda1226a24d1e1edf7998786312cc8b1cca","ssdeep":"768:KRFgFEFoIlsmHFo0g7GFKwtUbqWb8MgEegW3glBhcrfgdGij5CTi/rvi7HXjtS5R:KRKquI+dG1i/rgHXjtSeX6urW","tlshash":"7a33a6666b402801e31f0678ef59ffe4561d4566ce0f8efae891b92cc3c969502f2f49","first_seen":"2025-04-14T02:23:47.153184Z","last_seen":"2026-01-26T03:36:30.101653Z","times_seen":22,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/ssp/interstitial/background_image/1/img/close.svg","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switchroms.io/","date":"2025-08-15T05:24:31.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Jul 2025 14:01:22 GMT","end":"Mon, 29 Sep 2025 14:59:36 GMT"},"fingerprint":{"sha1":"CD:76:E0:2A:28:09:08:24:2D:4C:A1:14:B2:AE:6C:39:A4:CC:2F:6B","sha256":"8B:98:84:C0:8D:47:7C:1B:A7:26:4B:E4:9E:6E:FD:8E:E1:6D:6E:41:1D:E7:91:B7:70:A3:C1:D0:C0:85:6B:31"}}},"request":{"raw":"GET /sb/ssp/interstitial/background_image/1/img/close.svg HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 05:24:31 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Mon, 09 Oct 2023 10:29:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ibJzBY1tBg3jUVF0eRBEcgkGYS0yFMCo7ozKegexUD4xPFoMpqLvQxh7aRhPJq5BYq6FNM7thH%2BvEZyFw0DCWzRZTyk3O6HUyugRub2M\"}]}\r\nage: 591864\r\ncf-cache-status: HIT\r\netag: W/\"6523d621-4ff\"\r\ncontent-encoding: br\r\ncf-ray: 96f64423bdbe7129-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1279,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"369850b9873659adf0951d845f57dba1","sha1":"a64257186daa33b6b318943a457b6cf8d80b26b6","sha256":"9630c142a8c074cc1809ebf4109538cf29cc0baeb6c27726191f1cf5376e2e21","sha512":"6441b40e85c86e21362c7061a6b9610f52a5c801b274b246711546ad45c68c3e7f2f242f1621b90967eaeebf52709545d06283c2015d6b9ad7f6f7d37fb14a88","ssdeep":"","tlshash":"6821d8dc958f223ef324ff6189b316606ba423f6bb18c5bcb199a8157e1cb910c48e14","first_seen":"2023-04-07T22:39:47Z","last_seen":"2026-05-13T12:48:37.621044Z","times_seen":9248,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fssp%2Finterstitial%2Fbackground_image%2F1%2Fcss%2Fanimate.css\u0026l=79249\u0026fd=583","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switchroms.io/","date":"2025-08-15T05:24:32.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 22:21:33 GMT","end":"Fri, 26 Sep 2025 22:21:32 GMT"},"fingerprint":{"sha1":"4A:6A:48:C8:5B:C5:2B:2E:9C:03:AF:BF:4C:E6:10:23:E2:7B:EA:97","sha256":"A8:42:B5:4A:20:C8:13:EF:B5:90:0F:54:37:F7:05:60:8D:91:07:E3:A4:0F:7A:22:C9:AF:F1:F5:22:E8:68:C9"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fssp%2Finterstitial%2Fbackground_image%2F1%2Fcss%2Fanimate.css\u0026l=79249\u0026fd=583 HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchroms.io/\r\nCookie: uid_id2=62f0fc5a-aa7f-4636-8af5-6a014c9884e2:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl26551100=1; slec0e536fb8895c74d7dcf7b58fe63dae08=[6073101]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Fri, 15 Aug 2025 05:24:32 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T15:33:13.162002Z","times_seen":15117490,"resource_available":true,"data":null}},"time_used":666,"timings":{"blocked":286,"dns":1,"connect":93,"send":0,"wait":94,"receive":0,"ssl":189},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-15","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://switchroms.io/","date":"2025-08-15T05:24:29.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"DF:A1:DB:1F:BC:5E:31:D7:F8:FE:26:E3:B9:B3:02:98:B1:C8:50:EC","sha256":"A2:57:20:B6:AE:46:89:B9:39:C7:57:9B:1E:43:96:E3:5A:BC:7E:3F:1D:18:10:34:CC:53:3D:DB:78:4E:5C:21"}}},"request":{"raw":"GET /ajax/libs/jquery/3.5.1/jquery.min.js HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchroms.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nreport-to: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 31021\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 13 Aug 2025 11:53:05 GMT\r\nexpires: Thu, 13 Aug 2026 11:53:05 GMT\r\ncache-control: public, max-age=31536000, stale-while-revalidate=2592000\r\nage: 149484\r\nlast-modified: Fri, 08 May 2020 07:05:03 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":89476,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"dc5e7f18c8d36ac1d3d4753a87c98d0a","sha1":"c8e1c8b386dc5b7a9184c763c88d19a346eb3342","sha256":"f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d","sha512":"6cb4f4426f559c06190df97229c05a436820d21498350ac9f118a5625758435171418a022ed523bae46e668f9f8ea871feab6aff58ad2740b67a30f196d65516","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1","tlshash":"a993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-05-13T15:37:14.047466Z","times_seen":237695,"resource_available":true,"data":null}},"time_used":485,"timings":{"blocked":180,"dns":5,"connect":31,"send":0,"wait":29,"receive":30,"ssl":200},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/wp-content/uploads/2024/03/Nintendo_Switch_logo.png","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"172.67.138.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switchroms.io/","date":"2025-08-15T05:24:29.938Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switchroms.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Jul 2025 02:18:55 GMT","end":"Wed, 08 Oct 2025 03:16:37 GMT"},"fingerprint":{"sha1":"9E:06:45:DB:7D:57:B4:C8:F6:AB:A6:53:8B:13:60:8F:FE:E8:08:C8","sha256":"93:C8:B1:DF:8F:F6:9F:7A:C0:58:BA:2C:97:3F:85:8E:05:96:03:F3:81:DB:A9:4A:BE:77:39:85:FE:D7:0F:13"}}},"request":{"raw":"GET /wp-content/uploads/2024/03/Nintendo_Switch_logo.png HTTP/1.1\r\nHost: switchroms.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://switchroms.io/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_5488P24RVQ=GS2.1.s1755235469$o1$g0$t1755235469$j60$l0$h0; _ga=GA1.1.1220748367.1755235470\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 15 Aug 2025 05:24:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 4178\r\nlast-modified: Mon, 18 Mar 2024 08:03:01 GMT\r\netag: \"65f7f535-1052\"\r\nserver: cloudflare\r\nx-content-type-options: \"nosniff\" always\r\nx-xss-protection: \"1; mode=block\" always\r\nstrict-transport-security: \"max-age=31536000; includeSubDomains; preload\" always\r\nreferrer-policy: no-referrer-when-downgrade\r\nexpires: Wed, 12 Aug 2026 01:21:42 GMT\r\ncache-control: public, max-age=31536000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\naccept-ranges: bytes\r\nage: 273767\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yMc3Ebl6FwQjCrh1sD2102PN43INXsDDBq4bq%2F%2FOgUXbVakEaI8h5sv6iMh%2FFFJHnP3lvIezjnLWwK2%2B%2BeLr%2BOTCfJUcf45gIl8Z\"}]}\r\nvary: accept-encoding\r\ncf-ray: 96f644171e69b4f7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4178,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 240, 8-bit colormap, non-interlaced","md5":"31af029cbfcfe873150af21ee4f1420e","sha1":"a7008c3599f28617dc3ca9e1736349a330abb4c9","sha256":"e2d45db6614cd6523b8eadc629340a4110eb0025971ba53c294b84e435028888","sha512":"24ef2d30942ba4ca3f7693fff21c9354710e56bd1f426801da38f539162ac45f2cd1d40d7bed4e2cdf7fa770a6bd0a75a28422e6f8c62cc5df44de78987e22f8","ssdeep":"96:oNGhPc3gsCo8qq6dV2A8uGXLTRVzIPJFjsx2yP3zvvVM:nF/+5dV18uGvfIPJFjalM","tlshash":"16817fc641527484c677018dcf6382d6eff0e30d7914574954da989b2b063e96accf82","first_seen":"2024-08-22T17:21:44.341781Z","last_seen":"2026-01-26T03:36:30.110757Z","times_seen":28,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"htiivw4vkrqr.l4.adsco.re/","fqdn":"htiivw4vkrqr.l4.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"185.200.118.62","port":443,"asn":9009,"as":"M247 Europe SRL","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://switchroms.io/","date":"2025-08-15T05:24:30.761Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.l4.adsco.re","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Jul 2025 09:55:04 GMT","end":"Thu, 16 Oct 2025 09:55:03 GMT"},"fingerprint":{"sha1":"89:17:D6:F2:7A:24:C5:33:57:EE:DE:EE:8A:24:F2:17:17:F4:D3:82","sha256":"E7:4D:AF:EE:70:50:82:45:92:27:31:C9:82:61:D4:DC:59:1B:06:E0:75:04:FB:AC:D9:72:BB:43:8A:B0:07:C1"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: htiivw4vkrqr.l4.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 0\r\nOrigin: https://switchroms.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchroms.io/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 05:24:30 GMT\r\ncontent-type: text/html\r\ncontent-length: 0\r\nlast-modified: Fri, 02 Jun 2023 14:03:32 GMT\r\netag: \"6479f6b4-0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T15:33:13.162002Z","times_seen":15117490,"resource_available":true,"data":null}},"time_used":299,"timings":{"blocked":134,"dns":55,"connect":24,"send":0,"wait":25,"receive":0,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adsco.re/p","fqdn":"adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"162.252.214.5","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://switchroms.io/","date":"2025-08-15T05:24:31.242Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_RSA_WITH_AES_256_CBC_SHA","key_group_name":"none","signature_name":"none","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo RSA Organization Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 23 Sep 2024 00:00:00 GMT","end":"Mon, 29 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"3B:64:1C:DA:8C:64:22:01:36:0F:54:7A:99:6E:AD:26:C2:EF:59:8B","sha256":"A4:41:84:14:13:00:DA:93:54:10:5C:59:8A:A9:83:17:01:36:39:BE:1D:43:E5:FB:1C:F3:D6:AF:8A:ED:84:E2"}}},"request":{"raw":"POST /p HTTP/1.1\r\nHost: adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Length: 2382\r\nOrigin: https://switchroms.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchroms.io/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 15 Aug 2025 05:24:31 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAS-P-1: OK nyc123\r\nAS-P-2: OK\r\nAS-P-3: OK\r\nAccess-Control-Max-Age: 2592000\r\nCache-Control: no-transform\r\nAccept-CH: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR\r\nAccess-Control-Allow-Origin: https://switchroms.io\r\nAccess-Control-Allow-Credentials: true\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1212,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with very long lines (1212), with no line terminators","md5":"f1b7149a7c3348768d8e12803ae9d0ab","sha1":"7b9368987306d3e0320a0db064128b278c9c92a0","sha256":"f0d9782fdd24d1ecb43a86b12b18132b13fae58a6dead38921a555fcdfb812b1","sha512":"f382e9c0478572102c9aa605c756a912f9c90681ab7e38dcf34ee6d9e58b889814baa7e82e2371dd5f5e939bb7d0027b66eda44c7df726f2d9ca1fff7644b9b0","ssdeep":"","tlshash":"a62187a21ad149faeaf89fe0af1b18df171d40b397619bd79da9085243083f89229d41","first_seen":"2025-08-15T05:24:57.993909Z","last_seen":"2025-08-15T05:24:57.993909Z","times_seen":1,"resource_available":false,"data":null}},"time_used":696,"timings":{"blocked":285,"dns":1,"connect":93,"send":0,"wait":123,"receive":1,"ssl":189},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/si/0e/a4/c3/0ea4c3edf7f201773853eb1d1f8a0ecf25c5fb6a7994516dc19f6499ec4d90a0.png","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switchroms.io/","date":"2025-08-15T05:24:31.961Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Jul 2025 02:33:11 GMT","end":"Wed, 08 Oct 2025 02:33:10 GMT"},"fingerprint":{"sha1":"06:D8:07:0F:AB:BF:D8:7F:C5:38:82:AC:A7:8A:20:4D:83:6C:EA:C9","sha256":"CF:05:58:46:C3:07:3F:B6:A6:8D:42:F2:3B:3D:91:36:93:10:CB:D5:89:47:A3:62:26:D2:F3:BA:AC:51:0E:B7"}}},"request":{"raw":"GET /si/0e/a4/c3/0ea4c3edf7f201773853eb1d1f8a0ecf25c5fb6a7994516dc19f6499ec4d90a0.png HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 05:24:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 123127\r\nserver: nginx/1.21.6\r\nlast-modified: Sat, 19 Jul 2025 15:26:10 GMT\r\netag: \"687bb912-1e0f7\"\r\nexpires: Sun, 17 Aug 2025 05:24:32 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: ah0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":123127,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x400, components 3","md5":"5f98e58819eb88d27bd1233c2cb6acb9","sha1":"204f00828e916757824e138952dd087e560965f4","sha256":"82b35b44d3c80d3fe9d3d1a2fd39eb84ee6044437bf482418ab81e66ccf1bd69","sha512":"304eb96cf862a454c6a459e72d171de3f0730d7133b4e6c17c97f3c6475bae6165d886ccb8e19934ed1eafcc438bbcd51a1891e863b19358e5c2af5fdbefb136","ssdeep":"3072:x5IMAQB/xHP1nBaQ/uXQlLftu9dc0DwRVfYMRzXq/DnMn:DTLXc4ftu9dh+fYMRza/gn","tlshash":"ecc3128e2cff3987d1ca9df988a79b82f457de4ddb50739c84848a2d34466fb60085d4","first_seen":"2025-07-24T06:39:51.925741Z","last_seen":"2025-08-21T16:36:46.14706Z","times_seen":255,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":72,"dns":21,"connect":19,"send":0,"wait":37,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6.adsco.re/","fqdn":"6.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"104.17.167.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://switchroms.io/","date":"2025-08-15T05:24:30.760Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo RSA Organization Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 23 Sep 2024 00:00:00 GMT","end":"Mon, 29 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"3B:64:1C:DA:8C:64:22:01:36:0F:54:7A:99:6E:AD:26:C2:EF:59:8B","sha256":"A4:41:84:14:13:00:DA:93:54:10:5C:59:8A:A9:83:17:01:36:39:BE:1D:43:E5:FB:1C:F3:D6:AF:8A:ED:84:E2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 6.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://switchroms.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchroms.io/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 05:24:30 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 45\r\ncf-ray: 96f6441c99680b45-OSL\r\naccess-control-allow-origin: https://switchroms.io\r\ncache-control: private, max-age=10\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-max-age: 2592000\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"5b41cb22f84f645a103acc7bfbf084ff","sha1":"bac3967b26d5ec4a0d09a580714e8219796816bd","sha256":"709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc","sha512":"772066ed1119519a19884fc94de2c9f2cc538b4528d9e2651a89b93d65bd4000b18297bfbdd8903b65146858935d33cac048c321dad2ea4f1f84ca6dd9b7d98f","ssdeep":"","tlshash":"7990041154441d34dc45470c4f0d0f0553dc5153df377374ddc50f0414531344141d00","first_seen":"2023-04-05T06:05:36Z","last_seen":"2026-03-30T19:07:46.969854Z","times_seen":25700,"resource_available":true,"data":null}},"time_used":131,"timings":{"blocked":55,"dns":37,"connect":1,"send":0,"wait":14,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/sbar.json?key=0e536fb8895c74d7dcf7b58fe63dae08\u0026uuid=62f0fc5a-aa7f-4636-8af5-6a014c9884e2%3A3%3A1","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"192.243.61.227","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://switchroms.io/","date":"2025-08-15T05:24:30.797Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 22:21:33 GMT","end":"Fri, 26 Sep 2025 22:21:32 GMT"},"fingerprint":{"sha1":"4A:6A:48:C8:5B:C5:2B:2E:9C:03:AF:BF:4C:E6:10:23:E2:7B:EA:97","sha256":"A8:42:B5:4A:20:C8:13:EF:B5:90:0F:54:37:F7:05:60:8D:91:07:E3:A4:0F:7A:22:C9:AF:F1:F5:22:E8:68:C9"}}},"request":{"raw":"GET /sbar.json?key=0e536fb8895c74d7dcf7b58fe63dae08\u0026uuid=62f0fc5a-aa7f-4636-8af5-6a014c9884e2%3A3%3A1 HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://switchroms.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchroms.io/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Fri, 15 Aug 2025 05:24:31 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nAccess-Control-Allow-Origin: https://switchroms.io\r\nAccess-Control-Allow-Credentials: true\r\nSet-Cookie: uid_id2=62f0fc5a-aa7f-4636-8af5-6a014c9884e2:3:1; expires=Fri, 22 Aug 2025 05:24:31 GMT; path=/; secure; SameSite=None\npdhtkv=true; expires=Sat, 16 Aug 2025 05:24:31 GMT; path=/; secure; SameSite=None\nuncs=1; expires=Sat, 16 Aug 2025 05:24:31 GMT; path=/; secure; SameSite=None\npdhtkv29=true; expires=Sat, 16 Aug 2025 05:24:31 GMT; path=/; secure; SameSite=None\nuncs29=1; expires=Sat, 16 Aug 2025 05:24:31 GMT; path=/; secure; SameSite=None\nu_pl26551100=1; expires=Sat, 16 Aug 2025 05:24:31 GMT; path=/; secure; SameSite=None\nslec0e536fb8895c74d7dcf7b58fe63dae08=[6073101]; expires=Fri, 15 Aug 2025 05:24:36 GMT; path=/; secure; SameSite=None\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 4d3de95665a93e87991a41e70fac0d37\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6420,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"JSON text data","md5":"6488442f2791b24a966bf1b578032500","sha1":"7831cd4c0f86d0389572890b2ddfd2ff36ae5b66","sha256":"07c6647676f02b5a58a88fd9bafcc73f3e23279b365f49690667f87d45b11758","sha512":"52f094e73df8bef9f241eb74311ed1fda57a521d3c0695f07c09bee72e2729b350060df0252fd17ad51b372e170d2744e48e06d01472cd5e182e2e67bff34c83","ssdeep":"96:9zwzM/jipkh5eCSPbWscDMETXfIhISiRWSBIsW8cNujrbACLSUnfnp:9z/uSafPFArTwcWmIsLcNunEC7x","tlshash":"c3d17e6f50cd95d20a5b0ee89c473cf9bc932c89ad978d8c58698f2fd12de8c095e05c","first_seen":"2025-08-15T05:24:57.999083Z","last_seen":"2025-08-15T05:24:57.999083Z","times_seen":1,"resource_available":false,"data":null}},"time_used":959,"timings":{"blocked":320,"dns":6,"connect":102,"send":0,"wait":317,"receive":1,"ssl":209},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-15","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/wp-content/uploads/2024/07/NARUTO-X-BORUTO-Ultimate-Ninja-STORM-CONNECTIONS-Ultimate-Edition.webp","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"172.67.138.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switchroms.io/","date":"2025-08-15T05:24:28.951Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switchroms.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Jul 2025 02:18:55 GMT","end":"Wed, 08 Oct 2025 03:16:37 GMT"},"fingerprint":{"sha1":"9E:06:45:DB:7D:57:B4:C8:F6:AB:A6:53:8B:13:60:8F:FE:E8:08:C8","sha256":"93:C8:B1:DF:8F:F6:9F:7A:C0:58:BA:2C:97:3F:85:8E:05:96:03:F3:81:DB:A9:4A:BE:77:39:85:FE:D7:0F:13"}}},"request":{"raw":"GET /wp-content/uploads/2024/07/NARUTO-X-BORUTO-Ultimate-Ninja-STORM-CONNECTIONS-Ultimate-Edition.webp HTTP/1.1\r\nHost: switchroms.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://switchroms.io/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 05:24:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 65728\r\nlast-modified: Fri, 19 Jul 2024 10:41:06 GMT\r\netag: \"669a42c2-100c0\"\r\nserver: cloudflare\r\nx-content-type-options: \"nosniff\" always\r\nx-xss-protection: \"1; mode=block\" always\r\nstrict-transport-security: \"max-age=31536000; includeSubDomains; preload\" always\r\nreferrer-policy: no-referrer-when-downgrade\r\nexpires: Sat, 08 Aug 2026 11:15:47 GMT\r\ncache-control: public, max-age=31536000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\naccept-ranges: bytes\r\nage: 583720\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tOjhnpXLearGLBNiDX2M7n%2B5g95rRHLO0fRN58Qz%2F018M4E9g0zUdiGkCcX7D8Djnyp9bKppPge6ilBQs4dO5R0H6eD5doeKEkv5\"}]}\r\ncf-ray: 96f644108f0656c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":65728,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 432x700, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8b9e99e877c0d7622361b8f2dc89c346","sha1":"abc901e5155795132cea66d048ec15d10e774c59","sha256":"c837a0931d48b655a2d636d42d72c75793be1b976de6c3e61854a34ac3fc891f","sha512":"79c0725355fad140075d4a8b5b93f894f56be372dc41ae788519ba33baaa79ebb7c8ada501bbec02de5d9b88839c3ca191cc6a2c77a62fb670c288ede185c8fc","ssdeep":"1536:YfRvijIhI7jH6HHY6hLh6TLhG4wRRizV8WhC:jj6ISze84wRRqQ","tlshash":"b953124e5d106c2cbda5fd93979ae8c5c510569a8cc0d3a2eee8d361f137b1e406d93c","first_seen":"2025-05-28T10:03:28.112378Z","last_seen":"2025-09-15T23:15:45.335605Z","times_seen":7,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/wp-content/uploads/2024/04/Baten-Kaitos-I-II-HD-Remaster.png","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"172.67.138.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switchroms.io/","date":"2025-08-15T05:24:28.960Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switchroms.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Jul 2025 02:18:55 GMT","end":"Wed, 08 Oct 2025 03:16:37 GMT"},"fingerprint":{"sha1":"9E:06:45:DB:7D:57:B4:C8:F6:AB:A6:53:8B:13:60:8F:FE:E8:08:C8","sha256":"93:C8:B1:DF:8F:F6:9F:7A:C0:58:BA:2C:97:3F:85:8E:05:96:03:F3:81:DB:A9:4A:BE:77:39:85:FE:D7:0F:13"}}},"request":{"raw":"GET /wp-content/uploads/2024/04/Baten-Kaitos-I-II-HD-Remaster.png HTTP/1.1\r\nHost: switchroms.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://switchroms.io/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 05:24:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 118559\r\nlast-modified: Mon, 08 Apr 2024 07:42:50 GMT\r\netag: \"66139ffa-1cf1f\"\r\nserver: cloudflare\r\nx-content-type-options: \"nosniff\" always\r\nx-xss-protection: \"1; mode=block\" always\r\nstrict-transport-security: \"max-age=31536000; includeSubDomains; preload\" always\r\nreferrer-policy: no-referrer-when-downgrade\r\nexpires: Wed, 12 Aug 2026 01:21:40 GMT\r\ncache-control: public, max-age=31536000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\naccept-ranges: bytes\r\nage: 273768\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wP%2FA8N%2B%2BMvwnBtKVYp58tIISUQutYGFJdGELeUnhxkMsbfqa28EsKOCnukrCgk%2FQ9MxCiYUYll6bJrHAthOq%2FFHYAv8E5pZ509o4\"}]}\r\ncf-ray: 96f644109f1456c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":118559,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 355 x 575, 8-bit colormap, non-interlaced","md5":"9664365f9a7ac574d72990ed04f166b7","sha1":"f1f7502b3e0a86e1397017ef92b5a35ac55155ba","sha256":"b1da08f16336cdb7d57e71f14c3b8edce451276cdcd396bb5d223c0bb77f4588","sha512":"377218654a88efad65ce3ac7521e861b5ef50b328e5a705b943b0977159a6469083b0415dbb4b8f48b3a199cc55256f03be9047b0a75cdef95089a326e4b2986","ssdeep":"3072:xwYaLwKJd1LNfPUGa788SOe34wZbZls1MeVmflfs:xwY0NUHVSOKlmPkfC","tlshash":"e6c31256ea47c3be0e84d9ae296fb066c815c7d0a119f46c50dc1393cb8829dd07e5a7","first_seen":"2025-05-28T10:03:28.141217Z","last_seen":"2025-11-07T04:54:38.693399Z","times_seen":8,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/wp-content/uploads/2025/04/SONOKUNI.webp","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"172.67.138.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switchroms.io/","date":"2025-08-15T05:24:28.983Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switchroms.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Jul 2025 02:18:55 GMT","end":"Wed, 08 Oct 2025 03:16:37 GMT"},"fingerprint":{"sha1":"9E:06:45:DB:7D:57:B4:C8:F6:AB:A6:53:8B:13:60:8F:FE:E8:08:C8","sha256":"93:C8:B1:DF:8F:F6:9F:7A:C0:58:BA:2C:97:3F:85:8E:05:96:03:F3:81:DB:A9:4A:BE:77:39:85:FE:D7:0F:13"}}},"request":{"raw":"GET /wp-content/uploads/2025/04/SONOKUNI.webp HTTP/1.1\r\nHost: switchroms.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://switchroms.io/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 05:24:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 62652\r\nlast-modified: Thu, 10 Apr 2025 08:52:10 GMT\r\netag: \"67f786ba-f4bc\"\r\nserver: cloudflare\r\nx-content-type-options: \"nosniff\" always\r\nx-xss-protection: \"1; mode=block\" always\r\nstrict-transport-security: \"max-age=31536000; includeSubDomains; preload\" always\r\nreferrer-policy: no-referrer-when-downgrade\r\nexpires: Wed, 12 Aug 2026 01:21:40 GMT\r\ncache-control: public, max-age=31536000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\naccept-ranges: bytes\r\nage: 273768\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wW0bZVPurF4MDGBVCBb5FJBXfZGQoPX%2FntsKWuLbQahaDqGGSyuWUXvC7kUDzgyc%2BZKs6IAR%2FHbafojd7XV3UeBQoctw4bfZ0UxZ\"}]}\r\ncf-ray: 96f64410af4956c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":62652,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"586cd1f8c37842756986536d36d8f09a","sha1":"d289cd5c05403f37240a8cc4b7d7ea6c26171304","sha256":"3950cf154d0a5d11e9b52047cdde125594ecf5f84d3203d0a09f33548145616c","sha512":"847a0025b32ffdcce452db228d6f050d8357cd88ac521f7b532f7ca27e8c614bdd1365c41050f6628767d6ddcdecd61c0e85e8baa578e5ed5259f1979afc7feb","ssdeep":"1536:zel+uLGUBYG0t6nZj2+/0D/Z2MyYXzUgsN7ftL:nuL5FeoZkD/4MyYjUgA7fR","tlshash":"be53023396d32820a6b42612cf288c6d65278e66d73d19033dbf5ab3e454f04d0e93ee","first_seen":"2025-04-14T02:23:47.143477Z","last_seen":"2025-11-11T13:51:33.64501Z","times_seen":11,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/wp-content/uploads/2025/04/Vagrus-The-Riven-Realms.webp","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"172.67.138.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switchroms.io/","date":"2025-08-15T05:24:28.984Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switchroms.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Jul 2025 02:18:55 GMT","end":"Wed, 08 Oct 2025 03:16:37 GMT"},"fingerprint":{"sha1":"9E:06:45:DB:7D:57:B4:C8:F6:AB:A6:53:8B:13:60:8F:FE:E8:08:C8","sha256":"93:C8:B1:DF:8F:F6:9F:7A:C0:58:BA:2C:97:3F:85:8E:05:96:03:F3:81:DB:A9:4A:BE:77:39:85:FE:D7:0F:13"}}},"request":{"raw":"GET /wp-content/uploads/2025/04/Vagrus-The-Riven-Realms.webp HTTP/1.1\r\nHost: switchroms.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://switchroms.io/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 05:24:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 70804\r\nlast-modified: Thu, 10 Apr 2025 08:31:10 GMT\r\netag: \"67f781ce-11494\"\r\nserver: cloudflare\r\nx-content-type-options: \"nosniff\" always\r\nx-xss-protection: \"1; mode=block\" always\r\nstrict-transport-security: \"max-age=31536000; includeSubDomains; preload\" always\r\nreferrer-policy: no-referrer-when-downgrade\r\nexpires: Wed, 12 Aug 2026 01:21:40 GMT\r\ncache-control: public, max-age=31536000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\naccept-ranges: bytes\r\nage: 273768\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4iHHy0cFc94FB6SIQS9KCM17WTmyVXcWapDT4KBbhQ0sHV65ddbI2QHZBuwgYAN6%2B5YgCHNBm3uZyppcCySnt2idVpHJ4uszEDle\"}]}\r\ncf-ray: 96f64410bf5056c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":70804,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"03a13c3fac64fea89838558b44c5ac10","sha1":"f64ef379fa8173e61b8df17e39d820d3f7ccdfda","sha256":"779ca116910e78a0880f1186e1a0f1e9889fbdc23a2c3661ca5603fec57db45c","sha512":"93ea7d666097eb23238d2e9fddeb4b9d8de56c3a699165d14c69bcc2022c5f0a5df99b3f625224bad39608846f1cb2e4575a7d3a870ab5436fafd9a958c15254","ssdeep":"1536:NrvZzyHlmAB2034GfhXoBq1VNzkxWyI6PGiLqcFRZ5kfyd6F+Pj+PJuwW:7IlZB2jC7qI6O6qQ5gyK+atW","tlshash":"b163024a0b05e70cca3279a8f16579a328b91d5c0eebbd6373b74d9ceb065b89472d01","first_seen":"2025-05-28T10:03:28.201217Z","last_seen":"2025-11-07T04:54:38.681882Z","times_seen":9,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fssp%2Finterstitial%2Fbackground_image%2F1%2Fjs%2Fscript.js\u0026l=569\u0026fd=511","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"192.243.61.227","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switchroms.io/","date":"2025-08-15T05:24:32.592Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 22:21:33 GMT","end":"Fri, 26 Sep 2025 22:21:32 GMT"},"fingerprint":{"sha1":"4A:6A:48:C8:5B:C5:2B:2E:9C:03:AF:BF:4C:E6:10:23:E2:7B:EA:97","sha256":"A8:42:B5:4A:20:C8:13:EF:B5:90:0F:54:37:F7:05:60:8D:91:07:E3:A4:0F:7A:22:C9:AF:F1:F5:22:E8:68:C9"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fssp%2Finterstitial%2Fbackground_image%2F1%2Fjs%2Fscript.js\u0026l=569\u0026fd=511 HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchroms.io/\r\nCookie: uid_id2=62f0fc5a-aa7f-4636-8af5-6a014c9884e2:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl26551100=1; slec0e536fb8895c74d7dcf7b58fe63dae08=[6073101]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Fri, 15 Aug 2025 05:24:32 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T15:33:13.162002Z","times_seen":15117490,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-15","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/wp-content/uploads/2025/04/BIOMORPH.webp","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"172.67.138.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switchroms.io/","date":"2025-08-15T05:24:28.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switchroms.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Jul 2025 02:18:55 GMT","end":"Wed, 08 Oct 2025 03:16:37 GMT"},"fingerprint":{"sha1":"9E:06:45:DB:7D:57:B4:C8:F6:AB:A6:53:8B:13:60:8F:FE:E8:08:C8","sha256":"93:C8:B1:DF:8F:F6:9F:7A:C0:58:BA:2C:97:3F:85:8E:05:96:03:F3:81:DB:A9:4A:BE:77:39:85:FE:D7:0F:13"}}},"request":{"raw":"GET /wp-content/uploads/2025/04/BIOMORPH.webp HTTP/1.1\r\nHost: switchroms.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://switchroms.io/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 05:24:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 58878\r\nlast-modified: Sun, 13 Apr 2025 16:25:52 GMT\r\netag: \"67fbe590-e5fe\"\r\nserver: cloudflare\r\nx-content-type-options: \"nosniff\" always\r\nx-xss-protection: \"1; mode=block\" always\r\nstrict-transport-security: \"max-age=31536000; includeSubDomains; preload\" always\r\nreferrer-policy: no-referrer-when-downgrade\r\nexpires: Fri, 14 Aug 2026 07:24:59 GMT\r\ncache-control: public, max-age=31536000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\naccept-ranges: bytes\r\nage: 79168\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vz9epE%2Bc9qvCz93HLklLhGUEfsgsRpXhQxidaOF2%2Fg5aujzIudMJpPzOmdtmM8%2BCAI1fpfpDZPyGxnytVulnsh%2BfVhCz5Y6O%2F9P%2F\"}]}\r\ncf-ray: 96f644109f2a56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58878,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d563ab64ef6529e11b38bfb5a73ac7b4","sha1":"e4f47619ad750172c0411152cd8ba6d41a075ad1","sha256":"68e9505ba41fec3f1db09f6937b8af2a9aa0f91a0464af87ece1e9e391309dcf","sha512":"c7b93f3ed5c71b965e866e5c88981e0f602b31423be047779adfc309b75e8bb611fc04ffb29178f227cf2fa01c019da41b679d33911043a3f851e30c9ffb366e","ssdeep":"1536:LcK/wG5MX/uZdYd6gtC9KtniOGOHGvM2kZvo1N:LP18WZdoiyiOGyWN","tlshash":"1843f298369187c004f721e6027dae9e4f3c49abc7ea0b2c98255daf40d5fd4a9c19b7","first_seen":"2025-04-14T02:23:47.102816Z","last_seen":"2026-01-26T03:36:30.073727Z","times_seen":17,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/wp-content/uploads/2025/04/Cookie-Cutter-Overkill-Edition.webp","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"172.67.138.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switchroms.io/","date":"2025-08-15T05:24:28.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switchroms.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Jul 2025 02:18:55 GMT","end":"Wed, 08 Oct 2025 03:16:37 GMT"},"fingerprint":{"sha1":"9E:06:45:DB:7D:57:B4:C8:F6:AB:A6:53:8B:13:60:8F:FE:E8:08:C8","sha256":"93:C8:B1:DF:8F:F6:9F:7A:C0:58:BA:2C:97:3F:85:8E:05:96:03:F3:81:DB:A9:4A:BE:77:39:85:FE:D7:0F:13"}}},"request":{"raw":"GET /wp-content/uploads/2025/04/Cookie-Cutter-Overkill-Edition.webp HTTP/1.1\r\nHost: switchroms.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://switchroms.io/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 05:24:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 99178\r\nlast-modified: Thu, 10 Apr 2025 07:43:50 GMT\r\netag: \"67f776b6-1836a\"\r\nserver: cloudflare\r\nx-content-type-options: \"nosniff\" always\r\nx-xss-protection: \"1; mode=block\" always\r\nstrict-transport-security: \"max-age=31536000; includeSubDomains; preload\" always\r\nreferrer-policy: no-referrer-when-downgrade\r\nexpires: Fri, 14 Aug 2026 07:24:59 GMT\r\ncache-control: public, max-age=31536000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\naccept-ranges: bytes\r\nage: 79168\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gElKc7Pa5Z4pm3jgAUk9K3LEEx8haOLc5lnS4rtBfHhMrqzJ7fR5oNiCjemkgdWbsIzfulZJzNl8HNarS3Lg0JY%2Bei9VmY3i2d6u\"}]}\r\ncf-ray: 96f644111fb456c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":99178,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fac5e1bd30bf13abe48c47a943131551","sha1":"a237085aeab435c4497b732ccb623f75ba17efd0","sha256":"33c91fd32e0b9e83f86541bdc383bca89b551c7bfbe2237faf19816b1a642ebf","sha512":"27056424beebc60a386de7068e47eac33c01948b2ad12de071cefda9977999176b158e778eb9395697ed0dee6dc1ffafb13dc61c4eb3672023be62753f3a4c02","ssdeep":"3072:fx2hLzF0Y351rF+S2Qt6J4bhND7XudIlb8Xs:fx2hN3kSz7XuHs","tlshash":"73a312a5b3436dbab64ef536dd110a4a2357b82ddc3f38077bd602c6e063053a2554ce","first_seen":"2025-04-14T02:23:47.117765Z","last_seen":"2025-09-15T23:15:45.352124Z","times_seen":8,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"172.67.138.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://switchroms.io/","date":"2025-08-15T05:24:28.932Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switchroms.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Jul 2025 02:18:55 GMT","end":"Wed, 08 Oct 2025 03:16:37 GMT"},"fingerprint":{"sha1":"9E:06:45:DB:7D:57:B4:C8:F6:AB:A6:53:8B:13:60:8F:FE:E8:08:C8","sha256":"93:C8:B1:DF:8F:F6:9F:7A:C0:58:BA:2C:97:3F:85:8E:05:96:03:F3:81:DB:A9:4A:BE:77:39:85:FE:D7:0F:13"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: switchroms.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://switchroms.io/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 05:24:28 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 14 Mar 2024 09:02:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65f2bd35-3509\"\r\nserver: cloudflare\r\nx-content-type-options: \"nosniff\" always\r\nx-xss-protection: \"1; mode=block\" always\r\nstrict-transport-security: \"max-age=31536000; includeSubDomains; preload\" always\r\nreferrer-policy: no-referrer-when-downgrade\r\nexpires: Fri, 14 Aug 2026 07:24:58 GMT\r\ncache-control: public, max-age=31536000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\ncontent-encoding: gzip\r\nage: 79169\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=alD9Ql6gIOf49Dil6ALFkC3kB7qkU%2FjfchdoxiZ8BwoIsreofbNtlHeVwDpVCcZXMkvVVLgX2Uetmzd0Ctx6jVyZ5UPjN%2F6r5uKB\"}]}\r\ncf-ray: 96f644108ef856c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-05-13T15:33:51.604764Z","times_seen":758568,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/wp-content/uploads/2024/04/Mario-Kart-8-Deluxe.webp","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"172.67.138.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switchroms.io/","date":"2025-08-15T05:24:28.955Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switchroms.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Jul 2025 02:18:55 GMT","end":"Wed, 08 Oct 2025 03:16:37 GMT"},"fingerprint":{"sha1":"9E:06:45:DB:7D:57:B4:C8:F6:AB:A6:53:8B:13:60:8F:FE:E8:08:C8","sha256":"93:C8:B1:DF:8F:F6:9F:7A:C0:58:BA:2C:97:3F:85:8E:05:96:03:F3:81:DB:A9:4A:BE:77:39:85:FE:D7:0F:13"}}},"request":{"raw":"GET /wp-content/uploads/2024/04/Mario-Kart-8-Deluxe.webp HTTP/1.1\r\nHost: switchroms.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://switchroms.io/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 05:24:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 130798\r\nlast-modified: Mon, 08 Apr 2024 07:26:58 GMT\r\netag: \"66139c42-1feee\"\r\nserver: cloudflare\r\nx-content-type-options: \"nosniff\" always\r\nx-xss-protection: \"1; mode=block\" always\r\nstrict-transport-security: \"max-age=31536000; includeSubDomains; preload\" always\r\nreferrer-policy: no-referrer-when-downgrade\r\nexpires: Fri, 14 Aug 2026 07:24:58 GMT\r\ncache-control: public, max-age=31536000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\naccept-ranges: bytes\r\nage: 79169\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cHxl8GxckdOC%2Bho%2F%2FWON55ZxqplyArEARsHdRj%2FzUrCcyH0HPqRxOB1SQDw39mMBof5g3iG05rZwmvYj9AYmtxaXyu9Pia%2BcLXGr\"}]}\r\ncf-ray: 96f644108f0856c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":130798,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5853fdade0d9ad8e20ca57bf291d1894","sha1":"1f873d78dbd4cc7236e14f23a54a42bb27a98e12","sha256":"59cdb86b5cbc6648c304c558816ee0bf5d5d41bf7b28d0f7f91359847d74f2a2","sha512":"e3e5a49c516101f13557f6f6aa027aff9ff61c8d4bfa13a10d7e21ce1870ba84a801eb3f5ea68c72e5e46bd37515dc461820773d30f0ff8ddd3cc6b27f088b12","ssdeep":"3072:XUEolm2P66GYYRVRbPG1oUVzOqX7gkRFmi3CSeO2nGxUcwt6:EflJpjYRW5Xj3xeO2noso","tlshash":"0ad312fd5c6fc8595afa6283bfd1521a0c496949e3d0e2428c54d1916dca34eb7f8f03","first_seen":"2025-05-28T10:03:28.197041Z","last_seen":"2025-09-15T23:15:45.37558Z","times_seen":7,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/wp-content/uploads/2025/04/Atelier-Yumia-The-Alchemist-of-Memories-the-Envisioned-Land.webp","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"172.67.138.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switchroms.io/","date":"2025-08-15T05:24:28.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switchroms.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Jul 2025 02:18:55 GMT","end":"Wed, 08 Oct 2025 03:16:37 GMT"},"fingerprint":{"sha1":"9E:06:45:DB:7D:57:B4:C8:F6:AB:A6:53:8B:13:60:8F:FE:E8:08:C8","sha256":"93:C8:B1:DF:8F:F6:9F:7A:C0:58:BA:2C:97:3F:85:8E:05:96:03:F3:81:DB:A9:4A:BE:77:39:85:FE:D7:0F:13"}}},"request":{"raw":"GET /wp-content/uploads/2025/04/Atelier-Yumia-The-Alchemist-of-Memories-the-Envisioned-Land.webp HTTP/1.1\r\nHost: switchroms.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://switchroms.io/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 05:24:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 116536\r\ncf-ray: 96f644109f0f56c0-OSL\r\nlast-modified: Wed, 16 Apr 2025 00:45:29 GMT\r\netag: \"67fefda9-1c738\"\r\nx-content-type-options: \"nosniff\" always\r\nx-xss-protection: \"1; mode=block\" always\r\nstrict-transport-security: \"max-age=31536000; includeSubDomains; preload\" always\r\nreferrer-policy: no-referrer-when-downgrade\r\nexpires: Sat, 15 Aug 2026 01:32:12 GMT\r\ncache-control: public, max-age=31536000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\naccept-ranges: bytes\r\nage: 13936\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=o0yD7ilUZRoGNSLYcgOYt6bxvvjgOv5AkOLJ%2BZTchT4OaZFZhHgpqH1jJiLn25NCiKieA4TIncMhoaWz24J40FN0YqiMPQFF3mDEUZI19co9l6gXTNTq3MWkAjVd92sR\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1386\u0026min_rtt=451\u0026rtt_var=961\u0026sent=908\u0026recv=204\u0026lost=0\u0026retrans=0\u0026sent_bytes=1185424\u0026recv_bytes=4423\u0026delivery_rate=5601547\u0026cwnd=257\u0026unsent_bytes=36536\u0026cid=2c4193d6cee59c82\u0026ts=2069\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":116536,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"63f34189b276da7983d5fbd1dbfcba64","sha1":"75d51dd843552011f1da302fb9501df5d61a86d2","sha256":"631ae1f8283b3d6718e0245ca775169624f359979b9bdb23e14cc78e693f2d22","sha512":"21a0ccf33e12a6337569795bbda302ead5eab1c752ee15b458738403db7a2f74ada4a15383fea2496ed06b0c29e3abf30741be3336c27005aa0e9548570cd879","ssdeep":"3072:/XYbQDzJXkf8pZ7iDgSBcmWQTuSDbrNhi3isJcz:/qUkfC7iD1BcmWurvsJy","tlshash":"b5b3122ec818eec4c12784654a592d892ade9c061a73d79d9fda1e38e8cd7751c8fd02","first_seen":"2025-05-28T10:03:28.19843Z","last_seen":"2025-11-11T13:51:33.636301Z","times_seen":11,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/wp-content/uploads/2025/04/Gal-Gun-2.webp","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"172.67.138.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switchroms.io/","date":"2025-08-15T05:24:28.991Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switchroms.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Jul 2025 02:18:55 GMT","end":"Wed, 08 Oct 2025 03:16:37 GMT"},"fingerprint":{"sha1":"9E:06:45:DB:7D:57:B4:C8:F6:AB:A6:53:8B:13:60:8F:FE:E8:08:C8","sha256":"93:C8:B1:DF:8F:F6:9F:7A:C0:58:BA:2C:97:3F:85:8E:05:96:03:F3:81:DB:A9:4A:BE:77:39:85:FE:D7:0F:13"}}},"request":{"raw":"GET /wp-content/uploads/2025/04/Gal-Gun-2.webp HTTP/1.1\r\nHost: switchroms.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://switchroms.io/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 05:24:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 125670\r\nlast-modified: Thu, 10 Apr 2025 08:18:07 GMT\r\netag: \"67f77ebf-1eae6\"\r\nserver: cloudflare\r\nx-content-type-options: \"nosniff\" always\r\nx-xss-protection: \"1; mode=block\" always\r\nstrict-transport-security: \"max-age=31536000; includeSubDomains; preload\" always\r\nreferrer-policy: no-referrer-when-downgrade\r\nexpires: Fri, 14 Aug 2026 07:24:59 GMT\r\ncache-control: public, max-age=31536000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\naccept-ranges: bytes\r\nage: 79168\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j8IfAeB2SadSWaWPMRc%2BaakwCW31mhvtBZd0MdQGpBUnQ0rrSpJhxpGYf0XIcD3Ze95qy2gamhG9QBFxFvs9uDwY4QOlDJB0Smma\"}]}\r\ncf-ray: 96f64410bf5156c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":125670,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a31fa2e89e49141597e3af23cd0716d4","sha1":"bb16b1b2492a86bba6ac3c170738e446d883216d","sha256":"28c3ef96e653c630f8d81a29b13a0f8ca13118281f1811bde8dce16276955fd0","sha512":"cb37e778072e21d9183485364da695a57675066e828b4bcadb1eb6281f61f349a969c615f05ef2b8c003a118ca5f1959e7f5c2bd4832e4895b1cbb4540efec0d","ssdeep":"3072:0vs3HFQlzKx1H3DjqFbueSGdjUm/RMSECq4o6TF4p5:uWlQNM30H1j/tSyFQ","tlshash":"cfc313b7fb26472553f11a24e0329359d064bfb2de50da4da4343328a1cfac4b47aa35","first_seen":"2025-05-28T10:03:28.115122Z","last_seen":"2025-09-15T23:15:45.324414Z","times_seen":7,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/ren.gif?sid=H4sIAAAAAAAC_1RSzWskxRuuTpbf5YeInwdhYUCFFcykZ7qnZ8YVgrvryrKbD3ZXctBLdVX1pEx3V1vVPT2ZUzAge3MWFNSDVJ5JNuquokdBQSe5BYQdTzlsLv4JwnoQQSYZiL6H932qnqrieZ-3PtwujomHgh6tLKq-jGM636i6lQurMuWqNJWl25WaW3UvVlZlGvgXK71J0t3Xap5fdV-pvCXYupqvuzXXrbm1ylWpRaR68ycsZPagXau23apfr9YaPnr6v2tTODDUAe8ek6ch-fjJ36N3INkIafLdFWHWc5W9-mZSxDRXGl2-93a6nqoyRXIGI-0gSvemp6HMmJBPZ6DSvWkHUN2dSQcI5ZjMPP8IYbo3lYmwu3uqNIwhUoT8_yi7I4h4BElHYGoLkj8kAONYWkaa3FtSuqQbpyydsGNy7vEfkOWYnHv0LNLk20ux7FVuqbjIpUoNepGF7I0gOyNkxT7y_gxkuQ-WfwDJfyXzj28gTXaWTawg-dFLQT1yI9agc5Q2ozk_8IK5Fo0acwF1az5rt1q-qJ9YJKMRqJlFYRwU0kEROSgyBwk_qvhuy2c16gVRm7Om61Pf5yJ0262669I2a6JgE-0D5NkALB6A6U1kehPrcgBd_AyzZmG4A5MTdLlFKQhKQ1BSglISlDlB2bW7PDZ1Y-_x2BRhbVrr0-rZoco723RX5R2RElA9gOZ2R2bvmy2wfHbYjwwfqkmiYW6HNOR2OzsmT01sdT558XWsi6OKKxpeEIWtVrvBmj5vchY1w0YrEoHHqXBbMNJCmhlQ46Avx-T6hZeRyTH53_kUId2HiffB5HOgxXnQ0oKuWfTTb0wpc7amVWKqUoEriyw_h3zD2Y6PyQsnk333_hMQ7HBh3zsJMG2RaYv35AFBJ74zvKlKsnNTlYZ8v5zlMpF9Opn6rZzmYvbr62KjVJpfu2IGX73BJsQEPrgtTH6DplymHUPuX5KcC31VaSbIT9fMqghXCrN2qdBpkd1YuXz1WpJpYYxU6QhUPqzeBZNj8kznr5P_7Cc_QuoRdGGRFIdkGmDZJkx2uPDDZ5P4HEYR6PiMDzMHZWGHuh6ebcZyTBY__hKxOFywiwd_X_7lT9DQwoh_XTzDQ00nL1Bpt80ddLQDmm8hTSy62qIbW9B4AFPMDvNMHy78NjUxjJ1hGGtnJ4x1fPfUZCOPKo166AWtViCigEce9-oebzdc0fZpO_DbfgO5Ga99cfDRPwEAAP__6hGcObEEAAA=","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"192.243.61.227","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switchroms.io/","date":"2025-08-15T05:24:31.475Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 22:21:33 GMT","end":"Fri, 26 Sep 2025 22:21:32 GMT"},"fingerprint":{"sha1":"4A:6A:48:C8:5B:C5:2B:2E:9C:03:AF:BF:4C:E6:10:23:E2:7B:EA:97","sha256":"A8:42:B5:4A:20:C8:13:EF:B5:90:0F:54:37:F7:05:60:8D:91:07:E3:A4:0F:7A:22:C9:AF:F1:F5:22:E8:68:C9"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_1RSzWskxRuuTpbf5YeInwdhYUCFFcykZ7qnZ8YVgrvryrKbD3ZXctBLdVX1pEx3V1vVPT2ZUzAge3MWFNSDVJ5JNuquokdBQSe5BYQdTzlsLv4JwnoQQSYZiL6H932qnqrieZ-3PtwujomHgh6tLKq-jGM636i6lQurMuWqNJWl25WaW3UvVlZlGvgXK71J0t3Xap5fdV-pvCXYupqvuzXXrbm1ylWpRaR68ycsZPagXau23apfr9YaPnr6v2tTODDUAe8ek6ch-fjJ36N3INkIafLdFWHWc5W9-mZSxDRXGl2-93a6nqoyRXIGI-0gSvemp6HMmJBPZ6DSvWkHUN2dSQcI5ZjMPP8IYbo3lYmwu3uqNIwhUoT8_yi7I4h4BElHYGoLkj8kAONYWkaa3FtSuqQbpyydsGNy7vEfkOWYnHv0LNLk20ux7FVuqbjIpUoNepGF7I0gOyNkxT7y_gxkuQ-WfwDJfyXzj28gTXaWTawg-dFLQT1yI9agc5Q2ozk_8IK5Fo0acwF1az5rt1q-qJ9YJKMRqJlFYRwU0kEROSgyBwk_qvhuy2c16gVRm7Om61Pf5yJ0262669I2a6JgE-0D5NkALB6A6U1kehPrcgBd_AyzZmG4A5MTdLlFKQhKQ1BSglISlDlB2bW7PDZ1Y-_x2BRhbVrr0-rZoco723RX5R2RElA9gOZ2R2bvmy2wfHbYjwwfqkmiYW6HNOR2OzsmT01sdT558XWsi6OKKxpeEIWtVrvBmj5vchY1w0YrEoHHqXBbMNJCmhlQ46Avx-T6hZeRyTH53_kUId2HiffB5HOgxXnQ0oKuWfTTb0wpc7amVWKqUoEriyw_h3zD2Y6PyQsnk333_hMQ7HBh3zsJMG2RaYv35AFBJ74zvKlKsnNTlYZ8v5zlMpF9Opn6rZzmYvbr62KjVJpfu2IGX73BJsQEPrgtTH6DplymHUPuX5KcC31VaSbIT9fMqghXCrN2qdBpkd1YuXz1WpJpYYxU6QhUPqzeBZNj8kznr5P_7Cc_QuoRdGGRFIdkGmDZJkx2uPDDZ5P4HEYR6PiMDzMHZWGHuh6ebcZyTBY__hKxOFywiwd_X_7lT9DQwoh_XTzDQ00nL1Bpt80ddLQDmm8hTSy62qIbW9B4AFPMDvNMHy78NjUxjJ1hGGtnJ4x1fPfUZCOPKo166AWtViCigEce9-oebzdc0fZpO_DbfgO5Ga99cfDRPwEAAP__6hGcObEEAAA= HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchroms.io/\r\nCookie: uid_id2=62f0fc5a-aa7f-4636-8af5-6a014c9884e2:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl26551100=1; slec0e536fb8895c74d7dcf7b58fe63dae08=[6073101]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Fri, 15 Aug 2025 05:24:31 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nVary: Origin\r\nAccess-Control-Allow-Credentials: true\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: e27f52b5817babf61c44e109d3cf27b7\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T15:33:13.162002Z","times_seen":15117490,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-15","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4.adsco.re:2087/","fqdn":"4.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"162.252.214.5","port":2087,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://switchroms.io/","date":"2025-08-15T05:24:30.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_RSA_WITH_AES_256_CBC_SHA","key_group_name":"none","signature_name":"none","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo RSA Organization Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 23 Sep 2024 00:00:00 GMT","end":"Mon, 29 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"3B:64:1C:DA:8C:64:22:01:36:0F:54:7A:99:6E:AD:26:C2:EF:59:8B","sha256":"A4:41:84:14:13:00:DA:93:54:10:5C:59:8A:A9:83:17:01:36:39:BE:1D:43:E5:FB:1C:F3:D6:AF:8A:ED:84:E2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 4.adsco.re:2087\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://switchroms.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchroms.io/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 15 Aug 2025 05:24:31 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Methods: GET, HEAD, OPTIONS\r\nAccess-Control-Allow-Headers: Content-Type\r\nAccess-Control-Allow-Origin: https://switchroms.io\r\nAccess-Control-Max-Age: 2592000\r\nCache-Control: private, max-age=5\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":45,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"5b41cb22f84f645a103acc7bfbf084ff","sha1":"bac3967b26d5ec4a0d09a580714e8219796816bd","sha256":"709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc","sha512":"772066ed1119519a19884fc94de2c9f2cc538b4528d9e2651a89b93d65bd4000b18297bfbdd8903b65146858935d33cac048c321dad2ea4f1f84ca6dd9b7d98f","ssdeep":"","tlshash":"7990041154441d34dc45470c4f0d0f0553dc5153df377374ddc50f0414531344141d00","first_seen":"2023-04-05T06:05:36Z","last_seen":"2026-03-30T19:07:46.969854Z","times_seen":25700,"resource_available":true,"data":null}},"time_used":713,"timings":{"blocked":304,"dns":7,"connect":98,"send":0,"wait":102,"receive":0,"ssl":199},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/wp-content/uploads/2025/04/Suikoden-III-HD-Remaster-Gate-Rune-and-Dunan-Unification-Wars.webp","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"172.67.138.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switchroms.io/","date":"2025-08-15T05:24:28.974Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switchroms.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Jul 2025 02:18:55 GMT","end":"Wed, 08 Oct 2025 03:16:37 GMT"},"fingerprint":{"sha1":"9E:06:45:DB:7D:57:B4:C8:F6:AB:A6:53:8B:13:60:8F:FE:E8:08:C8","sha256":"93:C8:B1:DF:8F:F6:9F:7A:C0:58:BA:2C:97:3F:85:8E:05:96:03:F3:81:DB:A9:4A:BE:77:39:85:FE:D7:0F:13"}}},"request":{"raw":"GET /wp-content/uploads/2025/04/Suikoden-III-HD-Remaster-Gate-Rune-and-Dunan-Unification-Wars.webp HTTP/1.1\r\nHost: switchroms.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://switchroms.io/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 05:24:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 130580\r\nlast-modified: Tue, 15 Apr 2025 10:42:59 GMT\r\netag: \"67fe3833-1fe14\"\r\nserver: cloudflare\r\nx-content-type-options: \"nosniff\" always\r\nx-xss-protection: \"1; mode=block\" always\r\nstrict-transport-security: \"max-age=31536000; includeSubDomains; preload\" always\r\nreferrer-policy: no-referrer-when-downgrade\r\nexpires: Sun, 26 Jul 2026 19:45:37 GMT\r\ncache-control: public, max-age=31536000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\naccept-ranges: bytes\r\nage: 1676331\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JXh4jvjRrm3Hsxce3PPRRxBtmMpaUodPC86WQhJ3SGfAKi6cMJEuOWWi3m5tiS2%2FfaqBdeHV6dAh%2BfC86JJeQl5g8XD6%2F1i0lcd9\"}]}\r\ncf-ray: 96f644109f2156c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":130580,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ee66c84e8a80b691c7e0e1cad5cf92d1","sha1":"cc4eda09253cdf3899dc7fa13af3f338f3bb397f","sha256":"3271cef2540d10fa5e7b04dd7361c1a357613bbc1f044c2f707b2a4b8d5b16cb","sha512":"84e26cf6f8da31c8bbe5d5acce6e245c414d3c8cc53a655b2e967f9797eae58057d21de8d86aad359f9a5ad89da9a01fc71cee3e969d0374fab77bdcf386e478","ssdeep":"3072:x/jQT+bB239yxR4limO3ypL4/DjmCaGax2AgqqI:xru+mO0O39/PLab45qqI","tlshash":"47d312f1fdb432e733daa9fc8416904b8b2badf5607c541dade4de438a42e006c645b9","first_seen":"2025-05-28T10:03:28.168761Z","last_seen":"2025-11-07T04:54:38.695517Z","times_seen":8,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/wp-content/uploads/2025/04/Sociable-Soccer-25.webp","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"172.67.138.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switchroms.io/","date":"2025-08-15T05:24:28.979Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switchroms.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Jul 2025 02:18:55 GMT","end":"Wed, 08 Oct 2025 03:16:37 GMT"},"fingerprint":{"sha1":"9E:06:45:DB:7D:57:B4:C8:F6:AB:A6:53:8B:13:60:8F:FE:E8:08:C8","sha256":"93:C8:B1:DF:8F:F6:9F:7A:C0:58:BA:2C:97:3F:85:8E:05:96:03:F3:81:DB:A9:4A:BE:77:39:85:FE:D7:0F:13"}}},"request":{"raw":"GET /wp-content/uploads/2025/04/Sociable-Soccer-25.webp HTTP/1.1\r\nHost: switchroms.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://switchroms.io/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 05:24:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 53862\r\nlast-modified: Sun, 13 Apr 2025 16:04:48 GMT\r\netag: \"67fbe0a0-d266\"\r\nserver: cloudflare\r\nx-content-type-options: \"nosniff\" always\r\nx-xss-protection: \"1; mode=block\" always\r\nstrict-transport-security: \"max-age=31536000; includeSubDomains; preload\" always\r\nreferrer-policy: no-referrer-when-downgrade\r\nexpires: Sat, 08 Aug 2026 11:15:31 GMT\r\ncache-control: public, max-age=31536000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\naccept-ranges: bytes\r\nage: 583737\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MJNQyZvsaXKQKAqA1Oy82sv%2FlLjNBnXoCEfaZ7gzDavBPiLghovJK2DBj1Q2ngnKLupYbFlcIeCZIqJ7uieRcDgLYqLo4VLOE8Ej\"}]}\r\ncf-ray: 96f64410af3856c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":53862,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9bbaf07fa4d9cff868d12b6ed0929f6c","sha1":"2c596ac21f57b7296abb3109ab0afc44a73b0262","sha256":"2d452827dce1e27e090f8614fce126d0801aa9730e7e1ad5e36ab9c9efa78154","sha512":"be07dae9914cd30c0a12323a3be196a6330e6c794b5151d1ac37945dc69c889f5e1e5f676f8715c340f1fde5914565e96e09f4afacc6fe1cf4eed24a7c6f9c9d","ssdeep":"1536:/2xxIj4oFmC7coJjk8PDA8CR913xQIE4qFd:OxxM4Jntt9BZE4qFd","tlshash":"d533f1c737045fc20fabb8606dbc845a07686e50c572f26e51e137918b0725ce9e6f6a","first_seen":"2025-05-28T10:03:28.192376Z","last_seen":"2025-09-15T23:15:45.360245Z","times_seen":9,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fssp%2Finterstitial%2Fbackground_image%2F1%2Fcss%2Fstyle.css\u0026l=2536\u0026fd=574","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"192.243.61.227","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switchroms.io/","date":"2025-08-15T05:24:32.396Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 22:21:33 GMT","end":"Fri, 26 Sep 2025 22:21:32 GMT"},"fingerprint":{"sha1":"4A:6A:48:C8:5B:C5:2B:2E:9C:03:AF:BF:4C:E6:10:23:E2:7B:EA:97","sha256":"A8:42:B5:4A:20:C8:13:EF:B5:90:0F:54:37:F7:05:60:8D:91:07:E3:A4:0F:7A:22:C9:AF:F1:F5:22:E8:68:C9"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fssp%2Finterstitial%2Fbackground_image%2F1%2Fcss%2Fstyle.css\u0026l=2536\u0026fd=574 HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchroms.io/\r\nCookie: uid_id2=62f0fc5a-aa7f-4636-8af5-6a014c9884e2:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl26551100=1; slec0e536fb8895c74d7dcf7b58fe63dae08=[6073101]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Fri, 15 Aug 2025 05:24:32 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T15:33:13.162002Z","times_seen":15117490,"resource_available":true,"data":null}},"time_used":108,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-15","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/wp-content/plugins/ads-invalid-click-protection/assets/js/script.js","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"172.67.138.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://switchroms.io/","date":"2025-08-15T05:24:28.945Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switchroms.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Jul 2025 02:18:55 GMT","end":"Wed, 08 Oct 2025 03:16:37 GMT"},"fingerprint":{"sha1":"9E:06:45:DB:7D:57:B4:C8:F6:AB:A6:53:8B:13:60:8F:FE:E8:08:C8","sha256":"93:C8:B1:DF:8F:F6:9F:7A:C0:58:BA:2C:97:3F:85:8E:05:96:03:F3:81:DB:A9:4A:BE:77:39:85:FE:D7:0F:13"}}},"request":{"raw":"GET /wp-content/plugins/ads-invalid-click-protection/assets/js/script.js HTTP/1.1\r\nHost: switchroms.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://switchroms.io/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 05:24:28 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 16 Jul 2024 16:47:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6696a422-80c\"\r\nserver: cloudflare\r\nx-content-type-options: \"nosniff\" always\r\nx-xss-protection: \"1; mode=block\" always\r\nstrict-transport-security: \"max-age=31536000; includeSubDomains; preload\" always\r\nreferrer-policy: no-referrer-when-downgrade\r\nexpires: Wed, 29 Jul 2026 20:52:54 GMT\r\ncache-control: public, max-age=31536000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\ncontent-encoding: gzip\r\nage: 1413094\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nVLEMcDq4fpEoNLQR7s0ig6392y%2Fejvuq1nq%2F2s9QkYMwOLw5Ld3lxxoqLv%2FtS4Toljyl8%2BXPxJQ8DEhpM9x9W67PzqRTCggMMZp\"}]}\r\ncf-ray: 96f644108efd56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2060,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"cf993f1eb33414d944c0ef64b88793f7","sha1":"730920330837195909462c0c6d1e90a043682f94","sha256":"e1f54d706d5fdd894d42fe93b32eaaf506f686a1f9630e5acf87562da3c62668","sha512":"7e51292494153b09f412fc91f4b2cc4b64f21db0f9dc1938b43bad6e33c0c99bbf4431a007628fb5bcbcde919e9ed6a64182cca2db61a5bf71e8dcebe82f2036","ssdeep":"","tlshash":"cb41cf89b18d102d63d2239076bf4b497c38aa30264092bdd2ddd9d47e38d366a53cb7","first_seen":"2023-03-09T23:32:46Z","last_seen":"2026-04-16T22:24:47.01538Z","times_seen":65,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/wp-content/uploads/2024/08/Mortal-Kombat-1-Premium-Edition.png","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"172.67.138.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switchroms.io/","date":"2025-08-15T05:24:28.963Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switchroms.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Jul 2025 02:18:55 GMT","end":"Wed, 08 Oct 2025 03:16:37 GMT"},"fingerprint":{"sha1":"9E:06:45:DB:7D:57:B4:C8:F6:AB:A6:53:8B:13:60:8F:FE:E8:08:C8","sha256":"93:C8:B1:DF:8F:F6:9F:7A:C0:58:BA:2C:97:3F:85:8E:05:96:03:F3:81:DB:A9:4A:BE:77:39:85:FE:D7:0F:13"}}},"request":{"raw":"GET /wp-content/uploads/2024/08/Mortal-Kombat-1-Premium-Edition.png HTTP/1.1\r\nHost: switchroms.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://switchroms.io/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 05:24:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 82348\r\nlast-modified: Fri, 02 Aug 2024 15:03:22 GMT\r\netag: \"66acf53a-141ac\"\r\nserver: cloudflare\r\nx-content-type-options: \"nosniff\" always\r\nx-xss-protection: \"1; mode=block\" always\r\nstrict-transport-security: \"max-age=31536000; includeSubDomains; preload\" always\r\nreferrer-policy: no-referrer-when-downgrade\r\nexpires: Sat, 08 Aug 2026 11:15:31 GMT\r\ncache-control: public, max-age=31536000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\naccept-ranges: bytes\r\nage: 583737\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tI4Zsj3naMbYI%2FUmTkjCf8kfj7hvfbEhKa9vlMgD9lT%2FRv%2B5CEYFEuyBKAyWsrWUxTx64aF5bpHtxYlg%2BI35c4io9iHAYBQk3VpW\"}]}\r\ncf-ray: 96f644109f1756c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":82348,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 355 x 575, 8-bit colormap, non-interlaced","md5":"0e87210adeecb0a0b31b299b19adf10c","sha1":"b4c6b354337c42738b0bf8c844053ee766f99db5","sha256":"a333396f2ab553b9a442ed39f0a2b93d8bd02c61d687540bc00b0cb2f602294a","sha512":"db469a63d81f29daaf2986b496b0fe5808b9133d8d59264b1aa65c0cdc36de47c68caf82763e5282355f7fca55baeb469d47b9a7d4a88583d665e48c75738436","ssdeep":"1536:RkW+BgrskXzj8sow+HuRJb6I1F8fq43uDqfXtbiYZeMfaG+aRT/K1yZr1lX4ksPZ:Ius6MuHb6I1F8fq43uWfXImkG/h/FB43","tlshash":"558312587d93fa9eca24842a33df67800f3e3eb6a20a1ac17c6ed564340dc95375527b","first_seen":"2024-12-25T22:29:19.4684Z","last_seen":"2025-09-15T23:15:45.366539Z","times_seen":8,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/ssp/interstitial/background_image/1/css/style.css","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://switchroms.io/","date":"2025-08-15T05:24:31.843Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Jul 2025 14:01:22 GMT","end":"Mon, 29 Sep 2025 14:59:36 GMT"},"fingerprint":{"sha1":"CD:76:E0:2A:28:09:08:24:2D:4C:A1:14:B2:AE:6C:39:A4:CC:2F:6B","sha256":"8B:98:84:C0:8D:47:7C:1B:A7:26:4B:E4:9E:6E:FD:8E:E1:6D:6E:41:1D:E7:91:B7:70:A3:C1:D0:C0:85:6B:31"}}},"request":{"raw":"GET /sb/ssp/interstitial/background_image/1/css/style.css HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://switchroms.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchroms.io/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 05:24:32 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Tue, 14 Nov 2023 10:12:37 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"65534815-9e8\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2NW9aiVlqCjhqUuupo9YtvQY7PzvOb86Fo89mHuxN3UOU0R06b7H5%2FKB6wlXJduDcDYpNGx7URrHMEbSP7tO%2B1slOFzAPsEUkpvND4ML\"}]}\r\ncf-ray: 96f644237d807129-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2536,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"99c4d51e8d827c6ef4c5da4a4c9c361c","sha1":"4858f7d40be16dceba76dd1104054633d723ae6e","sha256":"6a8d79e72f05bf80fdabc33023c2002d93f89a6e55dd75d5fb7da2d78436a3b0","sha512":"55d20c3b7a687c732381182057dbdca594d6cf9b9fd39175d39a10339448d4db9791ce31375e6c8c516bcf3d29948c8c42b338a9e355dcc4562f5c59b59634c6","ssdeep":"","tlshash":"8351ad8156671a05b916e4d63f794b025a5d8003da4fd9aa3fc0358c8fcb28de1f37da","first_seen":"2024-02-19T06:57:16Z","last_seen":"2026-01-22T19:26:03.587382Z","times_seen":948,"resource_available":false,"data":null}},"time_used":616,"timings":{"blocked":70,"dns":38,"connect":1,"send":0,"wait":475,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/wp-content/plugins/gioi-han-ads/js/updateclicks.js?ver=6.8.2","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"172.67.138.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://switchroms.io/","date":"2025-08-15T05:24:28.941Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switchroms.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Jul 2025 02:18:55 GMT","end":"Wed, 08 Oct 2025 03:16:37 GMT"},"fingerprint":{"sha1":"9E:06:45:DB:7D:57:B4:C8:F6:AB:A6:53:8B:13:60:8F:FE:E8:08:C8","sha256":"93:C8:B1:DF:8F:F6:9F:7A:C0:58:BA:2C:97:3F:85:8E:05:96:03:F3:81:DB:A9:4A:BE:77:39:85:FE:D7:0F:13"}}},"request":{"raw":"GET /wp-content/plugins/gioi-han-ads/js/updateclicks.js?ver=6.8.2 HTTP/1.1\r\nHost: switchroms.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://switchroms.io/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 05:24:28 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Sat, 12 Apr 2025 20:51:44 GMT\r\nvary: accept-encoding\r\nserver: cloudflare\r\nx-content-type-options: \"nosniff\" always\r\nx-xss-protection: \"1; mode=block\" always\r\nstrict-transport-security: \"max-age=31536000; includeSubDomains; preload\" always\r\nreferrer-policy: no-referrer-when-downgrade\r\nexpires: Fri, 14 Aug 2026 07:24:58 GMT\r\ncache-control: public, max-age=31536000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K337K6ORW%2BF4ff0ZnzQgVT2LKrUpIjqiq3HQo6qxGXCGjAhWLoLLPPmwNuVNIslkA0yrrso7HRL59ZWqUxs17kZOwnsK8BEEnUcu\"}]}\r\nage: 79169\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"67fad260-34\"\r\ncontent-encoding: br\r\ncf-ray: 96f644108efc56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with CRLF line terminators","md5":"43c8dd10c6bae4efd3bbb0f2041f7ce5","sha1":"5ec6a73f768a272643734b791d6d86407d53d9c4","sha256":"94034a75027b217a0f3fdfb41f799a60ae88425a7b0e69bf5d9c4c8ce73ff1b7","sha512":"62aa9254aa753ae185392951c9b5edf302ab27802eb69735b3b0299aefa2c51c6f753575d229d10381307962c8390ed1423104f851d89bb79ccb168e08fea91e","ssdeep":"","tlshash":"a09002089742a55b27a0145edd4584e9495aaa1307951174d27449426107118d27c144","first_seen":"2023-03-07T12:04:15Z","last_seen":"2026-04-30T20:57:55.69528Z","times_seen":30,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:300,400,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://switchroms.io/","date":"2025-08-15T05:24:31.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"DF:A1:DB:1F:BC:5E:31:D7:F8:FE:26:E3:B9:B3:02:98:B1:C8:50:EC","sha256":"A2:57:20:B6:AE:46:89:B9:39:C7:57:9B:1E:43:96:E3:5A:BC:7E:3F:1D:18:10:34:CC:53:3D:DB:78:4E:5C:21"}}},"request":{"raw":"GET /css?family=Roboto:300,400,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 15 Aug 2025 05:24:32 GMT\r\ndate: Fri, 15 Aug 2025 05:24:32 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16755,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"e9d2e14beb088f37fae98294940a9dcd","sha1":"1dafc3c55550249c8c2d782d5616c7b445c8e005","sha256":"f2e491cc46d3fcba81f729065d622bd722751d4a2e7f80b479aa64a92c17b5c7","sha512":"64025ea9b660d5e1d45a593a27345e152ba6b5ef95daceee5e43201319a555eb5457cfe1ecdcc725202063a22c5f406f3ba4607863d5b714c378f144bcdea5f7","ssdeep":"384:pjf5jgjPjrjyUj/qY4+j4jYjpjfMj1jWj6jyhj/qY4XjNjtj4jfdjkjDj3jyQj/E:p90DXOU/R08toBy+Oh/EBpcZwPLOQ/VK","tlshash":"e5722291041740009b835ce223cebf35fe1f92117152d0b5abfd9b6badcbc66526939d","first_seen":"2025-06-02T17:27:24.212334Z","last_seen":"2026-01-19T16:22:17.33804Z","times_seen":5482,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":51,"dns":0,"connect":14,"send":0,"wait":36,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/si/e7/c8/a1/e7c8a13987e7f8f7cda5f475a9824b338a33b5f7294bc944b6786a38ea479d30.png","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switchroms.io/","date":"2025-08-15T05:24:31.963Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Jul 2025 02:33:11 GMT","end":"Wed, 08 Oct 2025 02:33:10 GMT"},"fingerprint":{"sha1":"06:D8:07:0F:AB:BF:D8:7F:C5:38:82:AC:A7:8A:20:4D:83:6C:EA:C9","sha256":"CF:05:58:46:C3:07:3F:B6:A6:8D:42:F2:3B:3D:91:36:93:10:CB:D5:89:47:A3:62:26:D2:F3:BA:AC:51:0E:B7"}}},"request":{"raw":"GET /si/e7/c8/a1/e7c8a13987e7f8f7cda5f475a9824b338a33b5f7294bc944b6786a38ea479d30.png HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 05:24:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 35777\r\nserver: nginx/1.21.6\r\nlast-modified: Sat, 19 Jul 2025 15:26:43 GMT\r\netag: \"687bb933-8bc1\"\r\nexpires: Sun, 17 Aug 2025 05:24:32 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: ah0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":35777,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x300, components 3","md5":"5d927b09f526577920cc71ef978b2397","sha1":"d26fb4cf28d500bb2761889ea7968e54a48ed1f4","sha256":"36bf52fddbda17aa737ad2ce02c3d4cfda7c377074eddf629064183539398890","sha512":"5b72fa42256c08e7ce5ebdfb6c0f36107a69460fb540290eb4ff0a9fa4bd7dd3be0b5a068a2a2b9aa34ae8b09483932d6fafdecd80106547fd95aef269cdf439","ssdeep":"768:CQ7Uq/ughpCmfo4tTjzkEg0tNquVAPmMj:3/ughpboUTjKQquGlj","tlshash":"58f2e13b5fcb2b9cea664374784ffb90ab315b01d9e646aea37423d157cf609a034502","first_seen":"2025-07-24T06:39:51.932528Z","last_seen":"2025-08-21T16:36:46.212006Z","times_seen":255,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":72,"dns":0,"connect":0,"send":0,"wait":70,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"172.67.138.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-15T05:24:26.804Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switchroms.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Jul 2025 02:18:55 GMT","end":"Wed, 08 Oct 2025 03:16:37 GMT"},"fingerprint":{"sha1":"9E:06:45:DB:7D:57:B4:C8:F6:AB:A6:53:8B:13:60:8F:FE:E8:08:C8","sha256":"93:C8:B1:DF:8F:F6:9F:7A:C0:58:BA:2C:97:3F:85:8E:05:96:03:F3:81:DB:A9:4A:BE:77:39:85:FE:D7:0F:13"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: switchroms.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 05:24:28 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nlink: \u003chttps://switchroms.io/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nserver: cloudflare\r\nx-content-type-options: \"nosniff\" always\r\nx-xss-protection: \"1; mode=block\" always\r\nstrict-transport-security: \"max-age=31536000; includeSubDomains; preload\" always\r\nreferrer-policy: no-referrer-when-downgrade\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yR%2FQDv8OyTAb85ofaFTY80bOgn25j56BOONs7krh5YHb5Ics2Vb4fXsMc1idUzyzx5WBx5Jmy34xQthqh9HLlHm499BycIkxGvBU\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfEdge;dur=11,cfOrigin;dur=1574\r\ncontent-encoding: br\r\ncf-ray: 96f64403dbb756c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Google AdSense","description":"Google AdSense is a program run by Google through which website publishers serve advertisements that are targeted to the site content and audience.","website":"https://www.google.com/adsense/start/","common_platform_enumeration":"","icon":"Google AdSense.svg","categories":["Advertising"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"jQuery:3.5.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"ShareThis","description":"ShareThis provides free engagement and growth tools (e.g., share buttons, follow buttons, and reaction buttons) for site owners.","website":"https://sharethis.com","common_platform_enumeration":"","icon":"ShareThis.png","categories":["Widgets"]},{"name":"WordPress:6.8.2","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146696,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8856)","md5":"9f2a0718b2db27d3bd6ffed345d0219e","sha1":"f47cbfdc0b283a906802cfe6a956f0a11596e670","sha256":"8e1007507127fdfbfbf9aec703b8395df4442415c8a29c882b1a1fc1b3310437","sha512":"e1fe0161575bfd7c72e27d10208d4898a10fce7e436cdd4d07ad1c51bdd40e61dcb41f2c51f1d723de357d73c31d15a86a590cc294f2ae5acd34c88f09ac56c4","ssdeep":"3072:Xo4zMkOABdYrhCFCIMPHOBKhTU6QeZIH6ga56M:GCFCIMPHOBKhTU6QP6J","tlshash":"8ae3f7b3a7c4003dc02a83c845742e9db5bc896ee5990c1cfefe1ed46f46ded54aa948","first_seen":"2025-08-15T05:24:58.016597Z","last_seen":"2025-08-15T05:24:58.016597Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1707,"timings":{"blocked":55,"dns":36,"connect":1,"send":0,"wait":1596,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/wp-content/plugins/sharethis-share-buttons/css/mu-style.css?ver=1748690531","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"172.67.138.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://switchroms.io/","date":"2025-08-15T05:24:28.914Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switchroms.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Jul 2025 02:18:55 GMT","end":"Wed, 08 Oct 2025 03:16:37 GMT"},"fingerprint":{"sha1":"9E:06:45:DB:7D:57:B4:C8:F6:AB:A6:53:8B:13:60:8F:FE:E8:08:C8","sha256":"93:C8:B1:DF:8F:F6:9F:7A:C0:58:BA:2C:97:3F:85:8E:05:96:03:F3:81:DB:A9:4A:BE:77:39:85:FE:D7:0F:13"}}},"request":{"raw":"GET /wp-content/plugins/sharethis-share-buttons/css/mu-style.css?ver=1748690531 HTTP/1.1\r\nHost: switchroms.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://switchroms.io/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 05:24:28 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 31 May 2025 11:22:11 GMT\r\nvary: accept-encoding\r\nserver: cloudflare\r\nx-content-type-options: \"nosniff\" always\r\nx-xss-protection: \"1; mode=block\" always\r\nstrict-transport-security: \"max-age=31536000; includeSubDomains; preload\" always\r\nreferrer-policy: no-referrer-when-downgrade\r\nexpires: Fri, 14 Aug 2026 07:24:58 GMT\r\ncache-control: public, max-age=31536000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NE9%2BFKIFgXjiYcCjQrntWw3NHC%2FnXts1L1ExDk4BMBXKxU0Vn0%2F0VtgGFMtK%2FQVgfkeFU9BeRiK8%2FFDjqbRCi7xPCZxpPO723Hjr\"}]}\r\nage: 79169\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"683ae663-1a\"\r\ncontent-encoding: br\r\ncf-ray: 96f644107ee456c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"59e211863955a948e58478e522b402c4","sha1":"fb63c77d17ff41f6347ca2b25e32686f2b3c3bcc","sha256":"f85e538e44687fc0feaa2f66a67831ec9f9b03446f115dec74b996da4a0a4a52","sha512":"ca22caa4491919ed44d39e08089e7b6d9851d57a04a55e31c7827474a6d6b904428e069b51a0234a6d1ee048f0c24235bd4c03e7d567e5496cdefc9f2e66bb92","ssdeep":"","tlshash":"4a80008082080a30038282088a0200a0a38a88e003e2a00008a200800aa000020b8083","first_seen":"2023-04-11T19:00:21Z","last_seen":"2026-05-13T12:48:10.257472Z","times_seen":1238,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/wp-content/uploads/2025/04/Kemono-Heroes.webp","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"172.67.138.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switchroms.io/","date":"2025-08-15T05:24:29.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switchroms.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Jul 2025 02:18:55 GMT","end":"Wed, 08 Oct 2025 03:16:37 GMT"},"fingerprint":{"sha1":"9E:06:45:DB:7D:57:B4:C8:F6:AB:A6:53:8B:13:60:8F:FE:E8:08:C8","sha256":"93:C8:B1:DF:8F:F6:9F:7A:C0:58:BA:2C:97:3F:85:8E:05:96:03:F3:81:DB:A9:4A:BE:77:39:85:FE:D7:0F:13"}}},"request":{"raw":"GET /wp-content/uploads/2025/04/Kemono-Heroes.webp HTTP/1.1\r\nHost: switchroms.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://switchroms.io/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 05:24:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 105340\r\nlast-modified: Wed, 09 Apr 2025 06:38:21 GMT\r\netag: \"67f615dd-19b7c\"\r\nserver: cloudflare\r\nx-content-type-options: \"nosniff\" always\r\nx-xss-protection: \"1; mode=block\" always\r\nstrict-transport-security: \"max-age=31536000; includeSubDomains; preload\" always\r\nreferrer-policy: no-referrer-when-downgrade\r\nexpires: Fri, 14 Aug 2026 07:24:59 GMT\r\ncache-control: public, max-age=31536000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\naccept-ranges: bytes\r\nage: 79169\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w5%2FonklwKqV65nBXXcHXM8uiR%2B9qubITYZCJ3DtY99glcwCDfeCRVgv%2Ffj%2Bm3EjOedF1bdygV9Tu74%2FoKdCOVK1aP6Dj4vvroTAV\"}]}\r\ncf-ray: 96f644111fb756c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":105340,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"eb23aecbf6f327764eb8ad96901a44eb","sha1":"e9aa8b27efe2684c10995ccaccae6deaf5c323f5","sha256":"4badf4497594589c4b734d630f042b79dc1ade7ee91addc6ee16cda0356cf359","sha512":"1d97fae8e33a3352f8c9f2d8d3672b30780d37b2d0155e290cf6c0d03cb0f368172a166eba0b77654163b0d0562fd3fa78ec191225ce9bd2bea0e73cf888c1d2","ssdeep":"3072:gKLiB7GygpzdZWFgYgm3y3ntStTpOjW/k+rjIByczRHtXga:gkaGHpz/nm3y3ntS9MKs+rsByoRHia","tlshash":"4ca3125ce2ba001db6dbd2ff0b1b311033ea59da07507aaa57d2312c785e677b04a9c6","first_seen":"2025-04-14T02:23:47.121972Z","last_seen":"2025-09-15T23:15:45.336179Z","times_seen":8,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.premiumvertising.com/pwpIn/FkY/ascrollreveal.min.js","fqdn":"www.premiumvertising.com","domain":"premiumvertising.com","tld":"com"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://switchroms.io/","date":"2025-08-15T05:24:29.330Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1258267123.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Jun 2025 08:29:55 GMT","end":"Tue, 23 Sep 2025 08:29:54 GMT"},"fingerprint":{"sha1":"99:A0:11:23:94:3E:61:6B:05:33:0A:AA:E1:80:10:34:EE:FE:6A:65","sha256":"08:DB:A8:3B:BE:EC:16:BA:53:65:F5:44:E2:4A:98:F3:57:D9:CC:DB:C0:ED:6C:31:51:60:E0:6C:9B:D2:4A:71"}}},"request":{"raw":"GET /pwpIn/FkY/ascrollreveal.min.js HTTP/1.1\r\nHost: www.premiumvertising.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://switchroms.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchroms.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 05:24:29 GMT\r\ncontent-type: application/x-javascript\r\npopads-node: wb9\r\nexpires: Wed, 20 Aug 2025 18:36:15 GMT\r\naccess-control-allow-origin: https://switchroms.io\r\nlink: \u003chttps://premiumvertising.com/\u003e;rel=preconnect\r\ncache-control: public, max-age=604800\r\nx-77-nzt: EwgBX63NDQFBDAG5TAoMAfee5AEADAElE8IxAbfQBAAA\r\nx-77-nzt-ray: 2a494a15b28a2623b2c49e685c70b014\r\nx-77-cache: HIT\r\nx-77-age: 124062\r\nvary: Accept-Encoding, Origin\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":41949,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (1568)","md5":"0185c136142b754b618cc3ed5450d7a3","sha1":"eaa78d775f08bb5045a82fcaf451aded71400f33","sha256":"f140a695e893bbefa470aded87951c197ab4122b00b50a714dec6a1d68fe839c","sha512":"adab02b5685ea1c6104a2b522ab5137ef7564f9bb3c081599f6692c632b8db3d73ea82920283d91700ec9db375bceea76fc5c5b8a5b604bb018827b33fbc5891","ssdeep":"768:bt9rqAYKKaZzFQ9JsQU+YDngZGihfzmMzhYrTsAysncCWcf5k5sigCD8Cntlqofr:bbxZzFQ9JsTgZvfzmMzhYrTscp8ZR","tlshash":"dc132aaab286282601e741b9503eb316b23305167912d458fcb9cdf96e3dd86117b7fc","first_seen":"2025-08-15T05:24:58.021919Z","last_seen":"2025-08-15T05:24:58.021919Z","times_seen":1,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":18,"dns":17,"connect":1,"send":0,"wait":23,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/ssp/interstitial/background_image/1/css/animate.css","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://switchroms.io/","date":"2025-08-15T05:24:31.841Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Jul 2025 14:01:22 GMT","end":"Mon, 29 Sep 2025 14:59:36 GMT"},"fingerprint":{"sha1":"CD:76:E0:2A:28:09:08:24:2D:4C:A1:14:B2:AE:6C:39:A4:CC:2F:6B","sha256":"8B:98:84:C0:8D:47:7C:1B:A7:26:4B:E4:9E:6E:FD:8E:E1:6D:6E:41:1D:E7:91:B7:70:A3:C1:D0:C0:85:6B:31"}}},"request":{"raw":"GET /sb/ssp/interstitial/background_image/1/css/animate.css HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://switchroms.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchroms.io/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 05:24:32 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Mon, 09 Oct 2023 10:29:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6523d624-13591\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wXAz8N67ikJSHpFeFeCut9pLt5GWZD4AJb1VtXJkYmu%2BpHWVjFxNacF1ydKSZ5qIuM6AZt9kbKT2SkFo6LlybvWWyZumXOuRI4uhpU0k\"}]}\r\ncf-ray: 96f644237d887129-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":79249,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"e1d8acd5ee9d1a90ea09313cbd8f2b02","sha1":"8a8327b115d1356715e63270d1ce6d46124c7b1a","sha256":"3028c87fc798ac3741f02079034e6c23462afc0c5e6c8d321188ce3716c8472a","sha512":"b942379b39b29577123ce4017a6566c046fe68c5a862f234302ddfdb08127e9e2d6b22bbf660ebcd5a196f63df0b34e4eaaa13c5f728e28b7cedfab2669f52f3","ssdeep":"384:ZFu8uVWgnu5uLlFlH/O/Qu7u/sjzbg/jxXlIPfL4jKgZQMkL0Vvaj7Z:ZFu8uEgnu5uBu7uhKgZQMkL0Vvaj7Z","tlshash":"bc731fad2991148452638a1d83df8e68673ce573181a9cef73c2488bcf8bf9c67c9147","first_seen":"2023-04-05T07:35:42Z","last_seen":"2026-05-12T08:23:04.240608Z","times_seen":4225,"resource_available":false,"data":null}},"time_used":633,"timings":{"blocked":77,"dns":39,"connect":2,"send":0,"wait":478,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/wp-content/uploads/2025/04/Spirit-Valor.webp","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"172.67.138.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switchroms.io/","date":"2025-08-15T05:24:28.980Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switchroms.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Jul 2025 02:18:55 GMT","end":"Wed, 08 Oct 2025 03:16:37 GMT"},"fingerprint":{"sha1":"9E:06:45:DB:7D:57:B4:C8:F6:AB:A6:53:8B:13:60:8F:FE:E8:08:C8","sha256":"93:C8:B1:DF:8F:F6:9F:7A:C0:58:BA:2C:97:3F:85:8E:05:96:03:F3:81:DB:A9:4A:BE:77:39:85:FE:D7:0F:13"}}},"request":{"raw":"GET /wp-content/uploads/2025/04/Spirit-Valor.webp HTTP/1.1\r\nHost: switchroms.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://switchroms.io/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 05:24:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 117108\r\nlast-modified: Sun, 13 Apr 2025 15:45:15 GMT\r\netag: \"67fbdc0b-1c974\"\r\nserver: cloudflare\r\nx-content-type-options: \"nosniff\" always\r\nx-xss-protection: \"1; mode=block\" always\r\nstrict-transport-security: \"max-age=31536000; includeSubDomains; preload\" always\r\nreferrer-policy: no-referrer-when-downgrade\r\nexpires: Fri, 14 Aug 2026 07:24:59 GMT\r\ncache-control: public, max-age=31536000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\naccept-ranges: bytes\r\nage: 79168\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o11x4mPIS8xDOxV2DZMs68KwDfB913gdl3A1dzTQ48CJDMtAREjjHCcMXUkaNiR5L8s4RPpkO9u2ODpk0FlBMApAXTfATxfxKnA7\"}]}\r\ncf-ray: 96f64410af3d56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":117108,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"baaacf66b6aa63c65c1f72b06e16004d","sha1":"e51204f57f55def68fddcd72da07caf39c042c9b","sha256":"2837ddd41600a24ac3894c72676e0d441e287f3dbaa86890419df89db6909c86","sha512":"67f14a18da9bb58910ffbf578194c4381e37a4836da3a2dc0d373c21391a0ec1b7a12bdfcaade747da500dd83b5c054940822dce6964833743ebf7547598a216","ssdeep":"1536:r3LUzSJDzTV0fwBRD9w3ddklPbXv6vpE+6XDAuAl6V+e0NYDURlA/IE86C3QeZhQ:LLKS1VlBw37MspEDD0c+BlAgETW3ZM1","tlshash":"c8b313b2bd148f0aed01575d2289e8edf6496bb2da34cd358d3f04257726c32da21f48","first_seen":"2025-05-28T10:03:28.156231Z","last_seen":"2025-11-07T04:54:38.694474Z","times_seen":8,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://switchroms.io/","date":"2025-08-15T05:24:32.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://switchroms.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 08 Aug 2025 08:13:09 GMT\r\nexpires: Sat, 08 Aug 2026 08:13:09 GMT\r\ncache-control: public, max-age=31536000\r\nage: 594683\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-05-13T15:33:51.603458Z","times_seen":818185,"resource_available":false,"data":null}},"time_used":286,"timings":{"blocked":110,"dns":1,"connect":28,"send":0,"wait":29,"receive":36,"ssl":78},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/ssp/interstitial/background_image/1/js/script.js","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://switchroms.io/","date":"2025-08-15T05:24:32.102Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Jul 2025 14:01:22 GMT","end":"Mon, 29 Sep 2025 14:59:36 GMT"},"fingerprint":{"sha1":"CD:76:E0:2A:28:09:08:24:2D:4C:A1:14:B2:AE:6C:39:A4:CC:2F:6B","sha256":"8B:98:84:C0:8D:47:7C:1B:A7:26:4B:E4:9E:6E:FD:8E:E1:6D:6E:41:1D:E7:91:B7:70:A3:C1:D0:C0:85:6B:31"}}},"request":{"raw":"GET /sb/ssp/interstitial/background_image/1/js/script.js HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://switchroms.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchroms.io/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 05:24:32 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 09 Oct 2023 11:38:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RfhgurSheQGGvTQkDXv6QPutj9fTcIrKLlGHv8z1ZR1zQkzpLyNXUj3oM1WdpdclbPwHBJqrj0DqqvdSTVKrjn6xcWRRqYW3YFudbOGp\"}]}\r\ncf-cache-status: MISS\r\netag: W/\"6523e652-239\"\r\ncontent-encoding: br\r\ncf-ray: 96f64424ae887129-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":569,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"f27e073eb67b2adf1f2192d35c0926f1","sha1":"f2f86e7b02a549ad8ee59d30a181697c280b8bce","sha256":"1ba076492d27e6cf42d837bc452fac345bb9e2a0416464a27291c2c7b75f699e","sha512":"9c1020cf2a1d02e7045b68b4b6a24bf741532cc7a0c7614f20f063f1ddab7b3dbb8c8dd5fd04226fbf90df821c1ea8f61b4625be5935d9a800bb2e5e110ba3f3","ssdeep":"","tlshash":"02f04c391168827497a7f067a24b27dab631415fd80a530b701c078e1ee4b6512d15f7","first_seen":"2024-08-06T18:59:03Z","last_seen":"2026-01-22T19:26:03.61106Z","times_seen":935,"resource_available":false,"data":null}},"time_used":484,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":482,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6.adsco.re:2087/","fqdn":"6.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"104.17.167.186","port":2087,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://switchroms.io/","date":"2025-08-15T05:24:30.761Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo RSA Organization Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 23 Sep 2024 00:00:00 GMT","end":"Mon, 29 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"3B:64:1C:DA:8C:64:22:01:36:0F:54:7A:99:6E:AD:26:C2:EF:59:8B","sha256":"A4:41:84:14:13:00:DA:93:54:10:5C:59:8A:A9:83:17:01:36:39:BE:1D:43:E5:FB:1C:F3:D6:AF:8A:ED:84:E2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 6.adsco.re:2087\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://switchroms.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchroms.io/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 05:24:30 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 45\r\ncf-ray: 96f6441c8afb568b-OSL\r\naccess-control-allow-origin: https://switchroms.io\r\ncache-control: private, max-age=10\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-max-age: 2592000\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":2087\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"5b41cb22f84f645a103acc7bfbf084ff","sha1":"bac3967b26d5ec4a0d09a580714e8219796816bd","sha256":"709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc","sha512":"772066ed1119519a19884fc94de2c9f2cc538b4528d9e2651a89b93d65bd4000b18297bfbdd8903b65146858935d33cac048c321dad2ea4f1f84ca6dd9b7d98f","ssdeep":"","tlshash":"7990041154441d34dc45470c4f0d0f0553dc5153df377374ddc50f0414531344141d00","first_seen":"2023-04-05T06:05:36Z","last_seen":"2026-03-30T19:07:46.969854Z","times_seen":25700,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":46,"dns":36,"connect":1,"send":0,"wait":10,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"172.67.138.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://switchroms.io/","date":"2025-08-15T05:24:28.919Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switchroms.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Jul 2025 02:18:55 GMT","end":"Wed, 08 Oct 2025 03:16:37 GMT"},"fingerprint":{"sha1":"9E:06:45:DB:7D:57:B4:C8:F6:AB:A6:53:8B:13:60:8F:FE:E8:08:C8","sha256":"93:C8:B1:DF:8F:F6:9F:7A:C0:58:BA:2C:97:3F:85:8E:05:96:03:F3:81:DB:A9:4A:BE:77:39:85:FE:D7:0F:13"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: switchroms.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://switchroms.io/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 05:24:28 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 14 Mar 2024 09:02:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65f2bd35-15601\"\r\nserver: cloudflare\r\nx-content-type-options: \"nosniff\" always\r\nx-xss-protection: \"1; mode=block\" always\r\nstrict-transport-security: \"max-age=31536000; includeSubDomains; preload\" always\r\nreferrer-policy: no-referrer-when-downgrade\r\nexpires: Fri, 14 Aug 2026 07:24:58 GMT\r\ncache-control: public, max-age=31536000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\ncontent-encoding: gzip\r\nage: 79169\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4UCjzExBgH4Uniq5mljl1DRFzS0JcoqfjxqQ48Cc6JFuGhP%2Bo%2F1ow9%2FaQrf4W2ixvXk8Ny7os4cPAB3gFQOc34KgdMOW4wSXoUko\"}]}\r\ncf-ray: 96f644107ee856c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-05-13T15:33:44.633997Z","times_seen":820193,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/wp-content/uploads/2025/04/Sid-Meiers-Civilization-VI.webp","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"172.67.138.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switchroms.io/","date":"2025-08-15T05:24:28.975Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switchroms.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Jul 2025 02:18:55 GMT","end":"Wed, 08 Oct 2025 03:16:37 GMT"},"fingerprint":{"sha1":"9E:06:45:DB:7D:57:B4:C8:F6:AB:A6:53:8B:13:60:8F:FE:E8:08:C8","sha256":"93:C8:B1:DF:8F:F6:9F:7A:C0:58:BA:2C:97:3F:85:8E:05:96:03:F3:81:DB:A9:4A:BE:77:39:85:FE:D7:0F:13"}}},"request":{"raw":"GET /wp-content/uploads/2025/04/Sid-Meiers-Civilization-VI.webp HTTP/1.1\r\nHost: switchroms.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://switchroms.io/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 05:24:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 139314\r\nlast-modified: Tue, 15 Apr 2025 11:02:32 GMT\r\netag: \"67fe3cc8-22032\"\r\nserver: cloudflare\r\nx-content-type-options: \"nosniff\" always\r\nx-xss-protection: \"1; mode=block\" always\r\nstrict-transport-security: \"max-age=31536000; includeSubDomains; preload\" always\r\nreferrer-policy: no-referrer-when-downgrade\r\nexpires: Sat, 01 Aug 2026 19:27:26 GMT\r\ncache-control: public, max-age=31536000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\naccept-ranges: bytes\r\nage: 1159022\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wTLr1RUNH6OiuUXR1LxEAp5umJyQIbwBiWhiKA92n2bXzXEfOoOCKK9Gjg5K5wc6ABD2cgdgCfxyPiPlo9SXTisboYRTx8%2FlxB%2BX\"}]}\r\ncf-ray: 96f644109f2356c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":139314,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e30db03546548d2ce2b6ee532f34e382","sha1":"91616a916ee8cfbda69d38a4b2c9db367037f207","sha256":"68f0449b497c786085f89f67e8c8f7b2a0eebc84e32a2631c27140e1ce6a67d8","sha512":"e3e5ae1ac0d69d877f91bfab0063c9015dea777d180bda2bff5c184b0d819de35cd4a8b85a424373ae29e11f5a2f9bb92cc8fbb262240ec1dd9c5acb8506546b","ssdeep":"3072:WArfoXJOqc5+614iQRbY5+Pd/dw/t8g5ZBEy0RaiQSH:WArfoXAx5x14FdV/dw/t8cHjJS","tlshash":"51d313e5c92f34271a581945ee23a5838b9a19485e9dff408f70f43d728ad8d33b86c7","first_seen":"2025-05-28T10:03:28.199787Z","last_seen":"2025-09-15T23:15:45.356113Z","times_seen":7,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/wp-admin/admin-ajax.php?action=ajax-checkclicks\u0026nonce=c097538dad","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"172.67.138.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://switchroms.io/","date":"2025-08-15T05:24:29.837Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switchroms.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Jul 2025 02:18:55 GMT","end":"Wed, 08 Oct 2025 03:16:37 GMT"},"fingerprint":{"sha1":"9E:06:45:DB:7D:57:B4:C8:F6:AB:A6:53:8B:13:60:8F:FE:E8:08:C8","sha256":"93:C8:B1:DF:8F:F6:9F:7A:C0:58:BA:2C:97:3F:85:8E:05:96:03:F3:81:DB:A9:4A:BE:77:39:85:FE:D7:0F:13"}}},"request":{"raw":"POST /wp-admin/admin-ajax.php?action=ajax-checkclicks\u0026nonce=c097538dad HTTP/1.1\r\nHost: switchroms.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://switchroms.io/\r\nX-Requested-With: XMLHttpRequest\r\nOrigin: https://switchroms.io\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_5488P24RVQ=GS2.1.s1755235469$o1$g0$t1755235469$j60$l0$h0; _ga=GA1.1.1220748367.1755235470\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 15 Aug 2025 05:24:31 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: https://switchroms.io\r\naccess-control-allow-credentials: true\r\nx-robots-tag: noindex\r\nx-content-type-options: \"nosniff\" always\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\nx-xss-protection: \"1; mode=block\" always\r\nstrict-transport-security: \"max-age=31536000; includeSubDomains; preload\" always\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8rlKz2z9K0XW%2FbIK1zgFObXXpAUsLT2KLfUMf5bvJjwsx0%2BRZ1RS%2F8Y4Hmmw9CmeKlsX95%2FpBc1K8QZrtnctOsMjmwG4Eh7C0cH0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 96f644167e5db4f7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":88,"size_decoded":0,"mime_type":"application/json","magic":"HTML document, ASCII text, with no line terminators","md5":"67be8cc0ea3939fd4ebf08e8c1c53ec7","sha1":"5f29c127d4e5697d0a3816ffe44d9a5e91380541","sha256":"c6898f04dd283ceea2dcaa08243872420b355a61eba201b8d3299eae8774c46b","sha512":"270c389ad9f17a8fea32847ee067b110802df46b92294628f3a8e28175c9aaea0d994c9e24088099b3e5d43f579721595140e3f08ba80d9ebae0e8d65c56748a","ssdeep":"","tlshash":"c3b0124503430706230121313c72332f012011d367f12a3d4a1f3634d25f8029640200","first_seen":"2025-04-14T02:23:47.148027Z","last_seen":"2025-11-09T18:43:58.481571Z","times_seen":17,"resource_available":false,"data":null}},"time_used":1177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1177,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.show-sb.com%2Fsb%2Fau%2F3a%2Ffb%2F42%2F3afb429f1f81cca1b8c0759baff80b11%2F1698575610.html\u0026l=1356\u0026fd=316","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"192.243.61.227","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switchroms.io/","date":"2025-08-15T05:24:31.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 22:21:33 GMT","end":"Fri, 26 Sep 2025 22:21:32 GMT"},"fingerprint":{"sha1":"4A:6A:48:C8:5B:C5:2B:2E:9C:03:AF:BF:4C:E6:10:23:E2:7B:EA:97","sha256":"A8:42:B5:4A:20:C8:13:EF:B5:90:0F:54:37:F7:05:60:8D:91:07:E3:A4:0F:7A:22:C9:AF:F1:F5:22:E8:68:C9"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.show-sb.com%2Fsb%2Fau%2F3a%2Ffb%2F42%2F3afb429f1f81cca1b8c0759baff80b11%2F1698575610.html\u0026l=1356\u0026fd=316 HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchroms.io/\r\nCookie: uid_id2=62f0fc5a-aa7f-4636-8af5-6a014c9884e2:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl26551100=1; slec0e536fb8895c74d7dcf7b58fe63dae08=[6073101]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Fri, 15 Aug 2025 05:24:31 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T15:33:13.162002Z","times_seen":15117490,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-15","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/wp-content/uploads/2024/07/SNK-VS.-CAPCOM-SVC-CHAOS.png","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"172.67.138.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switchroms.io/","date":"2025-08-15T05:24:28.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switchroms.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Jul 2025 02:18:55 GMT","end":"Wed, 08 Oct 2025 03:16:37 GMT"},"fingerprint":{"sha1":"9E:06:45:DB:7D:57:B4:C8:F6:AB:A6:53:8B:13:60:8F:FE:E8:08:C8","sha256":"93:C8:B1:DF:8F:F6:9F:7A:C0:58:BA:2C:97:3F:85:8E:05:96:03:F3:81:DB:A9:4A:BE:77:39:85:FE:D7:0F:13"}}},"request":{"raw":"GET /wp-content/uploads/2024/07/SNK-VS.-CAPCOM-SVC-CHAOS.png HTTP/1.1\r\nHost: switchroms.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://switchroms.io/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 05:24:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 108362\r\nlast-modified: Tue, 30 Jul 2024 15:05:34 GMT\r\netag: \"66a9013e-1a74a\"\r\nserver: cloudflare\r\nx-content-type-options: \"nosniff\" always\r\nx-xss-protection: \"1; mode=block\" always\r\nstrict-transport-security: \"max-age=31536000; includeSubDomains; preload\" always\r\nreferrer-policy: no-referrer-when-downgrade\r\nexpires: Sat, 18 Jul 2026 09:52:07 GMT\r\ncache-control: public, max-age=31536000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\naccept-ranges: bytes\r\nage: 2403140\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x6DVSkSJlbdH3ABUIrXayr32neb%2FXPKuzY%2BsKPH%2BIA%2FS1TxH%2F02UB1RBgylqPGNLS%2BO4utKu2Z1whVACDT1ZH2%2FqKfBB%2FamosTho\"}]}\r\ncf-ray: 96f644108f0d56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":108362,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 355 x 575, 8-bit colormap, non-interlaced","md5":"b04c3efa652f168c35abc53004ba34e2","sha1":"ad8c2ce8ef83c3295dfc2f310970d664b938f575","sha256":"5a8d5413e15c6504d7a869b8196bc83ec78811b7b4912eb071a0aa127c688fd0","sha512":"e6318bc4ea57b2e715d72423eb8e852b55205233522d89769b79b066491a2d18d86493a98abe8b274ee57f409267cb96787998cb41302983def4129852233d53","ssdeep":"3072:yJvZGH2ceJzS0jP+3T6Y9TQnMIcH67u2+8XPfZaVOZ:sv5m0jP+D67MITfx","tlshash":"a2b3125a4d079c526601e924ef7ab306e5a3b8a414fd4ec14e7e573437daa2b822f307","first_seen":"2025-05-28T10:03:28.18594Z","last_seen":"2025-09-15T23:15:45.352692Z","times_seen":7,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/wp-content/plugins/gioi-han-ads/js/checkclicks.js?ver=6.8.2","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"172.67.138.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://switchroms.io/","date":"2025-08-15T05:24:28.939Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switchroms.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Jul 2025 02:18:55 GMT","end":"Wed, 08 Oct 2025 03:16:37 GMT"},"fingerprint":{"sha1":"9E:06:45:DB:7D:57:B4:C8:F6:AB:A6:53:8B:13:60:8F:FE:E8:08:C8","sha256":"93:C8:B1:DF:8F:F6:9F:7A:C0:58:BA:2C:97:3F:85:8E:05:96:03:F3:81:DB:A9:4A:BE:77:39:85:FE:D7:0F:13"}}},"request":{"raw":"GET /wp-content/plugins/gioi-han-ads/js/checkclicks.js?ver=6.8.2 HTTP/1.1\r\nHost: switchroms.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://switchroms.io/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 05:24:28 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Sat, 12 Apr 2025 20:51:44 GMT\r\nvary: accept-encoding\r\nserver: cloudflare\r\nx-content-type-options: \"nosniff\" always\r\nx-xss-protection: \"1; mode=block\" always\r\nstrict-transport-security: \"max-age=31536000; includeSubDomains; preload\" always\r\nreferrer-policy: no-referrer-when-downgrade\r\nexpires: Fri, 14 Aug 2026 07:24:58 GMT\r\ncache-control: public, max-age=31536000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ICyIeCk6k6xMVoii0g8lY91AVt25yIZ1MXNlp4HWJhTud15saejRVEMfUDpEnTTvNZdK7xSejzktjz4wUqPRcAYBHP98LIfn8jaS\"}]}\r\nage: 79169\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"67fad260-31\"\r\ncontent-encoding: br\r\ncf-ray: 96f644108efb56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":49,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"973a020ce262cc5bf9af40d40bbb0b36","sha1":"e14dc4c73ba1c3c694ccd6aba9ca25190d970074","sha256":"0df963c9efbf64868ab3312f0ba278b13bf97b69c9b9eae2f9399b922ad07525","sha512":"a93941948a8410ef88d57ae2f777a5a8c84aed2fc5a14f6b1f769dff29a13455b198fc63bd45953eacf648631729704c228a7be15c33aa6048af295e909eddcf","ssdeep":"","tlshash":"c19002058682e54b2b911459dd0484f9454a961306540108c2704d407107058d378004","first_seen":"2023-03-07T12:04:15Z","last_seen":"2026-04-30T20:57:55.694365Z","times_seen":30,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/wp-content/uploads/2025/04/Twilight-Monk.webp","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"172.67.138.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switchroms.io/","date":"2025-08-15T05:24:29.006Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switchroms.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Jul 2025 02:18:55 GMT","end":"Wed, 08 Oct 2025 03:16:37 GMT"},"fingerprint":{"sha1":"9E:06:45:DB:7D:57:B4:C8:F6:AB:A6:53:8B:13:60:8F:FE:E8:08:C8","sha256":"93:C8:B1:DF:8F:F6:9F:7A:C0:58:BA:2C:97:3F:85:8E:05:96:03:F3:81:DB:A9:4A:BE:77:39:85:FE:D7:0F:13"}}},"request":{"raw":"GET /wp-content/uploads/2025/04/Twilight-Monk.webp HTTP/1.1\r\nHost: switchroms.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://switchroms.io/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 05:24:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 98192\r\nlast-modified: Wed, 09 Apr 2025 06:01:39 GMT\r\netag: \"67f60d43-17f90\"\r\nserver: cloudflare\r\nx-content-type-options: \"nosniff\" always\r\nx-xss-protection: \"1; mode=block\" always\r\nstrict-transport-security: \"max-age=31536000; includeSubDomains; preload\" always\r\nreferrer-policy: no-referrer-when-downgrade\r\nexpires: Wed, 12 Aug 2026 01:21:40 GMT\r\ncache-control: public, max-age=31536000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\naccept-ranges: bytes\r\nage: 273768\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kimqWU%2FSArCvdPAs6%2Fu%2BcxU1NgpNdLo4OsJ1rj3JJX3nUJL8JrfgoG%2BwE0PlEvxHJBF5UwC50a7sEHvjPVXFP6uLiGLY3RIOR2cS\"}]}\r\ncf-ray: 96f644112fbf56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":98192,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"464fc59cd099c96183da4aec940858a9","sha1":"4da43e3d3c77ca64576509e3b43ff959edf82019","sha256":"16caf1ac8087f6bb1806a14a6b38303692be7fa98eaeb2e22500e7ff314af7b1","sha512":"a74b0465ce73a95997f905e3906681dd8d516dc60406e6bd6a3f3fe5bb98234893a17a6af8435d144e33b0eecf60f96961d16b175550f162a80a92474344b0e7","ssdeep":"1536:NgAXxkrNJmkxW8Ov9gf8TLOq/d0lntSkdjYK1wg01cUrOcA3fqteOZAKB3I+8m91:NgAXxk5Jmr8OafWLRFMntSkdjYKig01B","tlshash":"55a31271cd338ffdd28055b853a3259201180736d8233706aa879b79e77899660cdefa","first_seen":"2025-05-28T10:03:28.175924Z","last_seen":"2026-01-26T03:36:30.098826Z","times_seen":13,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4.adsco.re/","fqdn":"4.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"162.252.214.5","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://switchroms.io/","date":"2025-08-15T05:24:30.756Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_RSA_WITH_AES_256_CBC_SHA","key_group_name":"none","signature_name":"none","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo RSA Organization Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 23 Sep 2024 00:00:00 GMT","end":"Mon, 29 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"3B:64:1C:DA:8C:64:22:01:36:0F:54:7A:99:6E:AD:26:C2:EF:59:8B","sha256":"A4:41:84:14:13:00:DA:93:54:10:5C:59:8A:A9:83:17:01:36:39:BE:1D:43:E5:FB:1C:F3:D6:AF:8A:ED:84:E2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 4.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://switchroms.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchroms.io/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 15 Aug 2025 05:24:31 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Methods: GET, HEAD, OPTIONS\r\nAccess-Control-Allow-Headers: Content-Type\r\nAccess-Control-Allow-Origin: https://switchroms.io\r\nAccess-Control-Max-Age: 2592000\r\nCache-Control: private, max-age=5\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":45,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"5b41cb22f84f645a103acc7bfbf084ff","sha1":"bac3967b26d5ec4a0d09a580714e8219796816bd","sha256":"709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc","sha512":"772066ed1119519a19884fc94de2c9f2cc538b4528d9e2651a89b93d65bd4000b18297bfbdd8903b65146858935d33cac048c321dad2ea4f1f84ca6dd9b7d98f","ssdeep":"","tlshash":"7990041154441d34dc45470c4f0d0f0553dc5153df377374ddc50f0414531344141d00","first_seen":"2023-04-05T06:05:36Z","last_seen":"2026-03-30T19:07:46.969854Z","times_seen":25700,"resource_available":true,"data":null}},"time_used":686,"timings":{"blocked":290,"dns":8,"connect":93,"send":0,"wait":102,"receive":0,"ssl":189},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/wp-content/plugins/kk-star-ratings/src/core/public/css/kk-star-ratings.min.css?ver=5.4.10.2","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"172.67.138.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://switchroms.io/","date":"2025-08-15T05:24:28.909Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switchroms.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Jul 2025 02:18:55 GMT","end":"Wed, 08 Oct 2025 03:16:37 GMT"},"fingerprint":{"sha1":"9E:06:45:DB:7D:57:B4:C8:F6:AB:A6:53:8B:13:60:8F:FE:E8:08:C8","sha256":"93:C8:B1:DF:8F:F6:9F:7A:C0:58:BA:2C:97:3F:85:8E:05:96:03:F3:81:DB:A9:4A:BE:77:39:85:FE:D7:0F:13"}}},"request":{"raw":"GET /wp-content/plugins/kk-star-ratings/src/core/public/css/kk-star-ratings.min.css?ver=5.4.10.2 HTTP/1.1\r\nHost: switchroms.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://switchroms.io/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 05:24:28 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 25 Mar 2025 16:15:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67e2d6af-8d3\"\r\nserver: cloudflare\r\nx-content-type-options: \"nosniff\" always\r\nx-xss-protection: \"1; mode=block\" always\r\nstrict-transport-security: \"max-age=31536000; includeSubDomains; preload\" always\r\nreferrer-policy: no-referrer-when-downgrade\r\nexpires: Fri, 14 Aug 2026 07:24:58 GMT\r\ncache-control: public, max-age=31536000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\ncontent-encoding: gzip\r\nage: 79169\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=78%2BmGx5ZFBwpOa5eTTRmLa2GzBVfazWgPWeTpYUIDO6oh4R%2B5cj6SGbcAS%2BEr25zL77%2Bw7GsWy1QuSqgJ4F%2Fr78fwf4VhtPvR8dH\"}]}\r\ncf-ray: 96f644106ee356c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2259,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2181)","md5":"533af03c49baedabf2e6a0badf1269cf","sha1":"5837bb0d22601bc1e4fd6b610c090b7280a644be","sha256":"1cd6396792d7bfdd898dcb9f2ee195387179b30fb4cc2cdc0c57575fab655230","sha512":"d0c64d59a8b002e02378882511b3d0c2d3af3ebdbdfbe5d96cbfbdbd9c17c08da7283c1900729e36040601fa10787dddb65b8e77570103cf8e04eb2a22b96295","ssdeep":"","tlshash":"f641c1b6e84d228cdd17c8621d0793d745a7e4d68ab5f5ee01ca3518c3afec80661cde","first_seen":"2023-04-05T15:58:59Z","last_seen":"2026-05-13T10:53:45.070227Z","times_seen":1946,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/wp-content/uploads/2024/03/Super-Mario-Bros-Wonder.jpg","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"172.67.138.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switchroms.io/","date":"2025-08-15T05:24:28.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switchroms.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Jul 2025 02:18:55 GMT","end":"Wed, 08 Oct 2025 03:16:37 GMT"},"fingerprint":{"sha1":"9E:06:45:DB:7D:57:B4:C8:F6:AB:A6:53:8B:13:60:8F:FE:E8:08:C8","sha256":"93:C8:B1:DF:8F:F6:9F:7A:C0:58:BA:2C:97:3F:85:8E:05:96:03:F3:81:DB:A9:4A:BE:77:39:85:FE:D7:0F:13"}}},"request":{"raw":"GET /wp-content/uploads/2024/03/Super-Mario-Bros-Wonder.jpg HTTP/1.1\r\nHost: switchroms.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://switchroms.io/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 05:24:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 64242\r\nlast-modified: Sun, 17 Mar 2024 18:18:39 GMT\r\netag: \"65f733ff-faf2\"\r\nserver: cloudflare\r\nx-content-type-options: \"nosniff\" always\r\nx-xss-protection: \"1; mode=block\" always\r\nstrict-transport-security: \"max-age=31536000; includeSubDomains; preload\" always\r\nreferrer-policy: no-referrer-when-downgrade\r\nexpires: Sat, 01 Aug 2026 19:27:26 GMT\r\ncache-control: public, max-age=31536000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\naccept-ranges: bytes\r\nage: 1159022\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i5gFw2Ce3doO2R9Pgyor8fST4CBQ9Sbc1hcVIXp3IBxOksJy4QV8WBb79dh2II4eE9zRU2emh0eud7McOUjCXLvU9IxMy4o9hrvA\"}]}\r\ncf-ray: 96f644108f0456c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":64242,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 355x575, components 3","md5":"d49c0bdaa4ddaa089f188918917bf101","sha1":"3f0a6d58844754bc133447bb3da93ddcd9182435","sha256":"64fbb354f5be8587b98ff04560d51ae0c058f1956a423d1c4852a0dc2b4570ab","sha512":"d58230a3856152e715aca2bc866ec057a55a95382a09c67c1467e9eba1c11fa3bd9fe6ca948e89e8e2e7349b5cf4747f5b771e33e9df963eeb5d068bcc7944ad","ssdeep":"1536:o76/mxS4jvy3l9nYetm00DNooxcxrOl7F6AG6zKMXk32q:5WSwvyV9YwS9xcxQ6Ag3x","tlshash":"b253020e1dba71827061003b777548723d2a7feddab42b572f8498e1696ae2f40970f6","first_seen":"2025-05-28T10:03:28.108143Z","last_seen":"2025-09-15T23:15:45.336683Z","times_seen":8,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"compiledonatevanity.com/0e/53/6f/0e536fb8895c74d7dcf7b58fe63dae08.js","fqdn":"compiledonatevanity.com","domain":"compiledonatevanity.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://switchroms.io/","date":"2025-08-15T05:24:29.019Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"compiledonatevanity.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 Aug 2025 21:19:35 GMT","end":"Fri, 07 Nov 2025 21:19:34 GMT"},"fingerprint":{"sha1":"0C:7D:F3:B9:85:06:A8:A2:A0:50:3C:FE:6A:EE:DF:0A:47:3D:3D:D4","sha256":"18:22:3B:D0:23:CF:00:91:4C:14:75:6D:A2:2E:B9:7E:B2:54:26:5D:AF:B9:74:89:04:49:9D:51:DD:CC:AE:C3"}}},"request":{"raw":"GET /0e/53/6f/0e536fb8895c74d7dcf7b58fe63dae08.js HTTP/1.1\r\nHost: compiledonatevanity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchroms.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Fri, 15 Aug 2025 05:24:29 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 25622\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 4\r\nHost: compiledonatevanity.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 8a7a4270c83ee63b831482ee1ad0ff2a\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":72592,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d321562fbef61a7f0ecece1ae88e1491","sha1":"45cfca77a66af6049ee92adc1738d695f1b3775a","sha256":"4227d441bed20e9fee837a6bed21ff3c43e9a39b92197c54447443292934b047","sha512":"6d8c1e2ba25ea92d9ecddc94ab2cbd1bfe06d29334cf3c678c0cc17e720c65f863612c8a20ef340a88b87d87bff075d2147cd47b17b0bc5063f5e74efdabdc4f","ssdeep":"768:Y2bnYMmzoFqw648+QhS8u+Jcj/XcdNjNQmOdY08kUbTehzbcepw6f:Y2bnOv4x5O+jvc6dY0U3fE","tlshash":"4d63c7483f51b27802e6b8fa712fa61af0265c1195d8e0d8f503f4deae66719f036f25","first_seen":"2025-08-15T05:24:58.032909Z","last_seen":"2025-08-15T05:24:58.032909Z","times_seen":1,"resource_available":true,"data":null}},"time_used":756,"timings":{"blocked":236,"dns":38,"connect":93,"send":0,"wait":99,"receive":94,"ssl":192},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-15","alert":"Sinkholed","trigger":"compiledonatevanity.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"htiivw4vkrqr.s4.adsco.re/","fqdn":"htiivw4vkrqr.s4.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"185.200.116.60","port":443,"asn":9009,"as":"M247 Europe SRL","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://switchroms.io/","date":"2025-08-15T05:24:30.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.s4.adsco.re","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Jul 2025 09:54:45 GMT","end":"Thu, 16 Oct 2025 09:54:44 GMT"},"fingerprint":{"sha1":"83:C7:27:CC:F1:15:7A:E0:86:E4:6A:42:8E:8B:4B:D6:F0:81:BE:78","sha256":"27:48:A4:5B:60:63:6F:94:B9:90:BA:1D:D5:C4:1A:8D:62:BF:0C:DE:A0:7F:8D:B1:21:C4:4E:85:A6:3E:D6:33"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: htiivw4vkrqr.s4.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 0\r\nOrigin: https://switchroms.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchroms.io/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 05:24:31 GMT\r\ncontent-type: text/html\r\ncontent-length: 0\r\nlast-modified: Tue, 03 Oct 2023 13:29:59 GMT\r\netag: \"651c1757-0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T15:33:13.162002Z","times_seen":15117490,"resource_available":true,"data":null}},"time_used":1380,"timings":{"blocked":-1,"dns":329,"connect":254,"send":0,"wait":256,"receive":0,"ssl":540},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flushpersist.com/pxf.gif?uuid=62f0fc5a-aa7f-4636-8af5-6a014c9884e2\u0026eb=bff3d6bf6d16c0bb5e58232c1a99ef63\u0026te=fe015aeda515c30449c87b1701cc307f\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=0e536fb8895c74d7dcf7b58fe63dae08\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=5","fqdn":"flushpersist.com","domain":"flushpersist.com","tld":"com"},"ip":{"addr":"192.243.59.13","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switchroms.io/","date":"2025-08-15T05:24:31.198Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"flushpersist.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 01 Jul 2025 15:12:33 GMT","end":"Mon, 29 Sep 2025 15:12:32 GMT"},"fingerprint":{"sha1":"9E:08:20:A0:75:ED:21:51:E0:3D:DE:29:CD:B0:11:01:4D:04:77:0A","sha256":"FB:D4:A2:1D:0F:F1:FB:A8:D9:5E:88:03:1F:BB:94:D2:32:5C:CC:49:11:11:FC:04:7B:C6:43:40:CF:1E:A2:BA"}}},"request":{"raw":"GET /pxf.gif?uuid=62f0fc5a-aa7f-4636-8af5-6a014c9884e2\u0026eb=bff3d6bf6d16c0bb5e58232c1a99ef63\u0026te=fe015aeda515c30449c87b1701cc307f\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=0e536fb8895c74d7dcf7b58fe63dae08\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=5 HTTP/1.1\r\nHost: flushpersist.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchroms.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.19.5\r\nDate: Fri, 15 Aug 2025 05:24:31 GMT\r\nContent-Type: image/gif\r\nContent-Length: 1\r\nConnection: keep-alive\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nHost: flushpersist.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 492e06a8b6fc3f505271561ad3db6d6d\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.19.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T15:33:13.162002Z","times_seen":15117490,"resource_available":true,"data":null}},"time_used":677,"timings":{"blocked":289,"dns":1,"connect":93,"send":0,"wait":97,"receive":1,"ssl":192},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/wp-content/plugins/gioi-han-ads/js/check_min.js?ver=6.8.2","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"172.67.138.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://switchroms.io/","date":"2025-08-15T05:24:28.947Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switchroms.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Jul 2025 02:18:55 GMT","end":"Wed, 08 Oct 2025 03:16:37 GMT"},"fingerprint":{"sha1":"9E:06:45:DB:7D:57:B4:C8:F6:AB:A6:53:8B:13:60:8F:FE:E8:08:C8","sha256":"93:C8:B1:DF:8F:F6:9F:7A:C0:58:BA:2C:97:3F:85:8E:05:96:03:F3:81:DB:A9:4A:BE:77:39:85:FE:D7:0F:13"}}},"request":{"raw":"GET /wp-content/plugins/gioi-han-ads/js/check_min.js?ver=6.8.2 HTTP/1.1\r\nHost: switchroms.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://switchroms.io/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 05:24:28 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Sat, 12 Apr 2025 20:51:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67fad260-3514\"\r\nserver: cloudflare\r\nx-content-type-options: \"nosniff\" always\r\nx-xss-protection: \"1; mode=block\" always\r\nstrict-transport-security: \"max-age=31536000; includeSubDomains; preload\" always\r\nreferrer-policy: no-referrer-when-downgrade\r\nexpires: Sat, 15 Aug 2026 01:32:11 GMT\r\ncache-control: public, max-age=31536000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\ncontent-encoding: gzip\r\nage: 13937\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9MnTUOrgHyJolKS8T%2BF6CxXW8TCDyj%2FMUAaF2jAzWiYAnY7jNG7LKo8U9Bb05w1j9Yz%2FsXxVCq0SA7FK42GUI07us0FWb386GZ%2BG\"}]}\r\ncf-ray: 96f644108efe56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13588,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (13588), with no line terminators","md5":"ab8a3638e8f419c7fda2bdd605f2a59e","sha1":"8354da44e01c9ed2b00dd6c0c108fc1ccefa92fa","sha256":"deaf971a839013e15b3917c3256b6e19f036bc569b72312da9526adcecf5d5e0","sha512":"322e5fa3ec94061ce9c16f284bbaaf922d48cbe039db0851695b5c9f4fb636586c3c7940e134818eeefd7c89fe3538b37dff1f46a2bec515095ff111cfd35f05","ssdeep":"384:KMfx9H8MkxxsskxVfGYdQaM/IUbZtS0SjGd6SxOD9uf4c7+:KMfx9H8Mkxxfkx1GYMFS0SSsSO9TS+","tlshash":"c152e77830a2117b80fb717578afa24e737399367143e4d1d0e8f168267dd266a22f1e","first_seen":"2023-03-07T12:04:15Z","last_seen":"2026-04-30T20:57:55.629556Z","times_seen":30,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/wp-content/uploads/2024/07/Pokemon-Violet.png","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"172.67.138.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switchroms.io/","date":"2025-08-15T05:24:28.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switchroms.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Jul 2025 02:18:55 GMT","end":"Wed, 08 Oct 2025 03:16:37 GMT"},"fingerprint":{"sha1":"9E:06:45:DB:7D:57:B4:C8:F6:AB:A6:53:8B:13:60:8F:FE:E8:08:C8","sha256":"93:C8:B1:DF:8F:F6:9F:7A:C0:58:BA:2C:97:3F:85:8E:05:96:03:F3:81:DB:A9:4A:BE:77:39:85:FE:D7:0F:13"}}},"request":{"raw":"GET /wp-content/uploads/2024/07/Pokemon-Violet.png HTTP/1.1\r\nHost: switchroms.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://switchroms.io/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 05:24:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 83467\r\nlast-modified: Tue, 23 Jul 2024 13:11:59 GMT\r\netag: \"669fac1f-1460b\"\r\nserver: cloudflare\r\nx-content-type-options: \"nosniff\" always\r\nx-xss-protection: \"1; mode=block\" always\r\nstrict-transport-security: \"max-age=31536000; includeSubDomains; preload\" always\r\nreferrer-policy: no-referrer-when-downgrade\r\nexpires: Sat, 01 Aug 2026 19:27:26 GMT\r\ncache-control: public, max-age=31536000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\naccept-ranges: bytes\r\nage: 1159022\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dmsPdR24PZAXwllsayGuQJ32L%2FHVRg2lBo9QlCdfq7ttrCa%2F8KV9wmngi3vOaD%2FHWGsY8YBqXULXSDg9cAl6Mae13Psp0cdyFvBL\"}]}\r\ncf-ray: 96f644108f0956c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":83467,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 355 x 575, 8-bit colormap, non-interlaced","md5":"5b7b3fe4394217b610e0e05b025e0022","sha1":"1f2f43698823732c74e1a2da4ebb90218a06da9c","sha256":"c686e17eb2ec0f875c859fd775ff91113767c05a8c11c19f16397a6340c172ab","sha512":"4a6726ec8225cf4529ad0058307591742d80765b3893cd0269f46e22789deade575fa8c6f8e3abf3b2ac73e000a7bc3cd5246a5d0f56d9060de7630c53e47d42","ssdeep":"1536:9Pl2sfiExV0tscu3/fVmjT1jEQAlEDMT9/S651DM3yh00TzgbG896JXqHcz:9gsqy0tgm13AEAT9/x51DxIbG3n","tlshash":"d883120782ed9d642e67e6c75348a081603083990077d71ebcdd74fee27aa1db9202ec","first_seen":"2024-10-23T01:19:35.080929Z","last_seen":"2025-12-29T08:13:50.105774Z","times_seen":10,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/wp-content/uploads/2025/04/The-Renovator-Origins.webp","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"172.67.138.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switchroms.io/","date":"2025-08-15T05:24:28.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switchroms.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Jul 2025 02:18:55 GMT","end":"Wed, 08 Oct 2025 03:16:37 GMT"},"fingerprint":{"sha1":"9E:06:45:DB:7D:57:B4:C8:F6:AB:A6:53:8B:13:60:8F:FE:E8:08:C8","sha256":"93:C8:B1:DF:8F:F6:9F:7A:C0:58:BA:2C:97:3F:85:8E:05:96:03:F3:81:DB:A9:4A:BE:77:39:85:FE:D7:0F:13"}}},"request":{"raw":"GET /wp-content/uploads/2025/04/The-Renovator-Origins.webp HTTP/1.1\r\nHost: switchroms.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://switchroms.io/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 05:24:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 66618\r\nlast-modified: Sun, 13 Apr 2025 15:11:02 GMT\r\netag: \"67fbd406-1043a\"\r\nserver: cloudflare\r\nx-content-type-options: \"nosniff\" always\r\nx-xss-protection: \"1; mode=block\" always\r\nstrict-transport-security: \"max-age=31536000; includeSubDomains; preload\" always\r\nreferrer-policy: no-referrer-when-downgrade\r\nexpires: Sat, 08 Aug 2026 18:13:06 GMT\r\ncache-control: public, max-age=31536000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\naccept-ranges: bytes\r\nage: 558682\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OQInVDl2vf0PkTeAOpJqreq%2FBhfi2nUVNM%2Ba1oDgeW5%2Be5RYupM6w2UMxQ7sdIozAVsTeag5i2CvThLK43jNKZy6A0HPbA%2FGyFHx\"}]}\r\ncf-ray: 96f64410af4656c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":66618,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c4eab226f01038d35c033180d070ef33","sha1":"213e0325585550d25d1f755ee36125de9363a18c","sha256":"118276b22142a00f82eb36eef8f3177a11e4f3019232b00ef61d997991e54e62","sha512":"b65e5354b9f7dcf523380cec8128c5452f40b9acc540d544d384f6c3a159a6948f4d97d848aeec73c6a5f8a1fa474fc4aecc04d5c81311d98fdb7467f1f85fa3","ssdeep":"1536:+VP3i89ZDM+V26/wBvoxDpzVNBX8x/oFJGa5yky51J:+VPB9ZD5cn6prBmoFJvgkyzJ","tlshash":"8953f1fe0ed4360453443bb54324e87c9ab5b0b683bed95c6821f6253e20bedad3d598","first_seen":"2025-05-28T10:03:28.104568Z","last_seen":"2026-01-26T03:36:30.102434Z","times_seen":13,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/wp-content/uploads/2025/04/Vampires-and-Knights-Eclipse-Survival-Magic-Craft.webp","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"172.67.138.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switchroms.io/","date":"2025-08-15T05:24:28.981Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switchroms.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Jul 2025 02:18:55 GMT","end":"Wed, 08 Oct 2025 03:16:37 GMT"},"fingerprint":{"sha1":"9E:06:45:DB:7D:57:B4:C8:F6:AB:A6:53:8B:13:60:8F:FE:E8:08:C8","sha256":"93:C8:B1:DF:8F:F6:9F:7A:C0:58:BA:2C:97:3F:85:8E:05:96:03:F3:81:DB:A9:4A:BE:77:39:85:FE:D7:0F:13"}}},"request":{"raw":"GET /wp-content/uploads/2025/04/Vampires-and-Knights-Eclipse-Survival-Magic-Craft.webp HTTP/1.1\r\nHost: switchroms.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://switchroms.io/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 05:24:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 76686\r\nlast-modified: Sun, 13 Apr 2025 15:27:55 GMT\r\netag: \"67fbd7fb-12b8e\"\r\nserver: cloudflare\r\nx-content-type-options: \"nosniff\" always\r\nx-xss-protection: \"1; mode=block\" always\r\nstrict-transport-security: \"max-age=31536000; includeSubDomains; preload\" always\r\nreferrer-policy: no-referrer-when-downgrade\r\nexpires: Thu, 13 Aug 2026 08:45:17 GMT\r\ncache-control: public, max-age=31536000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\naccept-ranges: bytes\r\nage: 160751\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RqAYfbRJh7w8gLuiNtqo9e%2FG5sQxDt2ZE4SLZiQx58Ydk7LqWEsW9CN9AK12dYgR3dwXYSI205J%2BcDyssELuCejnyetTArb5CeJS\"}]}\r\ncf-ray: 96f64410af3f56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":76686,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9ca3307df309ab5043d957e8e9056c8a","sha1":"1d47bfffa30e8278bf9da30fc14f711e97c71adc","sha256":"e78e85c143aab3ff09346f9e36a61560f001d7522136e01055cc5d1b42334b1a","sha512":"1ce03e0767f57d745be739d50a7d4633cb4a942a1fb438e3ce08090cc6824850f965214d8a0f590d883eeffc5b80aea5944d38003c4c3bfb39c01a2254d1756a","ssdeep":"1536:kVsDFP3XMOU/6LQoCCtzPy+W82GCNJjsg4O1hYQjtxgj3Tyd0QlZjo:W83XU6BtG+ToNJjHzVjtxgjTyd0ki","tlshash":"0373123f3de7dd80c8a16676017f4fc024584853e5ad26eb84e86713baaa19dd9c4ccc","first_seen":"2025-04-14T02:23:47.136442Z","last_seen":"2025-11-11T13:51:33.592313Z","times_seen":11,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"professionaltrafficmonitor.com/stats","fqdn":"professionaltrafficmonitor.com","domain":"professionaltrafficmonitor.com","tld":"com"},"ip":{"addr":"18.159.236.121","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://switchroms.io/","date":"2025-08-15T05:24:30.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"protrafficinspector.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 01 Jul 2025 00:00:00 GMT","end":"Thu, 30 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:D5:8D:EB:A4:50:13:0D:7C:33:71:82:B8:02:49:4F:D6:31:B6:E6","sha256":"49:03:4C:2C:1B:23:D8:D6:CB:AE:F0:54:61:99:C2:20:F4:FF:87:5E:0B:72:B1:6B:D8:AB:21:49:2D:F2:EC:4A"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: professionaltrafficmonitor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://switchroms.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchroms.io/\r\nCookie: uid_id2=62f0fc5a-aa7f-4636-8af5-6a014c9884e2:3:1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 05:24:30 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\nserver: fasthttp\r\naccess-control-allow-origin: https://switchroms.io\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"e6f788e35bd1131f122607d522abf704","sha1":"ade048bafb14d83cac95849ffbb1589a779b3440","sha256":"540b4d570d2f52af6b40acb231798c21679e39c3876abcec80329fc0ccc46483","sha512":"c0ce493d8b2dcc2baa5ad4306a7a3332efb5ca3b529f34108d1969ae81ac50d82b11a895775c67ba71b9b8d222881d4ea4abb4e2fed2a4416dec14755d2cf0c9","ssdeep":"","tlshash":"ac9004c357d173751015df55c435107104035713cc30001f5111fcc43704500f001d33","first_seen":"2025-08-15T05:24:58.038158Z","last_seen":"2025-08-15T05:24:58.038158Z","times_seen":1,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/wp-content/plugins/kk-star-ratings/src/core/public/js/kk-star-ratings.min.js?ver=5.4.10.2","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"172.67.138.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://switchroms.io/","date":"2025-08-15T05:24:29.012Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switchroms.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Jul 2025 02:18:55 GMT","end":"Wed, 08 Oct 2025 03:16:37 GMT"},"fingerprint":{"sha1":"9E:06:45:DB:7D:57:B4:C8:F6:AB:A6:53:8B:13:60:8F:FE:E8:08:C8","sha256":"93:C8:B1:DF:8F:F6:9F:7A:C0:58:BA:2C:97:3F:85:8E:05:96:03:F3:81:DB:A9:4A:BE:77:39:85:FE:D7:0F:13"}}},"request":{"raw":"GET /wp-content/plugins/kk-star-ratings/src/core/public/js/kk-star-ratings.min.js?ver=5.4.10.2 HTTP/1.1\r\nHost: switchroms.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://switchroms.io/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 05:24:28 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 25 Mar 2025 16:15:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67e2d6af-54f\"\r\nserver: cloudflare\r\nx-content-type-options: \"nosniff\" always\r\nx-xss-protection: \"1; mode=block\" always\r\nstrict-transport-security: \"max-age=31536000; includeSubDomains; preload\" always\r\nreferrer-policy: no-referrer-when-downgrade\r\nexpires: Sat, 08 Aug 2026 18:13:05 GMT\r\ncache-control: public, max-age=31536000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\ncontent-encoding: gzip\r\nage: 558683\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZQdgVOAqnsyM3sE6ZWv%2FAb8hKKJ3SnPr4e4qTn5nIoB0dBOF3M3nbjAWIsfZMaUUTJVJZvtCKpYi8j9KoE7ZSOBlFnvP%2F4jo5rLy\"}]}\r\ncf-ray: 96f644113fc856c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1359,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1278)","md5":"f5e63bd61d061e63482b1d4df3768ee4","sha1":"91df0bce4537e6b65fe380f4f6db9ed9dbe95a41","sha256":"acdebf935ded5cb063dcca7c46be5bbc503af5e76e295f6d0b7093c4514ed256","sha512":"ea99e35812f3abac9b598aed7b608f8a78b342d04922fcdc775390e87fa238891728f7bfd6b8e210580fdd332786fb7fde91f0f10bacaed872bb00610e315a6e","ssdeep":"","tlshash":"8c2175dc7a0878354fcbb2b8a26f968d72751326754b4809122df4919dfdfa80322f4c","first_seen":"2023-03-07T01:02:48Z","last_seen":"2026-05-13T11:22:21.025455Z","times_seen":2472,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/cdn-cgi/rum?","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"172.67.138.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://switchroms.io/","date":"2025-08-15T05:24:30.806Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switchroms.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Jul 2025 02:18:55 GMT","end":"Wed, 08 Oct 2025 03:16:37 GMT"},"fingerprint":{"sha1":"9E:06:45:DB:7D:57:B4:C8:F6:AB:A6:53:8B:13:60:8F:FE:E8:08:C8","sha256":"93:C8:B1:DF:8F:F6:9F:7A:C0:58:BA:2C:97:3F:85:8E:05:96:03:F3:81:DB:A9:4A:BE:77:39:85:FE:D7:0F:13"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: switchroms.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://switchroms.io/\r\ncontent-type: application/json\r\nContent-Length: 1018\r\nOrigin: https://switchroms.io\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_5488P24RVQ=GS2.1.s1755235469$o1$g0$t1755235469$j60$l0$h0; _ga=GA1.1.1220748367.1755235470; a=FLCMqAa58qOChclm22cBXTiqkH8xQVGV; dom3ic8zudi28v8lr6fgphwffqoz0j6c=62f0fc5a-aa7f-4636-8af5-6a014c9884e2%3A3%3A1; sb_main_0e536fb8895c74d7dcf7b58fe63dae08=1; sb_count_0e536fb8895c74d7dcf7b58fe63dae08=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\naccess-control-allow-origin: https://switchroms.io\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-max-age: 86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UdPvzCMo%2B1344YqpCgfyIlLKRwYX3rvpfqvTJhR4RU2brvuW57Jj86BrW5byF%2FkpHKAf79QeLJCgjJfyuyRh%2Bi6DyLR5bOGzzds6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 15 Aug 2025 05:24:30 GMT\r\nserver: cloudflare\r\ncf-ray: 96f6441c8ea0b4f7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T15:33:13.162002Z","times_seen":15117490,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/wp-includes/css/dist/block-library/style.min.css?ver=6.8.2","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"172.67.138.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://switchroms.io/","date":"2025-08-15T05:24:28.906Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switchroms.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Jul 2025 02:18:55 GMT","end":"Wed, 08 Oct 2025 03:16:37 GMT"},"fingerprint":{"sha1":"9E:06:45:DB:7D:57:B4:C8:F6:AB:A6:53:8B:13:60:8F:FE:E8:08:C8","sha256":"93:C8:B1:DF:8F:F6:9F:7A:C0:58:BA:2C:97:3F:85:8E:05:96:03:F3:81:DB:A9:4A:BE:77:39:85:FE:D7:0F:13"}}},"request":{"raw":"GET /wp-includes/css/dist/block-library/style.min.css?ver=6.8.2 HTTP/1.1\r\nHost: switchroms.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://switchroms.io/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 05:24:28 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 15 Jul 2025 21:03:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6876c224-1c679\"\r\nserver: cloudflare\r\nx-content-type-options: \"nosniff\" always\r\nx-xss-protection: \"1; mode=block\" always\r\nstrict-transport-security: \"max-age=31536000; includeSubDomains; preload\" always\r\nreferrer-policy: no-referrer-when-downgrade\r\nexpires: Sat, 08 Aug 2026 18:13:03 GMT\r\ncache-control: public, max-age=31536000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\ncontent-encoding: gzip\r\nage: 558684\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qne200k75SC8twsREe93Tti%2FgkRY%2BfeltxbE5h1pWncCtpvs1Tt2Nf88kyR0CpmavyPeIEdqvRN%2FhrNyZD2sGCXSI1%2BzwEgzS7JK\"}]}\r\ncf-ray: 96f644106ee056c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":116345,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (55654)","md5":"a06b3af98203ddc303997e0e0caaff83","sha1":"04c3e7de74a890d18014588c4e1f077a52d79acc","sha256":"838ede31a58a3cdb411d6dd7f13cbe65d4a26193d9fa31882854e63938f12bac","sha512":"4ce1079b8dc07043b0201dc74f5888b50aa530a4e604eecd7673e225946de62c421b290a707014ddaf4366591f8c4767737b5689bc44d57eb0a11aef905cead9","ssdeep":"3072:seeJu1iQg5MG7x+qehvP0x2pck2qkA3Pu:b1iQg5MG7x+qehvP0x2pck2lA2","tlshash":"34b3615417b4dcf935ffa73a5e4ee248a503aa41c68a57ebe066d190618ca490cf3f0f","first_seen":"2025-07-15T17:03:07.843749Z","last_seen":"2026-05-13T15:26:11.015833Z","times_seen":170944,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/wp-content/uploads/2025/04/Moonleap.webp","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"172.67.138.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switchroms.io/","date":"2025-08-15T05:24:28.967Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switchroms.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Jul 2025 02:18:55 GMT","end":"Wed, 08 Oct 2025 03:16:37 GMT"},"fingerprint":{"sha1":"9E:06:45:DB:7D:57:B4:C8:F6:AB:A6:53:8B:13:60:8F:FE:E8:08:C8","sha256":"93:C8:B1:DF:8F:F6:9F:7A:C0:58:BA:2C:97:3F:85:8E:05:96:03:F3:81:DB:A9:4A:BE:77:39:85:FE:D7:0F:13"}}},"request":{"raw":"GET /wp-content/uploads/2025/04/Moonleap.webp HTTP/1.1\r\nHost: switchroms.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://switchroms.io/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 05:24:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 101608\r\nlast-modified: Tue, 15 Apr 2025 15:04:17 GMT\r\netag: \"67fe7571-18ce8\"\r\nserver: cloudflare\r\nx-content-type-options: \"nosniff\" always\r\nx-xss-protection: \"1; mode=block\" always\r\nstrict-transport-security: \"max-age=31536000; includeSubDomains; preload\" always\r\nreferrer-policy: no-referrer-when-downgrade\r\nexpires: Sat, 15 Aug 2026 01:32:12 GMT\r\ncache-control: public, max-age=31536000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\naccept-ranges: bytes\r\nage: 13936\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wkWcAIM1BQAGLfS0VCXDtJgM0k346H6QjOw2vjFLI4Fxi6R%2FDR9MxxjaLo%2BaqVugpqlMAmunco8C8tnZHWAu5Booz9X26to2Wq%2Fg\"}]}\r\ncf-ray: 96f644109f1a56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":101608,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e78ad234ae2418db04666d016c0b2e99","sha1":"81a9a933b49429c78b99cc2fe32a8e4fcb2490d1","sha256":"de603e2e39b8a9d974c2e0afbaba19efd9af19ee0f50be7109223f43e3028165","sha512":"5cdad2c235e9940bf7a716e7676a9d65d8e02269fa5e89e73cd7e3b10a832d12c5256d5636b8621ac62a147bc36167fd86955143755d210781ae29bda001a3e4","ssdeep":"3072:B8+td6A+iFznTFy+wx8hmSuGumMFo+24IuXHUGZ:B8w6AdA+whpGOoL4NX0GZ","tlshash":"48a3124a774190ca94ff4849976858a7c378c7ef6392d1b056d003fe5846e33f8e8ad6","first_seen":"2025-05-28T10:03:28.147918Z","last_seen":"2025-11-11T13:51:33.652717Z","times_seen":10,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.adsco.re/#0.10518400987203047","fqdn":"c.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"104.17.166.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://switchroms.io/","date":"2025-08-15T05:24:30.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo RSA Organization Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 23 Sep 2024 00:00:00 GMT","end":"Mon, 29 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"3B:64:1C:DA:8C:64:22:01:36:0F:54:7A:99:6E:AD:26:C2:EF:59:8B","sha256":"A4:41:84:14:13:00:DA:93:54:10:5C:59:8A:A9:83:17:01:36:39:BE:1D:43:E5:FB:1C:F3:D6:AF:8A:ED:84:E2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: c.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchroms.io/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 15 Aug 2025 05:24:30 GMT\r\ncontent-type: text/html\r\ncontent-encoding: br\r\ncache-control: public, max-age=2678400\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR\r\npermissions-policy: ch-ua=(self \"https://adsco.re\"),ch-ua-mobile=(self \"https://adsco.re\"),ch-ua-full-version=(self \"https://adsco.re\"),ch-ua-platform=(self \"https://adsco.re\"),ch-ua-platform-version=(self \"https://adsco.re\"),ch-ua-arch=(self \"https://adsco.re\"),ch-ua-model=(self \"https://adsco.re\"),ch-device-memory=(self \"https://adsco.re\"),ch-downlink=(self \"https://adsco.re\"),ch-ect=(self \"https://adsco.re\"),ch-rtt=(self \"https://adsco.re\"),ch-width=(self \"https://adsco.re\"),ch-viewport-width=(self \"https://adsco.re\"),ch-dpr=(self \"https://adsco.re\")\r\nlink: \u003c//6.adsco.re/\u003e;rel=prefetch;crossorigin;as=fetch,\u003c//4.adsco.re/\u003e;rel=prefetch;crossorigin;as=fetch,\u003c//adsco.re/\u003e;rel=preconnect\r\nexpires: Mon, 15 Sep 2025 05:24:30 GMT\r\netag: W/\"C6pTuopbpe5oM6YpwwANTg==\"\r\ncf-cache-status: HIT\r\nage: 464645\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 96f6441c68c20b65-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78356,"size_decoded":0,"mime_type":"text/html","magic":"JavaScript source, ASCII text, with very long lines (689)","md5":"0baa53ba8a5ba5ee6833a629c3000d4e","sha1":"d5de057adc1eaa7888ca975199cf0a116b923aa0","sha256":"0679a036a8577f9592e070f780d06c6bb427a8f15f58008bdeaae2277ce607b4","sha512":"a7e5a993e1e12e7d73d98ab3834fb488a1e3ce361108f3f4583cde7e4454e97768303649ae9fa22bce7cce65aed74d081b69317f169c18dc49e8093ac4d3a60b","ssdeep":"768:dsmoTk+UwrAjMo3m4MSHRJtlgfWivYb7QL19/lw3mcIwT2vB03c9MZjyQoTHKePc:pok3m4bHRDuWWL19/lw3mcKJpAGPKmjo","tlshash":"81734ba97162702a43b238e9967f5311f1ba06902c4690d0d37dc8643c74edf927bb9e","first_seen":"2025-06-14T18:46:22.558225Z","last_seen":"2025-08-28T19:40:38.269373Z","times_seen":3673,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":14,"receive":109,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.show-sb.com/sb/au/3a/fb/42/3afb429f1f81cca1b8c0759baff80b11/1698575610.html","fqdn":"cdn.show-sb.com","domain":"show-sb.com","tld":"com"},"ip":{"addr":"104.21.95.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://switchroms.io/","date":"2025-08-15T05:24:31.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"show-sb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 10 Aug 2025 11:11:15 GMT","end":"Sat, 08 Nov 2025 12:08:40 GMT"},"fingerprint":{"sha1":"46:26:78:BD:18:7A:95:15:D4:B3:89:73:FE:7E:99:33:18:7F:21:3E","sha256":"AD:6B:6A:10:54:38:33:B9:BB:A6:FD:B7:B0:1B:2E:9D:62:B8:47:35:C4:E6:7B:F6:4A:92:AA:75:B0:29:F7:F3"}}},"request":{"raw":"GET /sb/au/3a/fb/42/3afb429f1f81cca1b8c0759baff80b11/1698575610.html HTTP/1.1\r\nHost: cdn.show-sb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://switchroms.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchroms.io/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 05:24:31 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Sun, 29 Oct 2023 10:33:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TZa5ypNjocmPrYvP4EcRsqaRuWJtZRkcQRoiJu6wmAQQac2viYf9qzh%2BAWHiWvVCDmCmX69fEKYqW5pDTsWSW%2BO67O120AZPJlfzS84%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 96f64421ebe1b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1356,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"f573728dd24850e679d2f18c02bb0daa","sha1":"aed77a988b90e06ceb55dd70a653472ae34c88dd","sha256":"28f7cce0994cf9fc353e61df45beaff264ac061f0158a84e090981c64f016c87","sha512":"30f433f7ef4b664cd18a5d0de1034baac0d7a820e94b38fd34e12639b2896a6c42ba69ee5ad1ee65dc03b08f88db791fbf11cb0f191e99a842cf152ef7295b8b","ssdeep":"","tlshash":"5021282519e9d9371092d0a67b352f6ba992e8c7894a8a0132bc46a04f86eddcc33016","first_seen":"2024-02-19T06:57:16Z","last_seen":"2026-01-22T19:26:03.601642Z","times_seen":966,"resource_available":false,"data":null}},"time_used":490,"timings":{"blocked":184,"dns":158,"connect":1,"send":0,"wait":122,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"htiivw4vkrqr.n4.adsco.re/","fqdn":"htiivw4vkrqr.n4.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"38.132.109.126","port":443,"asn":9009,"as":"M247 Europe SRL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://switchroms.io/","date":"2025-08-15T05:24:30.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.n4.adsco.re","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Jul 2025 09:54:44 GMT","end":"Thu, 16 Oct 2025 09:54:43 GMT"},"fingerprint":{"sha1":"E8:50:0E:37:80:04:3C:5C:59:CD:8C:24:F1:FE:D8:F1:FF:1A:B2:40","sha256":"28:14:77:1D:ED:49:07:14:6E:D8:8C:76:86:9D:DF:DC:03:EF:C8:93:12:71:33:5A:35:E5:1D:99:92:00:32:C6"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: htiivw4vkrqr.n4.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 0\r\nOrigin: https://switchroms.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchroms.io/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 05:24:31 GMT\r\ncontent-type: text/html\r\ncontent-length: 0\r\nlast-modified: Fri, 16 Jun 2023 08:37:42 GMT\r\netag: \"648c1f56-0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T15:33:13.162002Z","times_seen":15117490,"resource_available":true,"data":null}},"time_used":870,"timings":{"blocked":386,"dns":123,"connect":88,"send":0,"wait":90,"receive":0,"ssl":180},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"premiumvertising.com/xgimmrpgakmfapc?XPCsyzYO=BQOCAAAAAAAACZUAAve-3eGWFAo-DMzQEGgn-_v_zU3SQnO3oEMGBmYtq3cNALBJWND_GDndE24rydzN7ihlekyQ9LAoUZ33orFhvyNJ-nRrZ_eggDdyHegJvqgKei4hn20bgD6IbjoiF5LWkJ2MVGj97aDFpNVrZo8MHWRRVgCh0fnmzbdAZBDEBDQ3-4RlIBoxGhI4KB9lKlQuNzucIbKQ7lWR6t4GK06xWHejJYO2id4PdodydEAn9FAMlpPM4CnRhK4pnXOIaooZhp9R3fqA6J5rmnuUuHJVaWItr_tfYwaj5S7d4z3irvBbppj5qv3uSGIuI3bY5nHApZwcwOPIufWJ-Tfj_DqNli782knCwlznxM6f0bwnwnPWte9Uyhq4D2XvOZadoaCf3GfiD3U4sx-5kYdvzuBnMrS9uoxQ8OHlw5Td9gLV2Ukf9t-3OIu3ql3atgZxkObTjimlpOCCvDU3lx1LjEFfDO0yYaV1OGo2AWWHJvRCkcWtXF6Pi2oEcrM9dJwM9AEM09mN6xVTw--A7i8Q68-yb9ZpQtToeLG-K2f78dL_wn8jabc05KyrJBtRhOT1SsdhtwE4c_CXu-0gRJpa0vGvLuz0tFZdllaUUYNp-ikg0prcgdjLr_b-KhhnLfEze5MMWBtESi2mrKO7cM4YkpbKustzyWF2ybiv-DaqUFaPOd7JxyyqUeK11bVatvwcZO6iwqQs3izDzSoiPmV_6Xl_-LPPGT8D8HMM6Anhj11JWH_DgArsHG3SWG4QEakSLaRCNEqd5Ap0iIi-80Cfznv0AtwNtrNF7ckvzWzBF0-HQH15JRYIAnPExf4mMl_kwpd8BxhKqtLI8G3TZhVO4YMIqrx6RusN-aeam4J4GnXLVerbzHPmXk4bU0io6Imu02TFr1ogy3G8b1ZVc9LXiJ6Nnilf0ory7S3AZ0MPBP8FyMAQq4Hp7NuPSJGcjS9mxgXe1I-2J2v8suKFoVh3lry-Fxu84SqhthK1ko9PGPWvs40YEFJkzyas4vW0jLhzhpwztQPtNa7hvzAVaiGMGzx0oQMdIvB1xDuap6tGXscyOXKRBoFVjtu0qQood1KgbQV7Nr3IH_v88Ynm2ow-XNYonn8nwiFMO20nT7yoG4Rs21aldEpGlVIzAIwjc8KqfGid4VQ0hhlqL9PnagkRXXRkhCG0T1CN6jXZHkCyU-53Y1Gz\u0026MeqFExun=4\u0026pjrROneW=5199727\u0026eUQxCjcy=\u0026DnZEhoTf=0,0\u0026hZLYCjNc=\u0026wSxiyEDq=\u0026mWjIxaEF=1280,1024,1,1280,1024,0","fqdn":"premiumvertising.com","domain":"premiumvertising.com","tld":"com"},"ip":{"addr":"162.252.214.11","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://switchroms.io/","date":"2025-08-15T05:24:31.824Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"premiumvertising.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 04 Apr 2025 00:00:00 GMT","end":"Tue, 05 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"14:EB:C5:DD:7B:A9:BB:94:56:6F:8B:B5:46:83:F5:88:15:55:89:93","sha256":"DF:35:9E:6A:F2:AF:40:EC:34:91:5B:C8:79:AB:A5:7A:5E:6D:99:A4:C4:09:0B:87:0B:FE:86:AD:EC:EF:89:93"}}},"request":{"raw":"GET /xgimmrpgakmfapc?XPCsyzYO=BQOCAAAAAAAACZUAAve-3eGWFAo-DMzQEGgn-_v_zU3SQnO3oEMGBmYtq3cNALBJWND_GDndE24rydzN7ihlekyQ9LAoUZ33orFhvyNJ-nRrZ_eggDdyHegJvqgKei4hn20bgD6IbjoiF5LWkJ2MVGj97aDFpNVrZo8MHWRRVgCh0fnmzbdAZBDEBDQ3-4RlIBoxGhI4KB9lKlQuNzucIbKQ7lWR6t4GK06xWHejJYO2id4PdodydEAn9FAMlpPM4CnRhK4pnXOIaooZhp9R3fqA6J5rmnuUuHJVaWItr_tfYwaj5S7d4z3irvBbppj5qv3uSGIuI3bY5nHApZwcwOPIufWJ-Tfj_DqNli782knCwlznxM6f0bwnwnPWte9Uyhq4D2XvOZadoaCf3GfiD3U4sx-5kYdvzuBnMrS9uoxQ8OHlw5Td9gLV2Ukf9t-3OIu3ql3atgZxkObTjimlpOCCvDU3lx1LjEFfDO0yYaV1OGo2AWWHJvRCkcWtXF6Pi2oEcrM9dJwM9AEM09mN6xVTw--A7i8Q68-yb9ZpQtToeLG-K2f78dL_wn8jabc05KyrJBtRhOT1SsdhtwE4c_CXu-0gRJpa0vGvLuz0tFZdllaUUYNp-ikg0prcgdjLr_b-KhhnLfEze5MMWBtESi2mrKO7cM4YkpbKustzyWF2ybiv-DaqUFaPOd7JxyyqUeK11bVatvwcZO6iwqQs3izDzSoiPmV_6Xl_-LPPGT8D8HMM6Anhj11JWH_DgArsHG3SWG4QEakSLaRCNEqd5Ap0iIi-80Cfznv0AtwNtrNF7ckvzWzBF0-HQH15JRYIAnPExf4mMl_kwpd8BxhKqtLI8G3TZhVO4YMIqrx6RusN-aeam4J4GnXLVerbzHPmXk4bU0io6Imu02TFr1ogy3G8b1ZVc9LXiJ6Nnilf0ory7S3AZ0MPBP8FyMAQq4Hp7NuPSJGcjS9mxgXe1I-2J2v8suKFoVh3lry-Fxu84SqhthK1ko9PGPWvs40YEFJkzyas4vW0jLhzhpwztQPtNa7hvzAVaiGMGzx0oQMdIvB1xDuap6tGXscyOXKRBoFVjtu0qQood1KgbQV7Nr3IH_v88Ynm2ow-XNYonn8nwiFMO20nT7yoG4Rs21aldEpGlVIzAIwjc8KqfGid4VQ0hhlqL9PnagkRXXRkhCG0T1CN6jXZHkCyU-53Y1Gz\u0026MeqFExun=4\u0026pjrROneW=5199727\u0026eUQxCjcy=\u0026DnZEhoTf=0,0\u0026hZLYCjNc=\u0026wSxiyEDq=\u0026mWjIxaEF=1280,1024,1,1280,1024,0 HTTP/1.1\r\nHost: premiumvertising.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchroms.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\npopads-node: wb11\r\naccess-control-allow-origin: *\r\nasf: 9\r\npopads-ec: ASB\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-length: 44\r\ndate: Fri, 15 Aug 2025 05:24:32 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":44,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"d5f0a25e4d3522d56d48ce7bc3e518fb","sha1":"86794caff58f7fee6e684c2ba7195f970a8d6f4c","sha256":"9d781128a8ece413b003d5612b8398bf9340ef7f5b751d12bd125ba523d3ceb5","sha512":"a3a81801f516a4eb11f00d6f56dab0ed4b8a79219e6b4f5436993479f09dae08f14cffbab3327ff66fb39201d8eba1153ae7114f7705a01cc6f0edf840ef1616","ssdeep":"","tlshash":"789002801814116115d1500b8d5159d01259b1a4540801324446ca502dc7883a415774","first_seen":"2023-03-07T01:17:45Z","last_seen":"2026-05-13T12:02:09.9987Z","times_seen":23926,"resource_available":true,"data":null}},"time_used":780,"timings":{"blocked":327,"dns":1,"connect":102,"send":0,"wait":121,"receive":0,"ssl":224},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/wp-content/uploads/2024/07/The-Legend-of-Zelda-Tears-of-the-Kingdom.png","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"172.67.138.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switchroms.io/","date":"2025-08-15T05:24:28.953Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switchroms.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Jul 2025 02:18:55 GMT","end":"Wed, 08 Oct 2025 03:16:37 GMT"},"fingerprint":{"sha1":"9E:06:45:DB:7D:57:B4:C8:F6:AB:A6:53:8B:13:60:8F:FE:E8:08:C8","sha256":"93:C8:B1:DF:8F:F6:9F:7A:C0:58:BA:2C:97:3F:85:8E:05:96:03:F3:81:DB:A9:4A:BE:77:39:85:FE:D7:0F:13"}}},"request":{"raw":"GET /wp-content/uploads/2024/07/The-Legend-of-Zelda-Tears-of-the-Kingdom.png HTTP/1.1\r\nHost: switchroms.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://switchroms.io/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 05:24:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 417138\r\nlast-modified: Tue, 23 Jul 2024 13:19:21 GMT\r\netag: \"669fadd9-65d72\"\r\nserver: cloudflare\r\nx-content-type-options: \"nosniff\" always\r\nx-xss-protection: \"1; mode=block\" always\r\nstrict-transport-security: \"max-age=31536000; includeSubDomains; preload\" always\r\nreferrer-policy: no-referrer-when-downgrade\r\nexpires: Wed, 12 Aug 2026 01:21:39 GMT\r\ncache-control: public, max-age=31536000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\naccept-ranges: bytes\r\nage: 273769\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F2nba6wEVuZ3agP22ewOB%2FnKky%2B0VcbX%2BSO%2F2xxHRPNztfUTh%2FgAv2OoTwbd0sCXORT4CpuW94fZcP7yNQATrAv00KMe%2FuxCYgmR\"}]}\r\ncf-ray: 96f644108f0756c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":417138,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 355 x 575, 8-bit/color RGBA, non-interlaced","md5":"d155e2683bfe752adf99b01f60066c4a","sha1":"6f1214f4ed3ec0a79c766554897148639f96269d","sha256":"e01774360532b38ea690f3502c06ecefd4df557dd1aea110365ec9cd0950e20e","sha512":"07cb4a7290f876bc7d9c480fff154d04d5e459ee8c225ed0c1bbfd20f11623c97962ee4889ab7a0135bd05b7cc964c2e3b939cfc0dc19dd337932882aecffc77","ssdeep":"12288:6Y2+47mtN/71fbh4v8sl75LYzPXJT6QxhBIAz:p2+9bQ8sTLmX1z","tlshash":"af9423dcc71380dc42822a770050f59af96088f79b19afadc46765dd33629b60f36daa","first_seen":"2025-05-28T10:03:28.128844Z","last_seen":"2026-01-26T03:36:30.106952Z","times_seen":8,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/wp-content/uploads/2025/04/SaGa-Frontier-2-Remastered.webp","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"172.67.138.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switchroms.io/","date":"2025-08-15T05:24:29.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switchroms.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Jul 2025 02:18:55 GMT","end":"Wed, 08 Oct 2025 03:16:37 GMT"},"fingerprint":{"sha1":"9E:06:45:DB:7D:57:B4:C8:F6:AB:A6:53:8B:13:60:8F:FE:E8:08:C8","sha256":"93:C8:B1:DF:8F:F6:9F:7A:C0:58:BA:2C:97:3F:85:8E:05:96:03:F3:81:DB:A9:4A:BE:77:39:85:FE:D7:0F:13"}}},"request":{"raw":"GET /wp-content/uploads/2025/04/SaGa-Frontier-2-Remastered.webp HTTP/1.1\r\nHost: switchroms.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://switchroms.io/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 05:24:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 121658\r\nlast-modified: Wed, 09 Apr 2025 06:15:56 GMT\r\netag: \"67f6109c-1db3a\"\r\nserver: cloudflare\r\nx-content-type-options: \"nosniff\" always\r\nx-xss-protection: \"1; mode=block\" always\r\nstrict-transport-security: \"max-age=31536000; includeSubDomains; preload\" always\r\nreferrer-policy: no-referrer-when-downgrade\r\nexpires: Sat, 15 Aug 2026 01:32:12 GMT\r\ncache-control: public, max-age=31536000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\naccept-ranges: bytes\r\nage: 13936\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G%2B0dlSICi413q1pX4uiGXR0AfP6tGCXHKKnInparo71hp%2Fb8%2B5XLSb8BoC6Qvc4fKTb6HKUwRrVfHKu83l4qAlzVafH0RZOvlSL7\"}]}\r\ncf-ray: 96f644111fb856c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":121658,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c6129e6821543f387cf55770c7915ac0","sha1":"f7c7ecd7f7548298a6445cf38305658c55d35766","sha256":"36bbecb44ee73c446726b1506acefb6675d4818c2aaf379de74a8fe0f899ef40","sha512":"32f71b24af30ded3b4780975acb5a885fd50841ad992d44312c8e0655d419da58b555f3e0b92edadd70c695ef8f2dd93d187cae917a6b44c0edc8cff8d2584f1","ssdeep":"1536:vOqMRjuW7qWVRqGZl2AWa6uqxA/GXZarLl5danX1168qx57IDNjaYUZPCTA:vTMMWh6bA/+IrLlvkF8xpIDcxPCTA","tlshash":"75c3129061dc73ebd28386e8ae45a19893074af7b45c36b0d9c40d5ce295e363be870f","first_seen":"2025-05-28T10:03:28.164628Z","last_seen":"2025-11-07T04:54:38.703869Z","times_seen":8,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/pixel/sbs?c=1","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switchroms.io/","date":"2025-08-15T05:24:32.828Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 22:21:33 GMT","end":"Fri, 26 Sep 2025 22:21:32 GMT"},"fingerprint":{"sha1":"4A:6A:48:C8:5B:C5:2B:2E:9C:03:AF:BF:4C:E6:10:23:E2:7B:EA:97","sha256":"A8:42:B5:4A:20:C8:13:EF:B5:90:0F:54:37:F7:05:60:8D:91:07:E3:A4:0F:7A:22:C9:AF:F1:F5:22:E8:68:C9"}}},"request":{"raw":"GET /pixel/sbs?c=1 HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchroms.io/\r\nCookie: uid_id2=62f0fc5a-aa7f-4636-8af5-6a014c9884e2:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl26551100=1; slec0e536fb8895c74d7dcf7b58fe63dae08=[6073101]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Fri, 15 Aug 2025 05:24:32 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T15:33:13.162002Z","times_seen":15117490,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-15","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://switchroms.io/","date":"2025-08-15T05:24:29.594Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"preferencenail.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 01 Jul 2025 15:11:38 GMT","end":"Mon, 29 Sep 2025 15:11:37 GMT"},"fingerprint":{"sha1":"F9:52:70:4B:81:A8:F8:39:E6:E7:96:8F:EA:FE:17:FD:96:C5:32:E3","sha256":"D8:C9:87:B5:89:5E:D4:F4:8D:FD:98:3C:31:39:42:67:D3:20:27:14:A9:AD:F2:AB:97:A4:48:0F:94:F0:FF:A2"}}},"request":{"raw":"GET /sfp.js HTTP/1.1\r\nHost: preferencenail.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchroms.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Fri, 15 Aug 2025 05:24:29 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nContent-Length: 28254\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nVary: Accept-Encoding\r\nHost: preferencenail.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 69bd76ab17068e000d5d89b672064b23\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":85386,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"46a6fef91632b94d14252fe324c1585f","sha1":"387cebbd261b8fe947fe9805875300f2ceeb5cfd","sha256":"36d0c771f8bf310d740cb4d0ca144354c45df284e72361660448708d72f175d5","sha512":"a3aaa1b5ab1113a12793bd1085332eb257416aaa9c4a690525838b91453a281580a979bfb856b3c429c2d4243c3ce02bd318a4b7048124eef96912179836d0fd","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRL:nPncLBSUBULGVTfGpucE5fox","tlshash":"528395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","first_seen":"2025-07-08T10:38:39.799377Z","last_seen":"2025-11-18T17:01:51.014373Z","times_seen":15230,"resource_available":true,"data":null}},"time_used":175,"timings":{"blocked":60,"dns":1,"connect":19,"send":0,"wait":35,"receive":18,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-5488P24RVQ","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://switchroms.io/","date":"2025-08-15T05:24:28.903Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:34:03 GMT","end":"Mon, 29 Sep 2025 08:34:02 GMT"},"fingerprint":{"sha1":"A2:8A:24:AD:51:7D:A4:62:BB:34:6F:C9:21:A1:B9:E1:2D:A6:0E:C1","sha256":"9F:B9:94:8F:84:D3:44:71:A7:81:72:C8:80:4D:14:02:E3:E0:30:0C:F1:17:27:83:00:82:D9:C3:68:D3:B3:AF"}}},"request":{"raw":"GET /gtag/js?id=G-5488P24RVQ HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchroms.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 15 Aug 2025 05:24:29 GMT\r\nexpires: Fri, 15 Aug 2025 05:24:29 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1099:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1099:0\r\nreport-to: {\"group\":\"ascgcycc:1099:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1099:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 134634\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":404439,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6006)","md5":"47faec8c752dfaa085063c249248b24a","sha1":"9d73f0a2cbc4d5e06380e55ce0e25bbfd3af33cb","sha256":"572ca0cc3761cece102eaf1dc1f9aecc9ae2f3c60404a79ad68f8601f1f08f57","sha512":"85303a3430f374269772dea99d13a8a88b1606120e4d1bff391d1f3aea7b2d2eda7e8bc759d95121b1038d06744bba34f34ca079cf5ab39187591c8097743a9c","ssdeep":"3072:wS/qLg61JLwDPLFAJLdzT0S35DHSb5qlUmxxgJgJ471MSXz1PMqaW/uSoTQtF02r:smLLFAVdctIxgzhqW/uSoTuFHPKPDOx","tlshash":"7d8418ce73d674625396f478503f018ba57b28a2b44cc899f189cde42e74a9a4237f7c","first_seen":"2025-08-15T05:24:58.046783Z","last_seen":"2025-08-15T05:24:58.046783Z","times_seen":1,"resource_available":false,"data":null}},"time_used":625,"timings":{"blocked":267,"dns":1,"connect":8,"send":0,"wait":28,"receive":27,"ssl":291},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/wp-content/uploads/2025/04/Hookah-Haze.webp","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"172.67.138.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switchroms.io/","date":"2025-08-15T05:24:28.992Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switchroms.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Jul 2025 02:18:55 GMT","end":"Wed, 08 Oct 2025 03:16:37 GMT"},"fingerprint":{"sha1":"9E:06:45:DB:7D:57:B4:C8:F6:AB:A6:53:8B:13:60:8F:FE:E8:08:C8","sha256":"93:C8:B1:DF:8F:F6:9F:7A:C0:58:BA:2C:97:3F:85:8E:05:96:03:F3:81:DB:A9:4A:BE:77:39:85:FE:D7:0F:13"}}},"request":{"raw":"GET /wp-content/uploads/2025/04/Hookah-Haze.webp HTTP/1.1\r\nHost: switchroms.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://switchroms.io/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 05:24:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 120672\r\nlast-modified: Thu, 10 Apr 2025 07:56:22 GMT\r\netag: \"67f779a6-1d760\"\r\nserver: cloudflare\r\nx-content-type-options: \"nosniff\" always\r\nx-xss-protection: \"1; mode=block\" always\r\nstrict-transport-security: \"max-age=31536000; includeSubDomains; preload\" always\r\nreferrer-policy: no-referrer-when-downgrade\r\nexpires: Wed, 12 Aug 2026 01:21:40 GMT\r\ncache-control: public, max-age=31536000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\naccept-ranges: bytes\r\nage: 273768\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4ii03e1bhIuNsIhGPpB22psLqWUgAogOmG4RPy1Uhgqzv%2FS9InbzZN3cWzf54rjFOiUnuIESTnL7%2FSeX1Yr02ffGfGcLW0QUZnP%2F\"}]}\r\ncf-ray: 96f64410cf6256c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":120672,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"499d4b4bffb43661ae0cd6649115d629","sha1":"ace52f0be89f7d9f63f81c0eba7e3e3f5c0e9a1b","sha256":"3f7dd5d9282e88146cfd36e87d4a57bd501f206fc555713db9288484732a91a5","sha512":"fc670c4dc83c02ab31674aac7bb1cedf4681b28808ce6966afdb3c4ca04a735742f8c2f3f2484b7e29274fe1e0b944f6ac70e87b2d8ed63f4da5d2920cfd470f","ssdeep":"3072:ibPXfmBaD05JoLT346OnbtpUyk1wyTMyCrNzKdXqyCK:IPfmMD05JoLT34JnpeV1wylVqnK","tlshash":"f6c3124d01991a0dcb8ef3f8a506589a951207ebc43c669d83c96bc0c4579cadafdff8","first_seen":"2025-04-14T02:23:47.119168Z","last_seen":"2025-09-15T23:15:45.337237Z","times_seen":9,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/impr.gif?sid=H4sIAAAAAAAC_1RSzWskxRuuTpbf5YeInwdhYUCFFcyke7pnpscVgtk1EjZf7K7koJfqqupJme6utqp7ejKnYED25iwoqAfpPJNs1F1Fj4KCTnILCDuecthc_BOE9SCCTDIQfQ_v-1Q9VcXzPm99uJufEhc5PVlbVj0ZRXS2XrUrV9ZlwlVhKiu3K45dta9W1mXS8K5WuuOkO685rle1X6m8Jdimmq3Zjm07tlNZkFqEqjt7xkKmD1pOtWVXvVrVqXvo6v-uTW7BUAu8c0qehuSjJ38P34FkQyTxd9eF2cxU-uqbcR7RTGl0-MHbyWaiigTxBQy1hTA5mJyGMiNCPp2CSg4mHUB19sYdIJAjMvX8IwTJwUQmgs7-udIggkgQ8P-j6AwhoiEkHYKpHUj-kACMY2UVSXxvRemCbp2zdMyOyKXHf0AWI3Lp0bNI4m_nI9mt3FJRnkmVGHTDErI7hGwPkeaHyHpTkMUhWPYBJP-VzD5eQhLvrZpIQfKTlxq10A5Znc5Q2gxnvIbbmPFpWJ9pUNvxWMv3PVE7s0iGQ1AzjdxYyKWFPLSQpxZiflLxbN9jDnUbYYuzpu1Rz-MisFt-zbZpizWRs7H2PrK0Dxb1wfQ2Ur2NTdmHzn-G2ShhuAWTEXR4iUIQFIagoASFJCgygqJT7vPI1Ex5j0cmD5xJrU2qWw5U1t6l-ypri4SA6j40L_dk-r7ZAcumB73Q8IEaJxpk5YAGvNxNT8lTY1utT158HZvipGKLutsIA99v1VnT403OwmZQ90PRcDkVtg8jS0gzBWos9OSI3LjyMlI5Iv-7nCCghzDRIZh8DjS_DFqUoBslesk3ppAZ29AqNlWpwFWJNLuEbMvajU7JC2eTfff-ExDseO7QPQswXSLVJd6TRwTt6M7gpirI3k1VGPL9aprJWPboeOq3MpqJ6a9viK1Cab543fS_eoONiTF8cFuYbIkmXCZtQ-7PS86FXlCaCfLTolkXwVpuNuZzneTp0tq1hcU41cIYqZIhqHxYvQsmR-SZ9l9n_9mLf4TUQ-i8RJwfk0mApdsw6fHcD5-N43MYRaCjCz5ILRR5OdC14GIzkiOy_PGXiMTxXLl89Pe1X_4EDUoY8a-LF3ig6fgFKstdcwdtbYFmO0jiEh1dohOVoFEfJp8eZKk-nvttYmIQWYMg0tZeEOno7rnJRp5UQlfUmG37zYbj-qFwXI-zsO57Ld6gtusKZGa08cXRR_8EAAD__xZ5DOexBAAA","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"192.243.61.227","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switchroms.io/","date":"2025-08-15T05:24:32.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 22:21:33 GMT","end":"Fri, 26 Sep 2025 22:21:32 GMT"},"fingerprint":{"sha1":"4A:6A:48:C8:5B:C5:2B:2E:9C:03:AF:BF:4C:E6:10:23:E2:7B:EA:97","sha256":"A8:42:B5:4A:20:C8:13:EF:B5:90:0F:54:37:F7:05:60:8D:91:07:E3:A4:0F:7A:22:C9:AF:F1:F5:22:E8:68:C9"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1RSzWskxRuuTpbf5YeInwdhYUCFFcyke7pnpscVgtk1EjZf7K7koJfqqupJme6utqp7ejKnYED25iwoqAfpPJNs1F1Fj4KCTnILCDuecthc_BOE9SCCTDIQfQ_v-1Q9VcXzPm99uJufEhc5PVlbVj0ZRXS2XrUrV9ZlwlVhKiu3K45dta9W1mXS8K5WuuOkO685rle1X6m8Jdimmq3Zjm07tlNZkFqEqjt7xkKmD1pOtWVXvVrVqXvo6v-uTW7BUAu8c0qehuSjJ38P34FkQyTxd9eF2cxU-uqbcR7RTGl0-MHbyWaiigTxBQy1hTA5mJyGMiNCPp2CSg4mHUB19sYdIJAjMvX8IwTJwUQmgs7-udIggkgQ8P-j6AwhoiEkHYKpHUj-kACMY2UVSXxvRemCbp2zdMyOyKXHf0AWI3Lp0bNI4m_nI9mt3FJRnkmVGHTDErI7hGwPkeaHyHpTkMUhWPYBJP-VzD5eQhLvrZpIQfKTlxq10A5Znc5Q2gxnvIbbmPFpWJ9pUNvxWMv3PVE7s0iGQ1AzjdxYyKWFPLSQpxZiflLxbN9jDnUbYYuzpu1Rz-MisFt-zbZpizWRs7H2PrK0Dxb1wfQ2Ur2NTdmHzn-G2ShhuAWTEXR4iUIQFIagoASFJCgygqJT7vPI1Ex5j0cmD5xJrU2qWw5U1t6l-ypri4SA6j40L_dk-r7ZAcumB73Q8IEaJxpk5YAGvNxNT8lTY1utT158HZvipGKLutsIA99v1VnT403OwmZQ90PRcDkVtg8jS0gzBWos9OSI3LjyMlI5Iv-7nCCghzDRIZh8DjS_DFqUoBslesk3ppAZ29AqNlWpwFWJNLuEbMvajU7JC2eTfff-ExDseO7QPQswXSLVJd6TRwTt6M7gpirI3k1VGPL9aprJWPboeOq3MpqJ6a9viK1Cab543fS_eoONiTF8cFuYbIkmXCZtQ-7PS86FXlCaCfLTolkXwVpuNuZzneTp0tq1hcU41cIYqZIhqHxYvQsmR-SZ9l9n_9mLf4TUQ-i8RJwfk0mApdsw6fHcD5-N43MYRaCjCz5ILRR5OdC14GIzkiOy_PGXiMTxXLl89Pe1X_4EDUoY8a-LF3ig6fgFKstdcwdtbYFmO0jiEh1dohOVoFEfJp8eZKk-nvttYmIQWYMg0tZeEOno7rnJRp5UQlfUmG37zYbj-qFwXI-zsO57Ld6gtusKZGa08cXRR_8EAAD__xZ5DOexBAAA HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchroms.io/\r\nCookie: uid_id2=62f0fc5a-aa7f-4636-8af5-6a014c9884e2:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl26551100=1; slec0e536fb8895c74d7dcf7b58fe63dae08=[6073101]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Fri, 15 Aug 2025 05:24:32 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nVary: Origin\r\nAccess-Control-Allow-Credentials: true\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nSet-Cookie: iprc_l+1e0c2150c81c72aabe819fc90cf0b808=6073101; expires=Sat, 16 Aug 2025 05:24:32 GMT; path=/; secure; SameSite=None\niprc_l:6073101=1; expires=Sat, 16 Aug 2025 05:24:32 GMT; path=/; secure; SameSite=None\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 8106c3d3307e11fa02ab354265690234\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T15:33:13.162002Z","times_seen":15117490,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-15","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/wp-content/uploads/2025/04/Mario-Luigi-Brothership.webp","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"172.67.138.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switchroms.io/","date":"2025-08-15T05:24:28.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switchroms.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Jul 2025 02:18:55 GMT","end":"Wed, 08 Oct 2025 03:16:37 GMT"},"fingerprint":{"sha1":"9E:06:45:DB:7D:57:B4:C8:F6:AB:A6:53:8B:13:60:8F:FE:E8:08:C8","sha256":"93:C8:B1:DF:8F:F6:9F:7A:C0:58:BA:2C:97:3F:85:8E:05:96:03:F3:81:DB:A9:4A:BE:77:39:85:FE:D7:0F:13"}}},"request":{"raw":"GET /wp-content/uploads/2025/04/Mario-Luigi-Brothership.webp HTTP/1.1\r\nHost: switchroms.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://switchroms.io/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 05:24:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 83698\r\nlast-modified: Tue, 15 Apr 2025 11:00:11 GMT\r\netag: \"67fe3c3b-146f2\"\r\nserver: cloudflare\r\nx-content-type-options: \"nosniff\" always\r\nx-xss-protection: \"1; mode=block\" always\r\nstrict-transport-security: \"max-age=31536000; includeSubDomains; preload\" always\r\nreferrer-policy: no-referrer-when-downgrade\r\nexpires: Fri, 14 Aug 2026 07:24:59 GMT\r\ncache-control: public, max-age=31536000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\naccept-ranges: bytes\r\nage: 79168\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ud%2FL%2BQZQr%2Fy8SQht35Jm2%2Bng8ctWtjoO0KbMxojopRaLU0PIE1YdAxbVjV3EBEpaDcWY8uhSplI%2B5AovDpi2Lu95R9S3PfV1U%2FhX\"}]}\r\ncf-ray: 96f644109f2756c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":83698,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"50db7e69439c3117e3defaa4371a87b9","sha1":"14290370ece2dc1af032297925de760fa5607c14","sha256":"10265d4b7fd402a3ebd7aa57331732684da6518cef6b063f48d39822144416d6","sha512":"7d64df5ca65f621884b8a06801e43c4eb26b8b14ff811f8c7a3e458aaacfb0e8dad19acaa659a84ff88ceb0cb48058c034259b2d3aebb343e0a5f6e2e6e16d86","ssdeep":"1536:Pk4J/umPWQWD3q03dau1AehQ7ZxYfxI51M6m4MQBX5CT8GLVqPvofVgURx9mDt48:84NuwiD3P38ueehQ7ZxYEMdwrCT8G8Px","tlshash":"c583028837a19d1807173090ca65eb8b7b9d9ffda05cdb4ff18d315e581f232116aac9","first_seen":"2025-05-28T10:03:28.187449Z","last_seen":"2026-04-05T07:36:04.430442Z","times_seen":17,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/wp-includes/js/wp-emoji-release.min.js?ver=6.8.2","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"172.67.138.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://switchroms.io/","date":"2025-08-15T05:24:29.610Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switchroms.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Jul 2025 02:18:55 GMT","end":"Wed, 08 Oct 2025 03:16:37 GMT"},"fingerprint":{"sha1":"9E:06:45:DB:7D:57:B4:C8:F6:AB:A6:53:8B:13:60:8F:FE:E8:08:C8","sha256":"93:C8:B1:DF:8F:F6:9F:7A:C0:58:BA:2C:97:3F:85:8E:05:96:03:F3:81:DB:A9:4A:BE:77:39:85:FE:D7:0F:13"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=6.8.2 HTTP/1.1\r\nHost: switchroms.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://switchroms.io/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 15 Aug 2025 05:24:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 15 Jul 2025 21:03:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6876c224-4b33\"\r\nserver: cloudflare\r\nx-content-type-options: \"nosniff\" always\r\nx-xss-protection: \"1; mode=block\" always\r\nstrict-transport-security: \"max-age=31536000; includeSubDomains; preload\" always\r\nreferrer-policy: no-referrer-when-downgrade\r\nexpires: Sat, 01 Aug 2026 04:46:09 GMT\r\ncache-control: public, max-age=31536000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\ncontent-encoding: gzip\r\nage: 1211899\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zkgCPsU8vAYe3v1xhSOyuFQ2onYbyjUL8DHjlIp745ycbOQmX85T8ucxgSve%2F2Yrz4Lg1GYH9A8x5qbprRcSD18%2BO%2BmW4wLQL%2Fxg\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 96f644151e51b4f7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19251,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (16277)","md5":"c4b50535f3e989a77d537d5486342d47","sha1":"2a1cc988298c022def9376bd54f608f44154071a","sha256":"db8ee8be2b2456c191fc0739f34f6ac675af8ba4782380cf233024498e0eb968","sha512":"be3b974332c4dadc30025aa911fde008442c9f4966ade014a7b8f05926688e30b9fdc32ebdbdd53fe32fc3f4d9c6ac2310b98dc6602843f2d8f00b1ded4e9b83","ssdeep":"384:WAevzW+ZTbXUH3o//bEPhXgA5H1efAJmpr:WF6UXUH3o//YpXgAGfACr","tlshash":"d782fa9bb33a4e8f343e3bd7cd968f4dc9da555321c0e078dbeeb68169a00568274c90","first_seen":"2025-05-09T23:23:48.206606Z","last_seen":"2026-05-13T15:17:14.672409Z","times_seen":204026,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":24,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/wp-content/uploads/2025/04/Rift-of-the-NecroDancer.webp","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"172.67.138.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switchroms.io/","date":"2025-08-15T05:24:28.999Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switchroms.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Jul 2025 02:18:55 GMT","end":"Wed, 08 Oct 2025 03:16:37 GMT"},"fingerprint":{"sha1":"9E:06:45:DB:7D:57:B4:C8:F6:AB:A6:53:8B:13:60:8F:FE:E8:08:C8","sha256":"93:C8:B1:DF:8F:F6:9F:7A:C0:58:BA:2C:97:3F:85:8E:05:96:03:F3:81:DB:A9:4A:BE:77:39:85:FE:D7:0F:13"}}},"request":{"raw":"GET /wp-content/uploads/2025/04/Rift-of-the-NecroDancer.webp HTTP/1.1\r\nHost: switchroms.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://switchroms.io/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 05:24:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 88630\r\nlast-modified: Wed, 09 Apr 2025 07:01:29 GMT\r\netag: \"67f61b49-15a36\"\r\nserver: cloudflare\r\nx-content-type-options: \"nosniff\" always\r\nx-xss-protection: \"1; mode=block\" always\r\nstrict-transport-security: \"max-age=31536000; includeSubDomains; preload\" always\r\nreferrer-policy: no-referrer-when-downgrade\r\nexpires: Sat, 15 Aug 2026 01:32:12 GMT\r\ncache-control: public, max-age=31536000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\naccept-ranges: bytes\r\nage: 13936\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8XRM0zJowPzxTX4GuTbnIy5TKWTNag0jypaJAz1T1Lr8N4Wpu%2BPA%2FlDjdZCTDQGQeldtjJ8gVzu02VVQTZXdCPzz4pbbgbmOHhEc\"}]}\r\ncf-ray: 96f644111fb656c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":88630,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"47e88b664e71261b47f150400ce1a361","sha1":"ffddd9593f73a16f12614fa5f8db600c197983ef","sha256":"b4ad461fed64ab002877ce332293094806c73f5832e6f35c04ed0197ed317eaa","sha512":"603482c24d14724168dfedf01db46e2004cacbdf4a1491e2c73c3c07e7f653c46a1521a90bdac565de24a7bd04ee89641410492021ce8962a752dc673472160e","ssdeep":"1536:bSBFXyAoiBXMp07lELxhwIT/dvgTYthtErIWsddqNsBX0MV4ek5qCkuwX7:bSBhyAoiW072xLT/tgUddddqNeEMV4zk","tlshash":"a58312ef9898d49541f8fefe91b93a0ce0ea382887308918fc17fd76592a16c435553c","first_seen":"2025-05-28T10:03:28.171101Z","last_seen":"2025-09-15T23:15:45.364937Z","times_seen":7,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://switchroms.io/","date":"2025-08-15T05:24:29.020Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Jun 2025 22:10:34 GMT","end":"Tue, 23 Sep 2025 23:10:19 GMT"},"fingerprint":{"sha1":"9D:9F:FB:08:8A:BA:46:3F:69:F6:F3:D7:AE:78:13:8D:FD:5A:C8:D5","sha256":"D9:F5:02:19:B1:14:B6:BB:CD:0A:77:3F:9C:27:15:A8:11:CF:B7:9A:8D:F2:F4:E8:83:46:88:37:44:03:A7:E7"}}},"request":{"raw":"GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://switchroms.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchroms.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 05:24:29 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2024.6.1\"\r\nlast-modified: Thu, 06 Jun 2024 15:52:56 GMT\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 96f644115ac3b4fd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19948,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (19948), with no line terminators","md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-05-13T15:32:10.408188Z","times_seen":335510,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":4,"connect":28,"send":0,"wait":15,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchroms.io/wp-content/themes/switch/js/functions.js?ver=2.2","fqdn":"switchroms.io","domain":"switchroms.io","tld":"io"},"ip":{"addr":"172.67.138.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://switchroms.io/","date":"2025-08-15T05:24:29.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switchroms.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Jul 2025 02:18:55 GMT","end":"Wed, 08 Oct 2025 03:16:37 GMT"},"fingerprint":{"sha1":"9E:06:45:DB:7D:57:B4:C8:F6:AB:A6:53:8B:13:60:8F:FE:E8:08:C8","sha256":"93:C8:B1:DF:8F:F6:9F:7A:C0:58:BA:2C:97:3F:85:8E:05:96:03:F3:81:DB:A9:4A:BE:77:39:85:FE:D7:0F:13"}}},"request":{"raw":"GET /wp-content/themes/switch/js/functions.js?ver=2.2 HTTP/1.1\r\nHost: switchroms.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://switchroms.io/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 05:24:28 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 19 Mar 2024 08:07:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65f947d9-a81\"\r\nserver: cloudflare\r\nx-content-type-options: \"nosniff\" always\r\nx-xss-protection: \"1; mode=block\" always\r\nstrict-transport-security: \"max-age=31536000; includeSubDomains; preload\" always\r\nreferrer-policy: no-referrer-when-downgrade\r\nexpires: Fri, 14 Aug 2026 07:24:59 GMT\r\ncache-control: public, max-age=31536000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\ncontent-encoding: gzip\r\nage: 79169\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R5NrvT%2FrNSeGuXgET7re7XM8t8meaHOosDxzIL3J11CuRdFuDK8j273YvKwEh2Mtrgiv2Y2wPwBoZpM8zz%2B2af%2BW8%2B0lqzjC2IYC\"}]}\r\ncf-ray: 96f644113fc956c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2689,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"6dbdd79c06f49fc8f20583d68f40f8b5","sha1":"f0e793d6e5e53075db965ebc9fe6cf792e6d9df4","sha256":"9d7b4f9d700ef7874dc31c9daf9717af4dba59a80138f732db5f8b100d6ee62c","sha512":"c3171f7672097511f09de055a7717f379e56873b4e24139fcd9c3af3d31fea985e314c7c7b76943ff8f8354378dd96a3211b67650b551df6d2e871adc4c5111c","ssdeep":"","tlshash":"065134dafb5da63b403b30b7073e40c03a3a9517e1456822b8a7d8683fc855523e2f6d","first_seen":"2024-08-22T17:21:44.346395Z","last_seen":"2026-01-26T03:36:30.074521Z","times_seen":33,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"professionaltrafficmonitor.com/stats","fqdn":"professionaltrafficmonitor.com","domain":"professionaltrafficmonitor.com","tld":"com"},"ip":{"addr":"18.159.236.121","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://switchroms.io/","date":"2025-08-15T05:24:29.602Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"protrafficinspector.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 01 Jul 2025 00:00:00 GMT","end":"Thu, 30 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:D5:8D:EB:A4:50:13:0D:7C:33:71:82:B8:02:49:4F:D6:31:B6:E6","sha256":"49:03:4C:2C:1B:23:D8:D6:CB:AE:F0:54:61:99:C2:20:F4:FF:87:5E:0B:72:B1:6B:D8:AB:21:49:2D:F2:EC:4A"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: professionaltrafficmonitor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://switchroms.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchroms.io/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 05:24:29 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\nserver: fasthttp\r\naccess-control-allow-origin: https://switchroms.io\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nset-cookie: uid_id2=62f0fc5a-aa7f-4636-8af5-6a014c9884e2:3:1; expires=Mon, 13 Aug 2035 05:24:29 GMT; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"e6f788e35bd1131f122607d522abf704","sha1":"ade048bafb14d83cac95849ffbb1589a779b3440","sha256":"540b4d570d2f52af6b40acb231798c21679e39c3876abcec80329fc0ccc46483","sha512":"c0ce493d8b2dcc2baa5ad4306a7a3332efb5ca3b529f34108d1969ae81ac50d82b11a895775c67ba71b9b8d222881d4ea4abb4e2fed2a4416dec14755d2cf0c9","ssdeep":"","tlshash":"ac9004c357d173751015df55c435107104035713cc30001f5111fcc43704500f001d33","first_seen":"2025-08-15T05:24:58.038158Z","last_seen":"2025-08-15T05:24:58.038158Z","times_seen":1,"resource_available":false,"data":null}},"time_used":363,"timings":{"blocked":169,"dns":21,"connect":22,"send":0,"wait":21,"receive":0,"ssl":126},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}