{"report_id":"ec83d32a-b6a0-45fa-a9a1-39842f2774cd","version":6,"status":"done","tags":[],"date":"2026-05-11T18:20:34Z","url":{"schema":"http","addr":"trollcoins.com","fqdn":"trollcoins.com","domain":"trollcoins.com","tld":"com"},"ip":{"addr":"104.21.80.223","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"trollcoins.com/","fqdn":"trollcoins.com","domain":"trollcoins.com","tld":"com"},"title":"troll","dom":{"size":5971,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1134)","md5":"6b50f59162eee0e4b294c276517ebc59","sha1":"e83ec8090b05cb08ed137c2d56fafadebf05fb32","sha256":"9ad1f13e58be4860e71c2404f8de51179dc1da9ae61e042059d29c7f29e9f50e","sha512":"12121e218c02271fd3183611655bf7dee45e186eb3bcb4d89dbf137e9aa1024ca7becc13d330c1e253924f952a59d6d8b3e420efbe16f84a565c41dde50efb5e","ssdeep":"96:nZSWQ5+onOJXo8qPejCyBygRj2nsTBHkfdWLbWdTc1RcWNsXPKl8rc:gWQ5+onOJ4vByEcBEfdWHiTc1RcWorc","tlshash":"99c14fa142fc602d50478388d77ab7acab2f607bb2080148fa6e07b48f72dd2d95744c","dom_hash":"domhash440b88a5640ff7aa0dbc5d6db39da9d1","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"trollcoins.com","fqdn":"trollcoins.com","domain":"trollcoins.com","tld":"com"},"ip":{"addr":"104.21.80.223","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-15T18:20:34Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.251.143.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-05-10T22:17:57.86744Z","alert_count":0,"request_count":2,"received_data":32118,"sent_data":1077,"comment":"","tags":null,"fingerprints":null},{"fqdn":"trololol.io","ip":{"addr":"66.33.60.130","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2025-04-20","domain_rank":6153549,"first_seen":"2025-08-03T11:52:22.144682Z","last_seen":"2025-09-08T09:45:25.927913Z","alert_count":0,"request_count":1,"received_data":286184,"sent_data":468,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]},{"fqdn":"hbeugaufg1-8-26hbaaaaddoter.fly.dev","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2019-03-01","domain_rank":0,"first_seen":"2026-02-09T00:40:28.837358Z","last_seen":"2026-05-09T08:16:44.533703Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":550,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-05-10T22:20:44.526759Z","alert_count":0,"request_count":1,"received_data":3758,"sent_data":474,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ipapi.co","ip":{"addr":"104.26.8.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-04-19","domain_rank":7936,"first_seen":"2017-01-31T09:07:01Z","last_seen":"2026-05-06T19:17:34.909877Z","alert_count":0,"request_count":1,"received_data":2489,"sent_data":429,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"trollcoins.com","ip":{"addr":"104.21.80.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":5,"received_data":358374,"sent_data":2196,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"trollcoins.com/loader.js","fqdn":"trollcoins.com","domain":"trollcoins.com","tld":"com"},"ip":{"addr":"104.21.80.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6a9bde8578ca15caeebbfb40ca9c5394","sha1":"84f1bf128e84fa6e03885c9d7b49ac3cf181d2fd","sha256":"71b903cc667f07994f288957776b7f8545ca874dc1a802960cbb169c3fb3f3aa","sha512":"594f656bd8a8b84d57e0bad12a17773f974618dac8a4ca02596fee2de0d46ea1ddfb63b9a23372d13ab50e0aacfced4ead65c43e9e8290fb92a8418d80178cdc","ssdeep":"384:TBqBM3ctXM+8ivXTFv24ozKVAkJDZDXNNu34I0hWD8fe+eCRPOCOnEhy2V+MvOng:2kctXM+8ojp2xOVAEZ83idtOiy2ogWk5","tlshash":"6392d98e7a54267b033312484d670e54d926d64fa2024c2976bce3d43fb8e1e58b77ee","size":20094,"data":"","first_seen":"2026-05-11T18:20:40.15255Z","last_seen":"2026-05-28T17:03:54.761918Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ipapi.co/json/","fqdn":"ipapi.co","domain":"ipapi.co","tld":"co"},"ip":{"addr":"104.26.8.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://trollcoins.com/","date":"2026-05-11T18:20:12.235Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ipapi.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 20:25:59 GMT","end":"Wed, 15 Jul 2026 21:25:52 GMT"},"fingerprint":{"sha1":"76:B2:7F:DD:D1:3A:92:49:08:6F:F6:9D:93:7F:FA:A4:E7:AF:1E:04","sha256":"D3:90:F8:60:D1:C0:1C:19:C5:12:68:B2:54:72:DC:42:A3:9F:4C:D8:10:D6:0D:5B:71:0C:1C:EB:AF:AA:AF:F1"}}},"request":{"raw":"GET /json/ HTTP/1.1\r\nHost: ipapi.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trollcoins.com/\r\nOrigin: https://trollcoins.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 11 May 2026 18:20:12 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nallow: POST, HEAD, OPTIONS, GET, OPTIONS\r\nx-frame-options: DENY\r\nvary: Host, origin\r\naccess-control-allow-origin: https://trollcoins.com\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\ncross-origin-opener-policy: same-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.stripe.com https://*.paddle.com https://www.google.com https://www.gstatic.com https://maps.gstatic.com https://maps.googleapis.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/; style-src 'self' 'unsafe-inline' https://*.paddle.com https://fonts.gstatic.com https://fonts.googleapis.com; img-src 'self' data: https://ipapi.co https://maps.gstatic.com https://maps.googleapis.com https://*.stripe.com; font-src 'self' data: https://fonts.gstatic.com https://fonts.googleapis.com; frame-src 'self' https://www.google.com https://*.stripe.com https://*.paddle.com https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/; connect-src 'self' https://ipapi.co/ https://*.paddle.com https://*.stripe.com https://maps.googleapis.com https://www.google.com/recaptcha/; object-src 'none'; frame-ancestors 'none'; base-uri 'self'; form-action 'self';\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sJoTp5BF9S7CxlihbD%2BFctYrptDXl0APzyWBqFKzCj9JCP8qlv8CdbiG3cXzUPEUgHCauVPsMRQzQkvshCj5Gik%2BIRVqUtSQuK0cAfdiydu%2BKNBrAKlW4OE1\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9fa33240cfcf49c5-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":736,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b2e0d36fbd81e8a9c07fb95d39a92f0e","sha1":"0e5ea1eafd1c798f9d3b1ab4505dfd6b4be511f9","sha256":"1b3bbe6efd264c3e4dd2f9b97fd542f1effd6c5c50af1350a6687c7dff56135a","sha512":"e0d254a299cfe08338f3d04dbcba739d9af7faa9b53458d1b0eeca2b8cf8c181c93a35f1dfc205f118acb197be8a45a31f28df8bcdd5fc6cfef5b7cbd804c78c","ssdeep":"","tlshash":"6601df68e4680f7b9cb81358b4386907122422175f66398e7fd0978d0f8e8bf31b135e","first_seen":"2026-05-11T02:17:46.320605Z","last_seen":"2026-05-27T21:55:05.943927Z","times_seen":4375,"resource_available":false,"data":null}},"time_used":360,"timings":{"blocked":49,"dns":21,"connect":1,"send":0,"wait":261,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trollcoins.com/BG.avif","fqdn":"trollcoins.com","domain":"trollcoins.com","tld":"com"},"ip":{"addr":"104.21.80.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trollcoins.com/","date":"2026-05-11T18:20:12.251Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trollcoins.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 May 2026 12:53:55 GMT","end":"Sun, 09 Aug 2026 13:53:46 GMT"},"fingerprint":{"sha1":"C0:E0:69:D2:4D:82:43:C9:6C:CC:15:15:85:A5:F4:ED:5D:79:6D:D2","sha256":"74:41:06:C8:62:55:3C:1F:0E:E7:B1:10:7F:35:05:24:80:78:7D:7E:0F:55:AF:9B:5A:AE:30:E6:19:E2:44:C8"}}},"request":{"raw":"GET /BG.avif HTTP/1.1\r\nHost: trollcoins.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trollcoins.com/styles.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 311949\r\ncf-cache-status: MISS\r\ncontent-type: image/avif\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"872918077df147250795d44c86fd4aff\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lwRbLk6oOKCBzUcDZX%2FxdOnr48pmqIcK6WQ0lL7SQgZmkctgIpJ4j9KcfeCMTtPyI4WsQzUUXPJdOA83RjKXJhGj5QrEwVz%2FEnk%2FSdhfvcAUKzljlU360g9%2BBIOPzescFw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Mon, 11 May 2026 18:20:12 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9fa332408ae54c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":311949,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"3c8316a3bce2e7a98e669bee8293c736","sha1":"f7f36267ff0bfc3c58434299fe063ad7d80f78f2","sha256":"ec8eb53274db6b728a1113189e9eca79c7234c4cb4ed18ffa42d50c8669ed0e1","sha512":"55b40ab16f1ed5b8edcf201fc96daf0c7e521d21b2ed8481c54f2ae781e6e3aab354f36c71132c46267243570d9461b6e51d5ac5205532b0b607f020967c6cae","ssdeep":"6144:JVdAde88VhblPsmPOkgK3X5/lSxNu2AJVw9BwCbr5QSi0K+:nNjV1BdPOkF9hITb95n","tlshash":"b16422961102afc8e9d287781afdc1038e992705e93766091d41fe82be3527c7fd89b7","first_seen":"2026-05-11T18:20:40.144218Z","last_seen":"2026-05-11T18:22:59.616645Z","times_seen":2,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":102,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/pressstart2p/v16/e3t4euO8T-267oIAQAu6jDQyK3nVivM.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.143.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trollcoins.com/","date":"2026-05-11T18:20:12.258Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"99:99:69:B2:FC:B4:4F:EA:18:FB:04:4C:0F:8D:3E:40:61:B5:31:00","sha256":"55:6F:9F:9F:5C:FF:31:03:79:C7:88:2B:89:0C:1A:2F:DE:0B:7B:1A:91:6E:BD:C8:7D:60:EF:5A:D9:C7:51:26"}}},"request":{"raw":"GET /s/pressstart2p/v16/e3t4euO8T-267oIAQAu6jDQyK3nVivM.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://trollcoins.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 12512\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 07 May 2026 10:53:06 GMT\r\nexpires: Fri, 07 May 2027 10:53:06 GMT\r\ncache-control: public, max-age=31536000\r\nage: 372426\r\nlast-modified: Tue, 16 Sep 2025 03:41:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12512,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 12512, version 1.0","md5":"5c7e04d0202b58d3df25dd6ed69ce9b2","sha1":"87ab8daaa6e2c9db3778cdb299670e5edf1db828","sha256":"afec86997fdaf54af1f59358fa2c1e2a0f1d04146edad18e5cd141d0384a7548","sha512":"d08a56ec3c4fe4ad1f7bfe2191d30ad810c660b62bde9ed3de5d2c8a9d3c87f75546ef839394f084cb798d1675a2c0ebace5220ab2d1ca28bec60e0fdba4ee11","ssdeep":"384:udJAGR6YO7fjJ0ApzehQKffM30rHn3e7WV:CRNOD7zehk30Ln3e7a","tlshash":"f842bf242856c0ff26b918b759bc1744a99be23613c28912f90698e7ecde4355c3d2d2","first_seen":"2025-09-17T02:54:26.586694Z","last_seen":"2026-06-07T08:18:23.00549Z","times_seen":761,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":90,"dns":3,"connect":8,"send":0,"wait":30,"receive":1,"ssl":75},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/vt323/v18/pxiKyp0ihIEF2isfFJU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.143.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trollcoins.com/","date":"2026-05-11T18:20:12.265Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"99:99:69:B2:FC:B4:4F:EA:18:FB:04:4C:0F:8D:3E:40:61:B5:31:00","sha256":"55:6F:9F:9F:5C:FF:31:03:79:C7:88:2B:89:0C:1A:2F:DE:0B:7B:1A:91:6E:BD:C8:7D:60:EF:5A:D9:C7:51:26"}}},"request":{"raw":"GET /s/vt323/v18/pxiKyp0ihIEF2isfFJU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://trollcoins.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 17936\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 05 May 2026 18:17:22 GMT\r\nexpires: Wed, 05 May 2027 18:17:22 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 17:01:41 GMT\r\ncontent-type: font/woff2\r\nage: 518570\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17936,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 17936, version 1.0","md5":"9cb03ff101745b695ab00581bfb7ceb8","sha1":"4f33d638cb5dc09acc0e940bd2ae4cab1d1c8744","sha256":"8ddbebcc1048154132e1d78eb9b1f7850bca1b7d857035ccf1cb4318ebc615b6","sha512":"4ba8007e98ce15a463e5e5ef35d96a221e143ab67a677950a6c1fa0a6f345c04fbcede718c0634471551acd9e6d77c0b449fecca484decba883210171021650d","ssdeep":"384:AfysgkGgulIZopWHKRQ0K3xjp+kgP3+GHJ+TG0nikv7T+mD8f2D057B:AfniRt2N1DGpIGAff3hDs","tlshash":"ec82e125d8f66852f1c4f8208315892c68594cc7a8c66fb76d493dd1453c27ccbba3bd","first_seen":"2025-09-17T11:01:07.297878Z","last_seen":"2026-06-06T20:14:32.889577Z","times_seen":894,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":85,"dns":4,"connect":8,"send":0,"wait":16,"receive":11,"ssl":66},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trollcoins.com/LOGO.avif","fqdn":"trollcoins.com","domain":"trollcoins.com","tld":"com"},"ip":{"addr":"104.21.80.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trollcoins.com/","date":"2026-05-11T18:20:12.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trollcoins.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 May 2026 12:53:55 GMT","end":"Sun, 09 Aug 2026 13:53:46 GMT"},"fingerprint":{"sha1":"C0:E0:69:D2:4D:82:43:C9:6C:CC:15:15:85:A5:F4:ED:5D:79:6D:D2","sha256":"74:41:06:C8:62:55:3C:1F:0E:E7:B1:10:7F:35:05:24:80:78:7D:7E:0F:55:AF:9B:5A:AE:30:E6:19:E2:44:C8"}}},"request":{"raw":"GET /LOGO.avif HTTP/1.1\r\nHost: trollcoins.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trollcoins.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 11056\r\ncf-cache-status: MISS\r\ncontent-type: image/avif\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"a7e995230fd6187a8e0258f68e3d6ac2\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B0eCpfSUPzhINGdUEEzMGT8X5D08o5upzavM8fWHILYzqaeCAaev5Frk0YpA2nDGiW9dEOfU9XPSQQi%2Bw8M4SbyJB85hU9YURpkNVk1i6IsKRCQzaTcD0es0PXtomM0YCg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Mon, 11 May 2026 18:20:12 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9fa3323f5a6e4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11056,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"95cef9a72ea306911e4faaa0224af2bb","sha1":"ede75e5d4df2977fc05eb6d34aa0a352e80f6f6e","sha256":"d19d12ff4dc7ea31302433459c05a47a7bfc81727205f6c54e78382530d53d64","sha512":"cbd172ff5ee96b05da8ce075ef557ae14fb20f47355f92f24434931713c38b6a9c6211f0987362886f2976d147ca089079d5f13b33e52b9a3f4eab655e8ca017","ssdeep":"192:+b4zhNtbyX5ew405V0vblgJimXZAlV2qmc0Egs8ZihBmfF1dv:Nzhoen05V0vblj/VNRgFYhBmdv","tlshash":"d432be8903a49588e47106790bb1e618e964f9f400dbc19ae2c5bdee49c41b5cb7cfde","first_seen":"2026-05-11T18:20:40.146247Z","last_seen":"2026-05-11T18:22:59.613696Z","times_seen":2,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trololol.io/_assets/4963de8a-0bda-42c5-8b39-6b2387f4cf50.ico","fqdn":"trololol.io","domain":"trololol.io","tld":"io"},"ip":{"addr":"66.33.60.130","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trollcoins.com/","date":"2026-05-11T18:20:12.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trololol.io","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 05:20:06 GMT","end":"Sun, 26 Jul 2026 05:20:05 GMT"},"fingerprint":{"sha1":"5B:D4:E5:72:CE:06:7E:B2:CC:C4:E4:0E:AE:FD:07:C3:06:12:49:6C","sha256":"54:C7:6B:51:31:4E:03:FF:82:33:BA:7B:AB:1C:73:F8:F7:99:FD:6B:7B:D8:84:15:78:00:B2:D2:EA:74:5D:AE"}}},"request":{"raw":"GET /_assets/4963de8a-0bda-42c5-8b39-6b2387f4cf50.ico HTTP/1.1\r\nHost: trololol.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trollcoins.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 348\r\ncache-control: public, max-age=31536000\r\ncdn-cache-control: public, max-age=31536000, immutable\r\ncontent-type: image/ico\r\ncross-origin-resource-policy: cross-origin\r\ndate: Mon, 11 May 2026 18:14:24 GMT\r\nlast-modified: Sun, 17 Aug 2025 01:30:30 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\ntiming-allow-origin: *\r\nx-cache: HIT, HIT\r\nx-content-type-options: nosniff\r\nx-imgix-id: cf8847007a72b0ef70578625173fa214876d2c43\r\nx-served-by: cache-fra-eddf8230041-FRA, cache-bma-essb1270050-BMA\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::54nwk-1778523612654-1295c582e43d\r\ncontent-length: 285478\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":285478,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 4 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"f114111d7be1a85dde63a2e592b7c3cf","sha1":"ed7c65681b4965e77a39c07c4629ea0ba3204911","sha256":"def48ce949ee943100c118f6a03dbd398de8f10625c122814795e8d46b7d919b","sha512":"01274d194893664ed15cd6345fc9b613db02f318884a7272a91a11bf210ca6308587b90f20c4d739f6f0fab3a033d00f9d5397669c44231313ab4cfb46646567","ssdeep":"1536:JS60fjtJJPraSBYnFdaOKfcxp4q7PyB3AkihIRy40iLLOImWCmXAdr4CjsgFj57S:l0fJjaLnaOKfc83OYAdV1","tlshash":"c354dbf3c391469afa94533c8836ee3b066baead7eb55219446d74767e733830031827","first_seen":"2026-05-11T18:20:40.147079Z","last_seen":"2026-05-11T18:22:59.610005Z","times_seen":2,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":0,"dns":79,"connect":1,"send":0,"wait":25,"receive":20,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hbeugaufg1-8-26hbaaaaddoter.fly.dev/notify-visit","fqdn":"hbeugaufg1-8-26hbaaaaddoter.fly.dev","domain":"hbeugaufg1-8-26hbaaaaddoter.fly.dev","tld":"fly.dev"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://trollcoins.com/","date":"2026-05-11T18:20:12.579Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"OPTIONS /notify-visit HTTP/1.1\r\nHost: hbeugaufg1-8-26hbaaaaddoter.fly.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://trollcoins.com/\r\nOrigin: https://trollcoins.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T20:34:21.112536Z","times_seen":16220865,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trollcoins.com/","fqdn":"trollcoins.com","domain":"trollcoins.com","tld":"com"},"ip":{"addr":"104.21.80.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-11T18:20:11.709Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trollcoins.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 May 2026 12:53:55 GMT","end":"Sun, 09 Aug 2026 13:53:46 GMT"},"fingerprint":{"sha1":"C0:E0:69:D2:4D:82:43:C9:6C:CC:15:15:85:A5:F4:ED:5D:79:6D:D2","sha256":"74:41:06:C8:62:55:3C:1F:0E:E7:B1:10:7F:35:05:24:80:78:7D:7E:0F:55:AF:9B:5A:AE:30:E6:19:E2:44:C8"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: trollcoins.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 11 May 2026 18:20:11 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yQ%2BwH5ZlQddjffhJqasXy%2FtHo%2BDKr7wG4w2P29cgu58w0gYCwB%2F4DkXiSKKWuqxOZltwceHzKCymCS7Q35nEe2v70X5Sv78iJGIjEsG5WoPTGlPCw8XzUY%2B7ezAeJZiudw%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9fa3323d6c225a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6204,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1102), with CRLF line terminators","md5":"dad54add0e8181d2ab6ac6aef449fde1","sha1":"185e486d913019b0bf781a10fca6639143e069dd","sha256":"8fd3d2ddac2439f5f26f33d8fe4ab0431a395fee881b67f8acd834a2a94deced","sha512":"196bb2e62fad3f851bab6b44725f8f329ae1de9859cf8d1ee95f314c31f1b729235776f7ae345092572c32285509e70d499d828379732c23c08693d21b767d7e","ssdeep":"96:hWc4gPYqCBygRj29T4HkfdWLbWdTc1RcWusXmhGxod:PvqG4EfdWHiTc1RcWlod","tlshash":"25d11ca142c8602d45738748cb2ab3bcfb5f61b7b2090144ba6e27a72f73d92ed5740c","first_seen":"2026-05-11T18:20:40.148436Z","last_seen":"2026-05-11T18:22:59.611871Z","times_seen":2,"resource_available":true,"data":null}},"time_used":162,"timings":{"blocked":36,"dns":13,"connect":1,"send":0,"wait":90,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Press+Start+2P\u0026family=VT323\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trollcoins.com/","date":"2026-05-11T18:20:12.065Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"25:C3:78:A0:E1:97:BA:8A:CE:43:FA:9C:BF:89:EF:DD:A3:CD:9C:40","sha256":"C1:18:7F:C1:92:8E:D0:83:CA:E8:62:DB:BE:FE:89:B2:84:13:70:FA:0E:40:65:D2:B6:8C:09:37:73:46:4D:4B"}}},"request":{"raw":"GET /css2?family=Press+Start+2P\u0026family=VT323\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trollcoins.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 11 May 2026 18:20:12 GMT\r\ndate: Mon, 11 May 2026 18:20:12 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3072,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"4cb4861a0c64443e5fb5ec20d259cb80","sha1":"5e215b8bf16291ae8641f1c91036aba3f519ef0f","sha256":"35d10a53d76ef5221775cdd1d0ac2f465d1a6e16f7b2faf77a0d576c408bf1b5","sha512":"073e31bc5bb003b4dfb5252a39774057927e902a234cdaef4a7419a031fec1001c5b446925b49a7b025f10a800c3cc07b46b88b7eeec22767703301f11332b50","ssdeep":"","tlshash":"4651abe2052b9140db831cc273cf7e3ade0e61156881c6799ffe1888acbec660355b4e","first_seen":"2025-09-24T09:55:14.285389Z","last_seen":"2026-05-24T02:59:07.202183Z","times_seen":45,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":89,"dns":1,"connect":8,"send":0,"wait":18,"receive":0,"ssl":83},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trollcoins.com/styles.css","fqdn":"trollcoins.com","domain":"trollcoins.com","tld":"com"},"ip":{"addr":"104.21.80.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trollcoins.com/","date":"2026-05-11T18:20:12.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trollcoins.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 May 2026 12:53:55 GMT","end":"Sun, 09 Aug 2026 13:53:46 GMT"},"fingerprint":{"sha1":"C0:E0:69:D2:4D:82:43:C9:6C:CC:15:15:85:A5:F4:ED:5D:79:6D:D2","sha256":"74:41:06:C8:62:55:3C:1F:0E:E7:B1:10:7F:35:05:24:80:78:7D:7E:0F:55:AF:9B:5A:AE:30:E6:19:E2:44:C8"}}},"request":{"raw":"GET /styles.css HTTP/1.1\r\nHost: trollcoins.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trollcoins.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Mon, 11 May 2026 18:20:12 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6q1YJfgovl2xQ282ZcVEnSEZXUpMIRGuhnED8ZOf4ZK0oppdPRKzMgiKagqfDNZClaMVjDEFB3dP4rf6hK23P13caK4gP3TOu1HfyFZKStf6MJCQoRI2HAdSr829bVo27w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"580e4a886fbb73350616c19390d8642e\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9fa3323f5a6c4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5037,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (329), with CRLF line terminators","md5":"d36763763b66016de140a38128569da2","sha1":"1973d68cc68681385f337e8e28a641ff0ebb4111","sha256":"cb73bdb31832139138ab7583ba65631a874bf75aaad88ffc447645ef8d891eea","sha512":"17722cd69ea46c5e063368bb3e7044ea3e84a2d0222536f216340f6944f8b1cef4652f1f5b0c11401025ec630b75ed9d5c169b7ad42f743e1279bda75f823164","ssdeep":"96:31hgknPIou5p2UsdeXrmbL1CuLZhJcWi/q5k/eScZKLxUL9C055:31hizpXsdGTPIK70r","tlshash":"f8a17598534a6206e537d96dbbe14b0893f18021cb0b476f7ee55048b3ca2a4c332fad","first_seen":"2026-05-11T18:20:40.151544Z","last_seen":"2026-05-11T18:22:59.612747Z","times_seen":2,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trollcoins.com/loader.js","fqdn":"trollcoins.com","domain":"trollcoins.com","tld":"com"},"ip":{"addr":"104.21.80.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trollcoins.com/","date":"2026-05-11T18:20:12.069Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trollcoins.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 May 2026 12:53:55 GMT","end":"Sun, 09 Aug 2026 13:53:46 GMT"},"fingerprint":{"sha1":"C0:E0:69:D2:4D:82:43:C9:6C:CC:15:15:85:A5:F4:ED:5D:79:6D:D2","sha256":"74:41:06:C8:62:55:3C:1F:0E:E7:B1:10:7F:35:05:24:80:78:7D:7E:0F:55:AF:9B:5A:AE:30:E6:19:E2:44:C8"}}},"request":{"raw":"GET /loader.js HTTP/1.1\r\nHost: trollcoins.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trollcoins.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Mon, 11 May 2026 18:20:12 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xeJAj2jNlNqGiJVenrLi65KzwP9lYPXy%2BgnBV9Fwp%2BiAK5hf2DQuva9GdV6lYZvtTX%2FDd98GebKVv%2FRd8neur9cB7fRGORHpCmZS5jWQqCVQCgATNc8UQa6SSX3%2ByHXcpQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"5a9f9f5596da3d6c8a582f7be398ad4d\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9fa3323f5a6d4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20094,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (6876), with CRLF line terminators","md5":"6a9bde8578ca15caeebbfb40ca9c5394","sha1":"84f1bf128e84fa6e03885c9d7b49ac3cf181d2fd","sha256":"71b903cc667f07994f288957776b7f8545ca874dc1a802960cbb169c3fb3f3aa","sha512":"594f656bd8a8b84d57e0bad12a17773f974618dac8a4ca02596fee2de0d46ea1ddfb63b9a23372d13ab50e0aacfced4ead65c43e9e8290fb92a8418d80178cdc","ssdeep":"384:TBqBM3ctXM+8ivXTFv24ozKVAkJDZDXNNu34I0hWD8fe+eCRPOCOnEhy2V+MvOng:2kctXM+8ojp2xOVAEZ83idtOiy2ogWk5","tlshash":"6392d98e7a54267b033312484d670e54d926d64fa2024c2976bce3d43fb8e1e58b77ee","first_seen":"2026-05-11T18:20:40.15255Z","last_seen":"2026-05-28T17:03:54.761918Z","times_seen":6,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}