{"report_id":"f948dea8-6f6b-4a15-8b93-02930260cf6e","version":6,"status":"done","tags":[],"date":"2025-12-14T15:47:26Z","url":{"schema":"https","addr":"lootdest.org/s?c7bcc275","fqdn":"lootdest.org","domain":"lootdest.org","tld":"org"},"ip":{"addr":"54.240.174.57","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"loot-link.com/s?c7bcc275\u0026did=9","fqdn":"loot-link.com","domain":"loot-link.com","tld":"com"},"title":"SeaThrough Xray","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"lootdest.org/s?c7bcc275","fqdn":"lootdest.org","domain":"lootdest.org","tld":"org"},"ip":{"addr":"54.240.174.57","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-18T15:47:26Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2025-12-14","alert":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","trigger":"loot-link.com/9.js","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"@imp0rtp3 (modified by Florian Roth)","date":"2020-09-06","description":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","reference":"https://imp0rtp3.wordpress.com/2021/08/12/tetris","rule":"apt_CN_Tetris_JS_advanced_1"}},{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2025-12-14","alert":"Hunting_JS_WebAssembly","trigger":"www.youtube.com/s/player/ab89db3f/player_ias.vflset/en_US/base.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null},"summary":[{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2025-12-07T22:25:46.118111Z","alert_count":0,"request_count":1,"received_data":22243,"sent_data":449,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"loot-link.com","ip":{"addr":"104.21.25.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-09-14","domain_rank":25577,"first_seen":"2023-09-18T13:51:16Z","last_seen":"2025-10-20T16:48:31.828977Z","alert_count":1,"request_count":6,"received_data":283155,"sent_data":2941,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}]},{"fqdn":"d1zhmd1pxxxajf.cloudfront.net","ip":{"addr":"54.230.241.40","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2025-11-30T01:33:59.087014Z","last_seen":"2025-12-10T06:48:32.723244Z","alert_count":0,"request_count":1,"received_data":1124,"sent_data":469,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"www.youtube.com","ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-02-15","domain_rank":286,"first_seen":"2013-04-13T07:43:20Z","last_seen":"2025-12-07T23:20:13.63624Z","alert_count":1,"request_count":6,"received_data":3854379,"sent_data":3019,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"creators.lootlabs.gg","ip":{"addr":"18.238.243.77","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2023-03-20","domain_rank":2265990,"first_seen":"2025-05-31T22:36:57.524635Z","last_seen":"2025-10-12T11:24:59.996077Z","alert_count":0,"request_count":2,"received_data":48863,"sent_data":1040,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty:1.21.4.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-12-07T22:17:02.440237Z","alert_count":0,"request_count":1,"received_data":4878,"sent_data":463,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"nerventualken.com","ip":{"addr":"172.67.197.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-01-01","domain_rank":155901,"first_seen":"2024-10-08T03:58:59Z","last_seen":"2025-11-27T17:22:54.619714Z","alert_count":0,"request_count":2,"received_data":2388,"sent_data":1007,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"d1wzdj81h1hubn.cloudfront.net","ip":{"addr":"18.239.47.148","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2023-01-18T20:12:00Z","last_seen":"2025-12-11T13:31:43.988004Z","alert_count":0,"request_count":6,"received_data":324325,"sent_data":2780,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"app.unlockr.app","ip":{"addr":"104.21.81.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-08-18","domain_rank":844335,"first_seen":"2025-03-20T23:46:19.496978Z","last_seen":"2025-12-10T06:48:32.66159Z","alert_count":0,"request_count":1,"received_data":884,"sent_data":465,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fingerprinting36542.s3.us-east-1.amazonaws.com","ip":{"addr":"54.231.235.194","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2005-08-18","domain_rank":980294,"first_seen":"2024-12-09T20:50:57.594921Z","last_seen":"2025-12-07T09:31:22.336913Z","alert_count":0,"request_count":1,"received_data":38715,"sent_data":475,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-12-07T22:13:56.807982Z","alert_count":0,"request_count":4,"received_data":119880,"sent_data":2146,"comment":"","tags":null,"fingerprints":null},{"fqdn":"i.ytimg.com","ip":{"addr":"142.250.178.118","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2007-12-11","domain_rank":436,"first_seen":"2012-10-03T19:11:04Z","last_seen":"2025-12-07T23:21:23.948202Z","alert_count":0,"request_count":1,"received_data":4323,"sent_data":453,"comment":"","tags":null,"fingerprints":null},{"fqdn":"lootdest.org","ip":{"addr":"3.164.230.21","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2023-09-14","domain_rank":76143,"first_seen":"2023-09-18T14:03:17Z","last_seen":"2025-12-05T10:56:23.802267Z","alert_count":0,"request_count":1,"received_data":23179,"sent_data":491,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty:1.21.4.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"pagead2.googlesyndication.com","ip":{"addr":"142.250.178.34","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2003-01-21","domain_rank":610,"first_seen":"2012-05-21T07:15:40Z","last_seen":"2025-12-08T02:09:00.315945Z","alert_count":0,"request_count":1,"received_data":164318,"sent_data":467,"comment":"","tags":null,"fingerprints":null},{"fqdn":"unpkg.com","ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-06","domain_rank":1093,"first_seen":"2016-01-07T23:26:01Z","last_seen":"2025-12-07T22:48:13.240297Z","alert_count":0,"request_count":2,"received_data":769358,"sent_data":902,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.youtube.com/embed/mzMZ2F4Eem8?si=rK4KJwoZeHx0JMxw","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"6247dd5d2d787d98a0d5e4966146d550","sha1":"51dcfa67e8318f689e1a4589a9def15c6f9a23bd","sha256":"cbb9ab7439a233ff75c44799819b7a7de5fdb18f4e30f0236430bc751530c211","sha512":"bcdab3f3db437167cf01baaa88913e053ea2ac769bf14381fb70e62ae10544ef8f11c327a24e01218936ae2800ed21453d065820542d1222b87117980536c637","ssdeep":"","tlshash":"92b0922e6c926024a05c1116a01c008a6b8cc9bb83c814a862054cb5ea9a0ba03847b0","size":108,"data":"","first_seen":"2023-08-01T01:42:54Z","last_seen":"2026-05-13T18:12:13.632681Z","times_seen":263195,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"loot-link.com/WrappedBotd.browser.protected.js","fqdn":"loot-link.com","domain":"loot-link.com","tld":"com"},"ip":{"addr":"104.21.25.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"95888320adab6afba4a8e0c8f06e8361","sha1":"c04b231b41d57f1cc95e66e04d8f2631a4b10018","sha256":"8fda68ace483a03aa4362a8731fff5b2a37d85aab3de76801ab8e225b217b2df","sha512":"e3a17ad670f939f563fe6d1dc507ab5ba99f90a4b6bc94364fa2f56d5c5ca1a552b0dbb973a4f68f7694ca9a8bf1a3ff3bf28b0dc1f4bf2fc796deef5007bd82","ssdeep":"3072:9ISWWZitd7yfmAa0Zzg/N8OSv0TfuuC8a5MAVCGNs:YhlLqD0TmPMAVCSs","tlshash":"bab3d79462472c958392d1ff142fb285ac2d8e51bc8fdce1d651c3959c306c78afbba2","size":109231,"data":"","first_seen":"2025-07-01T16:50:14.740307Z","last_seen":"2026-05-10T15:54:11.861846Z","times_seen":633,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"loot-link.com/s?c7bcc275\u0026did=9","fqdn":"loot-link.com","domain":"loot-link.com","tld":"com"},"ip":{"addr":"104.21.25.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"70ce2bf07c7e82ad1d6dfe86320a6fb1","sha1":"1db363d80219018bf1fefafb310976dcf790b858","sha256":"9b7915c5ce9e7bd724163625459cd50a80a2a225d8e7297a036bb125f19b82c8","sha512":"0a2d9a4aa4d3a77d73f46570d00c361f378695f92434326770047142e1165535360be843c32da2b99a7baa224ffc4d28c8f479f9f2d40e4ac60fea7c7725322f","ssdeep":"","tlshash":"2a9002285210d22209154196077049d47dba23617559154021196a829a64c448579c26","size":57,"data":"","first_seen":"2025-12-14T15:47:32.87772Z","last_seen":"2025-12-14T15:47:32.87772Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"loot-link.com/9.js","fqdn":"loot-link.com","domain":"loot-link.com","tld":"com"},"ip":{"addr":"104.21.25.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"26dbde0ea062885d0dc8a153f3209694","sha1":"f0d19aecdd74cb28a4e1e51bdd05224b4e0a1d56","sha256":"711cbfda1b5c47f1e19568644412bf433220a4e0fcd7db5705ba63a04f326c8b","sha512":"0db75d4237ab49edae11547d9400c8c07c57f272666c94de42000b7274332c7661a01ceaa86f5cf82a61c458b216cb03d2860383d23b484d93f7a0db4633c56c","ssdeep":"1536:a0ciNoAgy4k7AN7biDhFopN7Lq4g0z7DZ:a0O5yPUBbyE+Cz7DZ","tlshash":"fbb375485960fd4d230b8ef73f3a98cdf65a0a4e29814b89e406fc3421b5617f9fa578","size":108869,"data":"","first_seen":"2025-10-12T11:25:02.334852Z","last_seen":"2026-01-15T19:39:48.213865Z","times_seen":10,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2025-12-14","alert":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","trigger":"loot-link.com/9.js","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"@imp0rtp3 (modified by Florian Roth)","date":"2020-09-06","description":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","reference":"https://imp0rtp3.wordpress.com/2021/08/12/tetris","rule":"apt_CN_Tetris_JS_advanced_1"}}],"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/mzMZ2F4Eem8?si=rK4KJwoZeHx0JMxw","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e18eb9d0972d240f1a5456179bb6523b","sha1":"65255f106adcff2907a98e295a8e7a38fe2884c4","sha256":"3d68db2b85d5a2915743399f09dc438963f0c50f68b02df05d47a372661603e8","sha512":"bcd5a6c26fa1f7a77f5614a7b28e238701d698cc0c96ac5d03d97628d8622125cd0cfdaf54b1db96ef25320a3fca7584abd343d67bdfb9f272ca3ef8572b360a","ssdeep":"","tlshash":"d4c04c38402080e98659101c7434fb80bd7d3b973163e047da3c621c65f5d017c94b11","size":134,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-05-13T18:05:43.444183Z","times_seen":228932,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/mzMZ2F4Eem8?si=rK4KJwoZeHx0JMxw","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e795f2b1b495c31028edb86cb4f4e7b5","sha1":"d5d0d2d9e1538e5869ff9828d64664b94d6de653","sha256":"02c0ff09b0683b8853beac78e1dd6a3af9a8e10691130f6e1ff99647756e541f","sha512":"1cba9dc68dc86057efe7d75d45a8e4decc5cc620fe727688d90c1296a4498ab19425aa6de6ed4ab88f8216c266f70e39a30bf849715ad7c174910f4414d406f3","ssdeep":"","tlshash":"6f41427ea3a4193b45fa787e21af560620726654e0158c0c813e76846cb1a4b21dbf5f","size":2084,"data":"","first_seen":"2023-10-25T23:30:09Z","last_seen":"2026-05-13T18:12:13.633492Z","times_seen":252737,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/embeds/91b5a81b/www-embed-player.vflset/www-embed-player.js","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d874a43d3be53a67a21c5c5b186c01d1","sha1":"7f043ed07caf455c680c653866a0bb51e2ba6f7b","sha256":"cb261d2b6bad4fb6b4e074f04b8de2c99bac1844234e7991adfad3114ab2e929","sha512":"1c423558b3d769992e052f0bfc5e92660d734c49e95abb2e2ca94414fc89bd68cbaeadcdea82343b1dbede7a456c1ebbdddedb9eb21db632809a9b693892ec3f","ssdeep":"3072:1jTnFyLtnpfNK4bTYu3rkXXCPrpmNSPRYJMxMqhC08Lk5y3RWOGuQqqSX7+ht2oP:5WRp7bHk2dmNS9xMqhUVRQnSX7+nP","tlshash":"51843bcdb692706252a3a5f4403f110b713ab8aab80cc8b8f595d5d92e7495d833bf3d","size":396232,"data":"","first_seen":"2025-12-11T15:53:02.496062Z","last_seen":"2025-12-15T18:15:25.553789Z","times_seen":1529,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/mzMZ2F4Eem8?si=rK4KJwoZeHx0JMxw","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"8063e562b810fea1ad308a477562a60c","sha1":"176d92539b60ef071fa3599d9f38481b5acfdda6","sha256":"1d474922e2d1daf7bb122d569abd9edcd8be0e698532b5005e08b6ce0e77b939","sha512":"56fee02a7f3e51889e076c5f60b1799d9beb0518b2fd59801aa0889355a741c457c5c00694ce9fd4bc83b9e8d037d3b261bd741ff2b7db539d8d6b6a181366e8","ssdeep":"768:AonryhGDDDdlYHwerDBIMz0xeuJl8gVvt9Jmq1oyw4gcgM4Q6Ah8ZKsYhVNm/lpW:A+rRlVMz1gVv3iypgc/4jAhlsR8t","tlshash":"896352640868a8729893d547ddb9ff3e8cf812790bc9996dbdbb835c01ec6610e9f413","size":71714,"data":"","first_seen":"2025-12-14T15:47:32.879588Z","last_seen":"2025-12-14T15:47:32.879588Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/babel-regenerator-runtime@6.5.0/runtime.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4f6d0ac2c43a81b1890d6442a2a72494","sha1":"5cec1237fc2cd482064efb78c55096560ffd4419","sha256":"b9258540f48bff83be38e2952dfa01f6bb5c6ccbc13baccf3e26995299f59d07","sha512":"b513e08a30b27f90e72b9f9e4e0602314d995736079820f23e35fe7a160029c8082c39bebec6b96270b72bf1f3e9af6ed68e70e943874395a6e42cd51012d83f","ssdeep":"384:beeCv9SwPTYFjZA5mfzfPZxWRrT+hcMXnRxlWllmt87SRM57EZp:be1SwPTYFjZfzGTMcM5gt6","tlshash":"65a2648d69eba2619a4672388b4f3019b735c01b820dcd51784d93e1bf9143453baffe","size":21453,"data":"","first_seen":"2023-03-07T14:26:52Z","last_seen":"2026-05-10T15:54:11.870717Z","times_seen":341,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/mzMZ2F4Eem8?si=rK4KJwoZeHx0JMxw","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"fe81353f0c3e106bb59598d92fd49a12","sha1":"cd09955588a1d236a25a76d3f774418a829cb5c4","sha256":"a366197fa3629365ab26195a99befce51c8f8ec90252df02e0b4cb44bd52d020","sha512":"91e97b195ebad1859d88fadc65abbc0fa276dc9677360385b98b783ab0530df5b002a775fbaf9e7d410fd4eae4110ac653c4459c3fbbc125c7e2b93d5082fc8d","ssdeep":"","tlshash":"991135251b715c27806a296232dfb309b8262372583c91dc8a81e365933661bbc3235e","size":1033,"data":"","first_seen":"2023-06-13T01:22:29Z","last_seen":"2026-05-13T18:05:43.478773Z","times_seen":227987,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/mzMZ2F4Eem8?si=rK4KJwoZeHx0JMxw","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"173a08c5d6adc5c93611a599bcb2c717","sha1":"735a7301e66ae2c3584357f7bf0bf09eefb62df0","sha256":"271e6368679a21c3416e2a0325db33d6bc445d601c72a49914081b5efd0cdf3f","sha512":"cf15a9aa7e406207f3b85c7ab7d6453fd2351616b4dbb2db767ad854f866ae8256045b8cb74948f44d09fedb6c200c56fa2e2ab83d1ab997f5b0068edee7349b","ssdeep":"","tlshash":"b0800000c08a0030c3200c082008c28038802002a8f2002208200000a0032fca0020ca","size":26,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-05-13T18:05:43.479536Z","times_seen":226962,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/player/ab89db3f/player_ias.vflset/en_US/base.js","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d108b30721640f20a8885eb200d0a3ef","sha1":"6e8ec4ff60a135934a84b65f4e85e086b569a6c8","sha256":"622ba5cb15667f4c4b474382d5eaeafb1fdab66287557a0689e1d4ca894e42bb","sha512":"f80cc3d7eb480d9fd4bd714123e7eff90d6f731ba9e4ba4ec17159e245d2163695710172ae7dfd23e93fde17b311562f7f7978e12e4bf38b9ac9913d93af0ca2","ssdeep":"49152:ab14iSHzAl32mxaQkMNsPTtuxG1Zp2wBahXD4ual4UALW7wCJlDxdwKoKBibbUSg:eS4vkMNsPTdENjE","tlshash":"a6c53bdcb1a27460226bf0b8443f510ab33f344c49488f1cb7aad9d66db491a563bf79","size":2650384,"data":"","first_seen":"2025-12-10T12:48:18.191736Z","last_seen":"2025-12-15T17:03:45.793326Z","times_seen":2277,"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2025-12-14","alert":"Hunting_JS_WebAssembly","trigger":"www.youtube.com/s/player/ab89db3f/player_ias.vflset/en_US/base.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/@lottiefiles/lottie-player@latest/dist/lottie-player.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc1ccb003c8dbdb1f75efa1fd38362bf","sha1":"8ae598f92b85ef618e90e0129d57fb94c8f6c3b8","sha256":"b396c6847f916f93b353dddc9245b056ad900d115cfb589e7909ba996eaf70af","sha512":"da7392435a35a21260083593ad27b6b451b8094f21bab08644ea542a8a2980f1d3da6516cb59a02de776d667f695ef27f60676737ba3387ba25e58af02762f4d","ssdeep":"6144:a4oQYPIDD5g3/btDQ3PSIoPabTzf/W8tpgsQ5cDo4Dd:SPI3+Ch+p5c35","tlshash":"478418597254743905c54069803f090bf636392e246ac09cb76cf4efa9bde8d32beb79","size":383981,"data":"","first_seen":"2024-11-04T13:40:42.622928Z","last_seen":"2026-05-13T18:11:26.579074Z","times_seen":4029,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"loot-link.com/s?c7bcc275\u0026did=9","fqdn":"loot-link.com","domain":"loot-link.com","tld":"com"},"ip":{"addr":"104.21.25.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e44159c3648415b49fb96af6e67f3274","sha1":"04ef4a70c6f3ea3965ace5fcb090c018955f9601","sha256":"d0df6d1944a5bd850a10757878632086dd776bc5c3eec8a0778ae36c80b88bac","sha512":"5a9f7c2ada5ddd8633d8228b09ba5ebdc434ce52b7df62f842dd49aed9c370edcb3394b5dabf2e8b89cf3408ccc62b7334fbeaae1c3ebd9d5cc39706b6ae47c3","ssdeep":"384:eaGKXRJJjmmX5II4gHRCR4/qMd202VQxk7oL1IeuP1I:1GKXRJ9m72p3AT7ohIFPu","tlshash":"c972b793052912daab193992d74b34c89788e4d7fec21acaf4be0c64cb6bb5d374170d","size":16424,"data":"","first_seen":"2025-12-14T15:47:32.882351Z","last_seen":"2025-12-14T15:47:32.882351Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"loot-link.com/s?c7bcc275\u0026did=9","fqdn":"loot-link.com","domain":"loot-link.com","tld":"com"},"ip":{"addr":"104.21.25.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-05-13T18:03:18.880718Z","times_seen":218522,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"loot-link.com/s?c7bcc275\u0026did=9","fqdn":"loot-link.com","domain":"loot-link.com","tld":"com"},"ip":{"addr":"104.21.25.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-05-13T18:27:22.581111Z","times_seen":654325,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fingerprinting36542.s3.us-east-1.amazonaws.com/fingerprint.js","fqdn":"fingerprinting36542.s3.us-east-1.amazonaws.com","domain":"s3.us-east-1.amazonaws.com","tld":"us-east-1.amazonaws.com"},"ip":{"addr":"54.231.235.194","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ac06ba71cc5803c7515b3e8c3a2854d","sha1":"03ba918aad85dda720c6f46267eb4fba9103aac3","sha256":"6cf24eed847d975853348f50d95b192ac37a4c49e96d8888af6dd2e15631a1fd","sha512":"8db044466454b70e2dcf368078e845163e714e68e5405fc5d3cb9202737c7e3f9696a1f231d1ba0b8ace9dc46712035eab112c3ef3f728be64644cffd587b0e7","ssdeep":"384:2xcDKdRZKREaMRMBp5iKQID95wH3KqwzrWmKj5+pCqNFaiE8E0QIQfJWbkhGYKon:x3RBp5Kjnc9NwlJWbhSu+AW","tlshash":"300306d8b2c3b06e227368b5457f6006b23a7d50346d8842c523e5d57ca9e6e913bfbc","size":38143,"data":"","first_seen":"2024-12-09T20:50:59.331644Z","last_seen":"2026-05-10T15:54:11.892248Z","times_seen":924,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/mzMZ2F4Eem8?si=rK4KJwoZeHx0JMxw","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"a03bd24c01cbdc53df8e60036da608b4","sha1":"4d50a0d4cf19fd80b9e10bbe056a4fbadac08d54","sha256":"b7171626c8fea64797b5e44aad924c292847129676554d58fa64de3fec5016e5","sha512":"1ef3a281a92dd82eb9d03e2831edc574e5fe65c6913bca176910e2a587ffb88b029658076ead5b0e552dc6f8c18e509770b8560d8f274f772952cfbb6783ec00","ssdeep":"","tlshash":"b2f0220c0644689ce90a9c9cc694aa609a9c923bb6423155f82f460db9e3fd75831567","size":597,"data":"","first_seen":"2025-12-11T20:38:39.279093Z","last_seen":"2025-12-15T22:06:21.512101Z","times_seen":2058,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/mzMZ2F4Eem8?si=rK4KJwoZeHx0JMxw","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d8fb965e7ead2924508e97e5326bd3b1","sha1":"fae376d0cb54d4433b7bdc9aba04690cd6cb5d27","sha256":"57bb660c2fdf4369ff8e37f99b26963dba87c120b80c443ff3d31e030ab3a0f5","sha512":"c03eb6a1004f9dfcd1f960a6ca70a77932794808f72476b276bb16f02d0a1855fb2d93d07aab7c0c040d4b3c0eb4f861a4c1a9368a27e3a6430e425ff6ed2568","ssdeep":"","tlshash":"8e60000c00000000033000fc0000ccf00300000cc003c0c0000000000f0000c3c00000","size":13,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-05-13T18:05:43.526626Z","times_seen":223875,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/mzMZ2F4Eem8?si=rK4KJwoZeHx0JMxw","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"8c71f06994f8ecafe77b3d7372f231d6","sha1":"d78ae5c16a50ec35b46dd5956722bfe263c2a508","sha256":"55798e8f57047edc2fded20dabc111cdb78b57d34a23cdb3246b7eee66258763","sha512":"a4c8b7113bbfc5c531c44daa4bed84c4fcea6e825f7b78f8d3455ac9dd49d22102e4ee8205d4d9dd1cb566abf07fdb7c0149d41aa29195c07bc2d4f58be49d5e","ssdeep":"768:16SOwdNhKqWPmhuDfmObE4XmI3zh405IR+PFlLH+iyKlIN/payPQu:pNhKqWu4f84x3zvK+nH+IlIba+h","tlshash":"6bf2f1f7f5ec92d448171e51625f5e2ca4af6b54d082c8e80beae6418b8e193fc1c86d","size":36054,"data":"","first_seen":"2025-12-14T15:47:32.885289Z","last_seen":"2025-12-14T15:47:32.885289Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/mzMZ2F4Eem8?si=rK4KJwoZeHx0JMxw","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"4bbcdd7d2537bd4b8c5d149dbd6be5b0","sha1":"cc6aaaf246b71d7cd1be4c928c7d4315cd480e3c","sha256":"69716f0e06276249eaf2df70ca068c8e23d4bde38b5b54f25eb59283cae9199d","sha512":"5c744f8eb0695ef6144b33d30585180efbae02d5434ef3a646b4ae18484ce1844ebd1421483f6e0c06d7554580854a4cfc0109189d4724d0c12d028f735c7353","ssdeep":"","tlshash":"c9a02223c028c0030038802000833002e00c03208800a00c030a020830ec00bff8888a","size":62,"data":"","first_seen":"2024-01-04T06:37:29Z","last_seen":"2026-05-13T10:23:56.106495Z","times_seen":4919,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/babel-regenerator-runtime@6.5.0/runtime.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://loot-link.com/s?c7bcc275\u0026did=9","date":"2025-12-14T15:47:05.952Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/babel-regenerator-runtime@6.5.0/runtime.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loot-link.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 6.5.0\r\nx-jsd-version-type: version\r\netag: W/\"53cd-XOwSN/ws1IIGTvt4xVCWVg/9RBk\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sun, 14 Dec 2025 15:47:06 GMT\r\nage: 2717093\r\nx-served-by: cache-fra-etou8220131-FRA, cache-hel1410029-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 6589\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21453,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"4f6d0ac2c43a81b1890d6442a2a72494","sha1":"5cec1237fc2cd482064efb78c55096560ffd4419","sha256":"b9258540f48bff83be38e2952dfa01f6bb5c6ccbc13baccf3e26995299f59d07","sha512":"b513e08a30b27f90e72b9f9e4e0602314d995736079820f23e35fe7a160029c8082c39bebec6b96270b72bf1f3e9af6ed68e70e943874395a6e42cd51012d83f","ssdeep":"384:beeCv9SwPTYFjZA5mfzfPZxWRrT+hcMXnRxlWllmt87SRM57EZp:be1SwPTYFjZfzGTMcM5gt6","tlshash":"65a2648d69eba2619a4672388b4f3019b735c01b820dcd51784d93e1bf9143453baffe","first_seen":"2023-03-07T14:26:52Z","last_seen":"2026-05-10T15:54:11.870717Z","times_seen":341,"resource_available":true,"data":null}},"time_used":227,"timings":{"blocked":98,"dns":37,"connect":26,"send":0,"wait":27,"receive":1,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/mzMZ2F4Eem8?si=rK4KJwoZeHx0JMxw","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://loot-link.com/s?c7bcc275\u0026did=9","date":"2025-12-14T15:47:19.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 08:38:53 GMT","end":"Mon, 16 Feb 2026 08:38:52 GMT"},"fingerprint":{"sha1":"98:61:A1:01:94:12:1C:03:5E:13:41:74:51:6D:2D:18:E9:F2:69:05","sha256":"4E:24:16:A8:D6:22:3F:BE:06:74:9D:F4:9B:CB:DF:31:D8:E5:8A:F9:E7:B3:7F:8D:5E:50:F2:25:34:EA:7A:94"}}},"request":{"raw":"GET /embed/mzMZ2F4Eem8?si=rK4KJwoZeHx0JMxw HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loot-link.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=utf-8\r\nx-content-type-options: nosniff\r\ncontent-security-policy: script-src 'unsafe-eval' 'self' 'unsafe-inline' https://www.google.com https://apis.google.com https://ssl.gstatic.com https://www.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com https://*.youtube.com https://*.google.com https://*.gstatic.com https://youtube.com https://www.youtube.com https://google.com https://*.doubleclick.net https://*.googleapis.com https://www.googleadservices.com https://tpc.googlesyndication.com https://www.youtubekids.com https://www.youtube-nocookie.com https://www.youtubeeducation.com https://www-onepick-opensocial.googleusercontent.com;report-uri https://csp.withgoogle.com/csp/youtube_main/allowlist, require-trusted-types-for 'script'\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sun, 14 Dec 2025 15:47:19 GMT\r\nstrict-transport-security: max-age=31536000\r\norigin-trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9, AiDEBptUfVeO93q48VdVMe/ubupazdAl8AaHP+NBzdnW8quUcHdzJUyGSfrmtpKJu7EOvwRp9ug2rEo3XU+WMAMAAAB2eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJEZXZpY2VCb3VuZFNlc3Npb25DcmVkZW50aWFsczIiLCJleHBpcnkiOjE3NzQzMTA0MDAsImlzU3ViZG9tYWluIjp0cnVlfQ==\r\nreport-to: {\"group\":\"youtube_main\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube_main\"}]}\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube_main\"\r\ncross-origin-resource-policy: cross-origin\r\np3p: CP=\"This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info.\"\r\ncontent-encoding: br\r\nserver: ESF\r\nx-xss-protection: 0\r\nset-cookie: YSC=Zmcklq5ooZ0; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none\n__Secure-ROLLOUT_TOKEN=CPui5PHY58GgMBCOio_Htr2RAxiOio_Htr2RAw%3D%3D; Domain=youtube.com; Expires=Fri, 12-Jun-2026 15:47:19 GMT; Path=/; Secure; HttpOnly; SameSite=none; Partitioned\n__Secure-YEC=; Domain=.youtube.com; Expires=Mon, 20-Mar-2023 15:47:19 GMT; Path=/; Secure; HttpOnly; SameSite=lax\nVISITOR_INFO1_LIVE=07yhg9ylNTo; Domain=.youtube.com; Expires=Fri, 12-Jun-2026 15:47:19 GMT; Path=/; Secure; HttpOnly; SameSite=none\nVISITOR_PRIVACY_METADATA=CgJOTxIhEh0SGwsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJiAT; Domain=.youtube.com; Expires=Fri, 12-Jun-2026 15:47:19 GMT; Path=/; Secure; HttpOnly; SameSite=none\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":123725,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (52328)","md5":"f19924740b3b00ee0ad1714f8715614f","sha1":"93a7233e08886c8a0e2ca3312aebd09381746949","sha256":"f67eef05a4bfff0693220ae121941f54f32c514f95912d34ebdb37f1a56348be","sha512":"3f702050331051c175551e474f8afe28acdcc929151504559490dfcd98bf3a4fe3b8e2d9b3751d86e0911dc3d79ee09638fe6a789613013da79c516b24fdc71a","ssdeep":"1536:K+rRlVMz1gVv3iypgc/4jAhlsR8HtNhKqWu4f84x3zvK+nH+IlIba+s:9oy3K8f1WuGnllIO3","tlshash":"4dc3f8240868a872c8939947ddb9ff3e9cf8123547c595adbdbad35c01ec6620eae413","first_seen":"2025-12-14T15:47:32.844311Z","last_seen":"2025-12-14T15:47:32.844311Z","times_seen":1,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":56,"dns":1,"connect":8,"send":0,"wait":60,"receive":0,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"loot-link.com/unlocker.png","fqdn":"loot-link.com","domain":"loot-link.com","tld":"com"},"ip":{"addr":"104.21.25.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://loot-link.com/s?c7bcc275\u0026did=9","date":"2025-12-14T15:47:19.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loot-link.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Oct 2025 10:26:34 GMT","end":"Thu, 22 Jan 2026 11:24:22 GMT"},"fingerprint":{"sha1":"B5:FD:7C:75:EB:F5:20:3E:3C:DA:28:53:84:87:9F:1B:79:59:5B:5A","sha256":"8B:2E:30:5A:81:EB:3C:A2:EA:6A:4C:2C:84:CB:62:69:2E:F1:F6:DA:7B:FA:0A:93:19:8D:EA:2F:29:4B:77:8B"}}},"request":{"raw":"GET /unlocker.png HTTP/1.1\r\nHost: loot-link.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loot-link.com/s?c7bcc275\u0026did=9\r\nCookie: uid=vfJAMZQepQoXgUtZ4rOHVc4ykfv0lsnq\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 14 Dec 2025 15:47:19 GMT\r\ncontent-type: image/png\r\ncontent-length: 31030\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nlast-modified: Sun, 14 Dec 2025 07:00:00 GMT\r\netag: \"693e6070-7936\"\r\naccept-ranges: bytes\r\nage: 1508\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CKoZU1rG0rck1l0pYe%2FnFBA3VUcnSjYIA8zc9byB7VtttWZ1wDk%2B7%2F7tenK3oX0Fhf6MOEA7mHBuXCn99MsX2Gyn%2BJe9uAbxT%2Ftd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9aded6cf79aab4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31030,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 246 x 246, 8-bit/color RGBA, non-interlaced","md5":"aa3e9ab7989d9c695c98fc750957670d","sha1":"4022d553f4952fa7c7b57f00942b202354b66acb","sha256":"5e0813c96779ef092cefc6e77fa90de7a86e307f04bd6d64f9d37a5d9a8fb4e0","sha512":"e3b681724244c3834a9d24d92c3b3817afb553e1a697c58b21d84e6a8ba1c07cece4b14e1316c6235436768b2e62362169810568921d660efc576536ec41696f","ssdeep":"768:nwlF+bky/Yt20bgvguLfk7D07HIcDbMXj5ZVp0iB6VRc8p6UvzMVOs:NkBXghfk7aHbDbMXj5Zh6LcC6YIVOs","tlshash":"54d2d0f5b033745de9f50006fa4647b801bb8af07f31b618d4bbc60eb78839e24a9965","first_seen":"2025-03-20T23:46:21.230829Z","last_seen":"2026-05-10T12:20:36.378905Z","times_seen":594,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/embeds/91b5a81b/www-embed-player.vflset/www-embed-player.js","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.youtube.com/embed/mzMZ2F4Eem8?si=rK4KJwoZeHx0JMxw","date":"2025-12-14T15:47:19.916Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 08:38:53 GMT","end":"Mon, 16 Feb 2026 08:38:52 GMT"},"fingerprint":{"sha1":"98:61:A1:01:94:12:1C:03:5E:13:41:74:51:6D:2D:18:E9:F2:69:05","sha256":"4E:24:16:A8:D6:22:3F:BE:06:74:9D:F4:9B:CB:DF:31:D8:E5:8A:F9:E7:B3:7F:8D:5E:50:F2:25:34:EA:7A:94"}}},"request":{"raw":"GET /s/embeds/91b5a81b/www-embed-player.vflset/www-embed-player.js HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/mzMZ2F4Eem8?si=rK4KJwoZeHx0JMxw\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ncontent-length: 117096\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 12 Dec 2025 13:55:16 GMT\r\nexpires: Sat, 12 Dec 2026 13:55:16 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Fri, 12 Dec 2025 12:07:15 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Origin\r\nage: 179523\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":396232,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1179)","md5":"d874a43d3be53a67a21c5c5b186c01d1","sha1":"7f043ed07caf455c680c653866a0bb51e2ba6f7b","sha256":"cb261d2b6bad4fb6b4e074f04b8de2c99bac1844234e7991adfad3114ab2e929","sha512":"1c423558b3d769992e052f0bfc5e92660d734c49e95abb2e2ca94414fc89bd68cbaeadcdea82343b1dbede7a456c1ebbdddedb9eb21db632809a9b693892ec3f","ssdeep":"3072:1jTnFyLtnpfNK4bTYu3rkXXCPrpmNSPRYJMxMqhC08Lk5y3RWOGuQqqSX7+ht2oP:5WRp7bHk2dmNS9xMqhUVRQnSX7+nP","tlshash":"51843bcdb692706252a3a5f4403f110b713ab8aab80cc8b8f595d5d92e7495d833bf3d","first_seen":"2025-12-11T15:53:02.496062Z","last_seen":"2025-12-15T18:15:25.553789Z","times_seen":1529,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d1wzdj81h1hubn.cloudfront.net/resources/00bbad1fa6bd2003.jpeg","fqdn":"d1wzdj81h1hubn.cloudfront.net","domain":"d1wzdj81h1hubn.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"18.239.47.148","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://loot-link.com/s?c7bcc275\u0026did=9","date":"2025-12-14T15:47:20.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /resources/00bbad1fa6bd2003.jpeg HTTP/1.1\r\nHost: d1wzdj81h1hubn.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loot-link.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\ncontent-length: 72641\r\nlast-modified: Thu, 12 Jun 2025 16:38:13 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-publisher_id: 477015\r\nx-amz-meta-timestamp: 2025-06-11T19:33:31.530147\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sun, 14 Dec 2025 10:06:02 GMT\r\netag: \"92e2dc3ac17f8746fe208ea813ae6c32\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b744839339b269ebb49818cc6c300b6a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS58-P3\r\nx-amz-cf-id: Hv6gQFAY1BSGg66rTd-GQFAZt6KcQeM4BvLGOdApPlM-Ro1eVvQlkQ==\r\nage: 25858\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":72641,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1024x1024, components 3","md5":"92e2dc3ac17f8746fe208ea813ae6c32","sha1":"fa9970c265dc9aaeea4cdf3bd4777aec0ec4bc87","sha256":"2b742c3aa6e7a36b46a9059ae61e042b31b06c92b53345212cf92187aadc5249","sha512":"d3464ee4ee9338159735521c12b2b8a644ce21af5403f782d6a10f73d523e18fbebcd11ce42f37a6eef12f633e696253341f01a325747795646cf99e8581e39a","ssdeep":"1536:m9oyQjL704jOsYoFY13aqpA1XgdGyV6REq/NH9VnSlpSku1E:EoyQjP0MGPjp2XgdB6iqlHzFE","tlshash":"306302ba526210e4ffd1f2f1845bdc041bce5731afb9f82b729d621136e8b8a9745230","first_seen":"2025-07-05T16:37:36.769457Z","last_seen":"2025-12-14T15:47:32.84623Z","times_seen":6,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lootdest.org/s?c7bcc275","fqdn":"lootdest.org","domain":"lootdest.org","tld":"org"},"ip":{"addr":"3.164.230.21","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-14T15:47:01.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loot-link.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 15 Jul 2025 00:00:00 GMT","end":"Thu, 13 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F2:29:EE:C8:55:1A:0D:B4:EC:B8:40:2C:83:64:56:BA:0A:3A:6D:87","sha256":"57:1B:D3:2E:DE:00:9D:E6:B9:5C:D0:44:4C:67:D9:7F:05:9C:9F:6D:54:F5:E2:C3:E3:5F:1D:AC:26:0D:CD:35"}}},"request":{"raw":"GET /s?c7bcc275 HTTP/1.1\r\nHost: lootdest.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: application/json\r\ncontent-length: 0\r\nlocation: https://loot-link.com/s?c7bcc275\u0026did=9\r\ndate: Sun, 14 Dec 2025 15:47:01 GMT\r\nserver: openresty/1.21.4.1\r\naccess-control-allow-headers: Access-Control-Allow-Headers, Origin,Accept, X-Requested-With, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-methods: POST, GET, OPTIONS, HEAD\r\naccess-control-allow-credentials: true\r\ncache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nsurrogate-control: no-store\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 88ba1d0c348c5f253432165d46a14a82.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P1\r\nx-amz-cf-id: FtP9GSPYi1miB4EUZ8PBxekkv8XupEKOHrrVEiG64_HNcEvDcKnDFA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenResty:1.21.4.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":22370,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T18:27:40.13573Z","times_seen":15125718,"resource_available":true,"data":null}},"time_used":394,"timings":{"blocked":78,"dns":38,"connect":8,"send":0,"wait":235,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pagead2.googlesyndication.com/pagead/js/adsbygoogle.js","fqdn":"pagead2.googlesyndication.com","domain":"googlesyndication.com","tld":"com"},"ip":{"addr":"142.250.178.34","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://loot-link.com/s?c7bcc275\u0026did=9","date":"2025-12-14T15:47:12.284Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.g.doubleclick.net","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 08:39:00 GMT","end":"Mon, 16 Feb 2026 08:38:59 GMT"},"fingerprint":{"sha1":"80:DF:1F:EE:47:BD:3B:5C:09:26:62:92:EB:79:9E:D6:13:02:E1:19","sha256":"F4:E8:06:28:A5:DF:61:54:62:CE:EE:38:AC:98:46:AC:BE:B0:1E:20:7B:22:B9:11:F0:A0:BF:D1:1A:08:66:C9"}}},"request":{"raw":"GET /pagead/js/adsbygoogle.js HTTP/1.1\r\nHost: pagead2.googlesyndication.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://loot-link.com/\r\nOrigin: https://loot-link.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nlink: \u003chttps://googleads.g.doubleclick.net\u003e; rel=\"preconnect\"; crossorigin\r\nvary: Accept-Encoding\r\ndate: Sun, 14 Dec 2025 15:47:12 GMT\r\nexpires: Sun, 14 Dec 2025 15:47:12 GMT\r\ncache-control: private, max-age=3600, stale-while-revalidate=3600\r\ncontent-type: text/javascript; charset=UTF-8\r\netag: 1514657799060847552\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\ncontent-disposition: attachment; filename=\"f.txt\"\r\ncontent-encoding: br\r\nserver: cafe\r\ncontent-length: 55500\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":163528,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4830)","md5":"cf9245ceb8325f488cc737c088747af3","sha1":"f85d8195ae8fb9022eacceb49d8d2023e3f5629d","sha256":"abb0a0d14110587f8f93ed524c4242a0931d69bf0c0a7c55882764cb6e4b5a49","sha512":"ab9d4405ddef0547206bb33611d2add3f6f4a89b2fc950d23a6afaf8705b3741ee7bd35390bb03aebd8e5ae14eb9b3b23700a48cfa3b094bc67c8b5bf3bbef31","ssdeep":"3072:6LOf8nZkhS8ulyCUdTHEB8ElEYSpkp3AmUll3Ok/sArs2LYgTzkEmMIDwIOqkG:6LOf8Zk09lyCUdbw8ElEYXwmUT3x9rTM","tlshash":"f0f3f8d971a2bcb7876389e5006f4107b42da863f00cc8b0f2d8ded97a249655277fad","first_seen":"2025-12-14T15:47:32.847963Z","last_seen":"2025-12-14T15:47:32.847963Z","times_seen":1,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":75,"dns":6,"connect":14,"send":0,"wait":44,"receive":23,"ssl":58},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.unlockr.app/pixel?event=unlockrPromote\u0026session_id=532304043152746329","fqdn":"app.unlockr.app","domain":"unlockr.app","tld":"app"},"ip":{"addr":"104.21.81.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://loot-link.com/s?c7bcc275\u0026did=9","date":"2025-12-14T15:47:19.594Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unlockr.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Oct 2025 21:16:37 GMT","end":"Tue, 20 Jan 2026 22:13:05 GMT"},"fingerprint":{"sha1":"D1:1F:FC:28:93:E6:E4:8E:8E:80:D5:BB:E2:D2:CC:5A:D4:89:EA:49","sha256":"AD:1A:AE:E7:FB:C5:A8:11:D6:9D:91:0A:A5:41:95:90:FE:B4:6F:A9:0B:51:25:C2:BA:CE:AD:5F:38:D6:28:25"}}},"request":{"raw":"POST /pixel?event=unlockrPromote\u0026session_id=532304043152746329 HTTP/1.1\r\nHost: app.unlockr.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://loot-link.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loot-link.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 14 Dec 2025 15:47:19 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\naccess-control-allow-origin: https://loot-link.com\r\naccess-control-allow-headers: Access-Control-Allow-Headers, Origin,Accept, X-Requested-With, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-methods: POST, GET, OPTIONS, HEAD\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZvWKZaY1tHuofXisgH6An%2Bnv7iQd9lcGk1KQY6CPTfkhVPx680%2FB0DV6tSA1VuABcCzl8kh4bqvPrYHuD9vQ4JRg7F0KIMgliDBj7LaMIw%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9aded6cfded1b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T18:27:40.13573Z","times_seen":15125718,"resource_available":true,"data":null}},"time_used":254,"timings":{"blocked":58,"dns":38,"connect":1,"send":0,"wait":132,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d1wzdj81h1hubn.cloudfront.net/icons/gamers.png","fqdn":"d1wzdj81h1hubn.cloudfront.net","domain":"d1wzdj81h1hubn.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"18.239.47.148","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://loot-link.com/s?c7bcc275\u0026did=9","date":"2025-12-14T15:47:19.849Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /icons/gamers.png HTTP/1.1\r\nHost: d1wzdj81h1hubn.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loot-link.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 3802\r\nlast-modified: Tue, 07 Feb 2023 09:32:38 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sun, 14 Dec 2025 08:10:37 GMT\r\netag: \"079db7c66974eb54145d8d75c1cd5f3a\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b744839339b269ebb49818cc6c300b6a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS58-P3\r\nx-amz-cf-id: czjv4EkkjAjYtuPU278FwR8r5FrEjSANbgjCWFm5fcuoYFEaB-zhbg==\r\nage: 27419\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":3802,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"079db7c66974eb54145d8d75c1cd5f3a","sha1":"05abe393507b06186bb6b920ae9a256373ce81e3","sha256":"3870dd760cdc4eb75b818f1021e6de5a1f0aeab5c9808d401cae885c0246bb00","sha512":"a3c62561e65fa8c27cf08a8adfbbb5739e95ccce2210159b78c6195e70bba7593e624b33334dd733dd3d8b29c838c8049b40877c0ed2897abee4222bba4db785","ssdeep":"","tlshash":"63715b5ee64314128525a4c864f24427124b112989f5e93eb9d5cee284321b9baf3bff","first_seen":"2024-08-20T14:20:07.052301Z","last_seen":"2025-12-14T15:47:32.848786Z","times_seen":8,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":57,"dns":15,"connect":18,"send":0,"wait":26,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fingerprinting36542.s3.us-east-1.amazonaws.com/fingerprint.js","fqdn":"fingerprinting36542.s3.us-east-1.amazonaws.com","domain":"s3.us-east-1.amazonaws.com","tld":"us-east-1.amazonaws.com"},"ip":{"addr":"54.231.235.194","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://loot-link.com/s?c7bcc275\u0026did=9","date":"2025-12-14T15:47:12.077Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sun, 20 Jul 2025 00:00:00 GMT","end":"Thu, 25 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"16:D2:7A:E0:6B:B2:6D:C0:8F:8C:4E:E5:2B:1F:47:F3:EF:60:7F:68","sha256":"EF:42:24:62:84:5D:EF:F9:AE:18:7F:85:D7:C7:56:73:2D:8B:30:D2:CD:83:77:3B:45:EF:24:B2:93:43:99:33"}}},"request":{"raw":"GET /fingerprint.js HTTP/1.1\r\nHost: fingerprinting36542.s3.us-east-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://loot-link.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loot-link.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: qSf22BNNAUTMaeqiEZBJ5TEL8ifj9KfZkQiP5U4cQRVbjf0n2PNeuxfYUUjtlMVJ7nKUAu6iTU8=\r\nx-amz-request-id: H9YGWT9ZE3TA7T9W\r\nDate: Sun, 14 Dec 2025 15:47:13 GMT\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, PUT, POST, DELETE\r\nVary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nLast-Modified: Mon, 09 Dec 2024 12:08:59 GMT\r\nETag: \"9ac06ba71cc5803c7515b3e8c3a2854d\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: application/javascript\r\nContent-Length: 38143\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":38143,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (38136), with no line terminators","md5":"9ac06ba71cc5803c7515b3e8c3a2854d","sha1":"03ba918aad85dda720c6f46267eb4fba9103aac3","sha256":"6cf24eed847d975853348f50d95b192ac37a4c49e96d8888af6dd2e15631a1fd","sha512":"8db044466454b70e2dcf368078e845163e714e68e5405fc5d3cb9202737c7e3f9696a1f231d1ba0b8ace9dc46712035eab112c3ef3f728be64644cffd587b0e7","ssdeep":"384:2xcDKdRZKREaMRMBp5iKQID95wH3KqwzrWmKj5+pCqNFaiE8E0QIQfJWbkhGYKon:x3RBp5Kjnc9NwlJWbhSu+AW","tlshash":"300306d8b2c3b06e227368b5457f6006b23a7d50346d8842c523e5d57ca9e6e913bfbc","first_seen":"2024-12-09T20:50:59.331644Z","last_seen":"2026-05-10T15:54:11.892248Z","times_seen":924,"resource_available":true,"data":null}},"time_used":685,"timings":{"blocked":229,"dns":15,"connect":94,"send":0,"wait":126,"receive":95,"ssl":124},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/@lottiefiles/lottie-player@latest/dist/lottie-player.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://loot-link.com/s?c7bcc275\u0026did=9","date":"2025-12-14T15:47:19.560Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 07:42:11 GMT","end":"Wed, 21 Jan 2026 08:42:08 GMT"},"fingerprint":{"sha1":"35:E0:1E:4C:64:5C:CF:45:E3:D1:1F:98:25:BC:4E:A4:B5:0A:8F:DF","sha256":"3F:2C:BB:33:AB:E0:D9:9E:03:91:C6:EE:DF:EF:85:A5:18:00:D6:DF:6A:34:A2:86:46:96:AF:91:C2:94:F7:D7"}}},"request":{"raw":"GET /@lottiefiles/lottie-player@latest/dist/lottie-player.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loot-link.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Sun, 14 Dec 2025 15:47:19 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 71\r\ncf-ray: 9aded6cf6f3023eb-OSL\r\nlocation: /@lottiefiles/lottie-player@2.0.12/dist/lottie-player.js\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=60, s-maxage=300\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":383981,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T18:27:40.13573Z","times_seen":15125718,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":27,"dns":5,"connect":1,"send":0,"wait":26,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"loot-link.com/qr.png","fqdn":"loot-link.com","domain":"loot-link.com","tld":"com"},"ip":{"addr":"104.21.25.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://loot-link.com/s?c7bcc275\u0026did=9","date":"2025-12-14T15:47:19.596Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loot-link.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Oct 2025 10:26:34 GMT","end":"Thu, 22 Jan 2026 11:24:22 GMT"},"fingerprint":{"sha1":"B5:FD:7C:75:EB:F5:20:3E:3C:DA:28:53:84:87:9F:1B:79:59:5B:5A","sha256":"8B:2E:30:5A:81:EB:3C:A2:EA:6A:4C:2C:84:CB:62:69:2E:F1:F6:DA:7B:FA:0A:93:19:8D:EA:2F:29:4B:77:8B"}}},"request":{"raw":"GET /qr.png HTTP/1.1\r\nHost: loot-link.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loot-link.com/s?c7bcc275\u0026did=9\r\nCookie: uid=vfJAMZQepQoXgUtZ4rOHVc4ykfv0lsnq\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 14 Dec 2025 15:47:19 GMT\r\ncontent-type: image/png\r\ncontent-length: 7224\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nlast-modified: Sun, 14 Dec 2025 07:00:00 GMT\r\netag: \"693e6070-1c38\"\r\naccept-ranges: bytes\r\nage: 6003\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bDsRuwQl7vO7Db3hI1LR64%2FqaIE6zcnqcsJamgugcFUkIdZ5wWz4RROIppH%2FU8V3NLiKwqjbiTIl5eAxaGbUUSeNMOQLKMjUJb3%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9aded6cf79a9b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7224,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1160 x 1160, 8-bit/color RGB, non-interlaced","md5":"a93ba4860dc42551669d1c44999d6219","sha1":"f42f4d71fa233d571ec60e8998b15772eedf9b6c","sha256":"bdd20de2c3c9af1e3df3ac71b2a52de1704c06e3bf2885db0a48423380f559cb","sha512":"c39361ebaf0aa3c799b0f2fa62acbaf5e779f19b19042c61c27bb7703d2c10bd11034755fb07a6bcff4035f690d65c51367cfb4dc5d1b0d12e4473ecdddd819b","ssdeep":"192:y5iSWmbbbbbbbbbbbbbbbbbbVbbbbbbbbbbbbbbbbbbZhpbbbbbbbbbbbbbbbbbL:y3WGB","tlshash":"e4e1b91d05510a2c6edeafeb89c544c8bed5e247c9f97b63e31a1868e40143cad6edb0","first_seen":"2025-03-20T23:46:21.232783Z","last_seen":"2026-05-10T12:20:36.389099Z","times_seen":594,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/player/ab89db3f/www-player.css","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.youtube.com/embed/mzMZ2F4Eem8?si=rK4KJwoZeHx0JMxw","date":"2025-12-14T15:47:19.904Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 08:38:53 GMT","end":"Mon, 16 Feb 2026 08:38:52 GMT"},"fingerprint":{"sha1":"98:61:A1:01:94:12:1C:03:5E:13:41:74:51:6D:2D:18:E9:F2:69:05","sha256":"4E:24:16:A8:D6:22:3F:BE:06:74:9D:F4:9B:CB:DF:31:D8:E5:8A:F9:E7:B3:7F:8D:5E:50:F2:25:34:EA:7A:94"}}},"request":{"raw":"GET /s/player/ab89db3f/www-player.css HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/mzMZ2F4Eem8?si=rK4KJwoZeHx0JMxw\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ncontent-length: 60155\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 14 Dec 2025 15:46:39 GMT\r\nexpires: Mon, 14 Dec 2026 15:46:39 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Dec 2025 05:30:26 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding, Origin\r\nage: 40\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":519576,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"0e786f0fecb66f9099dcf25e49c1bba9","sha1":"bf9ca3df3d62b998b918a20de668e5eac7d74dca","sha256":"6cb0f42858f1cf72cc7d33c674fbf6ace5f2e99a150cede7afd50ec1b7ac8d25","sha512":"d1cbf2d93cd08bb58a76b5d042a143c6d46eb7ab1b3c364bc792d9232e6672cbfd7cb87036cee57168d97e34f5f8b5ab02c513fe588a97d465c0e05a8532a7ba","ssdeep":"6144:/g/+vh2kqMMg7UFBhBYoMuf5Fg5Lo6o+m:BZUMMg7UF2o3f5Fg5Lo6o7","tlshash":"e6b4ea72f0d1233cf21b8d9997d9964d7239d983e2e22aeff11165dacbc77811326206","first_seen":"2025-12-08T19:26:19.566135Z","last_seen":"2025-12-15T17:03:45.543392Z","times_seen":4594,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":22,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.youtube.com/embed/mzMZ2F4Eem8?si=rK4KJwoZeHx0JMxw","date":"2025-12-14T15:47:19.967Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 08:40:14 GMT","end":"Mon, 16 Feb 2026 08:40:13 GMT"},"fingerprint":{"sha1":"FF:92:1F:D0:E9:98:18:CB:FA:1B:90:BE:3E:B9:41:44:DE:05:28:15","sha256":"0C:A2:FB:F0:F6:40:B0:82:E4:FB:1A:51:96:48:D8:22:C9:05:C4:41:67:1F:41:D4:8C:F2:B6:85:A4:D2:3A:AF"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.youtube.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 10 Dec 2025 21:35:41 GMT\r\nexpires: Thu, 10 Dec 2026 21:35:41 GMT\r\ncache-control: public, max-age=31536000\r\nage: 324698\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-05-13T18:26:49.542323Z","times_seen":818504,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d1wzdj81h1hubn.cloudfront.net/resources/8e5ec66be0c710b2.jpeg","fqdn":"d1wzdj81h1hubn.cloudfront.net","domain":"d1wzdj81h1hubn.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"18.239.47.148","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://loot-link.com/s?c7bcc275\u0026did=9","date":"2025-12-14T15:47:20.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /resources/8e5ec66be0c710b2.jpeg HTTP/1.1\r\nHost: d1wzdj81h1hubn.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loot-link.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\ncontent-length: 19343\r\nlast-modified: Mon, 06 Jan 2025 23:21:48 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-publisher_id: 337647\r\nx-amz-meta-timestamp: 2025-01-06T14:51:48.523733\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sun, 14 Dec 2025 02:00:50 GMT\r\netag: \"d37a43aabf664422da93e03017527672\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b744839339b269ebb49818cc6c300b6a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS58-P3\r\nx-amz-cf-id: bM5e0nmhSc9DpwYm-y4vaLRoS04rViUXTg84RSZwNNMhzDjPdLepRg==\r\nage: 49591\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":19343,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 360x360, components 3","md5":"d37a43aabf664422da93e03017527672","sha1":"817331cd84a44a09acc370deea4696a6f6e30626","sha256":"a8c21f34aa2c818abfced6bc0861c136fbf9aa5a7a2d453ffd735b9f98a71970","sha512":"1b2a587e404f8a7c9603251b6a5847a8d0b89ee82365d2f0356681b3a2d25c479f38cfe0bf99b8293dc9f4d533b358853d341975622de22f59116736e6709fff","ssdeep":"384:qAkZ9cf5kD2/xNiuPc3QYRqUJaQg4DFu63tsgOYyzjT0DSYjLPJJNL:qAxqKNt13Qg4Ds6GsyzjT0DSY3TJ","tlshash":"8a92e0a16de1e808d6a5064c6d4ea105256129ebc9d87ffc18fedc6ae214dfccf814e1","first_seen":"2025-07-06T12:10:45.129704Z","last_seen":"2026-01-13T02:11:39.621215Z","times_seen":7,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ytimg.com/vi_webp/mzMZ2F4Eem8/default.webp","fqdn":"i.ytimg.com","domain":"ytimg.com","tld":"com"},"ip":{"addr":"142.250.178.118","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.youtube.com/embed/mzMZ2F4Eem8?si=rK4KJwoZeHx0JMxw","date":"2025-12-14T15:47:20.789Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgestatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 08:38:52 GMT","end":"Mon, 16 Feb 2026 08:38:51 GMT"},"fingerprint":{"sha1":"2F:95:D2:38:17:B1:34:FE:FF:98:E6:4C:3A:6D:D4:06:3E:E8:A5:28","sha256":"AC:88:C6:A7:EF:4D:92:26:77:46:33:02:30:12:2B:80:47:6F:03:CE:55:5D:F5:75:FD:C4:D2:63:64:C9:C1:F4"}}},"request":{"raw":"GET /vi_webp/mzMZ2F4Eem8/default.webp HTTP/1.1\r\nHost: i.ytimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ncontent-length: 3694\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 14 Dec 2025 15:47:20 GMT\r\nexpires: Sun, 14 Dec 2025 17:47:20 GMT\r\ncache-control: public, max-age=7200\r\netag: \"1723920132\"\r\ncontent-type: image/webp\r\nvary: Origin\r\nage: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3694,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x90, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c0641b5860ab0417330c23a840483143","sha1":"c079bf7564353dca748d64d8412bb62a245815ac","sha256":"8631c2792e3ce05b64a381b6946b84f80bd58aa8b4cad207dbcfa2e6567b24ee","sha512":"a9b2f49a6bdd39334ea3eb3fbd5de79dbc6bdc9ab94a4f4748dda817071b75488c45174a89818c39e32520f2b6081c7604e290b39789ffd3e3c64e053a24f431","ssdeep":"","tlshash":"0f716f778c1bb9278fcbc1cd344805d23ba73856205e527fc11ad91352b98a375f5553","first_seen":"2025-12-14T15:47:32.865323Z","last_seen":"2025-12-14T15:47:32.865323Z","times_seen":1,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":104,"dns":3,"connect":17,"send":0,"wait":27,"receive":1,"ssl":81},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"loot-link.com/WrappedBotd.browser.protected.js","fqdn":"loot-link.com","domain":"loot-link.com","tld":"com"},"ip":{"addr":"104.21.25.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://loot-link.com/s?c7bcc275\u0026did=9","date":"2025-12-14T15:47:05.954Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loot-link.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Oct 2025 10:26:34 GMT","end":"Thu, 22 Jan 2026 11:24:22 GMT"},"fingerprint":{"sha1":"B5:FD:7C:75:EB:F5:20:3E:3C:DA:28:53:84:87:9F:1B:79:59:5B:5A","sha256":"8B:2E:30:5A:81:EB:3C:A2:EA:6A:4C:2C:84:CB:62:69:2E:F1:F6:DA:7B:FA:0A:93:19:8D:EA:2F:29:4B:77:8B"}}},"request":{"raw":"GET /WrappedBotd.browser.protected.js HTTP/1.1\r\nHost: loot-link.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loot-link.com/s?c7bcc275\u0026did=9\r\nCookie: uid=vfJAMZQepQoXgUtZ4rOHVc4ykfv0lsnq\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 14 Dec 2025 15:47:05 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nlast-modified: Sun, 14 Dec 2025 07:00:00 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 6845\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"693e6070-1aaaf\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WNitiMFvexV0EMLyTrD3AmT6Mnub5rm0L47GP%2BKRjHYFDsIwqyvtlK%2FQcn9GZIqHFFeJLsejxg4zrIhyBVKwWFuzgCqOlpB6WrVu\"}]}\r\ncf-ray: 9aded67a3cbab4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":109231,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"95888320adab6afba4a8e0c8f06e8361","sha1":"c04b231b41d57f1cc95e66e04d8f2631a4b10018","sha256":"8fda68ace483a03aa4362a8731fff5b2a37d85aab3de76801ab8e225b217b2df","sha512":"e3a17ad670f939f563fe6d1dc507ab5ba99f90a4b6bc94364fa2f56d5c5ca1a552b0dbb973a4f68f7694ca9a8bf1a3ff3bf28b0dc1f4bf2fc796deef5007bd82","ssdeep":"3072:9ISWWZitd7yfmAa0Zzg/N8OSv0TfuuC8a5MAVCGNs:YhlLqD0TmPMAVCSs","tlshash":"bab3d79462472c958392d1ff142fb285ac2d8e51bc8fdce1d651c3959c306c78afbba2","first_seen":"2025-07-01T16:50:14.740307Z","last_seen":"2026-05-10T15:54:11.861846Z","times_seen":633,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"loot-link.com/9.js","fqdn":"loot-link.com","domain":"loot-link.com","tld":"com"},"ip":{"addr":"104.21.25.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://loot-link.com/s?c7bcc275\u0026did=9","date":"2025-12-14T15:47:11.528Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loot-link.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Oct 2025 10:26:34 GMT","end":"Thu, 22 Jan 2026 11:24:22 GMT"},"fingerprint":{"sha1":"B5:FD:7C:75:EB:F5:20:3E:3C:DA:28:53:84:87:9F:1B:79:59:5B:5A","sha256":"8B:2E:30:5A:81:EB:3C:A2:EA:6A:4C:2C:84:CB:62:69:2E:F1:F6:DA:7B:FA:0A:93:19:8D:EA:2F:29:4B:77:8B"}}},"request":{"raw":"GET /9.js HTTP/1.1\r\nHost: loot-link.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loot-link.com/s?c7bcc275\u0026did=9\r\nCookie: uid=vfJAMZQepQoXgUtZ4rOHVc4ykfv0lsnq\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 14 Dec 2025 15:47:11 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nlast-modified: Sun, 14 Dec 2025 07:00:00 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"693e6070-1a945\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b2oFSB4Z5QDhsEKP7fj62fcF4dBcCGrBvVNNvRjKXl%2B9E2AsQxC0CE8DLNmYVo49w1%2BNzfbVYS8gBnagq0k%2BPpK8JIjY9vaKq4Co\"}]}\r\ncf-ray: 9aded69d0e50b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":108869,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65532), with no line terminators","md5":"26dbde0ea062885d0dc8a153f3209694","sha1":"f0d19aecdd74cb28a4e1e51bdd05224b4e0a1d56","sha256":"711cbfda1b5c47f1e19568644412bf433220a4e0fcd7db5705ba63a04f326c8b","sha512":"0db75d4237ab49edae11547d9400c8c07c57f272666c94de42000b7274332c7661a01ceaa86f5cf82a61c458b216cb03d2860383d23b484d93f7a0db4633c56c","ssdeep":"1536:a0ciNoAgy4k7AN7biDhFopN7Lq4g0z7DZ:a0O5yPUBbyE+Cz7DZ","tlshash":"fbb375485960fd4d230b8ef73f3a98cdf65a0a4e29814b89e406fc3421b5617f9fa578","first_seen":"2025-10-12T11:25:02.334852Z","last_seen":"2026-01-15T19:39:48.213865Z","times_seen":10,"resource_available":true,"data":null}},"time_used":253,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":248,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2025-12-14","alert":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","trigger":"loot-link.com/9.js","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"@imp0rtp3 (modified by Florian Roth)","date":"2020-09-06","description":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","reference":"https://imp0rtp3.wordpress.com/2021/08/12/tetris","rule":"apt_CN_Tetris_JS_advanced_1"}}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/@lottiefiles/lottie-player@2.0.12/dist/lottie-player.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://loot-link.com/s?c7bcc275\u0026did=9","date":"2025-12-14T15:47:19.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 07:42:11 GMT","end":"Wed, 21 Jan 2026 08:42:08 GMT"},"fingerprint":{"sha1":"35:E0:1E:4C:64:5C:CF:45:E3:D1:1F:98:25:BC:4E:A4:B5:0A:8F:DF","sha256":"3F:2C:BB:33:AB:E0:D9:9E:03:91:C6:EE:DF:EF:85:A5:18:00:D6:DF:6A:34:A2:86:46:96:AF:91:C2:94:F7:D7"}}},"request":{"raw":"GET /@lottiefiles/lottie-player@2.0.12/dist/lottie-player.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://loot-link.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 14 Dec 2025 15:47:19 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: gzip\r\ncf-ray: 9aded6cfafc723eb-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 2108461\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 14 Dec 2026 15:47:19 GMT\r\nlast-modified: Fri, 17 Oct 2025 00:03:10 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:s5bGhH+Rb5OzU93ckkWwVq2QDRFc+1ieeQm6mW6vcK8=:\r\nfly-request-id: 01K7QQMF8N1G3GB9FWMCHE11KT-fra\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":383981,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (27447)","md5":"bc1ccb003c8dbdb1f75efa1fd38362bf","sha1":"8ae598f92b85ef618e90e0129d57fb94c8f6c3b8","sha256":"b396c6847f916f93b353dddc9245b056ad900d115cfb589e7909ba996eaf70af","sha512":"da7392435a35a21260083593ad27b6b451b8094f21bab08644ea542a8a2980f1d3da6516cb59a02de776d667f695ef27f60676737ba3387ba25e58af02762f4d","ssdeep":"6144:a4oQYPIDD5g3/btDQ3PSIoPabTzf/W8tpgsQ5cDo4Dd:SPI3+Ch+p5c35","tlshash":"478418597254743905c54069803f090bf636392e246ac09cb76cf4efa9bde8d32beb79","first_seen":"2024-11-04T13:40:42.622928Z","last_seen":"2026-05-13T18:11:26.579074Z","times_seen":4029,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d1wzdj81h1hubn.cloudfront.net/7a227a913fa67fbc.gif","fqdn":"d1wzdj81h1hubn.cloudfront.net","domain":"d1wzdj81h1hubn.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"18.239.47.148","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://loot-link.com/s?c7bcc275\u0026did=9","date":"2025-12-14T15:47:19.846Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /7a227a913fa67fbc.gif HTTP/1.1\r\nHost: d1wzdj81h1hubn.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loot-link.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/gif\r\ncontent-length: 14487\r\nlast-modified: Wed, 10 Jul 2024 18:11:49 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-timestamp: 2024-07-10T14:13:37.121250\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sun, 14 Dec 2025 02:07:12 GMT\r\netag: \"bfaa3dc8eac54d77e3517035a2ee04a2\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b744839339b269ebb49818cc6c300b6a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS58-P3\r\nx-amz-cf-id: 90lH_iyUbeES08v9xJLmxHtEUhtGhjV7AAY1wVwBmp8Vlfic5Vsgrg==\r\nage: 49208\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":14487,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 256 x 256","md5":"bfaa3dc8eac54d77e3517035a2ee04a2","sha1":"78c6ecb6f65a51add503104323556c984b5dcece","sha256":"01e4a8b333c0cc26f7d432f99baac3c461af4cd8928d452742640d97b8726520","sha512":"839f6c064de7a491081d2a64df846c59adf195213992368443d0affc5b1624368e3ae1209b95092d5f92757066dc61e85e5dd9d47aafcf69344f65b03b4cad77","ssdeep":"384:i3k7UZkEW3k7UZkE83k7UZkEW3k7UZkE:L+Lv+LB+Lv+L","tlshash":"e5524c84f016c6a8fa2238f931750a53ae2055ccad7eadb3b574dd1562d814cae7c34b","first_seen":"2025-12-14T15:47:32.867598Z","last_seen":"2025-12-14T15:47:32.867598Z","times_seen":1,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":56,"dns":18,"connect":16,"send":0,"wait":23,"receive":5,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.youtube.com/embed/mzMZ2F4Eem8?si=rK4KJwoZeHx0JMxw","date":"2025-12-14T15:47:19.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 08:40:14 GMT","end":"Mon, 16 Feb 2026 08:40:13 GMT"},"fingerprint":{"sha1":"FF:92:1F:D0:E9:98:18:CB:FA:1B:90:BE:3E:B9:41:44:DE:05:28:15","sha256":"0C:A2:FB:F0:F6:40:B0:82:E4:FB:1A:51:96:48:D8:22:C9:05:C4:41:67:1F:41:D4:8C:F2:B6:85:A4:D2:3A:AF"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.youtube.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 10 Dec 2025 21:35:41 GMT\r\nexpires: Thu, 10 Dec 2026 21:35:41 GMT\r\ncache-control: public, max-age=31536000\r\nage: 324698\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-05-13T18:26:49.542323Z","times_seen":818504,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/player/ab89db3f/player_ias.vflset/en_US/remote.js","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.youtube.com/embed/mzMZ2F4Eem8?si=rK4KJwoZeHx0JMxw","date":"2025-12-14T15:47:20.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 08:38:53 GMT","end":"Mon, 16 Feb 2026 08:38:52 GMT"},"fingerprint":{"sha1":"98:61:A1:01:94:12:1C:03:5E:13:41:74:51:6D:2D:18:E9:F2:69:05","sha256":"4E:24:16:A8:D6:22:3F:BE:06:74:9D:F4:9B:CB:DF:31:D8:E5:8A:F9:E7:B3:7F:8D:5E:50:F2:25:34:EA:7A:94"}}},"request":{"raw":"GET /s/player/ab89db3f/player_ias.vflset/en_US/remote.js HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/mzMZ2F4Eem8?si=rK4KJwoZeHx0JMxw\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ncontent-length: 36059\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 13 Dec 2025 10:56:05 GMT\r\nexpires: Sun, 13 Dec 2026 10:56:05 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Dec 2025 05:30:26 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Origin\r\nage: 103875\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":124939,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (544)","md5":"d0713f95127fa89252b93c5b54556275","sha1":"6044f1d669773c7384f2f56117c4b20c87f47f69","sha256":"40f5d418e5384d51bcf3198599bf1e78595a8ec2ee78249fce09482c49cdfa6a","sha512":"1267967679a334c0c4643be965aa56b7c9d663c86328acf3951be546cb2fca55ca62766b3762d40caef7e6e65415926db85fd265f438b10911fe2a6caae3bca2","ssdeep":"3072:a8UfrY2uz7w2gKxgHwsl0NqoctmKPBEHBFy5nO9CyjSTe4AXZK41UH8+cR:+frY2uz7wCsl0Nq7mKPBEHBFy5nO9Cy7","tlshash":"acc3f6dcb551742023b3f4b9043f200d963b159caa840a1d779adcd29db894d9a3bffa","first_seen":"2025-12-09T12:08:02.385558Z","last_seen":"2025-12-15T17:03:45.531108Z","times_seen":2455,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/play/v21/6aez4K2oVqwIvtU2Hw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://loot-link.com/s?c7bcc275\u0026did=9","date":"2025-12-14T15:47:06.630Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 08:40:14 GMT","end":"Mon, 16 Feb 2026 08:40:13 GMT"},"fingerprint":{"sha1":"FF:92:1F:D0:E9:98:18:CB:FA:1B:90:BE:3E:B9:41:44:DE:05:28:15","sha256":"0C:A2:FB:F0:F6:40:B0:82:E4:FB:1A:51:96:48:D8:22:C9:05:C4:41:67:1F:41:D4:8C:F2:B6:85:A4:D2:3A:AF"}}},"request":{"raw":"GET /s/play/v21/6aez4K2oVqwIvtU2Hw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://loot-link.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 18128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 13 Dec 2025 10:55:16 GMT\r\nexpires: Sun, 13 Dec 2026 10:55:16 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:58:19 GMT\r\ncontent-type: font/woff2\r\nage: 103910\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18128, version 1.0","md5":"3ed6c0946ff584a90850e13ab42305eb","sha1":"e99ed206e2c7241fa3823c5dfe81b0aab45c4ed7","sha256":"a8824b32c20407f3e05b353ffe9b606670ff4fe88574afcbee6b02e31eab7fc6","sha512":"9e20013b63d609652d9c3e8aac93cc0c4762c89bb1ef2f4b8e38252a83e1233697a474df37e46a9d22b975ac2a58646baf832514283391bb74963087f6319e3f","ssdeep":"384:CiR0I9jEmgp6aFp5oTwXplvOgNCxtRdyYRjl0:CieIQ2TaZOgNYHdy00","tlshash":"ca82d1b1b824a5f1ec0c4dd89096415b6d91fc2c6e0dbbc9a071691cbb21afd26cf4dd","first_seen":"2025-06-03T13:49:57.162731Z","last_seen":"2026-05-13T14:47:47.438426Z","times_seen":1440,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":50,"dns":1,"connect":7,"send":0,"wait":10,"receive":2,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creators.lootlabs.gg/api/links_search","fqdn":"creators.lootlabs.gg","domain":"lootlabs.gg","tld":"gg"},"ip":{"addr":"18.238.243.77","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://loot-link.com/s?c7bcc275\u0026did=9","date":"2025-12-14T15:47:19.607Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creators.lootlabs.gg","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Wed, 18 Jun 2025 00:00:00 GMT","end":"Fri, 17 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"64:63:85:C4:3A:C0:E1:22:50:B3:E7:21:84:4B:EA:E2:A4:3D:73:71","sha256":"72:10:F0:1B:F8:26:8B:D1:EE:02:21:09:1F:6E:0C:CB:A1:94:B0:2F:69:05:D1:EC:FA:44:1A:2A:90:0E:F2:BF"}}},"request":{"raw":"OPTIONS /api/links_search HTTP/1.1\r\nHost: creators.lootlabs.gg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://loot-link.com/\r\nOrigin: https://loot-link.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sun, 14 Dec 2025 15:47:20 GMT\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE\r\nserver: openresty/1.21.4.1\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type, Authorization\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 9a04c6aa4d3f25ed242a525a7658d9ac.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS58-P1\r\nx-amz-cf-id: u8ytSjZlUzwCtQwu5ScFZhREOw8YfWMRw82Z9zc0j0DSwYB0D4gaOA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"OpenResty:1.21.4.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T18:27:40.13573Z","times_seen":15125718,"resource_available":true,"data":null}},"time_used":1021,"timings":{"blocked":412,"dns":109,"connect":16,"send":0,"wait":185,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creators.lootlabs.gg/api/links_search","fqdn":"creators.lootlabs.gg","domain":"lootlabs.gg","tld":"gg"},"ip":{"addr":"18.238.243.77","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://loot-link.com/s?c7bcc275\u0026did=9","date":"2025-12-14T15:47:20.224Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creators.lootlabs.gg","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Wed, 18 Jun 2025 00:00:00 GMT","end":"Fri, 17 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"64:63:85:C4:3A:C0:E1:22:50:B3:E7:21:84:4B:EA:E2:A4:3D:73:71","sha256":"72:10:F0:1B:F8:26:8B:D1:EE:02:21:09:1F:6E:0C:CB:A1:94:B0:2F:69:05:D1:EC:FA:44:1A:2A:90:0E:F2:BF"}}},"request":{"raw":"POST /api/links_search HTTP/1.1\r\nHost: creators.lootlabs.gg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://loot-link.com/\r\nContent-Type: application/json\r\nContent-Length: 27\r\nOrigin: https://loot-link.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":27,"data":"{\"search\":\"\",\"sort_by\":\"2\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ndate: Sun, 14 Dec 2025 15:47:20 GMT\r\naccess-control-allow-headers: x-requested-with\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE\r\nserver: openresty/1.21.4.1\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 9a04c6aa4d3f25ed242a525a7658d9ac.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS58-P1\r\nx-amz-cf-id: U9DP8j_LiKFcQm9ASZg_OAwibnEePIeOIl4GJQEM3KChlANOE0UTCQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty:1.21.4.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":47881,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"66447d9ddaa15ea32ab6e619ef235835","sha1":"ebdaca4fa6ac8a2d93b99c88b68b6d72ff7d8484","sha256":"97570678b755dbefa4fb386888250a53e7fdc895b5a5e455dccba0fe53047545","sha512":"c818b3485e1a29efecc953a7714458f60b1a2e527343bd0bb821ba832d02bf4d4c0c89386518667a4e7413d27d7b4e38c597f781529d323f0bafadf9b931785e","ssdeep":"384:SY1tBd7gSo6l6ULAWMu4XJDymAHGhUNKewU0Z5:SY1tH7Ll6ULAWEemAAUg11","tlshash":"33239e36d878b51325ef70e75ab9a6d9e32413c803c085b6c781e86ce0cddf45bab919","first_seen":"2025-12-14T15:47:32.86956Z","last_seen":"2025-12-14T15:47:32.86956Z","times_seen":1,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":187,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"loot-link.com/s?c7bcc275\u0026did=9","fqdn":"loot-link.com","domain":"loot-link.com","tld":"com"},"ip":{"addr":"104.21.25.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-14T15:47:01.364Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loot-link.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Oct 2025 10:26:34 GMT","end":"Thu, 22 Jan 2026 11:24:22 GMT"},"fingerprint":{"sha1":"B5:FD:7C:75:EB:F5:20:3E:3C:DA:28:53:84:87:9F:1B:79:59:5B:5A","sha256":"8B:2E:30:5A:81:EB:3C:A2:EA:6A:4C:2C:84:CB:62:69:2E:F1:F6:DA:7B:FA:0A:93:19:8D:EA:2F:29:4B:77:8B"}}},"request":{"raw":"GET /s?c7bcc275\u0026did=9 HTTP/1.1\r\nHost: loot-link.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 14 Dec 2025 15:47:05 GMT\r\ncontent-type: text/html\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\naccess-control-allow-headers: Access-Control-Allow-Headers, Origin,Accept, X-Requested-With, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-methods: POST, GET, OPTIONS, HEAD\r\naccess-control-allow-credentials: true\r\ncache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nsurrogate-control: no-store\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BqcBOhr6FTuiBI%2FsDiuBBzmdJ6QZn%2FRcOqcL5Bh6DQY7cfdT8Vd3PGG6IfTbY6VfzxxgLfZdPPG5D83z1jT0cjr4jHBh8%2FDj%2BZB0\"}]}\r\nset-cookie: uid=vfJAMZQepQoXgUtZ4rOHVc4ykfv0lsnq; expires=Mon, 14 Dec 2026 15:47:05 GMT; Path=/; Secure\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9aded65dc889569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22370,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (3884)","md5":"92aa7fd924c99a7d90d6c4f51fdde148","sha1":"2ea46af87570b466b7d072dc3e9c819ea6d92d40","sha256":"8f09de6c4977d639687ed483a97554261e36428deb6a12d0f6ee295e91509c30","sha512":"1ed8c1d4505dee7657a2b538c6cf75ed8766629dc07b9455e65c8d19912be98c2da0099d882232a0a4282de18903fecc3a518ee677b82b092ae48baa48c1d4ce","ssdeep":"384:n5g8z5aGKXRJJjmmX5II4gHRCR4/qMd202VQxk7oL1IeuP1F8O:n5TwGKXRJ9m72p3AT7ohIFPB","tlshash":"f3a21752056652caab1535a2d39b34c89b88e487efc28ecaf8bd0d18cf5b74d375274c","first_seen":"2025-12-14T15:47:32.870478Z","last_seen":"2025-12-14T15:47:32.870478Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4401,"timings":{"blocked":39,"dns":21,"connect":1,"send":0,"wait":4322,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"loot-link.com/favicon.ico","fqdn":"loot-link.com","domain":"loot-link.com","tld":"com"},"ip":{"addr":"104.21.25.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://loot-link.com/s?c7bcc275\u0026did=9","date":"2025-12-14T15:47:07.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loot-link.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Oct 2025 10:26:34 GMT","end":"Thu, 22 Jan 2026 11:24:22 GMT"},"fingerprint":{"sha1":"B5:FD:7C:75:EB:F5:20:3E:3C:DA:28:53:84:87:9F:1B:79:59:5B:5A","sha256":"8B:2E:30:5A:81:EB:3C:A2:EA:6A:4C:2C:84:CB:62:69:2E:F1:F6:DA:7B:FA:0A:93:19:8D:EA:2F:29:4B:77:8B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: loot-link.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loot-link.com/s?c7bcc275\u0026did=9\r\nCookie: uid=vfJAMZQepQoXgUtZ4rOHVc4ykfv0lsnq\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 14 Dec 2025 15:47:07 GMT\r\ncontent-type: text/plain\r\nvary: accept-encoding\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\nage: 1499\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nlast-modified: Sun, 14 Dec 2025 15:22:07 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2NyL3H8WEEuZPNWNEplau5dM8rsnCSaWo5XuaIt7nPueNw58m4hHfJKZPF5IgRhJ7He7PUAfwJMV2Wy%2BDwITek9sIP8LY%2BoDaO3j\"}]}\r\ncf-ray: 9aded6869d23b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T18:27:40.13573Z","times_seen":15125718,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d1zhmd1pxxxajf.cloudfront.net/?tid=1062633\u0026params_only=1","fqdn":"d1zhmd1pxxxajf.cloudfront.net","domain":"d1zhmd1pxxxajf.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.241.40","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://loot-link.com/s?c7bcc275\u0026did=9","date":"2025-12-14T15:47:11.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /?tid=1062633\u0026params_only=1 HTTP/1.1\r\nHost: d1zhmd1pxxxajf.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://loot-link.com/\r\nOrigin: https://loot-link.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 354\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://loot-link.com\r\ncache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform\r\ncontent-encoding: gzip\r\npragma: no-cache\r\ndate: Sun, 14 Dec 2025 15:47:11 GMT\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: gZcWCcB5Bb7t7yDsHwVqAu2FtN1dV6-u4QXcmgkgxy2sD2Us2SxSow==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":605,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with very long lines (605), with no line terminators","md5":"86dadf021dd7ee158190abeab6abaefc","sha1":"377eb956f903652b88484d40ecfd493a67c93671","sha256":"f6940f8f566971bd173c1e7198104c5cfdb29b59be46cf549c9722283191280f","sha512":"84a4afc7f649d14e233a5a3ada7480096e1588f7c342538aed69d6953349292bb790bad04e40c065b7f79dde681b75897a4ada3f47ac3f00b8c9d41071476c5f","ssdeep":"","tlshash":"04f046269548472ecbd6016ad3175889963ca8ebc404504fde193e8ed330eab3692ecb","first_seen":"2025-12-14T15:47:32.87147Z","last_seen":"2025-12-14T15:47:32.87147Z","times_seen":1,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":14,"dns":12,"connect":1,"send":0,"wait":169,"receive":1,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nerventualken.com/tc","fqdn":"nerventualken.com","domain":"nerventualken.com","tld":"com"},"ip":{"addr":"172.67.197.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://loot-link.com/s?c7bcc275\u0026did=9","date":"2025-12-14T15:47:12.088Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nerventualken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 17:49:08 GMT","end":"Mon, 16 Feb 2026 18:46:27 GMT"},"fingerprint":{"sha1":"47:82:77:6A:2C:F3:39:09:1C:6F:40:A9:7B:F2:B0:CF:DE:60:FE:8A","sha256":"01:C6:99:F0:95:78:9D:7E:2D:68:02:21:E6:8C:39:58:32:9E:4C:53:5B:86:A7:81:C5:5C:07:5C:46:AD:76:69"}}},"request":{"raw":"OPTIONS /tc HTTP/1.1\r\nHost: nerventualken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://loot-link.com/\r\nOrigin: https://loot-link.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 14 Dec 2025 15:47:19 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nset-cookie: ci=423426090425153; Max-Age=86400; Secure; SameSite=None\r\naccess-control-allow-origin: https://loot-link.com\r\naccess-control-allow-headers: Access-Control-Allow-Headers, Origin,Accept, X-Requested-With, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-methods: POST, GET, OPTIONS, HEAD\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jfH68Yga9ADDG0ILLo5fb44vwR2Xzx7YRrfSmimiFUWu%2BePyGebzjagW7gb%2B9weQyx5yt0WhIll%2BfNGgLwJNtfMUWlzrtPEjiJ8mV7ShxUTP\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9aded6a0bbce2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T18:27:40.13573Z","times_seen":15125718,"resource_available":true,"data":null}},"time_used":7256,"timings":{"blocked":27,"dns":2,"connect":3,"send":0,"wait":7202,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nerventualken.com/tc","fqdn":"nerventualken.com","domain":"nerventualken.com","tld":"com"},"ip":{"addr":"172.67.197.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://loot-link.com/s?c7bcc275\u0026did=9","date":"2025-12-14T15:47:19.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nerventualken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 17:49:08 GMT","end":"Mon, 16 Feb 2026 18:46:27 GMT"},"fingerprint":{"sha1":"47:82:77:6A:2C:F3:39:09:1C:6F:40:A9:7B:F2:B0:CF:DE:60:FE:8A","sha256":"01:C6:99:F0:95:78:9D:7E:2D:68:02:21:E6:8C:39:58:32:9E:4C:53:5B:86:A7:81:C5:5C:07:5C:46:AD:76:69"}}},"request":{"raw":"POST /tc HTTP/1.1\r\nHost: nerventualken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://loot-link.com/\r\nContent-Type: application/json\r\nContent-Length: 709\r\nOrigin: https://loot-link.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":709,"data":"{\"tid\":1062633,\"bl\":[10],\"session\":\"532304043152746329\",\"max_tasks\":2,\"design_id\":109,\"cur_url\":\"https://loot-link.com/s?c7bcc275\u0026did=9\",\"doc_ref\":\"\",\"tier_id\":\"4\",\"num_of_tasks\":\"5\",\"is_loot\":true,\"rkey\":\"556869468715044556\",\"cookie_id\":\"391641615\",\"botd\":\"{\\\"bot\\\":false,\\\"timestamp\\\":1765727226240,\\\"webGLSolution\\\":{\\\"uuid\\\":\\\"3ED3eead-e82d-46Ed-beE8-91725f7ee5eb\\\",\\\"nonce\\\":527,\\\"time\\\":326},\\\"encrypted\\\":\\\"Opng/fZc1OQtJSp1rFL4B0pLFWHYtUuyUJuRrkIjl4bwZ4v+i+5+SUERKe+Cua0gVaBKnJg6BRKsNtcM1lkgMri/E8yJwMuFWfG79e+SIQtBbPHGIO+iPognOvY5zwoXWOkpOUFDRxizoHV8EmcigJC02BW674zvQ2e+ysPqD4JXnVC5pmgmBXgYu/m9h+ZkDqGS2o9r5r5H5A==\\\"}\",\"botds\":\"3ED3eead-e82d-46Ed-beE8-91725f7ee5eb\",\"offer\":\"0\",\"taboola_user_sync\":\"\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 14 Dec 2025 15:47:19 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nset-cookie: ci=1373169744456656; Max-Age=86400; Secure; SameSite=None\r\naccess-control-allow-origin: https://loot-link.com\r\naccess-control-allow-headers: Access-Control-Allow-Headers, Origin,Accept, X-Requested-With, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-methods: POST, GET, OPTIONS, HEAD\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZNqZWsdh7V%2FKOm2ktlNyQj%2FWng%2FS62qGaza%2BsV3sru5HHQyLlGgSV2WIGukJqIvL9VVNDnMKiuBYUHo0WmCrLI%2FFGma7H0gFedYGHKZ%2FMYh%2B\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9aded6cdcb284e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":541,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"67d76abf64b95a4dd5c7b19a54d61979","sha1":"660726fa16a90d71c7b0b092e990387fc216ab26","sha256":"71928db400d2c4511a8ae51bbf47448a9bea015b37fed2b12684775b5220eaa6","sha512":"806a718343ed139e44d580d32e6de1643f7ee962a2170932ef6947f9af29308aba1e8164e868e81b59e9978ef555241e4040960bb461e5a85e8bf4f0c6854829","ssdeep":"","tlshash":"12f0c023e71d89331fe081708c372f0a161152081ad08878994094489bddfc9108475b","first_seen":"2025-12-14T15:47:32.872364Z","last_seen":"2025-12-14T15:47:32.872364Z","times_seen":1,"resource_available":false,"data":null}},"time_used":7465,"timings":{"blocked":-1,"dns":4,"connect":1,"send":0,"wait":226,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/player/ab89db3f/player_ias.vflset/en_US/embed.js","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.youtube.com/embed/mzMZ2F4Eem8?si=rK4KJwoZeHx0JMxw","date":"2025-12-14T15:47:19.913Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 08:38:53 GMT","end":"Mon, 16 Feb 2026 08:38:52 GMT"},"fingerprint":{"sha1":"98:61:A1:01:94:12:1C:03:5E:13:41:74:51:6D:2D:18:E9:F2:69:05","sha256":"4E:24:16:A8:D6:22:3F:BE:06:74:9D:F4:9B:CB:DF:31:D8:E5:8A:F9:E7:B3:7F:8D:5E:50:F2:25:34:EA:7A:94"}}},"request":{"raw":"GET /s/player/ab89db3f/player_ias.vflset/en_US/embed.js HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/mzMZ2F4Eem8?si=rK4KJwoZeHx0JMxw\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ncontent-length: 9433\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 11 Dec 2025 09:33:39 GMT\r\nexpires: Fri, 11 Dec 2026 09:33:39 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Dec 2025 05:30:26 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Origin\r\nage: 281620\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":33151,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3391)","md5":"506ed8900af45f48a22d91b4352ee495","sha1":"84f0dddfd4fbdaf2e71cc77c15efa7ecaa3faeee","sha256":"2214a9d6098d92280ba1848ccafb276a7fa944a43dc6067e2a532d69cb3b96a1","sha512":"5006bdc197fd21b0a6ebfa96939d7ad3685d9a9b9fc6dd296023b8467fc93ff5db4b8a005285eb5bad2db3aa14cc3850bd8280eb4f1e304ef64cfe7d7399db4c","ssdeep":"384:PnYRgyq+e8ewqQMK6cdwxEU1b4j0fK7vc9yWnhPtDrc14JbiC08PaxJjp3O5hNrI:j+1tq+8EUpg7BCBrcpScfH5MsqjqrUi","tlshash":"f1e2e68e77a1e430a554e1ee1d0b2204a33ba4cc1890a69c7b3edde96db4d05647ff74","first_seen":"2025-12-09T12:08:02.383536Z","last_seen":"2025-12-15T17:03:45.67961Z","times_seen":2956,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/player/ab89db3f/player_ias.vflset/en_US/base.js","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.youtube.com/embed/mzMZ2F4Eem8?si=rK4KJwoZeHx0JMxw","date":"2025-12-14T15:47:19.918Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 08:38:53 GMT","end":"Mon, 16 Feb 2026 08:38:52 GMT"},"fingerprint":{"sha1":"98:61:A1:01:94:12:1C:03:5E:13:41:74:51:6D:2D:18:E9:F2:69:05","sha256":"4E:24:16:A8:D6:22:3F:BE:06:74:9D:F4:9B:CB:DF:31:D8:E5:8A:F9:E7:B3:7F:8D:5E:50:F2:25:34:EA:7A:94"}}},"request":{"raw":"GET /s/player/ab89db3f/player_ias.vflset/en_US/base.js HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/mzMZ2F4Eem8?si=rK4KJwoZeHx0JMxw\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ncontent-length: 686949\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 13 Dec 2025 10:46:27 GMT\r\nexpires: Sun, 13 Dec 2026 10:46:27 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Dec 2025 05:30:26 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Origin\r\nage: 104452\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2650384,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (913)","md5":"c813b517c671dd33cc090decbc5a3cd9","sha1":"6e7674dfbc5836979f26d40a1f446186df0343d2","sha256":"1fc7b5e74e23f6b645bfda9c1a063cfd6136ce60c83e8dd1febc1f0c6d12e949","sha512":"2f3cbcd9be35d7093c0e0ac3c0a304410e663f812e61816abcc2e80da30f33b2985f88f98bdb8fd2c23baefdd007345df6338c6503f4c2e911713be4b74b36f3","ssdeep":"6144:a5KULc3ORQCYQf3LXM5ZJYe05KbUZywS/j9czSdSF+bM2cPY87EZdLtP0ZmdlP99:aXL3fm8lD4KzS0Zix9bGoJMwtO6XsJy1","tlshash":"bc254bdc7197b490126bf0b8902f520bb33b6804560c9e5cf396d9d66e74a0b4a3bf79","first_seen":"2025-12-10T12:48:18.111Z","last_seen":"2025-12-15T17:03:45.628407Z","times_seen":2402,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":107,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2025-12-14","alert":"Hunting_JS_WebAssembly","trigger":"www.youtube.com/s/player/ab89db3f/player_ias.vflset/en_US/base.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"d1wzdj81h1hubn.cloudfront.net/resources/51869a361c976210.png","fqdn":"d1wzdj81h1hubn.cloudfront.net","domain":"d1wzdj81h1hubn.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"18.239.47.148","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://loot-link.com/s?c7bcc275\u0026did=9","date":"2025-12-14T15:47:20.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /resources/51869a361c976210.png HTTP/1.1\r\nHost: d1wzdj81h1hubn.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loot-link.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 96757\r\ndate: Sun, 14 Dec 2025 03:15:37 GMT\r\nlast-modified: Mon, 06 Oct 2025 02:53:44 GMT\r\netag: \"c15086ff5fb44ec6360ab9dea6919e74\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-publisher_id: 471331\r\nx-amz-meta-timestamp: 2025-09-30T19:04:22.430451\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b744839339b269ebb49818cc6c300b6a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS58-P3\r\nx-amz-cf-id: y2ZfC0_XedpYAkNR8lG1xWU6DS0QxI6lMAcY7rGviqKWt84m68zSqw==\r\nage: 45104\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":96757,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"c15086ff5fb44ec6360ab9dea6919e74","sha1":"ed1959f78f7a52bf886dde8e25723af0129f238c","sha256":"7681e6093a979e8480f460178bbda48e13996dac3155f0fe31fcfe615f65bf8d","sha512":"13161e75c4818ea9e2424c17b194baa344a6377209ceea6b53960ae955b7df783377644639592447fef1149c156ef6cbc9f9e37ebae15747a095b9cf21fb2516","ssdeep":"1536:czWIlXhIsne7jMJFjNXigoyuqEfCPIST9qJt2jFv/6oZg7wHqLmqzwdc8+UMI1zb:KhDxQgo4PgJt8Fv/LZg7wH5d5+5i","tlshash":"019302f344026b597768efea211da0aa5b01a8bc87d45c4c80ad7c764608f3f6cbd57e","first_seen":"2025-12-14T15:47:32.874302Z","last_seen":"2025-12-14T15:47:32.874302Z","times_seen":1,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Play:wght@400;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://loot-link.com/s?c7bcc275\u0026did=9","date":"2025-12-14T15:47:05.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 08:40:14 GMT","end":"Mon, 16 Feb 2026 08:40:13 GMT"},"fingerprint":{"sha1":"DF:9F:85:F6:4A:53:64:E2:D3:A4:9C:9B:0A:4D:88:F2:DD:8C:92:6C","sha256":"99:65:94:2E:11:0B:3A:F6:B6:E7:38:F9:58:D0:01:2A:B6:CA:D4:2D:38:BB:87:ED:72:23:CA:63:32:85:95:35"}}},"request":{"raw":"GET /css2?family=Play:wght@400;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loot-link.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 14 Dec 2025 15:47:06 GMT\r\ndate: Sun, 14 Dec 2025 15:47:06 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4192,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"adf2a11b39b09426410dc181032f74e4","sha1":"3e4063f1bb52fc90f41e5cedc3029b8fcb35974c","sha256":"6ab3c2f755a6fdf9c2b798ed7fc8f27007f12f720b50ad13317a28fa57b8020a","sha512":"61642ce161fda1b81ed4f3f348f06d92747f2936d930ea25e32b8f7f88d4291f94d328ad17c1da4afd8222ab4b7a4907bde81d1b294ddc6993e10e875df5ea94","ssdeep":"96:wOEacgOEaAFZlOEaY33OEa7AOEaJJc+uDOEadNTOpa7gOpaqFZlOpaC33OpadOpy:/cvXY3w7pxF7SAC3pfaY5","tlshash":"7781cad60066d810eb530cc223df7e329d5e6161b054c179affe18ccacead2a2361b0d","first_seen":"2025-09-11T09:59:06.566554Z","last_seen":"2026-05-13T14:47:47.860786Z","times_seen":521,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":88,"dns":0,"connect":20,"send":0,"wait":34,"receive":0,"ssl":69},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/play/v21/6ae84K2oVqwItm4TCpAy2g.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://loot-link.com/s?c7bcc275\u0026did=9","date":"2025-12-14T15:47:06.632Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 08:40:14 GMT","end":"Mon, 16 Feb 2026 08:40:13 GMT"},"fingerprint":{"sha1":"FF:92:1F:D0:E9:98:18:CB:FA:1B:90:BE:3E:B9:41:44:DE:05:28:15","sha256":"0C:A2:FB:F0:F6:40:B0:82:E4:FB:1A:51:96:48:D8:22:C9:05:C4:41:67:1F:41:D4:8C:F2:B6:85:A4:D2:3A:AF"}}},"request":{"raw":"GET /s/play/v21/6ae84K2oVqwItm4TCpAy2g.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://loot-link.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 18156\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 10 Dec 2025 17:32:37 GMT\r\nexpires: Thu, 10 Dec 2026 17:32:37 GMT\r\ncache-control: public, max-age=31536000\r\nage: 339269\r\nlast-modified: Tue, 09 Sep 2025 19:04:00 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18156,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18156, version 1.0","md5":"aad808c85ec3c88ca213ac1cb5f02d03","sha1":"c95ec71ed1a088fced4797a512cd2cba9790a27f","sha256":"d539e6e7c0240f1565b1156395d914d93200b2c3ba312809813bb6ca6f96578b","sha512":"782a500a5f5ecf9b3f54a62186353227e1209affaf470dc285c88a4a910dd27b0a74fc8ed1a9b63c1e8602c9fddc37c94b00fe2fd8e384f8fb93432968ed33c1","ssdeep":"384:PFjxIjX2LTtwL4HrZ9UxmdNzZCBV8KMD1au:9iiHtwLAZKqeV8KW1d","tlshash":"b682d08042f203d6f9a4b2366de73469863755a4aa948edc3fb07872f0562f45306fb7","first_seen":"2025-06-03T16:05:08.724808Z","last_seen":"2026-05-13T14:47:47.806896Z","times_seen":1167,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":85,"dns":0,"connect":8,"send":0,"wait":8,"receive":2,"ssl":74},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d1wzdj81h1hubn.cloudfront.net/resources/154b98de36cd7e7b.png","fqdn":"d1wzdj81h1hubn.cloudfront.net","domain":"d1wzdj81h1hubn.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"18.239.47.148","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://loot-link.com/s?c7bcc275\u0026did=9","date":"2025-12-14T15:47:20.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /resources/154b98de36cd7e7b.png HTTP/1.1\r\nHost: d1wzdj81h1hubn.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loot-link.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 113820\r\nlast-modified: Mon, 25 Aug 2025 18:46:31 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-publisher_id: 360692\r\nx-amz-meta-timestamp: 2025-08-25T14:51:25.314126\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sun, 14 Dec 2025 02:00:30 GMT\r\netag: \"eecddee3ad06b6e970df2d04dbca56fa\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b744839339b269ebb49818cc6c300b6a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS58-P3\r\nx-amz-cf-id: k_Bto0e4Zvn4iiNdcCF3ac8NbugfZBqeT2g2B9QvGApsmSWQz9psuw==\r\nage: 49611\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":113820,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"eecddee3ad06b6e970df2d04dbca56fa","sha1":"aa9f3c8944cf9f14acc386a6808b9fe637b0335f","sha256":"fad624e31b1fe37a58e2523597eb720ed3433b477eb71399df2b08e3edea6b64","sha512":"c54d188aa3907ec17c5799d1a1ed04085ffc10ae7228593dc2519ac58d34e1ee468a8b1912f4d75cd3d8eb1f937c9c58bff38286f5398648fdff45c140e081b5","ssdeep":"3072:YnZRk3pW8dgCjtlfFg/xkJFoBgJrddzNsbzNHHFCSI1ulO1:4Zu+alPFxFdhYz7I1B","tlshash":"43b302dfe52ed4078e4e4e89714d21147cf909a5bfdcbbb047027a1aa99b42de1b30d2","first_seen":"2025-12-14T15:47:32.876239Z","last_seen":"2025-12-14T15:47:32.876239Z","times_seen":1,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}