{"report_id":"fa222ebd-615d-43b9-b9db-85f1add2a9a9","version":6,"status":"done","tags":[],"date":"2025-09-08T00:01:26Z","url":{"schema":"https","addr":"lootdest.org/s?X4dwNjRD","fqdn":"lootdest.org","domain":"lootdest.org","tld":"org"},"ip":{"addr":"54.240.174.11","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"lootdest.org/s?X4dwNjRD","fqdn":"lootdest.org","domain":"lootdest.org","tld":"org"},"title":"DELTA V2.688 APK"},"submit":{"url":{"schema":"https","addr":"lootdest.org/s?X4dwNjRD","fqdn":"lootdest.org","domain":"lootdest.org","tld":"org"},"ip":{"addr":"54.240.174.11","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-13T00:01:26Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2025-09-08","alert":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","trigger":"lootdest.org/6.js","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"@imp0rtp3 (modified by Florian Roth)","date":"2020-09-06","description":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","reference":"https://imp0rtp3.wordpress.com/2021/08/12/tetris","rule":"apt_CN_Tetris_JS_advanced_1"}}],"urlquery":null},"summary":[{"fqdn":"pagead2.googlesyndication.com","ip":{"addr":"142.250.74.130","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2003-01-21","domain_rank":610,"first_seen":"2012-05-21T07:15:40Z","last_seen":"2025-09-04T04:48:38.739607Z","alert_count":0,"request_count":1,"received_data":163652,"sent_data":465,"comment":"","tags":null,"fingerprints":null},{"fqdn":"app.unlockr.app","ip":{"addr":"104.21.81.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-08-18","domain_rank":844335,"first_seen":"2025-03-20T23:46:19.496978Z","last_seen":"2025-09-03T19:07:37.855064Z","alert_count":0,"request_count":1,"received_data":881,"sent_data":463,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-09-03T15:14:36.780259Z","alert_count":0,"request_count":1,"received_data":4878,"sent_data":462,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"nerventualken.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-01-01","domain_rank":155901,"first_seen":"2024-10-08T03:58:59Z","last_seen":"2025-09-06T04:22:37.654965Z","alert_count":0,"request_count":2,"received_data":2376,"sent_data":1003,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"unpkg.com","ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-06","domain_rank":1093,"first_seen":"2016-01-07T23:26:01Z","last_seen":"2025-09-03T16:40:07.67072Z","alert_count":0,"request_count":2,"received_data":769357,"sent_data":900,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}]},{"fqdn":"fingerprinting36542.s3.us-east-1.amazonaws.com","ip":{"addr":"3.5.9.187","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2005-08-18","domain_rank":980294,"first_seen":"2024-12-09T20:50:57.594921Z","last_seen":"2025-09-01T10:39:02.591719Z","alert_count":0,"request_count":1,"received_data":38727,"sent_data":473,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"d3h26c51lqz4go.cloudfront.net","ip":{"addr":"3.167.7.29","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2024-10-08T03:58:59Z","last_seen":"2025-09-04T08:59:07.321897Z","alert_count":0,"request_count":1,"received_data":446063,"sent_data":456,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"lootdest.org","ip":{"addr":"3.164.230.21","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2023-09-14","domain_rank":76143,"first_seen":"2023-09-18T14:03:17Z","last_seen":"2025-09-05T02:52:17.658776Z","alert_count":1,"request_count":6,"received_data":256663,"sent_data":2664,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty:1.21.4.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-09-03T15:11:16.573868Z","alert_count":0,"request_count":2,"received_data":37954,"sent_data":1054,"comment":"","tags":null,"fingerprints":null},{"fqdn":"d1wzdj81h1hubn.cloudfront.net","ip":{"addr":"54.230.245.70","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2023-01-18T20:12:00Z","last_seen":"2025-09-04T10:26:55.579984Z","alert_count":0,"request_count":2,"received_data":1131105,"sent_data":916,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"dgaf2ncy4dtan.cloudfront.net","ip":{"addr":"54.230.245.214","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2025-09-02T06:57:31.149252Z","last_seen":"2025-09-02T06:57:31.149252Z","alert_count":0,"request_count":1,"received_data":1111,"sent_data":466,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2025-09-03T15:27:27.695589Z","alert_count":0,"request_count":1,"received_data":22243,"sent_data":448,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/babel-regenerator-runtime@6.5.0/runtime.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4f6d0ac2c43a81b1890d6442a2a72494","sha1":"5cec1237fc2cd482064efb78c55096560ffd4419","sha256":"b9258540f48bff83be38e2952dfa01f6bb5c6ccbc13baccf3e26995299f59d07","sha512":"b513e08a30b27f90e72b9f9e4e0602314d995736079820f23e35fe7a160029c8082c39bebec6b96270b72bf1f3e9af6ed68e70e943874395a6e42cd51012d83f","ssdeep":"384:beeCv9SwPTYFjZA5mfzfPZxWRrT+hcMXnRxlWllmt87SRM57EZp:be1SwPTYFjZfzGTMcM5gt6","tlshash":"65a2648d69eba2619a4672388b4f3019b735c01b820dcd51784d93e1bf9143453baffe","size":21453,"data":"","first_seen":"2023-03-07T14:26:52Z","last_seen":"2026-07-08T20:17:23.526398Z","times_seen":387,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lootdest.org/6.js","fqdn":"lootdest.org","domain":"lootdest.org","tld":"org"},"ip":{"addr":"3.164.230.21","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"484ef65c138fb6189dd2d9aa957383e0","sha1":"0259346e2fd2d0e9435112bcc64e8819c0e2a8e3","sha256":"b510adc8bc747361febda9805126b75e851629251f0d7e28c4cb97572724997d","sha512":"d4480601c1d2646f4e16d77be1b2c3e3783b0d2b2d7fae4ee3cd290495ecdeb2fe9a27767194c7ca61bf85b9dbad0d94383721b8e8e65c733b7b2170f96f8954","ssdeep":"1536:Lnuy/4L7q78I3Fwt1GlHmFerd6Uae936sw:T3UW78Bt1GlHlR8","tlshash":"3d8383006d90d84d23279f3b773ae2c9d055894b6c4147cadd0afcb9525232beafe972","size":83684,"data":"","first_seen":"2025-09-06T18:47:17.119775Z","last_seen":"2025-09-13T12:00:38.715774Z","times_seen":5,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2025-09-08","alert":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","trigger":"lootdest.org/6.js","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"@imp0rtp3 (modified by Florian Roth)","date":"2020-09-06","description":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","reference":"https://imp0rtp3.wordpress.com/2021/08/12/tetris","rule":"apt_CN_Tetris_JS_advanced_1"}}],"urlquery":null}},{"url":{"schema":"https","addr":"lootdest.org/s?X4dwNjRD","fqdn":"lootdest.org","domain":"lootdest.org","tld":"org"},"ip":{"addr":"3.164.230.21","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"be3966da8d03948c2a4e412e6a3dedda","sha1":"2038a8d8835160e28d4d3b85be5d91558d97aac7","sha256":"961cb4e8308cb1b990ac9bc229c9f033ef236ffe5b8e0aaaa01e9c9c75630e56","sha512":"37ee4bb06e629caa940617e2580eaf5c189cc3f21cde7a226240ad7357fea777bbbcb3d7e9f81c6668bad4328f10bb8f7449ea2209d2260debf3eb59dcf62ae0","ssdeep":"","tlshash":"9c90021861b141775500801a003c636466616119f5131dc5627986c033d8f458295802","size":57,"data":"","first_seen":"2025-09-08T00:01:29.953096Z","last_seen":"2025-09-08T00:01:29.953096Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lootdest.org/s?X4dwNjRD","fqdn":"lootdest.org","domain":"lootdest.org","tld":"org"},"ip":{"addr":"3.164.230.21","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"69e82bd100506cfbbc6e412553ee925c","sha1":"d7011b911650bcde276e2a552a5d5a1e1ad85afe","sha256":"d831d28e13ec954055c53edfea5c7b50c3dbcf16b2fd230a3f985587230ef391","sha512":"bfd619f8587f5fadbdc69caea12a5234fd1cef95751c8aabdfd68e505b2994fce4b59f38ebf1c1fea3e45d51b523ee1fccbaf7f7149b066f8c536e6ac2553bfb","ssdeep":"384:TeGKXRZJjmmX5II4gHRFR4/qMd202VQxk7nL1IeuP1Q:CGKXRZ9m72w3AT7nhIFPy","tlshash":"c872a793051922daab183992d74b34c99788e497eec21acaf4fe0c24cb6bb5d374170d","size":16422,"data":"","first_seen":"2025-09-08T00:01:29.955167Z","last_seen":"2025-09-08T00:01:29.955167Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lootdest.org/s?X4dwNjRD","fqdn":"lootdest.org","domain":"lootdest.org","tld":"org"},"ip":{"addr":"3.164.230.21","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-07-09T00:15:15.193112Z","times_seen":716184,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lootdest.org/s?X4dwNjRD","fqdn":"lootdest.org","domain":"lootdest.org","tld":"org"},"ip":{"addr":"3.164.230.21","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-07-09T00:06:11.667974Z","times_seen":232101,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lootdest.org/s?X4dwNjRD","fqdn":"lootdest.org","domain":"lootdest.org","tld":"org"},"ip":{"addr":"3.164.230.21","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"558f233ddde0da7613463594b855ae68","sha1":"487759c68a77d20f353698d0b9b9dcbd267d484b","sha256":"0a3e527cb1a7dab5d0d1c786165221e81255b14586aae0b06337bba9fe5dcb9d","sha512":"2fdad5544228187dca0c9358edd93b9cb4feb917234e9caceab60f209dd43b3cb107d1db6a7143131cd394e1eda2429e2701019fc74d48629715c324608ae874","ssdeep":"","tlshash":"7631c11cf6405ffb58615032a6adb984e51059ab0b04d38bbe2cc20d8fb566f327a0dc","size":1634,"data":"","first_seen":"2024-10-01T00:50:24Z","last_seen":"2026-06-06T20:26:32.298901Z","times_seen":195,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fingerprinting36542.s3.us-east-1.amazonaws.com/fingerprint.js","fqdn":"fingerprinting36542.s3.us-east-1.amazonaws.com","domain":"s3.us-east-1.amazonaws.com","tld":"us-east-1.amazonaws.com"},"ip":{"addr":"3.5.9.187","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ac06ba71cc5803c7515b3e8c3a2854d","sha1":"03ba918aad85dda720c6f46267eb4fba9103aac3","sha256":"6cf24eed847d975853348f50d95b192ac37a4c49e96d8888af6dd2e15631a1fd","sha512":"8db044466454b70e2dcf368078e845163e714e68e5405fc5d3cb9202737c7e3f9696a1f231d1ba0b8ace9dc46712035eab112c3ef3f728be64644cffd587b0e7","ssdeep":"384:2xcDKdRZKREaMRMBp5iKQID95wH3KqwzrWmKj5+pCqNFaiE8E0QIQfJWbkhGYKon:x3RBp5Kjnc9NwlJWbhSu+AW","tlshash":"300306d8b2c3b06e227368b5457f6006b23a7d50346d8842c523e5d57ca9e6e913bfbc","size":38143,"data":"","first_seen":"2024-12-09T20:50:59.331644Z","last_seen":"2026-07-08T20:17:23.543394Z","times_seen":969,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/@lottiefiles/lottie-player@latest/dist/lottie-player.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc1ccb003c8dbdb1f75efa1fd38362bf","sha1":"8ae598f92b85ef618e90e0129d57fb94c8f6c3b8","sha256":"b396c6847f916f93b353dddc9245b056ad900d115cfb589e7909ba996eaf70af","sha512":"da7392435a35a21260083593ad27b6b451b8094f21bab08644ea542a8a2980f1d3da6516cb59a02de776d667f695ef27f60676737ba3387ba25e58af02762f4d","ssdeep":"6144:a4oQYPIDD5g3/btDQ3PSIoPabTzf/W8tpgsQ5cDo4Dd:SPI3+Ch+p5c35","tlshash":"478418597254743905c54069803f090bf636392e246ac09cb76cf4efa9bde8d32beb79","size":383981,"data":"","first_seen":"2024-11-04T13:40:42.622928Z","last_seen":"2026-07-08T22:35:12.179798Z","times_seen":4600,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"app.unlockr.app/pixel?event=unlockrPromote\u0026session_id=764408005732907473","fqdn":"app.unlockr.app","domain":"unlockr.app","tld":"app"},"ip":{"addr":"104.21.81.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://lootdest.org/s?X4dwNjRD","date":"2025-09-08T00:01:07.654Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unlockr.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 Aug 2025 18:30:22 GMT","end":"Sat, 22 Nov 2025 19:28:50 GMT"},"fingerprint":{"sha1":"D5:DC:01:45:BA:A1:86:EA:E4:ED:9F:47:A7:18:DB:C2:FB:CA:DB:07","sha256":"D2:67:EF:28:F7:68:F9:EE:B4:5C:C7:69:37:BC:2D:E1:AC:0E:D6:67:51:9C:A9:B0:01:45:2B:6C:5D:92:62:EE"}}},"request":{"raw":"POST /pixel?event=unlockrPromote\u0026session_id=764408005732907473 HTTP/1.1\r\nHost: app.unlockr.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://lootdest.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lootdest.org/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 08 Sep 2025 00:01:07 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\naccess-control-allow-origin: https://lootdest.org\r\naccess-control-allow-headers: Access-Control-Allow-Headers, Origin,Accept, X-Requested-With, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-methods: POST, GET, OPTIONS, HEAD\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LSvJJ0zNpxdAHj9O0veA9ZFzuUV6eDDoSx9bBJ0WyllXv533YPlZ3WBFbEYYpaZLtMFzWjQ%2BKMvDYr6BvZ9S1cvCql8yjXTLy6WOYoIdgg%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 97ba2b672ee9120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-09T00:17:50.806159Z","times_seen":17103365,"resource_available":true,"data":null}},"time_used":354,"timings":{"blocked":56,"dns":35,"connect":1,"send":0,"wait":240,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lootdest.org/s?X4dwNjRD","fqdn":"lootdest.org","domain":"lootdest.org","tld":"org"},"ip":{"addr":"3.164.230.21","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-08T00:01:04.123Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loot-link.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 15 Jul 2025 00:00:00 GMT","end":"Thu, 13 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F2:29:EE:C8:55:1A:0D:B4:EC:B8:40:2C:83:64:56:BA:0A:3A:6D:87","sha256":"57:1B:D3:2E:DE:00:9D:E6:B9:5C:D0:44:4C:67:D9:7F:05:9C:9F:6D:54:F5:E2:C3:E3:5F:1D:AC:26:0D:CD:35"}}},"request":{"raw":"GET /s?X4dwNjRD HTTP/1.1\r\nHost: lootdest.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\ndate: Mon, 08 Sep 2025 00:01:04 GMT\r\nvary: accept-encoding\r\nserver: openresty/1.21.4.1\r\naccess-control-allow-headers: Access-Control-Allow-Headers, Origin,Accept, X-Requested-With, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-methods: POST, GET, OPTIONS, HEAD\r\naccess-control-allow-credentials: true\r\ncache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nsurrogate-control: no-store\r\ncontent-encoding: gzip\r\netag: W/\"49bdcabc-abb6-4ff0-b103-9ec7b1bb7ea9\"\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 38f2e8dfe4a6e6a8f81d75aed457ec00.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P1\r\nx-amz-cf-id: Bc6lV1s2tPXrfBp-on5PmwHlom4qr6DnLQZ4z1TKAkfyasri-3P8WA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty:1.21.4.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":22370,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (3884)","md5":"0ecc7c916ddcf7f5ce8f1d59f961e98d","sha1":"def62f112100f3c1deb3082879655dd4bf18c92f","sha256":"f64d192a9f2e534601487ec3722692815a0f2099e5eea30ccf0854ff08a68b21","sha512":"993f20387ba2425b90be813a3d0b1938ee5935f2919a34dfeb8a0c10c818c209b188f4c2f5c8b1764cea732610bb08e23cc8e2c4aae941a87071c6d294fcc148","ssdeep":"384:nsg8zYeGKXRZJjmmX5II4gHRFR4/qMd202VQxk7nL1IeuP1K8O:nsTpGKXRZ9m72w3AT7nhIFPC","tlshash":"58a2f752056652daab1535a2d39b34c89b88e487efc28ecaf8bd0d18cf5a74d374274c","first_seen":"2025-09-08T00:01:29.92901Z","last_seen":"2025-09-08T00:01:29.92901Z","times_seen":1,"resource_available":false,"data":null}},"time_used":486,"timings":{"blocked":56,"dns":35,"connect":8,"send":0,"wait":370,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Play:wght@400;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lootdest.org/s?X4dwNjRD","date":"2025-09-08T00:01:04.753Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 08:41:11 GMT","end":"Mon, 10 Nov 2025 08:41:10 GMT"},"fingerprint":{"sha1":"74:C1:9B:D3:5D:65:CE:2E:7C:CC:41:C0:7C:F9:2C:AB:41:A3:EC:AA","sha256":"BC:18:82:63:1D:AE:2A:9D:1A:A3:B1:77:B2:AF:6F:0D:AA:CF:1A:88:5A:51:22:46:A8:66:C8:4F:9C:92:20:32"}}},"request":{"raw":"GET /css2?family=Play:wght@400;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lootdest.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 08 Sep 2025 00:01:04 GMT\r\ndate: Mon, 08 Sep 2025 00:01:04 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4192,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"514d99a714b4c23c7ec96adfe23c1d60","sha1":"9331e81302450cfdc5630f65f7b7147e62e4c0f8","sha256":"75a40a0c833b14ae64f9f9b74629da9d8b9cd98b4fde1dce379773a84838016b","sha512":"21a3c029039ebdb2108a2d0a82862652d5091493a206a8e8b799040bcd783c4618d5da9bc817b2d7665c11078e1ec9a63b25e5173d1c1ccd68a779eb6a33d91e","ssdeep":"96:wOEafgOEaNFZlOEaP33OEaaAOEaOJc+uDOEaQNTOpacgOpa7FZlOpat33OpaEOpK:/fvAP3wGex+cSTt3pORYi","tlshash":"5d81b9d60067a500ea430cc223df7e32dd5e6161b054c179affe188cacead2a2361b0d","first_seen":"2025-06-05T12:49:17.832665Z","last_seen":"2025-09-10T13:31:51.890016Z","times_seen":243,"resource_available":false,"data":null}},"time_used":324,"timings":{"blocked":136,"dns":1,"connect":28,"send":0,"wait":47,"receive":0,"ssl":109},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nerventualken.com/tc","fqdn":"nerventualken.com","domain":"nerventualken.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://lootdest.org/s?X4dwNjRD","date":"2025-09-08T00:01:06.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nerventualken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 23 Jul 2025 08:56:48 GMT","end":"Tue, 21 Oct 2025 09:55:30 GMT"},"fingerprint":{"sha1":"94:A3:33:81:E7:7B:7D:CE:9B:E1:64:90:F3:93:66:5C:60:46:F2:1F","sha256":"7C:49:76:39:86:64:5B:5E:01:41:9E:12:41:C4:6A:9B:B6:29:4B:0E:30:28:CB:BB:59:40:4F:64:1A:71:35:7D"}}},"request":{"raw":"OPTIONS /tc HTTP/1.1\r\nHost: nerventualken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://lootdest.org/\r\nOrigin: https://lootdest.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 08 Sep 2025 00:01:07 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\naccess-control-allow-origin: https://lootdest.org\r\naccess-control-allow-headers: Access-Control-Allow-Headers, Origin,Accept, X-Requested-With, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-methods: POST, GET, OPTIONS, HEAD\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a5SMwJz6VelmtQm4QBbnNTUr1CZygSz9XUYFEHYvwRb9%2FcZH8h7fE7%2FMT9Vej5zkShPXtiNdTL9qtWgwSIh7kMo4foemjUwxmwLvBwkbKi0C\"}]}\r\ncontent-encoding: br\r\nset-cookie: ci=728224163140523; SameSite=None; Secure; Max-Age=86400\r\ncf-ray: 97ba2b61a9da0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-09T00:17:50.806159Z","times_seen":17103365,"resource_available":true,"data":null}},"time_used":349,"timings":{"blocked":55,"dns":33,"connect":3,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/play/v20/6ae84K2oVqwItm4TCpAy2g.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://lootdest.org/s?X4dwNjRD","date":"2025-09-08T00:01:06.373Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 08:41:11 GMT","end":"Mon, 10 Nov 2025 08:41:10 GMT"},"fingerprint":{"sha1":"92:56:50:82:E4:D4:6F:F6:7B:08:95:2A:7C:4B:F5:6F:25:84:83:94","sha256":"A3:71:9C:57:37:7B:05:4E:9A:BB:BF:7C:17:AC:AB:9F:F1:32:11:03:1E:97:2E:B5:1A:B6:60:D5:7D:87:FF:8E"}}},"request":{"raw":"GET /s/play/v20/6ae84K2oVqwItm4TCpAy2g.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://lootdest.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 18156\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 01 Sep 2025 22:21:43 GMT\r\nexpires: Tue, 01 Sep 2026 22:21:43 GMT\r\ncache-control: public, max-age=31536000\r\nage: 524363\r\nlast-modified: Mon, 02 Jun 2025 16:44:43 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18156,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18156, version 1.0","md5":"aad808c85ec3c88ca213ac1cb5f02d03","sha1":"c95ec71ed1a088fced4797a512cd2cba9790a27f","sha256":"d539e6e7c0240f1565b1156395d914d93200b2c3ba312809813bb6ca6f96578b","sha512":"782a500a5f5ecf9b3f54a62186353227e1209affaf470dc285c88a4a910dd27b0a74fc8ed1a9b63c1e8602c9fddc37c94b00fe2fd8e384f8fb93432968ed33c1","ssdeep":"384:PFjxIjX2LTtwL4HrZ9UxmdNzZCBV8KMD1au:9iiHtwLAZKqeV8KW1d","tlshash":"b682d08042f203d6f9a4b2366de73469863755a4aa948edc3fb07872f0562f45306fb7","first_seen":"2025-06-03T16:05:08.724808Z","last_seen":"2026-07-08T20:37:40.670471Z","times_seen":1454,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":104,"dns":1,"connect":29,"send":0,"wait":28,"receive":20,"ssl":72},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/@lottiefiles/lottie-player@latest/dist/lottie-player.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lootdest.org/s?X4dwNjRD","date":"2025-09-08T00:01:07.641Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 Aug 2025 10:31:15 GMT","end":"Sun, 23 Nov 2025 11:31:12 GMT"},"fingerprint":{"sha1":"77:EF:87:8D:9A:D6:8C:EF:F9:8F:05:89:BF:F2:6B:C2:CF:78:19:EF","sha256":"3C:23:A9:CF:90:2C:6B:74:27:D0:FC:3B:92:A8:A9:AD:66:5F:B0:D4:DE:28:80:4D:49:D0:4C:22:AE:D2:F3:90"}}},"request":{"raw":"GET /@lottiefiles/lottie-player@latest/dist/lottie-player.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lootdest.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Mon, 08 Sep 2025 00:01:07 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 71\r\ncf-ray: 97ba2b66dd94723c-OSL\r\nlocation: /@lottiefiles/lottie-player@2.0.12/dist/lottie-player.js\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=60, s-maxage=300\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":383981,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-09T00:17:50.806159Z","times_seen":17103365,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":17,"dns":1,"connect":1,"send":0,"wait":24,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lootdest.org/unlocker.png","fqdn":"lootdest.org","domain":"lootdest.org","tld":"org"},"ip":{"addr":"3.164.230.21","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lootdest.org/s?X4dwNjRD","date":"2025-09-08T00:01:07.657Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loot-link.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 15 Jul 2025 00:00:00 GMT","end":"Thu, 13 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F2:29:EE:C8:55:1A:0D:B4:EC:B8:40:2C:83:64:56:BA:0A:3A:6D:87","sha256":"57:1B:D3:2E:DE:00:9D:E6:B9:5C:D0:44:4C:67:D9:7F:05:9C:9F:6D:54:F5:E2:C3:E3:5F:1D:AC:26:0D:CD:35"}}},"request":{"raw":"GET /unlocker.png HTTP/1.1\r\nHost: lootdest.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lootdest.org/s?X4dwNjRD\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 31030\r\ndate: Mon, 08 Sep 2025 00:01:07 GMT\r\naccept-ranges: bytes\r\nserver: openresty/1.21.4.1\r\nlast-modified: Sun, 07 Sep 2025 11:00:01 GMT\r\netag: \"68bd65b1-7936\"\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 38f2e8dfe4a6e6a8f81d75aed457ec00.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P1\r\nx-amz-cf-id: UIyg48cr90jxKoA6lIqIOZNWEvZ5YZsvc4ZgXpg2-DbW3Q3oACjnow==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty:1.21.4.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":31030,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 246 x 246, 8-bit/color RGBA, non-interlaced","md5":"aa3e9ab7989d9c695c98fc750957670d","sha1":"4022d553f4952fa7c7b57f00942b202354b66acb","sha256":"5e0813c96779ef092cefc6e77fa90de7a86e307f04bd6d64f9d37a5d9a8fb4e0","sha512":"e3b681724244c3834a9d24d92c3b3817afb553e1a697c58b21d84e6a8ba1c07cece4b14e1316c6235436768b2e62362169810568921d660efc576536ec41696f","ssdeep":"768:nwlF+bky/Yt20bgvguLfk7D07HIcDbMXj5ZVp0iB6VRc8p6UvzMVOs:NkBXghfk7aHbDbMXj5Zh6LcC6YIVOs","tlshash":"54d2d0f5b033745de9f50006fa4647b801bb8af07f31b618d4bbc60eb78839e24a9965","first_seen":"2025-03-20T23:46:21.230829Z","last_seen":"2026-07-07T07:00:04.770028Z","times_seen":595,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/@lottiefiles/lottie-player@2.0.12/dist/lottie-player.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lootdest.org/s?X4dwNjRD","date":"2025-09-08T00:01:07.700Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 Aug 2025 10:31:15 GMT","end":"Sun, 23 Nov 2025 11:31:12 GMT"},"fingerprint":{"sha1":"77:EF:87:8D:9A:D6:8C:EF:F9:8F:05:89:BF:F2:6B:C2:CF:78:19:EF","sha256":"3C:23:A9:CF:90:2C:6B:74:27:D0:FC:3B:92:A8:A9:AD:66:5F:B0:D4:DE:28:80:4D:49:D0:4C:22:AE:D2:F3:90"}}},"request":{"raw":"GET /@lottiefiles/lottie-player@2.0.12/dist/lottie-player.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://lootdest.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 08 Sep 2025 00:01:07 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: gzip\r\ncf-ray: 97ba2b672dbc723c-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 599211\r\ncache-control: public, max-age=31536000\r\nexpires: Tue, 08 Sep 2026 00:01:07 GMT\r\nlast-modified: Thu, 28 Aug 2025 19:03:09 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncontent-digest: sha256=:s5bGhH+Rb5OzU93ckkWwVq2QDRFc+1ieeQm6mW6vcK8=:\r\ncross-origin-resource-policy: cross-origin\r\nfly-request-id: 01K3S0ZNYJHEP1VCQYFT6FFKKB-waw\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":383981,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (27447)","md5":"bc1ccb003c8dbdb1f75efa1fd38362bf","sha1":"8ae598f92b85ef618e90e0129d57fb94c8f6c3b8","sha256":"b396c6847f916f93b353dddc9245b056ad900d115cfb589e7909ba996eaf70af","sha512":"da7392435a35a21260083593ad27b6b451b8094f21bab08644ea542a8a2980f1d3da6516cb59a02de776d667f695ef27f60676737ba3387ba25e58af02762f4d","ssdeep":"6144:a4oQYPIDD5g3/btDQ3PSIoPabTzf/W8tpgsQ5cDo4Dd:SPI3+Ch+p5c35","tlshash":"478418597254743905c54069803f090bf636392e246ac09cb76cf4efa9bde8d32beb79","first_seen":"2024-11-04T13:40:42.622928Z","last_seen":"2026-07-08T22:35:12.179798Z","times_seen":4600,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d1wzdj81h1hubn.cloudfront.net/resources/ff700413e85274f0.png","fqdn":"d1wzdj81h1hubn.cloudfront.net","domain":"d1wzdj81h1hubn.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.245.70","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lootdest.org/s?X4dwNjRD","date":"2025-09-08T00:01:07.777Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /resources/ff700413e85274f0.png HTTP/1.1\r\nHost: d1wzdj81h1hubn.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lootdest.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 1126891\r\nlast-modified: Thu, 22 May 2025 14:20:07 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-publisher_id: 460941\r\nx-amz-meta-timestamp: 2025-05-22T14:13:17.364837\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sun, 07 Sep 2025 08:51:47 GMT\r\netag: \"25bfa304b51c2d07057fdb01a05cc1cf\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: kPYNp1Uvgy15YfzzXNO2j9vEBnOHMVjoItA0tjZOG2NlJ6_WRHeKkw==\r\nage: 54561\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":1126891,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGBA, non-interlaced","md5":"f0c0d9725524898542bb4dc5befa6c38","sha1":"f8221a87d074c24819f8add19bc476fb96c6d9ca","sha256":"9e2d2f7d3798efea0e0be7d93e38c4011c5abdb5853c64556b98741d4516e18b","sha512":"c62d5c5a223f056e4c335cb6a436b818246da3b15fd09a74f98143dae593f24f597b0fe78024b004eadacaff0967cde6cc237f23e409a7527f30a2c258992b57","ssdeep":"12288:mKSd3LcysKME43i3yhCGfCKP6HZxXJ63/ym+Rqgf9D9LcikHER0h99U0zqwCopSc:mRFrMEN3OZkxJHxHreE2DOw9Sc","tlshash":"47252306e979a1a20d33485cfa71455873b63fab83fcdae83d1482c9a41d1435bf2b5e","first_seen":"2025-08-16T19:16:52.500165Z","last_seen":"2026-05-03T08:57:23.393711Z","times_seen":7,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":16,"dns":50,"connect":1,"send":0,"wait":4,"receive":41,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d1wzdj81h1hubn.cloudfront.net/icons/apps.png","fqdn":"d1wzdj81h1hubn.cloudfront.net","domain":"d1wzdj81h1hubn.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.245.70","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lootdest.org/s?X4dwNjRD","date":"2025-09-08T00:01:07.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /icons/apps.png HTTP/1.1\r\nHost: d1wzdj81h1hubn.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lootdest.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 3115\r\ndate: Sun, 07 Sep 2025 06:07:10 GMT\r\nlast-modified: Tue, 07 Feb 2023 09:32:37 GMT\r\netag: \"fe92fe3dee69ba5c6dc9ab4b1785c556\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: gyD3WaqmPrYWX8qfwjQpza6x_mH_s2TEmH8N5UigkEdSXS0sAMtCpA==\r\nage: 64438\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":3115,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"fe92fe3dee69ba5c6dc9ab4b1785c556","sha1":"444c3bcb27bde9c050a4bd51bf35d511951a3077","sha256":"2c07bad8f7225591d84faba9c558c4bff26e5acdac36f91f47a73796be04dbd0","sha512":"09b4b641278c07f96a4662c4886999deb20da899b64ebb1723513c8afe7530986d6d4fbe609e3d7585a00c72dfce81e22ae4c73458984c04e9d2a0974dc0a0f4","ssdeep":"","tlshash":"44513bf66bc88406c08adf75a4fb4b274727d14044f4e46e55eec8a248312f10c6d1fb","first_seen":"2023-09-28T12:53:45Z","last_seen":"2026-03-08T13:23:07.749239Z","times_seen":186,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":16,"dns":42,"connect":4,"send":0,"wait":1,"receive":0,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lootdest.org/WrappedBotd.browser.protected.js","fqdn":"lootdest.org","domain":"lootdest.org","tld":"org"},"ip":{"addr":"3.164.230.21","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lootdest.org/s?X4dwNjRD","date":"2025-09-08T00:01:04.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loot-link.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 15 Jul 2025 00:00:00 GMT","end":"Thu, 13 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F2:29:EE:C8:55:1A:0D:B4:EC:B8:40:2C:83:64:56:BA:0A:3A:6D:87","sha256":"57:1B:D3:2E:DE:00:9D:E6:B9:5C:D0:44:4C:67:D9:7F:05:9C:9F:6D:54:F5:E2:C3:E3:5F:1D:AC:26:0D:CD:35"}}},"request":{"raw":"GET /WrappedBotd.browser.protected.js HTTP/1.1\r\nHost: lootdest.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lootdest.org/s?X4dwNjRD\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ndate: Mon, 08 Sep 2025 00:01:04 GMT\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nserver: openresty/1.21.4.1\r\nlast-modified: Sun, 07 Sep 2025 11:00:01 GMT\r\netag: W/\"68bd65b1-1aaaf\"\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 38f2e8dfe4a6e6a8f81d75aed457ec00.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P1\r\nx-amz-cf-id: VQFFAptipTkbX9azrRIgcDFkr7uYEXi8p_8Pe-uj1-NblnewiATIow==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty:1.21.4.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":109231,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"95888320adab6afba4a8e0c8f06e8361","sha1":"c04b231b41d57f1cc95e66e04d8f2631a4b10018","sha256":"8fda68ace483a03aa4362a8731fff5b2a37d85aab3de76801ab8e225b217b2df","sha512":"e3a17ad670f939f563fe6d1dc507ab5ba99f90a4b6bc94364fa2f56d5c5ca1a552b0dbb973a4f68f7694ca9a8bf1a3ff3bf28b0dc1f4bf2fc796deef5007bd82","ssdeep":"3072:9ISWWZitd7yfmAa0Zzg/N8OSv0TfuuC8a5MAVCGNs:YhlLqD0TmPMAVCSs","tlshash":"bab3d79462472c958392d1ff142fb285ac2d8e51bc8fdce1d651c3959c306c78afbba2","first_seen":"2025-07-01T16:50:14.740307Z","last_seen":"2026-07-08T20:17:23.545399Z","times_seen":680,"resource_available":true,"data":null}},"time_used":227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":227,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lootdest.org/6.js","fqdn":"lootdest.org","domain":"lootdest.org","tld":"org"},"ip":{"addr":"3.164.230.21","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lootdest.org/s?X4dwNjRD","date":"2025-09-08T00:01:04.754Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loot-link.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 15 Jul 2025 00:00:00 GMT","end":"Thu, 13 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F2:29:EE:C8:55:1A:0D:B4:EC:B8:40:2C:83:64:56:BA:0A:3A:6D:87","sha256":"57:1B:D3:2E:DE:00:9D:E6:B9:5C:D0:44:4C:67:D9:7F:05:9C:9F:6D:54:F5:E2:C3:E3:5F:1D:AC:26:0D:CD:35"}}},"request":{"raw":"GET /6.js HTTP/1.1\r\nHost: lootdest.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lootdest.org/s?X4dwNjRD\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ndate: Mon, 08 Sep 2025 00:01:04 GMT\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nserver: openresty/1.21.4.1\r\nlast-modified: Sun, 07 Sep 2025 11:00:01 GMT\r\netag: W/\"68bd65b1-146e4\"\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 38f2e8dfe4a6e6a8f81d75aed457ec00.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P1\r\nx-amz-cf-id: VnforGJDwgXl3ZQ5u7s_YLYGh0aPHyo17-0jgTOpfJkPCWRzli058g==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty:1.21.4.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":83684,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"484ef65c138fb6189dd2d9aa957383e0","sha1":"0259346e2fd2d0e9435112bcc64e8819c0e2a8e3","sha256":"b510adc8bc747361febda9805126b75e851629251f0d7e28c4cb97572724997d","sha512":"d4480601c1d2646f4e16d77be1b2c3e3783b0d2b2d7fae4ee3cd290495ecdeb2fe9a27767194c7ca61bf85b9dbad0d94383721b8e8e65c733b7b2170f96f8954","ssdeep":"1536:Lnuy/4L7q78I3Fwt1GlHmFerd6Uae936sw:T3UW78Bt1GlHlR8","tlshash":"3d8383006d90d84d23279f3b773ae2c9d055894b6c4147cadd0afcb9525232beafe972","first_seen":"2025-09-06T18:47:17.119775Z","last_seen":"2025-09-13T12:00:38.715774Z","times_seen":5,"resource_available":true,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":226,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2025-09-08","alert":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","trigger":"lootdest.org/6.js","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"@imp0rtp3 (modified by Florian Roth)","date":"2020-09-06","description":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","reference":"https://imp0rtp3.wordpress.com/2021/08/12/tetris","rule":"apt_CN_Tetris_JS_advanced_1"}}],"urlquery":null}},{"url":{"schema":"https","addr":"dgaf2ncy4dtan.cloudfront.net/?tid=1148412\u0026params_only=1","fqdn":"dgaf2ncy4dtan.cloudfront.net","domain":"dgaf2ncy4dtan.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.245.214","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://lootdest.org/s?X4dwNjRD","date":"2025-09-08T00:01:06.540Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /?tid=1148412\u0026params_only=1 HTTP/1.1\r\nHost: dgaf2ncy4dtan.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://lootdest.org/\r\nOrigin: https://lootdest.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 340\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://lootdest.org\r\ncache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform\r\ncontent-encoding: gzip\r\npragma: no-cache\r\ndate: Mon, 08 Sep 2025 00:01:05 GMT\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: apIemGnY9KZ3qVqJhWZvEXvmn-MouxKrobxn92sv8PXJAqcBIMnxUg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":593,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with very long lines (593), with no line terminators","md5":"6548335f98b6a9bfcff8f0eefb5c8e62","sha1":"28f04bca8013bc092749a8751d44f0659ee99519","sha256":"e275febcd31dc117ecf758cc618d4c9c47fd3d822a74d9395d2fd5da2050af06","sha512":"d21a6fd6829eb55554993dc2a0a956ea0c1675a3a3b1786d92ba0d29b5b04da1edcf67ec440cb791155a4ce4bf786205ac7ff9bb21bfc7e79d622757656bfbcd","ssdeep":"","tlshash":"cff08b26d648472fcbd6422ed72754465338a8e7c408901fca093e9cd370eeb3591ece","first_seen":"2025-09-06T18:47:17.099708Z","last_seen":"2025-09-08T00:01:29.941921Z","times_seen":3,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":9,"dns":23,"connect":1,"send":0,"wait":165,"receive":0,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lootdest.org/favicon.ico","fqdn":"lootdest.org","domain":"lootdest.org","tld":"org"},"ip":{"addr":"3.164.230.21","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lootdest.org/s?X4dwNjRD","date":"2025-09-08T00:01:06.546Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loot-link.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 15 Jul 2025 00:00:00 GMT","end":"Thu, 13 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F2:29:EE:C8:55:1A:0D:B4:EC:B8:40:2C:83:64:56:BA:0A:3A:6D:87","sha256":"57:1B:D3:2E:DE:00:9D:E6:B9:5C:D0:44:4C:67:D9:7F:05:9C:9F:6D:54:F5:E2:C3:E3:5F:1D:AC:26:0D:CD:35"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: lootdest.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lootdest.org/s?X4dwNjRD\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-type: text/html\r\ncontent-length: 159\r\ndate: Mon, 08 Sep 2025 00:01:06 GMT\r\nserver: openresty/1.21.4.1\r\nx-cache: Error from cloudfront\r\nvia: 1.1 38f2e8dfe4a6e6a8f81d75aed457ec00.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P1\r\nx-amz-cf-id: F5iIwab6Z8LQv_yEKCew2vAWExe2U3dkpHaxdXVcw0lF1FJczN-Cgg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty:1.21.4.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":159,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"707a6bf80b2aae914a3475cb829e534b","sha1":"2e70d81cf7a8b2c2bf66521e720969d1e92f3819","sha256":"20703cc00e86bed52bb9af00fac1cbd8c3dc16c2866b7251288325f1501c8755","sha512":"b533b0cfccaa31c1c36c2474b68c0fbd45ca74225d8fa19ecab66d024c302a615f5829c7bd5a23384f203dd5cfcb2f364581d7a5ca13267c4bf84aeb8b3b7797","ssdeep":"","tlshash":"83c08c2d2423ac0c8663207626c36190c18a8327e56a41118540805730cf1998ac33aa","first_seen":"2023-04-07T07:46:27Z","last_seen":"2026-07-02T23:04:09.881617Z","times_seen":1144,"resource_available":true,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":225,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fingerprinting36542.s3.us-east-1.amazonaws.com/fingerprint.js","fqdn":"fingerprinting36542.s3.us-east-1.amazonaws.com","domain":"s3.us-east-1.amazonaws.com","tld":"us-east-1.amazonaws.com"},"ip":{"addr":"3.5.9.187","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lootdest.org/s?X4dwNjRD","date":"2025-09-08T00:01:06.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sun, 20 Jul 2025 00:00:00 GMT","end":"Thu, 25 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"16:D2:7A:E0:6B:B2:6D:C0:8F:8C:4E:E5:2B:1F:47:F3:EF:60:7F:68","sha256":"EF:42:24:62:84:5D:EF:F9:AE:18:7F:85:D7:C7:56:73:2D:8B:30:D2:CD:83:77:3B:45:EF:24:B2:93:43:99:33"}}},"request":{"raw":"GET /fingerprint.js HTTP/1.1\r\nHost: fingerprinting36542.s3.us-east-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://lootdest.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lootdest.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: XCgIK5cVlQ3wiKe6RnUAuLfhROhtcMJWo/r3a1eFKpAj7CV1EbufNlStXJJr0ay/ZC8WdRH3uzdkxQSUd/Aw+A==\r\nx-amz-request-id: P90JAG2K5CY66B5Y\r\nDate: Mon, 08 Sep 2025 00:01:08 GMT\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, PUT, POST, DELETE\r\nVary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nLast-Modified: Mon, 09 Dec 2024 12:08:59 GMT\r\nETag: \"9ac06ba71cc5803c7515b3e8c3a2854d\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: application/javascript\r\nContent-Length: 38143\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":38143,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (38136), with no line terminators","md5":"9ac06ba71cc5803c7515b3e8c3a2854d","sha1":"03ba918aad85dda720c6f46267eb4fba9103aac3","sha256":"6cf24eed847d975853348f50d95b192ac37a4c49e96d8888af6dd2e15631a1fd","sha512":"8db044466454b70e2dcf368078e845163e714e68e5405fc5d3cb9202737c7e3f9696a1f231d1ba0b8ace9dc46712035eab112c3ef3f728be64644cffd587b0e7","ssdeep":"384:2xcDKdRZKREaMRMBp5iKQID95wH3KqwzrWmKj5+pCqNFaiE8E0QIQfJWbkhGYKon:x3RBp5Kjnc9NwlJWbhSu+AW","tlshash":"300306d8b2c3b06e227368b5457f6006b23a7d50346d8842c523e5d57ca9e6e913bfbc","first_seen":"2024-12-09T20:50:59.331644Z","last_seen":"2026-07-08T20:17:23.543394Z","times_seen":969,"resource_available":true,"data":null}},"time_used":792,"timings":{"blocked":284,"dns":50,"connect":102,"send":0,"wait":119,"receive":104,"ssl":130},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d3h26c51lqz4go.cloudfront.net/loot-sources/rbx.jpg","fqdn":"d3h26c51lqz4go.cloudfront.net","domain":"d3h26c51lqz4go.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"3.167.7.29","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lootdest.org/s?X4dwNjRD","date":"2025-09-08T00:01:06.966Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /loot-sources/rbx.jpg HTTP/1.1\r\nHost: d3h26c51lqz4go.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lootdest.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\ncontent-length: 445602\r\nlast-modified: Tue, 12 Nov 2024 11:54:52 GMT\r\nserver: AmazonS3\r\ndate: Sun, 07 Sep 2025 07:38:42 GMT\r\netag: \"782b7fc18a24ee997efd9a7f02fa4bf9\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 677df3933c00907ecb7cdafc768e98fc.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: 2Jyc8k3lT1v5lDqiupTwBIW2tS_ScprmdzKDZtXelmUdCcOyZMmkMA==\r\nage: 58945\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":445602,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], progressive, precision 8, 1920x1080, components 3","md5":"782b7fc18a24ee997efd9a7f02fa4bf9","sha1":"db1f15bf56aa30ec79bb6a9d2632fe2a12de099b","sha256":"c45388c0937dde58151ba6f3d2225751b8b89ac001be1ef1f40134c61d391b8e","sha512":"c08790580afe4c89fd3e6cf9dbb4b26548b4a686b1e9bcc3a9dbc6fdcad49e84a0a5ec2ea7f3935308ac059af040af3879e29f3c0e2150d7687bd02fe5f4daf8","ssdeep":"12288:+qpneIqS0EPX5m8GstM259YoLnLhhp/SmqQGF:HeCP5m8vttYoLnVHRqFF","tlshash":"27942337acece011f12715aeb8a67b68154047f81b533be044ec09e9a7d85a79e5273c","first_seen":"2023-05-04T09:20:51Z","last_seen":"2026-06-22T05:38:17.45719Z","times_seen":545,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":7,"dns":53,"connect":1,"send":0,"wait":4,"receive":16,"ssl":5},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pagead2.googlesyndication.com/pagead/js/adsbygoogle.js","fqdn":"pagead2.googlesyndication.com","domain":"googlesyndication.com","tld":"com"},"ip":{"addr":"142.250.74.130","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://lootdest.org/s?X4dwNjRD","date":"2025-09-08T00:01:06.964Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.g.doubleclick.net","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 08:39:57 GMT","end":"Mon, 10 Nov 2025 08:39:56 GMT"},"fingerprint":{"sha1":"33:53:E2:63:6C:CC:14:B3:EC:6F:D7:23:C1:63:E6:E5:2E:A8:9E:86","sha256":"4A:CB:52:92:0B:7B:10:16:DE:EB:99:01:C2:6E:88:B5:1F:2D:55:2C:B0:86:6B:14:8E:A2:D6:5F:23:94:40:F8"}}},"request":{"raw":"GET /pagead/js/adsbygoogle.js HTTP/1.1\r\nHost: pagead2.googlesyndication.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://lootdest.org/\r\nOrigin: https://lootdest.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nlink: \u003chttps://googleads.g.doubleclick.net\u003e; rel=\"preconnect\"; crossorigin\r\nvary: Accept-Encoding\r\ndate: Mon, 08 Sep 2025 00:01:07 GMT\r\nexpires: Mon, 08 Sep 2025 00:01:07 GMT\r\ncache-control: private, max-age=3600, stale-while-revalidate=3600\r\ncontent-type: text/javascript; charset=UTF-8\r\netag: 12092591598656256366\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\ncontent-disposition: attachment; filename=\"f.txt\"\r\ncontent-encoding: br\r\nserver: cafe\r\ncontent-length: 54572\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":162861,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4830)","md5":"72a52413a41c78df06bdddc29532eb8d","sha1":"56f65ba5f09e9b344bf71aea5e2152a08146ce1f","sha256":"6ebf117ca88828e8bdde7a48a6793b590c84756bd15cb6584bc9e00af6e75adc","sha512":"fd741bdd40da64c4f5e407b0db685dfbda163b8133c3adc5ac032323d9d43264f7929ecb437423e68c86dac0a5914a534bec7fbd1dda9d7ec59e73f3c28e32c7","ssdeep":"3072:Oy4KSW75OZs0mhH2UHbuUPvOpEOXkz14+PSuWGWCIcTLAhtJt4W7qSSJLJZz1XmZ:Oy4KSyf0mhWUHbuUPv0BXkz14RuvWCIr","tlshash":"c2f3f8a971a2bcb38b6399e5006f0107b52da873f00cc8b0f1d8ddd97a249655277fad","first_seen":"2025-09-08T00:01:29.94542Z","last_seen":"2025-09-08T00:01:29.94542Z","times_seen":1,"resource_available":false,"data":null}},"time_used":349,"timings":{"blocked":137,"dns":3,"connect":29,"send":0,"wait":41,"receive":31,"ssl":105},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nerventualken.com/tc","fqdn":"nerventualken.com","domain":"nerventualken.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://lootdest.org/s?X4dwNjRD","date":"2025-09-08T00:01:07.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nerventualken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 23 Jul 2025 08:56:48 GMT","end":"Tue, 21 Oct 2025 09:55:30 GMT"},"fingerprint":{"sha1":"94:A3:33:81:E7:7B:7D:CE:9B:E1:64:90:F3:93:66:5C:60:46:F2:1F","sha256":"7C:49:76:39:86:64:5B:5E:01:41:9E:12:41:C4:6A:9B:B6:29:4B:0E:30:28:CB:BB:59:40:4F:64:1A:71:35:7D"}}},"request":{"raw":"POST /tc HTTP/1.1\r\nHost: nerventualken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://lootdest.org/\r\nContent-Type: application/json\r\nContent-Length: 703\r\nOrigin: https://lootdest.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 08 Sep 2025 00:01:07 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\naccess-control-allow-origin: https://lootdest.org\r\naccess-control-allow-headers: Access-Control-Allow-Headers, Origin,Accept, X-Requested-With, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-methods: POST, GET, OPTIONS, HEAD\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M%2F7J6euKZsOAoQG%2Fl0ge5v8S1HcxKR1b96TpfwIWSyRrPYVmfw5l3NUHeYy1GouGJd4W9%2Fuq%2BBJxhxWZ6%2B2IhqMh968gqKDXcl04VBO%2BcQ%3D%3D\"}]}\r\ncontent-encoding: br\r\nset-cookie: ci=306231690791468; SameSite=None; Secure; Max-Age=86400\r\ncf-ray: 97ba2b6328f4b4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":532,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b8104554904daccb993fc7ba2aca2f6f","sha1":"c4bb8f877919a755d1718d487dcd522605ff9a7d","sha256":"d4468749c4d619255b446481ffd7c6e006d97db386bea7f823508e7ac1928770","sha512":"2f97225b4f8b5fcb2472fae353c09f1e14b69b102c61ad7fdc6b456e2c723a4c372c2bdd40bdf08f1427a3e43164b5b5ca20ca9cf3ab8e56b3f283ec3164fee2","ssdeep":"","tlshash":"e1f05927a46959733b81a57086122f583910222d07d0483999d5c99c8acfed5255ba97","first_seen":"2025-09-08T00:01:29.948185Z","last_seen":"2025-09-08T00:01:29.948185Z","times_seen":1,"resource_available":false,"data":null}},"time_used":866,"timings":{"blocked":-1,"dns":34,"connect":1,"send":0,"wait":569,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/babel-regenerator-runtime@6.5.0/runtime.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lootdest.org/s?X4dwNjRD","date":"2025-09-08T00:01:04.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/babel-regenerator-runtime@6.5.0/runtime.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lootdest.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 6.5.0\r\nx-jsd-version-type: version\r\netag: W/\"53cd-XOwSN/ws1IIGTvt4xVCWVg/9RBk\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Mon, 08 Sep 2025 00:01:04 GMT\r\nage: 4392380\r\nx-served-by: cache-fra-eddf8230078-FRA, cache-hel1410031-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 6589\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21453,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"4f6d0ac2c43a81b1890d6442a2a72494","sha1":"5cec1237fc2cd482064efb78c55096560ffd4419","sha256":"b9258540f48bff83be38e2952dfa01f6bb5c6ccbc13baccf3e26995299f59d07","sha512":"b513e08a30b27f90e72b9f9e4e0602314d995736079820f23e35fe7a160029c8082c39bebec6b96270b72bf1f3e9af6ed68e70e943874395a6e42cd51012d83f","ssdeep":"384:beeCv9SwPTYFjZA5mfzfPZxWRrT+hcMXnRxlWllmt87SRM57EZp:be1SwPTYFjZfzGTMcM5gt6","tlshash":"65a2648d69eba2619a4672388b4f3019b735c01b820dcd51784d93e1bf9143453baffe","first_seen":"2023-03-07T14:26:52Z","last_seen":"2026-07-08T20:17:23.526398Z","times_seen":387,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":35,"dns":1,"connect":13,"send":0,"wait":14,"receive":1,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/play/v20/6aez4K2oVqwIvtU2Hw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://lootdest.org/s?X4dwNjRD","date":"2025-09-08T00:01:06.368Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 08:41:11 GMT","end":"Mon, 10 Nov 2025 08:41:10 GMT"},"fingerprint":{"sha1":"92:56:50:82:E4:D4:6F:F6:7B:08:95:2A:7C:4B:F5:6F:25:84:83:94","sha256":"A3:71:9C:57:37:7B:05:4E:9A:BB:BF:7C:17:AC:AB:9F:F1:32:11:03:1E:97:2E:B5:1A:B6:60:D5:7D:87:FF:8E"}}},"request":{"raw":"GET /s/play/v20/6aez4K2oVqwIvtU2Hw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://lootdest.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 18128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 01 Sep 2025 21:41:38 GMT\r\nexpires: Tue, 01 Sep 2026 21:41:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 526768\r\nlast-modified: Mon, 02 Jun 2025 16:45:05 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18128, version 1.0","md5":"3ed6c0946ff584a90850e13ab42305eb","sha1":"e99ed206e2c7241fa3823c5dfe81b0aab45c4ed7","sha256":"a8824b32c20407f3e05b353ffe9b606670ff4fe88574afcbee6b02e31eab7fc6","sha512":"9e20013b63d609652d9c3e8aac93cc0c4762c89bb1ef2f4b8e38252a83e1233697a474df37e46a9d22b975ac2a58646baf832514283391bb74963087f6319e3f","ssdeep":"384:CiR0I9jEmgp6aFp5oTwXplvOgNCxtRdyYRjl0:CieIQ2TaZOgNYHdy00","tlshash":"ca82d1b1b824a5f1ec0c4dd89096415b6d91fc2c6e0dbbc9a071691cbb21afd26cf4dd","first_seen":"2025-06-03T13:49:57.162731Z","last_seen":"2026-07-08T20:37:40.618331Z","times_seen":1766,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":92,"dns":1,"connect":28,"send":0,"wait":29,"receive":7,"ssl":61},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lootdest.org/qr.png","fqdn":"lootdest.org","domain":"lootdest.org","tld":"org"},"ip":{"addr":"3.164.230.21","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lootdest.org/s?X4dwNjRD","date":"2025-09-08T00:01:07.655Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loot-link.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 15 Jul 2025 00:00:00 GMT","end":"Thu, 13 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F2:29:EE:C8:55:1A:0D:B4:EC:B8:40:2C:83:64:56:BA:0A:3A:6D:87","sha256":"57:1B:D3:2E:DE:00:9D:E6:B9:5C:D0:44:4C:67:D9:7F:05:9C:9F:6D:54:F5:E2:C3:E3:5F:1D:AC:26:0D:CD:35"}}},"request":{"raw":"GET /qr.png HTTP/1.1\r\nHost: lootdest.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lootdest.org/s?X4dwNjRD\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 7224\r\ndate: Mon, 08 Sep 2025 00:01:07 GMT\r\naccept-ranges: bytes\r\nserver: openresty/1.21.4.1\r\nlast-modified: Sun, 07 Sep 2025 11:00:00 GMT\r\netag: \"68bd65b0-1c38\"\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 38f2e8dfe4a6e6a8f81d75aed457ec00.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P1\r\nx-amz-cf-id: UqBxTI62eLEFutoJ6zEa79ZKC6TNhIWQRLPgXIc4gWeLbbxvQkgRbw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.21.4.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":7224,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1160 x 1160, 8-bit/color RGB, non-interlaced","md5":"a93ba4860dc42551669d1c44999d6219","sha1":"f42f4d71fa233d571ec60e8998b15772eedf9b6c","sha256":"bdd20de2c3c9af1e3df3ac71b2a52de1704c06e3bf2885db0a48423380f559cb","sha512":"c39361ebaf0aa3c799b0f2fa62acbaf5e779f19b19042c61c27bb7703d2c10bd11034755fb07a6bcff4035f690d65c51367cfb4dc5d1b0d12e4473ecdddd819b","ssdeep":"192:y5iSWmbbbbbbbbbbbbbbbbbbVbbbbbbbbbbbbbbbbbbZhpbbbbbbbbbbbbbbbbbL:y3WGB","tlshash":"e4e1b91d05510a2c6edeafeb89c544c8bed5e247c9f97b63e31a1868e40143cad6edb0","first_seen":"2025-03-20T23:46:21.232783Z","last_seen":"2026-07-07T07:00:04.76733Z","times_seen":595,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}