{"report_id":"fb274da1-beb7-44b6-9e5f-bd59cc9d999c","version":6,"status":"done","tags":[],"date":"2026-03-26T14:21:00Z","url":{"schema":"http","addr":"thelobster.lol","fqdn":"thelobster.lol","domain":"thelobster.lol","tld":"lol"},"ip":{"addr":"172.67.215.77","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"thelobster.lol/","fqdn":"thelobster.lol","domain":"thelobster.lol","tld":"lol"},"title":"The Lobster (LOBSTER) — Token Distribution | Claim $LOBSTER on Solana","dom":{"size":8764,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"6d52e6e42cd5a90cfbbcb38f9eca08fc","sha1":"4c222f6a62fc16c5f1b5c3bd973ddff882989aa4","sha256":"6c6621a53d2c68bc9786bc7e1c5f7a2f711c5e6f7f9744b752ca0b93149ec748","sha512":"55c7cca29e2f8b1305e6b8685f57da2e9f178dbc197c95763e157a50ddf87f98a0a403a5882238ac11baee65b4d454e7031fe54f2facb23b56ee3d2afd02b24c","ssdeep":"96:VAIWcNGIm6h1JYdlySZSZSdVLxX979jHI65r75EEjuSP:VXWcNGSdeIIVX9hJr75EEySP","tlshash":"ad021e61b8f05537414396c6b6e2ab6b3ee1e107d24b011471fc4ae44febe83dca7099","dom_hash":"domhashc5a481647e5dd4ba3be47c8084c0b907","first_seen":"2026-03-26T14:21:05.603096Z","last_seen":"2026-03-26T14:21:05.603096Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"thelobster.lol","fqdn":"thelobster.lol","domain":"thelobster.lol","tld":"lol"},"ip":{"addr":"172.67.215.77","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-30T14:21:00Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"thelobster.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"thelobster.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"thelobster.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"thelobster.lol","ip":{"addr":"104.21.93.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":30,"request_count":10,"received_data":725315,"sent_data":4500,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-22T22:16:16.728956Z","alert_count":0,"request_count":2,"received_data":82729,"sent_data":1076,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-22T22:20:05.651051Z","alert_count":0,"request_count":1,"received_data":8917,"sent_data":537,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"thelobster.lol/","fqdn":"thelobster.lol","domain":"thelobster.lol","tld":"lol"},"ip":{"addr":"104.21.93.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5aa884626fd718ff1c48b0471b5eab7b","sha1":"5fdbd8c7bc648d80acbecd3c632d7e8b9d7e4b53","sha256":"965e60df3541bcd10a75fb6344b0ef8f6538b50128c4b3f0ea2a5adf7e136487","sha512":"9d4431b9afaf61a88338cf2ceb7df0b4cbe6d3b2bd75b205df21d53f444b71953a4dc754cbe2736dc179807ccb8296ce0815b81645e6950e18343c9f359b4701","ssdeep":"","tlshash":"7bc02218c6a0cd30444c009b213412e934602b1a800a90c682fc4d8924ccec03a88020","size":186,"data":"","first_seen":"2026-03-21T05:46:57.300342Z","last_seen":"2026-05-19T01:16:57.418745Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thelobster.lol/js/app.js","fqdn":"thelobster.lol","domain":"thelobster.lol","tld":"lol"},"ip":{"addr":"104.21.93.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9b34d9abc5ad84649a02f408ffae6447","sha1":"ad0af6e9cf0f7386d4396e00255fce173dda9ea8","sha256":"b6b179c23503f6559c49abc37f99ffc6bcaaae49ac5ada21805d4f922ed2ec45","sha512":"210d8818ecb3399d6b478e68d994a9767da99dafa40767ddb256f1d7faa6f38404c5a103a0797da17f307f1bb59d2f8c1c8fd34010b3863b167998ff6fa5582c","ssdeep":"96:y3tuLIzgMa/E+9WKub7NFRS0xYS7h7Uh9ZTYp8lqKEqvtjiHfqbv1IxjzlIrV2yM:wtwIzuE+9PWNF00xYS7h7Uh9ZTYGlqKo","tlshash":"7bc142259a6a293709b14ee4cbe35015eb24a30b7143d6adbaccd28d1fbe540d4f79cc","size":5605,"data":"","first_seen":"2025-10-14T15:43:58.779413Z","last_seen":"2026-04-05T02:12:47.40859Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thelobster.lol/secureproxy?s=%2Fipfs%2FIY1NxDco8vvg6mLBmjmoGAefcfb122300e22ffe8242cabd3afa3c5%3Ft%3D1774534839162","fqdn":"thelobster.lol","domain":"thelobster.lol","tld":"lol"},"ip":{"addr":"104.21.93.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9dfaa0097658da1ec967c9d5947d2c3c","sha1":"a2838af44ced243755d6049a3bc2b14d8c3ffbcc","sha256":"f9c1709c16d15c99e088ae668d65a8111ef373393ac949584aac2c24bdf43252","sha512":"cab036f490d3d0f976fb7313b3a9aa6f8d5a9382dd040af1954b26d49839a6c1602cf97583e6c23ad8aa75c3bc99dc758871e09a737b2c59a7f44c74dd9acae5","ssdeep":"6144:qh5gDb6Euno4xvlISDhTl0WHvfUp+v+9J87XGQOwOyyGpMy:qsbZunzvlzSWP8p0Q+Bz","tlshash":"b8d499c08b4c357364802aea15fb446fdfdc0de82e4be8536bd098b5e379b8351e5998","size":634344,"data":"","first_seen":"2026-03-26T14:21:05.619661Z","last_seen":"2026-03-26T14:21:05.619661Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"thelobster.lol/assets/icon.jpg","fqdn":"thelobster.lol","domain":"thelobster.lol","tld":"lol"},"ip":{"addr":"104.21.93.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thelobster.lol/","date":"2026-03-26T14:20:39.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelobster.lol","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 15:14:33 GMT","end":"Mon, 08 Jun 2026 15:14:32 GMT"},"fingerprint":{"sha1":"CA:B5:32:42:15:A1:F3:8B:67:B9:BE:16:9B:B5:D3:4C:FB:B3:4D:A2","sha256":"F7:7B:5F:67:FF:37:15:FB:2A:4E:A8:85:96:14:BC:F1:2B:2B:B7:0E:6B:E3:1A:05:EF:A2:CA:5A:EB:28:42:BA"}}},"request":{"raw":"GET /assets/icon.jpg HTTP/1.1\r\nHost: thelobster.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thelobster.lol/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 14:20:39 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Tue, 10 Mar 2026 17:00:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mjFdvaHFKnXoISPvKsaia0KpQqS4nBTyVT7jqzbBou2NxndAViac7FBBwb1OEBNu7NZJCdgn%2FBygRv4BkdsAlwnyn50DvtNOVsD3lTNzHDD4S3Pl%2BD0SsVzoloHumSWKlA%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9e26cc18fbecb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8368,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"795104de642977276e1e6d25cc57720d","sha1":"655a07b2e133d5d47d5b8c93c381f1dc69afe1a8","sha256":"f2775da5e600cde2c013fc48f395440fa75af234915ed68b78f0c6f927a0c733","sha512":"e543b775cb4dcb2c3f76b43e4207376954360d1ee1713a78432c7da54429be38dbcf7bc24a67b79af5b0bfabd414fc44f0460e17e590665854c18044cef0bbea","ssdeep":"96:nHNl5bFhWYMlySZSZSdVPSlX9aLjHImBrX9EEjuIFn:nHNlzsIIKlX9IPrX9EEyIFn","tlshash":"4b021e60a8f05137015391c6b6e2ab6b3fe1a207d24b015472fc8ae44febe83dc67499","first_seen":"2026-03-21T05:46:57.295171Z","last_seen":"2026-04-05T02:10:19.31288Z","times_seen":7,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":199,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"thelobster.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"thelobster.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"thelobster.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelobster.lol/css/styles.css","fqdn":"thelobster.lol","domain":"thelobster.lol","tld":"lol"},"ip":{"addr":"104.21.93.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelobster.lol/","date":"2026-03-26T14:20:39.200Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelobster.lol","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 15:14:33 GMT","end":"Mon, 08 Jun 2026 15:14:32 GMT"},"fingerprint":{"sha1":"CA:B5:32:42:15:A1:F3:8B:67:B9:BE:16:9B:B5:D3:4C:FB:B3:4D:A2","sha256":"F7:7B:5F:67:FF:37:15:FB:2A:4E:A8:85:96:14:BC:F1:2B:2B:B7:0E:6B:E3:1A:05:EF:A2:CA:5A:EB:28:42:BA"}}},"request":{"raw":"GET /css/styles.css HTTP/1.1\r\nHost: thelobster.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thelobster.lol/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 14:20:39 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Tue, 10 Mar 2026 17:00:41 GMT\r\netag: W/\"69b04e39-22a2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ytHljGz5ilmQjjt5xQVkRV0qUccrpN5Z2qvqi0QIHBNTxfAmfDQ4YvHuDtzCHG%2FTOyGOSIgK%2F%2FI33w4EOHTDYNDMyoOFIaGUf90Atc7IiKIdTeO%2BOy%2BCwf01mC9RrqqPIA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9e26cc18fbeeb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8866,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"f60d3b819ed3bac32f5ed4e40b07963c","sha1":"4348241fb7f58e15c88d6fd863fcbb3f6b23096c","sha256":"99493306dada37c18e81d8b1e5f11bc6879667de0697edf403951b9e25d867f9","sha512":"8c92e8a870385121eb05ab690756f8b66567a03baf532075393d9049a5b674f6dca7b431c413a82ced76e6a808489cf6b845e95e94f7b0321ecabb2b41bde2ab","ssdeep":"192:W0TGk5Qvvv7x3zLcstd7zXKWuaxfMfL39G9mbLrspJlJ+:LNo+QY","tlshash":"d7022398d617219aa633db75abf7021ef7a850138e0242797fd921854ff117c8261fdc","first_seen":"2025-10-14T15:43:58.766686Z","last_seen":"2026-03-26T15:08:29.508194Z","times_seen":4,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"thelobster.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"thelobster.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"thelobster.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelobster.lol/nodemailer.compat.js","fqdn":"thelobster.lol","domain":"thelobster.lol","tld":"lol"},"ip":{"addr":"104.21.93.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thelobster.lol/","date":"2026-03-26T14:20:39.204Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelobster.lol","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 15:14:33 GMT","end":"Mon, 08 Jun 2026 15:14:32 GMT"},"fingerprint":{"sha1":"CA:B5:32:42:15:A1:F3:8B:67:B9:BE:16:9B:B5:D3:4C:FB:B3:4D:A2","sha256":"F7:7B:5F:67:FF:37:15:FB:2A:4E:A8:85:96:14:BC:F1:2B:2B:B7:0E:6B:E3:1A:05:EF:A2:CA:5A:EB:28:42:BA"}}},"request":{"raw":"GET /nodemailer.compat.js HTTP/1.1\r\nHost: thelobster.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thelobster.lol/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 14:20:39 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Tue, 10 Mar 2026 17:00:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Dl0QH8nqnxjsZgeg3nAlOQL3dJmZpLhjn%2Fz2l9yun1O8EE%2BD3Q95zArV%2Bob1VEb62vH8RfknzQTX5T%2B57hcifdCvdiGqcb9pOejxvKCb0FAOPqbW7CJ1gSWKgpD8zSQsIw%3D%3D\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: 9e26cc18fbefb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T09:51:58.62312Z","times_seen":17884480,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"thelobster.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"thelobster.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"thelobster.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelobster.lol/images/icon.jpg","fqdn":"thelobster.lol","domain":"thelobster.lol","tld":"lol"},"ip":{"addr":"104.21.93.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thelobster.lol/","date":"2026-03-26T14:20:39.206Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelobster.lol","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 15:14:33 GMT","end":"Mon, 08 Jun 2026 15:14:32 GMT"},"fingerprint":{"sha1":"CA:B5:32:42:15:A1:F3:8B:67:B9:BE:16:9B:B5:D3:4C:FB:B3:4D:A2","sha256":"F7:7B:5F:67:FF:37:15:FB:2A:4E:A8:85:96:14:BC:F1:2B:2B:B7:0E:6B:E3:1A:05:EF:A2:CA:5A:EB:28:42:BA"}}},"request":{"raw":"GET /images/icon.jpg HTTP/1.1\r\nHost: thelobster.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thelobster.lol/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 14:20:39 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 40724\r\ncast-mode: default\r\nlast-modified: Tue, 10 Mar 2026 17:00:41 GMT\r\netag: \"69b04e39-9f14\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pKLzhn%2BovhLdQLFp2kpTCB8fkfM%2FQCUFT3DZfsrvFVFJjeVdR6rIAJBlCs0YnA0BIWzBH35T5tRKSRko48uuu0YpItWfj4IqXy%2BeAvk7lzrHDCkitPSl3t9IN16yqn%2Bz7w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e26cc18fbf0b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40724,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 500x500, components 3","md5":"7b29b578a4385eb916f90a5e34fbf168","sha1":"4ec162a6e2bcd173829386b0894b22b299b98c47","sha256":"f9df46ba390153f0c3eff76a163353219963f7265aedf3be1dcad59705297c1d","sha512":"03452f319032740e17f6294af158b92fce254c0b01da781d8acc0e746748668fe87157a940a1dc49d57e015d73727350863d25542c9211ccef83aa2e8367d937","ssdeep":"768:NKB+NNMT6FzGSPB0oS+yWjtHNO9kpuD9j3kMcE2URPS/:oBmMT6F/BsWjtU9kp8nc7j/","tlshash":"a403f1679082f159c24f267880325243e69f33a9f460a5f2beb8bd3d4d106df65b32a1","first_seen":"2026-03-26T14:21:05.615783Z","last_seen":"2026-03-26T15:08:29.518657Z","times_seen":2,"resource_available":false,"data":null}},"time_used":278,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":230,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"thelobster.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"thelobster.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"thelobster.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelobster.lol/js/app.js","fqdn":"thelobster.lol","domain":"thelobster.lol","tld":"lol"},"ip":{"addr":"104.21.93.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thelobster.lol/","date":"2026-03-26T14:20:39.207Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelobster.lol","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 15:14:33 GMT","end":"Mon, 08 Jun 2026 15:14:32 GMT"},"fingerprint":{"sha1":"CA:B5:32:42:15:A1:F3:8B:67:B9:BE:16:9B:B5:D3:4C:FB:B3:4D:A2","sha256":"F7:7B:5F:67:FF:37:15:FB:2A:4E:A8:85:96:14:BC:F1:2B:2B:B7:0E:6B:E3:1A:05:EF:A2:CA:5A:EB:28:42:BA"}}},"request":{"raw":"GET /js/app.js HTTP/1.1\r\nHost: thelobster.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thelobster.lol/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 14:20:39 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Tue, 10 Mar 2026 17:00:41 GMT\r\netag: W/\"69b04e39-15e5\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jYA0yKB%2BQEq2vvCvZUA897xPYOwZgPpPOLQRZOucEWOtIuvniPydhLLOhnXl1AuoBopqes2cB7mKiBP6pV6yH25aTfdfSNDlj%2FizKaHXA23Sd2lfYpbmSmHUL2%2BVsaBmWg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9e26cc18fbf1b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5605,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"9b34d9abc5ad84649a02f408ffae6447","sha1":"ad0af6e9cf0f7386d4396e00255fce173dda9ea8","sha256":"b6b179c23503f6559c49abc37f99ffc6bcaaae49ac5ada21805d4f922ed2ec45","sha512":"210d8818ecb3399d6b478e68d994a9767da99dafa40767ddb256f1d7faa6f38404c5a103a0797da17f307f1bb59d2f8c1c8fd34010b3863b167998ff6fa5582c","ssdeep":"96:y3tuLIzgMa/E+9WKub7NFRS0xYS7h7Uh9ZTYp8lqKEqvtjiHfqbv1IxjzlIrV2yM:wtwIzuE+9PWNF00xYS7h7Uh9ZTYGlqKo","tlshash":"7bc142259a6a293709b14ee4cbe35015eb24a30b7143d6adbaccd28d1fbe540d4f79cc","first_seen":"2025-10-14T15:43:58.779413Z","last_seen":"2026-04-05T02:12:47.40859Z","times_seen":22,"resource_available":true,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"thelobster.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"thelobster.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"thelobster.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelobster.lol/secureproxy?s=%2Fipfs%2FIY1NxDco8vvg6mLBmjmoGAefcfb122300e22ffe8242cabd3afa3c5%3Ft%3D1774534839162","fqdn":"thelobster.lol","domain":"thelobster.lol","tld":"lol"},"ip":{"addr":"104.21.93.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thelobster.lol/","date":"2026-03-26T14:20:39.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelobster.lol","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 15:14:33 GMT","end":"Mon, 08 Jun 2026 15:14:32 GMT"},"fingerprint":{"sha1":"CA:B5:32:42:15:A1:F3:8B:67:B9:BE:16:9B:B5:D3:4C:FB:B3:4D:A2","sha256":"F7:7B:5F:67:FF:37:15:FB:2A:4E:A8:85:96:14:BC:F1:2B:2B:B7:0E:6B:E3:1A:05:EF:A2:CA:5A:EB:28:42:BA"}}},"request":{"raw":"GET /secureproxy?s=%2Fipfs%2FIY1NxDco8vvg6mLBmjmoGAefcfb122300e22ffe8242cabd3afa3c5%3Ft%3D1774534839162 HTTP/1.1\r\nHost: thelobster.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thelobster.lol/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 14:20:39 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\ncache-control: max-age=2592000\r\netag: W/\"9ade8-ooOK9EztJDdV1gSaO8KxTYw/+8w\"\r\nexpires: 0\r\npragma: no-cache\r\ncontent-disposition: attachment; filename=JBCIUmWFT79msyzl-4FUYQ.js\r\ncdn-proxyver: 1.49\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 03/26/2026 14:20:39\r\ncdn-edgestorageid: 1056\r\ncdn-requestid: 9ce80d9bef9bf4d9855b49bba0d5c46d\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9yw7TOwl0c8IQaDmI3p1i%2BBvFo8p%2F7fZUxoH1zC2KrE67mVfvkfNmmF6aC5QQEbd0kyztv12Pj6DbvjDI2bB%2BaTKY8VFWI6OiSZJoZeF8uhK%2BZQmQhyX8XMaVunxEZxzlQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e26cc18fbf2b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":634344,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"9dfaa0097658da1ec967c9d5947d2c3c","sha1":"a2838af44ced243755d6049a3bc2b14d8c3ffbcc","sha256":"f9c1709c16d15c99e088ae668d65a8111ef373393ac949584aac2c24bdf43252","sha512":"cab036f490d3d0f976fb7313b3a9aa6f8d5a9382dd040af1954b26d49839a6c1602cf97583e6c23ad8aa75c3bc99dc758871e09a737b2c59a7f44c74dd9acae5","ssdeep":"6144:qh5gDb6Euno4xvlISDhTl0WHvfUp+v+9J87XGQOwOyyGpMy:qsbZunzvlzSWP8p0Q+Bz","tlshash":"b8d499c08b4c357364802aea15fb446fdfdc0de82e4be8536bd098b5e379b8351e5998","first_seen":"2026-03-26T14:21:05.619661Z","last_seen":"2026-03-26T14:21:05.619661Z","times_seen":1,"resource_available":true,"data":null}},"time_used":927,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":780,"receive":147,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"thelobster.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"thelobster.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"thelobster.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://thelobster.lol/","date":"2026-03-26T14:20:39.396Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"D5:23:F9:83:DE:D4:E8:AB:85:EF:63:D4:2C:6E:62:44:96:04:04:8E","sha256":"D3:04:E0:CB:3E:1B:51:D2:DD:21:AB:B5:3E:6D:E3:40:D7:D5:1E:07:D1:8A:BF:8C:CC:01:FC:AE:92:1F:69:2D"}}},"request":{"raw":"GET /s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://thelobster.lol\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48264\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 22 Mar 2026 02:01:42 GMT\r\nexpires: Mon, 22 Mar 2027 02:01:42 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 19:08:31 GMT\r\ncontent-type: font/woff2\r\nage: 389937\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48264,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48264, version 1.0","md5":"e401cae7a12911a5c9752dc7a62f9dd7","sha1":"5685dd613a8a8211bf60b4b10753a47587bd0b60","sha256":"b1bef1f03a77a36fc257c5525e32a1dd621bb6f935b743a419da7ed0b18dc8f5","sha512":"dc8b6f28bc048efb508b482199c958ffaeddf15431aad34544f5b9972fd8c19e0315f74499d5549b30e15a03e41bfaf2a30613b6889b9a693a9c87c4e872e1f3","ssdeep":"768:AWHBpvVWVHIgyYwXiDAOa6GWeFGaCfLBc/qiufIdQRuEl4ofxl8VKme:AWbEIgmi8uAFCfS/OfUYuRExl8VFe","tlshash":"1123f2e56c6a826bd88c882945ee21c1f3d7f4927713d149e8fa5df8c432c05ed5066b","first_seen":"2025-05-29T19:02:42.430777Z","last_seen":"2026-08-14T09:57:51.123243Z","times_seen":63730,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":57,"dns":1,"connect":7,"send":0,"wait":9,"receive":10,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thelobster.lol/config.json?ts=1774534839410","fqdn":"thelobster.lol","domain":"thelobster.lol","tld":"lol"},"ip":{"addr":"104.21.93.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://thelobster.lol/","date":"2026-03-26T14:20:39.417Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelobster.lol","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 15:14:33 GMT","end":"Mon, 08 Jun 2026 15:14:32 GMT"},"fingerprint":{"sha1":"CA:B5:32:42:15:A1:F3:8B:67:B9:BE:16:9B:B5:D3:4C:FB:B3:4D:A2","sha256":"F7:7B:5F:67:FF:37:15:FB:2A:4E:A8:85:96:14:BC:F1:2B:2B:B7:0E:6B:E3:1A:05:EF:A2:CA:5A:EB:28:42:BA"}}},"request":{"raw":"GET /config.json?ts=1774534839410 HTTP/1.1\r\nHost: thelobster.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thelobster.lol/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 14:20:39 GMT\r\ncontent-type: application/json\r\ncast-mode: default\r\nlast-modified: Tue, 10 Mar 2026 17:00:41 GMT\r\netag: W/\"69b04e39-e9\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a8In0llAkWkqgSfNYWIQ7f5ev4LDgr2IPJsHAH%2Fvzt2jwOWTfyqCdiz90S50P2oaFvpXN0xUF04pI%2Fh%2BYQaXjDcqopRJTAlIFr5VJQ3eR1jot%2B99SelSe4QEyyxaINkl%2BA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9e26cc1a5c1fb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":233,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"8b8b09a0ef51cf2fb5fe9c0c970a997c","sha1":"137e97662a724216b79142e121dc60557126fd44","sha256":"dd38cd055fb5f079a358465afbc2146c34646bf2bd4301759d19a15c319251cd","sha512":"cde0494be5d6d7b5bb8739fdea7938fe086b1351ecd442a8b2894e82f8fbe3bb4928997d36ab134a20a43d2fbed77750aa21d54de5935c72f1d70cf5298c00ff","ssdeep":"","tlshash":"35d0a715d9400fa3def587e5c5426416b035324f53e0141e74bc855e0fbc43750f3001","first_seen":"2026-03-26T14:21:05.623833Z","last_seen":"2026-03-26T15:08:29.513484Z","times_seen":2,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"thelobster.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"thelobster.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"thelobster.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelobster.lol/","fqdn":"thelobster.lol","domain":"thelobster.lol","tld":"lol"},"ip":{"addr":"104.21.93.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-26T14:20:38.825Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelobster.lol","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 15:14:33 GMT","end":"Mon, 08 Jun 2026 15:14:32 GMT"},"fingerprint":{"sha1":"CA:B5:32:42:15:A1:F3:8B:67:B9:BE:16:9B:B5:D3:4C:FB:B3:4D:A2","sha256":"F7:7B:5F:67:FF:37:15:FB:2A:4E:A8:85:96:14:BC:F1:2B:2B:B7:0E:6B:E3:1A:05:EF:A2:CA:5A:EB:28:42:BA"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: thelobster.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 26 Mar 2026 14:20:39 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 10 Mar 2026 17:00:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MVxsBPGn0QMTWsaUAD9wZM%2FU3mKPx4L5NnWuuKcSjbGYXpD5uroXgw7joZ5WiMElq88zdu%2FI64shfFKnsBGiz6%2BKGKacu9YU47%2FdUb2qiquLWZnk9HBhvy0xfzVnKGCtQg%3D%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9e26cc16cf874c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8368,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"795104de642977276e1e6d25cc57720d","sha1":"655a07b2e133d5d47d5b8c93c381f1dc69afe1a8","sha256":"f2775da5e600cde2c013fc48f395440fa75af234915ed68b78f0c6f927a0c733","sha512":"e543b775cb4dcb2c3f76b43e4207376954360d1ee1713a78432c7da54429be38dbcf7bc24a67b79af5b0bfabd414fc44f0460e17e590665854c18044cef0bbea","ssdeep":"96:nHNl5bFhWYMlySZSZSdVPSlX9aLjHImBrX9EEjuIFn:nHNlzsIIKlX9IPrX9EEyIFn","tlshash":"4b021e60a8f05137015391c6b6e2ab6b3fe1a207d24b015472fc8ae44febe83dc67499","first_seen":"2026-03-21T05:46:57.295171Z","last_seen":"2026-04-05T02:10:19.31288Z","times_seen":7,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":19,"dns":3,"connect":1,"send":0,"wait":185,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"thelobster.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"thelobster.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"thelobster.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Raleway:ital,wght@0,100..900;1,100..900\u0026family=Roboto+Mono:ital,wght@0,100..700;1,100..700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelobster.lol/","date":"2026-03-26T14:20:39.198Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"63:D1:AE:99:1E:49:D7:6C:71:F3:BA:F5:BA:47:74:1E:EB:90:E7:D6","sha256":"69:90:BB:9D:82:60:82:88:FF:CE:F6:B3:3D:DD:B5:B5:FB:F0:56:17:FD:FA:0D:BC:9C:5B:83:51:98:0D:2F:CF"}}},"request":{"raw":"GET /css2?family=Raleway:ital,wght@0,100..900;1,100..900\u0026family=Roboto+Mono:ital,wght@0,100..700;1,100..700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thelobster.lol/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 26 Mar 2026 14:20:39 GMT\r\ndate: Thu, 26 Mar 2026 14:20:39 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8231,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"dce2248c2dcf00374aa322b3683bdcd8","sha1":"bbaecd54e68755e5f4ff9665fe23053097e53433","sha256":"f8ded9d350070c155c96b7d84acfce2aee143148ebc2cb6efe16c69c4a47061f","sha512":"e7ffa3e35a58370fbf78bdb76d554b494306077c2f2de1e1cfb01b61d61d1fbfd87b6d65aa9e1bedef48a26b3d55e50d3395d7b3803a01a5a54577b2f5c789eb","ssdeep":"192:gyXwyITy/yRmybikTNHCDyD0N3f10N3u0N3i3O0N3w0N3WT0N3XNV2FNVMNVW3sk:g4wxTSRNmx7S3f1S3uS3wOS3wS3IS3dQ","tlshash":"c902ee91081b9400eb436dd627cf7e36ee4e61157046d67daffd28a8acebc22639071d","first_seen":"2025-10-14T15:43:58.783307Z","last_seen":"2026-04-05T02:12:47.405228Z","times_seen":26,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":79,"dns":1,"connect":20,"send":0,"wait":35,"receive":0,"ssl":63},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/robotomono/v31/L0x5DF4xlVMF-BfR8bXMIjhLq38.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://thelobster.lol/","date":"2026-03-26T14:20:39.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"D5:23:F9:83:DE:D4:E8:AB:85:EF:63:D4:2C:6E:62:44:96:04:04:8E","sha256":"D3:04:E0:CB:3E:1B:51:D2:DD:21:AB:B5:3E:6D:E3:40:D7:D5:1E:07:D1:8A:BF:8C:CC:01:FC:AE:92:1F:69:2D"}}},"request":{"raw":"GET /s/robotomono/v31/L0x5DF4xlVMF-BfR8bXMIjhLq38.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://thelobster.lol\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 32796\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 25 Mar 2026 18:54:20 GMT\r\nexpires: Thu, 25 Mar 2027 18:54:20 GMT\r\ncache-control: public, max-age=31536000\r\nage: 69979\r\nlast-modified: Wed, 10 Sep 2025 16:42:52 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32796,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32796, version 1.0","md5":"877722deef76ad28ea1ae5cf5e265a94","sha1":"ede7afbe887a70f22993d3a7da10b09fd58ff33b","sha256":"b81cd55177300649be8f95b3b747d721ce607e8ed2856e25bd0c630cfd631faf","sha512":"57d45f99a461633961fa7b10b5779001aff30c52d1bd1140bd0ecfe3b1b69da4e5c0120bb6d6d5fb0f06c344d0805c30e2aa08fcb2542a028611a2a264366d00","ssdeep":"768:+kWXmeGFcvj07i6aR4m0oaUEWNvZcjhsHlX2G/dS+92Z5NuI/L:+L2Lzi6aum0NUEW9ijhqXl/dSlZ5jL","tlshash":"72e20258d8954f3cebc4b572c0879bfccad58023f89d5564a47f4ab0e089e1f1934967","first_seen":"2025-05-21T16:47:22.796758Z","last_seen":"2026-08-14T08:15:24.275158Z","times_seen":7108,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":89,"dns":1,"connect":7,"send":0,"wait":9,"receive":3,"ssl":77},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thelobster.lol/favicon.ico","fqdn":"thelobster.lol","domain":"thelobster.lol","tld":"lol"},"ip":{"addr":"104.21.93.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thelobster.lol/","date":"2026-03-26T14:20:39.730Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelobster.lol","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 15:14:33 GMT","end":"Mon, 08 Jun 2026 15:14:32 GMT"},"fingerprint":{"sha1":"CA:B5:32:42:15:A1:F3:8B:67:B9:BE:16:9B:B5:D3:4C:FB:B3:4D:A2","sha256":"F7:7B:5F:67:FF:37:15:FB:2A:4E:A8:85:96:14:BC:F1:2B:2B:B7:0E:6B:E3:1A:05:EF:A2:CA:5A:EB:28:42:BA"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: thelobster.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thelobster.lol/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 14:20:39 GMT\r\ncontent-type: text/html\r\nlast-modified: Tue, 10 Mar 2026 17:00:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cWzxm4DfZC3m1WfZge%2FghZ%2By9eLFXByQrDDs4PblNoGrNwxUoCmBOxMyyK8ILDCVN4qIZ%2FXaI%2FvbdgrzOo%2BsN3Gi8KSTAz7kaxOmT%2B36faLPVmD8%2BlfZkpuozaUINsh7RQ%3D%3D\"}]}\r\npriority: u=6,i=?0\r\ncf-ray: 9e26cc1c5c64b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8368,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"795104de642977276e1e6d25cc57720d","sha1":"655a07b2e133d5d47d5b8c93c381f1dc69afe1a8","sha256":"f2775da5e600cde2c013fc48f395440fa75af234915ed68b78f0c6f927a0c733","sha512":"e543b775cb4dcb2c3f76b43e4207376954360d1ee1713a78432c7da54429be38dbcf7bc24a67b79af5b0bfabd414fc44f0460e17e590665854c18044cef0bbea","ssdeep":"96:nHNl5bFhWYMlySZSZSdVPSlX9aLjHImBrX9EEjuIFn:nHNlzsIIKlX9IPrX9EEyIFn","tlshash":"4b021e60a8f05137015391c6b6e2ab6b3fe1a207d24b015472fc8ae44febe83dc67499","first_seen":"2026-03-21T05:46:57.295171Z","last_seen":"2026-04-05T02:10:19.31288Z","times_seen":7,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":178,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"thelobster.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"thelobster.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"thelobster.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelobster.lol/secureproxy?s=%2Fjmpd%2F","fqdn":"thelobster.lol","domain":"thelobster.lol","tld":"lol"},"ip":{"addr":"104.21.93.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://thelobster.lol/","date":"2026-03-26T14:20:41.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelobster.lol","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 15:14:33 GMT","end":"Mon, 08 Jun 2026 15:14:32 GMT"},"fingerprint":{"sha1":"CA:B5:32:42:15:A1:F3:8B:67:B9:BE:16:9B:B5:D3:4C:FB:B3:4D:A2","sha256":"F7:7B:5F:67:FF:37:15:FB:2A:4E:A8:85:96:14:BC:F1:2B:2B:B7:0E:6B:E3:1A:05:EF:A2:CA:5A:EB:28:42:BA"}}},"request":{"raw":"POST /secureproxy?s=%2Fjmpd%2F HTTP/1.1\r\nHost: thelobster.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thelobster.lol/\r\ncontent-type: application/json\r\nContent-Length: 1442\r\nOrigin: https://thelobster.lol\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1442,"data":"{\"route\":\"n9POyFeFG1tUtiSU-z9JOx3n\",\"payload\":\"0hqM-6_N52QB5gLdAi8ACQASAzgDLACuAiYAAAECQQMAAO8nhn2XtsKCAXM4LCnOlhU92PC-mWUCAAAQa9v9r5CDnu_w4UhYb6C_asPP6c1UF_iW9JaDI6heWeYkzhsmIpvlR36t5tNKPL_rED2sfXp_VcVAddtjd2hZred3McO7ggELbI9TmaJYmhTxaNXG_EdSW8gjNwIlv6912axVyregsDPdrWjFQcN0pBDbpMI9caBHej1c9LJurD3_AQkI8uJbfl1OUI3uM-EtcZ9__vxT0e0a-pZ7xUhO31b-yOPB-_M4Qf6nBFlprEGmtKw7ymdrODXEelq027fAJs1nwx975VpNfYm8iiJwXRPoLIm6LZvB_CoFj9V_ITh1oqxUG8uAR6PRCxcgquUtbFWSxO-e1f_5V1BQJlWWdty0mUnovvD8Omj4w2pIs8-o4KTsukSQ4l1vI7d8kIAxvHNdlYYEi9F6tLGXOuBQp7zESyKz61Sg5WszTHsxx64ZrkYeQ3zVOVbNvODQEiBJ5UrQP-0Doso9RsQXSqD9BFPO3f2o_2vDgf7qJJdAx4tSaUmPFKhhUQFhoOvweotb7_GJJYcWTAtVDg9--Ka_HarV1LyI5vyJko5ikGf_mKEH6YQcNc3uyZu3G5D9sdgNFyeU_avqpBoqISMY-sWJcMVGMXciveS4KomtYLW_pHiW3KMizkgSvhMHWMofVm3KK5Qv9LDX7KFILtvT6BJaI1pAAZXdgEW9LO4VkRf-TXQJdW-EnIJfrDNb31ur31ilzhY_tPxepdW6Z5UQnKnDZtToxghF1yyTFjGb1x_Bx5dYIA85dAw9WWi1WbZRNBs1hjOPiAXWLZnieR-dE_mLCuocS4LUcMvlPTqjnJxj9Ss7mfoZyP0zbv6sk24fXsCT38LPAAmkwuA9cah8YDNzK5zdzOMcYqDuB5ZevNpnMPlRTgr3XIEVPijX07GK1YnqFtdEI22LsFZE2k5i2ys5HDEjCQKOYZET7_mCSiUS5a5DywDrOlPfdw77hBiQ_S8LMDo2sEs-No7uuRwdYYE-JD9ZGLMjTXFw3Iku9fhXNEsG7ZKiksbKJHRkHtQq0tYIYq6_kd5ObzuFrK_c5BdPO0-GSNhtmRlP_E5Mcy6_0Fm4ERJmnLeGYfo4-g2DOx3KwsEHCiqI4Mddr6EnmbGVoalNy9aQKtsdaYTEn5bRJKT8pRSOXIkQEA\",\"challenge\":\"eyJpZCI6InNub2poVkZyNDZZWERVTVdJamJmMHciLCJub25jZSI6MTEwLCJoYXNoIjoiMDBmNzMwY2U4M2RiZDEyZTBmYjBlMjEyZDhmNzc5MTFmNTYxODA4ZDcyMzVjYzIzZTViMGFiZTRkYjU4ZjdhZCJ9\"}"}},"response":{"raw":"HTTP/3 400 Bad Request\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 14:20:41 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 11\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\ncache-control: no-cache\r\netag: W/\"b-EFiDB1U+dmqzx9Mo2UjcZ1SJPO8\"\r\nx-ratelimit-limit: 10000\r\nx-ratelimit-remaining: 9999\r\nx-ratelimit-reset: 1774534901221\r\ncdn-proxyver: 1.49\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 400\r\ncdn-cachedat: 03/26/2026 14:20:41\r\ncdn-edgestorageid: 1056\r\ncdn-requestid: 85681040453d5cdf5a5833687cc7f174\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y%2FnuByJhv4vfhodQ9lpn%2BwQiiUyz2PMwY2uSLbi2ArcOgIDQuj9xZn257TCYprBQeBF4SvMMHIGnf2wXN5nYeuzcBB9mjqt%2FeLqA7Kqib2APkB5HG2PcsHpsxws2ibrirw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e26cc245d4fb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"825644f747baab2c00e420dbbc39e4b3","sha1":"10588307553e766ab3c7d328d948dc6754893cef","sha256":"7c41b898c5da0cfa4aa049b65ef50248bce9a72d24bef4c723786431921b75aa","sha512":"bfe6e8df36c78cbfd17ba9270c86860ee9b051b82594fb8f34a0adf6a14e1596d2a9dcdc7eb6857101e1502aff6ff515a36e8ba6c80da327bc11831624a5daea","ssdeep":"","tlshash":"6550003300c0300cc0000000cc00cf00003000003000003300000cc300000030000c00","first_seen":"2023-04-05T23:04:48Z","last_seen":"2026-08-14T07:05:39.903151Z","times_seen":10503,"resource_available":true,"data":null}},"time_used":887,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":887,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"thelobster.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"thelobster.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"thelobster.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}